./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec4_productSimulator.cil.c --full-output -ea --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 8bd4bc60 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx12G -Xms1G -ea -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec4_productSimulator.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash cc5b595de9a81353e40cb89360f6656c22ce2f6a .......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Execution finished normally Writing output log to file Ultimate.log Writing human readable error path to file UltimateCounterExample.errorpath Result: FALSE --- Real Ultimate output --- This is Ultimate 0.1.25-8bd4bc6 [2020-07-28 19:04:30,998 INFO L177 SettingsManager]: Resetting all preferences to default values... [2020-07-28 19:04:31,000 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2020-07-28 19:04:31,013 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2020-07-28 19:04:31,014 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2020-07-28 19:04:31,015 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2020-07-28 19:04:31,016 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2020-07-28 19:04:31,018 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2020-07-28 19:04:31,020 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2020-07-28 19:04:31,021 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2020-07-28 19:04:31,023 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2020-07-28 19:04:31,024 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2020-07-28 19:04:31,024 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2020-07-28 19:04:31,025 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2020-07-28 19:04:31,028 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2020-07-28 19:04:31,031 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2020-07-28 19:04:31,034 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2020-07-28 19:04:31,035 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2020-07-28 19:04:31,040 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2020-07-28 19:04:31,044 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2020-07-28 19:04:31,048 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2020-07-28 19:04:31,049 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2020-07-28 19:04:31,052 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2020-07-28 19:04:31,054 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2020-07-28 19:04:31,061 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2020-07-28 19:04:31,061 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2020-07-28 19:04:31,062 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2020-07-28 19:04:31,063 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2020-07-28 19:04:31,064 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2020-07-28 19:04:31,065 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2020-07-28 19:04:31,065 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2020-07-28 19:04:31,066 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2020-07-28 19:04:31,068 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2020-07-28 19:04:31,069 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2020-07-28 19:04:31,070 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2020-07-28 19:04:31,070 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2020-07-28 19:04:31,074 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2020-07-28 19:04:31,074 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2020-07-28 19:04:31,075 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2020-07-28 19:04:31,076 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2020-07-28 19:04:31,077 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2020-07-28 19:04:31,078 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2020-07-28 19:04:31,112 INFO L113 SettingsManager]: Loading preferences was successful [2020-07-28 19:04:31,117 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2020-07-28 19:04:31,119 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2020-07-28 19:04:31,119 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2020-07-28 19:04:31,119 INFO L138 SettingsManager]: * Use SBE=true [2020-07-28 19:04:31,119 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2020-07-28 19:04:31,120 INFO L138 SettingsManager]: * sizeof long=4 [2020-07-28 19:04:31,120 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2020-07-28 19:04:31,120 INFO L138 SettingsManager]: * sizeof POINTER=4 [2020-07-28 19:04:31,120 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2020-07-28 19:04:31,120 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2020-07-28 19:04:31,121 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2020-07-28 19:04:31,121 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2020-07-28 19:04:31,121 INFO L138 SettingsManager]: * sizeof long double=12 [2020-07-28 19:04:31,121 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2020-07-28 19:04:31,121 INFO L138 SettingsManager]: * Use constant arrays=true [2020-07-28 19:04:31,122 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2020-07-28 19:04:31,122 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2020-07-28 19:04:31,122 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2020-07-28 19:04:31,122 INFO L138 SettingsManager]: * To the following directory=./dump/ [2020-07-28 19:04:31,122 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2020-07-28 19:04:31,123 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2020-07-28 19:04:31,123 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2020-07-28 19:04:31,123 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2020-07-28 19:04:31,123 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2020-07-28 19:04:31,124 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2020-07-28 19:04:31,124 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2020-07-28 19:04:31,124 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2020-07-28 19:04:31,124 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2020-07-28 19:04:31,124 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> cc5b595de9a81353e40cb89360f6656c22ce2f6a [2020-07-28 19:04:31,459 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2020-07-28 19:04:31,472 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2020-07-28 19:04:31,477 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2020-07-28 19:04:31,478 INFO L271 PluginConnector]: Initializing CDTParser... [2020-07-28 19:04:31,479 INFO L275 PluginConnector]: CDTParser initialized [2020-07-28 19:04:31,480 INFO L429 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec4_productSimulator.cil.c [2020-07-28 19:04:31,542 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/546e28747/5585c2de7f074b628139398feacc59f7/FLAG61406140d [2020-07-28 19:04:32,030 INFO L306 CDTParser]: Found 1 translation units. [2020-07-28 19:04:32,031 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec4_productSimulator.cil.c [2020-07-28 19:04:32,046 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/546e28747/5585c2de7f074b628139398feacc59f7/FLAG61406140d [2020-07-28 19:04:32,385 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/546e28747/5585c2de7f074b628139398feacc59f7 [2020-07-28 19:04:32,389 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2020-07-28 19:04:32,392 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2020-07-28 19:04:32,393 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2020-07-28 19:04:32,394 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2020-07-28 19:04:32,397 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2020-07-28 19:04:32,399 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.07 07:04:32" (1/1) ... [2020-07-28 19:04:32,402 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@62886f96 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:04:32, skipping insertion in model container [2020-07-28 19:04:32,402 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.07 07:04:32" (1/1) ... [2020-07-28 19:04:32,410 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2020-07-28 19:04:32,464 INFO L178 MainTranslator]: Built tables and reachable declarations [2020-07-28 19:04:32,962 INFO L206 PostProcessor]: Analyzing one entry point: main [2020-07-28 19:04:32,979 INFO L203 MainTranslator]: Completed pre-run [2020-07-28 19:04:33,070 INFO L206 PostProcessor]: Analyzing one entry point: main [2020-07-28 19:04:33,129 INFO L208 MainTranslator]: Completed translation [2020-07-28 19:04:33,130 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:04:33 WrapperNode [2020-07-28 19:04:33,130 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2020-07-28 19:04:33,132 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2020-07-28 19:04:33,132 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2020-07-28 19:04:33,132 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2020-07-28 19:04:33,139 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:04:33" (1/1) ... [2020-07-28 19:04:33,159 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:04:33" (1/1) ... [2020-07-28 19:04:33,310 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2020-07-28 19:04:33,310 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2020-07-28 19:04:33,311 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2020-07-28 19:04:33,311 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2020-07-28 19:04:33,327 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:04:33" (1/1) ... [2020-07-28 19:04:33,327 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:04:33" (1/1) ... [2020-07-28 19:04:33,354 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:04:33" (1/1) ... [2020-07-28 19:04:33,354 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:04:33" (1/1) ... [2020-07-28 19:04:33,416 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:04:33" (1/1) ... [2020-07-28 19:04:33,442 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:04:33" (1/1) ... [2020-07-28 19:04:33,450 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:04:33" (1/1) ... [2020-07-28 19:04:33,464 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2020-07-28 19:04:33,465 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2020-07-28 19:04:33,465 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2020-07-28 19:04:33,465 INFO L275 PluginConnector]: RCFGBuilder initialized [2020-07-28 19:04:33,466 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:04:33" (1/1) ... No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2020-07-28 19:04:33,530 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2020-07-28 19:04:33,530 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2020-07-28 19:04:33,530 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2020-07-28 19:04:33,530 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2020-07-28 19:04:36,990 INFO L290 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2020-07-28 19:04:36,992 INFO L295 CfgBuilder]: Removed 900 assume(true) statements. [2020-07-28 19:04:37,004 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.07 07:04:37 BoogieIcfgContainer [2020-07-28 19:04:37,005 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2020-07-28 19:04:37,006 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2020-07-28 19:04:37,007 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2020-07-28 19:04:37,011 INFO L275 PluginConnector]: TraceAbstraction initialized [2020-07-28 19:04:37,012 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 28.07 07:04:32" (1/3) ... [2020-07-28 19:04:37,013 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2308a94c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.07 07:04:37, skipping insertion in model container [2020-07-28 19:04:37,014 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:04:33" (2/3) ... [2020-07-28 19:04:37,014 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2308a94c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.07 07:04:37, skipping insertion in model container [2020-07-28 19:04:37,014 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.07 07:04:37" (3/3) ... [2020-07-28 19:04:37,016 INFO L109 eAbstractionObserver]: Analyzing ICFG minepump_spec4_productSimulator.cil.c [2020-07-28 19:04:37,027 INFO L157 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2020-07-28 19:04:37,040 INFO L169 ceAbstractionStarter]: Appying trace abstraction to program that has 3 error locations. [2020-07-28 19:04:37,055 INFO L251 AbstractCegarLoop]: Starting to check reachability of 3 error locations. [2020-07-28 19:04:37,092 INFO L375 AbstractCegarLoop]: Interprodecural is true [2020-07-28 19:04:37,092 INFO L376 AbstractCegarLoop]: Hoare is true [2020-07-28 19:04:37,092 INFO L377 AbstractCegarLoop]: Compute interpolants for FPandBP [2020-07-28 19:04:37,094 INFO L378 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2020-07-28 19:04:37,094 INFO L379 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2020-07-28 19:04:37,094 INFO L380 AbstractCegarLoop]: Difference is false [2020-07-28 19:04:37,094 INFO L381 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2020-07-28 19:04:37,095 INFO L385 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2020-07-28 19:04:37,136 INFO L276 IsEmpty]: Start isEmpty. Operand 470 states. [2020-07-28 19:04:37,145 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2020-07-28 19:04:37,146 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:04:37,147 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:04:37,148 INFO L427 AbstractCegarLoop]: === Iteration 1 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:04:37,155 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:04:37,156 INFO L82 PathProgramCache]: Analyzing trace with hash -1535705576, now seen corresponding path program 1 times [2020-07-28 19:04:37,168 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:04:37,169 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1708020805] [2020-07-28 19:04:37,169 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:04:37,421 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:04:37,575 INFO L280 TraceCheckUtils]: 0: Hoare triple {473#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(13);call #t~string11.base, #t~string11.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string11.base, #t~string11.offset, 1);call write~init~int(110, #t~string11.base, 1 + #t~string11.offset, 1);call write~init~int(0, #t~string11.base, 2 + #t~string11.offset, 1);call #t~string13.base, #t~string13.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string13.base, #t~string13.offset, 1);call write~init~int(102, #t~string13.base, 1 + #t~string13.offset, 1);call write~init~int(102, #t~string13.base, 2 + #t~string13.offset, 1);call write~init~int(0, #t~string13.base, 3 + #t~string13.offset, 1);call #t~string15.base, #t~string15.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string15.base, #t~string15.offset, 1);call write~init~int(80, #t~string15.base, 1 + #t~string15.offset, 1);call write~init~int(117, #t~string15.base, 2 + #t~string15.offset, 1);call write~init~int(109, #t~string15.base, 3 + #t~string15.offset, 1);call write~init~int(112, #t~string15.base, 4 + #t~string15.offset, 1);call write~init~int(58, #t~string15.base, 5 + #t~string15.offset, 1);call write~init~int(0, #t~string15.base, 6 + #t~string15.offset, 1);call #t~string17.base, #t~string17.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string17.base, #t~string17.offset, 1);call write~init~int(110, #t~string17.base, 1 + #t~string17.offset, 1);call write~init~int(0, #t~string17.base, 2 + #t~string17.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string19.base, #t~string19.offset, 1);call write~init~int(102, #t~string19.base, 1 + #t~string19.offset, 1);call write~init~int(102, #t~string19.base, 2 + #t~string19.offset, 1);call write~init~int(0, #t~string19.base, 3 + #t~string19.offset, 1);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string21.base, #t~string21.offset, 1);call write~init~int(32, #t~string21.base, 1 + #t~string21.offset, 1);call write~init~int(0, #t~string21.base, 2 + #t~string21.offset, 1);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string23.base, #t~string23.offset, 1);call write~init~int(0, #t~string23.base, 1 + #t~string23.offset, 1);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(30);call #t~string49.base, #t~string49.offset := #Ultimate.allocOnStack(9);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(21);call #t~string51.base, #t~string51.offset := #Ultimate.allocOnStack(30);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(9);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(21);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(25);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(30);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(9);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(25);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(13);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string68.base, #t~string68.offset, 1);call write~init~int(77, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(101, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(116, #t~string68.base, 3 + #t~string68.offset, 1);call write~init~int(104, #t~string68.base, 4 + #t~string68.offset, 1);call write~init~int(58, #t~string68.base, 5 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 6 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string70.base, #t~string70.offset, 1);call write~init~int(82, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(73, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(84, #t~string70.base, 3 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 4 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string72.base, #t~string72.offset, 1);call write~init~int(75, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 2 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string74.base, #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 1 + #t~string74.offset, 1);~cleanupTimeShifts~0 := 4;~__SELECTED_FEATURE_base~0 := 0;~__SELECTED_FEATURE_highWaterSensor~0 := 0;~__SELECTED_FEATURE_lowWaterSensor~0 := 0;~__SELECTED_FEATURE_methaneQuery~0 := 0;~__SELECTED_FEATURE_methaneAlarm~0 := 0;~__SELECTED_FEATURE_stopCommand~0 := 0;~__SELECTED_FEATURE_startCommand~0 := 0;~__GUIDSL_ROOT_PRODUCTION~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {473#true} is VALID [2020-07-28 19:04:37,576 INFO L280 TraceCheckUtils]: 1: Hoare triple {473#true} havoc main_#res;havoc main_#t~ret0, main_~retValue_acc~0, main_~tmp~0;havoc main_~retValue_acc~0;havoc main_~tmp~0;~__GUIDSL_ROOT_PRODUCTION~0 := 1; {473#true} is VALID [2020-07-28 19:04:37,577 INFO L280 TraceCheckUtils]: 2: Hoare triple {473#true} havoc select_features_#t~ret76, select_features_#t~ret77, select_features_#t~ret78, select_features_#t~ret79, select_features_#t~ret80, select_features_#t~ret81;~__SELECTED_FEATURE_base~0 := 1;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {473#true} is VALID [2020-07-28 19:04:37,579 INFO L280 TraceCheckUtils]: 3: Hoare triple {473#true} select_features_#t~ret76 := select_one_#res;assume -2147483648 <= select_features_#t~ret76 && select_features_#t~ret76 <= 2147483647;~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret76;havoc select_features_#t~ret76;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {473#true} is VALID [2020-07-28 19:04:37,580 INFO L280 TraceCheckUtils]: 4: Hoare triple {473#true} select_features_#t~ret77 := select_one_#res;assume -2147483648 <= select_features_#t~ret77 && select_features_#t~ret77 <= 2147483647;~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret77;havoc select_features_#t~ret77;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {473#true} is VALID [2020-07-28 19:04:37,580 INFO L280 TraceCheckUtils]: 5: Hoare triple {473#true} select_features_#t~ret78 := select_one_#res;assume -2147483648 <= select_features_#t~ret78 && select_features_#t~ret78 <= 2147483647;~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret78;havoc select_features_#t~ret78;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {473#true} is VALID [2020-07-28 19:04:37,581 INFO L280 TraceCheckUtils]: 6: Hoare triple {473#true} select_features_#t~ret79 := select_one_#res;assume -2147483648 <= select_features_#t~ret79 && select_features_#t~ret79 <= 2147483647;~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret79;havoc select_features_#t~ret79;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {473#true} is VALID [2020-07-28 19:04:37,581 INFO L280 TraceCheckUtils]: 7: Hoare triple {473#true} select_features_#t~ret80 := select_one_#res;assume -2147483648 <= select_features_#t~ret80 && select_features_#t~ret80 <= 2147483647;~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret80;havoc select_features_#t~ret80;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {473#true} is VALID [2020-07-28 19:04:37,582 INFO L280 TraceCheckUtils]: 8: Hoare triple {473#true} select_features_#t~ret81 := select_one_#res;assume -2147483648 <= select_features_#t~ret81 && select_features_#t~ret81 <= 2147483647;~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret81;havoc select_features_#t~ret81; {473#true} is VALID [2020-07-28 19:04:37,582 INFO L280 TraceCheckUtils]: 9: Hoare triple {473#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~13;havoc valid_product_~retValue_acc~13;valid_product_~retValue_acc~13 := ~__SELECTED_FEATURE_base~0;valid_product_#res := valid_product_~retValue_acc~13; {473#true} is VALID [2020-07-28 19:04:37,584 INFO L280 TraceCheckUtils]: 10: Hoare triple {473#true} main_#t~ret0 := valid_product_#res;assume -2147483648 <= main_#t~ret0 && main_#t~ret0 <= 2147483647;main_~tmp~0 := main_#t~ret0;havoc main_#t~ret0; {473#true} is VALID [2020-07-28 19:04:37,584 INFO L280 TraceCheckUtils]: 11: Hoare triple {473#true} assume 0 != main_~tmp~0; {473#true} is VALID [2020-07-28 19:04:37,585 INFO L280 TraceCheckUtils]: 12: Hoare triple {473#true} havoc test_#t~nondet26, test_#t~nondet27, test_#t~nondet28, test_#t~nondet29, test_~splverifierCounter~0, test_~tmp~8, test_~tmp___0~3, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~8;havoc test_~tmp___0~3;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {473#true} is VALID [2020-07-28 19:04:37,587 INFO L280 TraceCheckUtils]: 13: Hoare triple {473#true} assume false; {474#false} is VALID [2020-07-28 19:04:37,587 INFO L280 TraceCheckUtils]: 14: Hoare triple {474#false} havoc cleanup_~i~0, cleanup_~__cil_tmp2~0;havoc cleanup_~i~0;havoc cleanup_~__cil_tmp2~0; {474#false} is VALID [2020-07-28 19:04:37,587 INFO L280 TraceCheckUtils]: 15: Hoare triple {474#false} assume !(0 != ~pumpRunning~0); {474#false} is VALID [2020-07-28 19:04:37,588 INFO L280 TraceCheckUtils]: 16: Hoare triple {474#false} assume !(0 != ~systemActive~0); {474#false} is VALID [2020-07-28 19:04:37,588 INFO L280 TraceCheckUtils]: 17: Hoare triple {474#false} havoc __utac_acc__Specification4_spec__1_#t~ret1, __utac_acc__Specification4_spec__1_#t~ret2, __utac_acc__Specification4_spec__1_~tmp~1, __utac_acc__Specification4_spec__1_~tmp___0~0;havoc __utac_acc__Specification4_spec__1_~tmp~1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~9;havoc getWaterLevel_~retValue_acc~9;getWaterLevel_~retValue_acc~9 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~9; {474#false} is VALID [2020-07-28 19:04:37,588 INFO L280 TraceCheckUtils]: 18: Hoare triple {474#false} __utac_acc__Specification4_spec__1_#t~ret1 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret1 && __utac_acc__Specification4_spec__1_#t~ret1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1 := __utac_acc__Specification4_spec__1_#t~ret1;havoc __utac_acc__Specification4_spec__1_#t~ret1; {474#false} is VALID [2020-07-28 19:04:37,588 INFO L280 TraceCheckUtils]: 19: Hoare triple {474#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~1;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~2;havoc isPumpRunning_~retValue_acc~2;isPumpRunning_~retValue_acc~2 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~2; {474#false} is VALID [2020-07-28 19:04:37,589 INFO L280 TraceCheckUtils]: 20: Hoare triple {474#false} __utac_acc__Specification4_spec__1_#t~ret2 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret2 && __utac_acc__Specification4_spec__1_#t~ret2 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0 := __utac_acc__Specification4_spec__1_#t~ret2;havoc __utac_acc__Specification4_spec__1_#t~ret2; {474#false} is VALID [2020-07-28 19:04:37,589 INFO L280 TraceCheckUtils]: 21: Hoare triple {474#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0; {474#false} is VALID [2020-07-28 19:04:37,589 INFO L280 TraceCheckUtils]: 22: Hoare triple {474#false} assume !false; {474#false} is VALID [2020-07-28 19:04:37,597 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:04:37,600 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1708020805] [2020-07-28 19:04:37,602 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:04:37,603 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2020-07-28 19:04:37,605 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1729975406] [2020-07-28 19:04:37,611 INFO L78 Accepts]: Start accepts. Automaton has 2 states. Word has length 23 [2020-07-28 19:04:37,614 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:04:37,618 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states. [2020-07-28 19:04:37,664 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 23 edges. 23 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:04:37,665 INFO L459 AbstractCegarLoop]: Interpolant automaton has 2 states [2020-07-28 19:04:37,665 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:04:37,674 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2020-07-28 19:04:37,675 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2020-07-28 19:04:37,677 INFO L87 Difference]: Start difference. First operand 470 states. Second operand 2 states. [2020-07-28 19:04:38,528 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:38,528 INFO L93 Difference]: Finished difference Result 927 states and 1454 transitions. [2020-07-28 19:04:38,529 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2020-07-28 19:04:38,529 INFO L78 Accepts]: Start accepts. Automaton has 2 states. Word has length 23 [2020-07-28 19:04:38,529 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:04:38,530 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2 states. [2020-07-28 19:04:38,556 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 1454 transitions. [2020-07-28 19:04:38,556 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2 states. [2020-07-28 19:04:38,575 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 1454 transitions. [2020-07-28 19:04:38,575 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states and 1454 transitions. [2020-07-28 19:04:40,297 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 1454 edges. 1454 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:04:40,390 INFO L225 Difference]: With dead ends: 927 [2020-07-28 19:04:40,390 INFO L226 Difference]: Without dead ends: 466 [2020-07-28 19:04:40,403 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2020-07-28 19:04:40,427 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 466 states. [2020-07-28 19:04:40,547 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 466 to 466. [2020-07-28 19:04:40,547 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:04:40,548 INFO L82 GeneralOperation]: Start isEquivalent. First operand 466 states. Second operand 466 states. [2020-07-28 19:04:40,549 INFO L74 IsIncluded]: Start isIncluded. First operand 466 states. Second operand 466 states. [2020-07-28 19:04:40,549 INFO L87 Difference]: Start difference. First operand 466 states. Second operand 466 states. [2020-07-28 19:04:40,585 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:40,585 INFO L93 Difference]: Finished difference Result 466 states and 722 transitions. [2020-07-28 19:04:40,586 INFO L276 IsEmpty]: Start isEmpty. Operand 466 states and 722 transitions. [2020-07-28 19:04:40,590 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:04:40,591 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:04:40,591 INFO L74 IsIncluded]: Start isIncluded. First operand 466 states. Second operand 466 states. [2020-07-28 19:04:40,591 INFO L87 Difference]: Start difference. First operand 466 states. Second operand 466 states. [2020-07-28 19:04:40,615 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:40,615 INFO L93 Difference]: Finished difference Result 466 states and 722 transitions. [2020-07-28 19:04:40,616 INFO L276 IsEmpty]: Start isEmpty. Operand 466 states and 722 transitions. [2020-07-28 19:04:40,617 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:04:40,617 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:04:40,618 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:04:40,618 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:04:40,618 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 466 states. [2020-07-28 19:04:40,643 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 466 states to 466 states and 722 transitions. [2020-07-28 19:04:40,645 INFO L78 Accepts]: Start accepts. Automaton has 466 states and 722 transitions. Word has length 23 [2020-07-28 19:04:40,645 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:04:40,646 INFO L479 AbstractCegarLoop]: Abstraction has 466 states and 722 transitions. [2020-07-28 19:04:40,646 INFO L480 AbstractCegarLoop]: Interpolant automaton has 2 states. [2020-07-28 19:04:40,646 INFO L276 IsEmpty]: Start isEmpty. Operand 466 states and 722 transitions. [2020-07-28 19:04:40,647 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2020-07-28 19:04:40,647 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:04:40,647 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:04:40,648 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2020-07-28 19:04:40,648 INFO L427 AbstractCegarLoop]: === Iteration 2 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:04:40,648 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:04:40,649 INFO L82 PathProgramCache]: Analyzing trace with hash 1882100476, now seen corresponding path program 1 times [2020-07-28 19:04:40,649 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:04:40,649 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [983346747] [2020-07-28 19:04:40,650 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:04:40,708 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:04:40,801 INFO L280 TraceCheckUtils]: 0: Hoare triple {3285#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(13);call #t~string11.base, #t~string11.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string11.base, #t~string11.offset, 1);call write~init~int(110, #t~string11.base, 1 + #t~string11.offset, 1);call write~init~int(0, #t~string11.base, 2 + #t~string11.offset, 1);call #t~string13.base, #t~string13.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string13.base, #t~string13.offset, 1);call write~init~int(102, #t~string13.base, 1 + #t~string13.offset, 1);call write~init~int(102, #t~string13.base, 2 + #t~string13.offset, 1);call write~init~int(0, #t~string13.base, 3 + #t~string13.offset, 1);call #t~string15.base, #t~string15.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string15.base, #t~string15.offset, 1);call write~init~int(80, #t~string15.base, 1 + #t~string15.offset, 1);call write~init~int(117, #t~string15.base, 2 + #t~string15.offset, 1);call write~init~int(109, #t~string15.base, 3 + #t~string15.offset, 1);call write~init~int(112, #t~string15.base, 4 + #t~string15.offset, 1);call write~init~int(58, #t~string15.base, 5 + #t~string15.offset, 1);call write~init~int(0, #t~string15.base, 6 + #t~string15.offset, 1);call #t~string17.base, #t~string17.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string17.base, #t~string17.offset, 1);call write~init~int(110, #t~string17.base, 1 + #t~string17.offset, 1);call write~init~int(0, #t~string17.base, 2 + #t~string17.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string19.base, #t~string19.offset, 1);call write~init~int(102, #t~string19.base, 1 + #t~string19.offset, 1);call write~init~int(102, #t~string19.base, 2 + #t~string19.offset, 1);call write~init~int(0, #t~string19.base, 3 + #t~string19.offset, 1);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string21.base, #t~string21.offset, 1);call write~init~int(32, #t~string21.base, 1 + #t~string21.offset, 1);call write~init~int(0, #t~string21.base, 2 + #t~string21.offset, 1);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string23.base, #t~string23.offset, 1);call write~init~int(0, #t~string23.base, 1 + #t~string23.offset, 1);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(30);call #t~string49.base, #t~string49.offset := #Ultimate.allocOnStack(9);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(21);call #t~string51.base, #t~string51.offset := #Ultimate.allocOnStack(30);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(9);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(21);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(25);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(30);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(9);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(25);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(13);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string68.base, #t~string68.offset, 1);call write~init~int(77, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(101, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(116, #t~string68.base, 3 + #t~string68.offset, 1);call write~init~int(104, #t~string68.base, 4 + #t~string68.offset, 1);call write~init~int(58, #t~string68.base, 5 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 6 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string70.base, #t~string70.offset, 1);call write~init~int(82, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(73, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(84, #t~string70.base, 3 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 4 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string72.base, #t~string72.offset, 1);call write~init~int(75, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 2 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string74.base, #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 1 + #t~string74.offset, 1);~cleanupTimeShifts~0 := 4;~__SELECTED_FEATURE_base~0 := 0;~__SELECTED_FEATURE_highWaterSensor~0 := 0;~__SELECTED_FEATURE_lowWaterSensor~0 := 0;~__SELECTED_FEATURE_methaneQuery~0 := 0;~__SELECTED_FEATURE_methaneAlarm~0 := 0;~__SELECTED_FEATURE_stopCommand~0 := 0;~__SELECTED_FEATURE_startCommand~0 := 0;~__GUIDSL_ROOT_PRODUCTION~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {3285#true} is VALID [2020-07-28 19:04:40,801 INFO L280 TraceCheckUtils]: 1: Hoare triple {3285#true} havoc main_#res;havoc main_#t~ret0, main_~retValue_acc~0, main_~tmp~0;havoc main_~retValue_acc~0;havoc main_~tmp~0;~__GUIDSL_ROOT_PRODUCTION~0 := 1; {3285#true} is VALID [2020-07-28 19:04:40,802 INFO L280 TraceCheckUtils]: 2: Hoare triple {3285#true} havoc select_features_#t~ret76, select_features_#t~ret77, select_features_#t~ret78, select_features_#t~ret79, select_features_#t~ret80, select_features_#t~ret81;~__SELECTED_FEATURE_base~0 := 1;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {3285#true} is VALID [2020-07-28 19:04:40,802 INFO L280 TraceCheckUtils]: 3: Hoare triple {3285#true} select_features_#t~ret76 := select_one_#res;assume -2147483648 <= select_features_#t~ret76 && select_features_#t~ret76 <= 2147483647;~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret76;havoc select_features_#t~ret76;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {3285#true} is VALID [2020-07-28 19:04:40,802 INFO L280 TraceCheckUtils]: 4: Hoare triple {3285#true} select_features_#t~ret77 := select_one_#res;assume -2147483648 <= select_features_#t~ret77 && select_features_#t~ret77 <= 2147483647;~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret77;havoc select_features_#t~ret77;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {3285#true} is VALID [2020-07-28 19:04:40,803 INFO L280 TraceCheckUtils]: 5: Hoare triple {3285#true} select_features_#t~ret78 := select_one_#res;assume -2147483648 <= select_features_#t~ret78 && select_features_#t~ret78 <= 2147483647;~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret78;havoc select_features_#t~ret78;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {3285#true} is VALID [2020-07-28 19:04:40,803 INFO L280 TraceCheckUtils]: 6: Hoare triple {3285#true} select_features_#t~ret79 := select_one_#res;assume -2147483648 <= select_features_#t~ret79 && select_features_#t~ret79 <= 2147483647;~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret79;havoc select_features_#t~ret79;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {3285#true} is VALID [2020-07-28 19:04:40,803 INFO L280 TraceCheckUtils]: 7: Hoare triple {3285#true} select_features_#t~ret80 := select_one_#res;assume -2147483648 <= select_features_#t~ret80 && select_features_#t~ret80 <= 2147483647;~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret80;havoc select_features_#t~ret80;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {3285#true} is VALID [2020-07-28 19:04:40,803 INFO L280 TraceCheckUtils]: 8: Hoare triple {3285#true} select_features_#t~ret81 := select_one_#res;assume -2147483648 <= select_features_#t~ret81 && select_features_#t~ret81 <= 2147483647;~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret81;havoc select_features_#t~ret81; {3285#true} is VALID [2020-07-28 19:04:40,804 INFO L280 TraceCheckUtils]: 9: Hoare triple {3285#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~13;havoc valid_product_~retValue_acc~13;valid_product_~retValue_acc~13 := ~__SELECTED_FEATURE_base~0;valid_product_#res := valid_product_~retValue_acc~13; {3285#true} is VALID [2020-07-28 19:04:40,804 INFO L280 TraceCheckUtils]: 10: Hoare triple {3285#true} main_#t~ret0 := valid_product_#res;assume -2147483648 <= main_#t~ret0 && main_#t~ret0 <= 2147483647;main_~tmp~0 := main_#t~ret0;havoc main_#t~ret0; {3285#true} is VALID [2020-07-28 19:04:40,806 INFO L280 TraceCheckUtils]: 11: Hoare triple {3285#true} assume 0 != main_~tmp~0; {3285#true} is VALID [2020-07-28 19:04:40,808 INFO L280 TraceCheckUtils]: 12: Hoare triple {3285#true} havoc test_#t~nondet26, test_#t~nondet27, test_#t~nondet28, test_#t~nondet29, test_~splverifierCounter~0, test_~tmp~8, test_~tmp___0~3, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~8;havoc test_~tmp___0~3;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {3287#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} is VALID [2020-07-28 19:04:40,815 INFO L280 TraceCheckUtils]: 13: Hoare triple {3287#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} assume !false; {3287#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} is VALID [2020-07-28 19:04:40,818 INFO L280 TraceCheckUtils]: 14: Hoare triple {3287#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} assume !(test_~splverifierCounter~0 < 4); {3286#false} is VALID [2020-07-28 19:04:40,818 INFO L280 TraceCheckUtils]: 15: Hoare triple {3286#false} havoc cleanup_~i~0, cleanup_~__cil_tmp2~0;havoc cleanup_~i~0;havoc cleanup_~__cil_tmp2~0; {3286#false} is VALID [2020-07-28 19:04:40,818 INFO L280 TraceCheckUtils]: 16: Hoare triple {3286#false} assume !(0 != ~pumpRunning~0); {3286#false} is VALID [2020-07-28 19:04:40,819 INFO L280 TraceCheckUtils]: 17: Hoare triple {3286#false} assume !(0 != ~systemActive~0); {3286#false} is VALID [2020-07-28 19:04:40,819 INFO L280 TraceCheckUtils]: 18: Hoare triple {3286#false} havoc __utac_acc__Specification4_spec__1_#t~ret1, __utac_acc__Specification4_spec__1_#t~ret2, __utac_acc__Specification4_spec__1_~tmp~1, __utac_acc__Specification4_spec__1_~tmp___0~0;havoc __utac_acc__Specification4_spec__1_~tmp~1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~9;havoc getWaterLevel_~retValue_acc~9;getWaterLevel_~retValue_acc~9 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~9; {3286#false} is VALID [2020-07-28 19:04:40,819 INFO L280 TraceCheckUtils]: 19: Hoare triple {3286#false} __utac_acc__Specification4_spec__1_#t~ret1 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret1 && __utac_acc__Specification4_spec__1_#t~ret1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1 := __utac_acc__Specification4_spec__1_#t~ret1;havoc __utac_acc__Specification4_spec__1_#t~ret1; {3286#false} is VALID [2020-07-28 19:04:40,820 INFO L280 TraceCheckUtils]: 20: Hoare triple {3286#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~1;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~2;havoc isPumpRunning_~retValue_acc~2;isPumpRunning_~retValue_acc~2 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~2; {3286#false} is VALID [2020-07-28 19:04:40,820 INFO L280 TraceCheckUtils]: 21: Hoare triple {3286#false} __utac_acc__Specification4_spec__1_#t~ret2 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret2 && __utac_acc__Specification4_spec__1_#t~ret2 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0 := __utac_acc__Specification4_spec__1_#t~ret2;havoc __utac_acc__Specification4_spec__1_#t~ret2; {3286#false} is VALID [2020-07-28 19:04:40,820 INFO L280 TraceCheckUtils]: 22: Hoare triple {3286#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0; {3286#false} is VALID [2020-07-28 19:04:40,822 INFO L280 TraceCheckUtils]: 23: Hoare triple {3286#false} assume !false; {3286#false} is VALID [2020-07-28 19:04:40,824 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:04:40,824 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [983346747] [2020-07-28 19:04:40,825 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:04:40,825 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2020-07-28 19:04:40,825 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1010109929] [2020-07-28 19:04:40,829 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 24 [2020-07-28 19:04:40,830 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:04:40,830 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 19:04:40,871 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 24 edges. 24 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:04:40,872 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 19:04:40,872 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:04:40,872 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 19:04:40,873 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:04:40,873 INFO L87 Difference]: Start difference. First operand 466 states and 722 transitions. Second operand 3 states. [2020-07-28 19:04:41,346 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:41,347 INFO L93 Difference]: Finished difference Result 466 states and 722 transitions. [2020-07-28 19:04:41,347 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 19:04:41,347 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 24 [2020-07-28 19:04:41,348 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:04:41,348 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:04:41,353 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 722 transitions. [2020-07-28 19:04:41,354 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:04:41,360 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 722 transitions. [2020-07-28 19:04:41,361 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 722 transitions. [2020-07-28 19:04:42,131 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 722 edges. 722 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:04:42,136 INFO L225 Difference]: With dead ends: 466 [2020-07-28 19:04:42,136 INFO L226 Difference]: Without dead ends: 172 [2020-07-28 19:04:42,139 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:04:42,140 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 172 states. [2020-07-28 19:04:42,214 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 172 to 172. [2020-07-28 19:04:42,214 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:04:42,214 INFO L82 GeneralOperation]: Start isEquivalent. First operand 172 states. Second operand 172 states. [2020-07-28 19:04:42,215 INFO L74 IsIncluded]: Start isIncluded. First operand 172 states. Second operand 172 states. [2020-07-28 19:04:42,215 INFO L87 Difference]: Start difference. First operand 172 states. Second operand 172 states. [2020-07-28 19:04:42,220 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:42,220 INFO L93 Difference]: Finished difference Result 172 states and 263 transitions. [2020-07-28 19:04:42,220 INFO L276 IsEmpty]: Start isEmpty. Operand 172 states and 263 transitions. [2020-07-28 19:04:42,221 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:04:42,221 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:04:42,221 INFO L74 IsIncluded]: Start isIncluded. First operand 172 states. Second operand 172 states. [2020-07-28 19:04:42,221 INFO L87 Difference]: Start difference. First operand 172 states. Second operand 172 states. [2020-07-28 19:04:42,225 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:42,226 INFO L93 Difference]: Finished difference Result 172 states and 263 transitions. [2020-07-28 19:04:42,226 INFO L276 IsEmpty]: Start isEmpty. Operand 172 states and 263 transitions. [2020-07-28 19:04:42,226 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:04:42,226 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:04:42,227 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:04:42,227 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:04:42,227 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 172 states. [2020-07-28 19:04:42,231 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 172 states to 172 states and 263 transitions. [2020-07-28 19:04:42,231 INFO L78 Accepts]: Start accepts. Automaton has 172 states and 263 transitions. Word has length 24 [2020-07-28 19:04:42,231 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:04:42,231 INFO L479 AbstractCegarLoop]: Abstraction has 172 states and 263 transitions. [2020-07-28 19:04:42,232 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 19:04:42,232 INFO L276 IsEmpty]: Start isEmpty. Operand 172 states and 263 transitions. [2020-07-28 19:04:42,232 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2020-07-28 19:04:42,232 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:04:42,233 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:04:42,233 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2020-07-28 19:04:42,233 INFO L427 AbstractCegarLoop]: === Iteration 3 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:04:42,233 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:04:42,233 INFO L82 PathProgramCache]: Analyzing trace with hash -1978143563, now seen corresponding path program 1 times [2020-07-28 19:04:42,234 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:04:42,234 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1321830944] [2020-07-28 19:04:42,234 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:04:42,278 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:04:42,373 INFO L280 TraceCheckUtils]: 0: Hoare triple {4498#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(13);call #t~string11.base, #t~string11.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string11.base, #t~string11.offset, 1);call write~init~int(110, #t~string11.base, 1 + #t~string11.offset, 1);call write~init~int(0, #t~string11.base, 2 + #t~string11.offset, 1);call #t~string13.base, #t~string13.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string13.base, #t~string13.offset, 1);call write~init~int(102, #t~string13.base, 1 + #t~string13.offset, 1);call write~init~int(102, #t~string13.base, 2 + #t~string13.offset, 1);call write~init~int(0, #t~string13.base, 3 + #t~string13.offset, 1);call #t~string15.base, #t~string15.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string15.base, #t~string15.offset, 1);call write~init~int(80, #t~string15.base, 1 + #t~string15.offset, 1);call write~init~int(117, #t~string15.base, 2 + #t~string15.offset, 1);call write~init~int(109, #t~string15.base, 3 + #t~string15.offset, 1);call write~init~int(112, #t~string15.base, 4 + #t~string15.offset, 1);call write~init~int(58, #t~string15.base, 5 + #t~string15.offset, 1);call write~init~int(0, #t~string15.base, 6 + #t~string15.offset, 1);call #t~string17.base, #t~string17.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string17.base, #t~string17.offset, 1);call write~init~int(110, #t~string17.base, 1 + #t~string17.offset, 1);call write~init~int(0, #t~string17.base, 2 + #t~string17.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string19.base, #t~string19.offset, 1);call write~init~int(102, #t~string19.base, 1 + #t~string19.offset, 1);call write~init~int(102, #t~string19.base, 2 + #t~string19.offset, 1);call write~init~int(0, #t~string19.base, 3 + #t~string19.offset, 1);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string21.base, #t~string21.offset, 1);call write~init~int(32, #t~string21.base, 1 + #t~string21.offset, 1);call write~init~int(0, #t~string21.base, 2 + #t~string21.offset, 1);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string23.base, #t~string23.offset, 1);call write~init~int(0, #t~string23.base, 1 + #t~string23.offset, 1);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(30);call #t~string49.base, #t~string49.offset := #Ultimate.allocOnStack(9);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(21);call #t~string51.base, #t~string51.offset := #Ultimate.allocOnStack(30);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(9);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(21);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(25);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(30);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(9);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(25);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(13);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string68.base, #t~string68.offset, 1);call write~init~int(77, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(101, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(116, #t~string68.base, 3 + #t~string68.offset, 1);call write~init~int(104, #t~string68.base, 4 + #t~string68.offset, 1);call write~init~int(58, #t~string68.base, 5 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 6 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string70.base, #t~string70.offset, 1);call write~init~int(82, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(73, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(84, #t~string70.base, 3 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 4 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string72.base, #t~string72.offset, 1);call write~init~int(75, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 2 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string74.base, #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 1 + #t~string74.offset, 1);~cleanupTimeShifts~0 := 4;~__SELECTED_FEATURE_base~0 := 0;~__SELECTED_FEATURE_highWaterSensor~0 := 0;~__SELECTED_FEATURE_lowWaterSensor~0 := 0;~__SELECTED_FEATURE_methaneQuery~0 := 0;~__SELECTED_FEATURE_methaneAlarm~0 := 0;~__SELECTED_FEATURE_stopCommand~0 := 0;~__SELECTED_FEATURE_startCommand~0 := 0;~__GUIDSL_ROOT_PRODUCTION~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {4500#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:04:42,375 INFO L280 TraceCheckUtils]: 1: Hoare triple {4500#(= 1 ~systemActive~0)} havoc main_#res;havoc main_#t~ret0, main_~retValue_acc~0, main_~tmp~0;havoc main_~retValue_acc~0;havoc main_~tmp~0;~__GUIDSL_ROOT_PRODUCTION~0 := 1; {4500#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:04:42,376 INFO L280 TraceCheckUtils]: 2: Hoare triple {4500#(= 1 ~systemActive~0)} havoc select_features_#t~ret76, select_features_#t~ret77, select_features_#t~ret78, select_features_#t~ret79, select_features_#t~ret80, select_features_#t~ret81;~__SELECTED_FEATURE_base~0 := 1;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {4501#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} is VALID [2020-07-28 19:04:42,376 INFO L280 TraceCheckUtils]: 3: Hoare triple {4501#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} select_features_#t~ret76 := select_one_#res;assume -2147483648 <= select_features_#t~ret76 && select_features_#t~ret76 <= 2147483647;~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret76;havoc select_features_#t~ret76;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {4501#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} is VALID [2020-07-28 19:04:42,377 INFO L280 TraceCheckUtils]: 4: Hoare triple {4501#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} select_features_#t~ret77 := select_one_#res;assume -2147483648 <= select_features_#t~ret77 && select_features_#t~ret77 <= 2147483647;~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret77;havoc select_features_#t~ret77;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {4501#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} is VALID [2020-07-28 19:04:42,379 INFO L280 TraceCheckUtils]: 5: Hoare triple {4501#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} select_features_#t~ret78 := select_one_#res;assume -2147483648 <= select_features_#t~ret78 && select_features_#t~ret78 <= 2147483647;~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret78;havoc select_features_#t~ret78;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {4501#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} is VALID [2020-07-28 19:04:42,381 INFO L280 TraceCheckUtils]: 6: Hoare triple {4501#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} select_features_#t~ret79 := select_one_#res;assume -2147483648 <= select_features_#t~ret79 && select_features_#t~ret79 <= 2147483647;~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret79;havoc select_features_#t~ret79;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {4501#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} is VALID [2020-07-28 19:04:42,384 INFO L280 TraceCheckUtils]: 7: Hoare triple {4501#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} select_features_#t~ret80 := select_one_#res;assume -2147483648 <= select_features_#t~ret80 && select_features_#t~ret80 <= 2147483647;~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret80;havoc select_features_#t~ret80;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {4501#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} is VALID [2020-07-28 19:04:42,387 INFO L280 TraceCheckUtils]: 8: Hoare triple {4501#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} select_features_#t~ret81 := select_one_#res;assume -2147483648 <= select_features_#t~ret81 && select_features_#t~ret81 <= 2147483647;~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret81;havoc select_features_#t~ret81; {4501#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} is VALID [2020-07-28 19:04:42,388 INFO L280 TraceCheckUtils]: 9: Hoare triple {4501#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~13;havoc valid_product_~retValue_acc~13;valid_product_~retValue_acc~13 := ~__SELECTED_FEATURE_base~0;valid_product_#res := valid_product_~retValue_acc~13; {4502#(= |ULTIMATE.start_valid_product_#res| ~systemActive~0)} is VALID [2020-07-28 19:04:42,389 INFO L280 TraceCheckUtils]: 10: Hoare triple {4502#(= |ULTIMATE.start_valid_product_#res| ~systemActive~0)} main_#t~ret0 := valid_product_#res;assume -2147483648 <= main_#t~ret0 && main_#t~ret0 <= 2147483647;main_~tmp~0 := main_#t~ret0;havoc main_#t~ret0; {4503#(= ULTIMATE.start_main_~tmp~0 ~systemActive~0)} is VALID [2020-07-28 19:04:42,390 INFO L280 TraceCheckUtils]: 11: Hoare triple {4503#(= ULTIMATE.start_main_~tmp~0 ~systemActive~0)} assume 0 != main_~tmp~0; {4504#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:04:42,391 INFO L280 TraceCheckUtils]: 12: Hoare triple {4504#(not (= 0 ~systemActive~0))} havoc test_#t~nondet26, test_#t~nondet27, test_#t~nondet28, test_#t~nondet29, test_~splverifierCounter~0, test_~tmp~8, test_~tmp___0~3, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~8;havoc test_~tmp___0~3;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {4504#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:04:42,391 INFO L280 TraceCheckUtils]: 13: Hoare triple {4504#(not (= 0 ~systemActive~0))} assume !false; {4504#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:04:42,392 INFO L280 TraceCheckUtils]: 14: Hoare triple {4504#(not (= 0 ~systemActive~0))} assume test_~splverifierCounter~0 < 4; {4504#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:04:42,393 INFO L280 TraceCheckUtils]: 15: Hoare triple {4504#(not (= 0 ~systemActive~0))} assume -2147483648 <= test_#t~nondet26 && test_#t~nondet26 <= 2147483647;test_~tmp~8 := test_#t~nondet26;havoc test_#t~nondet26; {4504#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:04:42,394 INFO L280 TraceCheckUtils]: 16: Hoare triple {4504#(not (= 0 ~systemActive~0))} assume !(0 != test_~tmp~8); {4504#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:04:42,394 INFO L280 TraceCheckUtils]: 17: Hoare triple {4504#(not (= 0 ~systemActive~0))} assume -2147483648 <= test_#t~nondet27 && test_#t~nondet27 <= 2147483647;test_~tmp___0~3 := test_#t~nondet27;havoc test_#t~nondet27; {4504#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:04:42,395 INFO L280 TraceCheckUtils]: 18: Hoare triple {4504#(not (= 0 ~systemActive~0))} assume !(0 != test_~tmp___0~3); {4504#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:04:42,396 INFO L280 TraceCheckUtils]: 19: Hoare triple {4504#(not (= 0 ~systemActive~0))} assume -2147483648 <= test_#t~nondet28 && test_#t~nondet28 <= 2147483647;test_~tmp___2~0 := test_#t~nondet28;havoc test_#t~nondet28; {4504#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:04:42,397 INFO L280 TraceCheckUtils]: 20: Hoare triple {4504#(not (= 0 ~systemActive~0))} assume !(0 != test_~tmp___2~0);assume -2147483648 <= test_#t~nondet29 && test_#t~nondet29 <= 2147483647;test_~tmp___1~0 := test_#t~nondet29;havoc test_#t~nondet29; {4504#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:04:42,397 INFO L280 TraceCheckUtils]: 21: Hoare triple {4504#(not (= 0 ~systemActive~0))} assume !(0 != test_~tmp___1~0); {4504#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:04:42,398 INFO L280 TraceCheckUtils]: 22: Hoare triple {4504#(not (= 0 ~systemActive~0))} assume !(0 != ~pumpRunning~0); {4504#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:04:42,399 INFO L280 TraceCheckUtils]: 23: Hoare triple {4504#(not (= 0 ~systemActive~0))} assume !(0 != ~systemActive~0); {4499#false} is VALID [2020-07-28 19:04:42,399 INFO L280 TraceCheckUtils]: 24: Hoare triple {4499#false} havoc __utac_acc__Specification4_spec__1_#t~ret1, __utac_acc__Specification4_spec__1_#t~ret2, __utac_acc__Specification4_spec__1_~tmp~1, __utac_acc__Specification4_spec__1_~tmp___0~0;havoc __utac_acc__Specification4_spec__1_~tmp~1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~9;havoc getWaterLevel_~retValue_acc~9;getWaterLevel_~retValue_acc~9 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~9; {4499#false} is VALID [2020-07-28 19:04:42,399 INFO L280 TraceCheckUtils]: 25: Hoare triple {4499#false} __utac_acc__Specification4_spec__1_#t~ret1 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret1 && __utac_acc__Specification4_spec__1_#t~ret1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1 := __utac_acc__Specification4_spec__1_#t~ret1;havoc __utac_acc__Specification4_spec__1_#t~ret1; {4499#false} is VALID [2020-07-28 19:04:42,399 INFO L280 TraceCheckUtils]: 26: Hoare triple {4499#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~1;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~2;havoc isPumpRunning_~retValue_acc~2;isPumpRunning_~retValue_acc~2 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~2; {4499#false} is VALID [2020-07-28 19:04:42,400 INFO L280 TraceCheckUtils]: 27: Hoare triple {4499#false} __utac_acc__Specification4_spec__1_#t~ret2 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret2 && __utac_acc__Specification4_spec__1_#t~ret2 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0 := __utac_acc__Specification4_spec__1_#t~ret2;havoc __utac_acc__Specification4_spec__1_#t~ret2; {4499#false} is VALID [2020-07-28 19:04:42,400 INFO L280 TraceCheckUtils]: 28: Hoare triple {4499#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0; {4499#false} is VALID [2020-07-28 19:04:42,401 INFO L280 TraceCheckUtils]: 29: Hoare triple {4499#false} assume !false; {4499#false} is VALID [2020-07-28 19:04:42,403 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:04:42,403 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1321830944] [2020-07-28 19:04:42,403 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:04:42,404 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2020-07-28 19:04:42,404 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1027865661] [2020-07-28 19:04:42,404 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 30 [2020-07-28 19:04:42,405 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:04:42,405 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states. [2020-07-28 19:04:42,445 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 30 edges. 30 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:04:42,446 INFO L459 AbstractCegarLoop]: Interpolant automaton has 7 states [2020-07-28 19:04:42,446 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:04:42,446 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2020-07-28 19:04:42,447 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=30, Unknown=0, NotChecked=0, Total=42 [2020-07-28 19:04:42,447 INFO L87 Difference]: Start difference. First operand 172 states and 263 transitions. Second operand 7 states. [2020-07-28 19:04:45,181 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:45,181 INFO L93 Difference]: Finished difference Result 674 states and 1051 transitions. [2020-07-28 19:04:45,182 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2020-07-28 19:04:45,190 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 30 [2020-07-28 19:04:45,191 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:04:45,191 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2020-07-28 19:04:45,199 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 1051 transitions. [2020-07-28 19:04:45,199 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2020-07-28 19:04:45,208 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 1051 transitions. [2020-07-28 19:04:45,208 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 1051 transitions. [2020-07-28 19:04:46,421 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 1051 edges. 1051 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:04:46,442 INFO L225 Difference]: With dead ends: 674 [2020-07-28 19:04:46,442 INFO L226 Difference]: Without dead ends: 515 [2020-07-28 19:04:46,443 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=33, Invalid=57, Unknown=0, NotChecked=0, Total=90 [2020-07-28 19:04:46,444 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 515 states. [2020-07-28 19:04:46,634 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 515 to 193. [2020-07-28 19:04:46,634 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:04:46,634 INFO L82 GeneralOperation]: Start isEquivalent. First operand 515 states. Second operand 193 states. [2020-07-28 19:04:46,634 INFO L74 IsIncluded]: Start isIncluded. First operand 515 states. Second operand 193 states. [2020-07-28 19:04:46,634 INFO L87 Difference]: Start difference. First operand 515 states. Second operand 193 states. [2020-07-28 19:04:46,654 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:46,655 INFO L93 Difference]: Finished difference Result 515 states and 798 transitions. [2020-07-28 19:04:46,655 INFO L276 IsEmpty]: Start isEmpty. Operand 515 states and 798 transitions. [2020-07-28 19:04:46,656 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:04:46,656 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:04:46,656 INFO L74 IsIncluded]: Start isIncluded. First operand 193 states. Second operand 515 states. [2020-07-28 19:04:46,656 INFO L87 Difference]: Start difference. First operand 193 states. Second operand 515 states. [2020-07-28 19:04:46,676 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:46,676 INFO L93 Difference]: Finished difference Result 515 states and 798 transitions. [2020-07-28 19:04:46,677 INFO L276 IsEmpty]: Start isEmpty. Operand 515 states and 798 transitions. [2020-07-28 19:04:46,678 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:04:46,678 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:04:46,678 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:04:46,678 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:04:46,679 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 193 states. [2020-07-28 19:04:46,684 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 193 states to 193 states and 296 transitions. [2020-07-28 19:04:46,684 INFO L78 Accepts]: Start accepts. Automaton has 193 states and 296 transitions. Word has length 30 [2020-07-28 19:04:46,684 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:04:46,685 INFO L479 AbstractCegarLoop]: Abstraction has 193 states and 296 transitions. [2020-07-28 19:04:46,685 INFO L480 AbstractCegarLoop]: Interpolant automaton has 7 states. [2020-07-28 19:04:46,685 INFO L276 IsEmpty]: Start isEmpty. Operand 193 states and 296 transitions. [2020-07-28 19:04:46,686 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2020-07-28 19:04:46,686 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:04:46,686 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:04:46,687 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2020-07-28 19:04:46,687 INFO L427 AbstractCegarLoop]: === Iteration 4 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:04:46,687 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:04:46,687 INFO L82 PathProgramCache]: Analyzing trace with hash 1554604317, now seen corresponding path program 1 times [2020-07-28 19:04:46,688 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:04:46,688 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [774886288] [2020-07-28 19:04:46,688 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:04:46,750 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:04:46,792 INFO L280 TraceCheckUtils]: 0: Hoare triple {6712#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(13);call #t~string11.base, #t~string11.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string11.base, #t~string11.offset, 1);call write~init~int(110, #t~string11.base, 1 + #t~string11.offset, 1);call write~init~int(0, #t~string11.base, 2 + #t~string11.offset, 1);call #t~string13.base, #t~string13.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string13.base, #t~string13.offset, 1);call write~init~int(102, #t~string13.base, 1 + #t~string13.offset, 1);call write~init~int(102, #t~string13.base, 2 + #t~string13.offset, 1);call write~init~int(0, #t~string13.base, 3 + #t~string13.offset, 1);call #t~string15.base, #t~string15.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string15.base, #t~string15.offset, 1);call write~init~int(80, #t~string15.base, 1 + #t~string15.offset, 1);call write~init~int(117, #t~string15.base, 2 + #t~string15.offset, 1);call write~init~int(109, #t~string15.base, 3 + #t~string15.offset, 1);call write~init~int(112, #t~string15.base, 4 + #t~string15.offset, 1);call write~init~int(58, #t~string15.base, 5 + #t~string15.offset, 1);call write~init~int(0, #t~string15.base, 6 + #t~string15.offset, 1);call #t~string17.base, #t~string17.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string17.base, #t~string17.offset, 1);call write~init~int(110, #t~string17.base, 1 + #t~string17.offset, 1);call write~init~int(0, #t~string17.base, 2 + #t~string17.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string19.base, #t~string19.offset, 1);call write~init~int(102, #t~string19.base, 1 + #t~string19.offset, 1);call write~init~int(102, #t~string19.base, 2 + #t~string19.offset, 1);call write~init~int(0, #t~string19.base, 3 + #t~string19.offset, 1);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string21.base, #t~string21.offset, 1);call write~init~int(32, #t~string21.base, 1 + #t~string21.offset, 1);call write~init~int(0, #t~string21.base, 2 + #t~string21.offset, 1);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string23.base, #t~string23.offset, 1);call write~init~int(0, #t~string23.base, 1 + #t~string23.offset, 1);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(30);call #t~string49.base, #t~string49.offset := #Ultimate.allocOnStack(9);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(21);call #t~string51.base, #t~string51.offset := #Ultimate.allocOnStack(30);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(9);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(21);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(25);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(30);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(9);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(25);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(13);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string68.base, #t~string68.offset, 1);call write~init~int(77, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(101, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(116, #t~string68.base, 3 + #t~string68.offset, 1);call write~init~int(104, #t~string68.base, 4 + #t~string68.offset, 1);call write~init~int(58, #t~string68.base, 5 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 6 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string70.base, #t~string70.offset, 1);call write~init~int(82, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(73, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(84, #t~string70.base, 3 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 4 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string72.base, #t~string72.offset, 1);call write~init~int(75, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 2 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string74.base, #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 1 + #t~string74.offset, 1);~cleanupTimeShifts~0 := 4;~__SELECTED_FEATURE_base~0 := 0;~__SELECTED_FEATURE_highWaterSensor~0 := 0;~__SELECTED_FEATURE_lowWaterSensor~0 := 0;~__SELECTED_FEATURE_methaneQuery~0 := 0;~__SELECTED_FEATURE_methaneAlarm~0 := 0;~__SELECTED_FEATURE_stopCommand~0 := 0;~__SELECTED_FEATURE_startCommand~0 := 0;~__GUIDSL_ROOT_PRODUCTION~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {6714#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:46,793 INFO L280 TraceCheckUtils]: 1: Hoare triple {6714#(= 0 ~pumpRunning~0)} havoc main_#res;havoc main_#t~ret0, main_~retValue_acc~0, main_~tmp~0;havoc main_~retValue_acc~0;havoc main_~tmp~0;~__GUIDSL_ROOT_PRODUCTION~0 := 1; {6714#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:46,794 INFO L280 TraceCheckUtils]: 2: Hoare triple {6714#(= 0 ~pumpRunning~0)} havoc select_features_#t~ret76, select_features_#t~ret77, select_features_#t~ret78, select_features_#t~ret79, select_features_#t~ret80, select_features_#t~ret81;~__SELECTED_FEATURE_base~0 := 1;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {6714#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:46,794 INFO L280 TraceCheckUtils]: 3: Hoare triple {6714#(= 0 ~pumpRunning~0)} select_features_#t~ret76 := select_one_#res;assume -2147483648 <= select_features_#t~ret76 && select_features_#t~ret76 <= 2147483647;~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret76;havoc select_features_#t~ret76;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {6714#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:46,795 INFO L280 TraceCheckUtils]: 4: Hoare triple {6714#(= 0 ~pumpRunning~0)} select_features_#t~ret77 := select_one_#res;assume -2147483648 <= select_features_#t~ret77 && select_features_#t~ret77 <= 2147483647;~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret77;havoc select_features_#t~ret77;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {6714#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:46,796 INFO L280 TraceCheckUtils]: 5: Hoare triple {6714#(= 0 ~pumpRunning~0)} select_features_#t~ret78 := select_one_#res;assume -2147483648 <= select_features_#t~ret78 && select_features_#t~ret78 <= 2147483647;~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret78;havoc select_features_#t~ret78;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {6714#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:46,796 INFO L280 TraceCheckUtils]: 6: Hoare triple {6714#(= 0 ~pumpRunning~0)} select_features_#t~ret79 := select_one_#res;assume -2147483648 <= select_features_#t~ret79 && select_features_#t~ret79 <= 2147483647;~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret79;havoc select_features_#t~ret79;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {6714#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:46,797 INFO L280 TraceCheckUtils]: 7: Hoare triple {6714#(= 0 ~pumpRunning~0)} select_features_#t~ret80 := select_one_#res;assume -2147483648 <= select_features_#t~ret80 && select_features_#t~ret80 <= 2147483647;~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret80;havoc select_features_#t~ret80;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {6714#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:46,798 INFO L280 TraceCheckUtils]: 8: Hoare triple {6714#(= 0 ~pumpRunning~0)} select_features_#t~ret81 := select_one_#res;assume -2147483648 <= select_features_#t~ret81 && select_features_#t~ret81 <= 2147483647;~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret81;havoc select_features_#t~ret81; {6714#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:46,798 INFO L280 TraceCheckUtils]: 9: Hoare triple {6714#(= 0 ~pumpRunning~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~13;havoc valid_product_~retValue_acc~13;valid_product_~retValue_acc~13 := ~__SELECTED_FEATURE_base~0;valid_product_#res := valid_product_~retValue_acc~13; {6714#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:46,799 INFO L280 TraceCheckUtils]: 10: Hoare triple {6714#(= 0 ~pumpRunning~0)} main_#t~ret0 := valid_product_#res;assume -2147483648 <= main_#t~ret0 && main_#t~ret0 <= 2147483647;main_~tmp~0 := main_#t~ret0;havoc main_#t~ret0; {6714#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:46,799 INFO L280 TraceCheckUtils]: 11: Hoare triple {6714#(= 0 ~pumpRunning~0)} assume 0 != main_~tmp~0; {6714#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:46,800 INFO L280 TraceCheckUtils]: 12: Hoare triple {6714#(= 0 ~pumpRunning~0)} havoc test_#t~nondet26, test_#t~nondet27, test_#t~nondet28, test_#t~nondet29, test_~splverifierCounter~0, test_~tmp~8, test_~tmp___0~3, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~8;havoc test_~tmp___0~3;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {6714#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:46,801 INFO L280 TraceCheckUtils]: 13: Hoare triple {6714#(= 0 ~pumpRunning~0)} assume !false; {6714#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:46,801 INFO L280 TraceCheckUtils]: 14: Hoare triple {6714#(= 0 ~pumpRunning~0)} assume test_~splverifierCounter~0 < 4; {6714#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:46,802 INFO L280 TraceCheckUtils]: 15: Hoare triple {6714#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet26 && test_#t~nondet26 <= 2147483647;test_~tmp~8 := test_#t~nondet26;havoc test_#t~nondet26; {6714#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:46,802 INFO L280 TraceCheckUtils]: 16: Hoare triple {6714#(= 0 ~pumpRunning~0)} assume !(0 != test_~tmp~8); {6714#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:46,803 INFO L280 TraceCheckUtils]: 17: Hoare triple {6714#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet27 && test_#t~nondet27 <= 2147483647;test_~tmp___0~3 := test_#t~nondet27;havoc test_#t~nondet27; {6714#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:46,804 INFO L280 TraceCheckUtils]: 18: Hoare triple {6714#(= 0 ~pumpRunning~0)} assume !(0 != test_~tmp___0~3); {6714#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:46,804 INFO L280 TraceCheckUtils]: 19: Hoare triple {6714#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet28 && test_#t~nondet28 <= 2147483647;test_~tmp___2~0 := test_#t~nondet28;havoc test_#t~nondet28; {6714#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:46,805 INFO L280 TraceCheckUtils]: 20: Hoare triple {6714#(= 0 ~pumpRunning~0)} assume !(0 != test_~tmp___2~0);assume -2147483648 <= test_#t~nondet29 && test_#t~nondet29 <= 2147483647;test_~tmp___1~0 := test_#t~nondet29;havoc test_#t~nondet29; {6714#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:46,805 INFO L280 TraceCheckUtils]: 21: Hoare triple {6714#(= 0 ~pumpRunning~0)} assume 0 != test_~tmp___1~0; {6714#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:46,806 INFO L280 TraceCheckUtils]: 22: Hoare triple {6714#(= 0 ~pumpRunning~0)} assume 0 != ~__SELECTED_FEATURE_stopCommand~0; {6714#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:46,807 INFO L280 TraceCheckUtils]: 23: Hoare triple {6714#(= 0 ~pumpRunning~0)} assume 0 != ~pumpRunning~0;~pumpRunning~0 := 0; {6713#false} is VALID [2020-07-28 19:04:46,807 INFO L280 TraceCheckUtils]: 24: Hoare triple {6713#false} ~systemActive~0 := 0; {6713#false} is VALID [2020-07-28 19:04:46,807 INFO L280 TraceCheckUtils]: 25: Hoare triple {6713#false} assume !(0 != ~pumpRunning~0); {6713#false} is VALID [2020-07-28 19:04:46,808 INFO L280 TraceCheckUtils]: 26: Hoare triple {6713#false} assume !(0 != ~systemActive~0); {6713#false} is VALID [2020-07-28 19:04:46,808 INFO L280 TraceCheckUtils]: 27: Hoare triple {6713#false} havoc __utac_acc__Specification4_spec__1_#t~ret1, __utac_acc__Specification4_spec__1_#t~ret2, __utac_acc__Specification4_spec__1_~tmp~1, __utac_acc__Specification4_spec__1_~tmp___0~0;havoc __utac_acc__Specification4_spec__1_~tmp~1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~9;havoc getWaterLevel_~retValue_acc~9;getWaterLevel_~retValue_acc~9 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~9; {6713#false} is VALID [2020-07-28 19:04:46,808 INFO L280 TraceCheckUtils]: 28: Hoare triple {6713#false} __utac_acc__Specification4_spec__1_#t~ret1 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret1 && __utac_acc__Specification4_spec__1_#t~ret1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1 := __utac_acc__Specification4_spec__1_#t~ret1;havoc __utac_acc__Specification4_spec__1_#t~ret1; {6713#false} is VALID [2020-07-28 19:04:46,808 INFO L280 TraceCheckUtils]: 29: Hoare triple {6713#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~1;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~2;havoc isPumpRunning_~retValue_acc~2;isPumpRunning_~retValue_acc~2 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~2; {6713#false} is VALID [2020-07-28 19:04:46,809 INFO L280 TraceCheckUtils]: 30: Hoare triple {6713#false} __utac_acc__Specification4_spec__1_#t~ret2 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret2 && __utac_acc__Specification4_spec__1_#t~ret2 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0 := __utac_acc__Specification4_spec__1_#t~ret2;havoc __utac_acc__Specification4_spec__1_#t~ret2; {6713#false} is VALID [2020-07-28 19:04:46,809 INFO L280 TraceCheckUtils]: 31: Hoare triple {6713#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0; {6713#false} is VALID [2020-07-28 19:04:46,809 INFO L280 TraceCheckUtils]: 32: Hoare triple {6713#false} assume !false; {6713#false} is VALID [2020-07-28 19:04:46,811 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:04:46,811 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [774886288] [2020-07-28 19:04:46,812 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:04:46,812 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2020-07-28 19:04:46,812 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1147176446] [2020-07-28 19:04:46,812 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 33 [2020-07-28 19:04:46,814 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:04:46,815 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 19:04:46,865 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 33 edges. 33 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:04:46,866 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 19:04:46,866 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:04:46,866 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 19:04:46,867 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:04:46,867 INFO L87 Difference]: Start difference. First operand 193 states and 296 transitions. Second operand 3 states. [2020-07-28 19:04:47,496 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:47,496 INFO L93 Difference]: Finished difference Result 384 states and 597 transitions. [2020-07-28 19:04:47,497 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 19:04:47,497 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 33 [2020-07-28 19:04:47,497 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:04:47,497 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:04:47,500 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 533 transitions. [2020-07-28 19:04:47,500 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:04:47,503 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 533 transitions. [2020-07-28 19:04:47,503 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 533 transitions. [2020-07-28 19:04:48,024 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 533 edges. 533 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:04:48,029 INFO L225 Difference]: With dead ends: 384 [2020-07-28 19:04:48,029 INFO L226 Difference]: Without dead ends: 204 [2020-07-28 19:04:48,031 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:04:48,031 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 204 states. [2020-07-28 19:04:48,240 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 204 to 202. [2020-07-28 19:04:48,241 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:04:48,241 INFO L82 GeneralOperation]: Start isEquivalent. First operand 204 states. Second operand 202 states. [2020-07-28 19:04:48,241 INFO L74 IsIncluded]: Start isIncluded. First operand 204 states. Second operand 202 states. [2020-07-28 19:04:48,241 INFO L87 Difference]: Start difference. First operand 204 states. Second operand 202 states. [2020-07-28 19:04:48,247 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:48,247 INFO L93 Difference]: Finished difference Result 204 states and 303 transitions. [2020-07-28 19:04:48,247 INFO L276 IsEmpty]: Start isEmpty. Operand 204 states and 303 transitions. [2020-07-28 19:04:48,248 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:04:48,248 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:04:48,248 INFO L74 IsIncluded]: Start isIncluded. First operand 202 states. Second operand 204 states. [2020-07-28 19:04:48,248 INFO L87 Difference]: Start difference. First operand 202 states. Second operand 204 states. [2020-07-28 19:04:48,253 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:48,253 INFO L93 Difference]: Finished difference Result 204 states and 303 transitions. [2020-07-28 19:04:48,253 INFO L276 IsEmpty]: Start isEmpty. Operand 204 states and 303 transitions. [2020-07-28 19:04:48,254 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:04:48,254 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:04:48,254 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:04:48,254 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:04:48,254 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 202 states. [2020-07-28 19:04:48,259 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 202 states to 202 states and 302 transitions. [2020-07-28 19:04:48,260 INFO L78 Accepts]: Start accepts. Automaton has 202 states and 302 transitions. Word has length 33 [2020-07-28 19:04:48,260 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:04:48,260 INFO L479 AbstractCegarLoop]: Abstraction has 202 states and 302 transitions. [2020-07-28 19:04:48,260 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 19:04:48,260 INFO L276 IsEmpty]: Start isEmpty. Operand 202 states and 302 transitions. [2020-07-28 19:04:48,261 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2020-07-28 19:04:48,261 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:04:48,261 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:04:48,261 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2020-07-28 19:04:48,262 INFO L427 AbstractCegarLoop]: === Iteration 5 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:04:48,262 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:04:48,262 INFO L82 PathProgramCache]: Analyzing trace with hash 965063802, now seen corresponding path program 1 times [2020-07-28 19:04:48,262 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:04:48,262 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [53103819] [2020-07-28 19:04:48,263 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:04:48,291 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:04:48,387 INFO L280 TraceCheckUtils]: 0: Hoare triple {7918#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(13);call #t~string11.base, #t~string11.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string11.base, #t~string11.offset, 1);call write~init~int(110, #t~string11.base, 1 + #t~string11.offset, 1);call write~init~int(0, #t~string11.base, 2 + #t~string11.offset, 1);call #t~string13.base, #t~string13.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string13.base, #t~string13.offset, 1);call write~init~int(102, #t~string13.base, 1 + #t~string13.offset, 1);call write~init~int(102, #t~string13.base, 2 + #t~string13.offset, 1);call write~init~int(0, #t~string13.base, 3 + #t~string13.offset, 1);call #t~string15.base, #t~string15.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string15.base, #t~string15.offset, 1);call write~init~int(80, #t~string15.base, 1 + #t~string15.offset, 1);call write~init~int(117, #t~string15.base, 2 + #t~string15.offset, 1);call write~init~int(109, #t~string15.base, 3 + #t~string15.offset, 1);call write~init~int(112, #t~string15.base, 4 + #t~string15.offset, 1);call write~init~int(58, #t~string15.base, 5 + #t~string15.offset, 1);call write~init~int(0, #t~string15.base, 6 + #t~string15.offset, 1);call #t~string17.base, #t~string17.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string17.base, #t~string17.offset, 1);call write~init~int(110, #t~string17.base, 1 + #t~string17.offset, 1);call write~init~int(0, #t~string17.base, 2 + #t~string17.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string19.base, #t~string19.offset, 1);call write~init~int(102, #t~string19.base, 1 + #t~string19.offset, 1);call write~init~int(102, #t~string19.base, 2 + #t~string19.offset, 1);call write~init~int(0, #t~string19.base, 3 + #t~string19.offset, 1);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string21.base, #t~string21.offset, 1);call write~init~int(32, #t~string21.base, 1 + #t~string21.offset, 1);call write~init~int(0, #t~string21.base, 2 + #t~string21.offset, 1);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string23.base, #t~string23.offset, 1);call write~init~int(0, #t~string23.base, 1 + #t~string23.offset, 1);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(30);call #t~string49.base, #t~string49.offset := #Ultimate.allocOnStack(9);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(21);call #t~string51.base, #t~string51.offset := #Ultimate.allocOnStack(30);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(9);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(21);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(25);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(30);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(9);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(25);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(13);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string68.base, #t~string68.offset, 1);call write~init~int(77, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(101, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(116, #t~string68.base, 3 + #t~string68.offset, 1);call write~init~int(104, #t~string68.base, 4 + #t~string68.offset, 1);call write~init~int(58, #t~string68.base, 5 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 6 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string70.base, #t~string70.offset, 1);call write~init~int(82, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(73, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(84, #t~string70.base, 3 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 4 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string72.base, #t~string72.offset, 1);call write~init~int(75, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 2 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string74.base, #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 1 + #t~string74.offset, 1);~cleanupTimeShifts~0 := 4;~__SELECTED_FEATURE_base~0 := 0;~__SELECTED_FEATURE_highWaterSensor~0 := 0;~__SELECTED_FEATURE_lowWaterSensor~0 := 0;~__SELECTED_FEATURE_methaneQuery~0 := 0;~__SELECTED_FEATURE_methaneAlarm~0 := 0;~__SELECTED_FEATURE_stopCommand~0 := 0;~__SELECTED_FEATURE_startCommand~0 := 0;~__GUIDSL_ROOT_PRODUCTION~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {7920#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:48,388 INFO L280 TraceCheckUtils]: 1: Hoare triple {7920#(= 1 ~waterLevel~0)} havoc main_#res;havoc main_#t~ret0, main_~retValue_acc~0, main_~tmp~0;havoc main_~retValue_acc~0;havoc main_~tmp~0;~__GUIDSL_ROOT_PRODUCTION~0 := 1; {7920#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:48,389 INFO L280 TraceCheckUtils]: 2: Hoare triple {7920#(= 1 ~waterLevel~0)} havoc select_features_#t~ret76, select_features_#t~ret77, select_features_#t~ret78, select_features_#t~ret79, select_features_#t~ret80, select_features_#t~ret81;~__SELECTED_FEATURE_base~0 := 1;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {7921#(= ~__SELECTED_FEATURE_base~0 ~waterLevel~0)} is VALID [2020-07-28 19:04:48,389 INFO L280 TraceCheckUtils]: 3: Hoare triple {7921#(= ~__SELECTED_FEATURE_base~0 ~waterLevel~0)} select_features_#t~ret76 := select_one_#res;assume -2147483648 <= select_features_#t~ret76 && select_features_#t~ret76 <= 2147483647;~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret76;havoc select_features_#t~ret76;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {7921#(= ~__SELECTED_FEATURE_base~0 ~waterLevel~0)} is VALID [2020-07-28 19:04:48,390 INFO L280 TraceCheckUtils]: 4: Hoare triple {7921#(= ~__SELECTED_FEATURE_base~0 ~waterLevel~0)} select_features_#t~ret77 := select_one_#res;assume -2147483648 <= select_features_#t~ret77 && select_features_#t~ret77 <= 2147483647;~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret77;havoc select_features_#t~ret77;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {7921#(= ~__SELECTED_FEATURE_base~0 ~waterLevel~0)} is VALID [2020-07-28 19:04:48,391 INFO L280 TraceCheckUtils]: 5: Hoare triple {7921#(= ~__SELECTED_FEATURE_base~0 ~waterLevel~0)} select_features_#t~ret78 := select_one_#res;assume -2147483648 <= select_features_#t~ret78 && select_features_#t~ret78 <= 2147483647;~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret78;havoc select_features_#t~ret78;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {7921#(= ~__SELECTED_FEATURE_base~0 ~waterLevel~0)} is VALID [2020-07-28 19:04:48,391 INFO L280 TraceCheckUtils]: 6: Hoare triple {7921#(= ~__SELECTED_FEATURE_base~0 ~waterLevel~0)} select_features_#t~ret79 := select_one_#res;assume -2147483648 <= select_features_#t~ret79 && select_features_#t~ret79 <= 2147483647;~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret79;havoc select_features_#t~ret79;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {7921#(= ~__SELECTED_FEATURE_base~0 ~waterLevel~0)} is VALID [2020-07-28 19:04:48,392 INFO L280 TraceCheckUtils]: 7: Hoare triple {7921#(= ~__SELECTED_FEATURE_base~0 ~waterLevel~0)} select_features_#t~ret80 := select_one_#res;assume -2147483648 <= select_features_#t~ret80 && select_features_#t~ret80 <= 2147483647;~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret80;havoc select_features_#t~ret80;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {7921#(= ~__SELECTED_FEATURE_base~0 ~waterLevel~0)} is VALID [2020-07-28 19:04:48,392 INFO L280 TraceCheckUtils]: 8: Hoare triple {7921#(= ~__SELECTED_FEATURE_base~0 ~waterLevel~0)} select_features_#t~ret81 := select_one_#res;assume -2147483648 <= select_features_#t~ret81 && select_features_#t~ret81 <= 2147483647;~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret81;havoc select_features_#t~ret81; {7921#(= ~__SELECTED_FEATURE_base~0 ~waterLevel~0)} is VALID [2020-07-28 19:04:48,393 INFO L280 TraceCheckUtils]: 9: Hoare triple {7921#(= ~__SELECTED_FEATURE_base~0 ~waterLevel~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~13;havoc valid_product_~retValue_acc~13;valid_product_~retValue_acc~13 := ~__SELECTED_FEATURE_base~0;valid_product_#res := valid_product_~retValue_acc~13; {7922#(= |ULTIMATE.start_valid_product_#res| ~waterLevel~0)} is VALID [2020-07-28 19:04:48,400 INFO L280 TraceCheckUtils]: 10: Hoare triple {7922#(= |ULTIMATE.start_valid_product_#res| ~waterLevel~0)} main_#t~ret0 := valid_product_#res;assume -2147483648 <= main_#t~ret0 && main_#t~ret0 <= 2147483647;main_~tmp~0 := main_#t~ret0;havoc main_#t~ret0; {7923#(= ULTIMATE.start_main_~tmp~0 ~waterLevel~0)} is VALID [2020-07-28 19:04:48,402 INFO L280 TraceCheckUtils]: 11: Hoare triple {7923#(= ULTIMATE.start_main_~tmp~0 ~waterLevel~0)} assume 0 != main_~tmp~0; {7924#(not (= 0 ~waterLevel~0))} is VALID [2020-07-28 19:04:48,403 INFO L280 TraceCheckUtils]: 12: Hoare triple {7924#(not (= 0 ~waterLevel~0))} havoc test_#t~nondet26, test_#t~nondet27, test_#t~nondet28, test_#t~nondet29, test_~splverifierCounter~0, test_~tmp~8, test_~tmp___0~3, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~8;havoc test_~tmp___0~3;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {7924#(not (= 0 ~waterLevel~0))} is VALID [2020-07-28 19:04:48,404 INFO L280 TraceCheckUtils]: 13: Hoare triple {7924#(not (= 0 ~waterLevel~0))} assume !false; {7924#(not (= 0 ~waterLevel~0))} is VALID [2020-07-28 19:04:48,405 INFO L280 TraceCheckUtils]: 14: Hoare triple {7924#(not (= 0 ~waterLevel~0))} assume test_~splverifierCounter~0 < 4; {7924#(not (= 0 ~waterLevel~0))} is VALID [2020-07-28 19:04:48,405 INFO L280 TraceCheckUtils]: 15: Hoare triple {7924#(not (= 0 ~waterLevel~0))} assume -2147483648 <= test_#t~nondet26 && test_#t~nondet26 <= 2147483647;test_~tmp~8 := test_#t~nondet26;havoc test_#t~nondet26; {7924#(not (= 0 ~waterLevel~0))} is VALID [2020-07-28 19:04:48,406 INFO L280 TraceCheckUtils]: 16: Hoare triple {7924#(not (= 0 ~waterLevel~0))} assume !(0 != test_~tmp~8); {7924#(not (= 0 ~waterLevel~0))} is VALID [2020-07-28 19:04:48,407 INFO L280 TraceCheckUtils]: 17: Hoare triple {7924#(not (= 0 ~waterLevel~0))} assume -2147483648 <= test_#t~nondet27 && test_#t~nondet27 <= 2147483647;test_~tmp___0~3 := test_#t~nondet27;havoc test_#t~nondet27; {7924#(not (= 0 ~waterLevel~0))} is VALID [2020-07-28 19:04:48,408 INFO L280 TraceCheckUtils]: 18: Hoare triple {7924#(not (= 0 ~waterLevel~0))} assume !(0 != test_~tmp___0~3); {7924#(not (= 0 ~waterLevel~0))} is VALID [2020-07-28 19:04:48,408 INFO L280 TraceCheckUtils]: 19: Hoare triple {7924#(not (= 0 ~waterLevel~0))} assume -2147483648 <= test_#t~nondet28 && test_#t~nondet28 <= 2147483647;test_~tmp___2~0 := test_#t~nondet28;havoc test_#t~nondet28; {7924#(not (= 0 ~waterLevel~0))} is VALID [2020-07-28 19:04:48,409 INFO L280 TraceCheckUtils]: 20: Hoare triple {7924#(not (= 0 ~waterLevel~0))} assume !(0 != test_~tmp___2~0);assume -2147483648 <= test_#t~nondet29 && test_#t~nondet29 <= 2147483647;test_~tmp___1~0 := test_#t~nondet29;havoc test_#t~nondet29; {7924#(not (= 0 ~waterLevel~0))} is VALID [2020-07-28 19:04:48,410 INFO L280 TraceCheckUtils]: 21: Hoare triple {7924#(not (= 0 ~waterLevel~0))} assume 0 != test_~tmp___1~0; {7924#(not (= 0 ~waterLevel~0))} is VALID [2020-07-28 19:04:48,410 INFO L280 TraceCheckUtils]: 22: Hoare triple {7924#(not (= 0 ~waterLevel~0))} assume 0 != ~__SELECTED_FEATURE_stopCommand~0; {7924#(not (= 0 ~waterLevel~0))} is VALID [2020-07-28 19:04:48,411 INFO L280 TraceCheckUtils]: 23: Hoare triple {7924#(not (= 0 ~waterLevel~0))} assume !(0 != ~pumpRunning~0); {7924#(not (= 0 ~waterLevel~0))} is VALID [2020-07-28 19:04:48,412 INFO L280 TraceCheckUtils]: 24: Hoare triple {7924#(not (= 0 ~waterLevel~0))} ~systemActive~0 := 0; {7924#(not (= 0 ~waterLevel~0))} is VALID [2020-07-28 19:04:48,413 INFO L280 TraceCheckUtils]: 25: Hoare triple {7924#(not (= 0 ~waterLevel~0))} assume !(0 != ~pumpRunning~0); {7924#(not (= 0 ~waterLevel~0))} is VALID [2020-07-28 19:04:48,413 INFO L280 TraceCheckUtils]: 26: Hoare triple {7924#(not (= 0 ~waterLevel~0))} assume !(0 != ~systemActive~0); {7924#(not (= 0 ~waterLevel~0))} is VALID [2020-07-28 19:04:48,414 INFO L280 TraceCheckUtils]: 27: Hoare triple {7924#(not (= 0 ~waterLevel~0))} havoc __utac_acc__Specification4_spec__1_#t~ret1, __utac_acc__Specification4_spec__1_#t~ret2, __utac_acc__Specification4_spec__1_~tmp~1, __utac_acc__Specification4_spec__1_~tmp___0~0;havoc __utac_acc__Specification4_spec__1_~tmp~1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~9;havoc getWaterLevel_~retValue_acc~9;getWaterLevel_~retValue_acc~9 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~9; {7925#(not (= 0 |ULTIMATE.start_getWaterLevel_#res|))} is VALID [2020-07-28 19:04:48,415 INFO L280 TraceCheckUtils]: 28: Hoare triple {7925#(not (= 0 |ULTIMATE.start_getWaterLevel_#res|))} __utac_acc__Specification4_spec__1_#t~ret1 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret1 && __utac_acc__Specification4_spec__1_#t~ret1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1 := __utac_acc__Specification4_spec__1_#t~ret1;havoc __utac_acc__Specification4_spec__1_#t~ret1; {7926#(not (= 0 ULTIMATE.start___utac_acc__Specification4_spec__1_~tmp~1))} is VALID [2020-07-28 19:04:48,416 INFO L280 TraceCheckUtils]: 29: Hoare triple {7926#(not (= 0 ULTIMATE.start___utac_acc__Specification4_spec__1_~tmp~1))} assume 0 == __utac_acc__Specification4_spec__1_~tmp~1;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~2;havoc isPumpRunning_~retValue_acc~2;isPumpRunning_~retValue_acc~2 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~2; {7919#false} is VALID [2020-07-28 19:04:48,416 INFO L280 TraceCheckUtils]: 30: Hoare triple {7919#false} __utac_acc__Specification4_spec__1_#t~ret2 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret2 && __utac_acc__Specification4_spec__1_#t~ret2 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0 := __utac_acc__Specification4_spec__1_#t~ret2;havoc __utac_acc__Specification4_spec__1_#t~ret2; {7919#false} is VALID [2020-07-28 19:04:48,416 INFO L280 TraceCheckUtils]: 31: Hoare triple {7919#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0; {7919#false} is VALID [2020-07-28 19:04:48,417 INFO L280 TraceCheckUtils]: 32: Hoare triple {7919#false} assume !false; {7919#false} is VALID [2020-07-28 19:04:48,419 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:04:48,419 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [53103819] [2020-07-28 19:04:48,420 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:04:48,420 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2020-07-28 19:04:48,420 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1630051359] [2020-07-28 19:04:48,421 INFO L78 Accepts]: Start accepts. Automaton has 9 states. Word has length 33 [2020-07-28 19:04:48,421 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:04:48,421 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 9 states. [2020-07-28 19:04:48,466 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 33 edges. 33 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:04:48,467 INFO L459 AbstractCegarLoop]: Interpolant automaton has 9 states [2020-07-28 19:04:48,467 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:04:48,467 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2020-07-28 19:04:48,467 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=56, Unknown=0, NotChecked=0, Total=72 [2020-07-28 19:04:48,467 INFO L87 Difference]: Start difference. First operand 202 states and 302 transitions. Second operand 9 states. [2020-07-28 19:04:54,050 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:54,050 INFO L93 Difference]: Finished difference Result 1414 states and 2168 transitions. [2020-07-28 19:04:54,050 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2020-07-28 19:04:54,051 INFO L78 Accepts]: Start accepts. Automaton has 9 states. Word has length 33 [2020-07-28 19:04:54,051 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:04:54,051 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 9 states. [2020-07-28 19:04:54,061 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14 states to 14 states and 1716 transitions. [2020-07-28 19:04:54,061 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 9 states. [2020-07-28 19:04:54,071 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14 states to 14 states and 1716 transitions. [2020-07-28 19:04:54,071 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 14 states and 1716 transitions. [2020-07-28 19:04:56,031 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 1716 edges. 1716 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:04:56,109 INFO L225 Difference]: With dead ends: 1414 [2020-07-28 19:04:56,109 INFO L226 Difference]: Without dead ends: 1225 [2020-07-28 19:04:56,110 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 28 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=86, Invalid=220, Unknown=0, NotChecked=0, Total=306 [2020-07-28 19:04:56,113 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1225 states. [2020-07-28 19:04:56,971 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1225 to 491. [2020-07-28 19:04:56,971 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:04:56,971 INFO L82 GeneralOperation]: Start isEquivalent. First operand 1225 states. Second operand 491 states. [2020-07-28 19:04:56,972 INFO L74 IsIncluded]: Start isIncluded. First operand 1225 states. Second operand 491 states. [2020-07-28 19:04:56,972 INFO L87 Difference]: Start difference. First operand 1225 states. Second operand 491 states. [2020-07-28 19:04:57,035 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:57,035 INFO L93 Difference]: Finished difference Result 1225 states and 1860 transitions. [2020-07-28 19:04:57,035 INFO L276 IsEmpty]: Start isEmpty. Operand 1225 states and 1860 transitions. [2020-07-28 19:04:57,038 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:04:57,038 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:04:57,038 INFO L74 IsIncluded]: Start isIncluded. First operand 491 states. Second operand 1225 states. [2020-07-28 19:04:57,039 INFO L87 Difference]: Start difference. First operand 491 states. Second operand 1225 states. [2020-07-28 19:04:57,093 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:57,094 INFO L93 Difference]: Finished difference Result 1225 states and 1860 transitions. [2020-07-28 19:04:57,094 INFO L276 IsEmpty]: Start isEmpty. Operand 1225 states and 1860 transitions. [2020-07-28 19:04:57,097 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:04:57,097 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:04:57,097 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:04:57,097 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:04:57,097 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 491 states. [2020-07-28 19:04:57,110 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 491 states to 491 states and 730 transitions. [2020-07-28 19:04:57,110 INFO L78 Accepts]: Start accepts. Automaton has 491 states and 730 transitions. Word has length 33 [2020-07-28 19:04:57,110 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:04:57,110 INFO L479 AbstractCegarLoop]: Abstraction has 491 states and 730 transitions. [2020-07-28 19:04:57,110 INFO L480 AbstractCegarLoop]: Interpolant automaton has 9 states. [2020-07-28 19:04:57,111 INFO L276 IsEmpty]: Start isEmpty. Operand 491 states and 730 transitions. [2020-07-28 19:04:57,112 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2020-07-28 19:04:57,112 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:04:57,112 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:04:57,112 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2020-07-28 19:04:57,113 INFO L427 AbstractCegarLoop]: === Iteration 6 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:04:57,113 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:04:57,113 INFO L82 PathProgramCache]: Analyzing trace with hash -1610564718, now seen corresponding path program 1 times [2020-07-28 19:04:57,113 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:04:57,114 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1984540744] [2020-07-28 19:04:57,114 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:04:57,143 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:04:57,200 INFO L280 TraceCheckUtils]: 0: Hoare triple {12951#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(13);call #t~string11.base, #t~string11.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string11.base, #t~string11.offset, 1);call write~init~int(110, #t~string11.base, 1 + #t~string11.offset, 1);call write~init~int(0, #t~string11.base, 2 + #t~string11.offset, 1);call #t~string13.base, #t~string13.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string13.base, #t~string13.offset, 1);call write~init~int(102, #t~string13.base, 1 + #t~string13.offset, 1);call write~init~int(102, #t~string13.base, 2 + #t~string13.offset, 1);call write~init~int(0, #t~string13.base, 3 + #t~string13.offset, 1);call #t~string15.base, #t~string15.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string15.base, #t~string15.offset, 1);call write~init~int(80, #t~string15.base, 1 + #t~string15.offset, 1);call write~init~int(117, #t~string15.base, 2 + #t~string15.offset, 1);call write~init~int(109, #t~string15.base, 3 + #t~string15.offset, 1);call write~init~int(112, #t~string15.base, 4 + #t~string15.offset, 1);call write~init~int(58, #t~string15.base, 5 + #t~string15.offset, 1);call write~init~int(0, #t~string15.base, 6 + #t~string15.offset, 1);call #t~string17.base, #t~string17.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string17.base, #t~string17.offset, 1);call write~init~int(110, #t~string17.base, 1 + #t~string17.offset, 1);call write~init~int(0, #t~string17.base, 2 + #t~string17.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string19.base, #t~string19.offset, 1);call write~init~int(102, #t~string19.base, 1 + #t~string19.offset, 1);call write~init~int(102, #t~string19.base, 2 + #t~string19.offset, 1);call write~init~int(0, #t~string19.base, 3 + #t~string19.offset, 1);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string21.base, #t~string21.offset, 1);call write~init~int(32, #t~string21.base, 1 + #t~string21.offset, 1);call write~init~int(0, #t~string21.base, 2 + #t~string21.offset, 1);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string23.base, #t~string23.offset, 1);call write~init~int(0, #t~string23.base, 1 + #t~string23.offset, 1);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(30);call #t~string49.base, #t~string49.offset := #Ultimate.allocOnStack(9);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(21);call #t~string51.base, #t~string51.offset := #Ultimate.allocOnStack(30);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(9);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(21);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(25);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(30);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(9);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(25);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(13);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string68.base, #t~string68.offset, 1);call write~init~int(77, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(101, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(116, #t~string68.base, 3 + #t~string68.offset, 1);call write~init~int(104, #t~string68.base, 4 + #t~string68.offset, 1);call write~init~int(58, #t~string68.base, 5 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 6 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string70.base, #t~string70.offset, 1);call write~init~int(82, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(73, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(84, #t~string70.base, 3 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 4 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string72.base, #t~string72.offset, 1);call write~init~int(75, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 2 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string74.base, #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 1 + #t~string74.offset, 1);~cleanupTimeShifts~0 := 4;~__SELECTED_FEATURE_base~0 := 0;~__SELECTED_FEATURE_highWaterSensor~0 := 0;~__SELECTED_FEATURE_lowWaterSensor~0 := 0;~__SELECTED_FEATURE_methaneQuery~0 := 0;~__SELECTED_FEATURE_methaneAlarm~0 := 0;~__SELECTED_FEATURE_stopCommand~0 := 0;~__SELECTED_FEATURE_startCommand~0 := 0;~__GUIDSL_ROOT_PRODUCTION~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {12953#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,203 INFO L280 TraceCheckUtils]: 1: Hoare triple {12953#(= 1 ~waterLevel~0)} havoc main_#res;havoc main_#t~ret0, main_~retValue_acc~0, main_~tmp~0;havoc main_~retValue_acc~0;havoc main_~tmp~0;~__GUIDSL_ROOT_PRODUCTION~0 := 1; {12953#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,203 INFO L280 TraceCheckUtils]: 2: Hoare triple {12953#(= 1 ~waterLevel~0)} havoc select_features_#t~ret76, select_features_#t~ret77, select_features_#t~ret78, select_features_#t~ret79, select_features_#t~ret80, select_features_#t~ret81;~__SELECTED_FEATURE_base~0 := 1;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {12953#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,204 INFO L280 TraceCheckUtils]: 3: Hoare triple {12953#(= 1 ~waterLevel~0)} select_features_#t~ret76 := select_one_#res;assume -2147483648 <= select_features_#t~ret76 && select_features_#t~ret76 <= 2147483647;~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret76;havoc select_features_#t~ret76;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {12953#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,205 INFO L280 TraceCheckUtils]: 4: Hoare triple {12953#(= 1 ~waterLevel~0)} select_features_#t~ret77 := select_one_#res;assume -2147483648 <= select_features_#t~ret77 && select_features_#t~ret77 <= 2147483647;~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret77;havoc select_features_#t~ret77;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {12953#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,205 INFO L280 TraceCheckUtils]: 5: Hoare triple {12953#(= 1 ~waterLevel~0)} select_features_#t~ret78 := select_one_#res;assume -2147483648 <= select_features_#t~ret78 && select_features_#t~ret78 <= 2147483647;~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret78;havoc select_features_#t~ret78;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {12953#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,206 INFO L280 TraceCheckUtils]: 6: Hoare triple {12953#(= 1 ~waterLevel~0)} select_features_#t~ret79 := select_one_#res;assume -2147483648 <= select_features_#t~ret79 && select_features_#t~ret79 <= 2147483647;~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret79;havoc select_features_#t~ret79;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {12953#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,206 INFO L280 TraceCheckUtils]: 7: Hoare triple {12953#(= 1 ~waterLevel~0)} select_features_#t~ret80 := select_one_#res;assume -2147483648 <= select_features_#t~ret80 && select_features_#t~ret80 <= 2147483647;~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret80;havoc select_features_#t~ret80;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {12953#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,207 INFO L280 TraceCheckUtils]: 8: Hoare triple {12953#(= 1 ~waterLevel~0)} select_features_#t~ret81 := select_one_#res;assume -2147483648 <= select_features_#t~ret81 && select_features_#t~ret81 <= 2147483647;~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret81;havoc select_features_#t~ret81; {12953#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,208 INFO L280 TraceCheckUtils]: 9: Hoare triple {12953#(= 1 ~waterLevel~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~13;havoc valid_product_~retValue_acc~13;valid_product_~retValue_acc~13 := ~__SELECTED_FEATURE_base~0;valid_product_#res := valid_product_~retValue_acc~13; {12953#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,209 INFO L280 TraceCheckUtils]: 10: Hoare triple {12953#(= 1 ~waterLevel~0)} main_#t~ret0 := valid_product_#res;assume -2147483648 <= main_#t~ret0 && main_#t~ret0 <= 2147483647;main_~tmp~0 := main_#t~ret0;havoc main_#t~ret0; {12953#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,210 INFO L280 TraceCheckUtils]: 11: Hoare triple {12953#(= 1 ~waterLevel~0)} assume 0 != main_~tmp~0; {12953#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,210 INFO L280 TraceCheckUtils]: 12: Hoare triple {12953#(= 1 ~waterLevel~0)} havoc test_#t~nondet26, test_#t~nondet27, test_#t~nondet28, test_#t~nondet29, test_~splverifierCounter~0, test_~tmp~8, test_~tmp___0~3, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~8;havoc test_~tmp___0~3;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {12953#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,211 INFO L280 TraceCheckUtils]: 13: Hoare triple {12953#(= 1 ~waterLevel~0)} assume !false; {12953#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,211 INFO L280 TraceCheckUtils]: 14: Hoare triple {12953#(= 1 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {12953#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,212 INFO L280 TraceCheckUtils]: 15: Hoare triple {12953#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet26 && test_#t~nondet26 <= 2147483647;test_~tmp~8 := test_#t~nondet26;havoc test_#t~nondet26; {12953#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,213 INFO L280 TraceCheckUtils]: 16: Hoare triple {12953#(= 1 ~waterLevel~0)} assume 0 != test_~tmp~8; {12953#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,213 INFO L280 TraceCheckUtils]: 17: Hoare triple {12953#(= 1 ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {12954#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,214 INFO L280 TraceCheckUtils]: 18: Hoare triple {12954#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet27 && test_#t~nondet27 <= 2147483647;test_~tmp___0~3 := test_#t~nondet27;havoc test_#t~nondet27; {12954#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,215 INFO L280 TraceCheckUtils]: 19: Hoare triple {12954#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp___0~3); {12954#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,215 INFO L280 TraceCheckUtils]: 20: Hoare triple {12954#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet28 && test_#t~nondet28 <= 2147483647;test_~tmp___2~0 := test_#t~nondet28;havoc test_#t~nondet28; {12954#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,216 INFO L280 TraceCheckUtils]: 21: Hoare triple {12954#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp___2~0);assume -2147483648 <= test_#t~nondet29 && test_#t~nondet29 <= 2147483647;test_~tmp___1~0 := test_#t~nondet29;havoc test_#t~nondet29; {12954#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,216 INFO L280 TraceCheckUtils]: 22: Hoare triple {12954#(<= 2 ~waterLevel~0)} assume 0 != test_~tmp___1~0; {12954#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,217 INFO L280 TraceCheckUtils]: 23: Hoare triple {12954#(<= 2 ~waterLevel~0)} assume 0 != ~__SELECTED_FEATURE_stopCommand~0; {12954#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,217 INFO L280 TraceCheckUtils]: 24: Hoare triple {12954#(<= 2 ~waterLevel~0)} assume !(0 != ~pumpRunning~0); {12954#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,218 INFO L280 TraceCheckUtils]: 25: Hoare triple {12954#(<= 2 ~waterLevel~0)} ~systemActive~0 := 0; {12954#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,219 INFO L280 TraceCheckUtils]: 26: Hoare triple {12954#(<= 2 ~waterLevel~0)} assume !(0 != ~pumpRunning~0); {12954#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,219 INFO L280 TraceCheckUtils]: 27: Hoare triple {12954#(<= 2 ~waterLevel~0)} assume !(0 != ~systemActive~0); {12954#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,220 INFO L280 TraceCheckUtils]: 28: Hoare triple {12954#(<= 2 ~waterLevel~0)} havoc __utac_acc__Specification4_spec__1_#t~ret1, __utac_acc__Specification4_spec__1_#t~ret2, __utac_acc__Specification4_spec__1_~tmp~1, __utac_acc__Specification4_spec__1_~tmp___0~0;havoc __utac_acc__Specification4_spec__1_~tmp~1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~9;havoc getWaterLevel_~retValue_acc~9;getWaterLevel_~retValue_acc~9 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~9; {12954#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,220 INFO L280 TraceCheckUtils]: 29: Hoare triple {12954#(<= 2 ~waterLevel~0)} __utac_acc__Specification4_spec__1_#t~ret1 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret1 && __utac_acc__Specification4_spec__1_#t~ret1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1 := __utac_acc__Specification4_spec__1_#t~ret1;havoc __utac_acc__Specification4_spec__1_#t~ret1; {12954#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,221 INFO L280 TraceCheckUtils]: 30: Hoare triple {12954#(<= 2 ~waterLevel~0)} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~1); {12954#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,222 INFO L280 TraceCheckUtils]: 31: Hoare triple {12954#(<= 2 ~waterLevel~0)} assume !false; {12954#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,222 INFO L280 TraceCheckUtils]: 32: Hoare triple {12954#(<= 2 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {12954#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,223 INFO L280 TraceCheckUtils]: 33: Hoare triple {12954#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet26 && test_#t~nondet26 <= 2147483647;test_~tmp~8 := test_#t~nondet26;havoc test_#t~nondet26; {12954#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,223 INFO L280 TraceCheckUtils]: 34: Hoare triple {12954#(<= 2 ~waterLevel~0)} assume 0 != test_~tmp~8; {12954#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,224 INFO L280 TraceCheckUtils]: 35: Hoare triple {12954#(<= 2 ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {12952#false} is VALID [2020-07-28 19:04:57,224 INFO L280 TraceCheckUtils]: 36: Hoare triple {12952#false} assume -2147483648 <= test_#t~nondet27 && test_#t~nondet27 <= 2147483647;test_~tmp___0~3 := test_#t~nondet27;havoc test_#t~nondet27; {12952#false} is VALID [2020-07-28 19:04:57,224 INFO L280 TraceCheckUtils]: 37: Hoare triple {12952#false} assume !(0 != test_~tmp___0~3); {12952#false} is VALID [2020-07-28 19:04:57,225 INFO L280 TraceCheckUtils]: 38: Hoare triple {12952#false} assume -2147483648 <= test_#t~nondet28 && test_#t~nondet28 <= 2147483647;test_~tmp___2~0 := test_#t~nondet28;havoc test_#t~nondet28; {12952#false} is VALID [2020-07-28 19:04:57,225 INFO L280 TraceCheckUtils]: 39: Hoare triple {12952#false} assume !(0 != test_~tmp___2~0);assume -2147483648 <= test_#t~nondet29 && test_#t~nondet29 <= 2147483647;test_~tmp___1~0 := test_#t~nondet29;havoc test_#t~nondet29; {12952#false} is VALID [2020-07-28 19:04:57,225 INFO L280 TraceCheckUtils]: 40: Hoare triple {12952#false} assume !(0 != test_~tmp___1~0); {12952#false} is VALID [2020-07-28 19:04:57,225 INFO L280 TraceCheckUtils]: 41: Hoare triple {12952#false} assume !(0 != ~pumpRunning~0); {12952#false} is VALID [2020-07-28 19:04:57,226 INFO L280 TraceCheckUtils]: 42: Hoare triple {12952#false} assume !(0 != ~systemActive~0); {12952#false} is VALID [2020-07-28 19:04:57,226 INFO L280 TraceCheckUtils]: 43: Hoare triple {12952#false} havoc __utac_acc__Specification4_spec__1_#t~ret1, __utac_acc__Specification4_spec__1_#t~ret2, __utac_acc__Specification4_spec__1_~tmp~1, __utac_acc__Specification4_spec__1_~tmp___0~0;havoc __utac_acc__Specification4_spec__1_~tmp~1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~9;havoc getWaterLevel_~retValue_acc~9;getWaterLevel_~retValue_acc~9 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~9; {12952#false} is VALID [2020-07-28 19:04:57,227 INFO L280 TraceCheckUtils]: 44: Hoare triple {12952#false} __utac_acc__Specification4_spec__1_#t~ret1 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret1 && __utac_acc__Specification4_spec__1_#t~ret1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1 := __utac_acc__Specification4_spec__1_#t~ret1;havoc __utac_acc__Specification4_spec__1_#t~ret1; {12952#false} is VALID [2020-07-28 19:04:57,228 INFO L280 TraceCheckUtils]: 45: Hoare triple {12952#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~1;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~2;havoc isPumpRunning_~retValue_acc~2;isPumpRunning_~retValue_acc~2 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~2; {12952#false} is VALID [2020-07-28 19:04:57,228 INFO L280 TraceCheckUtils]: 46: Hoare triple {12952#false} __utac_acc__Specification4_spec__1_#t~ret2 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret2 && __utac_acc__Specification4_spec__1_#t~ret2 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0 := __utac_acc__Specification4_spec__1_#t~ret2;havoc __utac_acc__Specification4_spec__1_#t~ret2; {12952#false} is VALID [2020-07-28 19:04:57,228 INFO L280 TraceCheckUtils]: 47: Hoare triple {12952#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0; {12952#false} is VALID [2020-07-28 19:04:57,228 INFO L280 TraceCheckUtils]: 48: Hoare triple {12952#false} assume !false; {12952#false} is VALID [2020-07-28 19:04:57,234 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 10 proven. 5 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:04:57,234 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1984540744] [2020-07-28 19:04:57,234 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [951637012] [2020-07-28 19:04:57,235 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 2 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2020-07-28 19:04:57,394 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:04:57,396 INFO L263 TraceCheckSpWp]: Trace formula consists of 447 conjuncts, 3 conjunts are in the unsatisfiable core [2020-07-28 19:04:57,423 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:04:57,429 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2020-07-28 19:04:57,619 INFO L280 TraceCheckUtils]: 0: Hoare triple {12951#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(13);call #t~string11.base, #t~string11.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string11.base, #t~string11.offset, 1);call write~init~int(110, #t~string11.base, 1 + #t~string11.offset, 1);call write~init~int(0, #t~string11.base, 2 + #t~string11.offset, 1);call #t~string13.base, #t~string13.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string13.base, #t~string13.offset, 1);call write~init~int(102, #t~string13.base, 1 + #t~string13.offset, 1);call write~init~int(102, #t~string13.base, 2 + #t~string13.offset, 1);call write~init~int(0, #t~string13.base, 3 + #t~string13.offset, 1);call #t~string15.base, #t~string15.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string15.base, #t~string15.offset, 1);call write~init~int(80, #t~string15.base, 1 + #t~string15.offset, 1);call write~init~int(117, #t~string15.base, 2 + #t~string15.offset, 1);call write~init~int(109, #t~string15.base, 3 + #t~string15.offset, 1);call write~init~int(112, #t~string15.base, 4 + #t~string15.offset, 1);call write~init~int(58, #t~string15.base, 5 + #t~string15.offset, 1);call write~init~int(0, #t~string15.base, 6 + #t~string15.offset, 1);call #t~string17.base, #t~string17.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string17.base, #t~string17.offset, 1);call write~init~int(110, #t~string17.base, 1 + #t~string17.offset, 1);call write~init~int(0, #t~string17.base, 2 + #t~string17.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string19.base, #t~string19.offset, 1);call write~init~int(102, #t~string19.base, 1 + #t~string19.offset, 1);call write~init~int(102, #t~string19.base, 2 + #t~string19.offset, 1);call write~init~int(0, #t~string19.base, 3 + #t~string19.offset, 1);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string21.base, #t~string21.offset, 1);call write~init~int(32, #t~string21.base, 1 + #t~string21.offset, 1);call write~init~int(0, #t~string21.base, 2 + #t~string21.offset, 1);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string23.base, #t~string23.offset, 1);call write~init~int(0, #t~string23.base, 1 + #t~string23.offset, 1);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(30);call #t~string49.base, #t~string49.offset := #Ultimate.allocOnStack(9);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(21);call #t~string51.base, #t~string51.offset := #Ultimate.allocOnStack(30);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(9);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(21);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(25);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(30);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(9);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(25);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(13);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string68.base, #t~string68.offset, 1);call write~init~int(77, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(101, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(116, #t~string68.base, 3 + #t~string68.offset, 1);call write~init~int(104, #t~string68.base, 4 + #t~string68.offset, 1);call write~init~int(58, #t~string68.base, 5 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 6 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string70.base, #t~string70.offset, 1);call write~init~int(82, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(73, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(84, #t~string70.base, 3 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 4 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string72.base, #t~string72.offset, 1);call write~init~int(75, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 2 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string74.base, #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 1 + #t~string74.offset, 1);~cleanupTimeShifts~0 := 4;~__SELECTED_FEATURE_base~0 := 0;~__SELECTED_FEATURE_highWaterSensor~0 := 0;~__SELECTED_FEATURE_lowWaterSensor~0 := 0;~__SELECTED_FEATURE_methaneQuery~0 := 0;~__SELECTED_FEATURE_methaneAlarm~0 := 0;~__SELECTED_FEATURE_stopCommand~0 := 0;~__SELECTED_FEATURE_startCommand~0 := 0;~__GUIDSL_ROOT_PRODUCTION~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {12958#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,620 INFO L280 TraceCheckUtils]: 1: Hoare triple {12958#(<= 1 ~waterLevel~0)} havoc main_#res;havoc main_#t~ret0, main_~retValue_acc~0, main_~tmp~0;havoc main_~retValue_acc~0;havoc main_~tmp~0;~__GUIDSL_ROOT_PRODUCTION~0 := 1; {12958#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,620 INFO L280 TraceCheckUtils]: 2: Hoare triple {12958#(<= 1 ~waterLevel~0)} havoc select_features_#t~ret76, select_features_#t~ret77, select_features_#t~ret78, select_features_#t~ret79, select_features_#t~ret80, select_features_#t~ret81;~__SELECTED_FEATURE_base~0 := 1;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {12958#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,621 INFO L280 TraceCheckUtils]: 3: Hoare triple {12958#(<= 1 ~waterLevel~0)} select_features_#t~ret76 := select_one_#res;assume -2147483648 <= select_features_#t~ret76 && select_features_#t~ret76 <= 2147483647;~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret76;havoc select_features_#t~ret76;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {12958#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,622 INFO L280 TraceCheckUtils]: 4: Hoare triple {12958#(<= 1 ~waterLevel~0)} select_features_#t~ret77 := select_one_#res;assume -2147483648 <= select_features_#t~ret77 && select_features_#t~ret77 <= 2147483647;~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret77;havoc select_features_#t~ret77;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {12958#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,622 INFO L280 TraceCheckUtils]: 5: Hoare triple {12958#(<= 1 ~waterLevel~0)} select_features_#t~ret78 := select_one_#res;assume -2147483648 <= select_features_#t~ret78 && select_features_#t~ret78 <= 2147483647;~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret78;havoc select_features_#t~ret78;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {12958#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,623 INFO L280 TraceCheckUtils]: 6: Hoare triple {12958#(<= 1 ~waterLevel~0)} select_features_#t~ret79 := select_one_#res;assume -2147483648 <= select_features_#t~ret79 && select_features_#t~ret79 <= 2147483647;~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret79;havoc select_features_#t~ret79;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {12958#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,623 INFO L280 TraceCheckUtils]: 7: Hoare triple {12958#(<= 1 ~waterLevel~0)} select_features_#t~ret80 := select_one_#res;assume -2147483648 <= select_features_#t~ret80 && select_features_#t~ret80 <= 2147483647;~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret80;havoc select_features_#t~ret80;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {12958#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,624 INFO L280 TraceCheckUtils]: 8: Hoare triple {12958#(<= 1 ~waterLevel~0)} select_features_#t~ret81 := select_one_#res;assume -2147483648 <= select_features_#t~ret81 && select_features_#t~ret81 <= 2147483647;~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret81;havoc select_features_#t~ret81; {12958#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,624 INFO L280 TraceCheckUtils]: 9: Hoare triple {12958#(<= 1 ~waterLevel~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~13;havoc valid_product_~retValue_acc~13;valid_product_~retValue_acc~13 := ~__SELECTED_FEATURE_base~0;valid_product_#res := valid_product_~retValue_acc~13; {12958#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,625 INFO L280 TraceCheckUtils]: 10: Hoare triple {12958#(<= 1 ~waterLevel~0)} main_#t~ret0 := valid_product_#res;assume -2147483648 <= main_#t~ret0 && main_#t~ret0 <= 2147483647;main_~tmp~0 := main_#t~ret0;havoc main_#t~ret0; {12958#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,626 INFO L280 TraceCheckUtils]: 11: Hoare triple {12958#(<= 1 ~waterLevel~0)} assume 0 != main_~tmp~0; {12958#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,626 INFO L280 TraceCheckUtils]: 12: Hoare triple {12958#(<= 1 ~waterLevel~0)} havoc test_#t~nondet26, test_#t~nondet27, test_#t~nondet28, test_#t~nondet29, test_~splverifierCounter~0, test_~tmp~8, test_~tmp___0~3, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~8;havoc test_~tmp___0~3;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {12958#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,627 INFO L280 TraceCheckUtils]: 13: Hoare triple {12958#(<= 1 ~waterLevel~0)} assume !false; {12958#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,628 INFO L280 TraceCheckUtils]: 14: Hoare triple {12958#(<= 1 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {12958#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,630 INFO L280 TraceCheckUtils]: 15: Hoare triple {12958#(<= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet26 && test_#t~nondet26 <= 2147483647;test_~tmp~8 := test_#t~nondet26;havoc test_#t~nondet26; {12958#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,631 INFO L280 TraceCheckUtils]: 16: Hoare triple {12958#(<= 1 ~waterLevel~0)} assume 0 != test_~tmp~8; {12958#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,632 INFO L280 TraceCheckUtils]: 17: Hoare triple {12958#(<= 1 ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {12954#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,633 INFO L280 TraceCheckUtils]: 18: Hoare triple {12954#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet27 && test_#t~nondet27 <= 2147483647;test_~tmp___0~3 := test_#t~nondet27;havoc test_#t~nondet27; {12954#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,634 INFO L280 TraceCheckUtils]: 19: Hoare triple {12954#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp___0~3); {12954#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,634 INFO L280 TraceCheckUtils]: 20: Hoare triple {12954#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet28 && test_#t~nondet28 <= 2147483647;test_~tmp___2~0 := test_#t~nondet28;havoc test_#t~nondet28; {12954#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,635 INFO L280 TraceCheckUtils]: 21: Hoare triple {12954#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp___2~0);assume -2147483648 <= test_#t~nondet29 && test_#t~nondet29 <= 2147483647;test_~tmp___1~0 := test_#t~nondet29;havoc test_#t~nondet29; {12954#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,636 INFO L280 TraceCheckUtils]: 22: Hoare triple {12954#(<= 2 ~waterLevel~0)} assume 0 != test_~tmp___1~0; {12954#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,637 INFO L280 TraceCheckUtils]: 23: Hoare triple {12954#(<= 2 ~waterLevel~0)} assume 0 != ~__SELECTED_FEATURE_stopCommand~0; {12954#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,638 INFO L280 TraceCheckUtils]: 24: Hoare triple {12954#(<= 2 ~waterLevel~0)} assume !(0 != ~pumpRunning~0); {12954#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,639 INFO L280 TraceCheckUtils]: 25: Hoare triple {12954#(<= 2 ~waterLevel~0)} ~systemActive~0 := 0; {12954#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,640 INFO L280 TraceCheckUtils]: 26: Hoare triple {12954#(<= 2 ~waterLevel~0)} assume !(0 != ~pumpRunning~0); {12954#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,641 INFO L280 TraceCheckUtils]: 27: Hoare triple {12954#(<= 2 ~waterLevel~0)} assume !(0 != ~systemActive~0); {12954#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,642 INFO L280 TraceCheckUtils]: 28: Hoare triple {12954#(<= 2 ~waterLevel~0)} havoc __utac_acc__Specification4_spec__1_#t~ret1, __utac_acc__Specification4_spec__1_#t~ret2, __utac_acc__Specification4_spec__1_~tmp~1, __utac_acc__Specification4_spec__1_~tmp___0~0;havoc __utac_acc__Specification4_spec__1_~tmp~1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~9;havoc getWaterLevel_~retValue_acc~9;getWaterLevel_~retValue_acc~9 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~9; {12954#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,643 INFO L280 TraceCheckUtils]: 29: Hoare triple {12954#(<= 2 ~waterLevel~0)} __utac_acc__Specification4_spec__1_#t~ret1 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret1 && __utac_acc__Specification4_spec__1_#t~ret1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1 := __utac_acc__Specification4_spec__1_#t~ret1;havoc __utac_acc__Specification4_spec__1_#t~ret1; {12954#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,644 INFO L280 TraceCheckUtils]: 30: Hoare triple {12954#(<= 2 ~waterLevel~0)} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~1); {12954#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,644 INFO L280 TraceCheckUtils]: 31: Hoare triple {12954#(<= 2 ~waterLevel~0)} assume !false; {12954#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,645 INFO L280 TraceCheckUtils]: 32: Hoare triple {12954#(<= 2 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {12954#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,646 INFO L280 TraceCheckUtils]: 33: Hoare triple {12954#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet26 && test_#t~nondet26 <= 2147483647;test_~tmp~8 := test_#t~nondet26;havoc test_#t~nondet26; {12954#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,647 INFO L280 TraceCheckUtils]: 34: Hoare triple {12954#(<= 2 ~waterLevel~0)} assume 0 != test_~tmp~8; {12954#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:57,648 INFO L280 TraceCheckUtils]: 35: Hoare triple {12954#(<= 2 ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {12952#false} is VALID [2020-07-28 19:04:57,648 INFO L280 TraceCheckUtils]: 36: Hoare triple {12952#false} assume -2147483648 <= test_#t~nondet27 && test_#t~nondet27 <= 2147483647;test_~tmp___0~3 := test_#t~nondet27;havoc test_#t~nondet27; {12952#false} is VALID [2020-07-28 19:04:57,649 INFO L280 TraceCheckUtils]: 37: Hoare triple {12952#false} assume !(0 != test_~tmp___0~3); {12952#false} is VALID [2020-07-28 19:04:57,649 INFO L280 TraceCheckUtils]: 38: Hoare triple {12952#false} assume -2147483648 <= test_#t~nondet28 && test_#t~nondet28 <= 2147483647;test_~tmp___2~0 := test_#t~nondet28;havoc test_#t~nondet28; {12952#false} is VALID [2020-07-28 19:04:57,649 INFO L280 TraceCheckUtils]: 39: Hoare triple {12952#false} assume !(0 != test_~tmp___2~0);assume -2147483648 <= test_#t~nondet29 && test_#t~nondet29 <= 2147483647;test_~tmp___1~0 := test_#t~nondet29;havoc test_#t~nondet29; {12952#false} is VALID [2020-07-28 19:04:57,650 INFO L280 TraceCheckUtils]: 40: Hoare triple {12952#false} assume !(0 != test_~tmp___1~0); {12952#false} is VALID [2020-07-28 19:04:57,650 INFO L280 TraceCheckUtils]: 41: Hoare triple {12952#false} assume !(0 != ~pumpRunning~0); {12952#false} is VALID [2020-07-28 19:04:57,650 INFO L280 TraceCheckUtils]: 42: Hoare triple {12952#false} assume !(0 != ~systemActive~0); {12952#false} is VALID [2020-07-28 19:04:57,650 INFO L280 TraceCheckUtils]: 43: Hoare triple {12952#false} havoc __utac_acc__Specification4_spec__1_#t~ret1, __utac_acc__Specification4_spec__1_#t~ret2, __utac_acc__Specification4_spec__1_~tmp~1, __utac_acc__Specification4_spec__1_~tmp___0~0;havoc __utac_acc__Specification4_spec__1_~tmp~1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~9;havoc getWaterLevel_~retValue_acc~9;getWaterLevel_~retValue_acc~9 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~9; {12952#false} is VALID [2020-07-28 19:04:57,650 INFO L280 TraceCheckUtils]: 44: Hoare triple {12952#false} __utac_acc__Specification4_spec__1_#t~ret1 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret1 && __utac_acc__Specification4_spec__1_#t~ret1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1 := __utac_acc__Specification4_spec__1_#t~ret1;havoc __utac_acc__Specification4_spec__1_#t~ret1; {12952#false} is VALID [2020-07-28 19:04:57,650 INFO L280 TraceCheckUtils]: 45: Hoare triple {12952#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~1;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~2;havoc isPumpRunning_~retValue_acc~2;isPumpRunning_~retValue_acc~2 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~2; {12952#false} is VALID [2020-07-28 19:04:57,651 INFO L280 TraceCheckUtils]: 46: Hoare triple {12952#false} __utac_acc__Specification4_spec__1_#t~ret2 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret2 && __utac_acc__Specification4_spec__1_#t~ret2 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0 := __utac_acc__Specification4_spec__1_#t~ret2;havoc __utac_acc__Specification4_spec__1_#t~ret2; {12952#false} is VALID [2020-07-28 19:04:57,651 INFO L280 TraceCheckUtils]: 47: Hoare triple {12952#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0; {12952#false} is VALID [2020-07-28 19:04:57,651 INFO L280 TraceCheckUtils]: 48: Hoare triple {12952#false} assume !false; {12952#false} is VALID [2020-07-28 19:04:57,655 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:04:57,656 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 1 imperfect interpolant sequences. [2020-07-28 19:04:57,656 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [3] total 4 [2020-07-28 19:04:57,657 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1868170519] [2020-07-28 19:04:57,657 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 49 [2020-07-28 19:04:57,657 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:04:57,658 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2020-07-28 19:04:57,730 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 49 edges. 49 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:04:57,730 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2020-07-28 19:04:57,730 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:04:57,731 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2020-07-28 19:04:57,731 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:04:57,731 INFO L87 Difference]: Start difference. First operand 491 states and 730 transitions. Second operand 4 states. [2020-07-28 19:05:00,203 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:05:00,203 INFO L93 Difference]: Finished difference Result 1087 states and 1635 transitions. [2020-07-28 19:05:00,203 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2020-07-28 19:05:00,203 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 49 [2020-07-28 19:05:00,204 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:05:00,204 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 19:05:00,212 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 841 transitions. [2020-07-28 19:05:00,212 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 19:05:00,219 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 841 transitions. [2020-07-28 19:05:00,219 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 841 transitions. [2020-07-28 19:05:01,060 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 841 edges. 841 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:05:01,093 INFO L225 Difference]: With dead ends: 1087 [2020-07-28 19:05:01,093 INFO L226 Difference]: Without dead ends: 720 [2020-07-28 19:05:01,094 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 51 GetRequests, 48 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:05:01,095 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 720 states. [2020-07-28 19:05:02,435 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 720 to 706. [2020-07-28 19:05:02,435 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:05:02,436 INFO L82 GeneralOperation]: Start isEquivalent. First operand 720 states. Second operand 706 states. [2020-07-28 19:05:02,436 INFO L74 IsIncluded]: Start isIncluded. First operand 720 states. Second operand 706 states. [2020-07-28 19:05:02,436 INFO L87 Difference]: Start difference. First operand 720 states. Second operand 706 states. [2020-07-28 19:05:02,461 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:05:02,462 INFO L93 Difference]: Finished difference Result 720 states and 1062 transitions. [2020-07-28 19:05:02,462 INFO L276 IsEmpty]: Start isEmpty. Operand 720 states and 1062 transitions. [2020-07-28 19:05:02,463 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:05:02,463 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:05:02,463 INFO L74 IsIncluded]: Start isIncluded. First operand 706 states. Second operand 720 states. [2020-07-28 19:05:02,463 INFO L87 Difference]: Start difference. First operand 706 states. Second operand 720 states. [2020-07-28 19:05:02,491 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:05:02,491 INFO L93 Difference]: Finished difference Result 720 states and 1062 transitions. [2020-07-28 19:05:02,491 INFO L276 IsEmpty]: Start isEmpty. Operand 720 states and 1062 transitions. [2020-07-28 19:05:02,492 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:05:02,493 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:05:02,493 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:05:02,493 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:05:02,493 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 706 states. [2020-07-28 19:05:02,520 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 706 states to 706 states and 1050 transitions. [2020-07-28 19:05:02,520 INFO L78 Accepts]: Start accepts. Automaton has 706 states and 1050 transitions. Word has length 49 [2020-07-28 19:05:02,520 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:05:02,520 INFO L479 AbstractCegarLoop]: Abstraction has 706 states and 1050 transitions. [2020-07-28 19:05:02,520 INFO L480 AbstractCegarLoop]: Interpolant automaton has 4 states. [2020-07-28 19:05:02,521 INFO L276 IsEmpty]: Start isEmpty. Operand 706 states and 1050 transitions. [2020-07-28 19:05:02,521 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2020-07-28 19:05:02,522 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:05:02,522 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:05:02,722 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable5 [2020-07-28 19:05:02,723 INFO L427 AbstractCegarLoop]: === Iteration 7 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:05:02,723 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:05:02,723 INFO L82 PathProgramCache]: Analyzing trace with hash 421650894, now seen corresponding path program 1 times [2020-07-28 19:05:02,723 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:05:02,723 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1994793912] [2020-07-28 19:05:02,724 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:05:02,795 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:05:02,845 INFO L280 TraceCheckUtils]: 0: Hoare triple {16950#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(13);call #t~string11.base, #t~string11.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string11.base, #t~string11.offset, 1);call write~init~int(110, #t~string11.base, 1 + #t~string11.offset, 1);call write~init~int(0, #t~string11.base, 2 + #t~string11.offset, 1);call #t~string13.base, #t~string13.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string13.base, #t~string13.offset, 1);call write~init~int(102, #t~string13.base, 1 + #t~string13.offset, 1);call write~init~int(102, #t~string13.base, 2 + #t~string13.offset, 1);call write~init~int(0, #t~string13.base, 3 + #t~string13.offset, 1);call #t~string15.base, #t~string15.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string15.base, #t~string15.offset, 1);call write~init~int(80, #t~string15.base, 1 + #t~string15.offset, 1);call write~init~int(117, #t~string15.base, 2 + #t~string15.offset, 1);call write~init~int(109, #t~string15.base, 3 + #t~string15.offset, 1);call write~init~int(112, #t~string15.base, 4 + #t~string15.offset, 1);call write~init~int(58, #t~string15.base, 5 + #t~string15.offset, 1);call write~init~int(0, #t~string15.base, 6 + #t~string15.offset, 1);call #t~string17.base, #t~string17.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string17.base, #t~string17.offset, 1);call write~init~int(110, #t~string17.base, 1 + #t~string17.offset, 1);call write~init~int(0, #t~string17.base, 2 + #t~string17.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string19.base, #t~string19.offset, 1);call write~init~int(102, #t~string19.base, 1 + #t~string19.offset, 1);call write~init~int(102, #t~string19.base, 2 + #t~string19.offset, 1);call write~init~int(0, #t~string19.base, 3 + #t~string19.offset, 1);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string21.base, #t~string21.offset, 1);call write~init~int(32, #t~string21.base, 1 + #t~string21.offset, 1);call write~init~int(0, #t~string21.base, 2 + #t~string21.offset, 1);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string23.base, #t~string23.offset, 1);call write~init~int(0, #t~string23.base, 1 + #t~string23.offset, 1);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(30);call #t~string49.base, #t~string49.offset := #Ultimate.allocOnStack(9);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(21);call #t~string51.base, #t~string51.offset := #Ultimate.allocOnStack(30);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(9);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(21);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(25);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(30);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(9);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(25);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(13);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string68.base, #t~string68.offset, 1);call write~init~int(77, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(101, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(116, #t~string68.base, 3 + #t~string68.offset, 1);call write~init~int(104, #t~string68.base, 4 + #t~string68.offset, 1);call write~init~int(58, #t~string68.base, 5 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 6 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string70.base, #t~string70.offset, 1);call write~init~int(82, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(73, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(84, #t~string70.base, 3 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 4 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string72.base, #t~string72.offset, 1);call write~init~int(75, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 2 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string74.base, #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 1 + #t~string74.offset, 1);~cleanupTimeShifts~0 := 4;~__SELECTED_FEATURE_base~0 := 0;~__SELECTED_FEATURE_highWaterSensor~0 := 0;~__SELECTED_FEATURE_lowWaterSensor~0 := 0;~__SELECTED_FEATURE_methaneQuery~0 := 0;~__SELECTED_FEATURE_methaneAlarm~0 := 0;~__SELECTED_FEATURE_stopCommand~0 := 0;~__SELECTED_FEATURE_startCommand~0 := 0;~__GUIDSL_ROOT_PRODUCTION~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {16950#true} is VALID [2020-07-28 19:05:02,845 INFO L280 TraceCheckUtils]: 1: Hoare triple {16950#true} havoc main_#res;havoc main_#t~ret0, main_~retValue_acc~0, main_~tmp~0;havoc main_~retValue_acc~0;havoc main_~tmp~0;~__GUIDSL_ROOT_PRODUCTION~0 := 1; {16950#true} is VALID [2020-07-28 19:05:02,846 INFO L280 TraceCheckUtils]: 2: Hoare triple {16950#true} havoc select_features_#t~ret76, select_features_#t~ret77, select_features_#t~ret78, select_features_#t~ret79, select_features_#t~ret80, select_features_#t~ret81;~__SELECTED_FEATURE_base~0 := 1;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {16950#true} is VALID [2020-07-28 19:05:02,846 INFO L280 TraceCheckUtils]: 3: Hoare triple {16950#true} select_features_#t~ret76 := select_one_#res;assume -2147483648 <= select_features_#t~ret76 && select_features_#t~ret76 <= 2147483647;~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret76;havoc select_features_#t~ret76;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {16950#true} is VALID [2020-07-28 19:05:02,846 INFO L280 TraceCheckUtils]: 4: Hoare triple {16950#true} select_features_#t~ret77 := select_one_#res;assume -2147483648 <= select_features_#t~ret77 && select_features_#t~ret77 <= 2147483647;~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret77;havoc select_features_#t~ret77;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {16950#true} is VALID [2020-07-28 19:05:02,846 INFO L280 TraceCheckUtils]: 5: Hoare triple {16950#true} select_features_#t~ret78 := select_one_#res;assume -2147483648 <= select_features_#t~ret78 && select_features_#t~ret78 <= 2147483647;~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret78;havoc select_features_#t~ret78;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {16950#true} is VALID [2020-07-28 19:05:02,846 INFO L280 TraceCheckUtils]: 6: Hoare triple {16950#true} select_features_#t~ret79 := select_one_#res;assume -2147483648 <= select_features_#t~ret79 && select_features_#t~ret79 <= 2147483647;~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret79;havoc select_features_#t~ret79;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {16950#true} is VALID [2020-07-28 19:05:02,847 INFO L280 TraceCheckUtils]: 7: Hoare triple {16950#true} select_features_#t~ret80 := select_one_#res;assume -2147483648 <= select_features_#t~ret80 && select_features_#t~ret80 <= 2147483647;~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret80;havoc select_features_#t~ret80;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {16950#true} is VALID [2020-07-28 19:05:02,847 INFO L280 TraceCheckUtils]: 8: Hoare triple {16950#true} select_features_#t~ret81 := select_one_#res;assume -2147483648 <= select_features_#t~ret81 && select_features_#t~ret81 <= 2147483647;~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret81;havoc select_features_#t~ret81; {16950#true} is VALID [2020-07-28 19:05:02,847 INFO L280 TraceCheckUtils]: 9: Hoare triple {16950#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~13;havoc valid_product_~retValue_acc~13;valid_product_~retValue_acc~13 := ~__SELECTED_FEATURE_base~0;valid_product_#res := valid_product_~retValue_acc~13; {16950#true} is VALID [2020-07-28 19:05:02,847 INFO L280 TraceCheckUtils]: 10: Hoare triple {16950#true} main_#t~ret0 := valid_product_#res;assume -2147483648 <= main_#t~ret0 && main_#t~ret0 <= 2147483647;main_~tmp~0 := main_#t~ret0;havoc main_#t~ret0; {16950#true} is VALID [2020-07-28 19:05:02,848 INFO L280 TraceCheckUtils]: 11: Hoare triple {16950#true} assume 0 != main_~tmp~0; {16950#true} is VALID [2020-07-28 19:05:02,848 INFO L280 TraceCheckUtils]: 12: Hoare triple {16950#true} havoc test_#t~nondet26, test_#t~nondet27, test_#t~nondet28, test_#t~nondet29, test_~splverifierCounter~0, test_~tmp~8, test_~tmp___0~3, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~8;havoc test_~tmp___0~3;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {16950#true} is VALID [2020-07-28 19:05:02,848 INFO L280 TraceCheckUtils]: 13: Hoare triple {16950#true} assume !false; {16950#true} is VALID [2020-07-28 19:05:02,848 INFO L280 TraceCheckUtils]: 14: Hoare triple {16950#true} assume test_~splverifierCounter~0 < 4; {16950#true} is VALID [2020-07-28 19:05:02,848 INFO L280 TraceCheckUtils]: 15: Hoare triple {16950#true} assume -2147483648 <= test_#t~nondet26 && test_#t~nondet26 <= 2147483647;test_~tmp~8 := test_#t~nondet26;havoc test_#t~nondet26; {16950#true} is VALID [2020-07-28 19:05:02,849 INFO L280 TraceCheckUtils]: 16: Hoare triple {16950#true} assume !(0 != test_~tmp~8); {16950#true} is VALID [2020-07-28 19:05:02,849 INFO L280 TraceCheckUtils]: 17: Hoare triple {16950#true} assume -2147483648 <= test_#t~nondet27 && test_#t~nondet27 <= 2147483647;test_~tmp___0~3 := test_#t~nondet27;havoc test_#t~nondet27; {16950#true} is VALID [2020-07-28 19:05:02,849 INFO L280 TraceCheckUtils]: 18: Hoare triple {16950#true} assume !(0 != test_~tmp___0~3); {16950#true} is VALID [2020-07-28 19:05:02,849 INFO L280 TraceCheckUtils]: 19: Hoare triple {16950#true} assume -2147483648 <= test_#t~nondet28 && test_#t~nondet28 <= 2147483647;test_~tmp___2~0 := test_#t~nondet28;havoc test_#t~nondet28; {16950#true} is VALID [2020-07-28 19:05:02,849 INFO L280 TraceCheckUtils]: 20: Hoare triple {16950#true} assume !(0 != test_~tmp___2~0);assume -2147483648 <= test_#t~nondet29 && test_#t~nondet29 <= 2147483647;test_~tmp___1~0 := test_#t~nondet29;havoc test_#t~nondet29; {16950#true} is VALID [2020-07-28 19:05:02,850 INFO L280 TraceCheckUtils]: 21: Hoare triple {16950#true} assume !(0 != test_~tmp___1~0); {16950#true} is VALID [2020-07-28 19:05:02,850 INFO L280 TraceCheckUtils]: 22: Hoare triple {16950#true} assume !(0 != ~pumpRunning~0); {16950#true} is VALID [2020-07-28 19:05:02,850 INFO L280 TraceCheckUtils]: 23: Hoare triple {16950#true} assume 0 != ~systemActive~0; {16950#true} is VALID [2020-07-28 19:05:02,850 INFO L280 TraceCheckUtils]: 24: Hoare triple {16950#true} assume !(0 != ~__SELECTED_FEATURE_methaneAlarm~0); {16950#true} is VALID [2020-07-28 19:05:02,850 INFO L280 TraceCheckUtils]: 25: Hoare triple {16950#true} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {16950#true} is VALID [2020-07-28 19:05:02,851 INFO L280 TraceCheckUtils]: 26: Hoare triple {16950#true} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;havoc processEnvironment__role__highWaterSensor_#t~ret3, processEnvironment__role__highWaterSensor_~tmp~2;havoc processEnvironment__role__highWaterSensor_~tmp~2; {16950#true} is VALID [2020-07-28 19:05:02,851 INFO L280 TraceCheckUtils]: 27: Hoare triple {16950#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret24, isHighWaterLevel_~retValue_acc~3, isHighWaterLevel_~tmp~6, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~3;havoc isHighWaterLevel_~tmp~6;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~10;havoc isHighWaterSensorDry_~retValue_acc~10; {16950#true} is VALID [2020-07-28 19:05:02,851 INFO L280 TraceCheckUtils]: 28: Hoare triple {16950#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~10 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~10; {16950#true} is VALID [2020-07-28 19:05:02,851 INFO L280 TraceCheckUtils]: 29: Hoare triple {16950#true} isHighWaterLevel_#t~ret24 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret24 && isHighWaterLevel_#t~ret24 <= 2147483647;isHighWaterLevel_~tmp~6 := isHighWaterLevel_#t~ret24;havoc isHighWaterLevel_#t~ret24; {16950#true} is VALID [2020-07-28 19:05:02,852 INFO L280 TraceCheckUtils]: 30: Hoare triple {16950#true} assume 0 != isHighWaterLevel_~tmp~6;isHighWaterLevel_~tmp___0~1 := 0; {16952#(= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1)} is VALID [2020-07-28 19:05:02,853 INFO L280 TraceCheckUtils]: 31: Hoare triple {16952#(= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1)} isHighWaterLevel_~retValue_acc~3 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~3; {16953#(= 0 |ULTIMATE.start_isHighWaterLevel_#res|)} is VALID [2020-07-28 19:05:02,854 INFO L280 TraceCheckUtils]: 32: Hoare triple {16953#(= 0 |ULTIMATE.start_isHighWaterLevel_#res|)} processEnvironment__role__highWaterSensor_#t~ret3 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret3 && processEnvironment__role__highWaterSensor_#t~ret3 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~2 := processEnvironment__role__highWaterSensor_#t~ret3;havoc processEnvironment__role__highWaterSensor_#t~ret3; {16954#(= 0 ULTIMATE.start_processEnvironment__role__highWaterSensor_~tmp~2)} is VALID [2020-07-28 19:05:02,854 INFO L280 TraceCheckUtils]: 33: Hoare triple {16954#(= 0 ULTIMATE.start_processEnvironment__role__highWaterSensor_~tmp~2)} assume 0 != processEnvironment__role__highWaterSensor_~tmp~2; {16951#false} is VALID [2020-07-28 19:05:02,854 INFO L280 TraceCheckUtils]: 34: Hoare triple {16951#false} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0);~pumpRunning~0 := 1; {16951#false} is VALID [2020-07-28 19:05:02,855 INFO L280 TraceCheckUtils]: 35: Hoare triple {16951#false} havoc __utac_acc__Specification4_spec__1_#t~ret1, __utac_acc__Specification4_spec__1_#t~ret2, __utac_acc__Specification4_spec__1_~tmp~1, __utac_acc__Specification4_spec__1_~tmp___0~0;havoc __utac_acc__Specification4_spec__1_~tmp~1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~9;havoc getWaterLevel_~retValue_acc~9;getWaterLevel_~retValue_acc~9 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~9; {16951#false} is VALID [2020-07-28 19:05:02,855 INFO L280 TraceCheckUtils]: 36: Hoare triple {16951#false} __utac_acc__Specification4_spec__1_#t~ret1 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret1 && __utac_acc__Specification4_spec__1_#t~ret1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1 := __utac_acc__Specification4_spec__1_#t~ret1;havoc __utac_acc__Specification4_spec__1_#t~ret1; {16951#false} is VALID [2020-07-28 19:05:02,855 INFO L280 TraceCheckUtils]: 37: Hoare triple {16951#false} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~1); {16951#false} is VALID [2020-07-28 19:05:02,855 INFO L280 TraceCheckUtils]: 38: Hoare triple {16951#false} assume !false; {16951#false} is VALID [2020-07-28 19:05:02,855 INFO L280 TraceCheckUtils]: 39: Hoare triple {16951#false} assume test_~splverifierCounter~0 < 4; {16951#false} is VALID [2020-07-28 19:05:02,856 INFO L280 TraceCheckUtils]: 40: Hoare triple {16951#false} assume -2147483648 <= test_#t~nondet26 && test_#t~nondet26 <= 2147483647;test_~tmp~8 := test_#t~nondet26;havoc test_#t~nondet26; {16951#false} is VALID [2020-07-28 19:05:02,856 INFO L280 TraceCheckUtils]: 41: Hoare triple {16951#false} assume !(0 != test_~tmp~8); {16951#false} is VALID [2020-07-28 19:05:02,856 INFO L280 TraceCheckUtils]: 42: Hoare triple {16951#false} assume -2147483648 <= test_#t~nondet27 && test_#t~nondet27 <= 2147483647;test_~tmp___0~3 := test_#t~nondet27;havoc test_#t~nondet27; {16951#false} is VALID [2020-07-28 19:05:02,856 INFO L280 TraceCheckUtils]: 43: Hoare triple {16951#false} assume !(0 != test_~tmp___0~3); {16951#false} is VALID [2020-07-28 19:05:02,857 INFO L280 TraceCheckUtils]: 44: Hoare triple {16951#false} assume -2147483648 <= test_#t~nondet28 && test_#t~nondet28 <= 2147483647;test_~tmp___2~0 := test_#t~nondet28;havoc test_#t~nondet28; {16951#false} is VALID [2020-07-28 19:05:02,857 INFO L280 TraceCheckUtils]: 45: Hoare triple {16951#false} assume !(0 != test_~tmp___2~0);assume -2147483648 <= test_#t~nondet29 && test_#t~nondet29 <= 2147483647;test_~tmp___1~0 := test_#t~nondet29;havoc test_#t~nondet29; {16951#false} is VALID [2020-07-28 19:05:02,857 INFO L280 TraceCheckUtils]: 46: Hoare triple {16951#false} assume !(0 != test_~tmp___1~0); {16951#false} is VALID [2020-07-28 19:05:02,857 INFO L280 TraceCheckUtils]: 47: Hoare triple {16951#false} assume 0 != ~pumpRunning~0; {16951#false} is VALID [2020-07-28 19:05:02,857 INFO L280 TraceCheckUtils]: 48: Hoare triple {16951#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {16951#false} is VALID [2020-07-28 19:05:02,858 INFO L280 TraceCheckUtils]: 49: Hoare triple {16951#false} assume 0 != ~systemActive~0; {16951#false} is VALID [2020-07-28 19:05:02,858 INFO L280 TraceCheckUtils]: 50: Hoare triple {16951#false} assume !(0 != ~__SELECTED_FEATURE_methaneAlarm~0); {16951#false} is VALID [2020-07-28 19:05:02,858 INFO L280 TraceCheckUtils]: 51: Hoare triple {16951#false} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {16951#false} is VALID [2020-07-28 19:05:02,858 INFO L280 TraceCheckUtils]: 52: Hoare triple {16951#false} assume !(0 != ~__SELECTED_FEATURE_highWaterSensor~0); {16951#false} is VALID [2020-07-28 19:05:02,858 INFO L280 TraceCheckUtils]: 53: Hoare triple {16951#false} havoc __utac_acc__Specification4_spec__1_#t~ret1, __utac_acc__Specification4_spec__1_#t~ret2, __utac_acc__Specification4_spec__1_~tmp~1, __utac_acc__Specification4_spec__1_~tmp___0~0;havoc __utac_acc__Specification4_spec__1_~tmp~1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~9;havoc getWaterLevel_~retValue_acc~9;getWaterLevel_~retValue_acc~9 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~9; {16951#false} is VALID [2020-07-28 19:05:02,859 INFO L280 TraceCheckUtils]: 54: Hoare triple {16951#false} __utac_acc__Specification4_spec__1_#t~ret1 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret1 && __utac_acc__Specification4_spec__1_#t~ret1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1 := __utac_acc__Specification4_spec__1_#t~ret1;havoc __utac_acc__Specification4_spec__1_#t~ret1; {16951#false} is VALID [2020-07-28 19:05:02,859 INFO L280 TraceCheckUtils]: 55: Hoare triple {16951#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~1;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~2;havoc isPumpRunning_~retValue_acc~2;isPumpRunning_~retValue_acc~2 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~2; {16951#false} is VALID [2020-07-28 19:05:02,859 INFO L280 TraceCheckUtils]: 56: Hoare triple {16951#false} __utac_acc__Specification4_spec__1_#t~ret2 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret2 && __utac_acc__Specification4_spec__1_#t~ret2 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0 := __utac_acc__Specification4_spec__1_#t~ret2;havoc __utac_acc__Specification4_spec__1_#t~ret2; {16951#false} is VALID [2020-07-28 19:05:02,859 INFO L280 TraceCheckUtils]: 57: Hoare triple {16951#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0; {16951#false} is VALID [2020-07-28 19:05:02,859 INFO L280 TraceCheckUtils]: 58: Hoare triple {16951#false} assume !false; {16951#false} is VALID [2020-07-28 19:05:02,862 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 14 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2020-07-28 19:05:02,862 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1994793912] [2020-07-28 19:05:02,862 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:05:02,863 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:05:02,863 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [481235884] [2020-07-28 19:05:02,863 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 59 [2020-07-28 19:05:02,864 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:05:02,864 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:05:02,934 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 57 edges. 57 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:05:02,934 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:05:02,934 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:05:02,935 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:05:02,935 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:05:02,935 INFO L87 Difference]: Start difference. First operand 706 states and 1050 transitions. Second operand 5 states. [2020-07-28 19:05:06,384 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:05:06,384 INFO L93 Difference]: Finished difference Result 2003 states and 2969 transitions. [2020-07-28 19:05:06,385 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2020-07-28 19:05:06,385 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 59 [2020-07-28 19:05:06,385 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:05:06,385 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:05:06,387 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 589 transitions. [2020-07-28 19:05:06,387 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:05:06,389 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 589 transitions. [2020-07-28 19:05:06,389 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states and 589 transitions. [2020-07-28 19:05:07,309 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 589 edges. 589 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:05:07,404 INFO L225 Difference]: With dead ends: 2003 [2020-07-28 19:05:07,405 INFO L226 Difference]: Without dead ends: 1310 [2020-07-28 19:05:07,406 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2020-07-28 19:05:07,408 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1310 states. [2020-07-28 19:05:08,637 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1310 to 790. [2020-07-28 19:05:08,638 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:05:08,638 INFO L82 GeneralOperation]: Start isEquivalent. First operand 1310 states. Second operand 790 states. [2020-07-28 19:05:08,638 INFO L74 IsIncluded]: Start isIncluded. First operand 1310 states. Second operand 790 states. [2020-07-28 19:05:08,638 INFO L87 Difference]: Start difference. First operand 1310 states. Second operand 790 states. [2020-07-28 19:05:08,692 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:05:08,692 INFO L93 Difference]: Finished difference Result 1310 states and 1904 transitions. [2020-07-28 19:05:08,692 INFO L276 IsEmpty]: Start isEmpty. Operand 1310 states and 1904 transitions. [2020-07-28 19:05:08,695 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:05:08,695 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:05:08,695 INFO L74 IsIncluded]: Start isIncluded. First operand 790 states. Second operand 1310 states. [2020-07-28 19:05:08,696 INFO L87 Difference]: Start difference. First operand 790 states. Second operand 1310 states. [2020-07-28 19:05:08,770 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:05:08,770 INFO L93 Difference]: Finished difference Result 1310 states and 1904 transitions. [2020-07-28 19:05:08,770 INFO L276 IsEmpty]: Start isEmpty. Operand 1310 states and 1904 transitions. [2020-07-28 19:05:08,773 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:05:08,773 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:05:08,773 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:05:08,773 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:05:08,774 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 790 states. [2020-07-28 19:05:08,801 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 790 states to 790 states and 1134 transitions. [2020-07-28 19:05:08,801 INFO L78 Accepts]: Start accepts. Automaton has 790 states and 1134 transitions. Word has length 59 [2020-07-28 19:05:08,801 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:05:08,801 INFO L479 AbstractCegarLoop]: Abstraction has 790 states and 1134 transitions. [2020-07-28 19:05:08,802 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:05:08,802 INFO L276 IsEmpty]: Start isEmpty. Operand 790 states and 1134 transitions. [2020-07-28 19:05:08,803 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2020-07-28 19:05:08,803 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:05:08,803 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:05:08,803 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2020-07-28 19:05:08,804 INFO L427 AbstractCegarLoop]: === Iteration 8 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:05:08,804 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:05:08,804 INFO L82 PathProgramCache]: Analyzing trace with hash 1807854288, now seen corresponding path program 1 times [2020-07-28 19:05:08,804 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:05:08,805 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [490031351] [2020-07-28 19:05:08,805 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:05:08,828 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:05:08,913 INFO L280 TraceCheckUtils]: 0: Hoare triple {23322#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(13);call #t~string11.base, #t~string11.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string11.base, #t~string11.offset, 1);call write~init~int(110, #t~string11.base, 1 + #t~string11.offset, 1);call write~init~int(0, #t~string11.base, 2 + #t~string11.offset, 1);call #t~string13.base, #t~string13.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string13.base, #t~string13.offset, 1);call write~init~int(102, #t~string13.base, 1 + #t~string13.offset, 1);call write~init~int(102, #t~string13.base, 2 + #t~string13.offset, 1);call write~init~int(0, #t~string13.base, 3 + #t~string13.offset, 1);call #t~string15.base, #t~string15.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string15.base, #t~string15.offset, 1);call write~init~int(80, #t~string15.base, 1 + #t~string15.offset, 1);call write~init~int(117, #t~string15.base, 2 + #t~string15.offset, 1);call write~init~int(109, #t~string15.base, 3 + #t~string15.offset, 1);call write~init~int(112, #t~string15.base, 4 + #t~string15.offset, 1);call write~init~int(58, #t~string15.base, 5 + #t~string15.offset, 1);call write~init~int(0, #t~string15.base, 6 + #t~string15.offset, 1);call #t~string17.base, #t~string17.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string17.base, #t~string17.offset, 1);call write~init~int(110, #t~string17.base, 1 + #t~string17.offset, 1);call write~init~int(0, #t~string17.base, 2 + #t~string17.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string19.base, #t~string19.offset, 1);call write~init~int(102, #t~string19.base, 1 + #t~string19.offset, 1);call write~init~int(102, #t~string19.base, 2 + #t~string19.offset, 1);call write~init~int(0, #t~string19.base, 3 + #t~string19.offset, 1);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string21.base, #t~string21.offset, 1);call write~init~int(32, #t~string21.base, 1 + #t~string21.offset, 1);call write~init~int(0, #t~string21.base, 2 + #t~string21.offset, 1);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string23.base, #t~string23.offset, 1);call write~init~int(0, #t~string23.base, 1 + #t~string23.offset, 1);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(30);call #t~string49.base, #t~string49.offset := #Ultimate.allocOnStack(9);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(21);call #t~string51.base, #t~string51.offset := #Ultimate.allocOnStack(30);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(9);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(21);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(25);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(30);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(9);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(25);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(13);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string68.base, #t~string68.offset, 1);call write~init~int(77, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(101, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(116, #t~string68.base, 3 + #t~string68.offset, 1);call write~init~int(104, #t~string68.base, 4 + #t~string68.offset, 1);call write~init~int(58, #t~string68.base, 5 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 6 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string70.base, #t~string70.offset, 1);call write~init~int(82, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(73, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(84, #t~string70.base, 3 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 4 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string72.base, #t~string72.offset, 1);call write~init~int(75, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 2 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string74.base, #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 1 + #t~string74.offset, 1);~cleanupTimeShifts~0 := 4;~__SELECTED_FEATURE_base~0 := 0;~__SELECTED_FEATURE_highWaterSensor~0 := 0;~__SELECTED_FEATURE_lowWaterSensor~0 := 0;~__SELECTED_FEATURE_methaneQuery~0 := 0;~__SELECTED_FEATURE_methaneAlarm~0 := 0;~__SELECTED_FEATURE_stopCommand~0 := 0;~__SELECTED_FEATURE_startCommand~0 := 0;~__GUIDSL_ROOT_PRODUCTION~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {23322#true} is VALID [2020-07-28 19:05:08,913 INFO L280 TraceCheckUtils]: 1: Hoare triple {23322#true} havoc main_#res;havoc main_#t~ret0, main_~retValue_acc~0, main_~tmp~0;havoc main_~retValue_acc~0;havoc main_~tmp~0;~__GUIDSL_ROOT_PRODUCTION~0 := 1; {23322#true} is VALID [2020-07-28 19:05:08,914 INFO L280 TraceCheckUtils]: 2: Hoare triple {23322#true} havoc select_features_#t~ret76, select_features_#t~ret77, select_features_#t~ret78, select_features_#t~ret79, select_features_#t~ret80, select_features_#t~ret81;~__SELECTED_FEATURE_base~0 := 1;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {23324#(= 1 ~__SELECTED_FEATURE_base~0)} is VALID [2020-07-28 19:05:08,915 INFO L280 TraceCheckUtils]: 3: Hoare triple {23324#(= 1 ~__SELECTED_FEATURE_base~0)} select_features_#t~ret76 := select_one_#res;assume -2147483648 <= select_features_#t~ret76 && select_features_#t~ret76 <= 2147483647;~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret76;havoc select_features_#t~ret76;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {23324#(= 1 ~__SELECTED_FEATURE_base~0)} is VALID [2020-07-28 19:05:08,916 INFO L280 TraceCheckUtils]: 4: Hoare triple {23324#(= 1 ~__SELECTED_FEATURE_base~0)} select_features_#t~ret77 := select_one_#res;assume -2147483648 <= select_features_#t~ret77 && select_features_#t~ret77 <= 2147483647;~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret77;havoc select_features_#t~ret77;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {23324#(= 1 ~__SELECTED_FEATURE_base~0)} is VALID [2020-07-28 19:05:08,916 INFO L280 TraceCheckUtils]: 5: Hoare triple {23324#(= 1 ~__SELECTED_FEATURE_base~0)} select_features_#t~ret78 := select_one_#res;assume -2147483648 <= select_features_#t~ret78 && select_features_#t~ret78 <= 2147483647;~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret78;havoc select_features_#t~ret78;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {23324#(= 1 ~__SELECTED_FEATURE_base~0)} is VALID [2020-07-28 19:05:08,917 INFO L280 TraceCheckUtils]: 6: Hoare triple {23324#(= 1 ~__SELECTED_FEATURE_base~0)} select_features_#t~ret79 := select_one_#res;assume -2147483648 <= select_features_#t~ret79 && select_features_#t~ret79 <= 2147483647;~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret79;havoc select_features_#t~ret79;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {23324#(= 1 ~__SELECTED_FEATURE_base~0)} is VALID [2020-07-28 19:05:08,917 INFO L280 TraceCheckUtils]: 7: Hoare triple {23324#(= 1 ~__SELECTED_FEATURE_base~0)} select_features_#t~ret80 := select_one_#res;assume -2147483648 <= select_features_#t~ret80 && select_features_#t~ret80 <= 2147483647;~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret80;havoc select_features_#t~ret80;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {23324#(= 1 ~__SELECTED_FEATURE_base~0)} is VALID [2020-07-28 19:05:08,918 INFO L280 TraceCheckUtils]: 8: Hoare triple {23324#(= 1 ~__SELECTED_FEATURE_base~0)} select_features_#t~ret81 := select_one_#res;assume -2147483648 <= select_features_#t~ret81 && select_features_#t~ret81 <= 2147483647;~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret81;havoc select_features_#t~ret81; {23324#(= 1 ~__SELECTED_FEATURE_base~0)} is VALID [2020-07-28 19:05:08,919 INFO L280 TraceCheckUtils]: 9: Hoare triple {23324#(= 1 ~__SELECTED_FEATURE_base~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~13;havoc valid_product_~retValue_acc~13;valid_product_~retValue_acc~13 := ~__SELECTED_FEATURE_base~0;valid_product_#res := valid_product_~retValue_acc~13; {23325#(= 1 |ULTIMATE.start_valid_product_#res|)} is VALID [2020-07-28 19:05:08,920 INFO L280 TraceCheckUtils]: 10: Hoare triple {23325#(= 1 |ULTIMATE.start_valid_product_#res|)} main_#t~ret0 := valid_product_#res;assume -2147483648 <= main_#t~ret0 && main_#t~ret0 <= 2147483647;main_~tmp~0 := main_#t~ret0;havoc main_#t~ret0; {23326#(= 1 ULTIMATE.start_main_~tmp~0)} is VALID [2020-07-28 19:05:08,920 INFO L280 TraceCheckUtils]: 11: Hoare triple {23326#(= 1 ULTIMATE.start_main_~tmp~0)} assume 0 != main_~tmp~0; {23322#true} is VALID [2020-07-28 19:05:08,920 INFO L280 TraceCheckUtils]: 12: Hoare triple {23322#true} havoc test_#t~nondet26, test_#t~nondet27, test_#t~nondet28, test_#t~nondet29, test_~splverifierCounter~0, test_~tmp~8, test_~tmp___0~3, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~8;havoc test_~tmp___0~3;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {23322#true} is VALID [2020-07-28 19:05:08,920 INFO L280 TraceCheckUtils]: 13: Hoare triple {23322#true} assume !false; {23322#true} is VALID [2020-07-28 19:05:08,921 INFO L280 TraceCheckUtils]: 14: Hoare triple {23322#true} assume test_~splverifierCounter~0 < 4; {23322#true} is VALID [2020-07-28 19:05:08,921 INFO L280 TraceCheckUtils]: 15: Hoare triple {23322#true} assume -2147483648 <= test_#t~nondet26 && test_#t~nondet26 <= 2147483647;test_~tmp~8 := test_#t~nondet26;havoc test_#t~nondet26; {23322#true} is VALID [2020-07-28 19:05:08,921 INFO L280 TraceCheckUtils]: 16: Hoare triple {23322#true} assume !(0 != test_~tmp~8); {23322#true} is VALID [2020-07-28 19:05:08,921 INFO L280 TraceCheckUtils]: 17: Hoare triple {23322#true} assume -2147483648 <= test_#t~nondet27 && test_#t~nondet27 <= 2147483647;test_~tmp___0~3 := test_#t~nondet27;havoc test_#t~nondet27; {23322#true} is VALID [2020-07-28 19:05:08,921 INFO L280 TraceCheckUtils]: 18: Hoare triple {23322#true} assume !(0 != test_~tmp___0~3); {23322#true} is VALID [2020-07-28 19:05:08,922 INFO L280 TraceCheckUtils]: 19: Hoare triple {23322#true} assume -2147483648 <= test_#t~nondet28 && test_#t~nondet28 <= 2147483647;test_~tmp___2~0 := test_#t~nondet28;havoc test_#t~nondet28; {23322#true} is VALID [2020-07-28 19:05:08,922 INFO L280 TraceCheckUtils]: 20: Hoare triple {23322#true} assume !(0 != test_~tmp___2~0);assume -2147483648 <= test_#t~nondet29 && test_#t~nondet29 <= 2147483647;test_~tmp___1~0 := test_#t~nondet29;havoc test_#t~nondet29; {23322#true} is VALID [2020-07-28 19:05:08,922 INFO L280 TraceCheckUtils]: 21: Hoare triple {23322#true} assume !(0 != test_~tmp___1~0); {23322#true} is VALID [2020-07-28 19:05:08,923 INFO L280 TraceCheckUtils]: 22: Hoare triple {23322#true} assume !(0 != ~pumpRunning~0); {23322#true} is VALID [2020-07-28 19:05:08,923 INFO L280 TraceCheckUtils]: 23: Hoare triple {23322#true} assume 0 != ~systemActive~0; {23322#true} is VALID [2020-07-28 19:05:08,923 INFO L280 TraceCheckUtils]: 24: Hoare triple {23322#true} assume !(0 != ~__SELECTED_FEATURE_methaneAlarm~0); {23322#true} is VALID [2020-07-28 19:05:08,923 INFO L280 TraceCheckUtils]: 25: Hoare triple {23322#true} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {23322#true} is VALID [2020-07-28 19:05:08,923 INFO L280 TraceCheckUtils]: 26: Hoare triple {23322#true} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;havoc processEnvironment__role__highWaterSensor_#t~ret3, processEnvironment__role__highWaterSensor_~tmp~2;havoc processEnvironment__role__highWaterSensor_~tmp~2; {23322#true} is VALID [2020-07-28 19:05:08,924 INFO L280 TraceCheckUtils]: 27: Hoare triple {23322#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret24, isHighWaterLevel_~retValue_acc~3, isHighWaterLevel_~tmp~6, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~3;havoc isHighWaterLevel_~tmp~6;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~10;havoc isHighWaterSensorDry_~retValue_acc~10; {23322#true} is VALID [2020-07-28 19:05:08,925 INFO L280 TraceCheckUtils]: 28: Hoare triple {23322#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~10 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~10; {23327#(not (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|))} is VALID [2020-07-28 19:05:08,926 INFO L280 TraceCheckUtils]: 29: Hoare triple {23327#(not (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|))} isHighWaterLevel_#t~ret24 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret24 && isHighWaterLevel_#t~ret24 <= 2147483647;isHighWaterLevel_~tmp~6 := isHighWaterLevel_#t~ret24;havoc isHighWaterLevel_#t~ret24; {23328#(not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~6))} is VALID [2020-07-28 19:05:08,926 INFO L280 TraceCheckUtils]: 30: Hoare triple {23328#(not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~6))} assume !(0 != isHighWaterLevel_~tmp~6);isHighWaterLevel_~tmp___0~1 := 1; {23323#false} is VALID [2020-07-28 19:05:08,926 INFO L280 TraceCheckUtils]: 31: Hoare triple {23323#false} isHighWaterLevel_~retValue_acc~3 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~3; {23323#false} is VALID [2020-07-28 19:05:08,927 INFO L280 TraceCheckUtils]: 32: Hoare triple {23323#false} processEnvironment__role__highWaterSensor_#t~ret3 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret3 && processEnvironment__role__highWaterSensor_#t~ret3 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~2 := processEnvironment__role__highWaterSensor_#t~ret3;havoc processEnvironment__role__highWaterSensor_#t~ret3; {23323#false} is VALID [2020-07-28 19:05:08,927 INFO L280 TraceCheckUtils]: 33: Hoare triple {23323#false} assume 0 != processEnvironment__role__highWaterSensor_~tmp~2; {23323#false} is VALID [2020-07-28 19:05:08,927 INFO L280 TraceCheckUtils]: 34: Hoare triple {23323#false} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0);~pumpRunning~0 := 1; {23323#false} is VALID [2020-07-28 19:05:08,927 INFO L280 TraceCheckUtils]: 35: Hoare triple {23323#false} havoc __utac_acc__Specification4_spec__1_#t~ret1, __utac_acc__Specification4_spec__1_#t~ret2, __utac_acc__Specification4_spec__1_~tmp~1, __utac_acc__Specification4_spec__1_~tmp___0~0;havoc __utac_acc__Specification4_spec__1_~tmp~1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~9;havoc getWaterLevel_~retValue_acc~9;getWaterLevel_~retValue_acc~9 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~9; {23323#false} is VALID [2020-07-28 19:05:08,928 INFO L280 TraceCheckUtils]: 36: Hoare triple {23323#false} __utac_acc__Specification4_spec__1_#t~ret1 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret1 && __utac_acc__Specification4_spec__1_#t~ret1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1 := __utac_acc__Specification4_spec__1_#t~ret1;havoc __utac_acc__Specification4_spec__1_#t~ret1; {23323#false} is VALID [2020-07-28 19:05:08,928 INFO L280 TraceCheckUtils]: 37: Hoare triple {23323#false} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~1); {23323#false} is VALID [2020-07-28 19:05:08,928 INFO L280 TraceCheckUtils]: 38: Hoare triple {23323#false} assume !false; {23323#false} is VALID [2020-07-28 19:05:08,928 INFO L280 TraceCheckUtils]: 39: Hoare triple {23323#false} assume test_~splverifierCounter~0 < 4; {23323#false} is VALID [2020-07-28 19:05:08,928 INFO L280 TraceCheckUtils]: 40: Hoare triple {23323#false} assume -2147483648 <= test_#t~nondet26 && test_#t~nondet26 <= 2147483647;test_~tmp~8 := test_#t~nondet26;havoc test_#t~nondet26; {23323#false} is VALID [2020-07-28 19:05:08,929 INFO L280 TraceCheckUtils]: 41: Hoare triple {23323#false} assume !(0 != test_~tmp~8); {23323#false} is VALID [2020-07-28 19:05:08,929 INFO L280 TraceCheckUtils]: 42: Hoare triple {23323#false} assume -2147483648 <= test_#t~nondet27 && test_#t~nondet27 <= 2147483647;test_~tmp___0~3 := test_#t~nondet27;havoc test_#t~nondet27; {23323#false} is VALID [2020-07-28 19:05:08,929 INFO L280 TraceCheckUtils]: 43: Hoare triple {23323#false} assume !(0 != test_~tmp___0~3); {23323#false} is VALID [2020-07-28 19:05:08,929 INFO L280 TraceCheckUtils]: 44: Hoare triple {23323#false} assume -2147483648 <= test_#t~nondet28 && test_#t~nondet28 <= 2147483647;test_~tmp___2~0 := test_#t~nondet28;havoc test_#t~nondet28; {23323#false} is VALID [2020-07-28 19:05:08,929 INFO L280 TraceCheckUtils]: 45: Hoare triple {23323#false} assume !(0 != test_~tmp___2~0);assume -2147483648 <= test_#t~nondet29 && test_#t~nondet29 <= 2147483647;test_~tmp___1~0 := test_#t~nondet29;havoc test_#t~nondet29; {23323#false} is VALID [2020-07-28 19:05:08,930 INFO L280 TraceCheckUtils]: 46: Hoare triple {23323#false} assume !(0 != test_~tmp___1~0); {23323#false} is VALID [2020-07-28 19:05:08,930 INFO L280 TraceCheckUtils]: 47: Hoare triple {23323#false} assume 0 != ~pumpRunning~0; {23323#false} is VALID [2020-07-28 19:05:08,930 INFO L280 TraceCheckUtils]: 48: Hoare triple {23323#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {23323#false} is VALID [2020-07-28 19:05:08,931 INFO L280 TraceCheckUtils]: 49: Hoare triple {23323#false} assume 0 != ~systemActive~0; {23323#false} is VALID [2020-07-28 19:05:08,931 INFO L280 TraceCheckUtils]: 50: Hoare triple {23323#false} assume !(0 != ~__SELECTED_FEATURE_methaneAlarm~0); {23323#false} is VALID [2020-07-28 19:05:08,931 INFO L280 TraceCheckUtils]: 51: Hoare triple {23323#false} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {23323#false} is VALID [2020-07-28 19:05:08,931 INFO L280 TraceCheckUtils]: 52: Hoare triple {23323#false} assume !(0 != ~__SELECTED_FEATURE_highWaterSensor~0); {23323#false} is VALID [2020-07-28 19:05:08,932 INFO L280 TraceCheckUtils]: 53: Hoare triple {23323#false} havoc __utac_acc__Specification4_spec__1_#t~ret1, __utac_acc__Specification4_spec__1_#t~ret2, __utac_acc__Specification4_spec__1_~tmp~1, __utac_acc__Specification4_spec__1_~tmp___0~0;havoc __utac_acc__Specification4_spec__1_~tmp~1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~9;havoc getWaterLevel_~retValue_acc~9;getWaterLevel_~retValue_acc~9 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~9; {23323#false} is VALID [2020-07-28 19:05:08,932 INFO L280 TraceCheckUtils]: 54: Hoare triple {23323#false} __utac_acc__Specification4_spec__1_#t~ret1 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret1 && __utac_acc__Specification4_spec__1_#t~ret1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1 := __utac_acc__Specification4_spec__1_#t~ret1;havoc __utac_acc__Specification4_spec__1_#t~ret1; {23323#false} is VALID [2020-07-28 19:05:08,932 INFO L280 TraceCheckUtils]: 55: Hoare triple {23323#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~1;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~2;havoc isPumpRunning_~retValue_acc~2;isPumpRunning_~retValue_acc~2 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~2; {23323#false} is VALID [2020-07-28 19:05:08,932 INFO L280 TraceCheckUtils]: 56: Hoare triple {23323#false} __utac_acc__Specification4_spec__1_#t~ret2 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret2 && __utac_acc__Specification4_spec__1_#t~ret2 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0 := __utac_acc__Specification4_spec__1_#t~ret2;havoc __utac_acc__Specification4_spec__1_#t~ret2; {23323#false} is VALID [2020-07-28 19:05:08,932 INFO L280 TraceCheckUtils]: 57: Hoare triple {23323#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0; {23323#false} is VALID [2020-07-28 19:05:08,932 INFO L280 TraceCheckUtils]: 58: Hoare triple {23323#false} assume !false; {23323#false} is VALID [2020-07-28 19:05:08,936 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 14 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2020-07-28 19:05:08,936 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [490031351] [2020-07-28 19:05:08,936 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:05:08,937 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2020-07-28 19:05:08,937 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1468271855] [2020-07-28 19:05:08,937 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 59 [2020-07-28 19:05:08,938 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:05:08,938 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states. [2020-07-28 19:05:09,009 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 57 edges. 57 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:05:09,009 INFO L459 AbstractCegarLoop]: Interpolant automaton has 7 states [2020-07-28 19:05:09,009 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:05:09,010 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2020-07-28 19:05:09,010 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2020-07-28 19:05:09,010 INFO L87 Difference]: Start difference. First operand 790 states and 1134 transitions. Second operand 7 states. [2020-07-28 19:05:12,269 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:05:12,269 INFO L93 Difference]: Finished difference Result 1729 states and 2495 transitions. [2020-07-28 19:05:12,269 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2020-07-28 19:05:12,269 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 59 [2020-07-28 19:05:12,269 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:05:12,269 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2020-07-28 19:05:12,272 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 627 transitions. [2020-07-28 19:05:12,272 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2020-07-28 19:05:12,273 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 627 transitions. [2020-07-28 19:05:12,274 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states and 627 transitions. [2020-07-28 19:05:13,064 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 627 edges. 627 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:05:13,111 INFO L225 Difference]: With dead ends: 1729 [2020-07-28 19:05:13,111 INFO L226 Difference]: Without dead ends: 952 [2020-07-28 19:05:13,113 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=48, Invalid=84, Unknown=0, NotChecked=0, Total=132 [2020-07-28 19:05:13,114 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 952 states. [2020-07-28 19:05:14,459 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 952 to 632. [2020-07-28 19:05:14,459 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:05:14,459 INFO L82 GeneralOperation]: Start isEquivalent. First operand 952 states. Second operand 632 states. [2020-07-28 19:05:14,460 INFO L74 IsIncluded]: Start isIncluded. First operand 952 states. Second operand 632 states. [2020-07-28 19:05:14,460 INFO L87 Difference]: Start difference. First operand 952 states. Second operand 632 states. [2020-07-28 19:05:14,495 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:05:14,495 INFO L93 Difference]: Finished difference Result 952 states and 1354 transitions. [2020-07-28 19:05:14,495 INFO L276 IsEmpty]: Start isEmpty. Operand 952 states and 1354 transitions. [2020-07-28 19:05:14,496 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:05:14,496 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:05:14,497 INFO L74 IsIncluded]: Start isIncluded. First operand 632 states. Second operand 952 states. [2020-07-28 19:05:14,497 INFO L87 Difference]: Start difference. First operand 632 states. Second operand 952 states. [2020-07-28 19:05:14,543 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:05:14,543 INFO L93 Difference]: Finished difference Result 952 states and 1354 transitions. [2020-07-28 19:05:14,543 INFO L276 IsEmpty]: Start isEmpty. Operand 952 states and 1354 transitions. [2020-07-28 19:05:14,545 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:05:14,545 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:05:14,545 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:05:14,545 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:05:14,545 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 632 states. [2020-07-28 19:05:14,566 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 632 states to 632 states and 887 transitions. [2020-07-28 19:05:14,566 INFO L78 Accepts]: Start accepts. Automaton has 632 states and 887 transitions. Word has length 59 [2020-07-28 19:05:14,566 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:05:14,566 INFO L479 AbstractCegarLoop]: Abstraction has 632 states and 887 transitions. [2020-07-28 19:05:14,566 INFO L480 AbstractCegarLoop]: Interpolant automaton has 7 states. [2020-07-28 19:05:14,566 INFO L276 IsEmpty]: Start isEmpty. Operand 632 states and 887 transitions. [2020-07-28 19:05:14,567 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2020-07-28 19:05:14,567 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:05:14,568 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:05:14,568 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2020-07-28 19:05:14,568 INFO L427 AbstractCegarLoop]: === Iteration 9 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:05:14,568 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:05:14,568 INFO L82 PathProgramCache]: Analyzing trace with hash 124429653, now seen corresponding path program 1 times [2020-07-28 19:05:14,568 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:05:14,569 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [140054776] [2020-07-28 19:05:14,569 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:05:14,593 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:05:14,638 INFO L280 TraceCheckUtils]: 0: Hoare triple {28385#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(13);call #t~string11.base, #t~string11.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string11.base, #t~string11.offset, 1);call write~init~int(110, #t~string11.base, 1 + #t~string11.offset, 1);call write~init~int(0, #t~string11.base, 2 + #t~string11.offset, 1);call #t~string13.base, #t~string13.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string13.base, #t~string13.offset, 1);call write~init~int(102, #t~string13.base, 1 + #t~string13.offset, 1);call write~init~int(102, #t~string13.base, 2 + #t~string13.offset, 1);call write~init~int(0, #t~string13.base, 3 + #t~string13.offset, 1);call #t~string15.base, #t~string15.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string15.base, #t~string15.offset, 1);call write~init~int(80, #t~string15.base, 1 + #t~string15.offset, 1);call write~init~int(117, #t~string15.base, 2 + #t~string15.offset, 1);call write~init~int(109, #t~string15.base, 3 + #t~string15.offset, 1);call write~init~int(112, #t~string15.base, 4 + #t~string15.offset, 1);call write~init~int(58, #t~string15.base, 5 + #t~string15.offset, 1);call write~init~int(0, #t~string15.base, 6 + #t~string15.offset, 1);call #t~string17.base, #t~string17.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string17.base, #t~string17.offset, 1);call write~init~int(110, #t~string17.base, 1 + #t~string17.offset, 1);call write~init~int(0, #t~string17.base, 2 + #t~string17.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string19.base, #t~string19.offset, 1);call write~init~int(102, #t~string19.base, 1 + #t~string19.offset, 1);call write~init~int(102, #t~string19.base, 2 + #t~string19.offset, 1);call write~init~int(0, #t~string19.base, 3 + #t~string19.offset, 1);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string21.base, #t~string21.offset, 1);call write~init~int(32, #t~string21.base, 1 + #t~string21.offset, 1);call write~init~int(0, #t~string21.base, 2 + #t~string21.offset, 1);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string23.base, #t~string23.offset, 1);call write~init~int(0, #t~string23.base, 1 + #t~string23.offset, 1);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(30);call #t~string49.base, #t~string49.offset := #Ultimate.allocOnStack(9);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(21);call #t~string51.base, #t~string51.offset := #Ultimate.allocOnStack(30);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(9);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(21);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(25);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(30);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(9);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(25);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(13);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string68.base, #t~string68.offset, 1);call write~init~int(77, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(101, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(116, #t~string68.base, 3 + #t~string68.offset, 1);call write~init~int(104, #t~string68.base, 4 + #t~string68.offset, 1);call write~init~int(58, #t~string68.base, 5 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 6 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string70.base, #t~string70.offset, 1);call write~init~int(82, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(73, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(84, #t~string70.base, 3 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 4 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string72.base, #t~string72.offset, 1);call write~init~int(75, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 2 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string74.base, #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 1 + #t~string74.offset, 1);~cleanupTimeShifts~0 := 4;~__SELECTED_FEATURE_base~0 := 0;~__SELECTED_FEATURE_highWaterSensor~0 := 0;~__SELECTED_FEATURE_lowWaterSensor~0 := 0;~__SELECTED_FEATURE_methaneQuery~0 := 0;~__SELECTED_FEATURE_methaneAlarm~0 := 0;~__SELECTED_FEATURE_stopCommand~0 := 0;~__SELECTED_FEATURE_startCommand~0 := 0;~__GUIDSL_ROOT_PRODUCTION~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {28385#true} is VALID [2020-07-28 19:05:14,638 INFO L280 TraceCheckUtils]: 1: Hoare triple {28385#true} havoc main_#res;havoc main_#t~ret0, main_~retValue_acc~0, main_~tmp~0;havoc main_~retValue_acc~0;havoc main_~tmp~0;~__GUIDSL_ROOT_PRODUCTION~0 := 1; {28385#true} is VALID [2020-07-28 19:05:14,638 INFO L280 TraceCheckUtils]: 2: Hoare triple {28385#true} havoc select_features_#t~ret76, select_features_#t~ret77, select_features_#t~ret78, select_features_#t~ret79, select_features_#t~ret80, select_features_#t~ret81;~__SELECTED_FEATURE_base~0 := 1;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {28385#true} is VALID [2020-07-28 19:05:14,638 INFO L280 TraceCheckUtils]: 3: Hoare triple {28385#true} select_features_#t~ret76 := select_one_#res;assume -2147483648 <= select_features_#t~ret76 && select_features_#t~ret76 <= 2147483647;~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret76;havoc select_features_#t~ret76;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {28385#true} is VALID [2020-07-28 19:05:14,638 INFO L280 TraceCheckUtils]: 4: Hoare triple {28385#true} select_features_#t~ret77 := select_one_#res;assume -2147483648 <= select_features_#t~ret77 && select_features_#t~ret77 <= 2147483647;~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret77;havoc select_features_#t~ret77;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {28385#true} is VALID [2020-07-28 19:05:14,639 INFO L280 TraceCheckUtils]: 5: Hoare triple {28385#true} select_features_#t~ret78 := select_one_#res;assume -2147483648 <= select_features_#t~ret78 && select_features_#t~ret78 <= 2147483647;~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret78;havoc select_features_#t~ret78;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {28385#true} is VALID [2020-07-28 19:05:14,639 INFO L280 TraceCheckUtils]: 6: Hoare triple {28385#true} select_features_#t~ret79 := select_one_#res;assume -2147483648 <= select_features_#t~ret79 && select_features_#t~ret79 <= 2147483647;~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret79;havoc select_features_#t~ret79;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {28385#true} is VALID [2020-07-28 19:05:14,639 INFO L280 TraceCheckUtils]: 7: Hoare triple {28385#true} select_features_#t~ret80 := select_one_#res;assume -2147483648 <= select_features_#t~ret80 && select_features_#t~ret80 <= 2147483647;~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret80;havoc select_features_#t~ret80;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {28385#true} is VALID [2020-07-28 19:05:14,639 INFO L280 TraceCheckUtils]: 8: Hoare triple {28385#true} select_features_#t~ret81 := select_one_#res;assume -2147483648 <= select_features_#t~ret81 && select_features_#t~ret81 <= 2147483647;~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret81;havoc select_features_#t~ret81; {28385#true} is VALID [2020-07-28 19:05:14,639 INFO L280 TraceCheckUtils]: 9: Hoare triple {28385#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~13;havoc valid_product_~retValue_acc~13;valid_product_~retValue_acc~13 := ~__SELECTED_FEATURE_base~0;valid_product_#res := valid_product_~retValue_acc~13; {28385#true} is VALID [2020-07-28 19:05:14,639 INFO L280 TraceCheckUtils]: 10: Hoare triple {28385#true} main_#t~ret0 := valid_product_#res;assume -2147483648 <= main_#t~ret0 && main_#t~ret0 <= 2147483647;main_~tmp~0 := main_#t~ret0;havoc main_#t~ret0; {28385#true} is VALID [2020-07-28 19:05:14,640 INFO L280 TraceCheckUtils]: 11: Hoare triple {28385#true} assume 0 != main_~tmp~0; {28385#true} is VALID [2020-07-28 19:05:14,640 INFO L280 TraceCheckUtils]: 12: Hoare triple {28385#true} havoc test_#t~nondet26, test_#t~nondet27, test_#t~nondet28, test_#t~nondet29, test_~splverifierCounter~0, test_~tmp~8, test_~tmp___0~3, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~8;havoc test_~tmp___0~3;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {28385#true} is VALID [2020-07-28 19:05:14,640 INFO L280 TraceCheckUtils]: 13: Hoare triple {28385#true} assume !false; {28385#true} is VALID [2020-07-28 19:05:14,640 INFO L280 TraceCheckUtils]: 14: Hoare triple {28385#true} assume test_~splverifierCounter~0 < 4; {28385#true} is VALID [2020-07-28 19:05:14,640 INFO L280 TraceCheckUtils]: 15: Hoare triple {28385#true} assume -2147483648 <= test_#t~nondet26 && test_#t~nondet26 <= 2147483647;test_~tmp~8 := test_#t~nondet26;havoc test_#t~nondet26; {28385#true} is VALID [2020-07-28 19:05:14,641 INFO L280 TraceCheckUtils]: 16: Hoare triple {28385#true} assume 0 != test_~tmp~8; {28385#true} is VALID [2020-07-28 19:05:14,641 INFO L280 TraceCheckUtils]: 17: Hoare triple {28385#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {28385#true} is VALID [2020-07-28 19:05:14,641 INFO L280 TraceCheckUtils]: 18: Hoare triple {28385#true} assume -2147483648 <= test_#t~nondet27 && test_#t~nondet27 <= 2147483647;test_~tmp___0~3 := test_#t~nondet27;havoc test_#t~nondet27; {28385#true} is VALID [2020-07-28 19:05:14,642 INFO L280 TraceCheckUtils]: 19: Hoare triple {28385#true} assume !(0 != test_~tmp___0~3); {28385#true} is VALID [2020-07-28 19:05:14,642 INFO L280 TraceCheckUtils]: 20: Hoare triple {28385#true} assume -2147483648 <= test_#t~nondet28 && test_#t~nondet28 <= 2147483647;test_~tmp___2~0 := test_#t~nondet28;havoc test_#t~nondet28; {28385#true} is VALID [2020-07-28 19:05:14,642 INFO L280 TraceCheckUtils]: 21: Hoare triple {28385#true} assume !(0 != test_~tmp___2~0);assume -2147483648 <= test_#t~nondet29 && test_#t~nondet29 <= 2147483647;test_~tmp___1~0 := test_#t~nondet29;havoc test_#t~nondet29; {28385#true} is VALID [2020-07-28 19:05:14,642 INFO L280 TraceCheckUtils]: 22: Hoare triple {28385#true} assume !(0 != test_~tmp___1~0); {28385#true} is VALID [2020-07-28 19:05:14,643 INFO L280 TraceCheckUtils]: 23: Hoare triple {28385#true} assume !(0 != ~pumpRunning~0); {28385#true} is VALID [2020-07-28 19:05:14,643 INFO L280 TraceCheckUtils]: 24: Hoare triple {28385#true} assume 0 != ~systemActive~0; {28385#true} is VALID [2020-07-28 19:05:14,643 INFO L280 TraceCheckUtils]: 25: Hoare triple {28385#true} assume !(0 != ~__SELECTED_FEATURE_methaneAlarm~0); {28385#true} is VALID [2020-07-28 19:05:14,644 INFO L280 TraceCheckUtils]: 26: Hoare triple {28385#true} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {28385#true} is VALID [2020-07-28 19:05:14,647 INFO L280 TraceCheckUtils]: 27: Hoare triple {28385#true} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;havoc processEnvironment__role__highWaterSensor_#t~ret3, processEnvironment__role__highWaterSensor_~tmp~2;havoc processEnvironment__role__highWaterSensor_~tmp~2; {28387#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2020-07-28 19:05:14,647 INFO L280 TraceCheckUtils]: 28: Hoare triple {28387#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret24, isHighWaterLevel_~retValue_acc~3, isHighWaterLevel_~tmp~6, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~3;havoc isHighWaterLevel_~tmp~6;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~10;havoc isHighWaterSensorDry_~retValue_acc~10; {28387#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2020-07-28 19:05:14,648 INFO L280 TraceCheckUtils]: 29: Hoare triple {28387#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~10 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~10; {28387#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2020-07-28 19:05:14,649 INFO L280 TraceCheckUtils]: 30: Hoare triple {28387#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} isHighWaterLevel_#t~ret24 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret24 && isHighWaterLevel_#t~ret24 <= 2147483647;isHighWaterLevel_~tmp~6 := isHighWaterLevel_#t~ret24;havoc isHighWaterLevel_#t~ret24; {28387#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2020-07-28 19:05:14,649 INFO L280 TraceCheckUtils]: 31: Hoare triple {28387#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != isHighWaterLevel_~tmp~6);isHighWaterLevel_~tmp___0~1 := 1; {28387#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2020-07-28 19:05:14,650 INFO L280 TraceCheckUtils]: 32: Hoare triple {28387#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} isHighWaterLevel_~retValue_acc~3 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~3; {28387#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2020-07-28 19:05:14,650 INFO L280 TraceCheckUtils]: 33: Hoare triple {28387#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} processEnvironment__role__highWaterSensor_#t~ret3 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret3 && processEnvironment__role__highWaterSensor_#t~ret3 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~2 := processEnvironment__role__highWaterSensor_#t~ret3;havoc processEnvironment__role__highWaterSensor_#t~ret3; {28387#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2020-07-28 19:05:14,651 INFO L280 TraceCheckUtils]: 34: Hoare triple {28387#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume 0 != processEnvironment__role__highWaterSensor_~tmp~2; {28387#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2020-07-28 19:05:14,651 INFO L280 TraceCheckUtils]: 35: Hoare triple {28387#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0);~pumpRunning~0 := 1; {28387#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2020-07-28 19:05:14,652 INFO L280 TraceCheckUtils]: 36: Hoare triple {28387#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} havoc __utac_acc__Specification4_spec__1_#t~ret1, __utac_acc__Specification4_spec__1_#t~ret2, __utac_acc__Specification4_spec__1_~tmp~1, __utac_acc__Specification4_spec__1_~tmp___0~0;havoc __utac_acc__Specification4_spec__1_~tmp~1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~9;havoc getWaterLevel_~retValue_acc~9;getWaterLevel_~retValue_acc~9 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~9; {28387#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2020-07-28 19:05:14,652 INFO L280 TraceCheckUtils]: 37: Hoare triple {28387#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} __utac_acc__Specification4_spec__1_#t~ret1 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret1 && __utac_acc__Specification4_spec__1_#t~ret1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1 := __utac_acc__Specification4_spec__1_#t~ret1;havoc __utac_acc__Specification4_spec__1_#t~ret1; {28387#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2020-07-28 19:05:14,653 INFO L280 TraceCheckUtils]: 38: Hoare triple {28387#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~1); {28387#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2020-07-28 19:05:14,654 INFO L280 TraceCheckUtils]: 39: Hoare triple {28387#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !false; {28387#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2020-07-28 19:05:14,654 INFO L280 TraceCheckUtils]: 40: Hoare triple {28387#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume test_~splverifierCounter~0 < 4; {28387#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2020-07-28 19:05:14,655 INFO L280 TraceCheckUtils]: 41: Hoare triple {28387#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume -2147483648 <= test_#t~nondet26 && test_#t~nondet26 <= 2147483647;test_~tmp~8 := test_#t~nondet26;havoc test_#t~nondet26; {28387#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2020-07-28 19:05:14,655 INFO L280 TraceCheckUtils]: 42: Hoare triple {28387#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != test_~tmp~8); {28387#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2020-07-28 19:05:14,656 INFO L280 TraceCheckUtils]: 43: Hoare triple {28387#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume -2147483648 <= test_#t~nondet27 && test_#t~nondet27 <= 2147483647;test_~tmp___0~3 := test_#t~nondet27;havoc test_#t~nondet27; {28387#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2020-07-28 19:05:14,656 INFO L280 TraceCheckUtils]: 44: Hoare triple {28387#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != test_~tmp___0~3); {28387#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2020-07-28 19:05:14,657 INFO L280 TraceCheckUtils]: 45: Hoare triple {28387#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume -2147483648 <= test_#t~nondet28 && test_#t~nondet28 <= 2147483647;test_~tmp___2~0 := test_#t~nondet28;havoc test_#t~nondet28; {28387#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2020-07-28 19:05:14,658 INFO L280 TraceCheckUtils]: 46: Hoare triple {28387#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != test_~tmp___2~0);assume -2147483648 <= test_#t~nondet29 && test_#t~nondet29 <= 2147483647;test_~tmp___1~0 := test_#t~nondet29;havoc test_#t~nondet29; {28387#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2020-07-28 19:05:14,658 INFO L280 TraceCheckUtils]: 47: Hoare triple {28387#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != test_~tmp___1~0); {28387#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2020-07-28 19:05:14,660 INFO L280 TraceCheckUtils]: 48: Hoare triple {28387#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume 0 != ~pumpRunning~0; {28387#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2020-07-28 19:05:14,662 INFO L280 TraceCheckUtils]: 49: Hoare triple {28387#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {28387#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2020-07-28 19:05:14,664 INFO L280 TraceCheckUtils]: 50: Hoare triple {28387#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume 0 != ~systemActive~0; {28387#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2020-07-28 19:05:14,666 INFO L280 TraceCheckUtils]: 51: Hoare triple {28387#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != ~__SELECTED_FEATURE_methaneAlarm~0); {28387#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2020-07-28 19:05:14,667 INFO L280 TraceCheckUtils]: 52: Hoare triple {28387#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {28387#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2020-07-28 19:05:14,668 INFO L280 TraceCheckUtils]: 53: Hoare triple {28387#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != ~__SELECTED_FEATURE_highWaterSensor~0); {28386#false} is VALID [2020-07-28 19:05:14,668 INFO L280 TraceCheckUtils]: 54: Hoare triple {28386#false} havoc __utac_acc__Specification4_spec__1_#t~ret1, __utac_acc__Specification4_spec__1_#t~ret2, __utac_acc__Specification4_spec__1_~tmp~1, __utac_acc__Specification4_spec__1_~tmp___0~0;havoc __utac_acc__Specification4_spec__1_~tmp~1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~9;havoc getWaterLevel_~retValue_acc~9;getWaterLevel_~retValue_acc~9 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~9; {28386#false} is VALID [2020-07-28 19:05:14,668 INFO L280 TraceCheckUtils]: 55: Hoare triple {28386#false} __utac_acc__Specification4_spec__1_#t~ret1 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret1 && __utac_acc__Specification4_spec__1_#t~ret1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1 := __utac_acc__Specification4_spec__1_#t~ret1;havoc __utac_acc__Specification4_spec__1_#t~ret1; {28386#false} is VALID [2020-07-28 19:05:14,668 INFO L280 TraceCheckUtils]: 56: Hoare triple {28386#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~1;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~2;havoc isPumpRunning_~retValue_acc~2;isPumpRunning_~retValue_acc~2 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~2; {28386#false} is VALID [2020-07-28 19:05:14,668 INFO L280 TraceCheckUtils]: 57: Hoare triple {28386#false} __utac_acc__Specification4_spec__1_#t~ret2 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret2 && __utac_acc__Specification4_spec__1_#t~ret2 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0 := __utac_acc__Specification4_spec__1_#t~ret2;havoc __utac_acc__Specification4_spec__1_#t~ret2; {28386#false} is VALID [2020-07-28 19:05:14,669 INFO L280 TraceCheckUtils]: 58: Hoare triple {28386#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0; {28386#false} is VALID [2020-07-28 19:05:14,669 INFO L280 TraceCheckUtils]: 59: Hoare triple {28386#false} assume !false; {28386#false} is VALID [2020-07-28 19:05:14,672 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 17 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:05:14,673 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [140054776] [2020-07-28 19:05:14,673 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:05:14,673 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2020-07-28 19:05:14,674 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1095771745] [2020-07-28 19:05:14,674 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 60 [2020-07-28 19:05:14,675 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:05:14,675 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 19:05:14,743 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 60 edges. 60 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:05:14,743 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 19:05:14,744 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:05:14,744 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 19:05:14,744 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:05:14,744 INFO L87 Difference]: Start difference. First operand 632 states and 887 transitions. Second operand 3 states. [2020-07-28 19:05:16,865 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:05:16,865 INFO L93 Difference]: Finished difference Result 1338 states and 1889 transitions. [2020-07-28 19:05:16,865 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 19:05:16,865 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 60 [2020-07-28 19:05:16,865 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:05:16,866 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:05:16,868 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 497 transitions. [2020-07-28 19:05:16,868 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:05:16,870 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 497 transitions. [2020-07-28 19:05:16,870 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 497 transitions. [2020-07-28 19:05:17,410 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 497 edges. 497 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:05:17,437 INFO L225 Difference]: With dead ends: 1338 [2020-07-28 19:05:17,437 INFO L226 Difference]: Without dead ends: 719 [2020-07-28 19:05:17,438 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:05:17,439 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 719 states. [2020-07-28 19:05:18,935 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 719 to 704. [2020-07-28 19:05:18,935 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:05:18,936 INFO L82 GeneralOperation]: Start isEquivalent. First operand 719 states. Second operand 704 states. [2020-07-28 19:05:18,936 INFO L74 IsIncluded]: Start isIncluded. First operand 719 states. Second operand 704 states. [2020-07-28 19:05:18,936 INFO L87 Difference]: Start difference. First operand 719 states. Second operand 704 states. [2020-07-28 19:05:18,956 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:05:18,956 INFO L93 Difference]: Finished difference Result 719 states and 985 transitions. [2020-07-28 19:05:18,956 INFO L276 IsEmpty]: Start isEmpty. Operand 719 states and 985 transitions. [2020-07-28 19:05:18,957 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:05:18,957 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:05:18,957 INFO L74 IsIncluded]: Start isIncluded. First operand 704 states. Second operand 719 states. [2020-07-28 19:05:18,957 INFO L87 Difference]: Start difference. First operand 704 states. Second operand 719 states. [2020-07-28 19:05:18,979 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:05:18,980 INFO L93 Difference]: Finished difference Result 719 states and 985 transitions. [2020-07-28 19:05:18,980 INFO L276 IsEmpty]: Start isEmpty. Operand 719 states and 985 transitions. [2020-07-28 19:05:18,981 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:05:18,981 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:05:18,981 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:05:18,981 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:05:18,981 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 704 states. [2020-07-28 19:05:19,001 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 704 states to 704 states and 964 transitions. [2020-07-28 19:05:19,001 INFO L78 Accepts]: Start accepts. Automaton has 704 states and 964 transitions. Word has length 60 [2020-07-28 19:05:19,001 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:05:19,001 INFO L479 AbstractCegarLoop]: Abstraction has 704 states and 964 transitions. [2020-07-28 19:05:19,001 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 19:05:19,001 INFO L276 IsEmpty]: Start isEmpty. Operand 704 states and 964 transitions. [2020-07-28 19:05:19,002 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2020-07-28 19:05:19,002 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:05:19,002 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:05:19,002 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2020-07-28 19:05:19,003 INFO L427 AbstractCegarLoop]: === Iteration 10 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:05:19,003 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:05:19,003 INFO L82 PathProgramCache]: Analyzing trace with hash 417791151, now seen corresponding path program 1 times [2020-07-28 19:05:19,003 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:05:19,003 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1766199691] [2020-07-28 19:05:19,003 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:05:19,027 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:05:19,104 INFO L280 TraceCheckUtils]: 0: Hoare triple {32533#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(13);call #t~string11.base, #t~string11.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string11.base, #t~string11.offset, 1);call write~init~int(110, #t~string11.base, 1 + #t~string11.offset, 1);call write~init~int(0, #t~string11.base, 2 + #t~string11.offset, 1);call #t~string13.base, #t~string13.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string13.base, #t~string13.offset, 1);call write~init~int(102, #t~string13.base, 1 + #t~string13.offset, 1);call write~init~int(102, #t~string13.base, 2 + #t~string13.offset, 1);call write~init~int(0, #t~string13.base, 3 + #t~string13.offset, 1);call #t~string15.base, #t~string15.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string15.base, #t~string15.offset, 1);call write~init~int(80, #t~string15.base, 1 + #t~string15.offset, 1);call write~init~int(117, #t~string15.base, 2 + #t~string15.offset, 1);call write~init~int(109, #t~string15.base, 3 + #t~string15.offset, 1);call write~init~int(112, #t~string15.base, 4 + #t~string15.offset, 1);call write~init~int(58, #t~string15.base, 5 + #t~string15.offset, 1);call write~init~int(0, #t~string15.base, 6 + #t~string15.offset, 1);call #t~string17.base, #t~string17.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string17.base, #t~string17.offset, 1);call write~init~int(110, #t~string17.base, 1 + #t~string17.offset, 1);call write~init~int(0, #t~string17.base, 2 + #t~string17.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string19.base, #t~string19.offset, 1);call write~init~int(102, #t~string19.base, 1 + #t~string19.offset, 1);call write~init~int(102, #t~string19.base, 2 + #t~string19.offset, 1);call write~init~int(0, #t~string19.base, 3 + #t~string19.offset, 1);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string21.base, #t~string21.offset, 1);call write~init~int(32, #t~string21.base, 1 + #t~string21.offset, 1);call write~init~int(0, #t~string21.base, 2 + #t~string21.offset, 1);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string23.base, #t~string23.offset, 1);call write~init~int(0, #t~string23.base, 1 + #t~string23.offset, 1);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(30);call #t~string49.base, #t~string49.offset := #Ultimate.allocOnStack(9);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(21);call #t~string51.base, #t~string51.offset := #Ultimate.allocOnStack(30);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(9);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(21);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(25);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(30);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(9);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(25);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(13);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string68.base, #t~string68.offset, 1);call write~init~int(77, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(101, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(116, #t~string68.base, 3 + #t~string68.offset, 1);call write~init~int(104, #t~string68.base, 4 + #t~string68.offset, 1);call write~init~int(58, #t~string68.base, 5 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 6 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string70.base, #t~string70.offset, 1);call write~init~int(82, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(73, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(84, #t~string70.base, 3 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 4 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string72.base, #t~string72.offset, 1);call write~init~int(75, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 2 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string74.base, #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 1 + #t~string74.offset, 1);~cleanupTimeShifts~0 := 4;~__SELECTED_FEATURE_base~0 := 0;~__SELECTED_FEATURE_highWaterSensor~0 := 0;~__SELECTED_FEATURE_lowWaterSensor~0 := 0;~__SELECTED_FEATURE_methaneQuery~0 := 0;~__SELECTED_FEATURE_methaneAlarm~0 := 0;~__SELECTED_FEATURE_stopCommand~0 := 0;~__SELECTED_FEATURE_startCommand~0 := 0;~__GUIDSL_ROOT_PRODUCTION~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {32533#true} is VALID [2020-07-28 19:05:19,105 INFO L280 TraceCheckUtils]: 1: Hoare triple {32533#true} havoc main_#res;havoc main_#t~ret0, main_~retValue_acc~0, main_~tmp~0;havoc main_~retValue_acc~0;havoc main_~tmp~0;~__GUIDSL_ROOT_PRODUCTION~0 := 1; {32533#true} is VALID [2020-07-28 19:05:19,105 INFO L280 TraceCheckUtils]: 2: Hoare triple {32533#true} havoc select_features_#t~ret76, select_features_#t~ret77, select_features_#t~ret78, select_features_#t~ret79, select_features_#t~ret80, select_features_#t~ret81;~__SELECTED_FEATURE_base~0 := 1;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {32533#true} is VALID [2020-07-28 19:05:19,105 INFO L280 TraceCheckUtils]: 3: Hoare triple {32533#true} select_features_#t~ret76 := select_one_#res;assume -2147483648 <= select_features_#t~ret76 && select_features_#t~ret76 <= 2147483647;~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret76;havoc select_features_#t~ret76;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {32533#true} is VALID [2020-07-28 19:05:19,105 INFO L280 TraceCheckUtils]: 4: Hoare triple {32533#true} select_features_#t~ret77 := select_one_#res;assume -2147483648 <= select_features_#t~ret77 && select_features_#t~ret77 <= 2147483647;~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret77;havoc select_features_#t~ret77;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {32533#true} is VALID [2020-07-28 19:05:19,106 INFO L280 TraceCheckUtils]: 5: Hoare triple {32533#true} select_features_#t~ret78 := select_one_#res;assume -2147483648 <= select_features_#t~ret78 && select_features_#t~ret78 <= 2147483647;~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret78;havoc select_features_#t~ret78;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {32533#true} is VALID [2020-07-28 19:05:19,106 INFO L280 TraceCheckUtils]: 6: Hoare triple {32533#true} select_features_#t~ret79 := select_one_#res;assume -2147483648 <= select_features_#t~ret79 && select_features_#t~ret79 <= 2147483647;~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret79;havoc select_features_#t~ret79;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {32533#true} is VALID [2020-07-28 19:05:19,106 INFO L280 TraceCheckUtils]: 7: Hoare triple {32533#true} select_features_#t~ret80 := select_one_#res;assume -2147483648 <= select_features_#t~ret80 && select_features_#t~ret80 <= 2147483647;~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret80;havoc select_features_#t~ret80;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {32533#true} is VALID [2020-07-28 19:05:19,106 INFO L280 TraceCheckUtils]: 8: Hoare triple {32533#true} select_features_#t~ret81 := select_one_#res;assume -2147483648 <= select_features_#t~ret81 && select_features_#t~ret81 <= 2147483647;~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret81;havoc select_features_#t~ret81; {32533#true} is VALID [2020-07-28 19:05:19,106 INFO L280 TraceCheckUtils]: 9: Hoare triple {32533#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~13;havoc valid_product_~retValue_acc~13;valid_product_~retValue_acc~13 := ~__SELECTED_FEATURE_base~0;valid_product_#res := valid_product_~retValue_acc~13; {32533#true} is VALID [2020-07-28 19:05:19,106 INFO L280 TraceCheckUtils]: 10: Hoare triple {32533#true} main_#t~ret0 := valid_product_#res;assume -2147483648 <= main_#t~ret0 && main_#t~ret0 <= 2147483647;main_~tmp~0 := main_#t~ret0;havoc main_#t~ret0; {32533#true} is VALID [2020-07-28 19:05:19,107 INFO L280 TraceCheckUtils]: 11: Hoare triple {32533#true} assume 0 != main_~tmp~0; {32533#true} is VALID [2020-07-28 19:05:19,107 INFO L280 TraceCheckUtils]: 12: Hoare triple {32533#true} havoc test_#t~nondet26, test_#t~nondet27, test_#t~nondet28, test_#t~nondet29, test_~splverifierCounter~0, test_~tmp~8, test_~tmp___0~3, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~8;havoc test_~tmp___0~3;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {32533#true} is VALID [2020-07-28 19:05:19,107 INFO L280 TraceCheckUtils]: 13: Hoare triple {32533#true} assume !false; {32533#true} is VALID [2020-07-28 19:05:19,108 INFO L280 TraceCheckUtils]: 14: Hoare triple {32533#true} assume test_~splverifierCounter~0 < 4; {32533#true} is VALID [2020-07-28 19:05:19,108 INFO L280 TraceCheckUtils]: 15: Hoare triple {32533#true} assume -2147483648 <= test_#t~nondet26 && test_#t~nondet26 <= 2147483647;test_~tmp~8 := test_#t~nondet26;havoc test_#t~nondet26; {32533#true} is VALID [2020-07-28 19:05:19,108 INFO L280 TraceCheckUtils]: 16: Hoare triple {32533#true} assume 0 != test_~tmp~8; {32533#true} is VALID [2020-07-28 19:05:19,108 INFO L280 TraceCheckUtils]: 17: Hoare triple {32533#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {32533#true} is VALID [2020-07-28 19:05:19,108 INFO L280 TraceCheckUtils]: 18: Hoare triple {32533#true} assume -2147483648 <= test_#t~nondet27 && test_#t~nondet27 <= 2147483647;test_~tmp___0~3 := test_#t~nondet27;havoc test_#t~nondet27; {32533#true} is VALID [2020-07-28 19:05:19,109 INFO L280 TraceCheckUtils]: 19: Hoare triple {32533#true} assume !(0 != test_~tmp___0~3); {32533#true} is VALID [2020-07-28 19:05:19,109 INFO L280 TraceCheckUtils]: 20: Hoare triple {32533#true} assume -2147483648 <= test_#t~nondet28 && test_#t~nondet28 <= 2147483647;test_~tmp___2~0 := test_#t~nondet28;havoc test_#t~nondet28; {32533#true} is VALID [2020-07-28 19:05:19,109 INFO L280 TraceCheckUtils]: 21: Hoare triple {32533#true} assume !(0 != test_~tmp___2~0);assume -2147483648 <= test_#t~nondet29 && test_#t~nondet29 <= 2147483647;test_~tmp___1~0 := test_#t~nondet29;havoc test_#t~nondet29; {32533#true} is VALID [2020-07-28 19:05:19,109 INFO L280 TraceCheckUtils]: 22: Hoare triple {32533#true} assume !(0 != test_~tmp___1~0); {32533#true} is VALID [2020-07-28 19:05:19,109 INFO L280 TraceCheckUtils]: 23: Hoare triple {32533#true} assume !(0 != ~pumpRunning~0); {32533#true} is VALID [2020-07-28 19:05:19,109 INFO L280 TraceCheckUtils]: 24: Hoare triple {32533#true} assume 0 != ~systemActive~0; {32533#true} is VALID [2020-07-28 19:05:19,110 INFO L280 TraceCheckUtils]: 25: Hoare triple {32533#true} assume !(0 != ~__SELECTED_FEATURE_methaneAlarm~0); {32533#true} is VALID [2020-07-28 19:05:19,110 INFO L280 TraceCheckUtils]: 26: Hoare triple {32533#true} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {32533#true} is VALID [2020-07-28 19:05:19,110 INFO L280 TraceCheckUtils]: 27: Hoare triple {32533#true} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;havoc processEnvironment__role__highWaterSensor_#t~ret3, processEnvironment__role__highWaterSensor_~tmp~2;havoc processEnvironment__role__highWaterSensor_~tmp~2; {32533#true} is VALID [2020-07-28 19:05:19,111 INFO L280 TraceCheckUtils]: 28: Hoare triple {32533#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret24, isHighWaterLevel_~retValue_acc~3, isHighWaterLevel_~tmp~6, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~3;havoc isHighWaterLevel_~tmp~6;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~10;havoc isHighWaterSensorDry_~retValue_acc~10; {32533#true} is VALID [2020-07-28 19:05:19,112 INFO L280 TraceCheckUtils]: 29: Hoare triple {32533#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~10 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~10; {32535#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:05:19,112 INFO L280 TraceCheckUtils]: 30: Hoare triple {32535#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret24 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret24 && isHighWaterLevel_#t~ret24 <= 2147483647;isHighWaterLevel_~tmp~6 := isHighWaterLevel_#t~ret24;havoc isHighWaterLevel_#t~ret24; {32535#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:05:19,113 INFO L280 TraceCheckUtils]: 31: Hoare triple {32535#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~6);isHighWaterLevel_~tmp___0~1 := 1; {32535#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:05:19,114 INFO L280 TraceCheckUtils]: 32: Hoare triple {32535#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~3 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~3; {32535#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:05:19,114 INFO L280 TraceCheckUtils]: 33: Hoare triple {32535#(<= 2 ~waterLevel~0)} processEnvironment__role__highWaterSensor_#t~ret3 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret3 && processEnvironment__role__highWaterSensor_#t~ret3 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~2 := processEnvironment__role__highWaterSensor_#t~ret3;havoc processEnvironment__role__highWaterSensor_#t~ret3; {32535#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:05:19,115 INFO L280 TraceCheckUtils]: 34: Hoare triple {32535#(<= 2 ~waterLevel~0)} assume 0 != processEnvironment__role__highWaterSensor_~tmp~2; {32535#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:05:19,115 INFO L280 TraceCheckUtils]: 35: Hoare triple {32535#(<= 2 ~waterLevel~0)} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0);~pumpRunning~0 := 1; {32535#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:05:19,116 INFO L280 TraceCheckUtils]: 36: Hoare triple {32535#(<= 2 ~waterLevel~0)} havoc __utac_acc__Specification4_spec__1_#t~ret1, __utac_acc__Specification4_spec__1_#t~ret2, __utac_acc__Specification4_spec__1_~tmp~1, __utac_acc__Specification4_spec__1_~tmp___0~0;havoc __utac_acc__Specification4_spec__1_~tmp~1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~9;havoc getWaterLevel_~retValue_acc~9;getWaterLevel_~retValue_acc~9 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~9; {32535#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:05:19,116 INFO L280 TraceCheckUtils]: 37: Hoare triple {32535#(<= 2 ~waterLevel~0)} __utac_acc__Specification4_spec__1_#t~ret1 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret1 && __utac_acc__Specification4_spec__1_#t~ret1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1 := __utac_acc__Specification4_spec__1_#t~ret1;havoc __utac_acc__Specification4_spec__1_#t~ret1; {32535#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:05:19,117 INFO L280 TraceCheckUtils]: 38: Hoare triple {32535#(<= 2 ~waterLevel~0)} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~1); {32535#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:05:19,117 INFO L280 TraceCheckUtils]: 39: Hoare triple {32535#(<= 2 ~waterLevel~0)} assume !false; {32535#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:05:19,118 INFO L280 TraceCheckUtils]: 40: Hoare triple {32535#(<= 2 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {32535#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:05:19,118 INFO L280 TraceCheckUtils]: 41: Hoare triple {32535#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet26 && test_#t~nondet26 <= 2147483647;test_~tmp~8 := test_#t~nondet26;havoc test_#t~nondet26; {32535#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:05:19,119 INFO L280 TraceCheckUtils]: 42: Hoare triple {32535#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp~8); {32535#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:05:19,119 INFO L280 TraceCheckUtils]: 43: Hoare triple {32535#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet27 && test_#t~nondet27 <= 2147483647;test_~tmp___0~3 := test_#t~nondet27;havoc test_#t~nondet27; {32535#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:05:19,119 INFO L280 TraceCheckUtils]: 44: Hoare triple {32535#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp___0~3); {32535#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:05:19,120 INFO L280 TraceCheckUtils]: 45: Hoare triple {32535#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet28 && test_#t~nondet28 <= 2147483647;test_~tmp___2~0 := test_#t~nondet28;havoc test_#t~nondet28; {32535#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:05:19,120 INFO L280 TraceCheckUtils]: 46: Hoare triple {32535#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp___2~0);assume -2147483648 <= test_#t~nondet29 && test_#t~nondet29 <= 2147483647;test_~tmp___1~0 := test_#t~nondet29;havoc test_#t~nondet29; {32535#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:05:19,121 INFO L280 TraceCheckUtils]: 47: Hoare triple {32535#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp___1~0); {32535#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:05:19,121 INFO L280 TraceCheckUtils]: 48: Hoare triple {32535#(<= 2 ~waterLevel~0)} assume 0 != ~pumpRunning~0; {32535#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:05:19,122 INFO L280 TraceCheckUtils]: 49: Hoare triple {32535#(<= 2 ~waterLevel~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {32536#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:05:19,122 INFO L280 TraceCheckUtils]: 50: Hoare triple {32536#(<= 1 ~waterLevel~0)} assume 0 != ~systemActive~0; {32536#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:05:19,123 INFO L280 TraceCheckUtils]: 51: Hoare triple {32536#(<= 1 ~waterLevel~0)} assume !(0 != ~__SELECTED_FEATURE_methaneAlarm~0); {32536#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:05:19,123 INFO L280 TraceCheckUtils]: 52: Hoare triple {32536#(<= 1 ~waterLevel~0)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {32536#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:05:19,123 INFO L280 TraceCheckUtils]: 53: Hoare triple {32536#(<= 1 ~waterLevel~0)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;havoc processEnvironment__role__highWaterSensor_#t~ret3, processEnvironment__role__highWaterSensor_~tmp~2;havoc processEnvironment__role__highWaterSensor_~tmp~2; {32536#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:05:19,124 INFO L280 TraceCheckUtils]: 54: Hoare triple {32536#(<= 1 ~waterLevel~0)} assume !(0 == ~pumpRunning~0); {32536#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:05:19,130 INFO L280 TraceCheckUtils]: 55: Hoare triple {32536#(<= 1 ~waterLevel~0)} havoc __utac_acc__Specification4_spec__1_#t~ret1, __utac_acc__Specification4_spec__1_#t~ret2, __utac_acc__Specification4_spec__1_~tmp~1, __utac_acc__Specification4_spec__1_~tmp___0~0;havoc __utac_acc__Specification4_spec__1_~tmp~1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~9;havoc getWaterLevel_~retValue_acc~9;getWaterLevel_~retValue_acc~9 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~9; {32537#(<= 1 |ULTIMATE.start_getWaterLevel_#res|)} is VALID [2020-07-28 19:05:19,131 INFO L280 TraceCheckUtils]: 56: Hoare triple {32537#(<= 1 |ULTIMATE.start_getWaterLevel_#res|)} __utac_acc__Specification4_spec__1_#t~ret1 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret1 && __utac_acc__Specification4_spec__1_#t~ret1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1 := __utac_acc__Specification4_spec__1_#t~ret1;havoc __utac_acc__Specification4_spec__1_#t~ret1; {32538#(<= 1 ULTIMATE.start___utac_acc__Specification4_spec__1_~tmp~1)} is VALID [2020-07-28 19:05:19,131 INFO L280 TraceCheckUtils]: 57: Hoare triple {32538#(<= 1 ULTIMATE.start___utac_acc__Specification4_spec__1_~tmp~1)} assume 0 == __utac_acc__Specification4_spec__1_~tmp~1;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~2;havoc isPumpRunning_~retValue_acc~2;isPumpRunning_~retValue_acc~2 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~2; {32534#false} is VALID [2020-07-28 19:05:19,131 INFO L280 TraceCheckUtils]: 58: Hoare triple {32534#false} __utac_acc__Specification4_spec__1_#t~ret2 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret2 && __utac_acc__Specification4_spec__1_#t~ret2 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0 := __utac_acc__Specification4_spec__1_#t~ret2;havoc __utac_acc__Specification4_spec__1_#t~ret2; {32534#false} is VALID [2020-07-28 19:05:19,132 INFO L280 TraceCheckUtils]: 59: Hoare triple {32534#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0; {32534#false} is VALID [2020-07-28 19:05:19,132 INFO L280 TraceCheckUtils]: 60: Hoare triple {32534#false} assume !false; {32534#false} is VALID [2020-07-28 19:05:19,136 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 15 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:05:19,136 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1766199691] [2020-07-28 19:05:19,136 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1649617161] [2020-07-28 19:05:19,136 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 3 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2020-07-28 19:05:19,256 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:05:19,257 INFO L263 TraceCheckSpWp]: Trace formula consists of 480 conjuncts, 6 conjunts are in the unsatisfiable core [2020-07-28 19:05:19,283 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:05:19,286 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2020-07-28 19:05:19,454 INFO L280 TraceCheckUtils]: 0: Hoare triple {32533#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(13);call #t~string11.base, #t~string11.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string11.base, #t~string11.offset, 1);call write~init~int(110, #t~string11.base, 1 + #t~string11.offset, 1);call write~init~int(0, #t~string11.base, 2 + #t~string11.offset, 1);call #t~string13.base, #t~string13.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string13.base, #t~string13.offset, 1);call write~init~int(102, #t~string13.base, 1 + #t~string13.offset, 1);call write~init~int(102, #t~string13.base, 2 + #t~string13.offset, 1);call write~init~int(0, #t~string13.base, 3 + #t~string13.offset, 1);call #t~string15.base, #t~string15.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string15.base, #t~string15.offset, 1);call write~init~int(80, #t~string15.base, 1 + #t~string15.offset, 1);call write~init~int(117, #t~string15.base, 2 + #t~string15.offset, 1);call write~init~int(109, #t~string15.base, 3 + #t~string15.offset, 1);call write~init~int(112, #t~string15.base, 4 + #t~string15.offset, 1);call write~init~int(58, #t~string15.base, 5 + #t~string15.offset, 1);call write~init~int(0, #t~string15.base, 6 + #t~string15.offset, 1);call #t~string17.base, #t~string17.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string17.base, #t~string17.offset, 1);call write~init~int(110, #t~string17.base, 1 + #t~string17.offset, 1);call write~init~int(0, #t~string17.base, 2 + #t~string17.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string19.base, #t~string19.offset, 1);call write~init~int(102, #t~string19.base, 1 + #t~string19.offset, 1);call write~init~int(102, #t~string19.base, 2 + #t~string19.offset, 1);call write~init~int(0, #t~string19.base, 3 + #t~string19.offset, 1);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string21.base, #t~string21.offset, 1);call write~init~int(32, #t~string21.base, 1 + #t~string21.offset, 1);call write~init~int(0, #t~string21.base, 2 + #t~string21.offset, 1);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string23.base, #t~string23.offset, 1);call write~init~int(0, #t~string23.base, 1 + #t~string23.offset, 1);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(30);call #t~string49.base, #t~string49.offset := #Ultimate.allocOnStack(9);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(21);call #t~string51.base, #t~string51.offset := #Ultimate.allocOnStack(30);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(9);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(21);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(25);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(30);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(9);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(25);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(13);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string68.base, #t~string68.offset, 1);call write~init~int(77, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(101, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(116, #t~string68.base, 3 + #t~string68.offset, 1);call write~init~int(104, #t~string68.base, 4 + #t~string68.offset, 1);call write~init~int(58, #t~string68.base, 5 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 6 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string70.base, #t~string70.offset, 1);call write~init~int(82, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(73, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(84, #t~string70.base, 3 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 4 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string72.base, #t~string72.offset, 1);call write~init~int(75, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 2 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string74.base, #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 1 + #t~string74.offset, 1);~cleanupTimeShifts~0 := 4;~__SELECTED_FEATURE_base~0 := 0;~__SELECTED_FEATURE_highWaterSensor~0 := 0;~__SELECTED_FEATURE_lowWaterSensor~0 := 0;~__SELECTED_FEATURE_methaneQuery~0 := 0;~__SELECTED_FEATURE_methaneAlarm~0 := 0;~__SELECTED_FEATURE_stopCommand~0 := 0;~__SELECTED_FEATURE_startCommand~0 := 0;~__GUIDSL_ROOT_PRODUCTION~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {32533#true} is VALID [2020-07-28 19:05:19,454 INFO L280 TraceCheckUtils]: 1: Hoare triple {32533#true} havoc main_#res;havoc main_#t~ret0, main_~retValue_acc~0, main_~tmp~0;havoc main_~retValue_acc~0;havoc main_~tmp~0;~__GUIDSL_ROOT_PRODUCTION~0 := 1; {32533#true} is VALID [2020-07-28 19:05:19,454 INFO L280 TraceCheckUtils]: 2: Hoare triple {32533#true} havoc select_features_#t~ret76, select_features_#t~ret77, select_features_#t~ret78, select_features_#t~ret79, select_features_#t~ret80, select_features_#t~ret81;~__SELECTED_FEATURE_base~0 := 1;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {32533#true} is VALID [2020-07-28 19:05:19,455 INFO L280 TraceCheckUtils]: 3: Hoare triple {32533#true} select_features_#t~ret76 := select_one_#res;assume -2147483648 <= select_features_#t~ret76 && select_features_#t~ret76 <= 2147483647;~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret76;havoc select_features_#t~ret76;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {32533#true} is VALID [2020-07-28 19:05:19,455 INFO L280 TraceCheckUtils]: 4: Hoare triple {32533#true} select_features_#t~ret77 := select_one_#res;assume -2147483648 <= select_features_#t~ret77 && select_features_#t~ret77 <= 2147483647;~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret77;havoc select_features_#t~ret77;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {32533#true} is VALID [2020-07-28 19:05:19,455 INFO L280 TraceCheckUtils]: 5: Hoare triple {32533#true} select_features_#t~ret78 := select_one_#res;assume -2147483648 <= select_features_#t~ret78 && select_features_#t~ret78 <= 2147483647;~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret78;havoc select_features_#t~ret78;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {32533#true} is VALID [2020-07-28 19:05:19,455 INFO L280 TraceCheckUtils]: 6: Hoare triple {32533#true} select_features_#t~ret79 := select_one_#res;assume -2147483648 <= select_features_#t~ret79 && select_features_#t~ret79 <= 2147483647;~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret79;havoc select_features_#t~ret79;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {32533#true} is VALID [2020-07-28 19:05:19,455 INFO L280 TraceCheckUtils]: 7: Hoare triple {32533#true} select_features_#t~ret80 := select_one_#res;assume -2147483648 <= select_features_#t~ret80 && select_features_#t~ret80 <= 2147483647;~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret80;havoc select_features_#t~ret80;havoc select_one_#res;havoc select_one_#t~nondet75, select_one_~retValue_acc~12, select_one_~choice~0;havoc select_one_~retValue_acc~12;assume -2147483648 <= select_one_#t~nondet75 && select_one_#t~nondet75 <= 2147483647;select_one_~choice~0 := select_one_#t~nondet75;havoc select_one_#t~nondet75;select_one_~retValue_acc~12 := select_one_~choice~0;select_one_#res := select_one_~retValue_acc~12; {32533#true} is VALID [2020-07-28 19:05:19,456 INFO L280 TraceCheckUtils]: 8: Hoare triple {32533#true} select_features_#t~ret81 := select_one_#res;assume -2147483648 <= select_features_#t~ret81 && select_features_#t~ret81 <= 2147483647;~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret81;havoc select_features_#t~ret81; {32533#true} is VALID [2020-07-28 19:05:19,456 INFO L280 TraceCheckUtils]: 9: Hoare triple {32533#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~13;havoc valid_product_~retValue_acc~13;valid_product_~retValue_acc~13 := ~__SELECTED_FEATURE_base~0;valid_product_#res := valid_product_~retValue_acc~13; {32533#true} is VALID [2020-07-28 19:05:19,456 INFO L280 TraceCheckUtils]: 10: Hoare triple {32533#true} main_#t~ret0 := valid_product_#res;assume -2147483648 <= main_#t~ret0 && main_#t~ret0 <= 2147483647;main_~tmp~0 := main_#t~ret0;havoc main_#t~ret0; {32533#true} is VALID [2020-07-28 19:05:19,456 INFO L280 TraceCheckUtils]: 11: Hoare triple {32533#true} assume 0 != main_~tmp~0; {32533#true} is VALID [2020-07-28 19:05:19,456 INFO L280 TraceCheckUtils]: 12: Hoare triple {32533#true} havoc test_#t~nondet26, test_#t~nondet27, test_#t~nondet28, test_#t~nondet29, test_~splverifierCounter~0, test_~tmp~8, test_~tmp___0~3, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~8;havoc test_~tmp___0~3;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {32533#true} is VALID [2020-07-28 19:05:19,456 INFO L280 TraceCheckUtils]: 13: Hoare triple {32533#true} assume !false; {32533#true} is VALID [2020-07-28 19:05:19,457 INFO L280 TraceCheckUtils]: 14: Hoare triple {32533#true} assume test_~splverifierCounter~0 < 4; {32533#true} is VALID [2020-07-28 19:05:19,457 INFO L280 TraceCheckUtils]: 15: Hoare triple {32533#true} assume -2147483648 <= test_#t~nondet26 && test_#t~nondet26 <= 2147483647;test_~tmp~8 := test_#t~nondet26;havoc test_#t~nondet26; {32533#true} is VALID [2020-07-28 19:05:19,457 INFO L280 TraceCheckUtils]: 16: Hoare triple {32533#true} assume 0 != test_~tmp~8; {32533#true} is VALID [2020-07-28 19:05:19,457 INFO L280 TraceCheckUtils]: 17: Hoare triple {32533#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {32533#true} is VALID [2020-07-28 19:05:19,457 INFO L280 TraceCheckUtils]: 18: Hoare triple {32533#true} assume -2147483648 <= test_#t~nondet27 && test_#t~nondet27 <= 2147483647;test_~tmp___0~3 := test_#t~nondet27;havoc test_#t~nondet27; {32533#true} is VALID [2020-07-28 19:05:19,457 INFO L280 TraceCheckUtils]: 19: Hoare triple {32533#true} assume !(0 != test_~tmp___0~3); {32533#true} is VALID [2020-07-28 19:05:19,457 INFO L280 TraceCheckUtils]: 20: Hoare triple {32533#true} assume -2147483648 <= test_#t~nondet28 && test_#t~nondet28 <= 2147483647;test_~tmp___2~0 := test_#t~nondet28;havoc test_#t~nondet28; {32533#true} is VALID [2020-07-28 19:05:19,458 INFO L280 TraceCheckUtils]: 21: Hoare triple {32533#true} assume !(0 != test_~tmp___2~0);assume -2147483648 <= test_#t~nondet29 && test_#t~nondet29 <= 2147483647;test_~tmp___1~0 := test_#t~nondet29;havoc test_#t~nondet29; {32533#true} is VALID [2020-07-28 19:05:19,458 INFO L280 TraceCheckUtils]: 22: Hoare triple {32533#true} assume !(0 != test_~tmp___1~0); {32533#true} is VALID [2020-07-28 19:05:19,458 INFO L280 TraceCheckUtils]: 23: Hoare triple {32533#true} assume !(0 != ~pumpRunning~0); {32533#true} is VALID [2020-07-28 19:05:19,458 INFO L280 TraceCheckUtils]: 24: Hoare triple {32533#true} assume 0 != ~systemActive~0; {32533#true} is VALID [2020-07-28 19:05:19,458 INFO L280 TraceCheckUtils]: 25: Hoare triple {32533#true} assume !(0 != ~__SELECTED_FEATURE_methaneAlarm~0); {32533#true} is VALID [2020-07-28 19:05:19,458 INFO L280 TraceCheckUtils]: 26: Hoare triple {32533#true} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {32533#true} is VALID [2020-07-28 19:05:19,458 INFO L280 TraceCheckUtils]: 27: Hoare triple {32533#true} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;havoc processEnvironment__role__highWaterSensor_#t~ret3, processEnvironment__role__highWaterSensor_~tmp~2;havoc processEnvironment__role__highWaterSensor_~tmp~2; {32533#true} is VALID [2020-07-28 19:05:19,459 INFO L280 TraceCheckUtils]: 28: Hoare triple {32533#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret24, isHighWaterLevel_~retValue_acc~3, isHighWaterLevel_~tmp~6, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~3;havoc isHighWaterLevel_~tmp~6;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~10;havoc isHighWaterSensorDry_~retValue_acc~10; {32533#true} is VALID [2020-07-28 19:05:19,459 INFO L280 TraceCheckUtils]: 29: Hoare triple {32533#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~10 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~10; {32535#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:05:19,460 INFO L280 TraceCheckUtils]: 30: Hoare triple {32535#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret24 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret24 && isHighWaterLevel_#t~ret24 <= 2147483647;isHighWaterLevel_~tmp~6 := isHighWaterLevel_#t~ret24;havoc isHighWaterLevel_#t~ret24; {32535#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:05:19,467 INFO L280 TraceCheckUtils]: 31: Hoare triple {32535#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~6);isHighWaterLevel_~tmp___0~1 := 1; {32535#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:05:19,470 INFO L280 TraceCheckUtils]: 32: Hoare triple {32535#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~3 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~3; {32535#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:05:19,476 INFO L280 TraceCheckUtils]: 33: Hoare triple {32535#(<= 2 ~waterLevel~0)} processEnvironment__role__highWaterSensor_#t~ret3 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret3 && processEnvironment__role__highWaterSensor_#t~ret3 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~2 := processEnvironment__role__highWaterSensor_#t~ret3;havoc processEnvironment__role__highWaterSensor_#t~ret3; {32535#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:05:19,477 INFO L280 TraceCheckUtils]: 34: Hoare triple {32535#(<= 2 ~waterLevel~0)} assume 0 != processEnvironment__role__highWaterSensor_~tmp~2; {32535#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:05:19,479 INFO L280 TraceCheckUtils]: 35: Hoare triple {32535#(<= 2 ~waterLevel~0)} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0);~pumpRunning~0 := 1; {32535#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:05:19,481 INFO L280 TraceCheckUtils]: 36: Hoare triple {32535#(<= 2 ~waterLevel~0)} havoc __utac_acc__Specification4_spec__1_#t~ret1, __utac_acc__Specification4_spec__1_#t~ret2, __utac_acc__Specification4_spec__1_~tmp~1, __utac_acc__Specification4_spec__1_~tmp___0~0;havoc __utac_acc__Specification4_spec__1_~tmp~1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~9;havoc getWaterLevel_~retValue_acc~9;getWaterLevel_~retValue_acc~9 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~9; {32535#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:05:19,483 INFO L280 TraceCheckUtils]: 37: Hoare triple {32535#(<= 2 ~waterLevel~0)} __utac_acc__Specification4_spec__1_#t~ret1 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret1 && __utac_acc__Specification4_spec__1_#t~ret1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1 := __utac_acc__Specification4_spec__1_#t~ret1;havoc __utac_acc__Specification4_spec__1_#t~ret1; {32535#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:05:19,487 INFO L280 TraceCheckUtils]: 38: Hoare triple {32535#(<= 2 ~waterLevel~0)} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~1); {32535#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:05:19,489 INFO L280 TraceCheckUtils]: 39: Hoare triple {32535#(<= 2 ~waterLevel~0)} assume !false; {32535#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:05:19,491 INFO L280 TraceCheckUtils]: 40: Hoare triple {32535#(<= 2 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {32535#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:05:19,493 INFO L280 TraceCheckUtils]: 41: Hoare triple {32535#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet26 && test_#t~nondet26 <= 2147483647;test_~tmp~8 := test_#t~nondet26;havoc test_#t~nondet26; {32535#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:05:19,496 INFO L280 TraceCheckUtils]: 42: Hoare triple {32535#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp~8); {32535#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:05:19,500 INFO L280 TraceCheckUtils]: 43: Hoare triple {32535#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet27 && test_#t~nondet27 <= 2147483647;test_~tmp___0~3 := test_#t~nondet27;havoc test_#t~nondet27; {32535#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:05:19,501 INFO L280 TraceCheckUtils]: 44: Hoare triple {32535#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp___0~3); {32535#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:05:19,503 INFO L280 TraceCheckUtils]: 45: Hoare triple {32535#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet28 && test_#t~nondet28 <= 2147483647;test_~tmp___2~0 := test_#t~nondet28;havoc test_#t~nondet28; {32535#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:05:19,505 INFO L280 TraceCheckUtils]: 46: Hoare triple {32535#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp___2~0);assume -2147483648 <= test_#t~nondet29 && test_#t~nondet29 <= 2147483647;test_~tmp___1~0 := test_#t~nondet29;havoc test_#t~nondet29; {32535#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:05:19,507 INFO L280 TraceCheckUtils]: 47: Hoare triple {32535#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp___1~0); {32535#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:05:19,509 INFO L280 TraceCheckUtils]: 48: Hoare triple {32535#(<= 2 ~waterLevel~0)} assume 0 != ~pumpRunning~0; {32535#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:05:19,513 INFO L280 TraceCheckUtils]: 49: Hoare triple {32535#(<= 2 ~waterLevel~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {32536#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:05:19,514 INFO L280 TraceCheckUtils]: 50: Hoare triple {32536#(<= 1 ~waterLevel~0)} assume 0 != ~systemActive~0; {32536#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:05:19,517 INFO L280 TraceCheckUtils]: 51: Hoare triple {32536#(<= 1 ~waterLevel~0)} assume !(0 != ~__SELECTED_FEATURE_methaneAlarm~0); {32536#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:05:19,519 INFO L280 TraceCheckUtils]: 52: Hoare triple {32536#(<= 1 ~waterLevel~0)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {32536#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:05:19,521 INFO L280 TraceCheckUtils]: 53: Hoare triple {32536#(<= 1 ~waterLevel~0)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;havoc processEnvironment__role__highWaterSensor_#t~ret3, processEnvironment__role__highWaterSensor_~tmp~2;havoc processEnvironment__role__highWaterSensor_~tmp~2; {32536#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:05:19,524 INFO L280 TraceCheckUtils]: 54: Hoare triple {32536#(<= 1 ~waterLevel~0)} assume !(0 == ~pumpRunning~0); {32536#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:05:19,527 INFO L280 TraceCheckUtils]: 55: Hoare triple {32536#(<= 1 ~waterLevel~0)} havoc __utac_acc__Specification4_spec__1_#t~ret1, __utac_acc__Specification4_spec__1_#t~ret2, __utac_acc__Specification4_spec__1_~tmp~1, __utac_acc__Specification4_spec__1_~tmp___0~0;havoc __utac_acc__Specification4_spec__1_~tmp~1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~9;havoc getWaterLevel_~retValue_acc~9;getWaterLevel_~retValue_acc~9 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~9; {32537#(<= 1 |ULTIMATE.start_getWaterLevel_#res|)} is VALID [2020-07-28 19:05:19,529 INFO L280 TraceCheckUtils]: 56: Hoare triple {32537#(<= 1 |ULTIMATE.start_getWaterLevel_#res|)} __utac_acc__Specification4_spec__1_#t~ret1 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret1 && __utac_acc__Specification4_spec__1_#t~ret1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1 := __utac_acc__Specification4_spec__1_#t~ret1;havoc __utac_acc__Specification4_spec__1_#t~ret1; {32538#(<= 1 ULTIMATE.start___utac_acc__Specification4_spec__1_~tmp~1)} is VALID [2020-07-28 19:05:19,532 INFO L280 TraceCheckUtils]: 57: Hoare triple {32538#(<= 1 ULTIMATE.start___utac_acc__Specification4_spec__1_~tmp~1)} assume 0 == __utac_acc__Specification4_spec__1_~tmp~1;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~2;havoc isPumpRunning_~retValue_acc~2;isPumpRunning_~retValue_acc~2 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~2; {32534#false} is VALID [2020-07-28 19:05:19,532 INFO L280 TraceCheckUtils]: 58: Hoare triple {32534#false} __utac_acc__Specification4_spec__1_#t~ret2 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret2 && __utac_acc__Specification4_spec__1_#t~ret2 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0 := __utac_acc__Specification4_spec__1_#t~ret2;havoc __utac_acc__Specification4_spec__1_#t~ret2; {32534#false} is VALID [2020-07-28 19:05:19,532 INFO L280 TraceCheckUtils]: 59: Hoare triple {32534#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0; {32534#false} is VALID [2020-07-28 19:05:19,532 INFO L280 TraceCheckUtils]: 60: Hoare triple {32534#false} assume !false; {32534#false} is VALID [2020-07-28 19:05:19,536 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 15 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:05:19,537 INFO L220 FreeRefinementEngine]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2020-07-28 19:05:19,537 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 6] total 6 [2020-07-28 19:05:19,537 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [313860328] [2020-07-28 19:05:19,538 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 61 [2020-07-28 19:05:19,538 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:05:19,538 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states. [2020-07-28 19:05:19,610 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 61 edges. 61 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:05:19,611 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2020-07-28 19:05:19,611 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:05:19,611 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2020-07-28 19:05:19,611 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2020-07-28 19:05:19,612 INFO L87 Difference]: Start difference. First operand 704 states and 964 transitions. Second operand 6 states. [2020-07-28 19:05:23,841 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:05:23,842 INFO L93 Difference]: Finished difference Result 1627 states and 2214 transitions. [2020-07-28 19:05:23,842 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2020-07-28 19:05:23,842 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 61 [2020-07-28 19:05:23,842 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:05:23,842 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 19:05:23,845 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 1080 transitions. [2020-07-28 19:05:23,845 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 19:05:23,848 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 1080 transitions. [2020-07-28 19:05:23,848 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 9 states and 1080 transitions. [2020-07-28 19:05:25,166 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 1080 edges. 1080 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:05:25,225 INFO L225 Difference]: With dead ends: 1627 [2020-07-28 19:05:25,225 INFO L226 Difference]: Without dead ends: 1108 [2020-07-28 19:05:25,226 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 74 GetRequests, 65 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=41, Invalid=69, Unknown=0, NotChecked=0, Total=110 [2020-07-28 19:05:25,228 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1108 states. [2020-07-28 19:05:26,855 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1108 to 662. [2020-07-28 19:05:26,855 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:05:26,856 INFO L82 GeneralOperation]: Start isEquivalent. First operand 1108 states. Second operand 662 states. [2020-07-28 19:05:26,856 INFO L74 IsIncluded]: Start isIncluded. First operand 1108 states. Second operand 662 states. [2020-07-28 19:05:26,856 INFO L87 Difference]: Start difference. First operand 1108 states. Second operand 662 states. [2020-07-28 19:05:26,896 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:05:26,896 INFO L93 Difference]: Finished difference Result 1108 states and 1493 transitions. [2020-07-28 19:05:26,897 INFO L276 IsEmpty]: Start isEmpty. Operand 1108 states and 1493 transitions. [2020-07-28 19:05:26,898 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:05:26,898 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:05:26,898 INFO L74 IsIncluded]: Start isIncluded. First operand 662 states. Second operand 1108 states. [2020-07-28 19:05:26,898 INFO L87 Difference]: Start difference. First operand 662 states. Second operand 1108 states. [2020-07-28 19:05:26,941 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:05:26,942 INFO L93 Difference]: Finished difference Result 1108 states and 1493 transitions. [2020-07-28 19:05:26,942 INFO L276 IsEmpty]: Start isEmpty. Operand 1108 states and 1493 transitions. [2020-07-28 19:05:26,943 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:05:26,943 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:05:26,943 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:05:26,943 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:05:26,943 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 662 states. [2020-07-28 19:05:26,961 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 662 states to 662 states and 895 transitions. [2020-07-28 19:05:26,961 INFO L78 Accepts]: Start accepts. Automaton has 662 states and 895 transitions. Word has length 61 [2020-07-28 19:05:26,961 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:05:26,961 INFO L479 AbstractCegarLoop]: Abstraction has 662 states and 895 transitions. [2020-07-28 19:05:26,961 INFO L480 AbstractCegarLoop]: Interpolant automaton has 6 states. [2020-07-28 19:05:26,962 INFO L276 IsEmpty]: Start isEmpty. Operand 662 states and 895 transitions. [2020-07-28 19:05:26,963 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 81 [2020-07-28 19:05:26,963 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:05:26,963 INFO L422 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:05:27,164 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2020-07-28 19:05:27,165 INFO L427 AbstractCegarLoop]: === Iteration 11 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:05:27,166 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:05:27,166 INFO L82 PathProgramCache]: Analyzing trace with hash 1375374740, now seen corresponding path program 2 times [2020-07-28 19:05:27,166 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:05:27,167 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1940045796] [2020-07-28 19:05:27,167 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:05:27,234 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2020-07-28 19:05:27,235 INFO L221 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2020-07-28 19:05:27,298 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2020-07-28 19:05:27,298 INFO L221 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2020-07-28 19:05:27,389 INFO L174 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2020-07-28 19:05:27,390 INFO L520 BasicCegarLoop]: Counterexample might be feasible [2020-07-28 19:05:27,390 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2020-07-28 19:05:27,708 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2020-07-28 19:05:27,708 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2020-07-28 19:05:27,709 WARN L170 areAnnotationChecker]: L1108 has no Hoare annotation [2020-07-28 19:05:27,709 WARN L170 areAnnotationChecker]: L1083 has no Hoare annotation [2020-07-28 19:05:27,709 WARN L170 areAnnotationChecker]: L1083-1 has no Hoare annotation [2020-07-28 19:05:27,709 WARN L170 areAnnotationChecker]: L1083-2 has no Hoare annotation [2020-07-28 19:05:27,709 WARN L170 areAnnotationChecker]: L1083-3 has no Hoare annotation [2020-07-28 19:05:27,709 WARN L170 areAnnotationChecker]: L1083-4 has no Hoare annotation [2020-07-28 19:05:27,710 WARN L170 areAnnotationChecker]: L1083-5 has no Hoare annotation [2020-07-28 19:05:27,710 WARN L170 areAnnotationChecker]: L1100 has no Hoare annotation [2020-07-28 19:05:27,710 WARN L170 areAnnotationChecker]: L1116 has no Hoare annotation [2020-07-28 19:05:27,710 WARN L170 areAnnotationChecker]: L130 has no Hoare annotation [2020-07-28 19:05:27,710 WARN L170 areAnnotationChecker]: L130 has no Hoare annotation [2020-07-28 19:05:27,710 WARN L170 areAnnotationChecker]: L103 has no Hoare annotation [2020-07-28 19:05:27,711 WARN L170 areAnnotationChecker]: L130-1 has no Hoare annotation [2020-07-28 19:05:27,711 WARN L170 areAnnotationChecker]: L163-1 has no Hoare annotation [2020-07-28 19:05:27,711 WARN L170 areAnnotationChecker]: L163-1 has no Hoare annotation [2020-07-28 19:05:27,711 WARN L170 areAnnotationChecker]: L163-1 has no Hoare annotation [2020-07-28 19:05:27,711 WARN L170 areAnnotationChecker]: L139 has no Hoare annotation [2020-07-28 19:05:27,711 WARN L170 areAnnotationChecker]: L589 has no Hoare annotation [2020-07-28 19:05:27,712 WARN L170 areAnnotationChecker]: L532 has no Hoare annotation [2020-07-28 19:05:27,712 WARN L170 areAnnotationChecker]: L532 has no Hoare annotation [2020-07-28 19:05:27,712 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2020-07-28 19:05:27,712 WARN L170 areAnnotationChecker]: L197-1 has no Hoare annotation [2020-07-28 19:05:27,712 WARN L170 areAnnotationChecker]: L197-1 has no Hoare annotation [2020-07-28 19:05:27,712 WARN L170 areAnnotationChecker]: L533 has no Hoare annotation [2020-07-28 19:05:27,712 WARN L170 areAnnotationChecker]: L979-3 has no Hoare annotation [2020-07-28 19:05:27,713 WARN L170 areAnnotationChecker]: L979-3 has no Hoare annotation [2020-07-28 19:05:27,713 WARN L170 areAnnotationChecker]: L197-2 has no Hoare annotation [2020-07-28 19:05:27,713 WARN L170 areAnnotationChecker]: L197-2 has no Hoare annotation [2020-07-28 19:05:27,713 WARN L170 areAnnotationChecker]: L541 has no Hoare annotation [2020-07-28 19:05:27,713 WARN L170 areAnnotationChecker]: L541 has no Hoare annotation [2020-07-28 19:05:27,713 WARN L170 areAnnotationChecker]: L340-1 has no Hoare annotation [2020-07-28 19:05:27,714 WARN L170 areAnnotationChecker]: L340-1 has no Hoare annotation [2020-07-28 19:05:27,714 WARN L170 areAnnotationChecker]: L204-1 has no Hoare annotation [2020-07-28 19:05:27,714 WARN L170 areAnnotationChecker]: L991 has no Hoare annotation [2020-07-28 19:05:27,714 WARN L170 areAnnotationChecker]: L991 has no Hoare annotation [2020-07-28 19:05:27,714 WARN L170 areAnnotationChecker]: L541-1 has no Hoare annotation [2020-07-28 19:05:27,714 WARN L170 areAnnotationChecker]: L315-1 has no Hoare annotation [2020-07-28 19:05:27,715 WARN L170 areAnnotationChecker]: L315-1 has no Hoare annotation [2020-07-28 19:05:27,715 WARN L170 areAnnotationChecker]: L297-5 has no Hoare annotation [2020-07-28 19:05:27,715 WARN L170 areAnnotationChecker]: L297-5 has no Hoare annotation [2020-07-28 19:05:27,715 WARN L170 areAnnotationChecker]: L1048-1 has no Hoare annotation [2020-07-28 19:05:27,715 WARN L170 areAnnotationChecker]: L551 has no Hoare annotation [2020-07-28 19:05:27,715 WARN L170 areAnnotationChecker]: L551 has no Hoare annotation [2020-07-28 19:05:27,716 WARN L170 areAnnotationChecker]: L1016-10 has no Hoare annotation [2020-07-28 19:05:27,716 WARN L170 areAnnotationChecker]: L297-4 has no Hoare annotation [2020-07-28 19:05:27,716 WARN L170 areAnnotationChecker]: L297-4 has no Hoare annotation [2020-07-28 19:05:27,716 WARN L170 areAnnotationChecker]: L272-5 has no Hoare annotation [2020-07-28 19:05:27,716 WARN L170 areAnnotationChecker]: L272-5 has no Hoare annotation [2020-07-28 19:05:27,716 WARN L170 areAnnotationChecker]: L254-17 has no Hoare annotation [2020-07-28 19:05:27,717 WARN L170 areAnnotationChecker]: L254-17 has no Hoare annotation [2020-07-28 19:05:27,717 WARN L170 areAnnotationChecker]: L163-2 has no Hoare annotation [2020-07-28 19:05:27,717 WARN L170 areAnnotationChecker]: L163-2 has no Hoare annotation [2020-07-28 19:05:27,717 WARN L170 areAnnotationChecker]: L1003 has no Hoare annotation [2020-07-28 19:05:27,717 WARN L170 areAnnotationChecker]: L1003 has no Hoare annotation [2020-07-28 19:05:27,717 WARN L170 areAnnotationChecker]: L551-1 has no Hoare annotation [2020-07-28 19:05:27,718 WARN L170 areAnnotationChecker]: L410-10 has no Hoare annotation [2020-07-28 19:05:27,718 WARN L170 areAnnotationChecker]: L272-4 has no Hoare annotation [2020-07-28 19:05:27,718 WARN L170 areAnnotationChecker]: L272-4 has no Hoare annotation [2020-07-28 19:05:27,718 WARN L170 areAnnotationChecker]: L254-14 has no Hoare annotation [2020-07-28 19:05:27,718 WARN L170 areAnnotationChecker]: L254-14 has no Hoare annotation [2020-07-28 19:05:27,718 WARN L170 areAnnotationChecker]: L1071-5 has no Hoare annotation [2020-07-28 19:05:27,719 WARN L170 areAnnotationChecker]: L254-16 has no Hoare annotation [2020-07-28 19:05:27,719 WARN L170 areAnnotationChecker]: L254-16 has no Hoare annotation [2020-07-28 19:05:27,719 WARN L170 areAnnotationChecker]: L229-17 has no Hoare annotation [2020-07-28 19:05:27,719 WARN L170 areAnnotationChecker]: L229-17 has no Hoare annotation [2020-07-28 19:05:27,719 WARN L170 areAnnotationChecker]: L419-1 has no Hoare annotation [2020-07-28 19:05:27,719 WARN L170 areAnnotationChecker]: L163-3 has no Hoare annotation [2020-07-28 19:05:27,720 WARN L170 areAnnotationChecker]: L561 has no Hoare annotation [2020-07-28 19:05:27,720 WARN L170 areAnnotationChecker]: L561 has no Hoare annotation [2020-07-28 19:05:27,720 WARN L170 areAnnotationChecker]: L319-1 has no Hoare annotation [2020-07-28 19:05:27,720 WARN L170 areAnnotationChecker]: L319-1 has no Hoare annotation [2020-07-28 19:05:27,720 WARN L170 areAnnotationChecker]: L1071-4 has no Hoare annotation [2020-07-28 19:05:27,721 WARN L170 areAnnotationChecker]: L254-13 has no Hoare annotation [2020-07-28 19:05:27,721 WARN L170 areAnnotationChecker]: L254-13 has no Hoare annotation [2020-07-28 19:05:27,721 WARN L170 areAnnotationChecker]: L229-14 has no Hoare annotation [2020-07-28 19:05:27,721 WARN L170 areAnnotationChecker]: L229-14 has no Hoare annotation [2020-07-28 19:05:27,721 WARN L170 areAnnotationChecker]: L487-15 has no Hoare annotation [2020-07-28 19:05:27,721 WARN L170 areAnnotationChecker]: L487-15 has no Hoare annotation [2020-07-28 19:05:27,722 WARN L170 areAnnotationChecker]: L229-16 has no Hoare annotation [2020-07-28 19:05:27,722 WARN L170 areAnnotationChecker]: L229-16 has no Hoare annotation [2020-07-28 19:05:27,722 WARN L170 areAnnotationChecker]: L1056-17 has no Hoare annotation [2020-07-28 19:05:27,722 WARN L170 areAnnotationChecker]: L1056-17 has no Hoare annotation [2020-07-28 19:05:27,722 WARN L170 areAnnotationChecker]: L167-2 has no Hoare annotation [2020-07-28 19:05:27,722 WARN L170 areAnnotationChecker]: L167-2 has no Hoare annotation [2020-07-28 19:05:27,723 WARN L170 areAnnotationChecker]: L52-2 has no Hoare annotation [2020-07-28 19:05:27,723 WARN L170 areAnnotationChecker]: L52-2 has no Hoare annotation [2020-07-28 19:05:27,723 WARN L170 areAnnotationChecker]: L52-2 has no Hoare annotation [2020-07-28 19:05:27,723 WARN L170 areAnnotationChecker]: L562 has no Hoare annotation [2020-07-28 19:05:27,723 WARN L170 areAnnotationChecker]: L562 has no Hoare annotation [2020-07-28 19:05:27,723 WARN L170 areAnnotationChecker]: L573 has no Hoare annotation [2020-07-28 19:05:27,724 WARN L170 areAnnotationChecker]: L573 has no Hoare annotation [2020-07-28 19:05:27,724 WARN L170 areAnnotationChecker]: L297-3 has no Hoare annotation [2020-07-28 19:05:27,724 WARN L170 areAnnotationChecker]: L297-3 has no Hoare annotation [2020-07-28 19:05:27,724 WARN L170 areAnnotationChecker]: L487-12 has no Hoare annotation [2020-07-28 19:05:27,724 WARN L170 areAnnotationChecker]: L487-12 has no Hoare annotation [2020-07-28 19:05:27,724 WARN L170 areAnnotationChecker]: L229-13 has no Hoare annotation [2020-07-28 19:05:27,725 WARN L170 areAnnotationChecker]: L229-13 has no Hoare annotation [2020-07-28 19:05:27,725 WARN L170 areAnnotationChecker]: L1056-14 has no Hoare annotation [2020-07-28 19:05:27,725 WARN L170 areAnnotationChecker]: L1056-14 has no Hoare annotation [2020-07-28 19:05:27,725 WARN L170 areAnnotationChecker]: L487-17 has no Hoare annotation [2020-07-28 19:05:27,725 WARN L170 areAnnotationChecker]: L1056-16 has no Hoare annotation [2020-07-28 19:05:27,725 WARN L170 areAnnotationChecker]: L1056-16 has no Hoare annotation [2020-07-28 19:05:27,725 WARN L170 areAnnotationChecker]: L1061-17 has no Hoare annotation [2020-07-28 19:05:27,726 WARN L170 areAnnotationChecker]: L602-1 has no Hoare annotation [2020-07-28 19:05:27,726 WARN L170 areAnnotationChecker]: L602-1 has no Hoare annotation [2020-07-28 19:05:27,726 WARN L170 areAnnotationChecker]: L53 has no Hoare annotation [2020-07-28 19:05:27,726 WARN L170 areAnnotationChecker]: L573-1 has no Hoare annotation [2020-07-28 19:05:27,726 WARN L170 areAnnotationChecker]: L573-1 has no Hoare annotation [2020-07-28 19:05:27,726 WARN L170 areAnnotationChecker]: L574 has no Hoare annotation [2020-07-28 19:05:27,727 WARN L170 areAnnotationChecker]: L574 has no Hoare annotation [2020-07-28 19:05:27,727 WARN L170 areAnnotationChecker]: L272-3 has no Hoare annotation [2020-07-28 19:05:27,727 WARN L170 areAnnotationChecker]: L272-3 has no Hoare annotation [2020-07-28 19:05:27,727 WARN L170 areAnnotationChecker]: L254-11 has no Hoare annotation [2020-07-28 19:05:27,727 WARN L170 areAnnotationChecker]: L254-11 has no Hoare annotation [2020-07-28 19:05:27,727 WARN L170 areAnnotationChecker]: L487-14 has no Hoare annotation [2020-07-28 19:05:27,728 WARN L170 areAnnotationChecker]: L1056-13 has no Hoare annotation [2020-07-28 19:05:27,728 WARN L170 areAnnotationChecker]: L1056-13 has no Hoare annotation [2020-07-28 19:05:27,728 WARN L170 areAnnotationChecker]: L1061-14 has no Hoare annotation [2020-07-28 19:05:27,728 WARN L170 areAnnotationChecker]: L493-5 has no Hoare annotation [2020-07-28 19:05:27,728 WARN L170 areAnnotationChecker]: L1061-16 has no Hoare annotation [2020-07-28 19:05:27,728 WARN L170 areAnnotationChecker]: L468-51 has no Hoare annotation [2020-07-28 19:05:27,729 WARN L170 areAnnotationChecker]: L468-51 has no Hoare annotation [2020-07-28 19:05:27,729 WARN L170 areAnnotationChecker]: L56 has no Hoare annotation [2020-07-28 19:05:27,729 WARN L170 areAnnotationChecker]: L56 has no Hoare annotation [2020-07-28 19:05:27,729 WARN L170 areAnnotationChecker]: L979 has no Hoare annotation [2020-07-28 19:05:27,729 WARN L170 areAnnotationChecker]: L979 has no Hoare annotation [2020-07-28 19:05:27,729 WARN L170 areAnnotationChecker]: L197 has no Hoare annotation [2020-07-28 19:05:27,729 WARN L170 areAnnotationChecker]: L197 has no Hoare annotation [2020-07-28 19:05:27,730 WARN L170 areAnnotationChecker]: L501 has no Hoare annotation [2020-07-28 19:05:27,730 WARN L170 areAnnotationChecker]: L501 has no Hoare annotation [2020-07-28 19:05:27,730 WARN L170 areAnnotationChecker]: L1071-3 has no Hoare annotation [2020-07-28 19:05:27,730 WARN L170 areAnnotationChecker]: L254-10 has no Hoare annotation [2020-07-28 19:05:27,730 WARN L170 areAnnotationChecker]: L254-10 has no Hoare annotation [2020-07-28 19:05:27,730 WARN L170 areAnnotationChecker]: L229-11 has no Hoare annotation [2020-07-28 19:05:27,731 WARN L170 areAnnotationChecker]: L229-11 has no Hoare annotation [2020-07-28 19:05:27,731 WARN L170 areAnnotationChecker]: L493-4 has no Hoare annotation [2020-07-28 19:05:27,731 WARN L170 areAnnotationChecker]: L1061-13 has no Hoare annotation [2020-07-28 19:05:27,731 WARN L170 areAnnotationChecker]: L468-42 has no Hoare annotation [2020-07-28 19:05:27,731 WARN L170 areAnnotationChecker]: L468-42 has no Hoare annotation [2020-07-28 19:05:27,731 WARN L170 areAnnotationChecker]: L276-5 has no Hoare annotation [2020-07-28 19:05:27,732 WARN L170 areAnnotationChecker]: L276-5 has no Hoare annotation [2020-07-28 19:05:27,732 WARN L170 areAnnotationChecker]: L468-48 has no Hoare annotation [2020-07-28 19:05:27,732 WARN L170 areAnnotationChecker]: L468-48 has no Hoare annotation [2020-07-28 19:05:27,732 WARN L170 areAnnotationChecker]: L468-53 has no Hoare annotation [2020-07-28 19:05:27,732 WARN L170 areAnnotationChecker]: L56-1 has no Hoare annotation [2020-07-28 19:05:27,732 WARN L170 areAnnotationChecker]: L56-1 has no Hoare annotation [2020-07-28 19:05:27,732 WARN L170 areAnnotationChecker]: L340 has no Hoare annotation [2020-07-28 19:05:27,733 WARN L170 areAnnotationChecker]: L340 has no Hoare annotation [2020-07-28 19:05:27,733 WARN L170 areAnnotationChecker]: L204 has no Hoare annotation [2020-07-28 19:05:27,733 WARN L170 areAnnotationChecker]: L501-1 has no Hoare annotation [2020-07-28 19:05:27,733 WARN L170 areAnnotationChecker]: L487-9 has no Hoare annotation [2020-07-28 19:05:27,733 WARN L170 areAnnotationChecker]: L487-9 has no Hoare annotation [2020-07-28 19:05:27,733 WARN L170 areAnnotationChecker]: L229-10 has no Hoare annotation [2020-07-28 19:05:27,734 WARN L170 areAnnotationChecker]: L229-10 has no Hoare annotation [2020-07-28 19:05:27,734 WARN L170 areAnnotationChecker]: L1056-11 has no Hoare annotation [2020-07-28 19:05:27,734 WARN L170 areAnnotationChecker]: L1056-11 has no Hoare annotation [2020-07-28 19:05:27,734 WARN L170 areAnnotationChecker]: L276-4 has no Hoare annotation [2020-07-28 19:05:27,734 WARN L170 areAnnotationChecker]: L276-4 has no Hoare annotation [2020-07-28 19:05:27,734 WARN L170 areAnnotationChecker]: L468-39 has no Hoare annotation [2020-07-28 19:05:27,735 WARN L170 areAnnotationChecker]: L468-39 has no Hoare annotation [2020-07-28 19:05:27,735 WARN L170 areAnnotationChecker]: L468-44 has no Hoare annotation [2020-07-28 19:05:27,735 WARN L170 areAnnotationChecker]: L254-15 has no Hoare annotation [2020-07-28 19:05:27,735 WARN L170 areAnnotationChecker]: L254-15 has no Hoare annotation [2020-07-28 19:05:27,735 WARN L170 areAnnotationChecker]: L468-50 has no Hoare annotation [2020-07-28 19:05:27,735 WARN L170 areAnnotationChecker]: L474-17 has no Hoare annotation [2020-07-28 19:05:27,735 WARN L170 areAnnotationChecker]: L979-6 has no Hoare annotation [2020-07-28 19:05:27,736 WARN L170 areAnnotationChecker]: L979-6 has no Hoare annotation [2020-07-28 19:05:27,736 WARN L170 areAnnotationChecker]: L197-3 has no Hoare annotation [2020-07-28 19:05:27,736 WARN L170 areAnnotationChecker]: L197-3 has no Hoare annotation [2020-07-28 19:05:27,736 WARN L170 areAnnotationChecker]: L315 has no Hoare annotation [2020-07-28 19:05:27,736 WARN L170 areAnnotationChecker]: L315 has no Hoare annotation [2020-07-28 19:05:27,736 WARN L170 areAnnotationChecker]: L297-2 has no Hoare annotation [2020-07-28 19:05:27,737 WARN L170 areAnnotationChecker]: L297-2 has no Hoare annotation [2020-07-28 19:05:27,737 WARN L170 areAnnotationChecker]: L1048 has no Hoare annotation [2020-07-28 19:05:27,737 WARN L170 areAnnotationChecker]: L487-11 has no Hoare annotation [2020-07-28 19:05:27,737 WARN L170 areAnnotationChecker]: L1056-10 has no Hoare annotation [2020-07-28 19:05:27,737 WARN L170 areAnnotationChecker]: L1056-10 has no Hoare annotation [2020-07-28 19:05:27,737 WARN L170 areAnnotationChecker]: L1061-11 has no Hoare annotation [2020-07-28 19:05:27,737 WARN L170 areAnnotationChecker]: L254-12 has no Hoare annotation [2020-07-28 19:05:27,738 WARN L170 areAnnotationChecker]: L254-12 has no Hoare annotation [2020-07-28 19:05:27,738 WARN L170 areAnnotationChecker]: L468-41 has no Hoare annotation [2020-07-28 19:05:27,738 WARN L170 areAnnotationChecker]: L474-14 has no Hoare annotation [2020-07-28 19:05:27,738 WARN L170 areAnnotationChecker]: L229-15 has no Hoare annotation [2020-07-28 19:05:27,738 WARN L170 areAnnotationChecker]: L229-15 has no Hoare annotation [2020-07-28 19:05:27,738 WARN L170 areAnnotationChecker]: L474-16 has no Hoare annotation [2020-07-28 19:05:27,739 WARN L170 areAnnotationChecker]: L233-17 has no Hoare annotation [2020-07-28 19:05:27,739 WARN L170 areAnnotationChecker]: L233-17 has no Hoare annotation [2020-07-28 19:05:27,739 WARN L170 areAnnotationChecker]: L340-2 has no Hoare annotation [2020-07-28 19:05:27,739 WARN L170 areAnnotationChecker]: L340-2 has no Hoare annotation [2020-07-28 19:05:27,739 WARN L170 areAnnotationChecker]: L204-2 has no Hoare annotation [2020-07-28 19:05:27,739 WARN L170 areAnnotationChecker]: L1016 has no Hoare annotation [2020-07-28 19:05:27,740 WARN L170 areAnnotationChecker]: L297-1 has no Hoare annotation [2020-07-28 19:05:27,740 WARN L170 areAnnotationChecker]: L297-1 has no Hoare annotation [2020-07-28 19:05:27,740 WARN L170 areAnnotationChecker]: L272-2 has no Hoare annotation [2020-07-28 19:05:27,740 WARN L170 areAnnotationChecker]: L272-2 has no Hoare annotation [2020-07-28 19:05:27,740 WARN L170 areAnnotationChecker]: L254-8 has no Hoare annotation [2020-07-28 19:05:27,740 WARN L170 areAnnotationChecker]: L254-8 has no Hoare annotation [2020-07-28 19:05:27,740 WARN L170 areAnnotationChecker]: L163 has no Hoare annotation [2020-07-28 19:05:27,741 WARN L170 areAnnotationChecker]: L163 has no Hoare annotation [2020-07-28 19:05:27,741 WARN L170 areAnnotationChecker]: L493-3 has no Hoare annotation [2020-07-28 19:05:27,741 WARN L170 areAnnotationChecker]: L1061-10 has no Hoare annotation [2020-07-28 19:05:27,741 WARN L170 areAnnotationChecker]: L468-33 has no Hoare annotation [2020-07-28 19:05:27,741 WARN L170 areAnnotationChecker]: L468-33 has no Hoare annotation [2020-07-28 19:05:27,741 WARN L170 areAnnotationChecker]: L229-12 has no Hoare annotation [2020-07-28 19:05:27,742 WARN L170 areAnnotationChecker]: L229-12 has no Hoare annotation [2020-07-28 19:05:27,742 WARN L170 areAnnotationChecker]: L474-13 has no Hoare annotation [2020-07-28 19:05:27,742 WARN L170 areAnnotationChecker]: L233-14 has no Hoare annotation [2020-07-28 19:05:27,742 WARN L170 areAnnotationChecker]: L233-14 has no Hoare annotation [2020-07-28 19:05:27,742 WARN L170 areAnnotationChecker]: L1056-15 has no Hoare annotation [2020-07-28 19:05:27,742 WARN L170 areAnnotationChecker]: L1056-15 has no Hoare annotation [2020-07-28 19:05:27,742 WARN L170 areAnnotationChecker]: L233-16 has no Hoare annotation [2020-07-28 19:05:27,743 WARN L170 areAnnotationChecker]: L233-16 has no Hoare annotation [2020-07-28 19:05:27,743 WARN L170 areAnnotationChecker]: L382-17 has no Hoare annotation [2020-07-28 19:05:27,743 WARN L170 areAnnotationChecker]: L382-17 has no Hoare annotation [2020-07-28 19:05:27,743 WARN L170 areAnnotationChecker]: L315-2 has no Hoare annotation [2020-07-28 19:05:27,743 WARN L170 areAnnotationChecker]: L315-2 has no Hoare annotation [2020-07-28 19:05:27,743 WARN L170 areAnnotationChecker]: L297-8 has no Hoare annotation [2020-07-28 19:05:27,744 WARN L170 areAnnotationChecker]: L297-8 has no Hoare annotation [2020-07-28 19:05:27,744 WARN L170 areAnnotationChecker]: L1048-2 has no Hoare annotation [2020-07-28 19:05:27,744 WARN L170 areAnnotationChecker]: L410 has no Hoare annotation [2020-07-28 19:05:27,744 WARN L170 areAnnotationChecker]: L272-1 has no Hoare annotation [2020-07-28 19:05:27,744 WARN L170 areAnnotationChecker]: L272-1 has no Hoare annotation [2020-07-28 19:05:27,744 WARN L170 areAnnotationChecker]: L254-5 has no Hoare annotation [2020-07-28 19:05:27,744 WARN L170 areAnnotationChecker]: L254-5 has no Hoare annotation [2020-07-28 19:05:27,745 WARN L170 areAnnotationChecker]: L1071-2 has no Hoare annotation [2020-07-28 19:05:27,745 WARN L170 areAnnotationChecker]: L254-7 has no Hoare annotation [2020-07-28 19:05:27,745 WARN L170 areAnnotationChecker]: L254-7 has no Hoare annotation [2020-07-28 19:05:27,745 WARN L170 areAnnotationChecker]: L229-8 has no Hoare annotation [2020-07-28 19:05:27,745 WARN L170 areAnnotationChecker]: L229-8 has no Hoare annotation [2020-07-28 19:05:27,745 WARN L170 areAnnotationChecker]: L419 has no Hoare annotation [2020-07-28 19:05:27,746 WARN L170 areAnnotationChecker]: L276-3 has no Hoare annotation [2020-07-28 19:05:27,746 WARN L170 areAnnotationChecker]: L276-3 has no Hoare annotation [2020-07-28 19:05:27,746 WARN L170 areAnnotationChecker]: L468-30 has no Hoare annotation [2020-07-28 19:05:27,746 WARN L170 areAnnotationChecker]: L468-30 has no Hoare annotation [2020-07-28 19:05:27,746 WARN L170 areAnnotationChecker]: L468-35 has no Hoare annotation [2020-07-28 19:05:27,746 WARN L170 areAnnotationChecker]: L1056-12 has no Hoare annotation [2020-07-28 19:05:27,747 WARN L170 areAnnotationChecker]: L1056-12 has no Hoare annotation [2020-07-28 19:05:27,747 WARN L170 areAnnotationChecker]: L233-13 has no Hoare annotation [2020-07-28 19:05:27,747 WARN L170 areAnnotationChecker]: L233-13 has no Hoare annotation [2020-07-28 19:05:27,747 WARN L170 areAnnotationChecker]: L382-14 has no Hoare annotation [2020-07-28 19:05:27,747 WARN L170 areAnnotationChecker]: L382-14 has no Hoare annotation [2020-07-28 19:05:27,747 WARN L170 areAnnotationChecker]: L1061-15 has no Hoare annotation [2020-07-28 19:05:27,747 WARN L170 areAnnotationChecker]: L382-16 has no Hoare annotation [2020-07-28 19:05:27,748 WARN L170 areAnnotationChecker]: L382-16 has no Hoare annotation [2020-07-28 19:05:27,748 WARN L170 areAnnotationChecker]: L1016-19 has no Hoare annotation [2020-07-28 19:05:27,748 WARN L170 areAnnotationChecker]: L1016-20 has no Hoare annotation [2020-07-28 19:05:27,748 WARN L170 areAnnotationChecker]: L297-7 has no Hoare annotation [2020-07-28 19:05:27,748 WARN L170 areAnnotationChecker]: L297-7 has no Hoare annotation [2020-07-28 19:05:27,748 WARN L170 areAnnotationChecker]: L272-8 has no Hoare annotation [2020-07-28 19:05:27,749 WARN L170 areAnnotationChecker]: L272-8 has no Hoare annotation [2020-07-28 19:05:27,749 WARN L170 areAnnotationChecker]: L254-26 has no Hoare annotation [2020-07-28 19:05:27,749 WARN L170 areAnnotationChecker]: L254-26 has no Hoare annotation [2020-07-28 19:05:27,749 WARN L170 areAnnotationChecker]: L163-4 has no Hoare annotation [2020-07-28 19:05:27,749 WARN L170 areAnnotationChecker]: L163-4 has no Hoare annotation [2020-07-28 19:05:27,749 WARN L170 areAnnotationChecker]: L319 has no Hoare annotation [2020-07-28 19:05:27,750 WARN L170 areAnnotationChecker]: L319 has no Hoare annotation [2020-07-28 19:05:27,750 WARN L170 areAnnotationChecker]: L1071-1 has no Hoare annotation [2020-07-28 19:05:27,750 WARN L170 areAnnotationChecker]: L254-4 has no Hoare annotation [2020-07-28 19:05:27,750 WARN L170 areAnnotationChecker]: L254-4 has no Hoare annotation [2020-07-28 19:05:27,750 WARN L170 areAnnotationChecker]: L229-5 has no Hoare annotation [2020-07-28 19:05:27,750 WARN L170 areAnnotationChecker]: L229-5 has no Hoare annotation [2020-07-28 19:05:27,751 WARN L170 areAnnotationChecker]: L487-6 has no Hoare annotation [2020-07-28 19:05:27,751 WARN L170 areAnnotationChecker]: L487-6 has no Hoare annotation [2020-07-28 19:05:27,751 WARN L170 areAnnotationChecker]: L229-7 has no Hoare annotation [2020-07-28 19:05:27,751 WARN L170 areAnnotationChecker]: L229-7 has no Hoare annotation [2020-07-28 19:05:27,751 WARN L170 areAnnotationChecker]: L1056-8 has no Hoare annotation [2020-07-28 19:05:27,751 WARN L170 areAnnotationChecker]: L1056-8 has no Hoare annotation [2020-07-28 19:05:27,752 WARN L170 areAnnotationChecker]: L167 has no Hoare annotation [2020-07-28 19:05:27,752 WARN L170 areAnnotationChecker]: L167 has no Hoare annotation [2020-07-28 19:05:27,752 WARN L170 areAnnotationChecker]: L254-9 has no Hoare annotation [2020-07-28 19:05:27,752 WARN L170 areAnnotationChecker]: L254-9 has no Hoare annotation [2020-07-28 19:05:27,752 WARN L170 areAnnotationChecker]: L468-32 has no Hoare annotation [2020-07-28 19:05:27,752 WARN L170 areAnnotationChecker]: L474-11 has no Hoare annotation [2020-07-28 19:05:27,752 WARN L170 areAnnotationChecker]: L1061-12 has no Hoare annotation [2020-07-28 19:05:27,753 WARN L170 areAnnotationChecker]: L382-13 has no Hoare annotation [2020-07-28 19:05:27,753 WARN L170 areAnnotationChecker]: L382-13 has no Hoare annotation [2020-07-28 19:05:27,753 WARN L170 areAnnotationChecker]: L1016-16 has no Hoare annotation [2020-07-28 19:05:27,753 WARN L170 areAnnotationChecker]: L468-45 has no Hoare annotation [2020-07-28 19:05:27,753 WARN L170 areAnnotationChecker]: L468-45 has no Hoare annotation [2020-07-28 19:05:27,753 WARN L170 areAnnotationChecker]: L1016-18 has no Hoare annotation [2020-07-28 19:05:27,754 WARN L170 areAnnotationChecker]: L410-19 has no Hoare annotation [2020-07-28 19:05:27,754 WARN L170 areAnnotationChecker]: L410-20 has no Hoare annotation [2020-07-28 19:05:27,754 WARN L170 areAnnotationChecker]: L272-7 has no Hoare annotation [2020-07-28 19:05:27,754 WARN L170 areAnnotationChecker]: L272-7 has no Hoare annotation [2020-07-28 19:05:27,754 WARN L170 areAnnotationChecker]: L254-23 has no Hoare annotation [2020-07-28 19:05:27,754 WARN L170 areAnnotationChecker]: L254-23 has no Hoare annotation [2020-07-28 19:05:27,755 WARN L170 areAnnotationChecker]: L1071-8 has no Hoare annotation [2020-07-28 19:05:27,755 WARN L170 areAnnotationChecker]: L254-25 has no Hoare annotation [2020-07-28 19:05:27,755 WARN L170 areAnnotationChecker]: L254-25 has no Hoare annotation [2020-07-28 19:05:27,755 WARN L170 areAnnotationChecker]: L229-26 has no Hoare annotation [2020-07-28 19:05:27,755 WARN L170 areAnnotationChecker]: L229-26 has no Hoare annotation [2020-07-28 19:05:27,755 WARN L170 areAnnotationChecker]: L419-2 has no Hoare annotation [2020-07-28 19:05:27,755 WARN L170 areAnnotationChecker]: L163-5 has no Hoare annotation [2020-07-28 19:05:27,756 WARN L170 areAnnotationChecker]: L297 has no Hoare annotation [2020-07-28 19:05:27,756 WARN L170 areAnnotationChecker]: L297 has no Hoare annotation [2020-07-28 19:05:27,756 WARN L170 areAnnotationChecker]: L487-3 has no Hoare annotation [2020-07-28 19:05:27,756 WARN L170 areAnnotationChecker]: L487-3 has no Hoare annotation [2020-07-28 19:05:27,756 WARN L170 areAnnotationChecker]: L229-4 has no Hoare annotation [2020-07-28 19:05:27,756 WARN L170 areAnnotationChecker]: L229-4 has no Hoare annotation [2020-07-28 19:05:27,756 WARN L170 areAnnotationChecker]: L1056-5 has no Hoare annotation [2020-07-28 19:05:27,757 WARN L170 areAnnotationChecker]: L1056-5 has no Hoare annotation [2020-07-28 19:05:27,757 WARN L170 areAnnotationChecker]: L487-8 has no Hoare annotation [2020-07-28 19:05:27,757 WARN L170 areAnnotationChecker]: L1056-7 has no Hoare annotation [2020-07-28 19:05:27,757 WARN L170 areAnnotationChecker]: L1056-7 has no Hoare annotation [2020-07-28 19:05:27,757 WARN L170 areAnnotationChecker]: L1061-8 has no Hoare annotation [2020-07-28 19:05:27,757 WARN L170 areAnnotationChecker]: L602 has no Hoare annotation [2020-07-28 19:05:27,758 WARN L170 areAnnotationChecker]: L602 has no Hoare annotation [2020-07-28 19:05:27,758 WARN L170 areAnnotationChecker]: L229-9 has no Hoare annotation [2020-07-28 19:05:27,758 WARN L170 areAnnotationChecker]: L229-9 has no Hoare annotation [2020-07-28 19:05:27,758 WARN L170 areAnnotationChecker]: L474-10 has no Hoare annotation [2020-07-28 19:05:27,758 WARN L170 areAnnotationChecker]: L233-11 has no Hoare annotation [2020-07-28 19:05:27,758 WARN L170 areAnnotationChecker]: L233-11 has no Hoare annotation [2020-07-28 19:05:27,758 WARN L170 areAnnotationChecker]: L468-36 has no Hoare annotation [2020-07-28 19:05:27,759 WARN L170 areAnnotationChecker]: L468-36 has no Hoare annotation [2020-07-28 19:05:27,759 WARN L170 areAnnotationChecker]: L1016-15 has no Hoare annotation [2020-07-28 19:05:27,759 WARN L170 areAnnotationChecker]: L410-16 has no Hoare annotation [2020-07-28 19:05:27,759 WARN L170 areAnnotationChecker]: L468-47 has no Hoare annotation [2020-07-28 19:05:27,759 WARN L170 areAnnotationChecker]: L410-18 has no Hoare annotation [2020-07-28 19:05:27,759 WARN L170 areAnnotationChecker]: L368-34 has no Hoare annotation [2020-07-28 19:05:27,759 WARN L170 areAnnotationChecker]: L368-34 has no Hoare annotation [2020-07-28 19:05:27,760 WARN L170 areAnnotationChecker]: L319-2 has no Hoare annotation [2020-07-28 19:05:27,760 WARN L170 areAnnotationChecker]: L319-2 has no Hoare annotation [2020-07-28 19:05:27,760 WARN L170 areAnnotationChecker]: L1071-7 has no Hoare annotation [2020-07-28 19:05:27,760 WARN L170 areAnnotationChecker]: L254-22 has no Hoare annotation [2020-07-28 19:05:27,760 WARN L170 areAnnotationChecker]: L254-22 has no Hoare annotation [2020-07-28 19:05:27,760 WARN L170 areAnnotationChecker]: L229-23 has no Hoare annotation [2020-07-28 19:05:27,761 WARN L170 areAnnotationChecker]: L229-23 has no Hoare annotation [2020-07-28 19:05:27,761 WARN L170 areAnnotationChecker]: L487-24 has no Hoare annotation [2020-07-28 19:05:27,761 WARN L170 areAnnotationChecker]: L487-24 has no Hoare annotation [2020-07-28 19:05:27,761 WARN L170 areAnnotationChecker]: L229-25 has no Hoare annotation [2020-07-28 19:05:27,761 WARN L170 areAnnotationChecker]: L229-25 has no Hoare annotation [2020-07-28 19:05:27,761 WARN L170 areAnnotationChecker]: L1056-26 has no Hoare annotation [2020-07-28 19:05:27,762 WARN L170 areAnnotationChecker]: L1056-26 has no Hoare annotation [2020-07-28 19:05:27,762 WARN L170 areAnnotationChecker]: L167-4 has no Hoare annotation [2020-07-28 19:05:27,762 WARN L170 areAnnotationChecker]: L167-4 has no Hoare annotation [2020-07-28 19:05:27,762 WARN L170 areAnnotationChecker]: L272 has no Hoare annotation [2020-07-28 19:05:27,762 WARN L170 areAnnotationChecker]: L272 has no Hoare annotation [2020-07-28 19:05:27,762 WARN L170 areAnnotationChecker]: L254-2 has no Hoare annotation [2020-07-28 19:05:27,763 WARN L170 areAnnotationChecker]: L254-2 has no Hoare annotation [2020-07-28 19:05:27,763 WARN L170 areAnnotationChecker]: L487-5 has no Hoare annotation [2020-07-28 19:05:27,763 WARN L170 areAnnotationChecker]: L1056-4 has no Hoare annotation [2020-07-28 19:05:27,763 WARN L170 areAnnotationChecker]: L1056-4 has no Hoare annotation [2020-07-28 19:05:27,763 WARN L170 areAnnotationChecker]: L1061-5 has no Hoare annotation [2020-07-28 19:05:27,763 WARN L170 areAnnotationChecker]: L493-2 has no Hoare annotation [2020-07-28 19:05:27,763 WARN L170 areAnnotationChecker]: L1061-7 has no Hoare annotation [2020-07-28 19:05:27,764 WARN L170 areAnnotationChecker]: L468-24 has no Hoare annotation [2020-07-28 19:05:27,764 WARN L170 areAnnotationChecker]: L468-24 has no Hoare annotation [2020-07-28 19:05:27,764 WARN L170 areAnnotationChecker]: L1056-9 has no Hoare annotation [2020-07-28 19:05:27,764 WARN L170 areAnnotationChecker]: L1056-9 has no Hoare annotation [2020-07-28 19:05:27,764 WARN L170 areAnnotationChecker]: L233-10 has no Hoare annotation [2020-07-28 19:05:27,764 WARN L170 areAnnotationChecker]: L233-10 has no Hoare annotation [2020-07-28 19:05:27,765 WARN L170 areAnnotationChecker]: L382-11 has no Hoare annotation [2020-07-28 19:05:27,765 WARN L170 areAnnotationChecker]: L382-11 has no Hoare annotation [2020-07-28 19:05:27,765 WARN L170 areAnnotationChecker]: L468-38 has no Hoare annotation [2020-07-28 19:05:27,765 WARN L170 areAnnotationChecker]: L410-15 has no Hoare annotation [2020-07-28 19:05:27,765 WARN L170 areAnnotationChecker]: L368-28 has no Hoare annotation [2020-07-28 19:05:27,765 WARN L170 areAnnotationChecker]: L368-28 has no Hoare annotation [2020-07-28 19:05:27,765 WARN L170 areAnnotationChecker]: L474-15 has no Hoare annotation [2020-07-28 19:05:27,766 WARN L170 areAnnotationChecker]: L368-32 has no Hoare annotation [2020-07-28 19:05:27,766 WARN L170 areAnnotationChecker]: L368-32 has no Hoare annotation [2020-07-28 19:05:27,766 WARN L170 areAnnotationChecker]: L297-6 has no Hoare annotation [2020-07-28 19:05:27,766 WARN L170 areAnnotationChecker]: L297-6 has no Hoare annotation [2020-07-28 19:05:27,766 WARN L170 areAnnotationChecker]: L487-21 has no Hoare annotation [2020-07-28 19:05:27,766 WARN L170 areAnnotationChecker]: L487-21 has no Hoare annotation [2020-07-28 19:05:27,766 WARN L170 areAnnotationChecker]: L229-22 has no Hoare annotation [2020-07-28 19:05:27,766 WARN L170 areAnnotationChecker]: L229-22 has no Hoare annotation [2020-07-28 19:05:27,766 WARN L170 areAnnotationChecker]: L1056-23 has no Hoare annotation [2020-07-28 19:05:27,766 WARN L170 areAnnotationChecker]: L1056-23 has no Hoare annotation [2020-07-28 19:05:27,766 WARN L170 areAnnotationChecker]: L487-26 has no Hoare annotation [2020-07-28 19:05:27,766 WARN L170 areAnnotationChecker]: L1056-25 has no Hoare annotation [2020-07-28 19:05:27,767 WARN L170 areAnnotationChecker]: L1056-25 has no Hoare annotation [2020-07-28 19:05:27,767 WARN L170 areAnnotationChecker]: L1061-26 has no Hoare annotation [2020-07-28 19:05:27,767 WARN L170 areAnnotationChecker]: L602-2 has no Hoare annotation [2020-07-28 19:05:27,767 WARN L170 areAnnotationChecker]: L602-2 has no Hoare annotation [2020-07-28 19:05:27,767 WARN L170 areAnnotationChecker]: L1071 has no Hoare annotation [2020-07-28 19:05:27,767 WARN L170 areAnnotationChecker]: L254-1 has no Hoare annotation [2020-07-28 19:05:27,767 WARN L170 areAnnotationChecker]: L254-1 has no Hoare annotation [2020-07-28 19:05:27,767 WARN L170 areAnnotationChecker]: L229-2 has no Hoare annotation [2020-07-28 19:05:27,767 WARN L170 areAnnotationChecker]: L229-2 has no Hoare annotation [2020-07-28 19:05:27,767 WARN L170 areAnnotationChecker]: L493-1 has no Hoare annotation [2020-07-28 19:05:27,767 WARN L170 areAnnotationChecker]: L1061-4 has no Hoare annotation [2020-07-28 19:05:27,768 WARN L170 areAnnotationChecker]: L468-15 has no Hoare annotation [2020-07-28 19:05:27,768 WARN L170 areAnnotationChecker]: L468-15 has no Hoare annotation [2020-07-28 19:05:27,768 WARN L170 areAnnotationChecker]: L276-2 has no Hoare annotation [2020-07-28 19:05:27,768 WARN L170 areAnnotationChecker]: L276-2 has no Hoare annotation [2020-07-28 19:05:27,768 WARN L170 areAnnotationChecker]: L468-21 has no Hoare annotation [2020-07-28 19:05:27,768 WARN L170 areAnnotationChecker]: L468-21 has no Hoare annotation [2020-07-28 19:05:27,768 WARN L170 areAnnotationChecker]: L468-26 has no Hoare annotation [2020-07-28 19:05:27,768 WARN L170 areAnnotationChecker]: L1061-9 has no Hoare annotation [2020-07-28 19:05:27,768 WARN L170 areAnnotationChecker]: L382-10 has no Hoare annotation [2020-07-28 19:05:27,768 WARN L170 areAnnotationChecker]: L382-10 has no Hoare annotation [2020-07-28 19:05:27,768 WARN L170 areAnnotationChecker]: L1016-13 has no Hoare annotation [2020-07-28 19:05:27,768 WARN L170 areAnnotationChecker]: L474-12 has no Hoare annotation [2020-07-28 19:05:27,768 WARN L170 areAnnotationChecker]: L368-26 has no Hoare annotation [2020-07-28 19:05:27,769 WARN L170 areAnnotationChecker]: L368-26 has no Hoare annotation [2020-07-28 19:05:27,769 WARN L170 areAnnotationChecker]: L233-15 has no Hoare annotation [2020-07-28 19:05:27,769 WARN L170 areAnnotationChecker]: L233-15 has no Hoare annotation [2020-07-28 19:05:27,769 WARN L170 areAnnotationChecker]: L272-6 has no Hoare annotation [2020-07-28 19:05:27,769 WARN L170 areAnnotationChecker]: L272-6 has no Hoare annotation [2020-07-28 19:05:27,769 WARN L170 areAnnotationChecker]: L254-20 has no Hoare annotation [2020-07-28 19:05:27,769 WARN L170 areAnnotationChecker]: L254-20 has no Hoare annotation [2020-07-28 19:05:27,769 WARN L170 areAnnotationChecker]: L487-23 has no Hoare annotation [2020-07-28 19:05:27,769 WARN L170 areAnnotationChecker]: L1056-22 has no Hoare annotation [2020-07-28 19:05:27,769 WARN L170 areAnnotationChecker]: L1056-22 has no Hoare annotation [2020-07-28 19:05:27,769 WARN L170 areAnnotationChecker]: L1061-23 has no Hoare annotation [2020-07-28 19:05:27,769 WARN L170 areAnnotationChecker]: L493-8 has no Hoare annotation [2020-07-28 19:05:27,770 WARN L170 areAnnotationChecker]: L1061-25 has no Hoare annotation [2020-07-28 19:05:27,770 WARN L170 areAnnotationChecker]: L468-78 has no Hoare annotation [2020-07-28 19:05:27,770 WARN L170 areAnnotationChecker]: L468-78 has no Hoare annotation [2020-07-28 19:05:27,770 WARN L170 areAnnotationChecker]: L487 has no Hoare annotation [2020-07-28 19:05:27,770 WARN L170 areAnnotationChecker]: L487 has no Hoare annotation [2020-07-28 19:05:27,770 WARN L170 areAnnotationChecker]: L229-1 has no Hoare annotation [2020-07-28 19:05:27,770 WARN L170 areAnnotationChecker]: L229-1 has no Hoare annotation [2020-07-28 19:05:27,770 WARN L170 areAnnotationChecker]: L1056-2 has no Hoare annotation [2020-07-28 19:05:27,770 WARN L170 areAnnotationChecker]: L1056-2 has no Hoare annotation [2020-07-28 19:05:27,770 WARN L170 areAnnotationChecker]: L276-1 has no Hoare annotation [2020-07-28 19:05:27,770 WARN L170 areAnnotationChecker]: L276-1 has no Hoare annotation [2020-07-28 19:05:27,770 WARN L170 areAnnotationChecker]: L468-12 has no Hoare annotation [2020-07-28 19:05:27,770 WARN L170 areAnnotationChecker]: L468-12 has no Hoare annotation [2020-07-28 19:05:27,771 WARN L170 areAnnotationChecker]: L468-17 has no Hoare annotation [2020-07-28 19:05:27,771 WARN L170 areAnnotationChecker]: L254-6 has no Hoare annotation [2020-07-28 19:05:27,771 WARN L170 areAnnotationChecker]: L254-6 has no Hoare annotation [2020-07-28 19:05:27,771 WARN L170 areAnnotationChecker]: L468-23 has no Hoare annotation [2020-07-28 19:05:27,771 WARN L170 areAnnotationChecker]: L474-8 has no Hoare annotation [2020-07-28 19:05:27,771 WARN L170 areAnnotationChecker]: L468-27 has no Hoare annotation [2020-07-28 19:05:27,771 WARN L170 areAnnotationChecker]: L468-27 has no Hoare annotation [2020-07-28 19:05:27,771 WARN L170 areAnnotationChecker]: L1016-12 has no Hoare annotation [2020-07-28 19:05:27,771 WARN L170 areAnnotationChecker]: L410-13 has no Hoare annotation [2020-07-28 19:05:27,771 WARN L170 areAnnotationChecker]: L233-12 has no Hoare annotation [2020-07-28 19:05:27,771 WARN L170 areAnnotationChecker]: L233-12 has no Hoare annotation [2020-07-28 19:05:27,771 WARN L170 areAnnotationChecker]: L382-15 has no Hoare annotation [2020-07-28 19:05:27,772 WARN L170 areAnnotationChecker]: L382-15 has no Hoare annotation [2020-07-28 19:05:27,772 WARN L170 areAnnotationChecker]: L1071-6 has no Hoare annotation [2020-07-28 19:05:27,772 WARN L170 areAnnotationChecker]: L254-19 has no Hoare annotation [2020-07-28 19:05:27,772 WARN L170 areAnnotationChecker]: L254-19 has no Hoare annotation [2020-07-28 19:05:27,772 WARN L170 areAnnotationChecker]: L229-20 has no Hoare annotation [2020-07-28 19:05:27,772 WARN L170 areAnnotationChecker]: L229-20 has no Hoare annotation [2020-07-28 19:05:27,772 WARN L170 areAnnotationChecker]: L493-7 has no Hoare annotation [2020-07-28 19:05:27,772 WARN L170 areAnnotationChecker]: L1061-22 has no Hoare annotation [2020-07-28 19:05:27,772 WARN L170 areAnnotationChecker]: L468-69 has no Hoare annotation [2020-07-28 19:05:27,772 WARN L170 areAnnotationChecker]: L468-69 has no Hoare annotation [2020-07-28 19:05:27,772 WARN L170 areAnnotationChecker]: L276-8 has no Hoare annotation [2020-07-28 19:05:27,772 WARN L170 areAnnotationChecker]: L276-8 has no Hoare annotation [2020-07-28 19:05:27,772 WARN L170 areAnnotationChecker]: L468-75 has no Hoare annotation [2020-07-28 19:05:27,773 WARN L170 areAnnotationChecker]: L468-75 has no Hoare annotation [2020-07-28 19:05:27,773 WARN L170 areAnnotationChecker]: L468-80 has no Hoare annotation [2020-07-28 19:05:27,773 WARN L170 areAnnotationChecker]: L487-2 has no Hoare annotation [2020-07-28 19:05:27,773 WARN L170 areAnnotationChecker]: L1056-1 has no Hoare annotation [2020-07-28 19:05:27,773 WARN L170 areAnnotationChecker]: L1056-1 has no Hoare annotation [2020-07-28 19:05:27,773 WARN L170 areAnnotationChecker]: L1061-2 has no Hoare annotation [2020-07-28 19:05:27,773 WARN L170 areAnnotationChecker]: L254-3 has no Hoare annotation [2020-07-28 19:05:27,773 WARN L170 areAnnotationChecker]: L254-3 has no Hoare annotation [2020-07-28 19:05:27,773 WARN L170 areAnnotationChecker]: L468-14 has no Hoare annotation [2020-07-28 19:05:27,773 WARN L170 areAnnotationChecker]: L474-5 has no Hoare annotation [2020-07-28 19:05:27,773 WARN L170 areAnnotationChecker]: L229-6 has no Hoare annotation [2020-07-28 19:05:27,773 WARN L170 areAnnotationChecker]: L229-6 has no Hoare annotation [2020-07-28 19:05:27,774 WARN L170 areAnnotationChecker]: L474-7 has no Hoare annotation [2020-07-28 19:05:27,774 WARN L170 areAnnotationChecker]: L233-8 has no Hoare annotation [2020-07-28 19:05:27,774 WARN L170 areAnnotationChecker]: L233-8 has no Hoare annotation [2020-07-28 19:05:27,774 WARN L170 areAnnotationChecker]: L468-29 has no Hoare annotation [2020-07-28 19:05:27,774 WARN L170 areAnnotationChecker]: L410-12 has no Hoare annotation [2020-07-28 19:05:27,774 WARN L170 areAnnotationChecker]: L368-22 has no Hoare annotation [2020-07-28 19:05:27,774 WARN L170 areAnnotationChecker]: L368-22 has no Hoare annotation [2020-07-28 19:05:27,775 WARN L170 areAnnotationChecker]: L382-12 has no Hoare annotation [2020-07-28 19:05:27,775 WARN L170 areAnnotationChecker]: L382-12 has no Hoare annotation [2020-07-28 19:05:27,775 WARN L170 areAnnotationChecker]: L1016-17 has no Hoare annotation [2020-07-28 19:05:27,775 WARN L170 areAnnotationChecker]: L487-18 has no Hoare annotation [2020-07-28 19:05:27,775 WARN L170 areAnnotationChecker]: L487-18 has no Hoare annotation [2020-07-28 19:05:27,775 WARN L170 areAnnotationChecker]: L229-19 has no Hoare annotation [2020-07-28 19:05:27,775 WARN L170 areAnnotationChecker]: L229-19 has no Hoare annotation [2020-07-28 19:05:27,775 WARN L170 areAnnotationChecker]: L1056-20 has no Hoare annotation [2020-07-28 19:05:27,775 WARN L170 areAnnotationChecker]: L1056-20 has no Hoare annotation [2020-07-28 19:05:27,775 WARN L170 areAnnotationChecker]: L276-7 has no Hoare annotation [2020-07-28 19:05:27,775 WARN L170 areAnnotationChecker]: L276-7 has no Hoare annotation [2020-07-28 19:05:27,775 WARN L170 areAnnotationChecker]: L468-66 has no Hoare annotation [2020-07-28 19:05:27,776 WARN L170 areAnnotationChecker]: L468-66 has no Hoare annotation [2020-07-28 19:05:27,776 WARN L170 areAnnotationChecker]: L468-71 has no Hoare annotation [2020-07-28 19:05:27,776 WARN L170 areAnnotationChecker]: L254-24 has no Hoare annotation [2020-07-28 19:05:27,776 WARN L170 areAnnotationChecker]: L254-24 has no Hoare annotation [2020-07-28 19:05:27,776 WARN L170 areAnnotationChecker]: L468-77 has no Hoare annotation [2020-07-28 19:05:27,776 WARN L170 areAnnotationChecker]: L474-26 has no Hoare annotation [2020-07-28 19:05:27,776 WARN L170 areAnnotationChecker]: L493 has no Hoare annotation [2020-07-28 19:05:27,776 WARN L170 areAnnotationChecker]: L1061-1 has no Hoare annotation [2020-07-28 19:05:27,776 WARN L170 areAnnotationChecker]: L468-6 has no Hoare annotation [2020-07-28 19:05:27,776 WARN L170 areAnnotationChecker]: L468-6 has no Hoare annotation [2020-07-28 19:05:27,776 WARN L170 areAnnotationChecker]: L229-3 has no Hoare annotation [2020-07-28 19:05:27,776 WARN L170 areAnnotationChecker]: L229-3 has no Hoare annotation [2020-07-28 19:05:27,777 WARN L170 areAnnotationChecker]: L474-4 has no Hoare annotation [2020-07-28 19:05:27,777 WARN L170 areAnnotationChecker]: L233-5 has no Hoare annotation [2020-07-28 19:05:27,777 WARN L170 areAnnotationChecker]: L233-5 has no Hoare annotation [2020-07-28 19:05:27,777 WARN L170 areAnnotationChecker]: L1056-6 has no Hoare annotation [2020-07-28 19:05:27,777 WARN L170 areAnnotationChecker]: L1056-6 has no Hoare annotation [2020-07-28 19:05:27,777 WARN L170 areAnnotationChecker]: L233-7 has no Hoare annotation [2020-07-28 19:05:27,777 WARN L170 areAnnotationChecker]: L233-7 has no Hoare annotation [2020-07-28 19:05:27,777 WARN L170 areAnnotationChecker]: L382-8 has no Hoare annotation [2020-07-28 19:05:27,777 WARN L170 areAnnotationChecker]: L382-8 has no Hoare annotation [2020-07-28 19:05:27,777 WARN L170 areAnnotationChecker]: L474-9 has no Hoare annotation [2020-07-28 19:05:27,777 WARN L170 areAnnotationChecker]: L368-20 has no Hoare annotation [2020-07-28 19:05:27,777 WARN L170 areAnnotationChecker]: L368-20 has no Hoare annotation [2020-07-28 19:05:27,777 WARN L170 areAnnotationChecker]: L1016-14 has no Hoare annotation [2020-07-28 19:05:27,778 WARN L170 areAnnotationChecker]: L410-17 has no Hoare annotation [2020-07-28 19:05:27,778 WARN L170 areAnnotationChecker]: L487-20 has no Hoare annotation [2020-07-28 19:05:27,778 WARN L170 areAnnotationChecker]: L1056-19 has no Hoare annotation [2020-07-28 19:05:27,778 WARN L170 areAnnotationChecker]: L1056-19 has no Hoare annotation [2020-07-28 19:05:27,778 WARN L170 areAnnotationChecker]: L1061-20 has no Hoare annotation [2020-07-28 19:05:27,778 WARN L170 areAnnotationChecker]: L254-21 has no Hoare annotation [2020-07-28 19:05:27,778 WARN L170 areAnnotationChecker]: L254-21 has no Hoare annotation [2020-07-28 19:05:27,778 WARN L170 areAnnotationChecker]: L468-68 has no Hoare annotation [2020-07-28 19:05:27,778 WARN L170 areAnnotationChecker]: L474-23 has no Hoare annotation [2020-07-28 19:05:27,778 WARN L170 areAnnotationChecker]: L229-24 has no Hoare annotation [2020-07-28 19:05:27,778 WARN L170 areAnnotationChecker]: L229-24 has no Hoare annotation [2020-07-28 19:05:27,778 WARN L170 areAnnotationChecker]: L474-25 has no Hoare annotation [2020-07-28 19:05:27,779 WARN L170 areAnnotationChecker]: L233-26 has no Hoare annotation [2020-07-28 19:05:27,779 WARN L170 areAnnotationChecker]: L233-26 has no Hoare annotation [2020-07-28 19:05:27,779 WARN L170 areAnnotationChecker]: L276 has no Hoare annotation [2020-07-28 19:05:27,779 WARN L170 areAnnotationChecker]: L276 has no Hoare annotation [2020-07-28 19:05:27,779 WARN L170 areAnnotationChecker]: L468-3 has no Hoare annotation [2020-07-28 19:05:27,779 WARN L170 areAnnotationChecker]: L468-3 has no Hoare annotation [2020-07-28 19:05:27,779 WARN L170 areAnnotationChecker]: L468-8 has no Hoare annotation [2020-07-28 19:05:27,779 WARN L170 areAnnotationChecker]: L1056-3 has no Hoare annotation [2020-07-28 19:05:27,779 WARN L170 areAnnotationChecker]: L1056-3 has no Hoare annotation [2020-07-28 19:05:27,779 WARN L170 areAnnotationChecker]: L233-4 has no Hoare annotation [2020-07-28 19:05:27,779 WARN L170 areAnnotationChecker]: L233-4 has no Hoare annotation [2020-07-28 19:05:27,779 WARN L170 areAnnotationChecker]: L382-5 has no Hoare annotation [2020-07-28 19:05:27,779 WARN L170 areAnnotationChecker]: L382-5 has no Hoare annotation [2020-07-28 19:05:27,780 WARN L170 areAnnotationChecker]: L1061-6 has no Hoare annotation [2020-07-28 19:05:27,780 WARN L170 areAnnotationChecker]: L382-7 has no Hoare annotation [2020-07-28 19:05:27,780 WARN L170 areAnnotationChecker]: L382-7 has no Hoare annotation [2020-07-28 19:05:27,780 WARN L170 areAnnotationChecker]: L1016-9 has no Hoare annotation [2020-07-28 19:05:27,780 WARN L170 areAnnotationChecker]: L233-9 has no Hoare annotation [2020-07-28 19:05:27,780 WARN L170 areAnnotationChecker]: L233-9 has no Hoare annotation [2020-07-28 19:05:27,780 WARN L170 areAnnotationChecker]: L410-14 has no Hoare annotation [2020-07-28 19:05:27,780 WARN L170 areAnnotationChecker]: L368-30 has no Hoare annotation [2020-07-28 19:05:27,780 WARN L170 areAnnotationChecker]: L368-30 has no Hoare annotation [2020-07-28 19:05:27,780 WARN L170 areAnnotationChecker]: L493-6 has no Hoare annotation [2020-07-28 19:05:27,780 WARN L170 areAnnotationChecker]: L1061-19 has no Hoare annotation [2020-07-28 19:05:27,780 WARN L170 areAnnotationChecker]: L468-60 has no Hoare annotation [2020-07-28 19:05:27,781 WARN L170 areAnnotationChecker]: L468-60 has no Hoare annotation [2020-07-28 19:05:27,781 WARN L170 areAnnotationChecker]: L229-21 has no Hoare annotation [2020-07-28 19:05:27,781 WARN L170 areAnnotationChecker]: L229-21 has no Hoare annotation [2020-07-28 19:05:27,781 WARN L170 areAnnotationChecker]: L474-22 has no Hoare annotation [2020-07-28 19:05:27,781 WARN L170 areAnnotationChecker]: L233-23 has no Hoare annotation [2020-07-28 19:05:27,781 WARN L170 areAnnotationChecker]: L233-23 has no Hoare annotation [2020-07-28 19:05:27,781 WARN L170 areAnnotationChecker]: L1056-24 has no Hoare annotation [2020-07-28 19:05:27,781 WARN L170 areAnnotationChecker]: L1056-24 has no Hoare annotation [2020-07-28 19:05:27,781 WARN L170 areAnnotationChecker]: L233-25 has no Hoare annotation [2020-07-28 19:05:27,781 WARN L170 areAnnotationChecker]: L233-25 has no Hoare annotation [2020-07-28 19:05:27,781 WARN L170 areAnnotationChecker]: L382-26 has no Hoare annotation [2020-07-28 19:05:27,781 WARN L170 areAnnotationChecker]: L382-26 has no Hoare annotation [2020-07-28 19:05:27,781 WARN L170 areAnnotationChecker]: L254 has no Hoare annotation [2020-07-28 19:05:27,782 WARN L170 areAnnotationChecker]: L254 has no Hoare annotation [2020-07-28 19:05:27,782 WARN L170 areAnnotationChecker]: L468-5 has no Hoare annotation [2020-07-28 19:05:27,782 WARN L170 areAnnotationChecker]: L474-2 has no Hoare annotation [2020-07-28 19:05:27,782 WARN L170 areAnnotationChecker]: L1061-3 has no Hoare annotation [2020-07-28 19:05:27,782 WARN L170 areAnnotationChecker]: L382-4 has no Hoare annotation [2020-07-28 19:05:27,782 WARN L170 areAnnotationChecker]: L382-4 has no Hoare annotation [2020-07-28 19:05:27,782 WARN L170 areAnnotationChecker]: L1016-6 has no Hoare annotation [2020-07-28 19:05:27,782 WARN L170 areAnnotationChecker]: L468-18 has no Hoare annotation [2020-07-28 19:05:27,782 WARN L170 areAnnotationChecker]: L468-18 has no Hoare annotation [2020-07-28 19:05:27,782 WARN L170 areAnnotationChecker]: L1016-8 has no Hoare annotation [2020-07-28 19:05:27,782 WARN L170 areAnnotationChecker]: L410-9 has no Hoare annotation [2020-07-28 19:05:27,782 WARN L170 areAnnotationChecker]: L382-9 has no Hoare annotation [2020-07-28 19:05:27,783 WARN L170 areAnnotationChecker]: L382-9 has no Hoare annotation [2020-07-28 19:05:27,783 WARN L170 areAnnotationChecker]: L368-24 has no Hoare annotation [2020-07-28 19:05:27,783 WARN L170 areAnnotationChecker]: L368-24 has no Hoare annotation [2020-07-28 19:05:27,783 WARN L170 areAnnotationChecker]: L276-6 has no Hoare annotation [2020-07-28 19:05:27,783 WARN L170 areAnnotationChecker]: L276-6 has no Hoare annotation [2020-07-28 19:05:27,783 WARN L170 areAnnotationChecker]: L468-57 has no Hoare annotation [2020-07-28 19:05:27,783 WARN L170 areAnnotationChecker]: L468-57 has no Hoare annotation [2020-07-28 19:05:27,783 WARN L170 areAnnotationChecker]: L468-62 has no Hoare annotation [2020-07-28 19:05:27,783 WARN L170 areAnnotationChecker]: L1056-21 has no Hoare annotation [2020-07-28 19:05:27,783 WARN L170 areAnnotationChecker]: L1056-21 has no Hoare annotation [2020-07-28 19:05:27,783 WARN L170 areAnnotationChecker]: L233-22 has no Hoare annotation [2020-07-28 19:05:27,783 WARN L170 areAnnotationChecker]: L233-22 has no Hoare annotation [2020-07-28 19:05:27,784 WARN L170 areAnnotationChecker]: L382-23 has no Hoare annotation [2020-07-28 19:05:27,784 WARN L170 areAnnotationChecker]: L382-23 has no Hoare annotation [2020-07-28 19:05:27,784 WARN L170 areAnnotationChecker]: L1061-24 has no Hoare annotation [2020-07-28 19:05:27,784 WARN L170 areAnnotationChecker]: L382-25 has no Hoare annotation [2020-07-28 19:05:27,784 WARN L170 areAnnotationChecker]: L382-25 has no Hoare annotation [2020-07-28 19:05:27,784 WARN L170 areAnnotationChecker]: L1016-29 has no Hoare annotation [2020-07-28 19:05:27,784 WARN L170 areAnnotationChecker]: L229 has no Hoare annotation [2020-07-28 19:05:27,784 WARN L170 areAnnotationChecker]: L229 has no Hoare annotation [2020-07-28 19:05:27,784 WARN L170 areAnnotationChecker]: L474-1 has no Hoare annotation [2020-07-28 19:05:27,784 WARN L170 areAnnotationChecker]: L233-2 has no Hoare annotation [2020-07-28 19:05:27,784 WARN L170 areAnnotationChecker]: L233-2 has no Hoare annotation [2020-07-28 19:05:27,784 WARN L170 areAnnotationChecker]: L468-9 has no Hoare annotation [2020-07-28 19:05:27,785 WARN L170 areAnnotationChecker]: L468-9 has no Hoare annotation [2020-07-28 19:05:27,785 WARN L170 areAnnotationChecker]: L1016-5 has no Hoare annotation [2020-07-28 19:05:27,785 WARN L170 areAnnotationChecker]: L410-6 has no Hoare annotation [2020-07-28 19:05:27,785 WARN L170 areAnnotationChecker]: L468-20 has no Hoare annotation [2020-07-28 19:05:27,785 WARN L170 areAnnotationChecker]: L410-8 has no Hoare annotation [2020-07-28 19:05:27,785 WARN L170 areAnnotationChecker]: L368-16 has no Hoare annotation [2020-07-28 19:05:27,785 WARN L170 areAnnotationChecker]: L368-16 has no Hoare annotation [2020-07-28 19:05:27,785 WARN L170 areAnnotationChecker]: L1016-11 has no Hoare annotation [2020-07-28 19:05:27,785 WARN L170 areAnnotationChecker]: L254-18 has no Hoare annotation [2020-07-28 19:05:27,785 WARN L170 areAnnotationChecker]: L254-18 has no Hoare annotation [2020-07-28 19:05:27,785 WARN L170 areAnnotationChecker]: L468-59 has no Hoare annotation [2020-07-28 19:05:27,785 WARN L170 areAnnotationChecker]: L474-20 has no Hoare annotation [2020-07-28 19:05:27,785 WARN L170 areAnnotationChecker]: L1061-21 has no Hoare annotation [2020-07-28 19:05:27,786 WARN L170 areAnnotationChecker]: L382-22 has no Hoare annotation [2020-07-28 19:05:27,786 WARN L170 areAnnotationChecker]: L382-22 has no Hoare annotation [2020-07-28 19:05:27,786 WARN L170 areAnnotationChecker]: L1016-26 has no Hoare annotation [2020-07-28 19:05:27,786 WARN L170 areAnnotationChecker]: L468-72 has no Hoare annotation [2020-07-28 19:05:27,786 WARN L170 areAnnotationChecker]: L468-72 has no Hoare annotation [2020-07-28 19:05:27,786 WARN L170 areAnnotationChecker]: L1016-28 has no Hoare annotation [2020-07-28 19:05:27,786 WARN L170 areAnnotationChecker]: L410-29 has no Hoare annotation [2020-07-28 19:05:27,786 WARN L170 areAnnotationChecker]: L1056 has no Hoare annotation [2020-07-28 19:05:27,786 WARN L170 areAnnotationChecker]: L1056 has no Hoare annotation [2020-07-28 19:05:27,786 WARN L170 areAnnotationChecker]: L233-1 has no Hoare annotation [2020-07-28 19:05:27,786 WARN L170 areAnnotationChecker]: L233-1 has no Hoare annotation [2020-07-28 19:05:27,786 WARN L170 areAnnotationChecker]: L382-2 has no Hoare annotation [2020-07-28 19:05:27,787 WARN L170 areAnnotationChecker]: L382-2 has no Hoare annotation [2020-07-28 19:05:27,787 WARN L170 areAnnotationChecker]: L468-11 has no Hoare annotation [2020-07-28 19:05:27,787 WARN L170 areAnnotationChecker]: L410-5 has no Hoare annotation [2020-07-28 19:05:27,787 WARN L170 areAnnotationChecker]: L368-10 has no Hoare annotation [2020-07-28 19:05:27,787 WARN L170 areAnnotationChecker]: L368-10 has no Hoare annotation [2020-07-28 19:05:27,787 WARN L170 areAnnotationChecker]: L474-6 has no Hoare annotation [2020-07-28 19:05:27,787 WARN L170 areAnnotationChecker]: L368-14 has no Hoare annotation [2020-07-28 19:05:27,787 WARN L170 areAnnotationChecker]: L368-14 has no Hoare annotation [2020-07-28 19:05:27,787 WARN L170 areAnnotationChecker]: L410-11 has no Hoare annotation [2020-07-28 19:05:27,787 WARN L170 areAnnotationChecker]: L229-18 has no Hoare annotation [2020-07-28 19:05:27,787 WARN L170 areAnnotationChecker]: L229-18 has no Hoare annotation [2020-07-28 19:05:27,787 WARN L170 areAnnotationChecker]: L474-19 has no Hoare annotation [2020-07-28 19:05:27,788 WARN L170 areAnnotationChecker]: L233-20 has no Hoare annotation [2020-07-28 19:05:27,788 WARN L170 areAnnotationChecker]: L233-20 has no Hoare annotation [2020-07-28 19:05:27,788 WARN L170 areAnnotationChecker]: L468-63 has no Hoare annotation [2020-07-28 19:05:27,788 WARN L170 areAnnotationChecker]: L468-63 has no Hoare annotation [2020-07-28 19:05:27,788 WARN L170 areAnnotationChecker]: L1016-25 has no Hoare annotation [2020-07-28 19:05:27,788 WARN L170 areAnnotationChecker]: L410-26 has no Hoare annotation [2020-07-28 19:05:27,788 WARN L170 areAnnotationChecker]: L468-74 has no Hoare annotation [2020-07-28 19:05:27,788 WARN L170 areAnnotationChecker]: L410-28 has no Hoare annotation [2020-07-28 19:05:27,788 WARN L170 areAnnotationChecker]: L368-52 has no Hoare annotation [2020-07-28 19:05:27,788 WARN L170 areAnnotationChecker]: L368-52 has no Hoare annotation [2020-07-28 19:05:27,788 WARN L170 areAnnotationChecker]: L1061 has no Hoare annotation [2020-07-28 19:05:27,788 WARN L170 areAnnotationChecker]: L382-1 has no Hoare annotation [2020-07-28 19:05:27,788 WARN L170 areAnnotationChecker]: L382-1 has no Hoare annotation [2020-07-28 19:05:27,789 WARN L170 areAnnotationChecker]: L1016-3 has no Hoare annotation [2020-07-28 19:05:27,789 WARN L170 areAnnotationChecker]: L474-3 has no Hoare annotation [2020-07-28 19:05:27,789 WARN L170 areAnnotationChecker]: L368-8 has no Hoare annotation [2020-07-28 19:05:27,789 WARN L170 areAnnotationChecker]: L368-8 has no Hoare annotation [2020-07-28 19:05:27,789 WARN L170 areAnnotationChecker]: L233-6 has no Hoare annotation [2020-07-28 19:05:27,789 WARN L170 areAnnotationChecker]: L233-6 has no Hoare annotation [2020-07-28 19:05:27,789 WARN L170 areAnnotationChecker]: L368-18 has no Hoare annotation [2020-07-28 19:05:27,789 WARN L170 areAnnotationChecker]: L368-18 has no Hoare annotation [2020-07-28 19:05:27,789 WARN L170 areAnnotationChecker]: L1056-18 has no Hoare annotation [2020-07-28 19:05:27,789 WARN L170 areAnnotationChecker]: L1056-18 has no Hoare annotation [2020-07-28 19:05:27,789 WARN L170 areAnnotationChecker]: L233-19 has no Hoare annotation [2020-07-28 19:05:27,789 WARN L170 areAnnotationChecker]: L233-19 has no Hoare annotation [2020-07-28 19:05:27,790 WARN L170 areAnnotationChecker]: L382-20 has no Hoare annotation [2020-07-28 19:05:27,790 WARN L170 areAnnotationChecker]: L382-20 has no Hoare annotation [2020-07-28 19:05:27,790 WARN L170 areAnnotationChecker]: L468-65 has no Hoare annotation [2020-07-28 19:05:27,790 WARN L170 areAnnotationChecker]: L410-25 has no Hoare annotation [2020-07-28 19:05:27,790 WARN L170 areAnnotationChecker]: L368-46 has no Hoare annotation [2020-07-28 19:05:27,790 WARN L170 areAnnotationChecker]: L368-46 has no Hoare annotation [2020-07-28 19:05:27,790 WARN L170 areAnnotationChecker]: L474-24 has no Hoare annotation [2020-07-28 19:05:27,790 WARN L170 areAnnotationChecker]: L368-50 has no Hoare annotation [2020-07-28 19:05:27,790 WARN L170 areAnnotationChecker]: L368-50 has no Hoare annotation [2020-07-28 19:05:27,790 WARN L170 areAnnotationChecker]: L468 has no Hoare annotation [2020-07-28 19:05:27,791 WARN L170 areAnnotationChecker]: L468 has no Hoare annotation [2020-07-28 19:05:27,791 WARN L170 areAnnotationChecker]: L1016-2 has no Hoare annotation [2020-07-28 19:05:27,791 WARN L170 areAnnotationChecker]: L410-3 has no Hoare annotation [2020-07-28 19:05:27,791 WARN L170 areAnnotationChecker]: L233-3 has no Hoare annotation [2020-07-28 19:05:27,791 WARN L170 areAnnotationChecker]: L233-3 has no Hoare annotation [2020-07-28 19:05:27,791 WARN L170 areAnnotationChecker]: L382-6 has no Hoare annotation [2020-07-28 19:05:27,791 WARN L170 areAnnotationChecker]: L382-6 has no Hoare annotation [2020-07-28 19:05:27,791 WARN L170 areAnnotationChecker]: L1061-18 has no Hoare annotation [2020-07-28 19:05:27,791 WARN L170 areAnnotationChecker]: L382-19 has no Hoare annotation [2020-07-28 19:05:27,791 WARN L170 areAnnotationChecker]: L382-19 has no Hoare annotation [2020-07-28 19:05:27,791 WARN L170 areAnnotationChecker]: L1016-23 has no Hoare annotation [2020-07-28 19:05:27,792 WARN L170 areAnnotationChecker]: L474-21 has no Hoare annotation [2020-07-28 19:05:27,792 WARN L170 areAnnotationChecker]: L368-44 has no Hoare annotation [2020-07-28 19:05:27,792 WARN L170 areAnnotationChecker]: L368-44 has no Hoare annotation [2020-07-28 19:05:27,792 WARN L170 areAnnotationChecker]: L233-24 has no Hoare annotation [2020-07-28 19:05:27,792 WARN L170 areAnnotationChecker]: L233-24 has no Hoare annotation [2020-07-28 19:05:27,792 WARN L170 areAnnotationChecker]: L468-2 has no Hoare annotation [2020-07-28 19:05:27,792 WARN L170 areAnnotationChecker]: L410-2 has no Hoare annotation [2020-07-28 19:05:27,792 WARN L170 areAnnotationChecker]: L368-4 has no Hoare annotation [2020-07-28 19:05:27,792 WARN L170 areAnnotationChecker]: L368-4 has no Hoare annotation [2020-07-28 19:05:27,792 WARN L170 areAnnotationChecker]: L382-3 has no Hoare annotation [2020-07-28 19:05:27,793 WARN L170 areAnnotationChecker]: L382-3 has no Hoare annotation [2020-07-28 19:05:27,793 WARN L170 areAnnotationChecker]: L1016-7 has no Hoare annotation [2020-07-28 19:05:27,793 WARN L170 areAnnotationChecker]: L468-54 has no Hoare annotation [2020-07-28 19:05:27,793 WARN L170 areAnnotationChecker]: L468-54 has no Hoare annotation [2020-07-28 19:05:27,793 WARN L170 areAnnotationChecker]: L1016-22 has no Hoare annotation [2020-07-28 19:05:27,793 WARN L170 areAnnotationChecker]: L410-23 has no Hoare annotation [2020-07-28 19:05:27,793 WARN L170 areAnnotationChecker]: L233-21 has no Hoare annotation [2020-07-28 19:05:27,793 WARN L170 areAnnotationChecker]: L233-21 has no Hoare annotation [2020-07-28 19:05:27,793 WARN L170 areAnnotationChecker]: L382-24 has no Hoare annotation [2020-07-28 19:05:27,793 WARN L170 areAnnotationChecker]: L382-24 has no Hoare annotation [2020-07-28 19:05:27,793 WARN L170 areAnnotationChecker]: L474 has no Hoare annotation [2020-07-28 19:05:27,794 WARN L170 areAnnotationChecker]: L368-2 has no Hoare annotation [2020-07-28 19:05:27,794 WARN L170 areAnnotationChecker]: L368-2 has no Hoare annotation [2020-07-28 19:05:27,794 WARN L170 areAnnotationChecker]: L1016-4 has no Hoare annotation [2020-07-28 19:05:27,794 WARN L170 areAnnotationChecker]: L410-7 has no Hoare annotation [2020-07-28 19:05:27,794 WARN L170 areAnnotationChecker]: L468-56 has no Hoare annotation [2020-07-28 19:05:27,794 WARN L170 areAnnotationChecker]: L410-22 has no Hoare annotation [2020-07-28 19:05:27,794 WARN L170 areAnnotationChecker]: L368-40 has no Hoare annotation [2020-07-28 19:05:27,794 WARN L170 areAnnotationChecker]: L368-40 has no Hoare annotation [2020-07-28 19:05:27,794 WARN L170 areAnnotationChecker]: L382-21 has no Hoare annotation [2020-07-28 19:05:27,794 WARN L170 areAnnotationChecker]: L382-21 has no Hoare annotation [2020-07-28 19:05:27,794 WARN L170 areAnnotationChecker]: L1016-27 has no Hoare annotation [2020-07-28 19:05:27,794 WARN L170 areAnnotationChecker]: L233 has no Hoare annotation [2020-07-28 19:05:27,794 WARN L170 areAnnotationChecker]: L233 has no Hoare annotation [2020-07-28 19:05:27,795 WARN L170 areAnnotationChecker]: L410-4 has no Hoare annotation [2020-07-28 19:05:27,795 WARN L170 areAnnotationChecker]: L368-12 has no Hoare annotation [2020-07-28 19:05:27,795 WARN L170 areAnnotationChecker]: L368-12 has no Hoare annotation [2020-07-28 19:05:27,795 WARN L170 areAnnotationChecker]: L474-18 has no Hoare annotation [2020-07-28 19:05:27,795 WARN L170 areAnnotationChecker]: L368-38 has no Hoare annotation [2020-07-28 19:05:27,795 WARN L170 areAnnotationChecker]: L368-38 has no Hoare annotation [2020-07-28 19:05:27,795 WARN L170 areAnnotationChecker]: L1016-24 has no Hoare annotation [2020-07-28 19:05:27,795 WARN L170 areAnnotationChecker]: L410-27 has no Hoare annotation [2020-07-28 19:05:27,795 WARN L170 areAnnotationChecker]: L382 has no Hoare annotation [2020-07-28 19:05:27,795 WARN L170 areAnnotationChecker]: L382 has no Hoare annotation [2020-07-28 19:05:27,795 WARN L170 areAnnotationChecker]: L368-6 has no Hoare annotation [2020-07-28 19:05:27,795 WARN L170 areAnnotationChecker]: L368-6 has no Hoare annotation [2020-07-28 19:05:27,796 WARN L170 areAnnotationChecker]: L233-18 has no Hoare annotation [2020-07-28 19:05:27,796 WARN L170 areAnnotationChecker]: L233-18 has no Hoare annotation [2020-07-28 19:05:27,796 WARN L170 areAnnotationChecker]: L410-24 has no Hoare annotation [2020-07-28 19:05:27,796 WARN L170 areAnnotationChecker]: L368-48 has no Hoare annotation [2020-07-28 19:05:27,796 WARN L170 areAnnotationChecker]: L368-48 has no Hoare annotation [2020-07-28 19:05:27,796 WARN L170 areAnnotationChecker]: L1016-1 has no Hoare annotation [2020-07-28 19:05:27,796 WARN L170 areAnnotationChecker]: L382-18 has no Hoare annotation [2020-07-28 19:05:27,796 WARN L170 areAnnotationChecker]: L382-18 has no Hoare annotation [2020-07-28 19:05:27,796 WARN L170 areAnnotationChecker]: L368-42 has no Hoare annotation [2020-07-28 19:05:27,796 WARN L170 areAnnotationChecker]: L368-42 has no Hoare annotation [2020-07-28 19:05:27,796 WARN L170 areAnnotationChecker]: L410-1 has no Hoare annotation [2020-07-28 19:05:27,796 WARN L170 areAnnotationChecker]: L1016-21 has no Hoare annotation [2020-07-28 19:05:27,797 WARN L170 areAnnotationChecker]: L368 has no Hoare annotation [2020-07-28 19:05:27,797 WARN L170 areAnnotationChecker]: L368 has no Hoare annotation [2020-07-28 19:05:27,797 WARN L170 areAnnotationChecker]: L410-21 has no Hoare annotation [2020-07-28 19:05:27,797 WARN L170 areAnnotationChecker]: L368-36 has no Hoare annotation [2020-07-28 19:05:27,797 WARN L170 areAnnotationChecker]: L368-36 has no Hoare annotation [2020-07-28 19:05:27,797 INFO L163 areAnnotationChecker]: CFG has 0 edges. 0 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. 0 times interpolants missing. [2020-07-28 19:05:27,800 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 28.07 07:05:27 BoogieIcfgContainer [2020-07-28 19:05:27,800 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2020-07-28 19:05:27,801 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2020-07-28 19:05:27,801 INFO L271 PluginConnector]: Initializing Witness Printer... [2020-07-28 19:05:27,801 INFO L275 PluginConnector]: Witness Printer initialized [2020-07-28 19:05:27,802 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.07 07:04:37" (3/4) ... [2020-07-28 19:05:27,804 INFO L131 WitnessPrinter]: Generating witness for reachability counterexample [2020-07-28 19:05:28,042 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2020-07-28 19:05:28,042 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2020-07-28 19:05:28,045 INFO L168 Benchmark]: Toolchain (without parser) took 55653.93 ms. Allocated memory was 1.0 GB in the beginning and 1.9 GB in the end (delta: 825.8 MB). Free memory was 961.6 MB in the beginning and 1.3 GB in the end (delta: -301.1 MB). Peak memory consumption was 524.7 MB. Max. memory is 11.5 GB. [2020-07-28 19:05:28,046 INFO L168 Benchmark]: CDTParser took 0.26 ms. Allocated memory is still 1.0 GB. Free memory is still 987.1 MB. There was no memory consumed. Max. memory is 11.5 GB. [2020-07-28 19:05:28,046 INFO L168 Benchmark]: CACSL2BoogieTranslator took 737.36 ms. Allocated memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: 75.0 MB). Free memory was 956.2 MB in the beginning and 1.0 GB in the end (delta: -91.4 MB). Peak memory consumption was 20.7 MB. Max. memory is 11.5 GB. [2020-07-28 19:05:28,047 INFO L168 Benchmark]: Boogie Procedure Inliner took 178.53 ms. Allocated memory is still 1.1 GB. Free memory was 1.0 GB in the beginning and 1.0 GB in the end (delta: 14.0 MB). Peak memory consumption was 14.0 MB. Max. memory is 11.5 GB. [2020-07-28 19:05:28,047 INFO L168 Benchmark]: Boogie Preprocessor took 154.07 ms. Allocated memory is still 1.1 GB. Free memory was 1.0 GB in the beginning and 1.0 GB in the end (delta: 14.0 MB). Peak memory consumption was 14.0 MB. Max. memory is 11.5 GB. [2020-07-28 19:05:28,047 INFO L168 Benchmark]: RCFGBuilder took 3540.62 ms. Allocated memory was 1.1 GB in the beginning and 1.2 GB in the end (delta: 106.4 MB). Free memory was 1.0 GB in the beginning and 987.2 MB in the end (delta: 32.3 MB). Peak memory consumption was 300.2 MB. Max. memory is 11.5 GB. [2020-07-28 19:05:28,048 INFO L168 Benchmark]: TraceAbstraction took 50793.80 ms. Allocated memory was 1.2 GB in the beginning and 1.9 GB in the end (delta: 644.3 MB). Free memory was 987.2 MB in the beginning and 1.3 GB in the end (delta: -360.5 MB). Peak memory consumption was 283.9 MB. Max. memory is 11.5 GB. [2020-07-28 19:05:28,048 INFO L168 Benchmark]: Witness Printer took 241.77 ms. Allocated memory is still 1.9 GB. Free memory was 1.3 GB in the beginning and 1.3 GB in the end (delta: 85.0 MB). Peak memory consumption was 85.0 MB. Max. memory is 11.5 GB. [2020-07-28 19:05:28,051 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - AssertionsEnabledResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.26 ms. Allocated memory is still 1.0 GB. Free memory is still 987.1 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 737.36 ms. Allocated memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: 75.0 MB). Free memory was 956.2 MB in the beginning and 1.0 GB in the end (delta: -91.4 MB). Peak memory consumption was 20.7 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 178.53 ms. Allocated memory is still 1.1 GB. Free memory was 1.0 GB in the beginning and 1.0 GB in the end (delta: 14.0 MB). Peak memory consumption was 14.0 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 154.07 ms. Allocated memory is still 1.1 GB. Free memory was 1.0 GB in the beginning and 1.0 GB in the end (delta: 14.0 MB). Peak memory consumption was 14.0 MB. Max. memory is 11.5 GB. * RCFGBuilder took 3540.62 ms. Allocated memory was 1.1 GB in the beginning and 1.2 GB in the end (delta: 106.4 MB). Free memory was 1.0 GB in the beginning and 987.2 MB in the end (delta: 32.3 MB). Peak memory consumption was 300.2 MB. Max. memory is 11.5 GB. * TraceAbstraction took 50793.80 ms. Allocated memory was 1.2 GB in the beginning and 1.9 GB in the end (delta: 644.3 MB). Free memory was 987.2 MB in the beginning and 1.3 GB in the end (delta: -360.5 MB). Peak memory consumption was 283.9 MB. Max. memory is 11.5 GB. * Witness Printer took 241.77 ms. Allocated memory is still 1.9 GB. Free memory was 1.3 GB in the beginning and 1.3 GB in the end (delta: 85.0 MB). Peak memory consumption was 85.0 MB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - CounterExampleResult [Line: 602]: a call of __VERIFIER_error() is reachable a call of __VERIFIER_error() is reachable We found a FailurePath: [L40] int cleanupTimeShifts = 4; [L145] int __SELECTED_FEATURE_base ; [L146] int __SELECTED_FEATURE_highWaterSensor ; [L147] int __SELECTED_FEATURE_lowWaterSensor ; [L148] int __SELECTED_FEATURE_methaneQuery ; [L149] int __SELECTED_FEATURE_methaneAlarm ; [L150] int __SELECTED_FEATURE_stopCommand ; [L151] int __SELECTED_FEATURE_startCommand ; [L152] int __GUIDSL_ROOT_PRODUCTION ; [L190] int pumpRunning = 0; [L191] int systemActive = 1; [L776] static struct __ACC__ERR *head = (struct __ACC__ERR *)0; [L973] int waterLevel = 1; [L974] int methaneLevelCritical = 0; VAL [__GUIDSL_ROOT_PRODUCTION=0, __SELECTED_FEATURE_base=0, __SELECTED_FEATURE_highWaterSensor=0, __SELECTED_FEATURE_lowWaterSensor=0, __SELECTED_FEATURE_methaneAlarm=0, __SELECTED_FEATURE_methaneQuery=0, __SELECTED_FEATURE_startCommand=0, __SELECTED_FEATURE_stopCommand=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=1] [L121] int retValue_acc ; [L122] int tmp ; [L1107] __GUIDSL_ROOT_PRODUCTION = 1 VAL [__GUIDSL_ROOT_PRODUCTION=1, __SELECTED_FEATURE_base=0, __SELECTED_FEATURE_highWaterSensor=0, __SELECTED_FEATURE_lowWaterSensor=0, __SELECTED_FEATURE_methaneAlarm=0, __SELECTED_FEATURE_methaneQuery=0, __SELECTED_FEATURE_startCommand=0, __SELECTED_FEATURE_stopCommand=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=1] [L1092] __SELECTED_FEATURE_base = 1 [L1078] int retValue_acc ; [L1079] int choice = __VERIFIER_nondet_int(); [L1082] retValue_acc = choice [L1083] return (retValue_acc); VAL [__GUIDSL_ROOT_PRODUCTION=1, __SELECTED_FEATURE_base=1, __SELECTED_FEATURE_highWaterSensor=0, __SELECTED_FEATURE_lowWaterSensor=0, __SELECTED_FEATURE_methaneAlarm=0, __SELECTED_FEATURE_methaneQuery=0, __SELECTED_FEATURE_startCommand=0, __SELECTED_FEATURE_stopCommand=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=1] [L1093] __SELECTED_FEATURE_highWaterSensor = select_one() [L1078] int retValue_acc ; [L1079] int choice = __VERIFIER_nondet_int(); [L1082] retValue_acc = choice [L1083] return (retValue_acc); VAL [__GUIDSL_ROOT_PRODUCTION=1, __SELECTED_FEATURE_base=1, __SELECTED_FEATURE_highWaterSensor=1, __SELECTED_FEATURE_lowWaterSensor=0, __SELECTED_FEATURE_methaneAlarm=0, __SELECTED_FEATURE_methaneQuery=0, __SELECTED_FEATURE_startCommand=0, __SELECTED_FEATURE_stopCommand=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=1] [L1094] __SELECTED_FEATURE_lowWaterSensor = select_one() [L1078] int retValue_acc ; [L1079] int choice = __VERIFIER_nondet_int(); [L1082] retValue_acc = choice [L1083] return (retValue_acc); VAL [__GUIDSL_ROOT_PRODUCTION=1, __SELECTED_FEATURE_base=1, __SELECTED_FEATURE_highWaterSensor=1, __SELECTED_FEATURE_lowWaterSensor=0, __SELECTED_FEATURE_methaneAlarm=0, __SELECTED_FEATURE_methaneQuery=0, __SELECTED_FEATURE_startCommand=0, __SELECTED_FEATURE_stopCommand=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=1] [L1095] __SELECTED_FEATURE_methaneQuery = select_one() [L1078] int retValue_acc ; [L1079] int choice = __VERIFIER_nondet_int(); [L1082] retValue_acc = choice [L1083] return (retValue_acc); VAL [__GUIDSL_ROOT_PRODUCTION=1, __SELECTED_FEATURE_base=1, __SELECTED_FEATURE_highWaterSensor=1, __SELECTED_FEATURE_lowWaterSensor=0, __SELECTED_FEATURE_methaneAlarm=0, __SELECTED_FEATURE_methaneQuery=0, __SELECTED_FEATURE_startCommand=0, __SELECTED_FEATURE_stopCommand=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=1] [L1096] __SELECTED_FEATURE_methaneAlarm = select_one() [L1078] int retValue_acc ; [L1079] int choice = __VERIFIER_nondet_int(); [L1082] retValue_acc = choice [L1083] return (retValue_acc); VAL [__GUIDSL_ROOT_PRODUCTION=1, __SELECTED_FEATURE_base=1, __SELECTED_FEATURE_highWaterSensor=1, __SELECTED_FEATURE_lowWaterSensor=0, __SELECTED_FEATURE_methaneAlarm=0, __SELECTED_FEATURE_methaneQuery=0, __SELECTED_FEATURE_startCommand=0, __SELECTED_FEATURE_stopCommand=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=1] [L1097] __SELECTED_FEATURE_stopCommand = select_one() [L1078] int retValue_acc ; [L1079] int choice = __VERIFIER_nondet_int(); [L1082] retValue_acc = choice [L1083] return (retValue_acc); VAL [__GUIDSL_ROOT_PRODUCTION=1, __SELECTED_FEATURE_base=1, __SELECTED_FEATURE_highWaterSensor=1, __SELECTED_FEATURE_lowWaterSensor=0, __SELECTED_FEATURE_methaneAlarm=0, __SELECTED_FEATURE_methaneQuery=0, __SELECTED_FEATURE_startCommand=0, __SELECTED_FEATURE_stopCommand=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=1] [L1098] __SELECTED_FEATURE_startCommand = select_one() [L1112] int retValue_acc ; [L1115] retValue_acc = __SELECTED_FEATURE_base [L1116] return (retValue_acc); VAL [__GUIDSL_ROOT_PRODUCTION=1, __SELECTED_FEATURE_base=1, __SELECTED_FEATURE_highWaterSensor=1, __SELECTED_FEATURE_lowWaterSensor=0, __SELECTED_FEATURE_methaneAlarm=0, __SELECTED_FEATURE_methaneQuery=0, __SELECTED_FEATURE_startCommand=0, __SELECTED_FEATURE_stopCommand=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=1] [L128] tmp = valid_product() [L130] COND TRUE \read(tmp) VAL [__GUIDSL_ROOT_PRODUCTION=1, __SELECTED_FEATURE_base=1, __SELECTED_FEATURE_highWaterSensor=1, __SELECTED_FEATURE_lowWaterSensor=0, __SELECTED_FEATURE_methaneAlarm=0, __SELECTED_FEATURE_methaneQuery=0, __SELECTED_FEATURE_startCommand=0, __SELECTED_FEATURE_stopCommand=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=1] [L522] int splverifierCounter ; [L523] int tmp ; [L524] int tmp___0 ; [L525] int tmp___1 ; [L526] int tmp___2 ; [L529] splverifierCounter = 0 VAL [__GUIDSL_ROOT_PRODUCTION=1, __SELECTED_FEATURE_base=1, __SELECTED_FEATURE_highWaterSensor=1, __SELECTED_FEATURE_lowWaterSensor=0, __SELECTED_FEATURE_methaneAlarm=0, __SELECTED_FEATURE_methaneQuery=0, __SELECTED_FEATURE_startCommand=0, __SELECTED_FEATURE_stopCommand=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=1] [L531] COND TRUE 1 VAL [__GUIDSL_ROOT_PRODUCTION=1, __SELECTED_FEATURE_base=1, __SELECTED_FEATURE_highWaterSensor=1, __SELECTED_FEATURE_lowWaterSensor=0, __SELECTED_FEATURE_methaneAlarm=0, __SELECTED_FEATURE_methaneQuery=0, __SELECTED_FEATURE_startCommand=0, __SELECTED_FEATURE_stopCommand=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=1] [L533] COND TRUE splverifierCounter < 4 VAL [__GUIDSL_ROOT_PRODUCTION=1, __SELECTED_FEATURE_base=1, __SELECTED_FEATURE_highWaterSensor=1, __SELECTED_FEATURE_lowWaterSensor=0, __SELECTED_FEATURE_methaneAlarm=0, __SELECTED_FEATURE_methaneQuery=0, __SELECTED_FEATURE_startCommand=0, __SELECTED_FEATURE_stopCommand=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=1] [L539] tmp = __VERIFIER_nondet_int() [L541] COND TRUE \read(tmp) VAL [__GUIDSL_ROOT_PRODUCTION=1, __SELECTED_FEATURE_base=1, __SELECTED_FEATURE_highWaterSensor=1, __SELECTED_FEATURE_lowWaterSensor=0, __SELECTED_FEATURE_methaneAlarm=0, __SELECTED_FEATURE_methaneQuery=0, __SELECTED_FEATURE_startCommand=0, __SELECTED_FEATURE_stopCommand=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=1] [L991] COND TRUE waterLevel < 2 [L992] waterLevel = waterLevel + 1 VAL [__GUIDSL_ROOT_PRODUCTION=1, __SELECTED_FEATURE_base=1, __SELECTED_FEATURE_highWaterSensor=1, __SELECTED_FEATURE_lowWaterSensor=0, __SELECTED_FEATURE_methaneAlarm=0, __SELECTED_FEATURE_methaneQuery=0, __SELECTED_FEATURE_startCommand=0, __SELECTED_FEATURE_stopCommand=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=2] [L549] tmp___0 = __VERIFIER_nondet_int() [L551] COND FALSE !(\read(tmp___0)) VAL [__GUIDSL_ROOT_PRODUCTION=1, __SELECTED_FEATURE_base=1, __SELECTED_FEATURE_highWaterSensor=1, __SELECTED_FEATURE_lowWaterSensor=0, __SELECTED_FEATURE_methaneAlarm=0, __SELECTED_FEATURE_methaneQuery=0, __SELECTED_FEATURE_startCommand=0, __SELECTED_FEATURE_stopCommand=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=2] [L559] tmp___2 = __VERIFIER_nondet_int() [L561] COND FALSE !(\read(tmp___2)) [L571] tmp___1 = __VERIFIER_nondet_int() [L573] COND FALSE !(\read(tmp___1)) VAL [__GUIDSL_ROOT_PRODUCTION=1, __SELECTED_FEATURE_base=1, __SELECTED_FEATURE_highWaterSensor=1, __SELECTED_FEATURE_lowWaterSensor=0, __SELECTED_FEATURE_methaneAlarm=0, __SELECTED_FEATURE_methaneQuery=0, __SELECTED_FEATURE_startCommand=0, __SELECTED_FEATURE_stopCommand=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=2] [L197] COND FALSE !(\read(pumpRunning)) VAL [__GUIDSL_ROOT_PRODUCTION=1, __SELECTED_FEATURE_base=1, __SELECTED_FEATURE_highWaterSensor=1, __SELECTED_FEATURE_lowWaterSensor=0, __SELECTED_FEATURE_methaneAlarm=0, __SELECTED_FEATURE_methaneQuery=0, __SELECTED_FEATURE_startCommand=0, __SELECTED_FEATURE_stopCommand=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=2] [L204] COND TRUE \read(systemActive) VAL [__GUIDSL_ROOT_PRODUCTION=1, __SELECTED_FEATURE_base=1, __SELECTED_FEATURE_highWaterSensor=1, __SELECTED_FEATURE_lowWaterSensor=0, __SELECTED_FEATURE_methaneAlarm=0, __SELECTED_FEATURE_methaneQuery=0, __SELECTED_FEATURE_startCommand=0, __SELECTED_FEATURE_stopCommand=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=2] [L340] COND FALSE !(\read(__SELECTED_FEATURE_methaneAlarm)) VAL [__GUIDSL_ROOT_PRODUCTION=1, __SELECTED_FEATURE_base=1, __SELECTED_FEATURE_highWaterSensor=1, __SELECTED_FEATURE_lowWaterSensor=0, __SELECTED_FEATURE_methaneAlarm=0, __SELECTED_FEATURE_methaneQuery=0, __SELECTED_FEATURE_startCommand=0, __SELECTED_FEATURE_stopCommand=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=2] [L297] COND FALSE !(\read(__SELECTED_FEATURE_lowWaterSensor)) VAL [__GUIDSL_ROOT_PRODUCTION=1, __SELECTED_FEATURE_base=1, __SELECTED_FEATURE_highWaterSensor=1, __SELECTED_FEATURE_lowWaterSensor=0, __SELECTED_FEATURE_methaneAlarm=0, __SELECTED_FEATURE_methaneQuery=0, __SELECTED_FEATURE_startCommand=0, __SELECTED_FEATURE_stopCommand=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=2] [L254] COND TRUE \read(__SELECTED_FEATURE_highWaterSensor) [L226] int tmp ; VAL [__GUIDSL_ROOT_PRODUCTION=1, __SELECTED_FEATURE_base=1, __SELECTED_FEATURE_highWaterSensor=1, __SELECTED_FEATURE_lowWaterSensor=0, __SELECTED_FEATURE_methaneAlarm=0, __SELECTED_FEATURE_methaneQuery=0, __SELECTED_FEATURE_startCommand=0, __SELECTED_FEATURE_stopCommand=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=2] [L229] COND TRUE ! pumpRunning [L460] int retValue_acc ; [L461] int tmp ; [L462] int tmp___0 ; [L1053] int retValue_acc ; VAL [__GUIDSL_ROOT_PRODUCTION=1, __SELECTED_FEATURE_base=1, __SELECTED_FEATURE_highWaterSensor=1, __SELECTED_FEATURE_lowWaterSensor=0, __SELECTED_FEATURE_methaneAlarm=0, __SELECTED_FEATURE_methaneQuery=0, __SELECTED_FEATURE_startCommand=0, __SELECTED_FEATURE_stopCommand=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=2] [L1056] COND FALSE !(waterLevel < 2) [L1060] retValue_acc = 0 [L1061] return (retValue_acc); VAL [__GUIDSL_ROOT_PRODUCTION=1, __SELECTED_FEATURE_base=1, __SELECTED_FEATURE_highWaterSensor=1, __SELECTED_FEATURE_lowWaterSensor=0, __SELECTED_FEATURE_methaneAlarm=0, __SELECTED_FEATURE_methaneQuery=0, __SELECTED_FEATURE_startCommand=0, __SELECTED_FEATURE_stopCommand=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=2] [L466] tmp = isHighWaterSensorDry() [L468] COND FALSE !(\read(tmp)) [L471] tmp___0 = 1 VAL [__GUIDSL_ROOT_PRODUCTION=1, __SELECTED_FEATURE_base=1, __SELECTED_FEATURE_highWaterSensor=1, __SELECTED_FEATURE_lowWaterSensor=0, __SELECTED_FEATURE_methaneAlarm=0, __SELECTED_FEATURE_methaneQuery=0, __SELECTED_FEATURE_startCommand=0, __SELECTED_FEATURE_stopCommand=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=2] [L473] retValue_acc = tmp___0 [L474] return (retValue_acc); VAL [__GUIDSL_ROOT_PRODUCTION=1, __SELECTED_FEATURE_base=1, __SELECTED_FEATURE_highWaterSensor=1, __SELECTED_FEATURE_lowWaterSensor=0, __SELECTED_FEATURE_methaneAlarm=0, __SELECTED_FEATURE_methaneQuery=0, __SELECTED_FEATURE_startCommand=0, __SELECTED_FEATURE_stopCommand=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=2] [L231] tmp = isHighWaterLevel() [L233] COND TRUE \read(tmp) VAL [__GUIDSL_ROOT_PRODUCTION=1, __SELECTED_FEATURE_base=1, __SELECTED_FEATURE_highWaterSensor=1, __SELECTED_FEATURE_lowWaterSensor=0, __SELECTED_FEATURE_methaneAlarm=0, __SELECTED_FEATURE_methaneQuery=0, __SELECTED_FEATURE_startCommand=0, __SELECTED_FEATURE_stopCommand=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=2] [L382] COND FALSE !(\read(__SELECTED_FEATURE_methaneQuery)) [L357] pumpRunning = 1 VAL [__GUIDSL_ROOT_PRODUCTION=1, __SELECTED_FEATURE_base=1, __SELECTED_FEATURE_highWaterSensor=1, __SELECTED_FEATURE_lowWaterSensor=0, __SELECTED_FEATURE_methaneAlarm=0, __SELECTED_FEATURE_methaneQuery=0, __SELECTED_FEATURE_startCommand=0, __SELECTED_FEATURE_stopCommand=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=2] [L156] int tmp ; [L157] int tmp___0 ; [L1044] int retValue_acc ; [L1047] retValue_acc = waterLevel [L1048] return (retValue_acc); VAL [__GUIDSL_ROOT_PRODUCTION=1, __SELECTED_FEATURE_base=1, __SELECTED_FEATURE_highWaterSensor=1, __SELECTED_FEATURE_lowWaterSensor=0, __SELECTED_FEATURE_methaneAlarm=0, __SELECTED_FEATURE_methaneQuery=0, __SELECTED_FEATURE_startCommand=0, __SELECTED_FEATURE_stopCommand=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=2] [L161] tmp = getWaterLevel() [L163] COND FALSE !(tmp == 0) VAL [__GUIDSL_ROOT_PRODUCTION=1, __SELECTED_FEATURE_base=1, __SELECTED_FEATURE_highWaterSensor=1, __SELECTED_FEATURE_lowWaterSensor=0, __SELECTED_FEATURE_methaneAlarm=0, __SELECTED_FEATURE_methaneQuery=0, __SELECTED_FEATURE_startCommand=0, __SELECTED_FEATURE_stopCommand=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=2] [L531] COND TRUE 1 VAL [__GUIDSL_ROOT_PRODUCTION=1, __SELECTED_FEATURE_base=1, __SELECTED_FEATURE_highWaterSensor=1, __SELECTED_FEATURE_lowWaterSensor=0, __SELECTED_FEATURE_methaneAlarm=0, __SELECTED_FEATURE_methaneQuery=0, __SELECTED_FEATURE_startCommand=0, __SELECTED_FEATURE_stopCommand=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=2] [L533] COND TRUE splverifierCounter < 4 VAL [__GUIDSL_ROOT_PRODUCTION=1, __SELECTED_FEATURE_base=1, __SELECTED_FEATURE_highWaterSensor=1, __SELECTED_FEATURE_lowWaterSensor=0, __SELECTED_FEATURE_methaneAlarm=0, __SELECTED_FEATURE_methaneQuery=0, __SELECTED_FEATURE_startCommand=0, __SELECTED_FEATURE_stopCommand=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=2] [L539] tmp = __VERIFIER_nondet_int() [L541] COND FALSE !(\read(tmp)) VAL [__GUIDSL_ROOT_PRODUCTION=1, __SELECTED_FEATURE_base=1, __SELECTED_FEATURE_highWaterSensor=1, __SELECTED_FEATURE_lowWaterSensor=0, __SELECTED_FEATURE_methaneAlarm=0, __SELECTED_FEATURE_methaneQuery=0, __SELECTED_FEATURE_startCommand=0, __SELECTED_FEATURE_stopCommand=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=2] [L549] tmp___0 = __VERIFIER_nondet_int() [L551] COND FALSE !(\read(tmp___0)) VAL [__GUIDSL_ROOT_PRODUCTION=1, __SELECTED_FEATURE_base=1, __SELECTED_FEATURE_highWaterSensor=1, __SELECTED_FEATURE_lowWaterSensor=0, __SELECTED_FEATURE_methaneAlarm=0, __SELECTED_FEATURE_methaneQuery=0, __SELECTED_FEATURE_startCommand=0, __SELECTED_FEATURE_stopCommand=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=2] [L559] tmp___2 = __VERIFIER_nondet_int() [L561] COND FALSE !(\read(tmp___2)) [L571] tmp___1 = __VERIFIER_nondet_int() [L573] COND FALSE !(\read(tmp___1)) VAL [__GUIDSL_ROOT_PRODUCTION=1, __SELECTED_FEATURE_base=1, __SELECTED_FEATURE_highWaterSensor=1, __SELECTED_FEATURE_lowWaterSensor=0, __SELECTED_FEATURE_methaneAlarm=0, __SELECTED_FEATURE_methaneQuery=0, __SELECTED_FEATURE_startCommand=0, __SELECTED_FEATURE_stopCommand=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=2] [L197] COND TRUE \read(pumpRunning) VAL [__GUIDSL_ROOT_PRODUCTION=1, __SELECTED_FEATURE_base=1, __SELECTED_FEATURE_highWaterSensor=1, __SELECTED_FEATURE_lowWaterSensor=0, __SELECTED_FEATURE_methaneAlarm=0, __SELECTED_FEATURE_methaneQuery=0, __SELECTED_FEATURE_startCommand=0, __SELECTED_FEATURE_stopCommand=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=2] [L979] COND TRUE waterLevel > 0 [L980] waterLevel = waterLevel - 1 VAL [__GUIDSL_ROOT_PRODUCTION=1, __SELECTED_FEATURE_base=1, __SELECTED_FEATURE_highWaterSensor=1, __SELECTED_FEATURE_lowWaterSensor=0, __SELECTED_FEATURE_methaneAlarm=0, __SELECTED_FEATURE_methaneQuery=0, __SELECTED_FEATURE_startCommand=0, __SELECTED_FEATURE_stopCommand=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=1] [L204] COND TRUE \read(systemActive) VAL [__GUIDSL_ROOT_PRODUCTION=1, __SELECTED_FEATURE_base=1, __SELECTED_FEATURE_highWaterSensor=1, __SELECTED_FEATURE_lowWaterSensor=0, __SELECTED_FEATURE_methaneAlarm=0, __SELECTED_FEATURE_methaneQuery=0, __SELECTED_FEATURE_startCommand=0, __SELECTED_FEATURE_stopCommand=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=1] [L340] COND FALSE !(\read(__SELECTED_FEATURE_methaneAlarm)) VAL [__GUIDSL_ROOT_PRODUCTION=1, __SELECTED_FEATURE_base=1, __SELECTED_FEATURE_highWaterSensor=1, __SELECTED_FEATURE_lowWaterSensor=0, __SELECTED_FEATURE_methaneAlarm=0, __SELECTED_FEATURE_methaneQuery=0, __SELECTED_FEATURE_startCommand=0, __SELECTED_FEATURE_stopCommand=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=1] [L297] COND FALSE !(\read(__SELECTED_FEATURE_lowWaterSensor)) VAL [__GUIDSL_ROOT_PRODUCTION=1, __SELECTED_FEATURE_base=1, __SELECTED_FEATURE_highWaterSensor=1, __SELECTED_FEATURE_lowWaterSensor=0, __SELECTED_FEATURE_methaneAlarm=0, __SELECTED_FEATURE_methaneQuery=0, __SELECTED_FEATURE_startCommand=0, __SELECTED_FEATURE_stopCommand=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=1] [L254] COND TRUE \read(__SELECTED_FEATURE_highWaterSensor) [L226] int tmp ; VAL [__GUIDSL_ROOT_PRODUCTION=1, __SELECTED_FEATURE_base=1, __SELECTED_FEATURE_highWaterSensor=1, __SELECTED_FEATURE_lowWaterSensor=0, __SELECTED_FEATURE_methaneAlarm=0, __SELECTED_FEATURE_methaneQuery=0, __SELECTED_FEATURE_startCommand=0, __SELECTED_FEATURE_stopCommand=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=1] [L229] COND FALSE !(! pumpRunning) VAL [__GUIDSL_ROOT_PRODUCTION=1, __SELECTED_FEATURE_base=1, __SELECTED_FEATURE_highWaterSensor=1, __SELECTED_FEATURE_lowWaterSensor=0, __SELECTED_FEATURE_methaneAlarm=0, __SELECTED_FEATURE_methaneQuery=0, __SELECTED_FEATURE_startCommand=0, __SELECTED_FEATURE_stopCommand=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=1] [L156] int tmp ; [L157] int tmp___0 ; [L1044] int retValue_acc ; [L1047] retValue_acc = waterLevel [L1048] return (retValue_acc); VAL [__GUIDSL_ROOT_PRODUCTION=1, __SELECTED_FEATURE_base=1, __SELECTED_FEATURE_highWaterSensor=1, __SELECTED_FEATURE_lowWaterSensor=0, __SELECTED_FEATURE_methaneAlarm=0, __SELECTED_FEATURE_methaneQuery=0, __SELECTED_FEATURE_startCommand=0, __SELECTED_FEATURE_stopCommand=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=1] [L161] tmp = getWaterLevel() [L163] COND FALSE !(tmp == 0) VAL [__GUIDSL_ROOT_PRODUCTION=1, __SELECTED_FEATURE_base=1, __SELECTED_FEATURE_highWaterSensor=1, __SELECTED_FEATURE_lowWaterSensor=0, __SELECTED_FEATURE_methaneAlarm=0, __SELECTED_FEATURE_methaneQuery=0, __SELECTED_FEATURE_startCommand=0, __SELECTED_FEATURE_stopCommand=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=1] [L531] COND TRUE 1 VAL [__GUIDSL_ROOT_PRODUCTION=1, __SELECTED_FEATURE_base=1, __SELECTED_FEATURE_highWaterSensor=1, __SELECTED_FEATURE_lowWaterSensor=0, __SELECTED_FEATURE_methaneAlarm=0, __SELECTED_FEATURE_methaneQuery=0, __SELECTED_FEATURE_startCommand=0, __SELECTED_FEATURE_stopCommand=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=1] [L533] COND TRUE splverifierCounter < 4 VAL [__GUIDSL_ROOT_PRODUCTION=1, __SELECTED_FEATURE_base=1, __SELECTED_FEATURE_highWaterSensor=1, __SELECTED_FEATURE_lowWaterSensor=0, __SELECTED_FEATURE_methaneAlarm=0, __SELECTED_FEATURE_methaneQuery=0, __SELECTED_FEATURE_startCommand=0, __SELECTED_FEATURE_stopCommand=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=1] [L539] tmp = __VERIFIER_nondet_int() [L541] COND FALSE !(\read(tmp)) VAL [__GUIDSL_ROOT_PRODUCTION=1, __SELECTED_FEATURE_base=1, __SELECTED_FEATURE_highWaterSensor=1, __SELECTED_FEATURE_lowWaterSensor=0, __SELECTED_FEATURE_methaneAlarm=0, __SELECTED_FEATURE_methaneQuery=0, __SELECTED_FEATURE_startCommand=0, __SELECTED_FEATURE_stopCommand=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=1] [L549] tmp___0 = __VERIFIER_nondet_int() [L551] COND FALSE !(\read(tmp___0)) VAL [__GUIDSL_ROOT_PRODUCTION=1, __SELECTED_FEATURE_base=1, __SELECTED_FEATURE_highWaterSensor=1, __SELECTED_FEATURE_lowWaterSensor=0, __SELECTED_FEATURE_methaneAlarm=0, __SELECTED_FEATURE_methaneQuery=0, __SELECTED_FEATURE_startCommand=0, __SELECTED_FEATURE_stopCommand=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=1] [L559] tmp___2 = __VERIFIER_nondet_int() [L561] COND FALSE !(\read(tmp___2)) [L571] tmp___1 = __VERIFIER_nondet_int() [L573] COND FALSE !(\read(tmp___1)) VAL [__GUIDSL_ROOT_PRODUCTION=1, __SELECTED_FEATURE_base=1, __SELECTED_FEATURE_highWaterSensor=1, __SELECTED_FEATURE_lowWaterSensor=0, __SELECTED_FEATURE_methaneAlarm=0, __SELECTED_FEATURE_methaneQuery=0, __SELECTED_FEATURE_startCommand=0, __SELECTED_FEATURE_stopCommand=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=1] [L197] COND TRUE \read(pumpRunning) VAL [__GUIDSL_ROOT_PRODUCTION=1, __SELECTED_FEATURE_base=1, __SELECTED_FEATURE_highWaterSensor=1, __SELECTED_FEATURE_lowWaterSensor=0, __SELECTED_FEATURE_methaneAlarm=0, __SELECTED_FEATURE_methaneQuery=0, __SELECTED_FEATURE_startCommand=0, __SELECTED_FEATURE_stopCommand=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=1] [L979] COND TRUE waterLevel > 0 [L980] waterLevel = waterLevel - 1 VAL [__GUIDSL_ROOT_PRODUCTION=1, __SELECTED_FEATURE_base=1, __SELECTED_FEATURE_highWaterSensor=1, __SELECTED_FEATURE_lowWaterSensor=0, __SELECTED_FEATURE_methaneAlarm=0, __SELECTED_FEATURE_methaneQuery=0, __SELECTED_FEATURE_startCommand=0, __SELECTED_FEATURE_stopCommand=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=0] [L204] COND TRUE \read(systemActive) VAL [__GUIDSL_ROOT_PRODUCTION=1, __SELECTED_FEATURE_base=1, __SELECTED_FEATURE_highWaterSensor=1, __SELECTED_FEATURE_lowWaterSensor=0, __SELECTED_FEATURE_methaneAlarm=0, __SELECTED_FEATURE_methaneQuery=0, __SELECTED_FEATURE_startCommand=0, __SELECTED_FEATURE_stopCommand=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=0] [L340] COND FALSE !(\read(__SELECTED_FEATURE_methaneAlarm)) VAL [__GUIDSL_ROOT_PRODUCTION=1, __SELECTED_FEATURE_base=1, __SELECTED_FEATURE_highWaterSensor=1, __SELECTED_FEATURE_lowWaterSensor=0, __SELECTED_FEATURE_methaneAlarm=0, __SELECTED_FEATURE_methaneQuery=0, __SELECTED_FEATURE_startCommand=0, __SELECTED_FEATURE_stopCommand=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=0] [L297] COND FALSE !(\read(__SELECTED_FEATURE_lowWaterSensor)) VAL [__GUIDSL_ROOT_PRODUCTION=1, __SELECTED_FEATURE_base=1, __SELECTED_FEATURE_highWaterSensor=1, __SELECTED_FEATURE_lowWaterSensor=0, __SELECTED_FEATURE_methaneAlarm=0, __SELECTED_FEATURE_methaneQuery=0, __SELECTED_FEATURE_startCommand=0, __SELECTED_FEATURE_stopCommand=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=0] [L254] COND TRUE \read(__SELECTED_FEATURE_highWaterSensor) [L226] int tmp ; VAL [__GUIDSL_ROOT_PRODUCTION=1, __SELECTED_FEATURE_base=1, __SELECTED_FEATURE_highWaterSensor=1, __SELECTED_FEATURE_lowWaterSensor=0, __SELECTED_FEATURE_methaneAlarm=0, __SELECTED_FEATURE_methaneQuery=0, __SELECTED_FEATURE_startCommand=0, __SELECTED_FEATURE_stopCommand=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=0] [L229] COND FALSE !(! pumpRunning) VAL [__GUIDSL_ROOT_PRODUCTION=1, __SELECTED_FEATURE_base=1, __SELECTED_FEATURE_highWaterSensor=1, __SELECTED_FEATURE_lowWaterSensor=0, __SELECTED_FEATURE_methaneAlarm=0, __SELECTED_FEATURE_methaneQuery=0, __SELECTED_FEATURE_startCommand=0, __SELECTED_FEATURE_stopCommand=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=0] [L156] int tmp ; [L157] int tmp___0 ; [L1044] int retValue_acc ; [L1047] retValue_acc = waterLevel [L1048] return (retValue_acc); VAL [__GUIDSL_ROOT_PRODUCTION=1, __SELECTED_FEATURE_base=1, __SELECTED_FEATURE_highWaterSensor=1, __SELECTED_FEATURE_lowWaterSensor=0, __SELECTED_FEATURE_methaneAlarm=0, __SELECTED_FEATURE_methaneQuery=0, __SELECTED_FEATURE_startCommand=0, __SELECTED_FEATURE_stopCommand=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=0] [L161] tmp = getWaterLevel() [L163] COND TRUE tmp == 0 [L415] int retValue_acc ; [L418] retValue_acc = pumpRunning [L419] return (retValue_acc); VAL [__GUIDSL_ROOT_PRODUCTION=1, __SELECTED_FEATURE_base=1, __SELECTED_FEATURE_highWaterSensor=1, __SELECTED_FEATURE_lowWaterSensor=0, __SELECTED_FEATURE_methaneAlarm=0, __SELECTED_FEATURE_methaneQuery=0, __SELECTED_FEATURE_startCommand=0, __SELECTED_FEATURE_stopCommand=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=0] [L165] tmp___0 = isPumpRunning() [L167] COND TRUE \read(tmp___0) VAL [__GUIDSL_ROOT_PRODUCTION=1, __SELECTED_FEATURE_base=1, __SELECTED_FEATURE_highWaterSensor=1, __SELECTED_FEATURE_lowWaterSensor=0, __SELECTED_FEATURE_methaneAlarm=0, __SELECTED_FEATURE_methaneQuery=0, __SELECTED_FEATURE_startCommand=0, __SELECTED_FEATURE_stopCommand=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=0] [L602] __VERIFIER_error() VAL [__GUIDSL_ROOT_PRODUCTION=1, __SELECTED_FEATURE_base=1, __SELECTED_FEATURE_highWaterSensor=1, __SELECTED_FEATURE_lowWaterSensor=0, __SELECTED_FEATURE_methaneAlarm=0, __SELECTED_FEATURE_methaneQuery=0, __SELECTED_FEATURE_startCommand=0, __SELECTED_FEATURE_stopCommand=0, cleanupTimeShifts=4, head={0:0}, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=0] - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 470 locations, 3 error locations. Started 1 CEGAR loops. VerificationResult: UNSAFE, OverallTime: 50.3s, OverallIterations: 11, TraceHistogramMax: 3, AutomataDifference: 37.0s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 3542 SDtfs, 6702 SDslu, 7193 SDs, 0 SdLazy, 769 SolverSat, 197 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 1.2s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 186 GetRequests, 132 SyntacticMatches, 0 SemanticMatches, 54 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 38 ImplicationChecksByTransitivity, 0.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=790occurred in iteration=7, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 9.3s AutomataMinimizationTime, 10 MinimizatonAttempts, 2373 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.6s SatisfiabilityAnalysisTime, 1.5s InterpolantComputationTime, 621 NumberOfCodeBlocks, 621 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 529 ConstructedInterpolants, 0 QuantifiedInterpolants, 51379 SizeOfPredicates, 4 NumberOfNonLiveVariables, 927 ConjunctsInSsa, 9 ConjunctsInUnsatCore, 12 InterpolantComputations, 9 PerfectInterpolantSequences, 106/117 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be incorrect! Received shutdown request...