./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec5_product37.cil.c --full-output -ea --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 8bd4bc60 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx12G -Xms1G -ea -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec5_product37.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 6a5b3ee1add5adeacf75c411f0af51a190ac6f33 .................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................. Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.25-8bd4bc6 [2020-07-28 19:05:25,390 INFO L177 SettingsManager]: Resetting all preferences to default values... [2020-07-28 19:05:25,392 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2020-07-28 19:05:25,411 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2020-07-28 19:05:25,411 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2020-07-28 19:05:25,413 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2020-07-28 19:05:25,415 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2020-07-28 19:05:25,428 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2020-07-28 19:05:25,430 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2020-07-28 19:05:25,431 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2020-07-28 19:05:25,432 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2020-07-28 19:05:25,434 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2020-07-28 19:05:25,435 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2020-07-28 19:05:25,439 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2020-07-28 19:05:25,440 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2020-07-28 19:05:25,442 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2020-07-28 19:05:25,444 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2020-07-28 19:05:25,445 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2020-07-28 19:05:25,448 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2020-07-28 19:05:25,454 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2020-07-28 19:05:25,457 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2020-07-28 19:05:25,458 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2020-07-28 19:05:25,459 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2020-07-28 19:05:25,460 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2020-07-28 19:05:25,463 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2020-07-28 19:05:25,464 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2020-07-28 19:05:25,464 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2020-07-28 19:05:25,466 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2020-07-28 19:05:25,466 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2020-07-28 19:05:25,467 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2020-07-28 19:05:25,467 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2020-07-28 19:05:25,468 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2020-07-28 19:05:25,469 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2020-07-28 19:05:25,470 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2020-07-28 19:05:25,475 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2020-07-28 19:05:25,475 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2020-07-28 19:05:25,476 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2020-07-28 19:05:25,476 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2020-07-28 19:05:25,476 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2020-07-28 19:05:25,477 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2020-07-28 19:05:25,479 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2020-07-28 19:05:25,479 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2020-07-28 19:05:25,501 INFO L113 SettingsManager]: Loading preferences was successful [2020-07-28 19:05:25,501 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2020-07-28 19:05:25,503 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2020-07-28 19:05:25,503 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2020-07-28 19:05:25,503 INFO L138 SettingsManager]: * Use SBE=true [2020-07-28 19:05:25,503 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2020-07-28 19:05:25,504 INFO L138 SettingsManager]: * sizeof long=4 [2020-07-28 19:05:25,504 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2020-07-28 19:05:25,504 INFO L138 SettingsManager]: * sizeof POINTER=4 [2020-07-28 19:05:25,504 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2020-07-28 19:05:25,505 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2020-07-28 19:05:25,506 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2020-07-28 19:05:25,506 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2020-07-28 19:05:25,506 INFO L138 SettingsManager]: * sizeof long double=12 [2020-07-28 19:05:25,506 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2020-07-28 19:05:25,507 INFO L138 SettingsManager]: * Use constant arrays=true [2020-07-28 19:05:25,507 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2020-07-28 19:05:25,507 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2020-07-28 19:05:25,507 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2020-07-28 19:05:25,507 INFO L138 SettingsManager]: * To the following directory=./dump/ [2020-07-28 19:05:25,507 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2020-07-28 19:05:25,508 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2020-07-28 19:05:25,508 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2020-07-28 19:05:25,508 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2020-07-28 19:05:25,508 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2020-07-28 19:05:25,508 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2020-07-28 19:05:25,508 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2020-07-28 19:05:25,509 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2020-07-28 19:05:25,509 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2020-07-28 19:05:25,509 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 6a5b3ee1add5adeacf75c411f0af51a190ac6f33 [2020-07-28 19:05:25,804 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2020-07-28 19:05:25,822 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2020-07-28 19:05:25,825 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2020-07-28 19:05:25,828 INFO L271 PluginConnector]: Initializing CDTParser... [2020-07-28 19:05:25,829 INFO L275 PluginConnector]: CDTParser initialized [2020-07-28 19:05:25,830 INFO L429 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec5_product37.cil.c [2020-07-28 19:05:25,893 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/130dd273d/4203ea0e21354539af558a2571e4f618/FLAG3cf99c72a [2020-07-28 19:05:26,405 INFO L306 CDTParser]: Found 1 translation units. [2020-07-28 19:05:26,406 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product37.cil.c [2020-07-28 19:05:26,419 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/130dd273d/4203ea0e21354539af558a2571e4f618/FLAG3cf99c72a [2020-07-28 19:05:26,709 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/130dd273d/4203ea0e21354539af558a2571e4f618 [2020-07-28 19:05:26,712 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2020-07-28 19:05:26,715 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2020-07-28 19:05:26,716 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2020-07-28 19:05:26,717 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2020-07-28 19:05:26,720 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2020-07-28 19:05:26,721 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.07 07:05:26" (1/1) ... [2020-07-28 19:05:26,724 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@58aba513 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:05:26, skipping insertion in model container [2020-07-28 19:05:26,724 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.07 07:05:26" (1/1) ... [2020-07-28 19:05:26,732 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2020-07-28 19:05:26,795 INFO L178 MainTranslator]: Built tables and reachable declarations [2020-07-28 19:05:27,260 INFO L206 PostProcessor]: Analyzing one entry point: main [2020-07-28 19:05:27,273 INFO L203 MainTranslator]: Completed pre-run [2020-07-28 19:05:27,385 INFO L206 PostProcessor]: Analyzing one entry point: main [2020-07-28 19:05:27,438 INFO L208 MainTranslator]: Completed translation [2020-07-28 19:05:27,439 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:05:27 WrapperNode [2020-07-28 19:05:27,439 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2020-07-28 19:05:27,440 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2020-07-28 19:05:27,440 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2020-07-28 19:05:27,440 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2020-07-28 19:05:27,448 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:05:27" (1/1) ... [2020-07-28 19:05:27,466 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:05:27" (1/1) ... [2020-07-28 19:05:27,542 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2020-07-28 19:05:27,543 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2020-07-28 19:05:27,543 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2020-07-28 19:05:27,543 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2020-07-28 19:05:27,553 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:05:27" (1/1) ... [2020-07-28 19:05:27,554 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:05:27" (1/1) ... [2020-07-28 19:05:27,559 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:05:27" (1/1) ... [2020-07-28 19:05:27,559 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:05:27" (1/1) ... [2020-07-28 19:05:27,600 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:05:27" (1/1) ... [2020-07-28 19:05:27,619 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:05:27" (1/1) ... [2020-07-28 19:05:27,622 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:05:27" (1/1) ... [2020-07-28 19:05:27,627 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2020-07-28 19:05:27,635 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2020-07-28 19:05:27,635 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2020-07-28 19:05:27,635 INFO L275 PluginConnector]: RCFGBuilder initialized [2020-07-28 19:05:27,636 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:05:27" (1/1) ... No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2020-07-28 19:05:27,705 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2020-07-28 19:05:27,705 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2020-07-28 19:05:27,706 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2020-07-28 19:05:27,706 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2020-07-28 19:05:29,214 INFO L290 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2020-07-28 19:05:29,214 INFO L295 CfgBuilder]: Removed 170 assume(true) statements. [2020-07-28 19:05:29,220 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.07 07:05:29 BoogieIcfgContainer [2020-07-28 19:05:29,220 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2020-07-28 19:05:29,222 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2020-07-28 19:05:29,222 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2020-07-28 19:05:29,226 INFO L275 PluginConnector]: TraceAbstraction initialized [2020-07-28 19:05:29,226 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 28.07 07:05:26" (1/3) ... [2020-07-28 19:05:29,227 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@33ae8e7f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.07 07:05:29, skipping insertion in model container [2020-07-28 19:05:29,228 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:05:27" (2/3) ... [2020-07-28 19:05:29,228 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@33ae8e7f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.07 07:05:29, skipping insertion in model container [2020-07-28 19:05:29,228 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.07 07:05:29" (3/3) ... [2020-07-28 19:05:29,231 INFO L109 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product37.cil.c [2020-07-28 19:05:29,244 INFO L157 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2020-07-28 19:05:29,252 INFO L169 ceAbstractionStarter]: Appying trace abstraction to program that has 3 error locations. [2020-07-28 19:05:29,268 INFO L251 AbstractCegarLoop]: Starting to check reachability of 3 error locations. [2020-07-28 19:05:29,295 INFO L375 AbstractCegarLoop]: Interprodecural is true [2020-07-28 19:05:29,295 INFO L376 AbstractCegarLoop]: Hoare is true [2020-07-28 19:05:29,296 INFO L377 AbstractCegarLoop]: Compute interpolants for FPandBP [2020-07-28 19:05:29,296 INFO L378 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2020-07-28 19:05:29,297 INFO L379 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2020-07-28 19:05:29,297 INFO L380 AbstractCegarLoop]: Difference is false [2020-07-28 19:05:29,297 INFO L381 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2020-07-28 19:05:29,297 INFO L385 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2020-07-28 19:05:29,319 INFO L276 IsEmpty]: Start isEmpty. Operand 120 states. [2020-07-28 19:05:29,327 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2020-07-28 19:05:29,328 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:05:29,329 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:05:29,330 INFO L427 AbstractCegarLoop]: === Iteration 1 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:05:29,336 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:05:29,337 INFO L82 PathProgramCache]: Analyzing trace with hash -2044768007, now seen corresponding path program 1 times [2020-07-28 19:05:29,352 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:05:29,352 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1946145691] [2020-07-28 19:05:29,353 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:05:29,575 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:05:29,712 INFO L280 TraceCheckUtils]: 0: Hoare triple {123#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(13);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string20.base, #t~string20.offset, 1);call write~init~int(110, #t~string20.base, 1 + #t~string20.offset, 1);call write~init~int(0, #t~string20.base, 2 + #t~string20.offset, 1);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string22.base, #t~string22.offset, 1);call write~init~int(102, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(102, #t~string22.base, 2 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 3 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string24.base, #t~string24.offset, 1);call write~init~int(80, #t~string24.base, 1 + #t~string24.offset, 1);call write~init~int(117, #t~string24.base, 2 + #t~string24.offset, 1);call write~init~int(109, #t~string24.base, 3 + #t~string24.offset, 1);call write~init~int(112, #t~string24.base, 4 + #t~string24.offset, 1);call write~init~int(58, #t~string24.base, 5 + #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 6 + #t~string24.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string26.base, #t~string26.offset, 1);call write~init~int(110, #t~string26.base, 1 + #t~string26.offset, 1);call write~init~int(0, #t~string26.base, 2 + #t~string26.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string28.base, #t~string28.offset, 1);call write~init~int(102, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(102, #t~string28.base, 2 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 3 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string30.base, #t~string30.offset, 1);call write~init~int(32, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 2 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string32.base, #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 1 + #t~string32.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(30);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(9);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(21);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(30);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(9);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {123#true} is VALID [2020-07-28 19:05:29,713 INFO L280 TraceCheckUtils]: 1: Hoare triple {123#true} havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~3, main_~tmp~1;havoc main_~retValue_acc~3;havoc main_~tmp~1; {123#true} is VALID [2020-07-28 19:05:29,714 INFO L280 TraceCheckUtils]: 2: Hoare triple {123#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {123#true} is VALID [2020-07-28 19:05:29,714 INFO L280 TraceCheckUtils]: 3: Hoare triple {123#true} main_#t~ret13 := valid_product_#res;assume -2147483648 <= main_#t~ret13 && main_#t~ret13 <= 2147483647;main_~tmp~1 := main_#t~ret13;havoc main_#t~ret13; {123#true} is VALID [2020-07-28 19:05:29,715 INFO L280 TraceCheckUtils]: 4: Hoare triple {123#true} assume 0 != main_~tmp~1; {123#true} is VALID [2020-07-28 19:05:29,716 INFO L280 TraceCheckUtils]: 5: Hoare triple {123#true} ~switchedOnBeforeTS~0 := 0; {123#true} is VALID [2020-07-28 19:05:29,716 INFO L280 TraceCheckUtils]: 6: Hoare triple {123#true} havoc test_#t~nondet34, test_#t~nondet35, test_#t~nondet36, test_#t~nondet37, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~2, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~2;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {123#true} is VALID [2020-07-28 19:05:29,718 INFO L280 TraceCheckUtils]: 7: Hoare triple {123#true} assume false; {124#false} is VALID [2020-07-28 19:05:29,718 INFO L280 TraceCheckUtils]: 8: Hoare triple {124#false} havoc cleanup_~i~0, cleanup_~__cil_tmp2~0;havoc cleanup_~i~0;havoc cleanup_~__cil_tmp2~0;havoc __utac_acc__Specification5_spec__2_#t~ret10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {124#false} is VALID [2020-07-28 19:05:29,718 INFO L280 TraceCheckUtils]: 9: Hoare triple {124#false} __utac_acc__Specification5_spec__2_#t~ret10 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret10 && __utac_acc__Specification5_spec__2_#t~ret10 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret10;havoc __utac_acc__Specification5_spec__2_#t~ret10; {124#false} is VALID [2020-07-28 19:05:29,719 INFO L280 TraceCheckUtils]: 10: Hoare triple {124#false} assume !(0 != ~pumpRunning~0); {124#false} is VALID [2020-07-28 19:05:29,719 INFO L280 TraceCheckUtils]: 11: Hoare triple {124#false} assume !(0 != ~systemActive~0); {124#false} is VALID [2020-07-28 19:05:29,720 INFO L280 TraceCheckUtils]: 12: Hoare triple {124#false} havoc __utac_acc__Specification5_spec__3_#t~ret11, __utac_acc__Specification5_spec__3_#t~ret12, __utac_acc__Specification5_spec__3_~tmp~0, __utac_acc__Specification5_spec__3_~tmp___0~0;havoc __utac_acc__Specification5_spec__3_~tmp~0;havoc __utac_acc__Specification5_spec__3_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {124#false} is VALID [2020-07-28 19:05:29,720 INFO L280 TraceCheckUtils]: 13: Hoare triple {124#false} __utac_acc__Specification5_spec__3_#t~ret11 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret11 && __utac_acc__Specification5_spec__3_#t~ret11 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0 := __utac_acc__Specification5_spec__3_#t~ret11;havoc __utac_acc__Specification5_spec__3_#t~ret11; {124#false} is VALID [2020-07-28 19:05:29,721 INFO L280 TraceCheckUtils]: 14: Hoare triple {124#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {124#false} is VALID [2020-07-28 19:05:29,721 INFO L280 TraceCheckUtils]: 15: Hoare triple {124#false} __utac_acc__Specification5_spec__3_#t~ret12 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret12 && __utac_acc__Specification5_spec__3_#t~ret12 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0 := __utac_acc__Specification5_spec__3_#t~ret12;havoc __utac_acc__Specification5_spec__3_#t~ret12; {124#false} is VALID [2020-07-28 19:05:29,721 INFO L280 TraceCheckUtils]: 16: Hoare triple {124#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~0; {124#false} is VALID [2020-07-28 19:05:29,722 INFO L280 TraceCheckUtils]: 17: Hoare triple {124#false} assume 0 == ~switchedOnBeforeTS~0; {124#false} is VALID [2020-07-28 19:05:29,722 INFO L280 TraceCheckUtils]: 18: Hoare triple {124#false} assume !false; {124#false} is VALID [2020-07-28 19:05:29,727 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:05:29,728 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1946145691] [2020-07-28 19:05:29,729 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:05:29,729 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2020-07-28 19:05:29,730 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1996743580] [2020-07-28 19:05:29,737 INFO L78 Accepts]: Start accepts. Automaton has 2 states. Word has length 19 [2020-07-28 19:05:29,738 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:05:29,742 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states. [2020-07-28 19:05:29,788 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 19 edges. 19 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:05:29,788 INFO L459 AbstractCegarLoop]: Interpolant automaton has 2 states [2020-07-28 19:05:29,789 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:05:29,798 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2020-07-28 19:05:29,799 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2020-07-28 19:05:29,801 INFO L87 Difference]: Start difference. First operand 120 states. Second operand 2 states. [2020-07-28 19:05:30,097 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:05:30,097 INFO L93 Difference]: Finished difference Result 233 states and 352 transitions. [2020-07-28 19:05:30,098 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2020-07-28 19:05:30,098 INFO L78 Accepts]: Start accepts. Automaton has 2 states. Word has length 19 [2020-07-28 19:05:30,098 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:05:30,100 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2 states. [2020-07-28 19:05:30,110 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 352 transitions. [2020-07-28 19:05:30,110 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2 states. [2020-07-28 19:05:30,116 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 352 transitions. [2020-07-28 19:05:30,117 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states and 352 transitions. [2020-07-28 19:05:30,529 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 352 edges. 352 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:05:30,545 INFO L225 Difference]: With dead ends: 233 [2020-07-28 19:05:30,545 INFO L226 Difference]: Without dead ends: 116 [2020-07-28 19:05:30,549 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2020-07-28 19:05:30,568 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 116 states. [2020-07-28 19:05:30,619 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 116 to 116. [2020-07-28 19:05:30,620 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:05:30,620 INFO L82 GeneralOperation]: Start isEquivalent. First operand 116 states. Second operand 116 states. [2020-07-28 19:05:30,621 INFO L74 IsIncluded]: Start isIncluded. First operand 116 states. Second operand 116 states. [2020-07-28 19:05:30,621 INFO L87 Difference]: Start difference. First operand 116 states. Second operand 116 states. [2020-07-28 19:05:30,635 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:05:30,636 INFO L93 Difference]: Finished difference Result 116 states and 168 transitions. [2020-07-28 19:05:30,636 INFO L276 IsEmpty]: Start isEmpty. Operand 116 states and 168 transitions. [2020-07-28 19:05:30,638 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:05:30,638 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:05:30,639 INFO L74 IsIncluded]: Start isIncluded. First operand 116 states. Second operand 116 states. [2020-07-28 19:05:30,639 INFO L87 Difference]: Start difference. First operand 116 states. Second operand 116 states. [2020-07-28 19:05:30,655 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:05:30,656 INFO L93 Difference]: Finished difference Result 116 states and 168 transitions. [2020-07-28 19:05:30,656 INFO L276 IsEmpty]: Start isEmpty. Operand 116 states and 168 transitions. [2020-07-28 19:05:30,658 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:05:30,659 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:05:30,659 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:05:30,659 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:05:30,659 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 116 states. [2020-07-28 19:05:30,669 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 116 states to 116 states and 168 transitions. [2020-07-28 19:05:30,670 INFO L78 Accepts]: Start accepts. Automaton has 116 states and 168 transitions. Word has length 19 [2020-07-28 19:05:30,671 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:05:30,671 INFO L479 AbstractCegarLoop]: Abstraction has 116 states and 168 transitions. [2020-07-28 19:05:30,672 INFO L480 AbstractCegarLoop]: Interpolant automaton has 2 states. [2020-07-28 19:05:30,672 INFO L276 IsEmpty]: Start isEmpty. Operand 116 states and 168 transitions. [2020-07-28 19:05:30,674 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2020-07-28 19:05:30,675 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:05:30,675 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:05:30,675 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2020-07-28 19:05:30,676 INFO L427 AbstractCegarLoop]: === Iteration 2 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:05:30,677 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:05:30,677 INFO L82 PathProgramCache]: Analyzing trace with hash -238748454, now seen corresponding path program 1 times [2020-07-28 19:05:30,678 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:05:30,678 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1126789977] [2020-07-28 19:05:30,678 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:05:30,771 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:05:30,854 INFO L280 TraceCheckUtils]: 0: Hoare triple {849#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(13);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string20.base, #t~string20.offset, 1);call write~init~int(110, #t~string20.base, 1 + #t~string20.offset, 1);call write~init~int(0, #t~string20.base, 2 + #t~string20.offset, 1);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string22.base, #t~string22.offset, 1);call write~init~int(102, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(102, #t~string22.base, 2 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 3 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string24.base, #t~string24.offset, 1);call write~init~int(80, #t~string24.base, 1 + #t~string24.offset, 1);call write~init~int(117, #t~string24.base, 2 + #t~string24.offset, 1);call write~init~int(109, #t~string24.base, 3 + #t~string24.offset, 1);call write~init~int(112, #t~string24.base, 4 + #t~string24.offset, 1);call write~init~int(58, #t~string24.base, 5 + #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 6 + #t~string24.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string26.base, #t~string26.offset, 1);call write~init~int(110, #t~string26.base, 1 + #t~string26.offset, 1);call write~init~int(0, #t~string26.base, 2 + #t~string26.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string28.base, #t~string28.offset, 1);call write~init~int(102, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(102, #t~string28.base, 2 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 3 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string30.base, #t~string30.offset, 1);call write~init~int(32, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 2 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string32.base, #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 1 + #t~string32.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(30);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(9);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(21);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(30);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(9);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {849#true} is VALID [2020-07-28 19:05:30,855 INFO L280 TraceCheckUtils]: 1: Hoare triple {849#true} havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~3, main_~tmp~1;havoc main_~retValue_acc~3;havoc main_~tmp~1; {849#true} is VALID [2020-07-28 19:05:30,855 INFO L280 TraceCheckUtils]: 2: Hoare triple {849#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {849#true} is VALID [2020-07-28 19:05:30,855 INFO L280 TraceCheckUtils]: 3: Hoare triple {849#true} main_#t~ret13 := valid_product_#res;assume -2147483648 <= main_#t~ret13 && main_#t~ret13 <= 2147483647;main_~tmp~1 := main_#t~ret13;havoc main_#t~ret13; {849#true} is VALID [2020-07-28 19:05:30,856 INFO L280 TraceCheckUtils]: 4: Hoare triple {849#true} assume 0 != main_~tmp~1; {849#true} is VALID [2020-07-28 19:05:30,856 INFO L280 TraceCheckUtils]: 5: Hoare triple {849#true} ~switchedOnBeforeTS~0 := 0; {849#true} is VALID [2020-07-28 19:05:30,857 INFO L280 TraceCheckUtils]: 6: Hoare triple {849#true} havoc test_#t~nondet34, test_#t~nondet35, test_#t~nondet36, test_#t~nondet37, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~2, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~2;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {851#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} is VALID [2020-07-28 19:05:30,858 INFO L280 TraceCheckUtils]: 7: Hoare triple {851#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} assume !false; {851#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} is VALID [2020-07-28 19:05:30,859 INFO L280 TraceCheckUtils]: 8: Hoare triple {851#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} assume !(test_~splverifierCounter~0 < 4); {850#false} is VALID [2020-07-28 19:05:30,859 INFO L280 TraceCheckUtils]: 9: Hoare triple {850#false} havoc cleanup_~i~0, cleanup_~__cil_tmp2~0;havoc cleanup_~i~0;havoc cleanup_~__cil_tmp2~0;havoc __utac_acc__Specification5_spec__2_#t~ret10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {850#false} is VALID [2020-07-28 19:05:30,859 INFO L280 TraceCheckUtils]: 10: Hoare triple {850#false} __utac_acc__Specification5_spec__2_#t~ret10 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret10 && __utac_acc__Specification5_spec__2_#t~ret10 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret10;havoc __utac_acc__Specification5_spec__2_#t~ret10; {850#false} is VALID [2020-07-28 19:05:30,860 INFO L280 TraceCheckUtils]: 11: Hoare triple {850#false} assume !(0 != ~pumpRunning~0); {850#false} is VALID [2020-07-28 19:05:30,860 INFO L280 TraceCheckUtils]: 12: Hoare triple {850#false} assume !(0 != ~systemActive~0); {850#false} is VALID [2020-07-28 19:05:30,860 INFO L280 TraceCheckUtils]: 13: Hoare triple {850#false} havoc __utac_acc__Specification5_spec__3_#t~ret11, __utac_acc__Specification5_spec__3_#t~ret12, __utac_acc__Specification5_spec__3_~tmp~0, __utac_acc__Specification5_spec__3_~tmp___0~0;havoc __utac_acc__Specification5_spec__3_~tmp~0;havoc __utac_acc__Specification5_spec__3_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {850#false} is VALID [2020-07-28 19:05:30,861 INFO L280 TraceCheckUtils]: 14: Hoare triple {850#false} __utac_acc__Specification5_spec__3_#t~ret11 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret11 && __utac_acc__Specification5_spec__3_#t~ret11 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0 := __utac_acc__Specification5_spec__3_#t~ret11;havoc __utac_acc__Specification5_spec__3_#t~ret11; {850#false} is VALID [2020-07-28 19:05:30,861 INFO L280 TraceCheckUtils]: 15: Hoare triple {850#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {850#false} is VALID [2020-07-28 19:05:30,861 INFO L280 TraceCheckUtils]: 16: Hoare triple {850#false} __utac_acc__Specification5_spec__3_#t~ret12 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret12 && __utac_acc__Specification5_spec__3_#t~ret12 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0 := __utac_acc__Specification5_spec__3_#t~ret12;havoc __utac_acc__Specification5_spec__3_#t~ret12; {850#false} is VALID [2020-07-28 19:05:30,861 INFO L280 TraceCheckUtils]: 17: Hoare triple {850#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~0; {850#false} is VALID [2020-07-28 19:05:30,862 INFO L280 TraceCheckUtils]: 18: Hoare triple {850#false} assume 0 == ~switchedOnBeforeTS~0; {850#false} is VALID [2020-07-28 19:05:30,862 INFO L280 TraceCheckUtils]: 19: Hoare triple {850#false} assume !false; {850#false} is VALID [2020-07-28 19:05:30,864 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:05:30,864 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1126789977] [2020-07-28 19:05:30,865 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:05:30,865 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2020-07-28 19:05:30,865 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1248227421] [2020-07-28 19:05:30,867 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 20 [2020-07-28 19:05:30,867 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:05:30,867 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 19:05:30,901 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 20 edges. 20 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:05:30,902 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 19:05:30,902 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:05:30,902 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 19:05:30,902 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:05:30,902 INFO L87 Difference]: Start difference. First operand 116 states and 168 transitions. Second operand 3 states. [2020-07-28 19:05:31,129 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:05:31,129 INFO L93 Difference]: Finished difference Result 116 states and 168 transitions. [2020-07-28 19:05:31,129 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 19:05:31,129 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 20 [2020-07-28 19:05:31,129 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:05:31,129 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:05:31,132 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 168 transitions. [2020-07-28 19:05:31,132 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:05:31,135 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 168 transitions. [2020-07-28 19:05:31,135 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 168 transitions. [2020-07-28 19:05:31,323 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 168 edges. 168 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:05:31,325 INFO L225 Difference]: With dead ends: 116 [2020-07-28 19:05:31,326 INFO L226 Difference]: Without dead ends: 49 [2020-07-28 19:05:31,327 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:05:31,328 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 49 states. [2020-07-28 19:05:31,356 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 49 to 49. [2020-07-28 19:05:31,356 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:05:31,356 INFO L82 GeneralOperation]: Start isEquivalent. First operand 49 states. Second operand 49 states. [2020-07-28 19:05:31,357 INFO L74 IsIncluded]: Start isIncluded. First operand 49 states. Second operand 49 states. [2020-07-28 19:05:31,357 INFO L87 Difference]: Start difference. First operand 49 states. Second operand 49 states. [2020-07-28 19:05:31,362 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:05:31,362 INFO L93 Difference]: Finished difference Result 49 states and 70 transitions. [2020-07-28 19:05:31,362 INFO L276 IsEmpty]: Start isEmpty. Operand 49 states and 70 transitions. [2020-07-28 19:05:31,363 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:05:31,363 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:05:31,364 INFO L74 IsIncluded]: Start isIncluded. First operand 49 states. Second operand 49 states. [2020-07-28 19:05:31,364 INFO L87 Difference]: Start difference. First operand 49 states. Second operand 49 states. [2020-07-28 19:05:31,366 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:05:31,367 INFO L93 Difference]: Finished difference Result 49 states and 70 transitions. [2020-07-28 19:05:31,367 INFO L276 IsEmpty]: Start isEmpty. Operand 49 states and 70 transitions. [2020-07-28 19:05:31,368 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:05:31,368 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:05:31,368 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:05:31,368 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:05:31,369 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 49 states. [2020-07-28 19:05:31,371 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 49 states to 49 states and 70 transitions. [2020-07-28 19:05:31,371 INFO L78 Accepts]: Start accepts. Automaton has 49 states and 70 transitions. Word has length 20 [2020-07-28 19:05:31,371 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:05:31,371 INFO L479 AbstractCegarLoop]: Abstraction has 49 states and 70 transitions. [2020-07-28 19:05:31,371 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 19:05:31,372 INFO L276 IsEmpty]: Start isEmpty. Operand 49 states and 70 transitions. [2020-07-28 19:05:31,372 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2020-07-28 19:05:31,373 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:05:31,373 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:05:31,373 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2020-07-28 19:05:31,374 INFO L427 AbstractCegarLoop]: === Iteration 3 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:05:31,374 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:05:31,374 INFO L82 PathProgramCache]: Analyzing trace with hash 2013244568, now seen corresponding path program 1 times [2020-07-28 19:05:31,375 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:05:31,375 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [501818860] [2020-07-28 19:05:31,375 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:05:31,412 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:05:31,468 INFO L280 TraceCheckUtils]: 0: Hoare triple {1183#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(13);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string20.base, #t~string20.offset, 1);call write~init~int(110, #t~string20.base, 1 + #t~string20.offset, 1);call write~init~int(0, #t~string20.base, 2 + #t~string20.offset, 1);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string22.base, #t~string22.offset, 1);call write~init~int(102, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(102, #t~string22.base, 2 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 3 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string24.base, #t~string24.offset, 1);call write~init~int(80, #t~string24.base, 1 + #t~string24.offset, 1);call write~init~int(117, #t~string24.base, 2 + #t~string24.offset, 1);call write~init~int(109, #t~string24.base, 3 + #t~string24.offset, 1);call write~init~int(112, #t~string24.base, 4 + #t~string24.offset, 1);call write~init~int(58, #t~string24.base, 5 + #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 6 + #t~string24.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string26.base, #t~string26.offset, 1);call write~init~int(110, #t~string26.base, 1 + #t~string26.offset, 1);call write~init~int(0, #t~string26.base, 2 + #t~string26.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string28.base, #t~string28.offset, 1);call write~init~int(102, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(102, #t~string28.base, 2 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 3 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string30.base, #t~string30.offset, 1);call write~init~int(32, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 2 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string32.base, #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 1 + #t~string32.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(30);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(9);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(21);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(30);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(9);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {1185#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:05:31,470 INFO L280 TraceCheckUtils]: 1: Hoare triple {1185#(= 1 ~systemActive~0)} havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~3, main_~tmp~1;havoc main_~retValue_acc~3;havoc main_~tmp~1; {1185#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:05:31,470 INFO L280 TraceCheckUtils]: 2: Hoare triple {1185#(= 1 ~systemActive~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {1185#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:05:31,471 INFO L280 TraceCheckUtils]: 3: Hoare triple {1185#(= 1 ~systemActive~0)} main_#t~ret13 := valid_product_#res;assume -2147483648 <= main_#t~ret13 && main_#t~ret13 <= 2147483647;main_~tmp~1 := main_#t~ret13;havoc main_#t~ret13; {1185#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:05:31,472 INFO L280 TraceCheckUtils]: 4: Hoare triple {1185#(= 1 ~systemActive~0)} assume 0 != main_~tmp~1; {1185#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:05:31,472 INFO L280 TraceCheckUtils]: 5: Hoare triple {1185#(= 1 ~systemActive~0)} ~switchedOnBeforeTS~0 := 0; {1185#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:05:31,473 INFO L280 TraceCheckUtils]: 6: Hoare triple {1185#(= 1 ~systemActive~0)} havoc test_#t~nondet34, test_#t~nondet35, test_#t~nondet36, test_#t~nondet37, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~2, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~2;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {1185#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:05:31,474 INFO L280 TraceCheckUtils]: 7: Hoare triple {1185#(= 1 ~systemActive~0)} assume !false; {1185#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:05:31,474 INFO L280 TraceCheckUtils]: 8: Hoare triple {1185#(= 1 ~systemActive~0)} assume test_~splverifierCounter~0 < 4; {1185#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:05:31,475 INFO L280 TraceCheckUtils]: 9: Hoare triple {1185#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet34 && test_#t~nondet34 <= 2147483647;test_~tmp~5 := test_#t~nondet34;havoc test_#t~nondet34; {1185#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:05:31,476 INFO L280 TraceCheckUtils]: 10: Hoare triple {1185#(= 1 ~systemActive~0)} assume !(0 != test_~tmp~5); {1185#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:05:31,476 INFO L280 TraceCheckUtils]: 11: Hoare triple {1185#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp___0~2 := test_#t~nondet35;havoc test_#t~nondet35; {1185#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:05:31,477 INFO L280 TraceCheckUtils]: 12: Hoare triple {1185#(= 1 ~systemActive~0)} assume !(0 != test_~tmp___0~2); {1185#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:05:31,478 INFO L280 TraceCheckUtils]: 13: Hoare triple {1185#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___2~0 := test_#t~nondet36;havoc test_#t~nondet36; {1185#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:05:31,479 INFO L280 TraceCheckUtils]: 14: Hoare triple {1185#(= 1 ~systemActive~0)} assume 0 != test_~tmp___2~0; {1185#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:05:31,479 INFO L280 TraceCheckUtils]: 15: Hoare triple {1185#(= 1 ~systemActive~0)} havoc __utac_acc__Specification5_spec__2_#t~ret10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {1185#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:05:31,480 INFO L280 TraceCheckUtils]: 16: Hoare triple {1185#(= 1 ~systemActive~0)} __utac_acc__Specification5_spec__2_#t~ret10 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret10 && __utac_acc__Specification5_spec__2_#t~ret10 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret10;havoc __utac_acc__Specification5_spec__2_#t~ret10; {1185#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:05:31,481 INFO L280 TraceCheckUtils]: 17: Hoare triple {1185#(= 1 ~systemActive~0)} assume !(0 != ~pumpRunning~0); {1185#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:05:31,482 INFO L280 TraceCheckUtils]: 18: Hoare triple {1185#(= 1 ~systemActive~0)} assume !(0 != ~systemActive~0); {1184#false} is VALID [2020-07-28 19:05:31,483 INFO L280 TraceCheckUtils]: 19: Hoare triple {1184#false} havoc __utac_acc__Specification5_spec__3_#t~ret11, __utac_acc__Specification5_spec__3_#t~ret12, __utac_acc__Specification5_spec__3_~tmp~0, __utac_acc__Specification5_spec__3_~tmp___0~0;havoc __utac_acc__Specification5_spec__3_~tmp~0;havoc __utac_acc__Specification5_spec__3_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {1184#false} is VALID [2020-07-28 19:05:31,483 INFO L280 TraceCheckUtils]: 20: Hoare triple {1184#false} __utac_acc__Specification5_spec__3_#t~ret11 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret11 && __utac_acc__Specification5_spec__3_#t~ret11 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0 := __utac_acc__Specification5_spec__3_#t~ret11;havoc __utac_acc__Specification5_spec__3_#t~ret11; {1184#false} is VALID [2020-07-28 19:05:31,483 INFO L280 TraceCheckUtils]: 21: Hoare triple {1184#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {1184#false} is VALID [2020-07-28 19:05:31,484 INFO L280 TraceCheckUtils]: 22: Hoare triple {1184#false} __utac_acc__Specification5_spec__3_#t~ret12 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret12 && __utac_acc__Specification5_spec__3_#t~ret12 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0 := __utac_acc__Specification5_spec__3_#t~ret12;havoc __utac_acc__Specification5_spec__3_#t~ret12; {1184#false} is VALID [2020-07-28 19:05:31,484 INFO L280 TraceCheckUtils]: 23: Hoare triple {1184#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~0; {1184#false} is VALID [2020-07-28 19:05:31,484 INFO L280 TraceCheckUtils]: 24: Hoare triple {1184#false} assume 0 == ~switchedOnBeforeTS~0; {1184#false} is VALID [2020-07-28 19:05:31,484 INFO L280 TraceCheckUtils]: 25: Hoare triple {1184#false} assume !false; {1184#false} is VALID [2020-07-28 19:05:31,486 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:05:31,487 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [501818860] [2020-07-28 19:05:31,487 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:05:31,487 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2020-07-28 19:05:31,487 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1060212795] [2020-07-28 19:05:31,488 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 26 [2020-07-28 19:05:31,488 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:05:31,488 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 19:05:31,521 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 26 edges. 26 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:05:31,522 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 19:05:31,522 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:05:31,522 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 19:05:31,523 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:05:31,523 INFO L87 Difference]: Start difference. First operand 49 states and 70 transitions. Second operand 3 states. [2020-07-28 19:05:31,669 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:05:31,669 INFO L93 Difference]: Finished difference Result 91 states and 133 transitions. [2020-07-28 19:05:31,670 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 19:05:31,670 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 26 [2020-07-28 19:05:31,670 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:05:31,670 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:05:31,673 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 133 transitions. [2020-07-28 19:05:31,673 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:05:31,675 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 133 transitions. [2020-07-28 19:05:31,675 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 133 transitions. [2020-07-28 19:05:31,824 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 133 edges. 133 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:05:31,825 INFO L225 Difference]: With dead ends: 91 [2020-07-28 19:05:31,825 INFO L226 Difference]: Without dead ends: 49 [2020-07-28 19:05:31,828 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:05:31,828 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 49 states. [2020-07-28 19:05:31,871 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 49 to 49. [2020-07-28 19:05:31,871 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:05:31,871 INFO L82 GeneralOperation]: Start isEquivalent. First operand 49 states. Second operand 49 states. [2020-07-28 19:05:31,872 INFO L74 IsIncluded]: Start isIncluded. First operand 49 states. Second operand 49 states. [2020-07-28 19:05:31,872 INFO L87 Difference]: Start difference. First operand 49 states. Second operand 49 states. [2020-07-28 19:05:31,874 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:05:31,874 INFO L93 Difference]: Finished difference Result 49 states and 69 transitions. [2020-07-28 19:05:31,874 INFO L276 IsEmpty]: Start isEmpty. Operand 49 states and 69 transitions. [2020-07-28 19:05:31,875 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:05:31,875 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:05:31,875 INFO L74 IsIncluded]: Start isIncluded. First operand 49 states. Second operand 49 states. [2020-07-28 19:05:31,876 INFO L87 Difference]: Start difference. First operand 49 states. Second operand 49 states. [2020-07-28 19:05:31,883 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:05:31,884 INFO L93 Difference]: Finished difference Result 49 states and 69 transitions. [2020-07-28 19:05:31,884 INFO L276 IsEmpty]: Start isEmpty. Operand 49 states and 69 transitions. [2020-07-28 19:05:31,884 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:05:31,885 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:05:31,885 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:05:31,885 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:05:31,885 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 49 states. [2020-07-28 19:05:31,887 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 49 states to 49 states and 69 transitions. [2020-07-28 19:05:31,887 INFO L78 Accepts]: Start accepts. Automaton has 49 states and 69 transitions. Word has length 26 [2020-07-28 19:05:31,888 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:05:31,888 INFO L479 AbstractCegarLoop]: Abstraction has 49 states and 69 transitions. [2020-07-28 19:05:31,888 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 19:05:31,889 INFO L276 IsEmpty]: Start isEmpty. Operand 49 states and 69 transitions. [2020-07-28 19:05:31,889 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2020-07-28 19:05:31,889 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:05:31,890 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:05:31,890 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2020-07-28 19:05:31,890 INFO L427 AbstractCegarLoop]: === Iteration 4 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:05:31,891 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:05:31,891 INFO L82 PathProgramCache]: Analyzing trace with hash -997731729, now seen corresponding path program 1 times [2020-07-28 19:05:31,891 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:05:31,891 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1205342831] [2020-07-28 19:05:31,892 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:05:31,960 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:05:32,009 INFO L280 TraceCheckUtils]: 0: Hoare triple {1479#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(13);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string20.base, #t~string20.offset, 1);call write~init~int(110, #t~string20.base, 1 + #t~string20.offset, 1);call write~init~int(0, #t~string20.base, 2 + #t~string20.offset, 1);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string22.base, #t~string22.offset, 1);call write~init~int(102, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(102, #t~string22.base, 2 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 3 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string24.base, #t~string24.offset, 1);call write~init~int(80, #t~string24.base, 1 + #t~string24.offset, 1);call write~init~int(117, #t~string24.base, 2 + #t~string24.offset, 1);call write~init~int(109, #t~string24.base, 3 + #t~string24.offset, 1);call write~init~int(112, #t~string24.base, 4 + #t~string24.offset, 1);call write~init~int(58, #t~string24.base, 5 + #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 6 + #t~string24.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string26.base, #t~string26.offset, 1);call write~init~int(110, #t~string26.base, 1 + #t~string26.offset, 1);call write~init~int(0, #t~string26.base, 2 + #t~string26.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string28.base, #t~string28.offset, 1);call write~init~int(102, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(102, #t~string28.base, 2 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 3 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string30.base, #t~string30.offset, 1);call write~init~int(32, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 2 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string32.base, #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 1 + #t~string32.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(30);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(9);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(21);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(30);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(9);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {1481#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:05:32,010 INFO L280 TraceCheckUtils]: 1: Hoare triple {1481#(= 0 ~pumpRunning~0)} havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~3, main_~tmp~1;havoc main_~retValue_acc~3;havoc main_~tmp~1; {1481#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:05:32,011 INFO L280 TraceCheckUtils]: 2: Hoare triple {1481#(= 0 ~pumpRunning~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {1481#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:05:32,011 INFO L280 TraceCheckUtils]: 3: Hoare triple {1481#(= 0 ~pumpRunning~0)} main_#t~ret13 := valid_product_#res;assume -2147483648 <= main_#t~ret13 && main_#t~ret13 <= 2147483647;main_~tmp~1 := main_#t~ret13;havoc main_#t~ret13; {1481#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:05:32,012 INFO L280 TraceCheckUtils]: 4: Hoare triple {1481#(= 0 ~pumpRunning~0)} assume 0 != main_~tmp~1; {1481#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:05:32,013 INFO L280 TraceCheckUtils]: 5: Hoare triple {1481#(= 0 ~pumpRunning~0)} ~switchedOnBeforeTS~0 := 0; {1481#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:05:32,013 INFO L280 TraceCheckUtils]: 6: Hoare triple {1481#(= 0 ~pumpRunning~0)} havoc test_#t~nondet34, test_#t~nondet35, test_#t~nondet36, test_#t~nondet37, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~2, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~2;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {1481#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:05:32,014 INFO L280 TraceCheckUtils]: 7: Hoare triple {1481#(= 0 ~pumpRunning~0)} assume !false; {1481#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:05:32,015 INFO L280 TraceCheckUtils]: 8: Hoare triple {1481#(= 0 ~pumpRunning~0)} assume test_~splverifierCounter~0 < 4; {1481#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:05:32,015 INFO L280 TraceCheckUtils]: 9: Hoare triple {1481#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet34 && test_#t~nondet34 <= 2147483647;test_~tmp~5 := test_#t~nondet34;havoc test_#t~nondet34; {1481#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:05:32,016 INFO L280 TraceCheckUtils]: 10: Hoare triple {1481#(= 0 ~pumpRunning~0)} assume !(0 != test_~tmp~5); {1481#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:05:32,017 INFO L280 TraceCheckUtils]: 11: Hoare triple {1481#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp___0~2 := test_#t~nondet35;havoc test_#t~nondet35; {1481#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:05:32,017 INFO L280 TraceCheckUtils]: 12: Hoare triple {1481#(= 0 ~pumpRunning~0)} assume !(0 != test_~tmp___0~2); {1481#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:05:32,018 INFO L280 TraceCheckUtils]: 13: Hoare triple {1481#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___2~0 := test_#t~nondet36;havoc test_#t~nondet36; {1481#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:05:32,019 INFO L280 TraceCheckUtils]: 14: Hoare triple {1481#(= 0 ~pumpRunning~0)} assume 0 != test_~tmp___2~0; {1481#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:05:32,019 INFO L280 TraceCheckUtils]: 15: Hoare triple {1481#(= 0 ~pumpRunning~0)} havoc __utac_acc__Specification5_spec__2_#t~ret10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {1481#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:05:32,020 INFO L280 TraceCheckUtils]: 16: Hoare triple {1481#(= 0 ~pumpRunning~0)} __utac_acc__Specification5_spec__2_#t~ret10 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret10 && __utac_acc__Specification5_spec__2_#t~ret10 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret10;havoc __utac_acc__Specification5_spec__2_#t~ret10; {1481#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:05:32,021 INFO L280 TraceCheckUtils]: 17: Hoare triple {1481#(= 0 ~pumpRunning~0)} assume !(0 != ~pumpRunning~0); {1481#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:05:32,021 INFO L280 TraceCheckUtils]: 18: Hoare triple {1481#(= 0 ~pumpRunning~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {1481#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:05:32,022 INFO L280 TraceCheckUtils]: 19: Hoare triple {1481#(= 0 ~pumpRunning~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~2;havoc processEnvironment__wrappee__highWaterSensor_~tmp~2; {1481#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:05:32,023 INFO L280 TraceCheckUtils]: 20: Hoare triple {1481#(= 0 ~pumpRunning~0)} assume !(0 == ~pumpRunning~0); {1480#false} is VALID [2020-07-28 19:05:32,024 INFO L280 TraceCheckUtils]: 21: Hoare triple {1480#false} havoc __utac_acc__Specification5_spec__3_#t~ret11, __utac_acc__Specification5_spec__3_#t~ret12, __utac_acc__Specification5_spec__3_~tmp~0, __utac_acc__Specification5_spec__3_~tmp___0~0;havoc __utac_acc__Specification5_spec__3_~tmp~0;havoc __utac_acc__Specification5_spec__3_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {1480#false} is VALID [2020-07-28 19:05:32,024 INFO L280 TraceCheckUtils]: 22: Hoare triple {1480#false} __utac_acc__Specification5_spec__3_#t~ret11 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret11 && __utac_acc__Specification5_spec__3_#t~ret11 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0 := __utac_acc__Specification5_spec__3_#t~ret11;havoc __utac_acc__Specification5_spec__3_#t~ret11; {1480#false} is VALID [2020-07-28 19:05:32,024 INFO L280 TraceCheckUtils]: 23: Hoare triple {1480#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {1480#false} is VALID [2020-07-28 19:05:32,024 INFO L280 TraceCheckUtils]: 24: Hoare triple {1480#false} __utac_acc__Specification5_spec__3_#t~ret12 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret12 && __utac_acc__Specification5_spec__3_#t~ret12 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0 := __utac_acc__Specification5_spec__3_#t~ret12;havoc __utac_acc__Specification5_spec__3_#t~ret12; {1480#false} is VALID [2020-07-28 19:05:32,025 INFO L280 TraceCheckUtils]: 25: Hoare triple {1480#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~0; {1480#false} is VALID [2020-07-28 19:05:32,025 INFO L280 TraceCheckUtils]: 26: Hoare triple {1480#false} assume 0 == ~switchedOnBeforeTS~0; {1480#false} is VALID [2020-07-28 19:05:32,025 INFO L280 TraceCheckUtils]: 27: Hoare triple {1480#false} assume !false; {1480#false} is VALID [2020-07-28 19:05:32,026 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:05:32,027 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1205342831] [2020-07-28 19:05:32,028 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:05:32,028 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2020-07-28 19:05:32,028 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1468999556] [2020-07-28 19:05:32,029 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 28 [2020-07-28 19:05:32,029 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:05:32,029 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 19:05:32,065 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 28 edges. 28 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:05:32,065 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 19:05:32,065 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:05:32,066 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 19:05:32,066 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:05:32,066 INFO L87 Difference]: Start difference. First operand 49 states and 69 transitions. Second operand 3 states. [2020-07-28 19:05:32,292 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:05:32,292 INFO L93 Difference]: Finished difference Result 115 states and 165 transitions. [2020-07-28 19:05:32,292 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 19:05:32,293 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 28 [2020-07-28 19:05:32,293 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:05:32,293 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:05:32,295 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 165 transitions. [2020-07-28 19:05:32,296 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:05:32,298 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 165 transitions. [2020-07-28 19:05:32,298 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 165 transitions. [2020-07-28 19:05:32,486 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 165 edges. 165 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:05:32,488 INFO L225 Difference]: With dead ends: 115 [2020-07-28 19:05:32,488 INFO L226 Difference]: Without dead ends: 73 [2020-07-28 19:05:32,489 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:05:32,490 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 73 states. [2020-07-28 19:05:32,543 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 73 to 71. [2020-07-28 19:05:32,543 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:05:32,543 INFO L82 GeneralOperation]: Start isEquivalent. First operand 73 states. Second operand 71 states. [2020-07-28 19:05:32,543 INFO L74 IsIncluded]: Start isIncluded. First operand 73 states. Second operand 71 states. [2020-07-28 19:05:32,543 INFO L87 Difference]: Start difference. First operand 73 states. Second operand 71 states. [2020-07-28 19:05:32,546 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:05:32,546 INFO L93 Difference]: Finished difference Result 73 states and 100 transitions. [2020-07-28 19:05:32,546 INFO L276 IsEmpty]: Start isEmpty. Operand 73 states and 100 transitions. [2020-07-28 19:05:32,547 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:05:32,547 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:05:32,547 INFO L74 IsIncluded]: Start isIncluded. First operand 71 states. Second operand 73 states. [2020-07-28 19:05:32,547 INFO L87 Difference]: Start difference. First operand 71 states. Second operand 73 states. [2020-07-28 19:05:32,550 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:05:32,550 INFO L93 Difference]: Finished difference Result 73 states and 100 transitions. [2020-07-28 19:05:32,550 INFO L276 IsEmpty]: Start isEmpty. Operand 73 states and 100 transitions. [2020-07-28 19:05:32,551 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:05:32,551 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:05:32,551 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:05:32,551 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:05:32,551 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 71 states. [2020-07-28 19:05:32,553 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 71 states to 71 states and 99 transitions. [2020-07-28 19:05:32,554 INFO L78 Accepts]: Start accepts. Automaton has 71 states and 99 transitions. Word has length 28 [2020-07-28 19:05:32,554 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:05:32,554 INFO L479 AbstractCegarLoop]: Abstraction has 71 states and 99 transitions. [2020-07-28 19:05:32,554 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 19:05:32,554 INFO L276 IsEmpty]: Start isEmpty. Operand 71 states and 99 transitions. [2020-07-28 19:05:32,555 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2020-07-28 19:05:32,555 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:05:32,555 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:05:32,555 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2020-07-28 19:05:32,556 INFO L427 AbstractCegarLoop]: === Iteration 5 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:05:32,556 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:05:32,556 INFO L82 PathProgramCache]: Analyzing trace with hash -1921834210, now seen corresponding path program 1 times [2020-07-28 19:05:32,556 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:05:32,557 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1059833119] [2020-07-28 19:05:32,557 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:05:32,583 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:05:32,635 INFO L280 TraceCheckUtils]: 0: Hoare triple {1887#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(13);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string20.base, #t~string20.offset, 1);call write~init~int(110, #t~string20.base, 1 + #t~string20.offset, 1);call write~init~int(0, #t~string20.base, 2 + #t~string20.offset, 1);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string22.base, #t~string22.offset, 1);call write~init~int(102, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(102, #t~string22.base, 2 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 3 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string24.base, #t~string24.offset, 1);call write~init~int(80, #t~string24.base, 1 + #t~string24.offset, 1);call write~init~int(117, #t~string24.base, 2 + #t~string24.offset, 1);call write~init~int(109, #t~string24.base, 3 + #t~string24.offset, 1);call write~init~int(112, #t~string24.base, 4 + #t~string24.offset, 1);call write~init~int(58, #t~string24.base, 5 + #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 6 + #t~string24.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string26.base, #t~string26.offset, 1);call write~init~int(110, #t~string26.base, 1 + #t~string26.offset, 1);call write~init~int(0, #t~string26.base, 2 + #t~string26.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string28.base, #t~string28.offset, 1);call write~init~int(102, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(102, #t~string28.base, 2 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 3 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string30.base, #t~string30.offset, 1);call write~init~int(32, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 2 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string32.base, #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 1 + #t~string32.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(30);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(9);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(21);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(30);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(9);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {1887#true} is VALID [2020-07-28 19:05:32,635 INFO L280 TraceCheckUtils]: 1: Hoare triple {1887#true} havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~3, main_~tmp~1;havoc main_~retValue_acc~3;havoc main_~tmp~1; {1887#true} is VALID [2020-07-28 19:05:32,635 INFO L280 TraceCheckUtils]: 2: Hoare triple {1887#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {1887#true} is VALID [2020-07-28 19:05:32,636 INFO L280 TraceCheckUtils]: 3: Hoare triple {1887#true} main_#t~ret13 := valid_product_#res;assume -2147483648 <= main_#t~ret13 && main_#t~ret13 <= 2147483647;main_~tmp~1 := main_#t~ret13;havoc main_#t~ret13; {1887#true} is VALID [2020-07-28 19:05:32,636 INFO L280 TraceCheckUtils]: 4: Hoare triple {1887#true} assume 0 != main_~tmp~1; {1887#true} is VALID [2020-07-28 19:05:32,636 INFO L280 TraceCheckUtils]: 5: Hoare triple {1887#true} ~switchedOnBeforeTS~0 := 0; {1887#true} is VALID [2020-07-28 19:05:32,636 INFO L280 TraceCheckUtils]: 6: Hoare triple {1887#true} havoc test_#t~nondet34, test_#t~nondet35, test_#t~nondet36, test_#t~nondet37, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~2, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~2;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {1887#true} is VALID [2020-07-28 19:05:32,637 INFO L280 TraceCheckUtils]: 7: Hoare triple {1887#true} assume !false; {1887#true} is VALID [2020-07-28 19:05:32,637 INFO L280 TraceCheckUtils]: 8: Hoare triple {1887#true} assume test_~splverifierCounter~0 < 4; {1887#true} is VALID [2020-07-28 19:05:32,637 INFO L280 TraceCheckUtils]: 9: Hoare triple {1887#true} assume -2147483648 <= test_#t~nondet34 && test_#t~nondet34 <= 2147483647;test_~tmp~5 := test_#t~nondet34;havoc test_#t~nondet34; {1887#true} is VALID [2020-07-28 19:05:32,637 INFO L280 TraceCheckUtils]: 10: Hoare triple {1887#true} assume !(0 != test_~tmp~5); {1887#true} is VALID [2020-07-28 19:05:32,638 INFO L280 TraceCheckUtils]: 11: Hoare triple {1887#true} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp___0~2 := test_#t~nondet35;havoc test_#t~nondet35; {1887#true} is VALID [2020-07-28 19:05:32,638 INFO L280 TraceCheckUtils]: 12: Hoare triple {1887#true} assume !(0 != test_~tmp___0~2); {1887#true} is VALID [2020-07-28 19:05:32,638 INFO L280 TraceCheckUtils]: 13: Hoare triple {1887#true} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___2~0 := test_#t~nondet36;havoc test_#t~nondet36; {1887#true} is VALID [2020-07-28 19:05:32,638 INFO L280 TraceCheckUtils]: 14: Hoare triple {1887#true} assume 0 != test_~tmp___2~0; {1887#true} is VALID [2020-07-28 19:05:32,638 INFO L280 TraceCheckUtils]: 15: Hoare triple {1887#true} havoc __utac_acc__Specification5_spec__2_#t~ret10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {1887#true} is VALID [2020-07-28 19:05:32,639 INFO L280 TraceCheckUtils]: 16: Hoare triple {1887#true} __utac_acc__Specification5_spec__2_#t~ret10 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret10 && __utac_acc__Specification5_spec__2_#t~ret10 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret10;havoc __utac_acc__Specification5_spec__2_#t~ret10; {1887#true} is VALID [2020-07-28 19:05:32,639 INFO L280 TraceCheckUtils]: 17: Hoare triple {1887#true} assume !(0 != ~pumpRunning~0); {1887#true} is VALID [2020-07-28 19:05:32,639 INFO L280 TraceCheckUtils]: 18: Hoare triple {1887#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {1887#true} is VALID [2020-07-28 19:05:32,639 INFO L280 TraceCheckUtils]: 19: Hoare triple {1887#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~2;havoc processEnvironment__wrappee__highWaterSensor_~tmp~2; {1887#true} is VALID [2020-07-28 19:05:32,640 INFO L280 TraceCheckUtils]: 20: Hoare triple {1887#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret33, isHighWaterLevel_~retValue_acc~6, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~6;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {1887#true} is VALID [2020-07-28 19:05:32,640 INFO L280 TraceCheckUtils]: 21: Hoare triple {1887#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~2 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {1887#true} is VALID [2020-07-28 19:05:32,640 INFO L280 TraceCheckUtils]: 22: Hoare triple {1887#true} isHighWaterLevel_#t~ret33 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret33 && isHighWaterLevel_#t~ret33 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret33;havoc isHighWaterLevel_#t~ret33; {1887#true} is VALID [2020-07-28 19:05:32,641 INFO L280 TraceCheckUtils]: 23: Hoare triple {1887#true} assume 0 != isHighWaterLevel_~tmp~4;isHighWaterLevel_~tmp___0~1 := 0; {1889#(= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1)} is VALID [2020-07-28 19:05:32,642 INFO L280 TraceCheckUtils]: 24: Hoare triple {1889#(= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1)} isHighWaterLevel_~retValue_acc~6 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~6; {1890#(= 0 |ULTIMATE.start_isHighWaterLevel_#res|)} is VALID [2020-07-28 19:05:32,646 INFO L280 TraceCheckUtils]: 25: Hoare triple {1890#(= 0 |ULTIMATE.start_isHighWaterLevel_#res|)} processEnvironment__wrappee__highWaterSensor_#t~ret14 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret14 && processEnvironment__wrappee__highWaterSensor_#t~ret14 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~2 := processEnvironment__wrappee__highWaterSensor_#t~ret14;havoc processEnvironment__wrappee__highWaterSensor_#t~ret14; {1891#(= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~2)} is VALID [2020-07-28 19:05:32,647 INFO L280 TraceCheckUtils]: 26: Hoare triple {1891#(= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~2)} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~2;~pumpRunning~0 := 1; {1888#false} is VALID [2020-07-28 19:05:32,647 INFO L280 TraceCheckUtils]: 27: Hoare triple {1888#false} havoc __utac_acc__Specification5_spec__3_#t~ret11, __utac_acc__Specification5_spec__3_#t~ret12, __utac_acc__Specification5_spec__3_~tmp~0, __utac_acc__Specification5_spec__3_~tmp___0~0;havoc __utac_acc__Specification5_spec__3_~tmp~0;havoc __utac_acc__Specification5_spec__3_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {1888#false} is VALID [2020-07-28 19:05:32,648 INFO L280 TraceCheckUtils]: 28: Hoare triple {1888#false} __utac_acc__Specification5_spec__3_#t~ret11 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret11 && __utac_acc__Specification5_spec__3_#t~ret11 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0 := __utac_acc__Specification5_spec__3_#t~ret11;havoc __utac_acc__Specification5_spec__3_#t~ret11; {1888#false} is VALID [2020-07-28 19:05:32,648 INFO L280 TraceCheckUtils]: 29: Hoare triple {1888#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {1888#false} is VALID [2020-07-28 19:05:32,648 INFO L280 TraceCheckUtils]: 30: Hoare triple {1888#false} __utac_acc__Specification5_spec__3_#t~ret12 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret12 && __utac_acc__Specification5_spec__3_#t~ret12 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0 := __utac_acc__Specification5_spec__3_#t~ret12;havoc __utac_acc__Specification5_spec__3_#t~ret12; {1888#false} is VALID [2020-07-28 19:05:32,649 INFO L280 TraceCheckUtils]: 31: Hoare triple {1888#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~0; {1888#false} is VALID [2020-07-28 19:05:32,649 INFO L280 TraceCheckUtils]: 32: Hoare triple {1888#false} assume 0 == ~switchedOnBeforeTS~0; {1888#false} is VALID [2020-07-28 19:05:32,649 INFO L280 TraceCheckUtils]: 33: Hoare triple {1888#false} assume !false; {1888#false} is VALID [2020-07-28 19:05:32,650 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:05:32,651 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1059833119] [2020-07-28 19:05:32,651 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:05:32,651 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:05:32,652 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2127620867] [2020-07-28 19:05:32,652 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 34 [2020-07-28 19:05:32,652 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:05:32,653 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:05:32,691 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 34 edges. 34 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:05:32,691 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:05:32,692 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:05:32,692 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:05:32,692 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:05:32,692 INFO L87 Difference]: Start difference. First operand 71 states and 99 transitions. Second operand 5 states. [2020-07-28 19:05:33,359 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:05:33,360 INFO L93 Difference]: Finished difference Result 190 states and 264 transitions. [2020-07-28 19:05:33,360 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2020-07-28 19:05:33,360 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 34 [2020-07-28 19:05:33,360 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:05:33,361 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:05:33,363 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 202 transitions. [2020-07-28 19:05:33,364 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:05:33,366 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 202 transitions. [2020-07-28 19:05:33,366 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states and 202 transitions. [2020-07-28 19:05:33,656 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 202 edges. 202 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:05:33,659 INFO L225 Difference]: With dead ends: 190 [2020-07-28 19:05:33,659 INFO L226 Difference]: Without dead ends: 126 [2020-07-28 19:05:33,660 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2020-07-28 19:05:33,661 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 126 states. [2020-07-28 19:05:33,758 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 126 to 77. [2020-07-28 19:05:33,758 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:05:33,758 INFO L82 GeneralOperation]: Start isEquivalent. First operand 126 states. Second operand 77 states. [2020-07-28 19:05:33,758 INFO L74 IsIncluded]: Start isIncluded. First operand 126 states. Second operand 77 states. [2020-07-28 19:05:33,758 INFO L87 Difference]: Start difference. First operand 126 states. Second operand 77 states. [2020-07-28 19:05:33,763 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:05:33,763 INFO L93 Difference]: Finished difference Result 126 states and 170 transitions. [2020-07-28 19:05:33,763 INFO L276 IsEmpty]: Start isEmpty. Operand 126 states and 170 transitions. [2020-07-28 19:05:33,763 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:05:33,764 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:05:33,764 INFO L74 IsIncluded]: Start isIncluded. First operand 77 states. Second operand 126 states. [2020-07-28 19:05:33,764 INFO L87 Difference]: Start difference. First operand 77 states. Second operand 126 states. [2020-07-28 19:05:33,768 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:05:33,768 INFO L93 Difference]: Finished difference Result 126 states and 170 transitions. [2020-07-28 19:05:33,768 INFO L276 IsEmpty]: Start isEmpty. Operand 126 states and 170 transitions. [2020-07-28 19:05:33,768 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:05:33,769 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:05:33,769 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:05:33,769 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:05:33,769 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 77 states. [2020-07-28 19:05:33,771 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 77 states to 77 states and 105 transitions. [2020-07-28 19:05:33,771 INFO L78 Accepts]: Start accepts. Automaton has 77 states and 105 transitions. Word has length 34 [2020-07-28 19:05:33,772 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:05:33,772 INFO L479 AbstractCegarLoop]: Abstraction has 77 states and 105 transitions. [2020-07-28 19:05:33,772 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:05:33,772 INFO L276 IsEmpty]: Start isEmpty. Operand 77 states and 105 transitions. [2020-07-28 19:05:33,775 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2020-07-28 19:05:33,775 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:05:33,776 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:05:33,776 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2020-07-28 19:05:33,776 INFO L427 AbstractCegarLoop]: === Iteration 6 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:05:33,776 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:05:33,776 INFO L82 PathProgramCache]: Analyzing trace with hash -988370501, now seen corresponding path program 1 times [2020-07-28 19:05:33,777 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:05:33,777 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [84588331] [2020-07-28 19:05:33,777 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:05:33,803 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:05:33,865 INFO L280 TraceCheckUtils]: 0: Hoare triple {2521#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(13);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string20.base, #t~string20.offset, 1);call write~init~int(110, #t~string20.base, 1 + #t~string20.offset, 1);call write~init~int(0, #t~string20.base, 2 + #t~string20.offset, 1);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string22.base, #t~string22.offset, 1);call write~init~int(102, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(102, #t~string22.base, 2 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 3 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string24.base, #t~string24.offset, 1);call write~init~int(80, #t~string24.base, 1 + #t~string24.offset, 1);call write~init~int(117, #t~string24.base, 2 + #t~string24.offset, 1);call write~init~int(109, #t~string24.base, 3 + #t~string24.offset, 1);call write~init~int(112, #t~string24.base, 4 + #t~string24.offset, 1);call write~init~int(58, #t~string24.base, 5 + #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 6 + #t~string24.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string26.base, #t~string26.offset, 1);call write~init~int(110, #t~string26.base, 1 + #t~string26.offset, 1);call write~init~int(0, #t~string26.base, 2 + #t~string26.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string28.base, #t~string28.offset, 1);call write~init~int(102, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(102, #t~string28.base, 2 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 3 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string30.base, #t~string30.offset, 1);call write~init~int(32, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 2 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string32.base, #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 1 + #t~string32.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(30);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(9);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(21);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(30);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(9);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {2523#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:05:33,866 INFO L280 TraceCheckUtils]: 1: Hoare triple {2523#(= 0 ~pumpRunning~0)} havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~3, main_~tmp~1;havoc main_~retValue_acc~3;havoc main_~tmp~1; {2523#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:05:33,867 INFO L280 TraceCheckUtils]: 2: Hoare triple {2523#(= 0 ~pumpRunning~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {2523#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:05:33,868 INFO L280 TraceCheckUtils]: 3: Hoare triple {2523#(= 0 ~pumpRunning~0)} main_#t~ret13 := valid_product_#res;assume -2147483648 <= main_#t~ret13 && main_#t~ret13 <= 2147483647;main_~tmp~1 := main_#t~ret13;havoc main_#t~ret13; {2523#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:05:33,868 INFO L280 TraceCheckUtils]: 4: Hoare triple {2523#(= 0 ~pumpRunning~0)} assume 0 != main_~tmp~1; {2523#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:05:33,869 INFO L280 TraceCheckUtils]: 5: Hoare triple {2523#(= 0 ~pumpRunning~0)} ~switchedOnBeforeTS~0 := 0; {2523#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:05:33,870 INFO L280 TraceCheckUtils]: 6: Hoare triple {2523#(= 0 ~pumpRunning~0)} havoc test_#t~nondet34, test_#t~nondet35, test_#t~nondet36, test_#t~nondet37, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~2, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~2;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {2523#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:05:33,870 INFO L280 TraceCheckUtils]: 7: Hoare triple {2523#(= 0 ~pumpRunning~0)} assume !false; {2523#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:05:33,871 INFO L280 TraceCheckUtils]: 8: Hoare triple {2523#(= 0 ~pumpRunning~0)} assume test_~splverifierCounter~0 < 4; {2523#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:05:33,871 INFO L280 TraceCheckUtils]: 9: Hoare triple {2523#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet34 && test_#t~nondet34 <= 2147483647;test_~tmp~5 := test_#t~nondet34;havoc test_#t~nondet34; {2523#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:05:33,872 INFO L280 TraceCheckUtils]: 10: Hoare triple {2523#(= 0 ~pumpRunning~0)} assume !(0 != test_~tmp~5); {2523#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:05:33,873 INFO L280 TraceCheckUtils]: 11: Hoare triple {2523#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp___0~2 := test_#t~nondet35;havoc test_#t~nondet35; {2523#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:05:33,873 INFO L280 TraceCheckUtils]: 12: Hoare triple {2523#(= 0 ~pumpRunning~0)} assume !(0 != test_~tmp___0~2); {2523#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:05:33,874 INFO L280 TraceCheckUtils]: 13: Hoare triple {2523#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___2~0 := test_#t~nondet36;havoc test_#t~nondet36; {2523#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:05:33,875 INFO L280 TraceCheckUtils]: 14: Hoare triple {2523#(= 0 ~pumpRunning~0)} assume 0 != test_~tmp___2~0; {2523#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:05:33,875 INFO L280 TraceCheckUtils]: 15: Hoare triple {2523#(= 0 ~pumpRunning~0)} havoc __utac_acc__Specification5_spec__2_#t~ret10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {2523#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:05:33,876 INFO L280 TraceCheckUtils]: 16: Hoare triple {2523#(= 0 ~pumpRunning~0)} __utac_acc__Specification5_spec__2_#t~ret10 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret10 && __utac_acc__Specification5_spec__2_#t~ret10 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret10;havoc __utac_acc__Specification5_spec__2_#t~ret10; {2523#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:05:33,876 INFO L280 TraceCheckUtils]: 17: Hoare triple {2523#(= 0 ~pumpRunning~0)} assume !(0 != ~pumpRunning~0); {2523#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:05:33,877 INFO L280 TraceCheckUtils]: 18: Hoare triple {2523#(= 0 ~pumpRunning~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {2523#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:05:33,878 INFO L280 TraceCheckUtils]: 19: Hoare triple {2523#(= 0 ~pumpRunning~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~2;havoc processEnvironment__wrappee__highWaterSensor_~tmp~2; {2523#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:05:33,878 INFO L280 TraceCheckUtils]: 20: Hoare triple {2523#(= 0 ~pumpRunning~0)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret33, isHighWaterLevel_~retValue_acc~6, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~6;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {2523#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:05:33,879 INFO L280 TraceCheckUtils]: 21: Hoare triple {2523#(= 0 ~pumpRunning~0)} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~2 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {2523#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:05:33,880 INFO L280 TraceCheckUtils]: 22: Hoare triple {2523#(= 0 ~pumpRunning~0)} isHighWaterLevel_#t~ret33 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret33 && isHighWaterLevel_#t~ret33 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret33;havoc isHighWaterLevel_#t~ret33; {2523#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:05:33,880 INFO L280 TraceCheckUtils]: 23: Hoare triple {2523#(= 0 ~pumpRunning~0)} assume 0 != isHighWaterLevel_~tmp~4;isHighWaterLevel_~tmp___0~1 := 0; {2523#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:05:33,881 INFO L280 TraceCheckUtils]: 24: Hoare triple {2523#(= 0 ~pumpRunning~0)} isHighWaterLevel_~retValue_acc~6 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~6; {2523#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:05:33,881 INFO L280 TraceCheckUtils]: 25: Hoare triple {2523#(= 0 ~pumpRunning~0)} processEnvironment__wrappee__highWaterSensor_#t~ret14 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret14 && processEnvironment__wrappee__highWaterSensor_#t~ret14 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~2 := processEnvironment__wrappee__highWaterSensor_#t~ret14;havoc processEnvironment__wrappee__highWaterSensor_#t~ret14; {2523#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:05:33,882 INFO L280 TraceCheckUtils]: 26: Hoare triple {2523#(= 0 ~pumpRunning~0)} assume !(0 != processEnvironment__wrappee__highWaterSensor_~tmp~2); {2523#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:05:33,883 INFO L280 TraceCheckUtils]: 27: Hoare triple {2523#(= 0 ~pumpRunning~0)} havoc __utac_acc__Specification5_spec__3_#t~ret11, __utac_acc__Specification5_spec__3_#t~ret12, __utac_acc__Specification5_spec__3_~tmp~0, __utac_acc__Specification5_spec__3_~tmp___0~0;havoc __utac_acc__Specification5_spec__3_~tmp~0;havoc __utac_acc__Specification5_spec__3_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {2523#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:05:33,883 INFO L280 TraceCheckUtils]: 28: Hoare triple {2523#(= 0 ~pumpRunning~0)} __utac_acc__Specification5_spec__3_#t~ret11 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret11 && __utac_acc__Specification5_spec__3_#t~ret11 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0 := __utac_acc__Specification5_spec__3_#t~ret11;havoc __utac_acc__Specification5_spec__3_#t~ret11; {2523#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:05:33,884 INFO L280 TraceCheckUtils]: 29: Hoare triple {2523#(= 0 ~pumpRunning~0)} assume 2 != __utac_acc__Specification5_spec__3_~tmp~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {2524#(= 0 |ULTIMATE.start_isPumpRunning_#res|)} is VALID [2020-07-28 19:05:33,885 INFO L280 TraceCheckUtils]: 30: Hoare triple {2524#(= 0 |ULTIMATE.start_isPumpRunning_#res|)} __utac_acc__Specification5_spec__3_#t~ret12 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret12 && __utac_acc__Specification5_spec__3_#t~ret12 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0 := __utac_acc__Specification5_spec__3_#t~ret12;havoc __utac_acc__Specification5_spec__3_#t~ret12; {2525#(= 0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp___0~0)} is VALID [2020-07-28 19:05:33,886 INFO L280 TraceCheckUtils]: 31: Hoare triple {2525#(= 0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp___0~0)} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~0; {2522#false} is VALID [2020-07-28 19:05:33,886 INFO L280 TraceCheckUtils]: 32: Hoare triple {2522#false} assume 0 == ~switchedOnBeforeTS~0; {2522#false} is VALID [2020-07-28 19:05:33,886 INFO L280 TraceCheckUtils]: 33: Hoare triple {2522#false} assume !false; {2522#false} is VALID [2020-07-28 19:05:33,888 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:05:33,888 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [84588331] [2020-07-28 19:05:33,889 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:05:33,889 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2020-07-28 19:05:33,889 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1882704772] [2020-07-28 19:05:33,889 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 34 [2020-07-28 19:05:33,890 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:05:33,890 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:05:33,933 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 34 edges. 34 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:05:33,933 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:05:33,934 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:05:33,934 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:05:33,934 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:05:33,934 INFO L87 Difference]: Start difference. First operand 77 states and 105 transitions. Second operand 5 states. [2020-07-28 19:05:34,779 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:05:34,780 INFO L93 Difference]: Finished difference Result 260 states and 358 transitions. [2020-07-28 19:05:34,780 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2020-07-28 19:05:34,780 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 34 [2020-07-28 19:05:34,783 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:05:34,783 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:05:34,787 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 303 transitions. [2020-07-28 19:05:34,787 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:05:34,792 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 303 transitions. [2020-07-28 19:05:34,792 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 9 states and 303 transitions. [2020-07-28 19:05:35,104 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 303 edges. 303 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:05:35,109 INFO L225 Difference]: With dead ends: 260 [2020-07-28 19:05:35,109 INFO L226 Difference]: Without dead ends: 190 [2020-07-28 19:05:35,112 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2020-07-28 19:05:35,116 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 190 states. [2020-07-28 19:05:35,215 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 190 to 76. [2020-07-28 19:05:35,216 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:05:35,216 INFO L82 GeneralOperation]: Start isEquivalent. First operand 190 states. Second operand 76 states. [2020-07-28 19:05:35,216 INFO L74 IsIncluded]: Start isIncluded. First operand 190 states. Second operand 76 states. [2020-07-28 19:05:35,216 INFO L87 Difference]: Start difference. First operand 190 states. Second operand 76 states. [2020-07-28 19:05:35,222 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:05:35,223 INFO L93 Difference]: Finished difference Result 190 states and 259 transitions. [2020-07-28 19:05:35,223 INFO L276 IsEmpty]: Start isEmpty. Operand 190 states and 259 transitions. [2020-07-28 19:05:35,223 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:05:35,223 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:05:35,224 INFO L74 IsIncluded]: Start isIncluded. First operand 76 states. Second operand 190 states. [2020-07-28 19:05:35,224 INFO L87 Difference]: Start difference. First operand 76 states. Second operand 190 states. [2020-07-28 19:05:35,230 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:05:35,230 INFO L93 Difference]: Finished difference Result 190 states and 259 transitions. [2020-07-28 19:05:35,230 INFO L276 IsEmpty]: Start isEmpty. Operand 190 states and 259 transitions. [2020-07-28 19:05:35,231 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:05:35,231 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:05:35,231 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:05:35,231 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:05:35,231 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 76 states. [2020-07-28 19:05:35,233 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 76 states to 76 states and 102 transitions. [2020-07-28 19:05:35,234 INFO L78 Accepts]: Start accepts. Automaton has 76 states and 102 transitions. Word has length 34 [2020-07-28 19:05:35,234 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:05:35,234 INFO L479 AbstractCegarLoop]: Abstraction has 76 states and 102 transitions. [2020-07-28 19:05:35,234 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:05:35,234 INFO L276 IsEmpty]: Start isEmpty. Operand 76 states and 102 transitions. [2020-07-28 19:05:35,235 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2020-07-28 19:05:35,235 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:05:35,235 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:05:35,235 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2020-07-28 19:05:35,235 INFO L427 AbstractCegarLoop]: === Iteration 7 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:05:35,236 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:05:35,236 INFO L82 PathProgramCache]: Analyzing trace with hash -1220769632, now seen corresponding path program 1 times [2020-07-28 19:05:35,236 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:05:35,236 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1581909217] [2020-07-28 19:05:35,237 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:05:35,271 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:05:35,335 INFO L280 TraceCheckUtils]: 0: Hoare triple {3380#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(13);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string20.base, #t~string20.offset, 1);call write~init~int(110, #t~string20.base, 1 + #t~string20.offset, 1);call write~init~int(0, #t~string20.base, 2 + #t~string20.offset, 1);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string22.base, #t~string22.offset, 1);call write~init~int(102, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(102, #t~string22.base, 2 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 3 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string24.base, #t~string24.offset, 1);call write~init~int(80, #t~string24.base, 1 + #t~string24.offset, 1);call write~init~int(117, #t~string24.base, 2 + #t~string24.offset, 1);call write~init~int(109, #t~string24.base, 3 + #t~string24.offset, 1);call write~init~int(112, #t~string24.base, 4 + #t~string24.offset, 1);call write~init~int(58, #t~string24.base, 5 + #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 6 + #t~string24.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string26.base, #t~string26.offset, 1);call write~init~int(110, #t~string26.base, 1 + #t~string26.offset, 1);call write~init~int(0, #t~string26.base, 2 + #t~string26.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string28.base, #t~string28.offset, 1);call write~init~int(102, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(102, #t~string28.base, 2 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 3 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string30.base, #t~string30.offset, 1);call write~init~int(32, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 2 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string32.base, #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 1 + #t~string32.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(30);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(9);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(21);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(30);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(9);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {3380#true} is VALID [2020-07-28 19:05:35,336 INFO L280 TraceCheckUtils]: 1: Hoare triple {3380#true} havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~3, main_~tmp~1;havoc main_~retValue_acc~3;havoc main_~tmp~1; {3380#true} is VALID [2020-07-28 19:05:35,336 INFO L280 TraceCheckUtils]: 2: Hoare triple {3380#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {3380#true} is VALID [2020-07-28 19:05:35,336 INFO L280 TraceCheckUtils]: 3: Hoare triple {3380#true} main_#t~ret13 := valid_product_#res;assume -2147483648 <= main_#t~ret13 && main_#t~ret13 <= 2147483647;main_~tmp~1 := main_#t~ret13;havoc main_#t~ret13; {3380#true} is VALID [2020-07-28 19:05:35,336 INFO L280 TraceCheckUtils]: 4: Hoare triple {3380#true} assume 0 != main_~tmp~1; {3380#true} is VALID [2020-07-28 19:05:35,337 INFO L280 TraceCheckUtils]: 5: Hoare triple {3380#true} ~switchedOnBeforeTS~0 := 0; {3380#true} is VALID [2020-07-28 19:05:35,337 INFO L280 TraceCheckUtils]: 6: Hoare triple {3380#true} havoc test_#t~nondet34, test_#t~nondet35, test_#t~nondet36, test_#t~nondet37, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~2, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~2;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {3380#true} is VALID [2020-07-28 19:05:35,337 INFO L280 TraceCheckUtils]: 7: Hoare triple {3380#true} assume !false; {3380#true} is VALID [2020-07-28 19:05:35,337 INFO L280 TraceCheckUtils]: 8: Hoare triple {3380#true} assume test_~splverifierCounter~0 < 4; {3380#true} is VALID [2020-07-28 19:05:35,337 INFO L280 TraceCheckUtils]: 9: Hoare triple {3380#true} assume -2147483648 <= test_#t~nondet34 && test_#t~nondet34 <= 2147483647;test_~tmp~5 := test_#t~nondet34;havoc test_#t~nondet34; {3380#true} is VALID [2020-07-28 19:05:35,338 INFO L280 TraceCheckUtils]: 10: Hoare triple {3380#true} assume !(0 != test_~tmp~5); {3380#true} is VALID [2020-07-28 19:05:35,338 INFO L280 TraceCheckUtils]: 11: Hoare triple {3380#true} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp___0~2 := test_#t~nondet35;havoc test_#t~nondet35; {3380#true} is VALID [2020-07-28 19:05:35,338 INFO L280 TraceCheckUtils]: 12: Hoare triple {3380#true} assume !(0 != test_~tmp___0~2); {3380#true} is VALID [2020-07-28 19:05:35,338 INFO L280 TraceCheckUtils]: 13: Hoare triple {3380#true} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___2~0 := test_#t~nondet36;havoc test_#t~nondet36; {3380#true} is VALID [2020-07-28 19:05:35,339 INFO L280 TraceCheckUtils]: 14: Hoare triple {3380#true} assume 0 != test_~tmp___2~0; {3380#true} is VALID [2020-07-28 19:05:35,339 INFO L280 TraceCheckUtils]: 15: Hoare triple {3380#true} havoc __utac_acc__Specification5_spec__2_#t~ret10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {3380#true} is VALID [2020-07-28 19:05:35,339 INFO L280 TraceCheckUtils]: 16: Hoare triple {3380#true} __utac_acc__Specification5_spec__2_#t~ret10 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret10 && __utac_acc__Specification5_spec__2_#t~ret10 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret10;havoc __utac_acc__Specification5_spec__2_#t~ret10; {3380#true} is VALID [2020-07-28 19:05:35,339 INFO L280 TraceCheckUtils]: 17: Hoare triple {3380#true} assume !(0 != ~pumpRunning~0); {3380#true} is VALID [2020-07-28 19:05:35,339 INFO L280 TraceCheckUtils]: 18: Hoare triple {3380#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {3380#true} is VALID [2020-07-28 19:05:35,340 INFO L280 TraceCheckUtils]: 19: Hoare triple {3380#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~2;havoc processEnvironment__wrappee__highWaterSensor_~tmp~2; {3380#true} is VALID [2020-07-28 19:05:35,340 INFO L280 TraceCheckUtils]: 20: Hoare triple {3380#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret33, isHighWaterLevel_~retValue_acc~6, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~6;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {3380#true} is VALID [2020-07-28 19:05:35,341 INFO L280 TraceCheckUtils]: 21: Hoare triple {3380#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~2 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {3382#(= 1 |ULTIMATE.start_isHighWaterSensorDry_#res|)} is VALID [2020-07-28 19:05:35,341 INFO L280 TraceCheckUtils]: 22: Hoare triple {3382#(= 1 |ULTIMATE.start_isHighWaterSensorDry_#res|)} isHighWaterLevel_#t~ret33 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret33 && isHighWaterLevel_#t~ret33 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret33;havoc isHighWaterLevel_#t~ret33; {3383#(= 1 ULTIMATE.start_isHighWaterLevel_~tmp~4)} is VALID [2020-07-28 19:05:35,342 INFO L280 TraceCheckUtils]: 23: Hoare triple {3383#(= 1 ULTIMATE.start_isHighWaterLevel_~tmp~4)} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {3381#false} is VALID [2020-07-28 19:05:35,342 INFO L280 TraceCheckUtils]: 24: Hoare triple {3381#false} isHighWaterLevel_~retValue_acc~6 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~6; {3381#false} is VALID [2020-07-28 19:05:35,342 INFO L280 TraceCheckUtils]: 25: Hoare triple {3381#false} processEnvironment__wrappee__highWaterSensor_#t~ret14 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret14 && processEnvironment__wrappee__highWaterSensor_#t~ret14 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~2 := processEnvironment__wrappee__highWaterSensor_#t~ret14;havoc processEnvironment__wrappee__highWaterSensor_#t~ret14; {3381#false} is VALID [2020-07-28 19:05:35,343 INFO L280 TraceCheckUtils]: 26: Hoare triple {3381#false} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~2;~pumpRunning~0 := 1; {3381#false} is VALID [2020-07-28 19:05:35,343 INFO L280 TraceCheckUtils]: 27: Hoare triple {3381#false} havoc __utac_acc__Specification5_spec__3_#t~ret11, __utac_acc__Specification5_spec__3_#t~ret12, __utac_acc__Specification5_spec__3_~tmp~0, __utac_acc__Specification5_spec__3_~tmp___0~0;havoc __utac_acc__Specification5_spec__3_~tmp~0;havoc __utac_acc__Specification5_spec__3_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {3381#false} is VALID [2020-07-28 19:05:35,343 INFO L280 TraceCheckUtils]: 28: Hoare triple {3381#false} __utac_acc__Specification5_spec__3_#t~ret11 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret11 && __utac_acc__Specification5_spec__3_#t~ret11 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0 := __utac_acc__Specification5_spec__3_#t~ret11;havoc __utac_acc__Specification5_spec__3_#t~ret11; {3381#false} is VALID [2020-07-28 19:05:35,343 INFO L280 TraceCheckUtils]: 29: Hoare triple {3381#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {3381#false} is VALID [2020-07-28 19:05:35,344 INFO L280 TraceCheckUtils]: 30: Hoare triple {3381#false} __utac_acc__Specification5_spec__3_#t~ret12 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret12 && __utac_acc__Specification5_spec__3_#t~ret12 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0 := __utac_acc__Specification5_spec__3_#t~ret12;havoc __utac_acc__Specification5_spec__3_#t~ret12; {3381#false} is VALID [2020-07-28 19:05:35,344 INFO L280 TraceCheckUtils]: 31: Hoare triple {3381#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~0; {3381#false} is VALID [2020-07-28 19:05:35,344 INFO L280 TraceCheckUtils]: 32: Hoare triple {3381#false} assume 0 == ~switchedOnBeforeTS~0; {3381#false} is VALID [2020-07-28 19:05:35,344 INFO L280 TraceCheckUtils]: 33: Hoare triple {3381#false} assume !false; {3381#false} is VALID [2020-07-28 19:05:35,345 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:05:35,346 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1581909217] [2020-07-28 19:05:35,346 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:05:35,346 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2020-07-28 19:05:35,346 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [210787382] [2020-07-28 19:05:35,347 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 34 [2020-07-28 19:05:35,347 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:05:35,347 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2020-07-28 19:05:35,384 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 34 edges. 34 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:05:35,384 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2020-07-28 19:05:35,384 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:05:35,385 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2020-07-28 19:05:35,385 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2020-07-28 19:05:35,385 INFO L87 Difference]: Start difference. First operand 76 states and 102 transitions. Second operand 4 states. [2020-07-28 19:05:35,971 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:05:35,972 INFO L93 Difference]: Finished difference Result 177 states and 238 transitions. [2020-07-28 19:05:35,972 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2020-07-28 19:05:35,972 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 34 [2020-07-28 19:05:35,972 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:05:35,972 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 19:05:35,974 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 170 transitions. [2020-07-28 19:05:35,974 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 19:05:35,976 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 170 transitions. [2020-07-28 19:05:35,976 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 170 transitions. [2020-07-28 19:05:36,170 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 170 edges. 170 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:05:36,171 INFO L225 Difference]: With dead ends: 177 [2020-07-28 19:05:36,171 INFO L226 Difference]: Without dead ends: 108 [2020-07-28 19:05:36,172 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:05:36,172 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 108 states. [2020-07-28 19:05:36,275 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 108 to 80. [2020-07-28 19:05:36,275 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:05:36,275 INFO L82 GeneralOperation]: Start isEquivalent. First operand 108 states. Second operand 80 states. [2020-07-28 19:05:36,276 INFO L74 IsIncluded]: Start isIncluded. First operand 108 states. Second operand 80 states. [2020-07-28 19:05:36,276 INFO L87 Difference]: Start difference. First operand 108 states. Second operand 80 states. [2020-07-28 19:05:36,279 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:05:36,279 INFO L93 Difference]: Finished difference Result 108 states and 141 transitions. [2020-07-28 19:05:36,279 INFO L276 IsEmpty]: Start isEmpty. Operand 108 states and 141 transitions. [2020-07-28 19:05:36,280 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:05:36,280 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:05:36,280 INFO L74 IsIncluded]: Start isIncluded. First operand 80 states. Second operand 108 states. [2020-07-28 19:05:36,280 INFO L87 Difference]: Start difference. First operand 80 states. Second operand 108 states. [2020-07-28 19:05:36,283 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:05:36,283 INFO L93 Difference]: Finished difference Result 108 states and 141 transitions. [2020-07-28 19:05:36,284 INFO L276 IsEmpty]: Start isEmpty. Operand 108 states and 141 transitions. [2020-07-28 19:05:36,284 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:05:36,284 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:05:36,284 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:05:36,284 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:05:36,285 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 80 states. [2020-07-28 19:05:36,287 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 80 states to 80 states and 106 transitions. [2020-07-28 19:05:36,287 INFO L78 Accepts]: Start accepts. Automaton has 80 states and 106 transitions. Word has length 34 [2020-07-28 19:05:36,287 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:05:36,288 INFO L479 AbstractCegarLoop]: Abstraction has 80 states and 106 transitions. [2020-07-28 19:05:36,288 INFO L480 AbstractCegarLoop]: Interpolant automaton has 4 states. [2020-07-28 19:05:36,288 INFO L276 IsEmpty]: Start isEmpty. Operand 80 states and 106 transitions. [2020-07-28 19:05:36,288 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2020-07-28 19:05:36,288 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:05:36,289 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:05:36,289 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2020-07-28 19:05:36,289 INFO L427 AbstractCegarLoop]: === Iteration 8 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:05:36,289 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:05:36,289 INFO L82 PathProgramCache]: Analyzing trace with hash -1807575646, now seen corresponding path program 1 times [2020-07-28 19:05:36,290 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:05:36,290 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [995862526] [2020-07-28 19:05:36,290 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:05:36,311 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:05:36,348 INFO L280 TraceCheckUtils]: 0: Hoare triple {3963#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(13);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string20.base, #t~string20.offset, 1);call write~init~int(110, #t~string20.base, 1 + #t~string20.offset, 1);call write~init~int(0, #t~string20.base, 2 + #t~string20.offset, 1);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string22.base, #t~string22.offset, 1);call write~init~int(102, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(102, #t~string22.base, 2 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 3 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string24.base, #t~string24.offset, 1);call write~init~int(80, #t~string24.base, 1 + #t~string24.offset, 1);call write~init~int(117, #t~string24.base, 2 + #t~string24.offset, 1);call write~init~int(109, #t~string24.base, 3 + #t~string24.offset, 1);call write~init~int(112, #t~string24.base, 4 + #t~string24.offset, 1);call write~init~int(58, #t~string24.base, 5 + #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 6 + #t~string24.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string26.base, #t~string26.offset, 1);call write~init~int(110, #t~string26.base, 1 + #t~string26.offset, 1);call write~init~int(0, #t~string26.base, 2 + #t~string26.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string28.base, #t~string28.offset, 1);call write~init~int(102, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(102, #t~string28.base, 2 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 3 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string30.base, #t~string30.offset, 1);call write~init~int(32, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 2 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string32.base, #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 1 + #t~string32.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(30);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(9);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(21);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(30);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(9);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {3965#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:05:36,348 INFO L280 TraceCheckUtils]: 1: Hoare triple {3965#(= 1 ~waterLevel~0)} havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~3, main_~tmp~1;havoc main_~retValue_acc~3;havoc main_~tmp~1; {3965#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:05:36,349 INFO L280 TraceCheckUtils]: 2: Hoare triple {3965#(= 1 ~waterLevel~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {3965#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:05:36,350 INFO L280 TraceCheckUtils]: 3: Hoare triple {3965#(= 1 ~waterLevel~0)} main_#t~ret13 := valid_product_#res;assume -2147483648 <= main_#t~ret13 && main_#t~ret13 <= 2147483647;main_~tmp~1 := main_#t~ret13;havoc main_#t~ret13; {3965#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:05:36,350 INFO L280 TraceCheckUtils]: 4: Hoare triple {3965#(= 1 ~waterLevel~0)} assume 0 != main_~tmp~1; {3965#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:05:36,351 INFO L280 TraceCheckUtils]: 5: Hoare triple {3965#(= 1 ~waterLevel~0)} ~switchedOnBeforeTS~0 := 0; {3965#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:05:36,352 INFO L280 TraceCheckUtils]: 6: Hoare triple {3965#(= 1 ~waterLevel~0)} havoc test_#t~nondet34, test_#t~nondet35, test_#t~nondet36, test_#t~nondet37, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~2, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~2;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {3965#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:05:36,352 INFO L280 TraceCheckUtils]: 7: Hoare triple {3965#(= 1 ~waterLevel~0)} assume !false; {3965#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:05:36,353 INFO L280 TraceCheckUtils]: 8: Hoare triple {3965#(= 1 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {3965#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:05:36,353 INFO L280 TraceCheckUtils]: 9: Hoare triple {3965#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet34 && test_#t~nondet34 <= 2147483647;test_~tmp~5 := test_#t~nondet34;havoc test_#t~nondet34; {3965#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:05:36,354 INFO L280 TraceCheckUtils]: 10: Hoare triple {3965#(= 1 ~waterLevel~0)} assume !(0 != test_~tmp~5); {3965#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:05:36,355 INFO L280 TraceCheckUtils]: 11: Hoare triple {3965#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp___0~2 := test_#t~nondet35;havoc test_#t~nondet35; {3965#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:05:36,355 INFO L280 TraceCheckUtils]: 12: Hoare triple {3965#(= 1 ~waterLevel~0)} assume !(0 != test_~tmp___0~2); {3965#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:05:36,356 INFO L280 TraceCheckUtils]: 13: Hoare triple {3965#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___2~0 := test_#t~nondet36;havoc test_#t~nondet36; {3965#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:05:36,357 INFO L280 TraceCheckUtils]: 14: Hoare triple {3965#(= 1 ~waterLevel~0)} assume 0 != test_~tmp___2~0; {3965#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:05:36,357 INFO L280 TraceCheckUtils]: 15: Hoare triple {3965#(= 1 ~waterLevel~0)} havoc __utac_acc__Specification5_spec__2_#t~ret10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {3965#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:05:36,358 INFO L280 TraceCheckUtils]: 16: Hoare triple {3965#(= 1 ~waterLevel~0)} __utac_acc__Specification5_spec__2_#t~ret10 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret10 && __utac_acc__Specification5_spec__2_#t~ret10 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret10;havoc __utac_acc__Specification5_spec__2_#t~ret10; {3965#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:05:36,358 INFO L280 TraceCheckUtils]: 17: Hoare triple {3965#(= 1 ~waterLevel~0)} assume !(0 != ~pumpRunning~0); {3965#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:05:36,359 INFO L280 TraceCheckUtils]: 18: Hoare triple {3965#(= 1 ~waterLevel~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {3965#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:05:36,360 INFO L280 TraceCheckUtils]: 19: Hoare triple {3965#(= 1 ~waterLevel~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~2;havoc processEnvironment__wrappee__highWaterSensor_~tmp~2; {3965#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:05:36,360 INFO L280 TraceCheckUtils]: 20: Hoare triple {3965#(= 1 ~waterLevel~0)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret33, isHighWaterLevel_~retValue_acc~6, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~6;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {3965#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:05:36,361 INFO L280 TraceCheckUtils]: 21: Hoare triple {3965#(= 1 ~waterLevel~0)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {3964#false} is VALID [2020-07-28 19:05:36,361 INFO L280 TraceCheckUtils]: 22: Hoare triple {3964#false} isHighWaterLevel_#t~ret33 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret33 && isHighWaterLevel_#t~ret33 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret33;havoc isHighWaterLevel_#t~ret33; {3964#false} is VALID [2020-07-28 19:05:36,362 INFO L280 TraceCheckUtils]: 23: Hoare triple {3964#false} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {3964#false} is VALID [2020-07-28 19:05:36,362 INFO L280 TraceCheckUtils]: 24: Hoare triple {3964#false} isHighWaterLevel_~retValue_acc~6 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~6; {3964#false} is VALID [2020-07-28 19:05:36,362 INFO L280 TraceCheckUtils]: 25: Hoare triple {3964#false} processEnvironment__wrappee__highWaterSensor_#t~ret14 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret14 && processEnvironment__wrappee__highWaterSensor_#t~ret14 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~2 := processEnvironment__wrappee__highWaterSensor_#t~ret14;havoc processEnvironment__wrappee__highWaterSensor_#t~ret14; {3964#false} is VALID [2020-07-28 19:05:36,362 INFO L280 TraceCheckUtils]: 26: Hoare triple {3964#false} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~2;~pumpRunning~0 := 1; {3964#false} is VALID [2020-07-28 19:05:36,363 INFO L280 TraceCheckUtils]: 27: Hoare triple {3964#false} havoc __utac_acc__Specification5_spec__3_#t~ret11, __utac_acc__Specification5_spec__3_#t~ret12, __utac_acc__Specification5_spec__3_~tmp~0, __utac_acc__Specification5_spec__3_~tmp___0~0;havoc __utac_acc__Specification5_spec__3_~tmp~0;havoc __utac_acc__Specification5_spec__3_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {3964#false} is VALID [2020-07-28 19:05:36,363 INFO L280 TraceCheckUtils]: 28: Hoare triple {3964#false} __utac_acc__Specification5_spec__3_#t~ret11 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret11 && __utac_acc__Specification5_spec__3_#t~ret11 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0 := __utac_acc__Specification5_spec__3_#t~ret11;havoc __utac_acc__Specification5_spec__3_#t~ret11; {3964#false} is VALID [2020-07-28 19:05:36,363 INFO L280 TraceCheckUtils]: 29: Hoare triple {3964#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {3964#false} is VALID [2020-07-28 19:05:36,363 INFO L280 TraceCheckUtils]: 30: Hoare triple {3964#false} __utac_acc__Specification5_spec__3_#t~ret12 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret12 && __utac_acc__Specification5_spec__3_#t~ret12 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0 := __utac_acc__Specification5_spec__3_#t~ret12;havoc __utac_acc__Specification5_spec__3_#t~ret12; {3964#false} is VALID [2020-07-28 19:05:36,364 INFO L280 TraceCheckUtils]: 31: Hoare triple {3964#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~0; {3964#false} is VALID [2020-07-28 19:05:36,364 INFO L280 TraceCheckUtils]: 32: Hoare triple {3964#false} assume 0 == ~switchedOnBeforeTS~0; {3964#false} is VALID [2020-07-28 19:05:36,364 INFO L280 TraceCheckUtils]: 33: Hoare triple {3964#false} assume !false; {3964#false} is VALID [2020-07-28 19:05:36,366 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:05:36,367 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [995862526] [2020-07-28 19:05:36,367 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:05:36,367 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2020-07-28 19:05:36,367 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1423245357] [2020-07-28 19:05:36,368 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 34 [2020-07-28 19:05:36,368 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:05:36,368 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 19:05:36,413 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 34 edges. 34 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:05:36,413 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 19:05:36,413 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:05:36,414 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 19:05:36,414 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:05:36,414 INFO L87 Difference]: Start difference. First operand 80 states and 106 transitions. Second operand 3 states. [2020-07-28 19:05:36,767 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:05:36,768 INFO L93 Difference]: Finished difference Result 181 states and 241 transitions. [2020-07-28 19:05:36,768 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 19:05:36,768 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 34 [2020-07-28 19:05:36,768 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:05:36,769 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:05:36,771 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 165 transitions. [2020-07-28 19:05:36,771 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:05:36,773 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 165 transitions. [2020-07-28 19:05:36,773 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 165 transitions. [2020-07-28 19:05:36,960 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 165 edges. 165 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:05:36,962 INFO L225 Difference]: With dead ends: 181 [2020-07-28 19:05:36,962 INFO L226 Difference]: Without dead ends: 108 [2020-07-28 19:05:36,963 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:05:36,964 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 108 states. [2020-07-28 19:05:37,095 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 108 to 108. [2020-07-28 19:05:37,096 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:05:37,096 INFO L82 GeneralOperation]: Start isEquivalent. First operand 108 states. Second operand 108 states. [2020-07-28 19:05:37,096 INFO L74 IsIncluded]: Start isIncluded. First operand 108 states. Second operand 108 states. [2020-07-28 19:05:37,096 INFO L87 Difference]: Start difference. First operand 108 states. Second operand 108 states. [2020-07-28 19:05:37,100 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:05:37,100 INFO L93 Difference]: Finished difference Result 108 states and 140 transitions. [2020-07-28 19:05:37,100 INFO L276 IsEmpty]: Start isEmpty. Operand 108 states and 140 transitions. [2020-07-28 19:05:37,100 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:05:37,100 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:05:37,101 INFO L74 IsIncluded]: Start isIncluded. First operand 108 states. Second operand 108 states. [2020-07-28 19:05:37,101 INFO L87 Difference]: Start difference. First operand 108 states. Second operand 108 states. [2020-07-28 19:05:37,104 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:05:37,104 INFO L93 Difference]: Finished difference Result 108 states and 140 transitions. [2020-07-28 19:05:37,104 INFO L276 IsEmpty]: Start isEmpty. Operand 108 states and 140 transitions. [2020-07-28 19:05:37,105 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:05:37,105 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:05:37,105 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:05:37,105 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:05:37,105 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 108 states. [2020-07-28 19:05:37,108 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 108 states to 108 states and 140 transitions. [2020-07-28 19:05:37,108 INFO L78 Accepts]: Start accepts. Automaton has 108 states and 140 transitions. Word has length 34 [2020-07-28 19:05:37,108 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:05:37,109 INFO L479 AbstractCegarLoop]: Abstraction has 108 states and 140 transitions. [2020-07-28 19:05:37,109 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 19:05:37,109 INFO L276 IsEmpty]: Start isEmpty. Operand 108 states and 140 transitions. [2020-07-28 19:05:37,109 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2020-07-28 19:05:37,112 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:05:37,113 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:05:37,113 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2020-07-28 19:05:37,113 INFO L427 AbstractCegarLoop]: === Iteration 9 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:05:37,113 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:05:37,114 INFO L82 PathProgramCache]: Analyzing trace with hash 1091445474, now seen corresponding path program 1 times [2020-07-28 19:05:37,114 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:05:37,114 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1295914978] [2020-07-28 19:05:37,115 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:05:37,137 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:05:37,236 INFO L280 TraceCheckUtils]: 0: Hoare triple {4587#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(13);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string20.base, #t~string20.offset, 1);call write~init~int(110, #t~string20.base, 1 + #t~string20.offset, 1);call write~init~int(0, #t~string20.base, 2 + #t~string20.offset, 1);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string22.base, #t~string22.offset, 1);call write~init~int(102, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(102, #t~string22.base, 2 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 3 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string24.base, #t~string24.offset, 1);call write~init~int(80, #t~string24.base, 1 + #t~string24.offset, 1);call write~init~int(117, #t~string24.base, 2 + #t~string24.offset, 1);call write~init~int(109, #t~string24.base, 3 + #t~string24.offset, 1);call write~init~int(112, #t~string24.base, 4 + #t~string24.offset, 1);call write~init~int(58, #t~string24.base, 5 + #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 6 + #t~string24.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string26.base, #t~string26.offset, 1);call write~init~int(110, #t~string26.base, 1 + #t~string26.offset, 1);call write~init~int(0, #t~string26.base, 2 + #t~string26.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string28.base, #t~string28.offset, 1);call write~init~int(102, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(102, #t~string28.base, 2 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 3 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string30.base, #t~string30.offset, 1);call write~init~int(32, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 2 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string32.base, #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 1 + #t~string32.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(30);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(9);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(21);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(30);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(9);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {4589#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:05:37,237 INFO L280 TraceCheckUtils]: 1: Hoare triple {4589#(= 1 ~waterLevel~0)} havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~3, main_~tmp~1;havoc main_~retValue_acc~3;havoc main_~tmp~1; {4589#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:05:37,238 INFO L280 TraceCheckUtils]: 2: Hoare triple {4589#(= 1 ~waterLevel~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {4589#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:05:37,238 INFO L280 TraceCheckUtils]: 3: Hoare triple {4589#(= 1 ~waterLevel~0)} main_#t~ret13 := valid_product_#res;assume -2147483648 <= main_#t~ret13 && main_#t~ret13 <= 2147483647;main_~tmp~1 := main_#t~ret13;havoc main_#t~ret13; {4589#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:05:37,239 INFO L280 TraceCheckUtils]: 4: Hoare triple {4589#(= 1 ~waterLevel~0)} assume 0 != main_~tmp~1; {4589#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:05:37,239 INFO L280 TraceCheckUtils]: 5: Hoare triple {4589#(= 1 ~waterLevel~0)} ~switchedOnBeforeTS~0 := 0; {4589#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:05:37,240 INFO L280 TraceCheckUtils]: 6: Hoare triple {4589#(= 1 ~waterLevel~0)} havoc test_#t~nondet34, test_#t~nondet35, test_#t~nondet36, test_#t~nondet37, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~2, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~2;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {4589#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:05:37,241 INFO L280 TraceCheckUtils]: 7: Hoare triple {4589#(= 1 ~waterLevel~0)} assume !false; {4589#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:05:37,241 INFO L280 TraceCheckUtils]: 8: Hoare triple {4589#(= 1 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {4589#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:05:37,242 INFO L280 TraceCheckUtils]: 9: Hoare triple {4589#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet34 && test_#t~nondet34 <= 2147483647;test_~tmp~5 := test_#t~nondet34;havoc test_#t~nondet34; {4589#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:05:37,243 INFO L280 TraceCheckUtils]: 10: Hoare triple {4589#(= 1 ~waterLevel~0)} assume 0 != test_~tmp~5; {4589#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:05:37,243 INFO L280 TraceCheckUtils]: 11: Hoare triple {4589#(= 1 ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {4590#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:05:37,244 INFO L280 TraceCheckUtils]: 12: Hoare triple {4590#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp___0~2 := test_#t~nondet35;havoc test_#t~nondet35; {4590#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:05:37,245 INFO L280 TraceCheckUtils]: 13: Hoare triple {4590#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(0 != test_~tmp___0~2); {4590#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:05:37,246 INFO L280 TraceCheckUtils]: 14: Hoare triple {4590#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___2~0 := test_#t~nondet36;havoc test_#t~nondet36; {4590#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:05:37,246 INFO L280 TraceCheckUtils]: 15: Hoare triple {4590#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume 0 != test_~tmp___2~0; {4590#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:05:37,247 INFO L280 TraceCheckUtils]: 16: Hoare triple {4590#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} havoc __utac_acc__Specification5_spec__2_#t~ret10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {4590#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:05:37,248 INFO L280 TraceCheckUtils]: 17: Hoare triple {4590#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} __utac_acc__Specification5_spec__2_#t~ret10 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret10 && __utac_acc__Specification5_spec__2_#t~ret10 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret10;havoc __utac_acc__Specification5_spec__2_#t~ret10; {4590#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:05:37,249 INFO L280 TraceCheckUtils]: 18: Hoare triple {4590#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(0 != ~pumpRunning~0); {4590#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:05:37,249 INFO L280 TraceCheckUtils]: 19: Hoare triple {4590#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {4590#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:05:37,250 INFO L280 TraceCheckUtils]: 20: Hoare triple {4590#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~2;havoc processEnvironment__wrappee__highWaterSensor_~tmp~2; {4590#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:05:37,251 INFO L280 TraceCheckUtils]: 21: Hoare triple {4590#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret33, isHighWaterLevel_~retValue_acc~6, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~6;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {4590#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:05:37,251 INFO L280 TraceCheckUtils]: 22: Hoare triple {4590#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {4590#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:05:37,252 INFO L280 TraceCheckUtils]: 23: Hoare triple {4590#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} isHighWaterLevel_#t~ret33 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret33 && isHighWaterLevel_#t~ret33 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret33;havoc isHighWaterLevel_#t~ret33; {4590#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:05:37,253 INFO L280 TraceCheckUtils]: 24: Hoare triple {4590#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {4590#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:05:37,254 INFO L280 TraceCheckUtils]: 25: Hoare triple {4590#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} isHighWaterLevel_~retValue_acc~6 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~6; {4590#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:05:37,255 INFO L280 TraceCheckUtils]: 26: Hoare triple {4590#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} processEnvironment__wrappee__highWaterSensor_#t~ret14 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret14 && processEnvironment__wrappee__highWaterSensor_#t~ret14 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~2 := processEnvironment__wrappee__highWaterSensor_#t~ret14;havoc processEnvironment__wrappee__highWaterSensor_#t~ret14; {4590#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:05:37,256 INFO L280 TraceCheckUtils]: 27: Hoare triple {4590#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~2;~pumpRunning~0 := 1; {4590#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:05:37,256 INFO L280 TraceCheckUtils]: 28: Hoare triple {4590#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} havoc __utac_acc__Specification5_spec__3_#t~ret11, __utac_acc__Specification5_spec__3_#t~ret12, __utac_acc__Specification5_spec__3_~tmp~0, __utac_acc__Specification5_spec__3_~tmp___0~0;havoc __utac_acc__Specification5_spec__3_~tmp~0;havoc __utac_acc__Specification5_spec__3_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {4591#(and (<= |ULTIMATE.start_getWaterLevel_#res| 2) (<= 2 |ULTIMATE.start_getWaterLevel_#res|))} is VALID [2020-07-28 19:05:37,257 INFO L280 TraceCheckUtils]: 29: Hoare triple {4591#(and (<= |ULTIMATE.start_getWaterLevel_#res| 2) (<= 2 |ULTIMATE.start_getWaterLevel_#res|))} __utac_acc__Specification5_spec__3_#t~ret11 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret11 && __utac_acc__Specification5_spec__3_#t~ret11 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0 := __utac_acc__Specification5_spec__3_#t~ret11;havoc __utac_acc__Specification5_spec__3_#t~ret11; {4592#(and (< 1 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~0) (<= ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~0 2))} is VALID [2020-07-28 19:05:37,258 INFO L280 TraceCheckUtils]: 30: Hoare triple {4592#(and (< 1 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~0) (<= ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~0 2))} assume 2 != __utac_acc__Specification5_spec__3_~tmp~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {4588#false} is VALID [2020-07-28 19:05:37,258 INFO L280 TraceCheckUtils]: 31: Hoare triple {4588#false} __utac_acc__Specification5_spec__3_#t~ret12 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret12 && __utac_acc__Specification5_spec__3_#t~ret12 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0 := __utac_acc__Specification5_spec__3_#t~ret12;havoc __utac_acc__Specification5_spec__3_#t~ret12; {4588#false} is VALID [2020-07-28 19:05:37,259 INFO L280 TraceCheckUtils]: 32: Hoare triple {4588#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~0; {4588#false} is VALID [2020-07-28 19:05:37,259 INFO L280 TraceCheckUtils]: 33: Hoare triple {4588#false} assume 0 == ~switchedOnBeforeTS~0; {4588#false} is VALID [2020-07-28 19:05:37,259 INFO L280 TraceCheckUtils]: 34: Hoare triple {4588#false} assume !false; {4588#false} is VALID [2020-07-28 19:05:37,262 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:05:37,262 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1295914978] [2020-07-28 19:05:37,262 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:05:37,262 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:05:37,263 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [846807856] [2020-07-28 19:05:37,263 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 35 [2020-07-28 19:05:37,263 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:05:37,264 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states. [2020-07-28 19:05:37,308 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 35 edges. 35 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:05:37,308 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2020-07-28 19:05:37,308 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:05:37,308 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2020-07-28 19:05:37,309 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2020-07-28 19:05:37,309 INFO L87 Difference]: Start difference. First operand 108 states and 140 transitions. Second operand 6 states. [2020-07-28 19:05:39,099 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:05:39,099 INFO L93 Difference]: Finished difference Result 516 states and 693 transitions. [2020-07-28 19:05:39,099 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2020-07-28 19:05:39,099 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 35 [2020-07-28 19:05:39,100 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:05:39,100 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 19:05:39,105 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 408 transitions. [2020-07-28 19:05:39,105 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 19:05:39,111 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 408 transitions. [2020-07-28 19:05:39,111 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 10 states and 408 transitions. [2020-07-28 19:05:39,570 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 408 edges. 408 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:05:39,587 INFO L225 Difference]: With dead ends: 516 [2020-07-28 19:05:39,588 INFO L226 Difference]: Without dead ends: 443 [2020-07-28 19:05:39,589 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=34, Invalid=76, Unknown=0, NotChecked=0, Total=110 [2020-07-28 19:05:39,590 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 443 states. [2020-07-28 19:05:39,941 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 443 to 188. [2020-07-28 19:05:39,941 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:05:39,941 INFO L82 GeneralOperation]: Start isEquivalent. First operand 443 states. Second operand 188 states. [2020-07-28 19:05:39,941 INFO L74 IsIncluded]: Start isIncluded. First operand 443 states. Second operand 188 states. [2020-07-28 19:05:39,941 INFO L87 Difference]: Start difference. First operand 443 states. Second operand 188 states. [2020-07-28 19:05:39,965 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:05:39,966 INFO L93 Difference]: Finished difference Result 443 states and 572 transitions. [2020-07-28 19:05:39,966 INFO L276 IsEmpty]: Start isEmpty. Operand 443 states and 572 transitions. [2020-07-28 19:05:39,967 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:05:39,968 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:05:39,968 INFO L74 IsIncluded]: Start isIncluded. First operand 188 states. Second operand 443 states. [2020-07-28 19:05:39,968 INFO L87 Difference]: Start difference. First operand 188 states. Second operand 443 states. [2020-07-28 19:05:39,983 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:05:39,984 INFO L93 Difference]: Finished difference Result 443 states and 572 transitions. [2020-07-28 19:05:39,984 INFO L276 IsEmpty]: Start isEmpty. Operand 443 states and 572 transitions. [2020-07-28 19:05:39,986 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:05:39,986 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:05:39,986 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:05:39,987 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:05:39,987 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 188 states. [2020-07-28 19:05:39,994 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 188 states to 188 states and 245 transitions. [2020-07-28 19:05:39,994 INFO L78 Accepts]: Start accepts. Automaton has 188 states and 245 transitions. Word has length 35 [2020-07-28 19:05:39,995 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:05:39,995 INFO L479 AbstractCegarLoop]: Abstraction has 188 states and 245 transitions. [2020-07-28 19:05:39,995 INFO L480 AbstractCegarLoop]: Interpolant automaton has 6 states. [2020-07-28 19:05:39,996 INFO L276 IsEmpty]: Start isEmpty. Operand 188 states and 245 transitions. [2020-07-28 19:05:39,997 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2020-07-28 19:05:39,998 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:05:39,998 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:05:39,999 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2020-07-28 19:05:39,999 INFO L427 AbstractCegarLoop]: === Iteration 10 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:05:39,999 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:05:40,000 INFO L82 PathProgramCache]: Analyzing trace with hash -365209503, now seen corresponding path program 1 times [2020-07-28 19:05:40,000 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:05:40,000 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [965251201] [2020-07-28 19:05:40,001 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:05:40,038 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:05:40,112 INFO L280 TraceCheckUtils]: 0: Hoare triple {6472#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(13);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string20.base, #t~string20.offset, 1);call write~init~int(110, #t~string20.base, 1 + #t~string20.offset, 1);call write~init~int(0, #t~string20.base, 2 + #t~string20.offset, 1);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string22.base, #t~string22.offset, 1);call write~init~int(102, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(102, #t~string22.base, 2 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 3 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string24.base, #t~string24.offset, 1);call write~init~int(80, #t~string24.base, 1 + #t~string24.offset, 1);call write~init~int(117, #t~string24.base, 2 + #t~string24.offset, 1);call write~init~int(109, #t~string24.base, 3 + #t~string24.offset, 1);call write~init~int(112, #t~string24.base, 4 + #t~string24.offset, 1);call write~init~int(58, #t~string24.base, 5 + #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 6 + #t~string24.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string26.base, #t~string26.offset, 1);call write~init~int(110, #t~string26.base, 1 + #t~string26.offset, 1);call write~init~int(0, #t~string26.base, 2 + #t~string26.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string28.base, #t~string28.offset, 1);call write~init~int(102, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(102, #t~string28.base, 2 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 3 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string30.base, #t~string30.offset, 1);call write~init~int(32, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 2 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string32.base, #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 1 + #t~string32.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(30);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(9);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(21);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(30);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(9);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {6472#true} is VALID [2020-07-28 19:05:40,112 INFO L280 TraceCheckUtils]: 1: Hoare triple {6472#true} havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~3, main_~tmp~1;havoc main_~retValue_acc~3;havoc main_~tmp~1; {6472#true} is VALID [2020-07-28 19:05:40,113 INFO L280 TraceCheckUtils]: 2: Hoare triple {6472#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {6472#true} is VALID [2020-07-28 19:05:40,113 INFO L280 TraceCheckUtils]: 3: Hoare triple {6472#true} main_#t~ret13 := valid_product_#res;assume -2147483648 <= main_#t~ret13 && main_#t~ret13 <= 2147483647;main_~tmp~1 := main_#t~ret13;havoc main_#t~ret13; {6472#true} is VALID [2020-07-28 19:05:40,113 INFO L280 TraceCheckUtils]: 4: Hoare triple {6472#true} assume 0 != main_~tmp~1; {6472#true} is VALID [2020-07-28 19:05:40,114 INFO L280 TraceCheckUtils]: 5: Hoare triple {6472#true} ~switchedOnBeforeTS~0 := 0; {6472#true} is VALID [2020-07-28 19:05:40,114 INFO L280 TraceCheckUtils]: 6: Hoare triple {6472#true} havoc test_#t~nondet34, test_#t~nondet35, test_#t~nondet36, test_#t~nondet37, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~2, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~2;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {6472#true} is VALID [2020-07-28 19:05:40,114 INFO L280 TraceCheckUtils]: 7: Hoare triple {6472#true} assume !false; {6472#true} is VALID [2020-07-28 19:05:40,115 INFO L280 TraceCheckUtils]: 8: Hoare triple {6472#true} assume test_~splverifierCounter~0 < 4; {6472#true} is VALID [2020-07-28 19:05:40,115 INFO L280 TraceCheckUtils]: 9: Hoare triple {6472#true} assume -2147483648 <= test_#t~nondet34 && test_#t~nondet34 <= 2147483647;test_~tmp~5 := test_#t~nondet34;havoc test_#t~nondet34; {6472#true} is VALID [2020-07-28 19:05:40,120 INFO L280 TraceCheckUtils]: 10: Hoare triple {6472#true} assume 0 != test_~tmp~5; {6472#true} is VALID [2020-07-28 19:05:40,121 INFO L280 TraceCheckUtils]: 11: Hoare triple {6472#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {6472#true} is VALID [2020-07-28 19:05:40,121 INFO L280 TraceCheckUtils]: 12: Hoare triple {6472#true} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp___0~2 := test_#t~nondet35;havoc test_#t~nondet35; {6472#true} is VALID [2020-07-28 19:05:40,121 INFO L280 TraceCheckUtils]: 13: Hoare triple {6472#true} assume !(0 != test_~tmp___0~2); {6472#true} is VALID [2020-07-28 19:05:40,122 INFO L280 TraceCheckUtils]: 14: Hoare triple {6472#true} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___2~0 := test_#t~nondet36;havoc test_#t~nondet36; {6472#true} is VALID [2020-07-28 19:05:40,122 INFO L280 TraceCheckUtils]: 15: Hoare triple {6472#true} assume 0 != test_~tmp___2~0; {6472#true} is VALID [2020-07-28 19:05:40,126 INFO L280 TraceCheckUtils]: 16: Hoare triple {6472#true} havoc __utac_acc__Specification5_spec__2_#t~ret10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {6472#true} is VALID [2020-07-28 19:05:40,126 INFO L280 TraceCheckUtils]: 17: Hoare triple {6472#true} __utac_acc__Specification5_spec__2_#t~ret10 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret10 && __utac_acc__Specification5_spec__2_#t~ret10 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret10;havoc __utac_acc__Specification5_spec__2_#t~ret10; {6472#true} is VALID [2020-07-28 19:05:40,126 INFO L280 TraceCheckUtils]: 18: Hoare triple {6472#true} assume !(0 != ~pumpRunning~0); {6472#true} is VALID [2020-07-28 19:05:40,127 INFO L280 TraceCheckUtils]: 19: Hoare triple {6472#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {6472#true} is VALID [2020-07-28 19:05:40,128 INFO L280 TraceCheckUtils]: 20: Hoare triple {6472#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~2;havoc processEnvironment__wrappee__highWaterSensor_~tmp~2; {6472#true} is VALID [2020-07-28 19:05:40,129 INFO L280 TraceCheckUtils]: 21: Hoare triple {6472#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret33, isHighWaterLevel_~retValue_acc~6, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~6;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {6472#true} is VALID [2020-07-28 19:05:40,129 INFO L280 TraceCheckUtils]: 22: Hoare triple {6472#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {6472#true} is VALID [2020-07-28 19:05:40,130 INFO L280 TraceCheckUtils]: 23: Hoare triple {6472#true} isHighWaterLevel_#t~ret33 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret33 && isHighWaterLevel_#t~ret33 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret33;havoc isHighWaterLevel_#t~ret33; {6472#true} is VALID [2020-07-28 19:05:40,131 INFO L280 TraceCheckUtils]: 24: Hoare triple {6472#true} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {6472#true} is VALID [2020-07-28 19:05:40,131 INFO L280 TraceCheckUtils]: 25: Hoare triple {6472#true} isHighWaterLevel_~retValue_acc~6 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~6; {6472#true} is VALID [2020-07-28 19:05:40,131 INFO L280 TraceCheckUtils]: 26: Hoare triple {6472#true} processEnvironment__wrappee__highWaterSensor_#t~ret14 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret14 && processEnvironment__wrappee__highWaterSensor_#t~ret14 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~2 := processEnvironment__wrappee__highWaterSensor_#t~ret14;havoc processEnvironment__wrappee__highWaterSensor_#t~ret14; {6472#true} is VALID [2020-07-28 19:05:40,133 INFO L280 TraceCheckUtils]: 27: Hoare triple {6472#true} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~2;~pumpRunning~0 := 1; {6474#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:05:40,134 INFO L280 TraceCheckUtils]: 28: Hoare triple {6474#(= 1 ~pumpRunning~0)} havoc __utac_acc__Specification5_spec__3_#t~ret11, __utac_acc__Specification5_spec__3_#t~ret12, __utac_acc__Specification5_spec__3_~tmp~0, __utac_acc__Specification5_spec__3_~tmp___0~0;havoc __utac_acc__Specification5_spec__3_~tmp~0;havoc __utac_acc__Specification5_spec__3_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {6474#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:05:40,135 INFO L280 TraceCheckUtils]: 29: Hoare triple {6474#(= 1 ~pumpRunning~0)} __utac_acc__Specification5_spec__3_#t~ret11 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret11 && __utac_acc__Specification5_spec__3_#t~ret11 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0 := __utac_acc__Specification5_spec__3_#t~ret11;havoc __utac_acc__Specification5_spec__3_#t~ret11; {6474#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:05:40,136 INFO L280 TraceCheckUtils]: 30: Hoare triple {6474#(= 1 ~pumpRunning~0)} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~0); {6474#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:05:40,136 INFO L280 TraceCheckUtils]: 31: Hoare triple {6474#(= 1 ~pumpRunning~0)} assume !false; {6474#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:05:40,137 INFO L280 TraceCheckUtils]: 32: Hoare triple {6474#(= 1 ~pumpRunning~0)} assume test_~splverifierCounter~0 < 4; {6474#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:05:40,138 INFO L280 TraceCheckUtils]: 33: Hoare triple {6474#(= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet34 && test_#t~nondet34 <= 2147483647;test_~tmp~5 := test_#t~nondet34;havoc test_#t~nondet34; {6474#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:05:40,139 INFO L280 TraceCheckUtils]: 34: Hoare triple {6474#(= 1 ~pumpRunning~0)} assume !(0 != test_~tmp~5); {6474#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:05:40,140 INFO L280 TraceCheckUtils]: 35: Hoare triple {6474#(= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp___0~2 := test_#t~nondet35;havoc test_#t~nondet35; {6474#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:05:40,141 INFO L280 TraceCheckUtils]: 36: Hoare triple {6474#(= 1 ~pumpRunning~0)} assume !(0 != test_~tmp___0~2); {6474#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:05:40,141 INFO L280 TraceCheckUtils]: 37: Hoare triple {6474#(= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___2~0 := test_#t~nondet36;havoc test_#t~nondet36; {6474#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:05:40,142 INFO L280 TraceCheckUtils]: 38: Hoare triple {6474#(= 1 ~pumpRunning~0)} assume 0 != test_~tmp___2~0; {6474#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:05:40,143 INFO L280 TraceCheckUtils]: 39: Hoare triple {6474#(= 1 ~pumpRunning~0)} havoc __utac_acc__Specification5_spec__2_#t~ret10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {6475#(= 1 |ULTIMATE.start_isPumpRunning_#res|)} is VALID [2020-07-28 19:05:40,144 INFO L280 TraceCheckUtils]: 40: Hoare triple {6475#(= 1 |ULTIMATE.start_isPumpRunning_#res|)} __utac_acc__Specification5_spec__2_#t~ret10 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret10 && __utac_acc__Specification5_spec__2_#t~ret10 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret10;havoc __utac_acc__Specification5_spec__2_#t~ret10; {6476#(= 1 ~switchedOnBeforeTS~0)} is VALID [2020-07-28 19:05:40,144 INFO L280 TraceCheckUtils]: 41: Hoare triple {6476#(= 1 ~switchedOnBeforeTS~0)} assume 0 != ~pumpRunning~0; {6476#(= 1 ~switchedOnBeforeTS~0)} is VALID [2020-07-28 19:05:40,145 INFO L280 TraceCheckUtils]: 42: Hoare triple {6476#(= 1 ~switchedOnBeforeTS~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {6476#(= 1 ~switchedOnBeforeTS~0)} is VALID [2020-07-28 19:05:40,146 INFO L280 TraceCheckUtils]: 43: Hoare triple {6476#(= 1 ~switchedOnBeforeTS~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {6476#(= 1 ~switchedOnBeforeTS~0)} is VALID [2020-07-28 19:05:40,146 INFO L280 TraceCheckUtils]: 44: Hoare triple {6476#(= 1 ~switchedOnBeforeTS~0)} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret16, isMethaneAlarm_~retValue_acc~4;havoc isMethaneAlarm_~retValue_acc~4;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {6476#(= 1 ~switchedOnBeforeTS~0)} is VALID [2020-07-28 19:05:40,147 INFO L280 TraceCheckUtils]: 45: Hoare triple {6476#(= 1 ~switchedOnBeforeTS~0)} isMethaneAlarm_#t~ret16 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret16 && isMethaneAlarm_#t~ret16 <= 2147483647;isMethaneAlarm_~retValue_acc~4 := isMethaneAlarm_#t~ret16;havoc isMethaneAlarm_#t~ret16;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~4; {6476#(= 1 ~switchedOnBeforeTS~0)} is VALID [2020-07-28 19:05:40,149 INFO L280 TraceCheckUtils]: 46: Hoare triple {6476#(= 1 ~switchedOnBeforeTS~0)} processEnvironment_#t~ret15 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret15 && processEnvironment_#t~ret15 <= 2147483647;processEnvironment_~tmp~3 := processEnvironment_#t~ret15;havoc processEnvironment_#t~ret15; {6476#(= 1 ~switchedOnBeforeTS~0)} is VALID [2020-07-28 19:05:40,151 INFO L280 TraceCheckUtils]: 47: Hoare triple {6476#(= 1 ~switchedOnBeforeTS~0)} assume !(0 != processEnvironment_~tmp~3);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~2;havoc processEnvironment__wrappee__highWaterSensor_~tmp~2; {6476#(= 1 ~switchedOnBeforeTS~0)} is VALID [2020-07-28 19:05:40,152 INFO L280 TraceCheckUtils]: 48: Hoare triple {6476#(= 1 ~switchedOnBeforeTS~0)} assume !(0 == ~pumpRunning~0); {6476#(= 1 ~switchedOnBeforeTS~0)} is VALID [2020-07-28 19:05:40,153 INFO L280 TraceCheckUtils]: 49: Hoare triple {6476#(= 1 ~switchedOnBeforeTS~0)} havoc __utac_acc__Specification5_spec__3_#t~ret11, __utac_acc__Specification5_spec__3_#t~ret12, __utac_acc__Specification5_spec__3_~tmp~0, __utac_acc__Specification5_spec__3_~tmp___0~0;havoc __utac_acc__Specification5_spec__3_~tmp~0;havoc __utac_acc__Specification5_spec__3_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {6476#(= 1 ~switchedOnBeforeTS~0)} is VALID [2020-07-28 19:05:40,154 INFO L280 TraceCheckUtils]: 50: Hoare triple {6476#(= 1 ~switchedOnBeforeTS~0)} __utac_acc__Specification5_spec__3_#t~ret11 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret11 && __utac_acc__Specification5_spec__3_#t~ret11 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0 := __utac_acc__Specification5_spec__3_#t~ret11;havoc __utac_acc__Specification5_spec__3_#t~ret11; {6476#(= 1 ~switchedOnBeforeTS~0)} is VALID [2020-07-28 19:05:40,155 INFO L280 TraceCheckUtils]: 51: Hoare triple {6476#(= 1 ~switchedOnBeforeTS~0)} assume 2 != __utac_acc__Specification5_spec__3_~tmp~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {6476#(= 1 ~switchedOnBeforeTS~0)} is VALID [2020-07-28 19:05:40,155 INFO L280 TraceCheckUtils]: 52: Hoare triple {6476#(= 1 ~switchedOnBeforeTS~0)} __utac_acc__Specification5_spec__3_#t~ret12 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret12 && __utac_acc__Specification5_spec__3_#t~ret12 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0 := __utac_acc__Specification5_spec__3_#t~ret12;havoc __utac_acc__Specification5_spec__3_#t~ret12; {6476#(= 1 ~switchedOnBeforeTS~0)} is VALID [2020-07-28 19:05:40,156 INFO L280 TraceCheckUtils]: 53: Hoare triple {6476#(= 1 ~switchedOnBeforeTS~0)} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~0; {6476#(= 1 ~switchedOnBeforeTS~0)} is VALID [2020-07-28 19:05:40,157 INFO L280 TraceCheckUtils]: 54: Hoare triple {6476#(= 1 ~switchedOnBeforeTS~0)} assume 0 == ~switchedOnBeforeTS~0; {6473#false} is VALID [2020-07-28 19:05:40,157 INFO L280 TraceCheckUtils]: 55: Hoare triple {6473#false} assume !false; {6473#false} is VALID [2020-07-28 19:05:40,165 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 13 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:05:40,165 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [965251201] [2020-07-28 19:05:40,166 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1306702771] [2020-07-28 19:05:40,166 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 2 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2020-07-28 19:05:40,299 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:05:40,302 INFO L263 TraceCheckSpWp]: Trace formula consists of 416 conjuncts, 5 conjunts are in the unsatisfiable core [2020-07-28 19:05:40,325 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:05:40,332 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2020-07-28 19:05:40,529 INFO L280 TraceCheckUtils]: 0: Hoare triple {6472#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(13);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string20.base, #t~string20.offset, 1);call write~init~int(110, #t~string20.base, 1 + #t~string20.offset, 1);call write~init~int(0, #t~string20.base, 2 + #t~string20.offset, 1);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string22.base, #t~string22.offset, 1);call write~init~int(102, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(102, #t~string22.base, 2 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 3 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string24.base, #t~string24.offset, 1);call write~init~int(80, #t~string24.base, 1 + #t~string24.offset, 1);call write~init~int(117, #t~string24.base, 2 + #t~string24.offset, 1);call write~init~int(109, #t~string24.base, 3 + #t~string24.offset, 1);call write~init~int(112, #t~string24.base, 4 + #t~string24.offset, 1);call write~init~int(58, #t~string24.base, 5 + #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 6 + #t~string24.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string26.base, #t~string26.offset, 1);call write~init~int(110, #t~string26.base, 1 + #t~string26.offset, 1);call write~init~int(0, #t~string26.base, 2 + #t~string26.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string28.base, #t~string28.offset, 1);call write~init~int(102, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(102, #t~string28.base, 2 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 3 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string30.base, #t~string30.offset, 1);call write~init~int(32, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 2 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string32.base, #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 1 + #t~string32.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(30);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(9);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(21);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(30);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(9);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {6472#true} is VALID [2020-07-28 19:05:40,529 INFO L280 TraceCheckUtils]: 1: Hoare triple {6472#true} havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~3, main_~tmp~1;havoc main_~retValue_acc~3;havoc main_~tmp~1; {6472#true} is VALID [2020-07-28 19:05:40,529 INFO L280 TraceCheckUtils]: 2: Hoare triple {6472#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {6472#true} is VALID [2020-07-28 19:05:40,529 INFO L280 TraceCheckUtils]: 3: Hoare triple {6472#true} main_#t~ret13 := valid_product_#res;assume -2147483648 <= main_#t~ret13 && main_#t~ret13 <= 2147483647;main_~tmp~1 := main_#t~ret13;havoc main_#t~ret13; {6472#true} is VALID [2020-07-28 19:05:40,530 INFO L280 TraceCheckUtils]: 4: Hoare triple {6472#true} assume 0 != main_~tmp~1; {6472#true} is VALID [2020-07-28 19:05:40,530 INFO L280 TraceCheckUtils]: 5: Hoare triple {6472#true} ~switchedOnBeforeTS~0 := 0; {6472#true} is VALID [2020-07-28 19:05:40,530 INFO L280 TraceCheckUtils]: 6: Hoare triple {6472#true} havoc test_#t~nondet34, test_#t~nondet35, test_#t~nondet36, test_#t~nondet37, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~2, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~2;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {6472#true} is VALID [2020-07-28 19:05:40,530 INFO L280 TraceCheckUtils]: 7: Hoare triple {6472#true} assume !false; {6472#true} is VALID [2020-07-28 19:05:40,530 INFO L280 TraceCheckUtils]: 8: Hoare triple {6472#true} assume test_~splverifierCounter~0 < 4; {6472#true} is VALID [2020-07-28 19:05:40,531 INFO L280 TraceCheckUtils]: 9: Hoare triple {6472#true} assume -2147483648 <= test_#t~nondet34 && test_#t~nondet34 <= 2147483647;test_~tmp~5 := test_#t~nondet34;havoc test_#t~nondet34; {6472#true} is VALID [2020-07-28 19:05:40,531 INFO L280 TraceCheckUtils]: 10: Hoare triple {6472#true} assume 0 != test_~tmp~5; {6472#true} is VALID [2020-07-28 19:05:40,531 INFO L280 TraceCheckUtils]: 11: Hoare triple {6472#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {6472#true} is VALID [2020-07-28 19:05:40,531 INFO L280 TraceCheckUtils]: 12: Hoare triple {6472#true} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp___0~2 := test_#t~nondet35;havoc test_#t~nondet35; {6472#true} is VALID [2020-07-28 19:05:40,531 INFO L280 TraceCheckUtils]: 13: Hoare triple {6472#true} assume !(0 != test_~tmp___0~2); {6472#true} is VALID [2020-07-28 19:05:40,531 INFO L280 TraceCheckUtils]: 14: Hoare triple {6472#true} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___2~0 := test_#t~nondet36;havoc test_#t~nondet36; {6472#true} is VALID [2020-07-28 19:05:40,532 INFO L280 TraceCheckUtils]: 15: Hoare triple {6472#true} assume 0 != test_~tmp___2~0; {6472#true} is VALID [2020-07-28 19:05:40,532 INFO L280 TraceCheckUtils]: 16: Hoare triple {6472#true} havoc __utac_acc__Specification5_spec__2_#t~ret10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {6472#true} is VALID [2020-07-28 19:05:40,532 INFO L280 TraceCheckUtils]: 17: Hoare triple {6472#true} __utac_acc__Specification5_spec__2_#t~ret10 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret10 && __utac_acc__Specification5_spec__2_#t~ret10 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret10;havoc __utac_acc__Specification5_spec__2_#t~ret10; {6472#true} is VALID [2020-07-28 19:05:40,532 INFO L280 TraceCheckUtils]: 18: Hoare triple {6472#true} assume !(0 != ~pumpRunning~0); {6472#true} is VALID [2020-07-28 19:05:40,532 INFO L280 TraceCheckUtils]: 19: Hoare triple {6472#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {6472#true} is VALID [2020-07-28 19:05:40,533 INFO L280 TraceCheckUtils]: 20: Hoare triple {6472#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~2;havoc processEnvironment__wrappee__highWaterSensor_~tmp~2; {6472#true} is VALID [2020-07-28 19:05:40,533 INFO L280 TraceCheckUtils]: 21: Hoare triple {6472#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret33, isHighWaterLevel_~retValue_acc~6, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~6;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {6472#true} is VALID [2020-07-28 19:05:40,533 INFO L280 TraceCheckUtils]: 22: Hoare triple {6472#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {6472#true} is VALID [2020-07-28 19:05:40,533 INFO L280 TraceCheckUtils]: 23: Hoare triple {6472#true} isHighWaterLevel_#t~ret33 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret33 && isHighWaterLevel_#t~ret33 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret33;havoc isHighWaterLevel_#t~ret33; {6472#true} is VALID [2020-07-28 19:05:40,534 INFO L280 TraceCheckUtils]: 24: Hoare triple {6472#true} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {6472#true} is VALID [2020-07-28 19:05:40,534 INFO L280 TraceCheckUtils]: 25: Hoare triple {6472#true} isHighWaterLevel_~retValue_acc~6 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~6; {6472#true} is VALID [2020-07-28 19:05:40,534 INFO L280 TraceCheckUtils]: 26: Hoare triple {6472#true} processEnvironment__wrappee__highWaterSensor_#t~ret14 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret14 && processEnvironment__wrappee__highWaterSensor_#t~ret14 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~2 := processEnvironment__wrappee__highWaterSensor_#t~ret14;havoc processEnvironment__wrappee__highWaterSensor_#t~ret14; {6472#true} is VALID [2020-07-28 19:05:40,535 INFO L280 TraceCheckUtils]: 27: Hoare triple {6472#true} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~2;~pumpRunning~0 := 1; {6561#(<= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:05:40,535 INFO L280 TraceCheckUtils]: 28: Hoare triple {6561#(<= 1 ~pumpRunning~0)} havoc __utac_acc__Specification5_spec__3_#t~ret11, __utac_acc__Specification5_spec__3_#t~ret12, __utac_acc__Specification5_spec__3_~tmp~0, __utac_acc__Specification5_spec__3_~tmp___0~0;havoc __utac_acc__Specification5_spec__3_~tmp~0;havoc __utac_acc__Specification5_spec__3_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {6561#(<= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:05:40,536 INFO L280 TraceCheckUtils]: 29: Hoare triple {6561#(<= 1 ~pumpRunning~0)} __utac_acc__Specification5_spec__3_#t~ret11 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret11 && __utac_acc__Specification5_spec__3_#t~ret11 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0 := __utac_acc__Specification5_spec__3_#t~ret11;havoc __utac_acc__Specification5_spec__3_#t~ret11; {6561#(<= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:05:40,536 INFO L280 TraceCheckUtils]: 30: Hoare triple {6561#(<= 1 ~pumpRunning~0)} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~0); {6561#(<= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:05:40,537 INFO L280 TraceCheckUtils]: 31: Hoare triple {6561#(<= 1 ~pumpRunning~0)} assume !false; {6561#(<= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:05:40,542 INFO L280 TraceCheckUtils]: 32: Hoare triple {6561#(<= 1 ~pumpRunning~0)} assume test_~splverifierCounter~0 < 4; {6561#(<= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:05:40,543 INFO L280 TraceCheckUtils]: 33: Hoare triple {6561#(<= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet34 && test_#t~nondet34 <= 2147483647;test_~tmp~5 := test_#t~nondet34;havoc test_#t~nondet34; {6561#(<= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:05:40,544 INFO L280 TraceCheckUtils]: 34: Hoare triple {6561#(<= 1 ~pumpRunning~0)} assume !(0 != test_~tmp~5); {6561#(<= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:05:40,544 INFO L280 TraceCheckUtils]: 35: Hoare triple {6561#(<= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp___0~2 := test_#t~nondet35;havoc test_#t~nondet35; {6561#(<= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:05:40,545 INFO L280 TraceCheckUtils]: 36: Hoare triple {6561#(<= 1 ~pumpRunning~0)} assume !(0 != test_~tmp___0~2); {6561#(<= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:05:40,545 INFO L280 TraceCheckUtils]: 37: Hoare triple {6561#(<= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___2~0 := test_#t~nondet36;havoc test_#t~nondet36; {6561#(<= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:05:40,546 INFO L280 TraceCheckUtils]: 38: Hoare triple {6561#(<= 1 ~pumpRunning~0)} assume 0 != test_~tmp___2~0; {6561#(<= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:05:40,546 INFO L280 TraceCheckUtils]: 39: Hoare triple {6561#(<= 1 ~pumpRunning~0)} havoc __utac_acc__Specification5_spec__2_#t~ret10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {6598#(<= 1 |ULTIMATE.start_isPumpRunning_#res|)} is VALID [2020-07-28 19:05:40,547 INFO L280 TraceCheckUtils]: 40: Hoare triple {6598#(<= 1 |ULTIMATE.start_isPumpRunning_#res|)} __utac_acc__Specification5_spec__2_#t~ret10 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret10 && __utac_acc__Specification5_spec__2_#t~ret10 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret10;havoc __utac_acc__Specification5_spec__2_#t~ret10; {6602#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2020-07-28 19:05:40,547 INFO L280 TraceCheckUtils]: 41: Hoare triple {6602#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != ~pumpRunning~0; {6602#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2020-07-28 19:05:40,548 INFO L280 TraceCheckUtils]: 42: Hoare triple {6602#(<= 1 ~switchedOnBeforeTS~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {6602#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2020-07-28 19:05:40,548 INFO L280 TraceCheckUtils]: 43: Hoare triple {6602#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {6602#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2020-07-28 19:05:40,549 INFO L280 TraceCheckUtils]: 44: Hoare triple {6602#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret16, isMethaneAlarm_~retValue_acc~4;havoc isMethaneAlarm_~retValue_acc~4;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {6602#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2020-07-28 19:05:40,549 INFO L280 TraceCheckUtils]: 45: Hoare triple {6602#(<= 1 ~switchedOnBeforeTS~0)} isMethaneAlarm_#t~ret16 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret16 && isMethaneAlarm_#t~ret16 <= 2147483647;isMethaneAlarm_~retValue_acc~4 := isMethaneAlarm_#t~ret16;havoc isMethaneAlarm_#t~ret16;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~4; {6602#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2020-07-28 19:05:40,550 INFO L280 TraceCheckUtils]: 46: Hoare triple {6602#(<= 1 ~switchedOnBeforeTS~0)} processEnvironment_#t~ret15 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret15 && processEnvironment_#t~ret15 <= 2147483647;processEnvironment_~tmp~3 := processEnvironment_#t~ret15;havoc processEnvironment_#t~ret15; {6602#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2020-07-28 19:05:40,551 INFO L280 TraceCheckUtils]: 47: Hoare triple {6602#(<= 1 ~switchedOnBeforeTS~0)} assume !(0 != processEnvironment_~tmp~3);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~2;havoc processEnvironment__wrappee__highWaterSensor_~tmp~2; {6602#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2020-07-28 19:05:40,551 INFO L280 TraceCheckUtils]: 48: Hoare triple {6602#(<= 1 ~switchedOnBeforeTS~0)} assume !(0 == ~pumpRunning~0); {6602#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2020-07-28 19:05:40,552 INFO L280 TraceCheckUtils]: 49: Hoare triple {6602#(<= 1 ~switchedOnBeforeTS~0)} havoc __utac_acc__Specification5_spec__3_#t~ret11, __utac_acc__Specification5_spec__3_#t~ret12, __utac_acc__Specification5_spec__3_~tmp~0, __utac_acc__Specification5_spec__3_~tmp___0~0;havoc __utac_acc__Specification5_spec__3_~tmp~0;havoc __utac_acc__Specification5_spec__3_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {6602#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2020-07-28 19:05:40,552 INFO L280 TraceCheckUtils]: 50: Hoare triple {6602#(<= 1 ~switchedOnBeforeTS~0)} __utac_acc__Specification5_spec__3_#t~ret11 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret11 && __utac_acc__Specification5_spec__3_#t~ret11 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0 := __utac_acc__Specification5_spec__3_#t~ret11;havoc __utac_acc__Specification5_spec__3_#t~ret11; {6602#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2020-07-28 19:05:40,553 INFO L280 TraceCheckUtils]: 51: Hoare triple {6602#(<= 1 ~switchedOnBeforeTS~0)} assume 2 != __utac_acc__Specification5_spec__3_~tmp~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {6602#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2020-07-28 19:05:40,554 INFO L280 TraceCheckUtils]: 52: Hoare triple {6602#(<= 1 ~switchedOnBeforeTS~0)} __utac_acc__Specification5_spec__3_#t~ret12 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret12 && __utac_acc__Specification5_spec__3_#t~ret12 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0 := __utac_acc__Specification5_spec__3_#t~ret12;havoc __utac_acc__Specification5_spec__3_#t~ret12; {6602#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2020-07-28 19:05:40,554 INFO L280 TraceCheckUtils]: 53: Hoare triple {6602#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~0; {6602#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2020-07-28 19:05:40,555 INFO L280 TraceCheckUtils]: 54: Hoare triple {6602#(<= 1 ~switchedOnBeforeTS~0)} assume 0 == ~switchedOnBeforeTS~0; {6473#false} is VALID [2020-07-28 19:05:40,555 INFO L280 TraceCheckUtils]: 55: Hoare triple {6473#false} assume !false; {6473#false} is VALID [2020-07-28 19:05:40,558 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 13 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:05:40,559 INFO L220 FreeRefinementEngine]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2020-07-28 19:05:40,559 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 5] total 8 [2020-07-28 19:05:40,560 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1672629459] [2020-07-28 19:05:40,560 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 56 [2020-07-28 19:05:40,560 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:05:40,560 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states. [2020-07-28 19:05:40,645 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 84 edges. 84 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:05:40,646 INFO L459 AbstractCegarLoop]: Interpolant automaton has 8 states [2020-07-28 19:05:40,646 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:05:40,646 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2020-07-28 19:05:40,646 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2020-07-28 19:05:40,646 INFO L87 Difference]: Start difference. First operand 188 states and 245 transitions. Second operand 8 states. [2020-07-28 19:05:42,080 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:05:42,080 INFO L93 Difference]: Finished difference Result 466 states and 628 transitions. [2020-07-28 19:05:42,081 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2020-07-28 19:05:42,081 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 56 [2020-07-28 19:05:42,082 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:05:42,082 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 8 states. [2020-07-28 19:05:42,084 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 237 transitions. [2020-07-28 19:05:42,084 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 8 states. [2020-07-28 19:05:42,086 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 237 transitions. [2020-07-28 19:05:42,086 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 237 transitions. [2020-07-28 19:05:42,351 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 237 edges. 237 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:05:42,360 INFO L225 Difference]: With dead ends: 466 [2020-07-28 19:05:42,360 INFO L226 Difference]: Without dead ends: 285 [2020-07-28 19:05:42,361 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 66 GetRequests, 57 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=38, Invalid=72, Unknown=0, NotChecked=0, Total=110 [2020-07-28 19:05:42,362 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 285 states. [2020-07-28 19:05:42,767 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 285 to 177. [2020-07-28 19:05:42,768 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:05:42,768 INFO L82 GeneralOperation]: Start isEquivalent. First operand 285 states. Second operand 177 states. [2020-07-28 19:05:42,768 INFO L74 IsIncluded]: Start isIncluded. First operand 285 states. Second operand 177 states. [2020-07-28 19:05:42,768 INFO L87 Difference]: Start difference. First operand 285 states. Second operand 177 states. [2020-07-28 19:05:42,776 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:05:42,776 INFO L93 Difference]: Finished difference Result 285 states and 381 transitions. [2020-07-28 19:05:42,776 INFO L276 IsEmpty]: Start isEmpty. Operand 285 states and 381 transitions. [2020-07-28 19:05:42,777 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:05:42,777 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:05:42,777 INFO L74 IsIncluded]: Start isIncluded. First operand 177 states. Second operand 285 states. [2020-07-28 19:05:42,778 INFO L87 Difference]: Start difference. First operand 177 states. Second operand 285 states. [2020-07-28 19:05:42,786 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:05:42,786 INFO L93 Difference]: Finished difference Result 285 states and 381 transitions. [2020-07-28 19:05:42,786 INFO L276 IsEmpty]: Start isEmpty. Operand 285 states and 381 transitions. [2020-07-28 19:05:42,787 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:05:42,787 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:05:42,787 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:05:42,787 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:05:42,787 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 177 states. [2020-07-28 19:05:42,792 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 177 states to 177 states and 225 transitions. [2020-07-28 19:05:42,792 INFO L78 Accepts]: Start accepts. Automaton has 177 states and 225 transitions. Word has length 56 [2020-07-28 19:05:42,792 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:05:42,793 INFO L479 AbstractCegarLoop]: Abstraction has 177 states and 225 transitions. [2020-07-28 19:05:42,793 INFO L480 AbstractCegarLoop]: Interpolant automaton has 8 states. [2020-07-28 19:05:42,793 INFO L276 IsEmpty]: Start isEmpty. Operand 177 states and 225 transitions. [2020-07-28 19:05:42,794 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 100 [2020-07-28 19:05:42,794 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:05:42,794 INFO L422 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:05:43,000 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2020-07-28 19:05:43,001 INFO L427 AbstractCegarLoop]: === Iteration 11 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:05:43,001 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:05:43,002 INFO L82 PathProgramCache]: Analyzing trace with hash 607108781, now seen corresponding path program 1 times [2020-07-28 19:05:43,002 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:05:43,002 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2138533689] [2020-07-28 19:05:43,002 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:05:43,051 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:05:43,172 INFO L280 TraceCheckUtils]: 0: Hoare triple {8116#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(13);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string20.base, #t~string20.offset, 1);call write~init~int(110, #t~string20.base, 1 + #t~string20.offset, 1);call write~init~int(0, #t~string20.base, 2 + #t~string20.offset, 1);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string22.base, #t~string22.offset, 1);call write~init~int(102, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(102, #t~string22.base, 2 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 3 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string24.base, #t~string24.offset, 1);call write~init~int(80, #t~string24.base, 1 + #t~string24.offset, 1);call write~init~int(117, #t~string24.base, 2 + #t~string24.offset, 1);call write~init~int(109, #t~string24.base, 3 + #t~string24.offset, 1);call write~init~int(112, #t~string24.base, 4 + #t~string24.offset, 1);call write~init~int(58, #t~string24.base, 5 + #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 6 + #t~string24.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string26.base, #t~string26.offset, 1);call write~init~int(110, #t~string26.base, 1 + #t~string26.offset, 1);call write~init~int(0, #t~string26.base, 2 + #t~string26.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string28.base, #t~string28.offset, 1);call write~init~int(102, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(102, #t~string28.base, 2 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 3 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string30.base, #t~string30.offset, 1);call write~init~int(32, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 2 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string32.base, #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 1 + #t~string32.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(30);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(9);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(21);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(30);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(9);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {8118#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:05:43,173 INFO L280 TraceCheckUtils]: 1: Hoare triple {8118#(= 1 ~waterLevel~0)} havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~3, main_~tmp~1;havoc main_~retValue_acc~3;havoc main_~tmp~1; {8118#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:05:43,174 INFO L280 TraceCheckUtils]: 2: Hoare triple {8118#(= 1 ~waterLevel~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {8118#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:05:43,174 INFO L280 TraceCheckUtils]: 3: Hoare triple {8118#(= 1 ~waterLevel~0)} main_#t~ret13 := valid_product_#res;assume -2147483648 <= main_#t~ret13 && main_#t~ret13 <= 2147483647;main_~tmp~1 := main_#t~ret13;havoc main_#t~ret13; {8118#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:05:43,175 INFO L280 TraceCheckUtils]: 4: Hoare triple {8118#(= 1 ~waterLevel~0)} assume 0 != main_~tmp~1; {8118#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:05:43,177 INFO L280 TraceCheckUtils]: 5: Hoare triple {8118#(= 1 ~waterLevel~0)} ~switchedOnBeforeTS~0 := 0; {8118#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:05:43,177 INFO L280 TraceCheckUtils]: 6: Hoare triple {8118#(= 1 ~waterLevel~0)} havoc test_#t~nondet34, test_#t~nondet35, test_#t~nondet36, test_#t~nondet37, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~2, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~2;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {8118#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:05:43,180 INFO L280 TraceCheckUtils]: 7: Hoare triple {8118#(= 1 ~waterLevel~0)} assume !false; {8118#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:05:43,182 INFO L280 TraceCheckUtils]: 8: Hoare triple {8118#(= 1 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {8118#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:05:43,183 INFO L280 TraceCheckUtils]: 9: Hoare triple {8118#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet34 && test_#t~nondet34 <= 2147483647;test_~tmp~5 := test_#t~nondet34;havoc test_#t~nondet34; {8118#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:05:43,184 INFO L280 TraceCheckUtils]: 10: Hoare triple {8118#(= 1 ~waterLevel~0)} assume 0 != test_~tmp~5; {8118#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:05:43,185 INFO L280 TraceCheckUtils]: 11: Hoare triple {8118#(= 1 ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {8119#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:43,186 INFO L280 TraceCheckUtils]: 12: Hoare triple {8119#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp___0~2 := test_#t~nondet35;havoc test_#t~nondet35; {8119#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:43,186 INFO L280 TraceCheckUtils]: 13: Hoare triple {8119#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___0~2); {8119#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:43,187 INFO L280 TraceCheckUtils]: 14: Hoare triple {8119#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___2~0 := test_#t~nondet36;havoc test_#t~nondet36; {8119#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:43,188 INFO L280 TraceCheckUtils]: 15: Hoare triple {8119#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0; {8119#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:43,189 INFO L280 TraceCheckUtils]: 16: Hoare triple {8119#(<= ~waterLevel~0 2)} havoc __utac_acc__Specification5_spec__2_#t~ret10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {8119#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:43,189 INFO L280 TraceCheckUtils]: 17: Hoare triple {8119#(<= ~waterLevel~0 2)} __utac_acc__Specification5_spec__2_#t~ret10 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret10 && __utac_acc__Specification5_spec__2_#t~ret10 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret10;havoc __utac_acc__Specification5_spec__2_#t~ret10; {8119#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:43,190 INFO L280 TraceCheckUtils]: 18: Hoare triple {8119#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0); {8119#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:43,191 INFO L280 TraceCheckUtils]: 19: Hoare triple {8119#(<= ~waterLevel~0 2)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {8119#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:43,191 INFO L280 TraceCheckUtils]: 20: Hoare triple {8119#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~2;havoc processEnvironment__wrappee__highWaterSensor_~tmp~2; {8119#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:43,192 INFO L280 TraceCheckUtils]: 21: Hoare triple {8119#(<= ~waterLevel~0 2)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret33, isHighWaterLevel_~retValue_acc~6, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~6;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {8119#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:43,193 INFO L280 TraceCheckUtils]: 22: Hoare triple {8119#(<= ~waterLevel~0 2)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {8119#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:43,194 INFO L280 TraceCheckUtils]: 23: Hoare triple {8119#(<= ~waterLevel~0 2)} isHighWaterLevel_#t~ret33 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret33 && isHighWaterLevel_#t~ret33 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret33;havoc isHighWaterLevel_#t~ret33; {8119#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:43,194 INFO L280 TraceCheckUtils]: 24: Hoare triple {8119#(<= ~waterLevel~0 2)} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {8119#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:43,195 INFO L280 TraceCheckUtils]: 25: Hoare triple {8119#(<= ~waterLevel~0 2)} isHighWaterLevel_~retValue_acc~6 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~6; {8119#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:43,196 INFO L280 TraceCheckUtils]: 26: Hoare triple {8119#(<= ~waterLevel~0 2)} processEnvironment__wrappee__highWaterSensor_#t~ret14 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret14 && processEnvironment__wrappee__highWaterSensor_#t~ret14 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~2 := processEnvironment__wrappee__highWaterSensor_#t~ret14;havoc processEnvironment__wrappee__highWaterSensor_#t~ret14; {8119#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:43,197 INFO L280 TraceCheckUtils]: 27: Hoare triple {8119#(<= ~waterLevel~0 2)} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~2;~pumpRunning~0 := 1; {8119#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:43,197 INFO L280 TraceCheckUtils]: 28: Hoare triple {8119#(<= ~waterLevel~0 2)} havoc __utac_acc__Specification5_spec__3_#t~ret11, __utac_acc__Specification5_spec__3_#t~ret12, __utac_acc__Specification5_spec__3_~tmp~0, __utac_acc__Specification5_spec__3_~tmp___0~0;havoc __utac_acc__Specification5_spec__3_~tmp~0;havoc __utac_acc__Specification5_spec__3_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {8119#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:43,198 INFO L280 TraceCheckUtils]: 29: Hoare triple {8119#(<= ~waterLevel~0 2)} __utac_acc__Specification5_spec__3_#t~ret11 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret11 && __utac_acc__Specification5_spec__3_#t~ret11 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0 := __utac_acc__Specification5_spec__3_#t~ret11;havoc __utac_acc__Specification5_spec__3_#t~ret11; {8119#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:43,199 INFO L280 TraceCheckUtils]: 30: Hoare triple {8119#(<= ~waterLevel~0 2)} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~0); {8119#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:43,199 INFO L280 TraceCheckUtils]: 31: Hoare triple {8119#(<= ~waterLevel~0 2)} assume !false; {8119#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:43,200 INFO L280 TraceCheckUtils]: 32: Hoare triple {8119#(<= ~waterLevel~0 2)} assume test_~splverifierCounter~0 < 4; {8119#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:43,201 INFO L280 TraceCheckUtils]: 33: Hoare triple {8119#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet34 && test_#t~nondet34 <= 2147483647;test_~tmp~5 := test_#t~nondet34;havoc test_#t~nondet34; {8119#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:43,201 INFO L280 TraceCheckUtils]: 34: Hoare triple {8119#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp~5); {8119#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:43,202 INFO L280 TraceCheckUtils]: 35: Hoare triple {8119#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp___0~2 := test_#t~nondet35;havoc test_#t~nondet35; {8119#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:43,203 INFO L280 TraceCheckUtils]: 36: Hoare triple {8119#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___0~2); {8119#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:43,203 INFO L280 TraceCheckUtils]: 37: Hoare triple {8119#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___2~0 := test_#t~nondet36;havoc test_#t~nondet36; {8119#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:43,204 INFO L280 TraceCheckUtils]: 38: Hoare triple {8119#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0; {8119#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:43,204 INFO L280 TraceCheckUtils]: 39: Hoare triple {8119#(<= ~waterLevel~0 2)} havoc __utac_acc__Specification5_spec__2_#t~ret10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {8119#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:43,205 INFO L280 TraceCheckUtils]: 40: Hoare triple {8119#(<= ~waterLevel~0 2)} __utac_acc__Specification5_spec__2_#t~ret10 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret10 && __utac_acc__Specification5_spec__2_#t~ret10 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret10;havoc __utac_acc__Specification5_spec__2_#t~ret10; {8119#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:43,206 INFO L280 TraceCheckUtils]: 41: Hoare triple {8119#(<= ~waterLevel~0 2)} assume 0 != ~pumpRunning~0; {8119#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:43,207 INFO L280 TraceCheckUtils]: 42: Hoare triple {8119#(<= ~waterLevel~0 2)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {8120#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:43,207 INFO L280 TraceCheckUtils]: 43: Hoare triple {8120#(<= ~waterLevel~0 1)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {8120#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:43,208 INFO L280 TraceCheckUtils]: 44: Hoare triple {8120#(<= ~waterLevel~0 1)} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret16, isMethaneAlarm_~retValue_acc~4;havoc isMethaneAlarm_~retValue_acc~4;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {8120#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:43,209 INFO L280 TraceCheckUtils]: 45: Hoare triple {8120#(<= ~waterLevel~0 1)} isMethaneAlarm_#t~ret16 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret16 && isMethaneAlarm_#t~ret16 <= 2147483647;isMethaneAlarm_~retValue_acc~4 := isMethaneAlarm_#t~ret16;havoc isMethaneAlarm_#t~ret16;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~4; {8120#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:43,209 INFO L280 TraceCheckUtils]: 46: Hoare triple {8120#(<= ~waterLevel~0 1)} processEnvironment_#t~ret15 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret15 && processEnvironment_#t~ret15 <= 2147483647;processEnvironment_~tmp~3 := processEnvironment_#t~ret15;havoc processEnvironment_#t~ret15; {8120#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:43,210 INFO L280 TraceCheckUtils]: 47: Hoare triple {8120#(<= ~waterLevel~0 1)} assume !(0 != processEnvironment_~tmp~3);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~2;havoc processEnvironment__wrappee__highWaterSensor_~tmp~2; {8120#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:43,210 INFO L280 TraceCheckUtils]: 48: Hoare triple {8120#(<= ~waterLevel~0 1)} assume !(0 == ~pumpRunning~0); {8120#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:43,211 INFO L280 TraceCheckUtils]: 49: Hoare triple {8120#(<= ~waterLevel~0 1)} havoc __utac_acc__Specification5_spec__3_#t~ret11, __utac_acc__Specification5_spec__3_#t~ret12, __utac_acc__Specification5_spec__3_~tmp~0, __utac_acc__Specification5_spec__3_~tmp___0~0;havoc __utac_acc__Specification5_spec__3_~tmp~0;havoc __utac_acc__Specification5_spec__3_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {8121#(<= |ULTIMATE.start_getWaterLevel_#res| 1)} is VALID [2020-07-28 19:05:43,212 INFO L280 TraceCheckUtils]: 50: Hoare triple {8121#(<= |ULTIMATE.start_getWaterLevel_#res| 1)} __utac_acc__Specification5_spec__3_#t~ret11 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret11 && __utac_acc__Specification5_spec__3_#t~ret11 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0 := __utac_acc__Specification5_spec__3_#t~ret11;havoc __utac_acc__Specification5_spec__3_#t~ret11; {8122#(<= ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~0 1)} is VALID [2020-07-28 19:05:43,213 INFO L280 TraceCheckUtils]: 51: Hoare triple {8122#(<= ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~0 1)} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~0); {8117#false} is VALID [2020-07-28 19:05:43,213 INFO L280 TraceCheckUtils]: 52: Hoare triple {8117#false} assume !false; {8117#false} is VALID [2020-07-28 19:05:43,213 INFO L280 TraceCheckUtils]: 53: Hoare triple {8117#false} assume test_~splverifierCounter~0 < 4; {8117#false} is VALID [2020-07-28 19:05:43,214 INFO L280 TraceCheckUtils]: 54: Hoare triple {8117#false} assume -2147483648 <= test_#t~nondet34 && test_#t~nondet34 <= 2147483647;test_~tmp~5 := test_#t~nondet34;havoc test_#t~nondet34; {8117#false} is VALID [2020-07-28 19:05:43,214 INFO L280 TraceCheckUtils]: 55: Hoare triple {8117#false} assume !(0 != test_~tmp~5); {8117#false} is VALID [2020-07-28 19:05:43,214 INFO L280 TraceCheckUtils]: 56: Hoare triple {8117#false} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp___0~2 := test_#t~nondet35;havoc test_#t~nondet35; {8117#false} is VALID [2020-07-28 19:05:43,214 INFO L280 TraceCheckUtils]: 57: Hoare triple {8117#false} assume !(0 != test_~tmp___0~2); {8117#false} is VALID [2020-07-28 19:05:43,214 INFO L280 TraceCheckUtils]: 58: Hoare triple {8117#false} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___2~0 := test_#t~nondet36;havoc test_#t~nondet36; {8117#false} is VALID [2020-07-28 19:05:43,215 INFO L280 TraceCheckUtils]: 59: Hoare triple {8117#false} assume 0 != test_~tmp___2~0; {8117#false} is VALID [2020-07-28 19:05:43,215 INFO L280 TraceCheckUtils]: 60: Hoare triple {8117#false} havoc __utac_acc__Specification5_spec__2_#t~ret10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {8117#false} is VALID [2020-07-28 19:05:43,215 INFO L280 TraceCheckUtils]: 61: Hoare triple {8117#false} __utac_acc__Specification5_spec__2_#t~ret10 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret10 && __utac_acc__Specification5_spec__2_#t~ret10 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret10;havoc __utac_acc__Specification5_spec__2_#t~ret10; {8117#false} is VALID [2020-07-28 19:05:43,215 INFO L280 TraceCheckUtils]: 62: Hoare triple {8117#false} assume 0 != ~pumpRunning~0; {8117#false} is VALID [2020-07-28 19:05:43,216 INFO L280 TraceCheckUtils]: 63: Hoare triple {8117#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {8117#false} is VALID [2020-07-28 19:05:43,216 INFO L280 TraceCheckUtils]: 64: Hoare triple {8117#false} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {8117#false} is VALID [2020-07-28 19:05:43,216 INFO L280 TraceCheckUtils]: 65: Hoare triple {8117#false} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret16, isMethaneAlarm_~retValue_acc~4;havoc isMethaneAlarm_~retValue_acc~4;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {8117#false} is VALID [2020-07-28 19:05:43,257 INFO L280 TraceCheckUtils]: 66: Hoare triple {8117#false} isMethaneAlarm_#t~ret16 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret16 && isMethaneAlarm_#t~ret16 <= 2147483647;isMethaneAlarm_~retValue_acc~4 := isMethaneAlarm_#t~ret16;havoc isMethaneAlarm_#t~ret16;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~4; {8117#false} is VALID [2020-07-28 19:05:43,257 INFO L280 TraceCheckUtils]: 67: Hoare triple {8117#false} processEnvironment_#t~ret15 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret15 && processEnvironment_#t~ret15 <= 2147483647;processEnvironment_~tmp~3 := processEnvironment_#t~ret15;havoc processEnvironment_#t~ret15; {8117#false} is VALID [2020-07-28 19:05:43,258 INFO L280 TraceCheckUtils]: 68: Hoare triple {8117#false} assume 0 != processEnvironment_~tmp~3;~pumpRunning~0 := 0; {8117#false} is VALID [2020-07-28 19:05:43,258 INFO L280 TraceCheckUtils]: 69: Hoare triple {8117#false} havoc __utac_acc__Specification5_spec__3_#t~ret11, __utac_acc__Specification5_spec__3_#t~ret12, __utac_acc__Specification5_spec__3_~tmp~0, __utac_acc__Specification5_spec__3_~tmp___0~0;havoc __utac_acc__Specification5_spec__3_~tmp~0;havoc __utac_acc__Specification5_spec__3_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {8117#false} is VALID [2020-07-28 19:05:43,258 INFO L280 TraceCheckUtils]: 70: Hoare triple {8117#false} __utac_acc__Specification5_spec__3_#t~ret11 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret11 && __utac_acc__Specification5_spec__3_#t~ret11 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0 := __utac_acc__Specification5_spec__3_#t~ret11;havoc __utac_acc__Specification5_spec__3_#t~ret11; {8117#false} is VALID [2020-07-28 19:05:43,261 INFO L280 TraceCheckUtils]: 71: Hoare triple {8117#false} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~0); {8117#false} is VALID [2020-07-28 19:05:43,261 INFO L280 TraceCheckUtils]: 72: Hoare triple {8117#false} assume !false; {8117#false} is VALID [2020-07-28 19:05:43,261 INFO L280 TraceCheckUtils]: 73: Hoare triple {8117#false} assume test_~splverifierCounter~0 < 4; {8117#false} is VALID [2020-07-28 19:05:43,262 INFO L280 TraceCheckUtils]: 74: Hoare triple {8117#false} assume -2147483648 <= test_#t~nondet34 && test_#t~nondet34 <= 2147483647;test_~tmp~5 := test_#t~nondet34;havoc test_#t~nondet34; {8117#false} is VALID [2020-07-28 19:05:43,262 INFO L280 TraceCheckUtils]: 75: Hoare triple {8117#false} assume !(0 != test_~tmp~5); {8117#false} is VALID [2020-07-28 19:05:43,262 INFO L280 TraceCheckUtils]: 76: Hoare triple {8117#false} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp___0~2 := test_#t~nondet35;havoc test_#t~nondet35; {8117#false} is VALID [2020-07-28 19:05:43,262 INFO L280 TraceCheckUtils]: 77: Hoare triple {8117#false} assume !(0 != test_~tmp___0~2); {8117#false} is VALID [2020-07-28 19:05:43,262 INFO L280 TraceCheckUtils]: 78: Hoare triple {8117#false} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___2~0 := test_#t~nondet36;havoc test_#t~nondet36; {8117#false} is VALID [2020-07-28 19:05:43,263 INFO L280 TraceCheckUtils]: 79: Hoare triple {8117#false} assume 0 != test_~tmp___2~0; {8117#false} is VALID [2020-07-28 19:05:43,263 INFO L280 TraceCheckUtils]: 80: Hoare triple {8117#false} havoc __utac_acc__Specification5_spec__2_#t~ret10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {8117#false} is VALID [2020-07-28 19:05:43,263 INFO L280 TraceCheckUtils]: 81: Hoare triple {8117#false} __utac_acc__Specification5_spec__2_#t~ret10 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret10 && __utac_acc__Specification5_spec__2_#t~ret10 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret10;havoc __utac_acc__Specification5_spec__2_#t~ret10; {8117#false} is VALID [2020-07-28 19:05:43,263 INFO L280 TraceCheckUtils]: 82: Hoare triple {8117#false} assume !(0 != ~pumpRunning~0); {8117#false} is VALID [2020-07-28 19:05:43,263 INFO L280 TraceCheckUtils]: 83: Hoare triple {8117#false} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {8117#false} is VALID [2020-07-28 19:05:43,263 INFO L280 TraceCheckUtils]: 84: Hoare triple {8117#false} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~2;havoc processEnvironment__wrappee__highWaterSensor_~tmp~2; {8117#false} is VALID [2020-07-28 19:05:43,264 INFO L280 TraceCheckUtils]: 85: Hoare triple {8117#false} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret33, isHighWaterLevel_~retValue_acc~6, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~6;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {8117#false} is VALID [2020-07-28 19:05:43,264 INFO L280 TraceCheckUtils]: 86: Hoare triple {8117#false} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {8117#false} is VALID [2020-07-28 19:05:43,264 INFO L280 TraceCheckUtils]: 87: Hoare triple {8117#false} isHighWaterLevel_#t~ret33 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret33 && isHighWaterLevel_#t~ret33 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret33;havoc isHighWaterLevel_#t~ret33; {8117#false} is VALID [2020-07-28 19:05:43,264 INFO L280 TraceCheckUtils]: 88: Hoare triple {8117#false} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {8117#false} is VALID [2020-07-28 19:05:43,264 INFO L280 TraceCheckUtils]: 89: Hoare triple {8117#false} isHighWaterLevel_~retValue_acc~6 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~6; {8117#false} is VALID [2020-07-28 19:05:43,265 INFO L280 TraceCheckUtils]: 90: Hoare triple {8117#false} processEnvironment__wrappee__highWaterSensor_#t~ret14 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret14 && processEnvironment__wrappee__highWaterSensor_#t~ret14 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~2 := processEnvironment__wrappee__highWaterSensor_#t~ret14;havoc processEnvironment__wrappee__highWaterSensor_#t~ret14; {8117#false} is VALID [2020-07-28 19:05:43,265 INFO L280 TraceCheckUtils]: 91: Hoare triple {8117#false} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~2;~pumpRunning~0 := 1; {8117#false} is VALID [2020-07-28 19:05:43,265 INFO L280 TraceCheckUtils]: 92: Hoare triple {8117#false} havoc __utac_acc__Specification5_spec__3_#t~ret11, __utac_acc__Specification5_spec__3_#t~ret12, __utac_acc__Specification5_spec__3_~tmp~0, __utac_acc__Specification5_spec__3_~tmp___0~0;havoc __utac_acc__Specification5_spec__3_~tmp~0;havoc __utac_acc__Specification5_spec__3_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {8117#false} is VALID [2020-07-28 19:05:43,265 INFO L280 TraceCheckUtils]: 93: Hoare triple {8117#false} __utac_acc__Specification5_spec__3_#t~ret11 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret11 && __utac_acc__Specification5_spec__3_#t~ret11 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0 := __utac_acc__Specification5_spec__3_#t~ret11;havoc __utac_acc__Specification5_spec__3_#t~ret11; {8117#false} is VALID [2020-07-28 19:05:43,265 INFO L280 TraceCheckUtils]: 94: Hoare triple {8117#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {8117#false} is VALID [2020-07-28 19:05:43,265 INFO L280 TraceCheckUtils]: 95: Hoare triple {8117#false} __utac_acc__Specification5_spec__3_#t~ret12 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret12 && __utac_acc__Specification5_spec__3_#t~ret12 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0 := __utac_acc__Specification5_spec__3_#t~ret12;havoc __utac_acc__Specification5_spec__3_#t~ret12; {8117#false} is VALID [2020-07-28 19:05:43,266 INFO L280 TraceCheckUtils]: 96: Hoare triple {8117#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~0; {8117#false} is VALID [2020-07-28 19:05:43,266 INFO L280 TraceCheckUtils]: 97: Hoare triple {8117#false} assume 0 == ~switchedOnBeforeTS~0; {8117#false} is VALID [2020-07-28 19:05:43,266 INFO L280 TraceCheckUtils]: 98: Hoare triple {8117#false} assume !false; {8117#false} is VALID [2020-07-28 19:05:43,276 INFO L134 CoverageAnalysis]: Checked inductivity of 107 backedges. 78 proven. 6 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2020-07-28 19:05:43,277 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2138533689] [2020-07-28 19:05:43,277 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [573017455] [2020-07-28 19:05:43,277 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 3 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2020-07-28 19:05:43,407 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:05:43,409 INFO L263 TraceCheckSpWp]: Trace formula consists of 544 conjuncts, 7 conjunts are in the unsatisfiable core [2020-07-28 19:05:43,440 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:05:43,445 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2020-07-28 19:05:43,655 INFO L280 TraceCheckUtils]: 0: Hoare triple {8116#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(13);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string20.base, #t~string20.offset, 1);call write~init~int(110, #t~string20.base, 1 + #t~string20.offset, 1);call write~init~int(0, #t~string20.base, 2 + #t~string20.offset, 1);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string22.base, #t~string22.offset, 1);call write~init~int(102, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(102, #t~string22.base, 2 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 3 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string24.base, #t~string24.offset, 1);call write~init~int(80, #t~string24.base, 1 + #t~string24.offset, 1);call write~init~int(117, #t~string24.base, 2 + #t~string24.offset, 1);call write~init~int(109, #t~string24.base, 3 + #t~string24.offset, 1);call write~init~int(112, #t~string24.base, 4 + #t~string24.offset, 1);call write~init~int(58, #t~string24.base, 5 + #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 6 + #t~string24.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string26.base, #t~string26.offset, 1);call write~init~int(110, #t~string26.base, 1 + #t~string26.offset, 1);call write~init~int(0, #t~string26.base, 2 + #t~string26.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string28.base, #t~string28.offset, 1);call write~init~int(102, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(102, #t~string28.base, 2 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 3 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string30.base, #t~string30.offset, 1);call write~init~int(32, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 2 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string32.base, #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 1 + #t~string32.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(30);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(9);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(21);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(30);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(9);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {8120#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:43,656 INFO L280 TraceCheckUtils]: 1: Hoare triple {8120#(<= ~waterLevel~0 1)} havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~3, main_~tmp~1;havoc main_~retValue_acc~3;havoc main_~tmp~1; {8120#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:43,656 INFO L280 TraceCheckUtils]: 2: Hoare triple {8120#(<= ~waterLevel~0 1)} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {8120#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:43,657 INFO L280 TraceCheckUtils]: 3: Hoare triple {8120#(<= ~waterLevel~0 1)} main_#t~ret13 := valid_product_#res;assume -2147483648 <= main_#t~ret13 && main_#t~ret13 <= 2147483647;main_~tmp~1 := main_#t~ret13;havoc main_#t~ret13; {8120#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:43,657 INFO L280 TraceCheckUtils]: 4: Hoare triple {8120#(<= ~waterLevel~0 1)} assume 0 != main_~tmp~1; {8120#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:43,658 INFO L280 TraceCheckUtils]: 5: Hoare triple {8120#(<= ~waterLevel~0 1)} ~switchedOnBeforeTS~0 := 0; {8120#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:43,659 INFO L280 TraceCheckUtils]: 6: Hoare triple {8120#(<= ~waterLevel~0 1)} havoc test_#t~nondet34, test_#t~nondet35, test_#t~nondet36, test_#t~nondet37, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~2, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~2;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {8120#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:43,659 INFO L280 TraceCheckUtils]: 7: Hoare triple {8120#(<= ~waterLevel~0 1)} assume !false; {8120#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:43,660 INFO L280 TraceCheckUtils]: 8: Hoare triple {8120#(<= ~waterLevel~0 1)} assume test_~splverifierCounter~0 < 4; {8120#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:43,660 INFO L280 TraceCheckUtils]: 9: Hoare triple {8120#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet34 && test_#t~nondet34 <= 2147483647;test_~tmp~5 := test_#t~nondet34;havoc test_#t~nondet34; {8120#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:43,661 INFO L280 TraceCheckUtils]: 10: Hoare triple {8120#(<= ~waterLevel~0 1)} assume 0 != test_~tmp~5; {8120#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:43,661 INFO L280 TraceCheckUtils]: 11: Hoare triple {8120#(<= ~waterLevel~0 1)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {8119#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:43,662 INFO L280 TraceCheckUtils]: 12: Hoare triple {8119#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp___0~2 := test_#t~nondet35;havoc test_#t~nondet35; {8119#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:43,663 INFO L280 TraceCheckUtils]: 13: Hoare triple {8119#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___0~2); {8119#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:43,663 INFO L280 TraceCheckUtils]: 14: Hoare triple {8119#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___2~0 := test_#t~nondet36;havoc test_#t~nondet36; {8119#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:43,664 INFO L280 TraceCheckUtils]: 15: Hoare triple {8119#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0; {8119#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:43,664 INFO L280 TraceCheckUtils]: 16: Hoare triple {8119#(<= ~waterLevel~0 2)} havoc __utac_acc__Specification5_spec__2_#t~ret10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {8119#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:43,665 INFO L280 TraceCheckUtils]: 17: Hoare triple {8119#(<= ~waterLevel~0 2)} __utac_acc__Specification5_spec__2_#t~ret10 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret10 && __utac_acc__Specification5_spec__2_#t~ret10 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret10;havoc __utac_acc__Specification5_spec__2_#t~ret10; {8119#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:43,665 INFO L280 TraceCheckUtils]: 18: Hoare triple {8119#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0); {8119#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:43,666 INFO L280 TraceCheckUtils]: 19: Hoare triple {8119#(<= ~waterLevel~0 2)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {8119#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:43,666 INFO L280 TraceCheckUtils]: 20: Hoare triple {8119#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~2;havoc processEnvironment__wrappee__highWaterSensor_~tmp~2; {8119#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:43,667 INFO L280 TraceCheckUtils]: 21: Hoare triple {8119#(<= ~waterLevel~0 2)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret33, isHighWaterLevel_~retValue_acc~6, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~6;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {8119#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:43,667 INFO L280 TraceCheckUtils]: 22: Hoare triple {8119#(<= ~waterLevel~0 2)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {8119#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:43,668 INFO L280 TraceCheckUtils]: 23: Hoare triple {8119#(<= ~waterLevel~0 2)} isHighWaterLevel_#t~ret33 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret33 && isHighWaterLevel_#t~ret33 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret33;havoc isHighWaterLevel_#t~ret33; {8119#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:43,668 INFO L280 TraceCheckUtils]: 24: Hoare triple {8119#(<= ~waterLevel~0 2)} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {8119#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:43,669 INFO L280 TraceCheckUtils]: 25: Hoare triple {8119#(<= ~waterLevel~0 2)} isHighWaterLevel_~retValue_acc~6 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~6; {8119#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:43,670 INFO L280 TraceCheckUtils]: 26: Hoare triple {8119#(<= ~waterLevel~0 2)} processEnvironment__wrappee__highWaterSensor_#t~ret14 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret14 && processEnvironment__wrappee__highWaterSensor_#t~ret14 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~2 := processEnvironment__wrappee__highWaterSensor_#t~ret14;havoc processEnvironment__wrappee__highWaterSensor_#t~ret14; {8119#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:43,670 INFO L280 TraceCheckUtils]: 27: Hoare triple {8119#(<= ~waterLevel~0 2)} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~2;~pumpRunning~0 := 1; {8119#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:43,671 INFO L280 TraceCheckUtils]: 28: Hoare triple {8119#(<= ~waterLevel~0 2)} havoc __utac_acc__Specification5_spec__3_#t~ret11, __utac_acc__Specification5_spec__3_#t~ret12, __utac_acc__Specification5_spec__3_~tmp~0, __utac_acc__Specification5_spec__3_~tmp___0~0;havoc __utac_acc__Specification5_spec__3_~tmp~0;havoc __utac_acc__Specification5_spec__3_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {8119#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:43,671 INFO L280 TraceCheckUtils]: 29: Hoare triple {8119#(<= ~waterLevel~0 2)} __utac_acc__Specification5_spec__3_#t~ret11 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret11 && __utac_acc__Specification5_spec__3_#t~ret11 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0 := __utac_acc__Specification5_spec__3_#t~ret11;havoc __utac_acc__Specification5_spec__3_#t~ret11; {8119#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:43,672 INFO L280 TraceCheckUtils]: 30: Hoare triple {8119#(<= ~waterLevel~0 2)} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~0); {8119#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:43,672 INFO L280 TraceCheckUtils]: 31: Hoare triple {8119#(<= ~waterLevel~0 2)} assume !false; {8119#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:43,673 INFO L280 TraceCheckUtils]: 32: Hoare triple {8119#(<= ~waterLevel~0 2)} assume test_~splverifierCounter~0 < 4; {8119#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:43,673 INFO L280 TraceCheckUtils]: 33: Hoare triple {8119#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet34 && test_#t~nondet34 <= 2147483647;test_~tmp~5 := test_#t~nondet34;havoc test_#t~nondet34; {8119#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:43,674 INFO L280 TraceCheckUtils]: 34: Hoare triple {8119#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp~5); {8119#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:43,675 INFO L280 TraceCheckUtils]: 35: Hoare triple {8119#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp___0~2 := test_#t~nondet35;havoc test_#t~nondet35; {8119#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:43,678 INFO L280 TraceCheckUtils]: 36: Hoare triple {8119#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___0~2); {8119#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:43,679 INFO L280 TraceCheckUtils]: 37: Hoare triple {8119#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___2~0 := test_#t~nondet36;havoc test_#t~nondet36; {8119#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:43,680 INFO L280 TraceCheckUtils]: 38: Hoare triple {8119#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0; {8119#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:43,680 INFO L280 TraceCheckUtils]: 39: Hoare triple {8119#(<= ~waterLevel~0 2)} havoc __utac_acc__Specification5_spec__2_#t~ret10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {8119#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:43,681 INFO L280 TraceCheckUtils]: 40: Hoare triple {8119#(<= ~waterLevel~0 2)} __utac_acc__Specification5_spec__2_#t~ret10 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret10 && __utac_acc__Specification5_spec__2_#t~ret10 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret10;havoc __utac_acc__Specification5_spec__2_#t~ret10; {8119#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:43,681 INFO L280 TraceCheckUtils]: 41: Hoare triple {8119#(<= ~waterLevel~0 2)} assume 0 != ~pumpRunning~0; {8119#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:43,682 INFO L280 TraceCheckUtils]: 42: Hoare triple {8119#(<= ~waterLevel~0 2)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {8120#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:43,683 INFO L280 TraceCheckUtils]: 43: Hoare triple {8120#(<= ~waterLevel~0 1)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {8120#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:43,684 INFO L280 TraceCheckUtils]: 44: Hoare triple {8120#(<= ~waterLevel~0 1)} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret16, isMethaneAlarm_~retValue_acc~4;havoc isMethaneAlarm_~retValue_acc~4;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {8120#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:43,684 INFO L280 TraceCheckUtils]: 45: Hoare triple {8120#(<= ~waterLevel~0 1)} isMethaneAlarm_#t~ret16 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret16 && isMethaneAlarm_#t~ret16 <= 2147483647;isMethaneAlarm_~retValue_acc~4 := isMethaneAlarm_#t~ret16;havoc isMethaneAlarm_#t~ret16;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~4; {8120#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:43,685 INFO L280 TraceCheckUtils]: 46: Hoare triple {8120#(<= ~waterLevel~0 1)} processEnvironment_#t~ret15 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret15 && processEnvironment_#t~ret15 <= 2147483647;processEnvironment_~tmp~3 := processEnvironment_#t~ret15;havoc processEnvironment_#t~ret15; {8120#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:43,685 INFO L280 TraceCheckUtils]: 47: Hoare triple {8120#(<= ~waterLevel~0 1)} assume !(0 != processEnvironment_~tmp~3);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~2;havoc processEnvironment__wrappee__highWaterSensor_~tmp~2; {8120#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:43,686 INFO L280 TraceCheckUtils]: 48: Hoare triple {8120#(<= ~waterLevel~0 1)} assume !(0 == ~pumpRunning~0); {8120#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:43,687 INFO L280 TraceCheckUtils]: 49: Hoare triple {8120#(<= ~waterLevel~0 1)} havoc __utac_acc__Specification5_spec__3_#t~ret11, __utac_acc__Specification5_spec__3_#t~ret12, __utac_acc__Specification5_spec__3_~tmp~0, __utac_acc__Specification5_spec__3_~tmp___0~0;havoc __utac_acc__Specification5_spec__3_~tmp~0;havoc __utac_acc__Specification5_spec__3_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {8121#(<= |ULTIMATE.start_getWaterLevel_#res| 1)} is VALID [2020-07-28 19:05:43,687 INFO L280 TraceCheckUtils]: 50: Hoare triple {8121#(<= |ULTIMATE.start_getWaterLevel_#res| 1)} __utac_acc__Specification5_spec__3_#t~ret11 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret11 && __utac_acc__Specification5_spec__3_#t~ret11 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0 := __utac_acc__Specification5_spec__3_#t~ret11;havoc __utac_acc__Specification5_spec__3_#t~ret11; {8122#(<= ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~0 1)} is VALID [2020-07-28 19:05:43,688 INFO L280 TraceCheckUtils]: 51: Hoare triple {8122#(<= ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~0 1)} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~0); {8117#false} is VALID [2020-07-28 19:05:43,688 INFO L280 TraceCheckUtils]: 52: Hoare triple {8117#false} assume !false; {8117#false} is VALID [2020-07-28 19:05:43,689 INFO L280 TraceCheckUtils]: 53: Hoare triple {8117#false} assume test_~splverifierCounter~0 < 4; {8117#false} is VALID [2020-07-28 19:05:43,689 INFO L280 TraceCheckUtils]: 54: Hoare triple {8117#false} assume -2147483648 <= test_#t~nondet34 && test_#t~nondet34 <= 2147483647;test_~tmp~5 := test_#t~nondet34;havoc test_#t~nondet34; {8117#false} is VALID [2020-07-28 19:05:43,689 INFO L280 TraceCheckUtils]: 55: Hoare triple {8117#false} assume !(0 != test_~tmp~5); {8117#false} is VALID [2020-07-28 19:05:43,689 INFO L280 TraceCheckUtils]: 56: Hoare triple {8117#false} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp___0~2 := test_#t~nondet35;havoc test_#t~nondet35; {8117#false} is VALID [2020-07-28 19:05:43,689 INFO L280 TraceCheckUtils]: 57: Hoare triple {8117#false} assume !(0 != test_~tmp___0~2); {8117#false} is VALID [2020-07-28 19:05:43,690 INFO L280 TraceCheckUtils]: 58: Hoare triple {8117#false} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___2~0 := test_#t~nondet36;havoc test_#t~nondet36; {8117#false} is VALID [2020-07-28 19:05:43,690 INFO L280 TraceCheckUtils]: 59: Hoare triple {8117#false} assume 0 != test_~tmp___2~0; {8117#false} is VALID [2020-07-28 19:05:43,690 INFO L280 TraceCheckUtils]: 60: Hoare triple {8117#false} havoc __utac_acc__Specification5_spec__2_#t~ret10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {8117#false} is VALID [2020-07-28 19:05:43,690 INFO L280 TraceCheckUtils]: 61: Hoare triple {8117#false} __utac_acc__Specification5_spec__2_#t~ret10 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret10 && __utac_acc__Specification5_spec__2_#t~ret10 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret10;havoc __utac_acc__Specification5_spec__2_#t~ret10; {8117#false} is VALID [2020-07-28 19:05:43,690 INFO L280 TraceCheckUtils]: 62: Hoare triple {8117#false} assume 0 != ~pumpRunning~0; {8117#false} is VALID [2020-07-28 19:05:43,691 INFO L280 TraceCheckUtils]: 63: Hoare triple {8117#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {8117#false} is VALID [2020-07-28 19:05:43,691 INFO L280 TraceCheckUtils]: 64: Hoare triple {8117#false} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {8117#false} is VALID [2020-07-28 19:05:43,691 INFO L280 TraceCheckUtils]: 65: Hoare triple {8117#false} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret16, isMethaneAlarm_~retValue_acc~4;havoc isMethaneAlarm_~retValue_acc~4;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {8117#false} is VALID [2020-07-28 19:05:43,691 INFO L280 TraceCheckUtils]: 66: Hoare triple {8117#false} isMethaneAlarm_#t~ret16 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret16 && isMethaneAlarm_#t~ret16 <= 2147483647;isMethaneAlarm_~retValue_acc~4 := isMethaneAlarm_#t~ret16;havoc isMethaneAlarm_#t~ret16;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~4; {8117#false} is VALID [2020-07-28 19:05:43,692 INFO L280 TraceCheckUtils]: 67: Hoare triple {8117#false} processEnvironment_#t~ret15 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret15 && processEnvironment_#t~ret15 <= 2147483647;processEnvironment_~tmp~3 := processEnvironment_#t~ret15;havoc processEnvironment_#t~ret15; {8117#false} is VALID [2020-07-28 19:05:43,692 INFO L280 TraceCheckUtils]: 68: Hoare triple {8117#false} assume 0 != processEnvironment_~tmp~3;~pumpRunning~0 := 0; {8117#false} is VALID [2020-07-28 19:05:43,692 INFO L280 TraceCheckUtils]: 69: Hoare triple {8117#false} havoc __utac_acc__Specification5_spec__3_#t~ret11, __utac_acc__Specification5_spec__3_#t~ret12, __utac_acc__Specification5_spec__3_~tmp~0, __utac_acc__Specification5_spec__3_~tmp___0~0;havoc __utac_acc__Specification5_spec__3_~tmp~0;havoc __utac_acc__Specification5_spec__3_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {8117#false} is VALID [2020-07-28 19:05:43,692 INFO L280 TraceCheckUtils]: 70: Hoare triple {8117#false} __utac_acc__Specification5_spec__3_#t~ret11 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret11 && __utac_acc__Specification5_spec__3_#t~ret11 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0 := __utac_acc__Specification5_spec__3_#t~ret11;havoc __utac_acc__Specification5_spec__3_#t~ret11; {8117#false} is VALID [2020-07-28 19:05:43,692 INFO L280 TraceCheckUtils]: 71: Hoare triple {8117#false} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~0); {8117#false} is VALID [2020-07-28 19:05:43,693 INFO L280 TraceCheckUtils]: 72: Hoare triple {8117#false} assume !false; {8117#false} is VALID [2020-07-28 19:05:43,693 INFO L280 TraceCheckUtils]: 73: Hoare triple {8117#false} assume test_~splverifierCounter~0 < 4; {8117#false} is VALID [2020-07-28 19:05:43,693 INFO L280 TraceCheckUtils]: 74: Hoare triple {8117#false} assume -2147483648 <= test_#t~nondet34 && test_#t~nondet34 <= 2147483647;test_~tmp~5 := test_#t~nondet34;havoc test_#t~nondet34; {8117#false} is VALID [2020-07-28 19:05:43,693 INFO L280 TraceCheckUtils]: 75: Hoare triple {8117#false} assume !(0 != test_~tmp~5); {8117#false} is VALID [2020-07-28 19:05:43,693 INFO L280 TraceCheckUtils]: 76: Hoare triple {8117#false} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp___0~2 := test_#t~nondet35;havoc test_#t~nondet35; {8117#false} is VALID [2020-07-28 19:05:43,693 INFO L280 TraceCheckUtils]: 77: Hoare triple {8117#false} assume !(0 != test_~tmp___0~2); {8117#false} is VALID [2020-07-28 19:05:43,694 INFO L280 TraceCheckUtils]: 78: Hoare triple {8117#false} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___2~0 := test_#t~nondet36;havoc test_#t~nondet36; {8117#false} is VALID [2020-07-28 19:05:43,694 INFO L280 TraceCheckUtils]: 79: Hoare triple {8117#false} assume 0 != test_~tmp___2~0; {8117#false} is VALID [2020-07-28 19:05:43,694 INFO L280 TraceCheckUtils]: 80: Hoare triple {8117#false} havoc __utac_acc__Specification5_spec__2_#t~ret10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {8117#false} is VALID [2020-07-28 19:05:43,694 INFO L280 TraceCheckUtils]: 81: Hoare triple {8117#false} __utac_acc__Specification5_spec__2_#t~ret10 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret10 && __utac_acc__Specification5_spec__2_#t~ret10 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret10;havoc __utac_acc__Specification5_spec__2_#t~ret10; {8117#false} is VALID [2020-07-28 19:05:43,695 INFO L280 TraceCheckUtils]: 82: Hoare triple {8117#false} assume !(0 != ~pumpRunning~0); {8117#false} is VALID [2020-07-28 19:05:43,695 INFO L280 TraceCheckUtils]: 83: Hoare triple {8117#false} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {8117#false} is VALID [2020-07-28 19:05:43,695 INFO L280 TraceCheckUtils]: 84: Hoare triple {8117#false} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~2;havoc processEnvironment__wrappee__highWaterSensor_~tmp~2; {8117#false} is VALID [2020-07-28 19:05:43,696 INFO L280 TraceCheckUtils]: 85: Hoare triple {8117#false} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret33, isHighWaterLevel_~retValue_acc~6, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~6;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {8117#false} is VALID [2020-07-28 19:05:43,696 INFO L280 TraceCheckUtils]: 86: Hoare triple {8117#false} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {8117#false} is VALID [2020-07-28 19:05:43,696 INFO L280 TraceCheckUtils]: 87: Hoare triple {8117#false} isHighWaterLevel_#t~ret33 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret33 && isHighWaterLevel_#t~ret33 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret33;havoc isHighWaterLevel_#t~ret33; {8117#false} is VALID [2020-07-28 19:05:43,697 INFO L280 TraceCheckUtils]: 88: Hoare triple {8117#false} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {8117#false} is VALID [2020-07-28 19:05:43,697 INFO L280 TraceCheckUtils]: 89: Hoare triple {8117#false} isHighWaterLevel_~retValue_acc~6 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~6; {8117#false} is VALID [2020-07-28 19:05:43,697 INFO L280 TraceCheckUtils]: 90: Hoare triple {8117#false} processEnvironment__wrappee__highWaterSensor_#t~ret14 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret14 && processEnvironment__wrappee__highWaterSensor_#t~ret14 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~2 := processEnvironment__wrappee__highWaterSensor_#t~ret14;havoc processEnvironment__wrappee__highWaterSensor_#t~ret14; {8117#false} is VALID [2020-07-28 19:05:43,697 INFO L280 TraceCheckUtils]: 91: Hoare triple {8117#false} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~2;~pumpRunning~0 := 1; {8117#false} is VALID [2020-07-28 19:05:43,698 INFO L280 TraceCheckUtils]: 92: Hoare triple {8117#false} havoc __utac_acc__Specification5_spec__3_#t~ret11, __utac_acc__Specification5_spec__3_#t~ret12, __utac_acc__Specification5_spec__3_~tmp~0, __utac_acc__Specification5_spec__3_~tmp___0~0;havoc __utac_acc__Specification5_spec__3_~tmp~0;havoc __utac_acc__Specification5_spec__3_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {8117#false} is VALID [2020-07-28 19:05:43,698 INFO L280 TraceCheckUtils]: 93: Hoare triple {8117#false} __utac_acc__Specification5_spec__3_#t~ret11 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret11 && __utac_acc__Specification5_spec__3_#t~ret11 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0 := __utac_acc__Specification5_spec__3_#t~ret11;havoc __utac_acc__Specification5_spec__3_#t~ret11; {8117#false} is VALID [2020-07-28 19:05:43,698 INFO L280 TraceCheckUtils]: 94: Hoare triple {8117#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {8117#false} is VALID [2020-07-28 19:05:43,698 INFO L280 TraceCheckUtils]: 95: Hoare triple {8117#false} __utac_acc__Specification5_spec__3_#t~ret12 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret12 && __utac_acc__Specification5_spec__3_#t~ret12 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0 := __utac_acc__Specification5_spec__3_#t~ret12;havoc __utac_acc__Specification5_spec__3_#t~ret12; {8117#false} is VALID [2020-07-28 19:05:43,699 INFO L280 TraceCheckUtils]: 96: Hoare triple {8117#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~0; {8117#false} is VALID [2020-07-28 19:05:43,699 INFO L280 TraceCheckUtils]: 97: Hoare triple {8117#false} assume 0 == ~switchedOnBeforeTS~0; {8117#false} is VALID [2020-07-28 19:05:43,699 INFO L280 TraceCheckUtils]: 98: Hoare triple {8117#false} assume !false; {8117#false} is VALID [2020-07-28 19:05:43,709 INFO L134 CoverageAnalysis]: Checked inductivity of 107 backedges. 78 proven. 6 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2020-07-28 19:05:43,709 INFO L220 FreeRefinementEngine]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2020-07-28 19:05:43,709 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5] total 6 [2020-07-28 19:05:43,710 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [558903176] [2020-07-28 19:05:43,711 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 99 [2020-07-28 19:05:43,711 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:05:43,711 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states. [2020-07-28 19:05:43,810 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 92 edges. 92 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:05:43,810 INFO L459 AbstractCegarLoop]: Interpolant automaton has 7 states [2020-07-28 19:05:43,810 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:05:43,810 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2020-07-28 19:05:43,810 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=28, Unknown=0, NotChecked=0, Total=42 [2020-07-28 19:05:43,811 INFO L87 Difference]: Start difference. First operand 177 states and 225 transitions. Second operand 7 states. [2020-07-28 19:05:45,314 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:05:45,314 INFO L93 Difference]: Finished difference Result 527 states and 673 transitions. [2020-07-28 19:05:45,314 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2020-07-28 19:05:45,314 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 99 [2020-07-28 19:05:45,315 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:05:45,315 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2020-07-28 19:05:45,317 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 255 transitions. [2020-07-28 19:05:45,317 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2020-07-28 19:05:45,318 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 255 transitions. [2020-07-28 19:05:45,318 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 10 states and 255 transitions. [2020-07-28 19:05:45,571 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 255 edges. 255 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:05:45,582 INFO L225 Difference]: With dead ends: 527 [2020-07-28 19:05:45,583 INFO L226 Difference]: Without dead ends: 357 [2020-07-28 19:05:45,584 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 109 GetRequests, 99 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 14 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=50, Invalid=82, Unknown=0, NotChecked=0, Total=132 [2020-07-28 19:05:45,584 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 357 states. [2020-07-28 19:05:46,035 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 357 to 208. [2020-07-28 19:05:46,035 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:05:46,035 INFO L82 GeneralOperation]: Start isEquivalent. First operand 357 states. Second operand 208 states. [2020-07-28 19:05:46,035 INFO L74 IsIncluded]: Start isIncluded. First operand 357 states. Second operand 208 states. [2020-07-28 19:05:46,036 INFO L87 Difference]: Start difference. First operand 357 states. Second operand 208 states. [2020-07-28 19:05:46,043 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:05:46,043 INFO L93 Difference]: Finished difference Result 357 states and 447 transitions. [2020-07-28 19:05:46,043 INFO L276 IsEmpty]: Start isEmpty. Operand 357 states and 447 transitions. [2020-07-28 19:05:46,043 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:05:46,044 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:05:46,044 INFO L74 IsIncluded]: Start isIncluded. First operand 208 states. Second operand 357 states. [2020-07-28 19:05:46,044 INFO L87 Difference]: Start difference. First operand 208 states. Second operand 357 states. [2020-07-28 19:05:46,052 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:05:46,052 INFO L93 Difference]: Finished difference Result 357 states and 447 transitions. [2020-07-28 19:05:46,052 INFO L276 IsEmpty]: Start isEmpty. Operand 357 states and 447 transitions. [2020-07-28 19:05:46,053 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:05:46,053 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:05:46,053 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:05:46,053 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:05:46,053 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 208 states. [2020-07-28 19:05:46,057 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 208 states to 208 states and 259 transitions. [2020-07-28 19:05:46,057 INFO L78 Accepts]: Start accepts. Automaton has 208 states and 259 transitions. Word has length 99 [2020-07-28 19:05:46,057 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:05:46,057 INFO L479 AbstractCegarLoop]: Abstraction has 208 states and 259 transitions. [2020-07-28 19:05:46,057 INFO L480 AbstractCegarLoop]: Interpolant automaton has 7 states. [2020-07-28 19:05:46,057 INFO L276 IsEmpty]: Start isEmpty. Operand 208 states and 259 transitions. [2020-07-28 19:05:46,058 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 105 [2020-07-28 19:05:46,058 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:05:46,059 INFO L422 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:05:46,271 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,3 z3 -smt2 -in SMTLIB2_COMPLIANT=true [2020-07-28 19:05:46,272 INFO L427 AbstractCegarLoop]: === Iteration 12 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:05:46,273 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:05:46,273 INFO L82 PathProgramCache]: Analyzing trace with hash 2014452909, now seen corresponding path program 1 times [2020-07-28 19:05:46,273 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:05:46,273 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1078422769] [2020-07-28 19:05:46,274 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:05:46,307 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:05:46,372 INFO L280 TraceCheckUtils]: 0: Hoare triple {10173#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(13);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string20.base, #t~string20.offset, 1);call write~init~int(110, #t~string20.base, 1 + #t~string20.offset, 1);call write~init~int(0, #t~string20.base, 2 + #t~string20.offset, 1);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string22.base, #t~string22.offset, 1);call write~init~int(102, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(102, #t~string22.base, 2 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 3 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string24.base, #t~string24.offset, 1);call write~init~int(80, #t~string24.base, 1 + #t~string24.offset, 1);call write~init~int(117, #t~string24.base, 2 + #t~string24.offset, 1);call write~init~int(109, #t~string24.base, 3 + #t~string24.offset, 1);call write~init~int(112, #t~string24.base, 4 + #t~string24.offset, 1);call write~init~int(58, #t~string24.base, 5 + #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 6 + #t~string24.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string26.base, #t~string26.offset, 1);call write~init~int(110, #t~string26.base, 1 + #t~string26.offset, 1);call write~init~int(0, #t~string26.base, 2 + #t~string26.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string28.base, #t~string28.offset, 1);call write~init~int(102, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(102, #t~string28.base, 2 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 3 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string30.base, #t~string30.offset, 1);call write~init~int(32, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 2 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string32.base, #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 1 + #t~string32.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(30);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(9);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(21);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(30);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(9);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {10173#true} is VALID [2020-07-28 19:05:46,372 INFO L280 TraceCheckUtils]: 1: Hoare triple {10173#true} havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~3, main_~tmp~1;havoc main_~retValue_acc~3;havoc main_~tmp~1; {10173#true} is VALID [2020-07-28 19:05:46,373 INFO L280 TraceCheckUtils]: 2: Hoare triple {10173#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {10173#true} is VALID [2020-07-28 19:05:46,373 INFO L280 TraceCheckUtils]: 3: Hoare triple {10173#true} main_#t~ret13 := valid_product_#res;assume -2147483648 <= main_#t~ret13 && main_#t~ret13 <= 2147483647;main_~tmp~1 := main_#t~ret13;havoc main_#t~ret13; {10173#true} is VALID [2020-07-28 19:05:46,373 INFO L280 TraceCheckUtils]: 4: Hoare triple {10173#true} assume 0 != main_~tmp~1; {10173#true} is VALID [2020-07-28 19:05:46,373 INFO L280 TraceCheckUtils]: 5: Hoare triple {10173#true} ~switchedOnBeforeTS~0 := 0; {10173#true} is VALID [2020-07-28 19:05:46,373 INFO L280 TraceCheckUtils]: 6: Hoare triple {10173#true} havoc test_#t~nondet34, test_#t~nondet35, test_#t~nondet36, test_#t~nondet37, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~2, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~2;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {10173#true} is VALID [2020-07-28 19:05:46,373 INFO L280 TraceCheckUtils]: 7: Hoare triple {10173#true} assume !false; {10173#true} is VALID [2020-07-28 19:05:46,374 INFO L280 TraceCheckUtils]: 8: Hoare triple {10173#true} assume test_~splverifierCounter~0 < 4; {10173#true} is VALID [2020-07-28 19:05:46,374 INFO L280 TraceCheckUtils]: 9: Hoare triple {10173#true} assume -2147483648 <= test_#t~nondet34 && test_#t~nondet34 <= 2147483647;test_~tmp~5 := test_#t~nondet34;havoc test_#t~nondet34; {10173#true} is VALID [2020-07-28 19:05:46,374 INFO L280 TraceCheckUtils]: 10: Hoare triple {10173#true} assume 0 != test_~tmp~5; {10173#true} is VALID [2020-07-28 19:05:46,374 INFO L280 TraceCheckUtils]: 11: Hoare triple {10173#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {10173#true} is VALID [2020-07-28 19:05:46,374 INFO L280 TraceCheckUtils]: 12: Hoare triple {10173#true} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp___0~2 := test_#t~nondet35;havoc test_#t~nondet35; {10173#true} is VALID [2020-07-28 19:05:46,374 INFO L280 TraceCheckUtils]: 13: Hoare triple {10173#true} assume !(0 != test_~tmp___0~2); {10173#true} is VALID [2020-07-28 19:05:46,375 INFO L280 TraceCheckUtils]: 14: Hoare triple {10173#true} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___2~0 := test_#t~nondet36;havoc test_#t~nondet36; {10173#true} is VALID [2020-07-28 19:05:46,375 INFO L280 TraceCheckUtils]: 15: Hoare triple {10173#true} assume 0 != test_~tmp___2~0; {10173#true} is VALID [2020-07-28 19:05:46,375 INFO L280 TraceCheckUtils]: 16: Hoare triple {10173#true} havoc __utac_acc__Specification5_spec__2_#t~ret10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {10173#true} is VALID [2020-07-28 19:05:46,375 INFO L280 TraceCheckUtils]: 17: Hoare triple {10173#true} __utac_acc__Specification5_spec__2_#t~ret10 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret10 && __utac_acc__Specification5_spec__2_#t~ret10 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret10;havoc __utac_acc__Specification5_spec__2_#t~ret10; {10173#true} is VALID [2020-07-28 19:05:46,375 INFO L280 TraceCheckUtils]: 18: Hoare triple {10173#true} assume !(0 != ~pumpRunning~0); {10173#true} is VALID [2020-07-28 19:05:46,375 INFO L280 TraceCheckUtils]: 19: Hoare triple {10173#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {10173#true} is VALID [2020-07-28 19:05:46,376 INFO L280 TraceCheckUtils]: 20: Hoare triple {10173#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~2;havoc processEnvironment__wrappee__highWaterSensor_~tmp~2; {10173#true} is VALID [2020-07-28 19:05:46,376 INFO L280 TraceCheckUtils]: 21: Hoare triple {10173#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret33, isHighWaterLevel_~retValue_acc~6, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~6;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {10173#true} is VALID [2020-07-28 19:05:46,376 INFO L280 TraceCheckUtils]: 22: Hoare triple {10173#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {10173#true} is VALID [2020-07-28 19:05:46,376 INFO L280 TraceCheckUtils]: 23: Hoare triple {10173#true} isHighWaterLevel_#t~ret33 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret33 && isHighWaterLevel_#t~ret33 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret33;havoc isHighWaterLevel_#t~ret33; {10173#true} is VALID [2020-07-28 19:05:46,376 INFO L280 TraceCheckUtils]: 24: Hoare triple {10173#true} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {10173#true} is VALID [2020-07-28 19:05:46,377 INFO L280 TraceCheckUtils]: 25: Hoare triple {10173#true} isHighWaterLevel_~retValue_acc~6 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~6; {10173#true} is VALID [2020-07-28 19:05:46,377 INFO L280 TraceCheckUtils]: 26: Hoare triple {10173#true} processEnvironment__wrappee__highWaterSensor_#t~ret14 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret14 && processEnvironment__wrappee__highWaterSensor_#t~ret14 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~2 := processEnvironment__wrappee__highWaterSensor_#t~ret14;havoc processEnvironment__wrappee__highWaterSensor_#t~ret14; {10173#true} is VALID [2020-07-28 19:05:46,377 INFO L280 TraceCheckUtils]: 27: Hoare triple {10173#true} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~2;~pumpRunning~0 := 1; {10175#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:05:46,378 INFO L280 TraceCheckUtils]: 28: Hoare triple {10175#(= 1 ~pumpRunning~0)} havoc __utac_acc__Specification5_spec__3_#t~ret11, __utac_acc__Specification5_spec__3_#t~ret12, __utac_acc__Specification5_spec__3_~tmp~0, __utac_acc__Specification5_spec__3_~tmp___0~0;havoc __utac_acc__Specification5_spec__3_~tmp~0;havoc __utac_acc__Specification5_spec__3_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {10175#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:05:46,378 INFO L280 TraceCheckUtils]: 29: Hoare triple {10175#(= 1 ~pumpRunning~0)} __utac_acc__Specification5_spec__3_#t~ret11 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret11 && __utac_acc__Specification5_spec__3_#t~ret11 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0 := __utac_acc__Specification5_spec__3_#t~ret11;havoc __utac_acc__Specification5_spec__3_#t~ret11; {10175#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:05:46,379 INFO L280 TraceCheckUtils]: 30: Hoare triple {10175#(= 1 ~pumpRunning~0)} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~0); {10175#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:05:46,379 INFO L280 TraceCheckUtils]: 31: Hoare triple {10175#(= 1 ~pumpRunning~0)} assume !false; {10175#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:05:46,380 INFO L280 TraceCheckUtils]: 32: Hoare triple {10175#(= 1 ~pumpRunning~0)} assume test_~splverifierCounter~0 < 4; {10175#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:05:46,380 INFO L280 TraceCheckUtils]: 33: Hoare triple {10175#(= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet34 && test_#t~nondet34 <= 2147483647;test_~tmp~5 := test_#t~nondet34;havoc test_#t~nondet34; {10175#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:05:46,381 INFO L280 TraceCheckUtils]: 34: Hoare triple {10175#(= 1 ~pumpRunning~0)} assume !(0 != test_~tmp~5); {10175#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:05:46,381 INFO L280 TraceCheckUtils]: 35: Hoare triple {10175#(= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp___0~2 := test_#t~nondet35;havoc test_#t~nondet35; {10175#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:05:46,382 INFO L280 TraceCheckUtils]: 36: Hoare triple {10175#(= 1 ~pumpRunning~0)} assume !(0 != test_~tmp___0~2); {10175#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:05:46,382 INFO L280 TraceCheckUtils]: 37: Hoare triple {10175#(= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___2~0 := test_#t~nondet36;havoc test_#t~nondet36; {10175#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:05:46,382 INFO L280 TraceCheckUtils]: 38: Hoare triple {10175#(= 1 ~pumpRunning~0)} assume 0 != test_~tmp___2~0; {10175#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:05:46,383 INFO L280 TraceCheckUtils]: 39: Hoare triple {10175#(= 1 ~pumpRunning~0)} havoc __utac_acc__Specification5_spec__2_#t~ret10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {10175#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:05:46,383 INFO L280 TraceCheckUtils]: 40: Hoare triple {10175#(= 1 ~pumpRunning~0)} __utac_acc__Specification5_spec__2_#t~ret10 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret10 && __utac_acc__Specification5_spec__2_#t~ret10 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret10;havoc __utac_acc__Specification5_spec__2_#t~ret10; {10175#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:05:46,384 INFO L280 TraceCheckUtils]: 41: Hoare triple {10175#(= 1 ~pumpRunning~0)} assume 0 != ~pumpRunning~0; {10175#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:05:46,385 INFO L280 TraceCheckUtils]: 42: Hoare triple {10175#(= 1 ~pumpRunning~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {10175#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:05:46,385 INFO L280 TraceCheckUtils]: 43: Hoare triple {10175#(= 1 ~pumpRunning~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {10175#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:05:46,386 INFO L280 TraceCheckUtils]: 44: Hoare triple {10175#(= 1 ~pumpRunning~0)} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret16, isMethaneAlarm_~retValue_acc~4;havoc isMethaneAlarm_~retValue_acc~4;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {10175#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:05:46,387 INFO L280 TraceCheckUtils]: 45: Hoare triple {10175#(= 1 ~pumpRunning~0)} isMethaneAlarm_#t~ret16 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret16 && isMethaneAlarm_#t~ret16 <= 2147483647;isMethaneAlarm_~retValue_acc~4 := isMethaneAlarm_#t~ret16;havoc isMethaneAlarm_#t~ret16;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~4; {10175#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:05:46,387 INFO L280 TraceCheckUtils]: 46: Hoare triple {10175#(= 1 ~pumpRunning~0)} processEnvironment_#t~ret15 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret15 && processEnvironment_#t~ret15 <= 2147483647;processEnvironment_~tmp~3 := processEnvironment_#t~ret15;havoc processEnvironment_#t~ret15; {10175#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:05:46,388 INFO L280 TraceCheckUtils]: 47: Hoare triple {10175#(= 1 ~pumpRunning~0)} assume !(0 != processEnvironment_~tmp~3);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~2;havoc processEnvironment__wrappee__highWaterSensor_~tmp~2; {10175#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:05:46,388 INFO L280 TraceCheckUtils]: 48: Hoare triple {10175#(= 1 ~pumpRunning~0)} assume !(0 == ~pumpRunning~0); {10175#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:05:46,389 INFO L280 TraceCheckUtils]: 49: Hoare triple {10175#(= 1 ~pumpRunning~0)} havoc __utac_acc__Specification5_spec__3_#t~ret11, __utac_acc__Specification5_spec__3_#t~ret12, __utac_acc__Specification5_spec__3_~tmp~0, __utac_acc__Specification5_spec__3_~tmp___0~0;havoc __utac_acc__Specification5_spec__3_~tmp~0;havoc __utac_acc__Specification5_spec__3_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {10175#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:05:46,389 INFO L280 TraceCheckUtils]: 50: Hoare triple {10175#(= 1 ~pumpRunning~0)} __utac_acc__Specification5_spec__3_#t~ret11 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret11 && __utac_acc__Specification5_spec__3_#t~ret11 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0 := __utac_acc__Specification5_spec__3_#t~ret11;havoc __utac_acc__Specification5_spec__3_#t~ret11; {10175#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:05:46,390 INFO L280 TraceCheckUtils]: 51: Hoare triple {10175#(= 1 ~pumpRunning~0)} assume 2 != __utac_acc__Specification5_spec__3_~tmp~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {10176#(= 1 |ULTIMATE.start_isPumpRunning_#res|)} is VALID [2020-07-28 19:05:46,391 INFO L280 TraceCheckUtils]: 52: Hoare triple {10176#(= 1 |ULTIMATE.start_isPumpRunning_#res|)} __utac_acc__Specification5_spec__3_#t~ret12 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret12 && __utac_acc__Specification5_spec__3_#t~ret12 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0 := __utac_acc__Specification5_spec__3_#t~ret12;havoc __utac_acc__Specification5_spec__3_#t~ret12; {10177#(= 1 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp___0~0)} is VALID [2020-07-28 19:05:46,391 INFO L280 TraceCheckUtils]: 53: Hoare triple {10177#(= 1 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp___0~0)} assume !(0 != __utac_acc__Specification5_spec__3_~tmp___0~0); {10174#false} is VALID [2020-07-28 19:05:46,392 INFO L280 TraceCheckUtils]: 54: Hoare triple {10174#false} assume !false; {10174#false} is VALID [2020-07-28 19:05:46,392 INFO L280 TraceCheckUtils]: 55: Hoare triple {10174#false} assume test_~splverifierCounter~0 < 4; {10174#false} is VALID [2020-07-28 19:05:46,392 INFO L280 TraceCheckUtils]: 56: Hoare triple {10174#false} assume -2147483648 <= test_#t~nondet34 && test_#t~nondet34 <= 2147483647;test_~tmp~5 := test_#t~nondet34;havoc test_#t~nondet34; {10174#false} is VALID [2020-07-28 19:05:46,392 INFO L280 TraceCheckUtils]: 57: Hoare triple {10174#false} assume !(0 != test_~tmp~5); {10174#false} is VALID [2020-07-28 19:05:46,392 INFO L280 TraceCheckUtils]: 58: Hoare triple {10174#false} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp___0~2 := test_#t~nondet35;havoc test_#t~nondet35; {10174#false} is VALID [2020-07-28 19:05:46,392 INFO L280 TraceCheckUtils]: 59: Hoare triple {10174#false} assume !(0 != test_~tmp___0~2); {10174#false} is VALID [2020-07-28 19:05:46,393 INFO L280 TraceCheckUtils]: 60: Hoare triple {10174#false} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___2~0 := test_#t~nondet36;havoc test_#t~nondet36; {10174#false} is VALID [2020-07-28 19:05:46,393 INFO L280 TraceCheckUtils]: 61: Hoare triple {10174#false} assume 0 != test_~tmp___2~0; {10174#false} is VALID [2020-07-28 19:05:46,393 INFO L280 TraceCheckUtils]: 62: Hoare triple {10174#false} havoc __utac_acc__Specification5_spec__2_#t~ret10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {10174#false} is VALID [2020-07-28 19:05:46,393 INFO L280 TraceCheckUtils]: 63: Hoare triple {10174#false} __utac_acc__Specification5_spec__2_#t~ret10 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret10 && __utac_acc__Specification5_spec__2_#t~ret10 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret10;havoc __utac_acc__Specification5_spec__2_#t~ret10; {10174#false} is VALID [2020-07-28 19:05:46,394 INFO L280 TraceCheckUtils]: 64: Hoare triple {10174#false} assume 0 != ~pumpRunning~0; {10174#false} is VALID [2020-07-28 19:05:46,394 INFO L280 TraceCheckUtils]: 65: Hoare triple {10174#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {10174#false} is VALID [2020-07-28 19:05:46,394 INFO L280 TraceCheckUtils]: 66: Hoare triple {10174#false} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {10174#false} is VALID [2020-07-28 19:05:46,394 INFO L280 TraceCheckUtils]: 67: Hoare triple {10174#false} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret16, isMethaneAlarm_~retValue_acc~4;havoc isMethaneAlarm_~retValue_acc~4;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {10174#false} is VALID [2020-07-28 19:05:46,395 INFO L280 TraceCheckUtils]: 68: Hoare triple {10174#false} isMethaneAlarm_#t~ret16 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret16 && isMethaneAlarm_#t~ret16 <= 2147483647;isMethaneAlarm_~retValue_acc~4 := isMethaneAlarm_#t~ret16;havoc isMethaneAlarm_#t~ret16;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~4; {10174#false} is VALID [2020-07-28 19:05:46,395 INFO L280 TraceCheckUtils]: 69: Hoare triple {10174#false} processEnvironment_#t~ret15 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret15 && processEnvironment_#t~ret15 <= 2147483647;processEnvironment_~tmp~3 := processEnvironment_#t~ret15;havoc processEnvironment_#t~ret15; {10174#false} is VALID [2020-07-28 19:05:46,395 INFO L280 TraceCheckUtils]: 70: Hoare triple {10174#false} assume 0 != processEnvironment_~tmp~3;~pumpRunning~0 := 0; {10174#false} is VALID [2020-07-28 19:05:46,395 INFO L280 TraceCheckUtils]: 71: Hoare triple {10174#false} havoc __utac_acc__Specification5_spec__3_#t~ret11, __utac_acc__Specification5_spec__3_#t~ret12, __utac_acc__Specification5_spec__3_~tmp~0, __utac_acc__Specification5_spec__3_~tmp___0~0;havoc __utac_acc__Specification5_spec__3_~tmp~0;havoc __utac_acc__Specification5_spec__3_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {10174#false} is VALID [2020-07-28 19:05:46,395 INFO L280 TraceCheckUtils]: 72: Hoare triple {10174#false} __utac_acc__Specification5_spec__3_#t~ret11 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret11 && __utac_acc__Specification5_spec__3_#t~ret11 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0 := __utac_acc__Specification5_spec__3_#t~ret11;havoc __utac_acc__Specification5_spec__3_#t~ret11; {10174#false} is VALID [2020-07-28 19:05:46,396 INFO L280 TraceCheckUtils]: 73: Hoare triple {10174#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {10174#false} is VALID [2020-07-28 19:05:46,396 INFO L280 TraceCheckUtils]: 74: Hoare triple {10174#false} __utac_acc__Specification5_spec__3_#t~ret12 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret12 && __utac_acc__Specification5_spec__3_#t~ret12 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0 := __utac_acc__Specification5_spec__3_#t~ret12;havoc __utac_acc__Specification5_spec__3_#t~ret12; {10174#false} is VALID [2020-07-28 19:05:46,396 INFO L280 TraceCheckUtils]: 75: Hoare triple {10174#false} assume !(0 != __utac_acc__Specification5_spec__3_~tmp___0~0); {10174#false} is VALID [2020-07-28 19:05:46,396 INFO L280 TraceCheckUtils]: 76: Hoare triple {10174#false} assume !false; {10174#false} is VALID [2020-07-28 19:05:46,397 INFO L280 TraceCheckUtils]: 77: Hoare triple {10174#false} assume test_~splverifierCounter~0 < 4; {10174#false} is VALID [2020-07-28 19:05:46,397 INFO L280 TraceCheckUtils]: 78: Hoare triple {10174#false} assume -2147483648 <= test_#t~nondet34 && test_#t~nondet34 <= 2147483647;test_~tmp~5 := test_#t~nondet34;havoc test_#t~nondet34; {10174#false} is VALID [2020-07-28 19:05:46,397 INFO L280 TraceCheckUtils]: 79: Hoare triple {10174#false} assume 0 != test_~tmp~5; {10174#false} is VALID [2020-07-28 19:05:46,397 INFO L280 TraceCheckUtils]: 80: Hoare triple {10174#false} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {10174#false} is VALID [2020-07-28 19:05:46,397 INFO L280 TraceCheckUtils]: 81: Hoare triple {10174#false} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp___0~2 := test_#t~nondet35;havoc test_#t~nondet35; {10174#false} is VALID [2020-07-28 19:05:46,398 INFO L280 TraceCheckUtils]: 82: Hoare triple {10174#false} assume !(0 != test_~tmp___0~2); {10174#false} is VALID [2020-07-28 19:05:46,398 INFO L280 TraceCheckUtils]: 83: Hoare triple {10174#false} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___2~0 := test_#t~nondet36;havoc test_#t~nondet36; {10174#false} is VALID [2020-07-28 19:05:46,398 INFO L280 TraceCheckUtils]: 84: Hoare triple {10174#false} assume 0 != test_~tmp___2~0; {10174#false} is VALID [2020-07-28 19:05:46,405 INFO L280 TraceCheckUtils]: 85: Hoare triple {10174#false} havoc __utac_acc__Specification5_spec__2_#t~ret10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {10174#false} is VALID [2020-07-28 19:05:46,405 INFO L280 TraceCheckUtils]: 86: Hoare triple {10174#false} __utac_acc__Specification5_spec__2_#t~ret10 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret10 && __utac_acc__Specification5_spec__2_#t~ret10 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret10;havoc __utac_acc__Specification5_spec__2_#t~ret10; {10174#false} is VALID [2020-07-28 19:05:46,406 INFO L280 TraceCheckUtils]: 87: Hoare triple {10174#false} assume !(0 != ~pumpRunning~0); {10174#false} is VALID [2020-07-28 19:05:46,406 INFO L280 TraceCheckUtils]: 88: Hoare triple {10174#false} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {10174#false} is VALID [2020-07-28 19:05:46,406 INFO L280 TraceCheckUtils]: 89: Hoare triple {10174#false} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~2;havoc processEnvironment__wrappee__highWaterSensor_~tmp~2; {10174#false} is VALID [2020-07-28 19:05:46,406 INFO L280 TraceCheckUtils]: 90: Hoare triple {10174#false} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret33, isHighWaterLevel_~retValue_acc~6, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~6;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {10174#false} is VALID [2020-07-28 19:05:46,406 INFO L280 TraceCheckUtils]: 91: Hoare triple {10174#false} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {10174#false} is VALID [2020-07-28 19:05:46,406 INFO L280 TraceCheckUtils]: 92: Hoare triple {10174#false} isHighWaterLevel_#t~ret33 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret33 && isHighWaterLevel_#t~ret33 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret33;havoc isHighWaterLevel_#t~ret33; {10174#false} is VALID [2020-07-28 19:05:46,407 INFO L280 TraceCheckUtils]: 93: Hoare triple {10174#false} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {10174#false} is VALID [2020-07-28 19:05:46,407 INFO L280 TraceCheckUtils]: 94: Hoare triple {10174#false} isHighWaterLevel_~retValue_acc~6 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~6; {10174#false} is VALID [2020-07-28 19:05:46,407 INFO L280 TraceCheckUtils]: 95: Hoare triple {10174#false} processEnvironment__wrappee__highWaterSensor_#t~ret14 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret14 && processEnvironment__wrappee__highWaterSensor_#t~ret14 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~2 := processEnvironment__wrappee__highWaterSensor_#t~ret14;havoc processEnvironment__wrappee__highWaterSensor_#t~ret14; {10174#false} is VALID [2020-07-28 19:05:46,407 INFO L280 TraceCheckUtils]: 96: Hoare triple {10174#false} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~2;~pumpRunning~0 := 1; {10174#false} is VALID [2020-07-28 19:05:46,407 INFO L280 TraceCheckUtils]: 97: Hoare triple {10174#false} havoc __utac_acc__Specification5_spec__3_#t~ret11, __utac_acc__Specification5_spec__3_#t~ret12, __utac_acc__Specification5_spec__3_~tmp~0, __utac_acc__Specification5_spec__3_~tmp___0~0;havoc __utac_acc__Specification5_spec__3_~tmp~0;havoc __utac_acc__Specification5_spec__3_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {10174#false} is VALID [2020-07-28 19:05:46,408 INFO L280 TraceCheckUtils]: 98: Hoare triple {10174#false} __utac_acc__Specification5_spec__3_#t~ret11 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret11 && __utac_acc__Specification5_spec__3_#t~ret11 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0 := __utac_acc__Specification5_spec__3_#t~ret11;havoc __utac_acc__Specification5_spec__3_#t~ret11; {10174#false} is VALID [2020-07-28 19:05:46,408 INFO L280 TraceCheckUtils]: 99: Hoare triple {10174#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {10174#false} is VALID [2020-07-28 19:05:46,408 INFO L280 TraceCheckUtils]: 100: Hoare triple {10174#false} __utac_acc__Specification5_spec__3_#t~ret12 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret12 && __utac_acc__Specification5_spec__3_#t~ret12 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0 := __utac_acc__Specification5_spec__3_#t~ret12;havoc __utac_acc__Specification5_spec__3_#t~ret12; {10174#false} is VALID [2020-07-28 19:05:46,408 INFO L280 TraceCheckUtils]: 101: Hoare triple {10174#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~0; {10174#false} is VALID [2020-07-28 19:05:46,411 INFO L280 TraceCheckUtils]: 102: Hoare triple {10174#false} assume 0 == ~switchedOnBeforeTS~0; {10174#false} is VALID [2020-07-28 19:05:46,412 INFO L280 TraceCheckUtils]: 103: Hoare triple {10174#false} assume !false; {10174#false} is VALID [2020-07-28 19:05:46,429 INFO L134 CoverageAnalysis]: Checked inductivity of 114 backedges. 93 proven. 0 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2020-07-28 19:05:46,429 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1078422769] [2020-07-28 19:05:46,429 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:05:46,429 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:05:46,429 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [856671865] [2020-07-28 19:05:46,430 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 104 [2020-07-28 19:05:46,431 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:05:46,431 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:05:46,520 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 88 edges. 88 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:05:46,520 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:05:46,520 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:05:46,520 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:05:46,520 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:05:46,521 INFO L87 Difference]: Start difference. First operand 208 states and 259 transitions. Second operand 5 states. [2020-07-28 19:05:47,697 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:05:47,697 INFO L93 Difference]: Finished difference Result 456 states and 571 transitions. [2020-07-28 19:05:47,697 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2020-07-28 19:05:47,697 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 104 [2020-07-28 19:05:47,698 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:05:47,698 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:05:47,699 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 172 transitions. [2020-07-28 19:05:47,699 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:05:47,699 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 172 transitions. [2020-07-28 19:05:47,700 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 172 transitions. [2020-07-28 19:05:47,903 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 172 edges. 172 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:05:47,909 INFO L225 Difference]: With dead ends: 456 [2020-07-28 19:05:47,909 INFO L226 Difference]: Without dead ends: 255 [2020-07-28 19:05:47,910 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2020-07-28 19:05:47,910 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 255 states. [2020-07-28 19:05:48,351 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 255 to 208. [2020-07-28 19:05:48,351 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:05:48,351 INFO L82 GeneralOperation]: Start isEquivalent. First operand 255 states. Second operand 208 states. [2020-07-28 19:05:48,352 INFO L74 IsIncluded]: Start isIncluded. First operand 255 states. Second operand 208 states. [2020-07-28 19:05:48,352 INFO L87 Difference]: Start difference. First operand 255 states. Second operand 208 states. [2020-07-28 19:05:48,356 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:05:48,356 INFO L93 Difference]: Finished difference Result 255 states and 316 transitions. [2020-07-28 19:05:48,357 INFO L276 IsEmpty]: Start isEmpty. Operand 255 states and 316 transitions. [2020-07-28 19:05:48,359 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:05:48,360 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:05:48,360 INFO L74 IsIncluded]: Start isIncluded. First operand 208 states. Second operand 255 states. [2020-07-28 19:05:48,360 INFO L87 Difference]: Start difference. First operand 208 states. Second operand 255 states. [2020-07-28 19:05:48,365 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:05:48,366 INFO L93 Difference]: Finished difference Result 255 states and 316 transitions. [2020-07-28 19:05:48,366 INFO L276 IsEmpty]: Start isEmpty. Operand 255 states and 316 transitions. [2020-07-28 19:05:48,367 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:05:48,367 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:05:48,367 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:05:48,367 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:05:48,367 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 208 states. [2020-07-28 19:05:48,371 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 208 states to 208 states and 256 transitions. [2020-07-28 19:05:48,371 INFO L78 Accepts]: Start accepts. Automaton has 208 states and 256 transitions. Word has length 104 [2020-07-28 19:05:48,372 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:05:48,372 INFO L479 AbstractCegarLoop]: Abstraction has 208 states and 256 transitions. [2020-07-28 19:05:48,372 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:05:48,372 INFO L276 IsEmpty]: Start isEmpty. Operand 208 states and 256 transitions. [2020-07-28 19:05:48,374 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 106 [2020-07-28 19:05:48,374 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:05:48,375 INFO L422 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:05:48,375 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2020-07-28 19:05:48,375 INFO L427 AbstractCegarLoop]: === Iteration 13 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:05:48,375 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:05:48,376 INFO L82 PathProgramCache]: Analyzing trace with hash -1604391930, now seen corresponding path program 1 times [2020-07-28 19:05:48,376 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:05:48,376 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1925124762] [2020-07-28 19:05:48,376 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:05:48,414 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:05:48,518 INFO L280 TraceCheckUtils]: 0: Hoare triple {11627#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(13);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string20.base, #t~string20.offset, 1);call write~init~int(110, #t~string20.base, 1 + #t~string20.offset, 1);call write~init~int(0, #t~string20.base, 2 + #t~string20.offset, 1);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string22.base, #t~string22.offset, 1);call write~init~int(102, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(102, #t~string22.base, 2 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 3 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string24.base, #t~string24.offset, 1);call write~init~int(80, #t~string24.base, 1 + #t~string24.offset, 1);call write~init~int(117, #t~string24.base, 2 + #t~string24.offset, 1);call write~init~int(109, #t~string24.base, 3 + #t~string24.offset, 1);call write~init~int(112, #t~string24.base, 4 + #t~string24.offset, 1);call write~init~int(58, #t~string24.base, 5 + #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 6 + #t~string24.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string26.base, #t~string26.offset, 1);call write~init~int(110, #t~string26.base, 1 + #t~string26.offset, 1);call write~init~int(0, #t~string26.base, 2 + #t~string26.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string28.base, #t~string28.offset, 1);call write~init~int(102, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(102, #t~string28.base, 2 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 3 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string30.base, #t~string30.offset, 1);call write~init~int(32, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 2 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string32.base, #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 1 + #t~string32.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(30);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(9);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(21);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(30);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(9);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {11627#true} is VALID [2020-07-28 19:05:48,519 INFO L280 TraceCheckUtils]: 1: Hoare triple {11627#true} havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~3, main_~tmp~1;havoc main_~retValue_acc~3;havoc main_~tmp~1; {11627#true} is VALID [2020-07-28 19:05:48,519 INFO L280 TraceCheckUtils]: 2: Hoare triple {11627#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {11627#true} is VALID [2020-07-28 19:05:48,519 INFO L280 TraceCheckUtils]: 3: Hoare triple {11627#true} main_#t~ret13 := valid_product_#res;assume -2147483648 <= main_#t~ret13 && main_#t~ret13 <= 2147483647;main_~tmp~1 := main_#t~ret13;havoc main_#t~ret13; {11627#true} is VALID [2020-07-28 19:05:48,519 INFO L280 TraceCheckUtils]: 4: Hoare triple {11627#true} assume 0 != main_~tmp~1; {11627#true} is VALID [2020-07-28 19:05:48,520 INFO L280 TraceCheckUtils]: 5: Hoare triple {11627#true} ~switchedOnBeforeTS~0 := 0; {11627#true} is VALID [2020-07-28 19:05:48,520 INFO L280 TraceCheckUtils]: 6: Hoare triple {11627#true} havoc test_#t~nondet34, test_#t~nondet35, test_#t~nondet36, test_#t~nondet37, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~2, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~2;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {11627#true} is VALID [2020-07-28 19:05:48,520 INFO L280 TraceCheckUtils]: 7: Hoare triple {11627#true} assume !false; {11627#true} is VALID [2020-07-28 19:05:48,520 INFO L280 TraceCheckUtils]: 8: Hoare triple {11627#true} assume test_~splverifierCounter~0 < 4; {11627#true} is VALID [2020-07-28 19:05:48,520 INFO L280 TraceCheckUtils]: 9: Hoare triple {11627#true} assume -2147483648 <= test_#t~nondet34 && test_#t~nondet34 <= 2147483647;test_~tmp~5 := test_#t~nondet34;havoc test_#t~nondet34; {11627#true} is VALID [2020-07-28 19:05:48,521 INFO L280 TraceCheckUtils]: 10: Hoare triple {11627#true} assume 0 != test_~tmp~5; {11627#true} is VALID [2020-07-28 19:05:48,521 INFO L280 TraceCheckUtils]: 11: Hoare triple {11627#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {11627#true} is VALID [2020-07-28 19:05:48,521 INFO L280 TraceCheckUtils]: 12: Hoare triple {11627#true} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp___0~2 := test_#t~nondet35;havoc test_#t~nondet35; {11627#true} is VALID [2020-07-28 19:05:48,521 INFO L280 TraceCheckUtils]: 13: Hoare triple {11627#true} assume !(0 != test_~tmp___0~2); {11627#true} is VALID [2020-07-28 19:05:48,521 INFO L280 TraceCheckUtils]: 14: Hoare triple {11627#true} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___2~0 := test_#t~nondet36;havoc test_#t~nondet36; {11627#true} is VALID [2020-07-28 19:05:48,521 INFO L280 TraceCheckUtils]: 15: Hoare triple {11627#true} assume 0 != test_~tmp___2~0; {11627#true} is VALID [2020-07-28 19:05:48,522 INFO L280 TraceCheckUtils]: 16: Hoare triple {11627#true} havoc __utac_acc__Specification5_spec__2_#t~ret10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {11627#true} is VALID [2020-07-28 19:05:48,522 INFO L280 TraceCheckUtils]: 17: Hoare triple {11627#true} __utac_acc__Specification5_spec__2_#t~ret10 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret10 && __utac_acc__Specification5_spec__2_#t~ret10 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret10;havoc __utac_acc__Specification5_spec__2_#t~ret10; {11627#true} is VALID [2020-07-28 19:05:48,522 INFO L280 TraceCheckUtils]: 18: Hoare triple {11627#true} assume !(0 != ~pumpRunning~0); {11627#true} is VALID [2020-07-28 19:05:48,522 INFO L280 TraceCheckUtils]: 19: Hoare triple {11627#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {11627#true} is VALID [2020-07-28 19:05:48,522 INFO L280 TraceCheckUtils]: 20: Hoare triple {11627#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~2;havoc processEnvironment__wrappee__highWaterSensor_~tmp~2; {11627#true} is VALID [2020-07-28 19:05:48,522 INFO L280 TraceCheckUtils]: 21: Hoare triple {11627#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret33, isHighWaterLevel_~retValue_acc~6, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~6;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {11627#true} is VALID [2020-07-28 19:05:48,523 INFO L280 TraceCheckUtils]: 22: Hoare triple {11627#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {11627#true} is VALID [2020-07-28 19:05:48,523 INFO L280 TraceCheckUtils]: 23: Hoare triple {11627#true} isHighWaterLevel_#t~ret33 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret33 && isHighWaterLevel_#t~ret33 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret33;havoc isHighWaterLevel_#t~ret33; {11627#true} is VALID [2020-07-28 19:05:48,523 INFO L280 TraceCheckUtils]: 24: Hoare triple {11627#true} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {11627#true} is VALID [2020-07-28 19:05:48,523 INFO L280 TraceCheckUtils]: 25: Hoare triple {11627#true} isHighWaterLevel_~retValue_acc~6 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~6; {11627#true} is VALID [2020-07-28 19:05:48,523 INFO L280 TraceCheckUtils]: 26: Hoare triple {11627#true} processEnvironment__wrappee__highWaterSensor_#t~ret14 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret14 && processEnvironment__wrappee__highWaterSensor_#t~ret14 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~2 := processEnvironment__wrappee__highWaterSensor_#t~ret14;havoc processEnvironment__wrappee__highWaterSensor_#t~ret14; {11627#true} is VALID [2020-07-28 19:05:48,523 INFO L280 TraceCheckUtils]: 27: Hoare triple {11627#true} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~2;~pumpRunning~0 := 1; {11627#true} is VALID [2020-07-28 19:05:48,524 INFO L280 TraceCheckUtils]: 28: Hoare triple {11627#true} havoc __utac_acc__Specification5_spec__3_#t~ret11, __utac_acc__Specification5_spec__3_#t~ret12, __utac_acc__Specification5_spec__3_~tmp~0, __utac_acc__Specification5_spec__3_~tmp___0~0;havoc __utac_acc__Specification5_spec__3_~tmp~0;havoc __utac_acc__Specification5_spec__3_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {11627#true} is VALID [2020-07-28 19:05:48,524 INFO L280 TraceCheckUtils]: 29: Hoare triple {11627#true} __utac_acc__Specification5_spec__3_#t~ret11 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret11 && __utac_acc__Specification5_spec__3_#t~ret11 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0 := __utac_acc__Specification5_spec__3_#t~ret11;havoc __utac_acc__Specification5_spec__3_#t~ret11; {11627#true} is VALID [2020-07-28 19:05:48,524 INFO L280 TraceCheckUtils]: 30: Hoare triple {11627#true} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~0); {11627#true} is VALID [2020-07-28 19:05:48,524 INFO L280 TraceCheckUtils]: 31: Hoare triple {11627#true} assume !false; {11627#true} is VALID [2020-07-28 19:05:48,524 INFO L280 TraceCheckUtils]: 32: Hoare triple {11627#true} assume test_~splverifierCounter~0 < 4; {11627#true} is VALID [2020-07-28 19:05:48,524 INFO L280 TraceCheckUtils]: 33: Hoare triple {11627#true} assume -2147483648 <= test_#t~nondet34 && test_#t~nondet34 <= 2147483647;test_~tmp~5 := test_#t~nondet34;havoc test_#t~nondet34; {11627#true} is VALID [2020-07-28 19:05:48,524 INFO L280 TraceCheckUtils]: 34: Hoare triple {11627#true} assume !(0 != test_~tmp~5); {11627#true} is VALID [2020-07-28 19:05:48,525 INFO L280 TraceCheckUtils]: 35: Hoare triple {11627#true} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp___0~2 := test_#t~nondet35;havoc test_#t~nondet35; {11627#true} is VALID [2020-07-28 19:05:48,525 INFO L280 TraceCheckUtils]: 36: Hoare triple {11627#true} assume !(0 != test_~tmp___0~2); {11627#true} is VALID [2020-07-28 19:05:48,525 INFO L280 TraceCheckUtils]: 37: Hoare triple {11627#true} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___2~0 := test_#t~nondet36;havoc test_#t~nondet36; {11627#true} is VALID [2020-07-28 19:05:48,525 INFO L280 TraceCheckUtils]: 38: Hoare triple {11627#true} assume 0 != test_~tmp___2~0; {11627#true} is VALID [2020-07-28 19:05:48,525 INFO L280 TraceCheckUtils]: 39: Hoare triple {11627#true} havoc __utac_acc__Specification5_spec__2_#t~ret10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {11627#true} is VALID [2020-07-28 19:05:48,525 INFO L280 TraceCheckUtils]: 40: Hoare triple {11627#true} __utac_acc__Specification5_spec__2_#t~ret10 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret10 && __utac_acc__Specification5_spec__2_#t~ret10 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret10;havoc __utac_acc__Specification5_spec__2_#t~ret10; {11627#true} is VALID [2020-07-28 19:05:48,526 INFO L280 TraceCheckUtils]: 41: Hoare triple {11627#true} assume 0 != ~pumpRunning~0; {11627#true} is VALID [2020-07-28 19:05:48,526 INFO L280 TraceCheckUtils]: 42: Hoare triple {11627#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {11627#true} is VALID [2020-07-28 19:05:48,526 INFO L280 TraceCheckUtils]: 43: Hoare triple {11627#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {11627#true} is VALID [2020-07-28 19:05:48,527 INFO L280 TraceCheckUtils]: 44: Hoare triple {11627#true} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret16, isMethaneAlarm_~retValue_acc~4;havoc isMethaneAlarm_~retValue_acc~4;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {11629#(= ~methaneLevelCritical~0 |ULTIMATE.start_isMethaneLevelCritical_#res|)} is VALID [2020-07-28 19:05:48,527 INFO L280 TraceCheckUtils]: 45: Hoare triple {11629#(= ~methaneLevelCritical~0 |ULTIMATE.start_isMethaneLevelCritical_#res|)} isMethaneAlarm_#t~ret16 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret16 && isMethaneAlarm_#t~ret16 <= 2147483647;isMethaneAlarm_~retValue_acc~4 := isMethaneAlarm_#t~ret16;havoc isMethaneAlarm_#t~ret16;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~4; {11630#(= |ULTIMATE.start_isMethaneAlarm_#res| ~methaneLevelCritical~0)} is VALID [2020-07-28 19:05:48,528 INFO L280 TraceCheckUtils]: 46: Hoare triple {11630#(= |ULTIMATE.start_isMethaneAlarm_#res| ~methaneLevelCritical~0)} processEnvironment_#t~ret15 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret15 && processEnvironment_#t~ret15 <= 2147483647;processEnvironment_~tmp~3 := processEnvironment_#t~ret15;havoc processEnvironment_#t~ret15; {11631#(= ~methaneLevelCritical~0 ULTIMATE.start_processEnvironment_~tmp~3)} is VALID [2020-07-28 19:05:48,529 INFO L280 TraceCheckUtils]: 47: Hoare triple {11631#(= ~methaneLevelCritical~0 ULTIMATE.start_processEnvironment_~tmp~3)} assume !(0 != processEnvironment_~tmp~3);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~2;havoc processEnvironment__wrappee__highWaterSensor_~tmp~2; {11632#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:05:48,529 INFO L280 TraceCheckUtils]: 48: Hoare triple {11632#(= 0 ~methaneLevelCritical~0)} assume !(0 == ~pumpRunning~0); {11632#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:05:48,530 INFO L280 TraceCheckUtils]: 49: Hoare triple {11632#(= 0 ~methaneLevelCritical~0)} havoc __utac_acc__Specification5_spec__3_#t~ret11, __utac_acc__Specification5_spec__3_#t~ret12, __utac_acc__Specification5_spec__3_~tmp~0, __utac_acc__Specification5_spec__3_~tmp___0~0;havoc __utac_acc__Specification5_spec__3_~tmp~0;havoc __utac_acc__Specification5_spec__3_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {11632#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:05:48,531 INFO L280 TraceCheckUtils]: 50: Hoare triple {11632#(= 0 ~methaneLevelCritical~0)} __utac_acc__Specification5_spec__3_#t~ret11 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret11 && __utac_acc__Specification5_spec__3_#t~ret11 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0 := __utac_acc__Specification5_spec__3_#t~ret11;havoc __utac_acc__Specification5_spec__3_#t~ret11; {11632#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:05:48,531 INFO L280 TraceCheckUtils]: 51: Hoare triple {11632#(= 0 ~methaneLevelCritical~0)} assume 2 != __utac_acc__Specification5_spec__3_~tmp~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {11632#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:05:48,532 INFO L280 TraceCheckUtils]: 52: Hoare triple {11632#(= 0 ~methaneLevelCritical~0)} __utac_acc__Specification5_spec__3_#t~ret12 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret12 && __utac_acc__Specification5_spec__3_#t~ret12 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0 := __utac_acc__Specification5_spec__3_#t~ret12;havoc __utac_acc__Specification5_spec__3_#t~ret12; {11632#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:05:48,533 INFO L280 TraceCheckUtils]: 53: Hoare triple {11632#(= 0 ~methaneLevelCritical~0)} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~0; {11632#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:05:48,534 INFO L280 TraceCheckUtils]: 54: Hoare triple {11632#(= 0 ~methaneLevelCritical~0)} assume !(0 == ~switchedOnBeforeTS~0); {11632#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:05:48,534 INFO L280 TraceCheckUtils]: 55: Hoare triple {11632#(= 0 ~methaneLevelCritical~0)} assume !false; {11632#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:05:48,535 INFO L280 TraceCheckUtils]: 56: Hoare triple {11632#(= 0 ~methaneLevelCritical~0)} assume test_~splverifierCounter~0 < 4; {11632#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:05:48,536 INFO L280 TraceCheckUtils]: 57: Hoare triple {11632#(= 0 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet34 && test_#t~nondet34 <= 2147483647;test_~tmp~5 := test_#t~nondet34;havoc test_#t~nondet34; {11632#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:05:48,536 INFO L280 TraceCheckUtils]: 58: Hoare triple {11632#(= 0 ~methaneLevelCritical~0)} assume !(0 != test_~tmp~5); {11632#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:05:48,537 INFO L280 TraceCheckUtils]: 59: Hoare triple {11632#(= 0 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp___0~2 := test_#t~nondet35;havoc test_#t~nondet35; {11632#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:05:48,538 INFO L280 TraceCheckUtils]: 60: Hoare triple {11632#(= 0 ~methaneLevelCritical~0)} assume !(0 != test_~tmp___0~2); {11632#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:05:48,538 INFO L280 TraceCheckUtils]: 61: Hoare triple {11632#(= 0 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___2~0 := test_#t~nondet36;havoc test_#t~nondet36; {11632#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:05:48,539 INFO L280 TraceCheckUtils]: 62: Hoare triple {11632#(= 0 ~methaneLevelCritical~0)} assume 0 != test_~tmp___2~0; {11632#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:05:48,540 INFO L280 TraceCheckUtils]: 63: Hoare triple {11632#(= 0 ~methaneLevelCritical~0)} havoc __utac_acc__Specification5_spec__2_#t~ret10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {11632#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:05:48,540 INFO L280 TraceCheckUtils]: 64: Hoare triple {11632#(= 0 ~methaneLevelCritical~0)} __utac_acc__Specification5_spec__2_#t~ret10 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret10 && __utac_acc__Specification5_spec__2_#t~ret10 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret10;havoc __utac_acc__Specification5_spec__2_#t~ret10; {11632#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:05:48,541 INFO L280 TraceCheckUtils]: 65: Hoare triple {11632#(= 0 ~methaneLevelCritical~0)} assume 0 != ~pumpRunning~0; {11632#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:05:48,542 INFO L280 TraceCheckUtils]: 66: Hoare triple {11632#(= 0 ~methaneLevelCritical~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {11632#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:05:48,542 INFO L280 TraceCheckUtils]: 67: Hoare triple {11632#(= 0 ~methaneLevelCritical~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {11632#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:05:48,543 INFO L280 TraceCheckUtils]: 68: Hoare triple {11632#(= 0 ~methaneLevelCritical~0)} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret16, isMethaneAlarm_~retValue_acc~4;havoc isMethaneAlarm_~retValue_acc~4;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {11633#(= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)} is VALID [2020-07-28 19:05:48,544 INFO L280 TraceCheckUtils]: 69: Hoare triple {11633#(= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)} isMethaneAlarm_#t~ret16 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret16 && isMethaneAlarm_#t~ret16 <= 2147483647;isMethaneAlarm_~retValue_acc~4 := isMethaneAlarm_#t~ret16;havoc isMethaneAlarm_#t~ret16;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~4; {11634#(= 0 |ULTIMATE.start_isMethaneAlarm_#res|)} is VALID [2020-07-28 19:05:48,544 INFO L280 TraceCheckUtils]: 70: Hoare triple {11634#(= 0 |ULTIMATE.start_isMethaneAlarm_#res|)} processEnvironment_#t~ret15 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret15 && processEnvironment_#t~ret15 <= 2147483647;processEnvironment_~tmp~3 := processEnvironment_#t~ret15;havoc processEnvironment_#t~ret15; {11635#(= 0 ULTIMATE.start_processEnvironment_~tmp~3)} is VALID [2020-07-28 19:05:48,545 INFO L280 TraceCheckUtils]: 71: Hoare triple {11635#(= 0 ULTIMATE.start_processEnvironment_~tmp~3)} assume 0 != processEnvironment_~tmp~3;~pumpRunning~0 := 0; {11628#false} is VALID [2020-07-28 19:05:48,545 INFO L280 TraceCheckUtils]: 72: Hoare triple {11628#false} havoc __utac_acc__Specification5_spec__3_#t~ret11, __utac_acc__Specification5_spec__3_#t~ret12, __utac_acc__Specification5_spec__3_~tmp~0, __utac_acc__Specification5_spec__3_~tmp___0~0;havoc __utac_acc__Specification5_spec__3_~tmp~0;havoc __utac_acc__Specification5_spec__3_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {11628#false} is VALID [2020-07-28 19:05:48,545 INFO L280 TraceCheckUtils]: 73: Hoare triple {11628#false} __utac_acc__Specification5_spec__3_#t~ret11 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret11 && __utac_acc__Specification5_spec__3_#t~ret11 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0 := __utac_acc__Specification5_spec__3_#t~ret11;havoc __utac_acc__Specification5_spec__3_#t~ret11; {11628#false} is VALID [2020-07-28 19:05:48,546 INFO L280 TraceCheckUtils]: 74: Hoare triple {11628#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {11628#false} is VALID [2020-07-28 19:05:48,546 INFO L280 TraceCheckUtils]: 75: Hoare triple {11628#false} __utac_acc__Specification5_spec__3_#t~ret12 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret12 && __utac_acc__Specification5_spec__3_#t~ret12 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0 := __utac_acc__Specification5_spec__3_#t~ret12;havoc __utac_acc__Specification5_spec__3_#t~ret12; {11628#false} is VALID [2020-07-28 19:05:48,546 INFO L280 TraceCheckUtils]: 76: Hoare triple {11628#false} assume !(0 != __utac_acc__Specification5_spec__3_~tmp___0~0); {11628#false} is VALID [2020-07-28 19:05:48,546 INFO L280 TraceCheckUtils]: 77: Hoare triple {11628#false} assume !false; {11628#false} is VALID [2020-07-28 19:05:48,547 INFO L280 TraceCheckUtils]: 78: Hoare triple {11628#false} assume test_~splverifierCounter~0 < 4; {11628#false} is VALID [2020-07-28 19:05:48,547 INFO L280 TraceCheckUtils]: 79: Hoare triple {11628#false} assume -2147483648 <= test_#t~nondet34 && test_#t~nondet34 <= 2147483647;test_~tmp~5 := test_#t~nondet34;havoc test_#t~nondet34; {11628#false} is VALID [2020-07-28 19:05:48,547 INFO L280 TraceCheckUtils]: 80: Hoare triple {11628#false} assume 0 != test_~tmp~5; {11628#false} is VALID [2020-07-28 19:05:48,547 INFO L280 TraceCheckUtils]: 81: Hoare triple {11628#false} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {11628#false} is VALID [2020-07-28 19:05:48,548 INFO L280 TraceCheckUtils]: 82: Hoare triple {11628#false} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp___0~2 := test_#t~nondet35;havoc test_#t~nondet35; {11628#false} is VALID [2020-07-28 19:05:48,548 INFO L280 TraceCheckUtils]: 83: Hoare triple {11628#false} assume !(0 != test_~tmp___0~2); {11628#false} is VALID [2020-07-28 19:05:48,548 INFO L280 TraceCheckUtils]: 84: Hoare triple {11628#false} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___2~0 := test_#t~nondet36;havoc test_#t~nondet36; {11628#false} is VALID [2020-07-28 19:05:48,548 INFO L280 TraceCheckUtils]: 85: Hoare triple {11628#false} assume 0 != test_~tmp___2~0; {11628#false} is VALID [2020-07-28 19:05:48,549 INFO L280 TraceCheckUtils]: 86: Hoare triple {11628#false} havoc __utac_acc__Specification5_spec__2_#t~ret10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {11628#false} is VALID [2020-07-28 19:05:48,549 INFO L280 TraceCheckUtils]: 87: Hoare triple {11628#false} __utac_acc__Specification5_spec__2_#t~ret10 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret10 && __utac_acc__Specification5_spec__2_#t~ret10 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret10;havoc __utac_acc__Specification5_spec__2_#t~ret10; {11628#false} is VALID [2020-07-28 19:05:48,549 INFO L280 TraceCheckUtils]: 88: Hoare triple {11628#false} assume !(0 != ~pumpRunning~0); {11628#false} is VALID [2020-07-28 19:05:48,549 INFO L280 TraceCheckUtils]: 89: Hoare triple {11628#false} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {11628#false} is VALID [2020-07-28 19:05:48,549 INFO L280 TraceCheckUtils]: 90: Hoare triple {11628#false} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~2;havoc processEnvironment__wrappee__highWaterSensor_~tmp~2; {11628#false} is VALID [2020-07-28 19:05:48,550 INFO L280 TraceCheckUtils]: 91: Hoare triple {11628#false} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret33, isHighWaterLevel_~retValue_acc~6, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~6;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {11628#false} is VALID [2020-07-28 19:05:48,550 INFO L280 TraceCheckUtils]: 92: Hoare triple {11628#false} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {11628#false} is VALID [2020-07-28 19:05:48,550 INFO L280 TraceCheckUtils]: 93: Hoare triple {11628#false} isHighWaterLevel_#t~ret33 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret33 && isHighWaterLevel_#t~ret33 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret33;havoc isHighWaterLevel_#t~ret33; {11628#false} is VALID [2020-07-28 19:05:48,550 INFO L280 TraceCheckUtils]: 94: Hoare triple {11628#false} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {11628#false} is VALID [2020-07-28 19:05:48,551 INFO L280 TraceCheckUtils]: 95: Hoare triple {11628#false} isHighWaterLevel_~retValue_acc~6 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~6; {11628#false} is VALID [2020-07-28 19:05:48,551 INFO L280 TraceCheckUtils]: 96: Hoare triple {11628#false} processEnvironment__wrappee__highWaterSensor_#t~ret14 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret14 && processEnvironment__wrappee__highWaterSensor_#t~ret14 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~2 := processEnvironment__wrappee__highWaterSensor_#t~ret14;havoc processEnvironment__wrappee__highWaterSensor_#t~ret14; {11628#false} is VALID [2020-07-28 19:05:48,551 INFO L280 TraceCheckUtils]: 97: Hoare triple {11628#false} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~2;~pumpRunning~0 := 1; {11628#false} is VALID [2020-07-28 19:05:48,551 INFO L280 TraceCheckUtils]: 98: Hoare triple {11628#false} havoc __utac_acc__Specification5_spec__3_#t~ret11, __utac_acc__Specification5_spec__3_#t~ret12, __utac_acc__Specification5_spec__3_~tmp~0, __utac_acc__Specification5_spec__3_~tmp___0~0;havoc __utac_acc__Specification5_spec__3_~tmp~0;havoc __utac_acc__Specification5_spec__3_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {11628#false} is VALID [2020-07-28 19:05:48,552 INFO L280 TraceCheckUtils]: 99: Hoare triple {11628#false} __utac_acc__Specification5_spec__3_#t~ret11 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret11 && __utac_acc__Specification5_spec__3_#t~ret11 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0 := __utac_acc__Specification5_spec__3_#t~ret11;havoc __utac_acc__Specification5_spec__3_#t~ret11; {11628#false} is VALID [2020-07-28 19:05:48,552 INFO L280 TraceCheckUtils]: 100: Hoare triple {11628#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {11628#false} is VALID [2020-07-28 19:05:48,552 INFO L280 TraceCheckUtils]: 101: Hoare triple {11628#false} __utac_acc__Specification5_spec__3_#t~ret12 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret12 && __utac_acc__Specification5_spec__3_#t~ret12 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0 := __utac_acc__Specification5_spec__3_#t~ret12;havoc __utac_acc__Specification5_spec__3_#t~ret12; {11628#false} is VALID [2020-07-28 19:05:48,552 INFO L280 TraceCheckUtils]: 102: Hoare triple {11628#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~0; {11628#false} is VALID [2020-07-28 19:05:48,553 INFO L280 TraceCheckUtils]: 103: Hoare triple {11628#false} assume 0 == ~switchedOnBeforeTS~0; {11628#false} is VALID [2020-07-28 19:05:48,553 INFO L280 TraceCheckUtils]: 104: Hoare triple {11628#false} assume !false; {11628#false} is VALID [2020-07-28 19:05:48,565 INFO L134 CoverageAnalysis]: Checked inductivity of 115 backedges. 94 proven. 3 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2020-07-28 19:05:48,565 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1925124762] [2020-07-28 19:05:48,565 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [687948382] [2020-07-28 19:05:48,565 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 4 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 4 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2020-07-28 19:05:48,694 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:05:48,696 INFO L263 TraceCheckSpWp]: Trace formula consists of 564 conjuncts, 6 conjunts are in the unsatisfiable core [2020-07-28 19:05:48,736 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:05:48,740 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2020-07-28 19:05:49,013 INFO L280 TraceCheckUtils]: 0: Hoare triple {11627#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(13);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string20.base, #t~string20.offset, 1);call write~init~int(110, #t~string20.base, 1 + #t~string20.offset, 1);call write~init~int(0, #t~string20.base, 2 + #t~string20.offset, 1);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string22.base, #t~string22.offset, 1);call write~init~int(102, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(102, #t~string22.base, 2 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 3 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string24.base, #t~string24.offset, 1);call write~init~int(80, #t~string24.base, 1 + #t~string24.offset, 1);call write~init~int(117, #t~string24.base, 2 + #t~string24.offset, 1);call write~init~int(109, #t~string24.base, 3 + #t~string24.offset, 1);call write~init~int(112, #t~string24.base, 4 + #t~string24.offset, 1);call write~init~int(58, #t~string24.base, 5 + #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 6 + #t~string24.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string26.base, #t~string26.offset, 1);call write~init~int(110, #t~string26.base, 1 + #t~string26.offset, 1);call write~init~int(0, #t~string26.base, 2 + #t~string26.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string28.base, #t~string28.offset, 1);call write~init~int(102, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(102, #t~string28.base, 2 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 3 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string30.base, #t~string30.offset, 1);call write~init~int(32, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 2 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string32.base, #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 1 + #t~string32.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(30);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(9);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(21);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(30);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(9);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {11639#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:49,014 INFO L280 TraceCheckUtils]: 1: Hoare triple {11639#(<= ~waterLevel~0 1)} havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~3, main_~tmp~1;havoc main_~retValue_acc~3;havoc main_~tmp~1; {11639#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:49,015 INFO L280 TraceCheckUtils]: 2: Hoare triple {11639#(<= ~waterLevel~0 1)} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {11639#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:49,016 INFO L280 TraceCheckUtils]: 3: Hoare triple {11639#(<= ~waterLevel~0 1)} main_#t~ret13 := valid_product_#res;assume -2147483648 <= main_#t~ret13 && main_#t~ret13 <= 2147483647;main_~tmp~1 := main_#t~ret13;havoc main_#t~ret13; {11639#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:49,017 INFO L280 TraceCheckUtils]: 4: Hoare triple {11639#(<= ~waterLevel~0 1)} assume 0 != main_~tmp~1; {11639#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:49,017 INFO L280 TraceCheckUtils]: 5: Hoare triple {11639#(<= ~waterLevel~0 1)} ~switchedOnBeforeTS~0 := 0; {11639#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:49,018 INFO L280 TraceCheckUtils]: 6: Hoare triple {11639#(<= ~waterLevel~0 1)} havoc test_#t~nondet34, test_#t~nondet35, test_#t~nondet36, test_#t~nondet37, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~2, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~2;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {11639#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:49,018 INFO L280 TraceCheckUtils]: 7: Hoare triple {11639#(<= ~waterLevel~0 1)} assume !false; {11639#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:49,018 INFO L280 TraceCheckUtils]: 8: Hoare triple {11639#(<= ~waterLevel~0 1)} assume test_~splverifierCounter~0 < 4; {11639#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:49,019 INFO L280 TraceCheckUtils]: 9: Hoare triple {11639#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet34 && test_#t~nondet34 <= 2147483647;test_~tmp~5 := test_#t~nondet34;havoc test_#t~nondet34; {11639#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:49,019 INFO L280 TraceCheckUtils]: 10: Hoare triple {11639#(<= ~waterLevel~0 1)} assume 0 != test_~tmp~5; {11639#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:49,020 INFO L280 TraceCheckUtils]: 11: Hoare triple {11639#(<= ~waterLevel~0 1)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {11673#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:49,021 INFO L280 TraceCheckUtils]: 12: Hoare triple {11673#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp___0~2 := test_#t~nondet35;havoc test_#t~nondet35; {11673#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:49,021 INFO L280 TraceCheckUtils]: 13: Hoare triple {11673#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___0~2); {11673#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:49,021 INFO L280 TraceCheckUtils]: 14: Hoare triple {11673#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___2~0 := test_#t~nondet36;havoc test_#t~nondet36; {11673#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:49,022 INFO L280 TraceCheckUtils]: 15: Hoare triple {11673#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0; {11673#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:49,022 INFO L280 TraceCheckUtils]: 16: Hoare triple {11673#(<= ~waterLevel~0 2)} havoc __utac_acc__Specification5_spec__2_#t~ret10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {11673#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:49,023 INFO L280 TraceCheckUtils]: 17: Hoare triple {11673#(<= ~waterLevel~0 2)} __utac_acc__Specification5_spec__2_#t~ret10 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret10 && __utac_acc__Specification5_spec__2_#t~ret10 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret10;havoc __utac_acc__Specification5_spec__2_#t~ret10; {11673#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:49,023 INFO L280 TraceCheckUtils]: 18: Hoare triple {11673#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0); {11673#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:49,024 INFO L280 TraceCheckUtils]: 19: Hoare triple {11673#(<= ~waterLevel~0 2)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {11673#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:49,024 INFO L280 TraceCheckUtils]: 20: Hoare triple {11673#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~2;havoc processEnvironment__wrappee__highWaterSensor_~tmp~2; {11673#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:49,025 INFO L280 TraceCheckUtils]: 21: Hoare triple {11673#(<= ~waterLevel~0 2)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret33, isHighWaterLevel_~retValue_acc~6, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~6;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {11673#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:49,025 INFO L280 TraceCheckUtils]: 22: Hoare triple {11673#(<= ~waterLevel~0 2)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {11673#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:49,025 INFO L280 TraceCheckUtils]: 23: Hoare triple {11673#(<= ~waterLevel~0 2)} isHighWaterLevel_#t~ret33 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret33 && isHighWaterLevel_#t~ret33 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret33;havoc isHighWaterLevel_#t~ret33; {11673#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:49,026 INFO L280 TraceCheckUtils]: 24: Hoare triple {11673#(<= ~waterLevel~0 2)} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {11673#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:49,026 INFO L280 TraceCheckUtils]: 25: Hoare triple {11673#(<= ~waterLevel~0 2)} isHighWaterLevel_~retValue_acc~6 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~6; {11673#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:49,027 INFO L280 TraceCheckUtils]: 26: Hoare triple {11673#(<= ~waterLevel~0 2)} processEnvironment__wrappee__highWaterSensor_#t~ret14 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret14 && processEnvironment__wrappee__highWaterSensor_#t~ret14 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~2 := processEnvironment__wrappee__highWaterSensor_#t~ret14;havoc processEnvironment__wrappee__highWaterSensor_#t~ret14; {11673#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:49,027 INFO L280 TraceCheckUtils]: 27: Hoare triple {11673#(<= ~waterLevel~0 2)} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~2;~pumpRunning~0 := 1; {11673#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:49,028 INFO L280 TraceCheckUtils]: 28: Hoare triple {11673#(<= ~waterLevel~0 2)} havoc __utac_acc__Specification5_spec__3_#t~ret11, __utac_acc__Specification5_spec__3_#t~ret12, __utac_acc__Specification5_spec__3_~tmp~0, __utac_acc__Specification5_spec__3_~tmp___0~0;havoc __utac_acc__Specification5_spec__3_~tmp~0;havoc __utac_acc__Specification5_spec__3_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {11673#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:49,028 INFO L280 TraceCheckUtils]: 29: Hoare triple {11673#(<= ~waterLevel~0 2)} __utac_acc__Specification5_spec__3_#t~ret11 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret11 && __utac_acc__Specification5_spec__3_#t~ret11 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0 := __utac_acc__Specification5_spec__3_#t~ret11;havoc __utac_acc__Specification5_spec__3_#t~ret11; {11673#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:49,029 INFO L280 TraceCheckUtils]: 30: Hoare triple {11673#(<= ~waterLevel~0 2)} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~0); {11673#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:49,029 INFO L280 TraceCheckUtils]: 31: Hoare triple {11673#(<= ~waterLevel~0 2)} assume !false; {11673#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:49,029 INFO L280 TraceCheckUtils]: 32: Hoare triple {11673#(<= ~waterLevel~0 2)} assume test_~splverifierCounter~0 < 4; {11673#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:49,030 INFO L280 TraceCheckUtils]: 33: Hoare triple {11673#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet34 && test_#t~nondet34 <= 2147483647;test_~tmp~5 := test_#t~nondet34;havoc test_#t~nondet34; {11673#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:49,030 INFO L280 TraceCheckUtils]: 34: Hoare triple {11673#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp~5); {11673#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:49,031 INFO L280 TraceCheckUtils]: 35: Hoare triple {11673#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp___0~2 := test_#t~nondet35;havoc test_#t~nondet35; {11673#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:49,031 INFO L280 TraceCheckUtils]: 36: Hoare triple {11673#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___0~2); {11673#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:49,032 INFO L280 TraceCheckUtils]: 37: Hoare triple {11673#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___2~0 := test_#t~nondet36;havoc test_#t~nondet36; {11673#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:49,032 INFO L280 TraceCheckUtils]: 38: Hoare triple {11673#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0; {11673#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:49,033 INFO L280 TraceCheckUtils]: 39: Hoare triple {11673#(<= ~waterLevel~0 2)} havoc __utac_acc__Specification5_spec__2_#t~ret10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {11673#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:49,033 INFO L280 TraceCheckUtils]: 40: Hoare triple {11673#(<= ~waterLevel~0 2)} __utac_acc__Specification5_spec__2_#t~ret10 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret10 && __utac_acc__Specification5_spec__2_#t~ret10 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret10;havoc __utac_acc__Specification5_spec__2_#t~ret10; {11673#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:49,037 INFO L280 TraceCheckUtils]: 41: Hoare triple {11673#(<= ~waterLevel~0 2)} assume 0 != ~pumpRunning~0; {11673#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:49,038 INFO L280 TraceCheckUtils]: 42: Hoare triple {11673#(<= ~waterLevel~0 2)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {11639#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:49,038 INFO L280 TraceCheckUtils]: 43: Hoare triple {11639#(<= ~waterLevel~0 1)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {11639#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:49,038 INFO L280 TraceCheckUtils]: 44: Hoare triple {11639#(<= ~waterLevel~0 1)} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret16, isMethaneAlarm_~retValue_acc~4;havoc isMethaneAlarm_~retValue_acc~4;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {11639#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:49,039 INFO L280 TraceCheckUtils]: 45: Hoare triple {11639#(<= ~waterLevel~0 1)} isMethaneAlarm_#t~ret16 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret16 && isMethaneAlarm_#t~ret16 <= 2147483647;isMethaneAlarm_~retValue_acc~4 := isMethaneAlarm_#t~ret16;havoc isMethaneAlarm_#t~ret16;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~4; {11639#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:49,039 INFO L280 TraceCheckUtils]: 46: Hoare triple {11639#(<= ~waterLevel~0 1)} processEnvironment_#t~ret15 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret15 && processEnvironment_#t~ret15 <= 2147483647;processEnvironment_~tmp~3 := processEnvironment_#t~ret15;havoc processEnvironment_#t~ret15; {11639#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:49,040 INFO L280 TraceCheckUtils]: 47: Hoare triple {11639#(<= ~waterLevel~0 1)} assume !(0 != processEnvironment_~tmp~3);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~2;havoc processEnvironment__wrappee__highWaterSensor_~tmp~2; {11639#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:49,040 INFO L280 TraceCheckUtils]: 48: Hoare triple {11639#(<= ~waterLevel~0 1)} assume !(0 == ~pumpRunning~0); {11639#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:49,041 INFO L280 TraceCheckUtils]: 49: Hoare triple {11639#(<= ~waterLevel~0 1)} havoc __utac_acc__Specification5_spec__3_#t~ret11, __utac_acc__Specification5_spec__3_#t~ret12, __utac_acc__Specification5_spec__3_~tmp~0, __utac_acc__Specification5_spec__3_~tmp___0~0;havoc __utac_acc__Specification5_spec__3_~tmp~0;havoc __utac_acc__Specification5_spec__3_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {11639#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:49,041 INFO L280 TraceCheckUtils]: 50: Hoare triple {11639#(<= ~waterLevel~0 1)} __utac_acc__Specification5_spec__3_#t~ret11 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret11 && __utac_acc__Specification5_spec__3_#t~ret11 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0 := __utac_acc__Specification5_spec__3_#t~ret11;havoc __utac_acc__Specification5_spec__3_#t~ret11; {11639#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:49,042 INFO L280 TraceCheckUtils]: 51: Hoare triple {11639#(<= ~waterLevel~0 1)} assume 2 != __utac_acc__Specification5_spec__3_~tmp~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {11639#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:49,042 INFO L280 TraceCheckUtils]: 52: Hoare triple {11639#(<= ~waterLevel~0 1)} __utac_acc__Specification5_spec__3_#t~ret12 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret12 && __utac_acc__Specification5_spec__3_#t~ret12 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0 := __utac_acc__Specification5_spec__3_#t~ret12;havoc __utac_acc__Specification5_spec__3_#t~ret12; {11639#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:49,043 INFO L280 TraceCheckUtils]: 53: Hoare triple {11639#(<= ~waterLevel~0 1)} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~0; {11639#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:49,043 INFO L280 TraceCheckUtils]: 54: Hoare triple {11639#(<= ~waterLevel~0 1)} assume !(0 == ~switchedOnBeforeTS~0); {11639#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:49,043 INFO L280 TraceCheckUtils]: 55: Hoare triple {11639#(<= ~waterLevel~0 1)} assume !false; {11639#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:49,044 INFO L280 TraceCheckUtils]: 56: Hoare triple {11639#(<= ~waterLevel~0 1)} assume test_~splverifierCounter~0 < 4; {11639#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:49,044 INFO L280 TraceCheckUtils]: 57: Hoare triple {11639#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet34 && test_#t~nondet34 <= 2147483647;test_~tmp~5 := test_#t~nondet34;havoc test_#t~nondet34; {11639#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:49,045 INFO L280 TraceCheckUtils]: 58: Hoare triple {11639#(<= ~waterLevel~0 1)} assume !(0 != test_~tmp~5); {11639#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:49,045 INFO L280 TraceCheckUtils]: 59: Hoare triple {11639#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp___0~2 := test_#t~nondet35;havoc test_#t~nondet35; {11639#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:49,046 INFO L280 TraceCheckUtils]: 60: Hoare triple {11639#(<= ~waterLevel~0 1)} assume !(0 != test_~tmp___0~2); {11639#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:49,046 INFO L280 TraceCheckUtils]: 61: Hoare triple {11639#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___2~0 := test_#t~nondet36;havoc test_#t~nondet36; {11639#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:49,047 INFO L280 TraceCheckUtils]: 62: Hoare triple {11639#(<= ~waterLevel~0 1)} assume 0 != test_~tmp___2~0; {11639#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:49,047 INFO L280 TraceCheckUtils]: 63: Hoare triple {11639#(<= ~waterLevel~0 1)} havoc __utac_acc__Specification5_spec__2_#t~ret10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {11639#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:49,048 INFO L280 TraceCheckUtils]: 64: Hoare triple {11639#(<= ~waterLevel~0 1)} __utac_acc__Specification5_spec__2_#t~ret10 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret10 && __utac_acc__Specification5_spec__2_#t~ret10 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret10;havoc __utac_acc__Specification5_spec__2_#t~ret10; {11639#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:49,048 INFO L280 TraceCheckUtils]: 65: Hoare triple {11639#(<= ~waterLevel~0 1)} assume 0 != ~pumpRunning~0; {11639#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:49,055 INFO L280 TraceCheckUtils]: 66: Hoare triple {11639#(<= ~waterLevel~0 1)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {11839#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:05:49,056 INFO L280 TraceCheckUtils]: 67: Hoare triple {11839#(<= ~waterLevel~0 0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {11839#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:05:49,057 INFO L280 TraceCheckUtils]: 68: Hoare triple {11839#(<= ~waterLevel~0 0)} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret16, isMethaneAlarm_~retValue_acc~4;havoc isMethaneAlarm_~retValue_acc~4;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {11839#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:05:49,057 INFO L280 TraceCheckUtils]: 69: Hoare triple {11839#(<= ~waterLevel~0 0)} isMethaneAlarm_#t~ret16 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret16 && isMethaneAlarm_#t~ret16 <= 2147483647;isMethaneAlarm_~retValue_acc~4 := isMethaneAlarm_#t~ret16;havoc isMethaneAlarm_#t~ret16;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~4; {11839#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:05:49,058 INFO L280 TraceCheckUtils]: 70: Hoare triple {11839#(<= ~waterLevel~0 0)} processEnvironment_#t~ret15 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret15 && processEnvironment_#t~ret15 <= 2147483647;processEnvironment_~tmp~3 := processEnvironment_#t~ret15;havoc processEnvironment_#t~ret15; {11839#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:05:49,059 INFO L280 TraceCheckUtils]: 71: Hoare triple {11839#(<= ~waterLevel~0 0)} assume 0 != processEnvironment_~tmp~3;~pumpRunning~0 := 0; {11839#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:05:49,059 INFO L280 TraceCheckUtils]: 72: Hoare triple {11839#(<= ~waterLevel~0 0)} havoc __utac_acc__Specification5_spec__3_#t~ret11, __utac_acc__Specification5_spec__3_#t~ret12, __utac_acc__Specification5_spec__3_~tmp~0, __utac_acc__Specification5_spec__3_~tmp___0~0;havoc __utac_acc__Specification5_spec__3_~tmp~0;havoc __utac_acc__Specification5_spec__3_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {11839#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:05:49,060 INFO L280 TraceCheckUtils]: 73: Hoare triple {11839#(<= ~waterLevel~0 0)} __utac_acc__Specification5_spec__3_#t~ret11 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret11 && __utac_acc__Specification5_spec__3_#t~ret11 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0 := __utac_acc__Specification5_spec__3_#t~ret11;havoc __utac_acc__Specification5_spec__3_#t~ret11; {11839#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:05:49,060 INFO L280 TraceCheckUtils]: 74: Hoare triple {11839#(<= ~waterLevel~0 0)} assume 2 != __utac_acc__Specification5_spec__3_~tmp~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {11839#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:05:49,061 INFO L280 TraceCheckUtils]: 75: Hoare triple {11839#(<= ~waterLevel~0 0)} __utac_acc__Specification5_spec__3_#t~ret12 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret12 && __utac_acc__Specification5_spec__3_#t~ret12 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0 := __utac_acc__Specification5_spec__3_#t~ret12;havoc __utac_acc__Specification5_spec__3_#t~ret12; {11839#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:05:49,062 INFO L280 TraceCheckUtils]: 76: Hoare triple {11839#(<= ~waterLevel~0 0)} assume !(0 != __utac_acc__Specification5_spec__3_~tmp___0~0); {11839#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:05:49,062 INFO L280 TraceCheckUtils]: 77: Hoare triple {11839#(<= ~waterLevel~0 0)} assume !false; {11839#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:05:49,063 INFO L280 TraceCheckUtils]: 78: Hoare triple {11839#(<= ~waterLevel~0 0)} assume test_~splverifierCounter~0 < 4; {11839#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:05:49,064 INFO L280 TraceCheckUtils]: 79: Hoare triple {11839#(<= ~waterLevel~0 0)} assume -2147483648 <= test_#t~nondet34 && test_#t~nondet34 <= 2147483647;test_~tmp~5 := test_#t~nondet34;havoc test_#t~nondet34; {11839#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:05:49,064 INFO L280 TraceCheckUtils]: 80: Hoare triple {11839#(<= ~waterLevel~0 0)} assume 0 != test_~tmp~5; {11839#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:05:49,065 INFO L280 TraceCheckUtils]: 81: Hoare triple {11839#(<= ~waterLevel~0 0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {11639#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:49,066 INFO L280 TraceCheckUtils]: 82: Hoare triple {11639#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp___0~2 := test_#t~nondet35;havoc test_#t~nondet35; {11639#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:49,066 INFO L280 TraceCheckUtils]: 83: Hoare triple {11639#(<= ~waterLevel~0 1)} assume !(0 != test_~tmp___0~2); {11639#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:49,067 INFO L280 TraceCheckUtils]: 84: Hoare triple {11639#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___2~0 := test_#t~nondet36;havoc test_#t~nondet36; {11639#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:49,068 INFO L280 TraceCheckUtils]: 85: Hoare triple {11639#(<= ~waterLevel~0 1)} assume 0 != test_~tmp___2~0; {11639#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:49,068 INFO L280 TraceCheckUtils]: 86: Hoare triple {11639#(<= ~waterLevel~0 1)} havoc __utac_acc__Specification5_spec__2_#t~ret10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {11639#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:49,069 INFO L280 TraceCheckUtils]: 87: Hoare triple {11639#(<= ~waterLevel~0 1)} __utac_acc__Specification5_spec__2_#t~ret10 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret10 && __utac_acc__Specification5_spec__2_#t~ret10 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret10;havoc __utac_acc__Specification5_spec__2_#t~ret10; {11639#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:49,069 INFO L280 TraceCheckUtils]: 88: Hoare triple {11639#(<= ~waterLevel~0 1)} assume !(0 != ~pumpRunning~0); {11639#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:49,070 INFO L280 TraceCheckUtils]: 89: Hoare triple {11639#(<= ~waterLevel~0 1)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {11639#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:49,071 INFO L280 TraceCheckUtils]: 90: Hoare triple {11639#(<= ~waterLevel~0 1)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~2;havoc processEnvironment__wrappee__highWaterSensor_~tmp~2; {11639#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:49,071 INFO L280 TraceCheckUtils]: 91: Hoare triple {11639#(<= ~waterLevel~0 1)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret33, isHighWaterLevel_~retValue_acc~6, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~6;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {11639#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:49,072 INFO L280 TraceCheckUtils]: 92: Hoare triple {11639#(<= ~waterLevel~0 1)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {11628#false} is VALID [2020-07-28 19:05:49,072 INFO L280 TraceCheckUtils]: 93: Hoare triple {11628#false} isHighWaterLevel_#t~ret33 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret33 && isHighWaterLevel_#t~ret33 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret33;havoc isHighWaterLevel_#t~ret33; {11628#false} is VALID [2020-07-28 19:05:49,073 INFO L280 TraceCheckUtils]: 94: Hoare triple {11628#false} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {11628#false} is VALID [2020-07-28 19:05:49,073 INFO L280 TraceCheckUtils]: 95: Hoare triple {11628#false} isHighWaterLevel_~retValue_acc~6 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~6; {11628#false} is VALID [2020-07-28 19:05:49,073 INFO L280 TraceCheckUtils]: 96: Hoare triple {11628#false} processEnvironment__wrappee__highWaterSensor_#t~ret14 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret14 && processEnvironment__wrappee__highWaterSensor_#t~ret14 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~2 := processEnvironment__wrappee__highWaterSensor_#t~ret14;havoc processEnvironment__wrappee__highWaterSensor_#t~ret14; {11628#false} is VALID [2020-07-28 19:05:49,073 INFO L280 TraceCheckUtils]: 97: Hoare triple {11628#false} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~2;~pumpRunning~0 := 1; {11628#false} is VALID [2020-07-28 19:05:49,073 INFO L280 TraceCheckUtils]: 98: Hoare triple {11628#false} havoc __utac_acc__Specification5_spec__3_#t~ret11, __utac_acc__Specification5_spec__3_#t~ret12, __utac_acc__Specification5_spec__3_~tmp~0, __utac_acc__Specification5_spec__3_~tmp___0~0;havoc __utac_acc__Specification5_spec__3_~tmp~0;havoc __utac_acc__Specification5_spec__3_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {11628#false} is VALID [2020-07-28 19:05:49,074 INFO L280 TraceCheckUtils]: 99: Hoare triple {11628#false} __utac_acc__Specification5_spec__3_#t~ret11 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret11 && __utac_acc__Specification5_spec__3_#t~ret11 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0 := __utac_acc__Specification5_spec__3_#t~ret11;havoc __utac_acc__Specification5_spec__3_#t~ret11; {11628#false} is VALID [2020-07-28 19:05:49,074 INFO L280 TraceCheckUtils]: 100: Hoare triple {11628#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {11628#false} is VALID [2020-07-28 19:05:49,074 INFO L280 TraceCheckUtils]: 101: Hoare triple {11628#false} __utac_acc__Specification5_spec__3_#t~ret12 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret12 && __utac_acc__Specification5_spec__3_#t~ret12 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0 := __utac_acc__Specification5_spec__3_#t~ret12;havoc __utac_acc__Specification5_spec__3_#t~ret12; {11628#false} is VALID [2020-07-28 19:05:49,074 INFO L280 TraceCheckUtils]: 102: Hoare triple {11628#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~0; {11628#false} is VALID [2020-07-28 19:05:49,074 INFO L280 TraceCheckUtils]: 103: Hoare triple {11628#false} assume 0 == ~switchedOnBeforeTS~0; {11628#false} is VALID [2020-07-28 19:05:49,075 INFO L280 TraceCheckUtils]: 104: Hoare triple {11628#false} assume !false; {11628#false} is VALID [2020-07-28 19:05:49,093 INFO L134 CoverageAnalysis]: Checked inductivity of 115 backedges. 89 proven. 6 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2020-07-28 19:05:49,093 INFO L220 FreeRefinementEngine]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2020-07-28 19:05:49,094 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 4] total 12 [2020-07-28 19:05:49,096 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [185646571] [2020-07-28 19:05:49,098 INFO L78 Accepts]: Start accepts. Automaton has 12 states. Word has length 105 [2020-07-28 19:05:49,098 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:05:49,099 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 12 states. [2020-07-28 19:05:49,309 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 168 edges. 168 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:05:49,309 INFO L459 AbstractCegarLoop]: Interpolant automaton has 12 states [2020-07-28 19:05:49,309 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:05:49,310 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2020-07-28 19:05:49,310 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=24, Invalid=108, Unknown=0, NotChecked=0, Total=132 [2020-07-28 19:05:49,310 INFO L87 Difference]: Start difference. First operand 208 states and 256 transitions. Second operand 12 states. [2020-07-28 19:05:56,107 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:05:56,107 INFO L93 Difference]: Finished difference Result 1505 states and 1887 transitions. [2020-07-28 19:05:56,107 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 30 states. [2020-07-28 19:05:56,107 INFO L78 Accepts]: Start accepts. Automaton has 12 states. Word has length 105 [2020-07-28 19:05:56,108 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:05:56,108 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 12 states. [2020-07-28 19:05:56,111 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 30 states to 30 states and 817 transitions. [2020-07-28 19:05:56,111 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 12 states. [2020-07-28 19:05:56,114 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 30 states to 30 states and 817 transitions. [2020-07-28 19:05:56,114 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 30 states and 817 transitions. [2020-07-28 19:05:57,193 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 817 edges. 817 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:05:57,264 INFO L225 Difference]: With dead ends: 1505 [2020-07-28 19:05:57,264 INFO L226 Difference]: Without dead ends: 1304 [2020-07-28 19:05:57,265 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 159 GetRequests, 124 SyntacticMatches, 0 SemanticMatches, 35 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 283 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=318, Invalid=1014, Unknown=0, NotChecked=0, Total=1332 [2020-07-28 19:05:57,267 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1304 states. [2020-07-28 19:05:58,569 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1304 to 492. [2020-07-28 19:05:58,570 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:05:58,570 INFO L82 GeneralOperation]: Start isEquivalent. First operand 1304 states. Second operand 492 states. [2020-07-28 19:05:58,570 INFO L74 IsIncluded]: Start isIncluded. First operand 1304 states. Second operand 492 states. [2020-07-28 19:05:58,570 INFO L87 Difference]: Start difference. First operand 1304 states. Second operand 492 states. [2020-07-28 19:05:58,637 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:05:58,637 INFO L93 Difference]: Finished difference Result 1304 states and 1607 transitions. [2020-07-28 19:05:58,638 INFO L276 IsEmpty]: Start isEmpty. Operand 1304 states and 1607 transitions. [2020-07-28 19:05:58,640 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:05:58,640 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:05:58,640 INFO L74 IsIncluded]: Start isIncluded. First operand 492 states. Second operand 1304 states. [2020-07-28 19:05:58,640 INFO L87 Difference]: Start difference. First operand 492 states. Second operand 1304 states. [2020-07-28 19:05:58,710 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:05:58,710 INFO L93 Difference]: Finished difference Result 1304 states and 1607 transitions. [2020-07-28 19:05:58,710 INFO L276 IsEmpty]: Start isEmpty. Operand 1304 states and 1607 transitions. [2020-07-28 19:05:58,712 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:05:58,712 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:05:58,712 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:05:58,712 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:05:58,713 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 492 states. [2020-07-28 19:05:58,729 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 492 states to 492 states and 599 transitions. [2020-07-28 19:05:58,729 INFO L78 Accepts]: Start accepts. Automaton has 492 states and 599 transitions. Word has length 105 [2020-07-28 19:05:58,729 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:05:58,729 INFO L479 AbstractCegarLoop]: Abstraction has 492 states and 599 transitions. [2020-07-28 19:05:58,729 INFO L480 AbstractCegarLoop]: Interpolant automaton has 12 states. [2020-07-28 19:05:58,729 INFO L276 IsEmpty]: Start isEmpty. Operand 492 states and 599 transitions. [2020-07-28 19:05:58,731 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 133 [2020-07-28 19:05:58,731 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:05:58,731 INFO L422 BasicCegarLoop]: trace histogram [5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:05:58,946 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable12 [2020-07-28 19:05:58,947 INFO L427 AbstractCegarLoop]: === Iteration 14 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:05:58,948 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:05:58,948 INFO L82 PathProgramCache]: Analyzing trace with hash 1182779842, now seen corresponding path program 1 times [2020-07-28 19:05:58,949 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:05:58,949 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [127881403] [2020-07-28 19:05:58,949 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:05:59,006 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:05:59,132 INFO L280 TraceCheckUtils]: 0: Hoare triple {17434#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(13);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string20.base, #t~string20.offset, 1);call write~init~int(110, #t~string20.base, 1 + #t~string20.offset, 1);call write~init~int(0, #t~string20.base, 2 + #t~string20.offset, 1);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string22.base, #t~string22.offset, 1);call write~init~int(102, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(102, #t~string22.base, 2 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 3 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string24.base, #t~string24.offset, 1);call write~init~int(80, #t~string24.base, 1 + #t~string24.offset, 1);call write~init~int(117, #t~string24.base, 2 + #t~string24.offset, 1);call write~init~int(109, #t~string24.base, 3 + #t~string24.offset, 1);call write~init~int(112, #t~string24.base, 4 + #t~string24.offset, 1);call write~init~int(58, #t~string24.base, 5 + #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 6 + #t~string24.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string26.base, #t~string26.offset, 1);call write~init~int(110, #t~string26.base, 1 + #t~string26.offset, 1);call write~init~int(0, #t~string26.base, 2 + #t~string26.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string28.base, #t~string28.offset, 1);call write~init~int(102, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(102, #t~string28.base, 2 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 3 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string30.base, #t~string30.offset, 1);call write~init~int(32, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 2 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string32.base, #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 1 + #t~string32.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(30);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(9);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(21);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(30);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(9);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {17434#true} is VALID [2020-07-28 19:05:59,132 INFO L280 TraceCheckUtils]: 1: Hoare triple {17434#true} havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~3, main_~tmp~1;havoc main_~retValue_acc~3;havoc main_~tmp~1; {17434#true} is VALID [2020-07-28 19:05:59,132 INFO L280 TraceCheckUtils]: 2: Hoare triple {17434#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {17434#true} is VALID [2020-07-28 19:05:59,133 INFO L280 TraceCheckUtils]: 3: Hoare triple {17434#true} main_#t~ret13 := valid_product_#res;assume -2147483648 <= main_#t~ret13 && main_#t~ret13 <= 2147483647;main_~tmp~1 := main_#t~ret13;havoc main_#t~ret13; {17434#true} is VALID [2020-07-28 19:05:59,133 INFO L280 TraceCheckUtils]: 4: Hoare triple {17434#true} assume 0 != main_~tmp~1; {17434#true} is VALID [2020-07-28 19:05:59,133 INFO L280 TraceCheckUtils]: 5: Hoare triple {17434#true} ~switchedOnBeforeTS~0 := 0; {17434#true} is VALID [2020-07-28 19:05:59,133 INFO L280 TraceCheckUtils]: 6: Hoare triple {17434#true} havoc test_#t~nondet34, test_#t~nondet35, test_#t~nondet36, test_#t~nondet37, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~2, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~2;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {17434#true} is VALID [2020-07-28 19:05:59,133 INFO L280 TraceCheckUtils]: 7: Hoare triple {17434#true} assume !false; {17434#true} is VALID [2020-07-28 19:05:59,133 INFO L280 TraceCheckUtils]: 8: Hoare triple {17434#true} assume test_~splverifierCounter~0 < 4; {17434#true} is VALID [2020-07-28 19:05:59,134 INFO L280 TraceCheckUtils]: 9: Hoare triple {17434#true} assume -2147483648 <= test_#t~nondet34 && test_#t~nondet34 <= 2147483647;test_~tmp~5 := test_#t~nondet34;havoc test_#t~nondet34; {17434#true} is VALID [2020-07-28 19:05:59,134 INFO L280 TraceCheckUtils]: 10: Hoare triple {17434#true} assume 0 != test_~tmp~5; {17434#true} is VALID [2020-07-28 19:05:59,134 INFO L280 TraceCheckUtils]: 11: Hoare triple {17434#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {17434#true} is VALID [2020-07-28 19:05:59,134 INFO L280 TraceCheckUtils]: 12: Hoare triple {17434#true} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp___0~2 := test_#t~nondet35;havoc test_#t~nondet35; {17434#true} is VALID [2020-07-28 19:05:59,134 INFO L280 TraceCheckUtils]: 13: Hoare triple {17434#true} assume !(0 != test_~tmp___0~2); {17434#true} is VALID [2020-07-28 19:05:59,134 INFO L280 TraceCheckUtils]: 14: Hoare triple {17434#true} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___2~0 := test_#t~nondet36;havoc test_#t~nondet36; {17434#true} is VALID [2020-07-28 19:05:59,135 INFO L280 TraceCheckUtils]: 15: Hoare triple {17434#true} assume 0 != test_~tmp___2~0; {17434#true} is VALID [2020-07-28 19:05:59,135 INFO L280 TraceCheckUtils]: 16: Hoare triple {17434#true} havoc __utac_acc__Specification5_spec__2_#t~ret10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {17434#true} is VALID [2020-07-28 19:05:59,135 INFO L280 TraceCheckUtils]: 17: Hoare triple {17434#true} __utac_acc__Specification5_spec__2_#t~ret10 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret10 && __utac_acc__Specification5_spec__2_#t~ret10 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret10;havoc __utac_acc__Specification5_spec__2_#t~ret10; {17434#true} is VALID [2020-07-28 19:05:59,135 INFO L280 TraceCheckUtils]: 18: Hoare triple {17434#true} assume !(0 != ~pumpRunning~0); {17434#true} is VALID [2020-07-28 19:05:59,135 INFO L280 TraceCheckUtils]: 19: Hoare triple {17434#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {17434#true} is VALID [2020-07-28 19:05:59,135 INFO L280 TraceCheckUtils]: 20: Hoare triple {17434#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~2;havoc processEnvironment__wrappee__highWaterSensor_~tmp~2; {17434#true} is VALID [2020-07-28 19:05:59,136 INFO L280 TraceCheckUtils]: 21: Hoare triple {17434#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret33, isHighWaterLevel_~retValue_acc~6, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~6;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {17434#true} is VALID [2020-07-28 19:05:59,136 INFO L280 TraceCheckUtils]: 22: Hoare triple {17434#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {17434#true} is VALID [2020-07-28 19:05:59,136 INFO L280 TraceCheckUtils]: 23: Hoare triple {17434#true} isHighWaterLevel_#t~ret33 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret33 && isHighWaterLevel_#t~ret33 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret33;havoc isHighWaterLevel_#t~ret33; {17434#true} is VALID [2020-07-28 19:05:59,136 INFO L280 TraceCheckUtils]: 24: Hoare triple {17434#true} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {17434#true} is VALID [2020-07-28 19:05:59,136 INFO L280 TraceCheckUtils]: 25: Hoare triple {17434#true} isHighWaterLevel_~retValue_acc~6 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~6; {17434#true} is VALID [2020-07-28 19:05:59,136 INFO L280 TraceCheckUtils]: 26: Hoare triple {17434#true} processEnvironment__wrappee__highWaterSensor_#t~ret14 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret14 && processEnvironment__wrappee__highWaterSensor_#t~ret14 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~2 := processEnvironment__wrappee__highWaterSensor_#t~ret14;havoc processEnvironment__wrappee__highWaterSensor_#t~ret14; {17434#true} is VALID [2020-07-28 19:05:59,137 INFO L280 TraceCheckUtils]: 27: Hoare triple {17434#true} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~2;~pumpRunning~0 := 1; {17434#true} is VALID [2020-07-28 19:05:59,137 INFO L280 TraceCheckUtils]: 28: Hoare triple {17434#true} havoc __utac_acc__Specification5_spec__3_#t~ret11, __utac_acc__Specification5_spec__3_#t~ret12, __utac_acc__Specification5_spec__3_~tmp~0, __utac_acc__Specification5_spec__3_~tmp___0~0;havoc __utac_acc__Specification5_spec__3_~tmp~0;havoc __utac_acc__Specification5_spec__3_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {17434#true} is VALID [2020-07-28 19:05:59,137 INFO L280 TraceCheckUtils]: 29: Hoare triple {17434#true} __utac_acc__Specification5_spec__3_#t~ret11 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret11 && __utac_acc__Specification5_spec__3_#t~ret11 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0 := __utac_acc__Specification5_spec__3_#t~ret11;havoc __utac_acc__Specification5_spec__3_#t~ret11; {17434#true} is VALID [2020-07-28 19:05:59,137 INFO L280 TraceCheckUtils]: 30: Hoare triple {17434#true} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~0); {17434#true} is VALID [2020-07-28 19:05:59,137 INFO L280 TraceCheckUtils]: 31: Hoare triple {17434#true} assume !false; {17434#true} is VALID [2020-07-28 19:05:59,138 INFO L280 TraceCheckUtils]: 32: Hoare triple {17434#true} assume test_~splverifierCounter~0 < 4; {17434#true} is VALID [2020-07-28 19:05:59,138 INFO L280 TraceCheckUtils]: 33: Hoare triple {17434#true} assume -2147483648 <= test_#t~nondet34 && test_#t~nondet34 <= 2147483647;test_~tmp~5 := test_#t~nondet34;havoc test_#t~nondet34; {17434#true} is VALID [2020-07-28 19:05:59,138 INFO L280 TraceCheckUtils]: 34: Hoare triple {17434#true} assume !(0 != test_~tmp~5); {17434#true} is VALID [2020-07-28 19:05:59,138 INFO L280 TraceCheckUtils]: 35: Hoare triple {17434#true} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp___0~2 := test_#t~nondet35;havoc test_#t~nondet35; {17434#true} is VALID [2020-07-28 19:05:59,138 INFO L280 TraceCheckUtils]: 36: Hoare triple {17434#true} assume !(0 != test_~tmp___0~2); {17434#true} is VALID [2020-07-28 19:05:59,138 INFO L280 TraceCheckUtils]: 37: Hoare triple {17434#true} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___2~0 := test_#t~nondet36;havoc test_#t~nondet36; {17434#true} is VALID [2020-07-28 19:05:59,139 INFO L280 TraceCheckUtils]: 38: Hoare triple {17434#true} assume 0 != test_~tmp___2~0; {17434#true} is VALID [2020-07-28 19:05:59,139 INFO L280 TraceCheckUtils]: 39: Hoare triple {17434#true} havoc __utac_acc__Specification5_spec__2_#t~ret10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {17434#true} is VALID [2020-07-28 19:05:59,139 INFO L280 TraceCheckUtils]: 40: Hoare triple {17434#true} __utac_acc__Specification5_spec__2_#t~ret10 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret10 && __utac_acc__Specification5_spec__2_#t~ret10 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret10;havoc __utac_acc__Specification5_spec__2_#t~ret10; {17434#true} is VALID [2020-07-28 19:05:59,139 INFO L280 TraceCheckUtils]: 41: Hoare triple {17434#true} assume 0 != ~pumpRunning~0; {17434#true} is VALID [2020-07-28 19:05:59,139 INFO L280 TraceCheckUtils]: 42: Hoare triple {17434#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {17434#true} is VALID [2020-07-28 19:05:59,139 INFO L280 TraceCheckUtils]: 43: Hoare triple {17434#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {17434#true} is VALID [2020-07-28 19:05:59,140 INFO L280 TraceCheckUtils]: 44: Hoare triple {17434#true} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret16, isMethaneAlarm_~retValue_acc~4;havoc isMethaneAlarm_~retValue_acc~4;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {17434#true} is VALID [2020-07-28 19:05:59,140 INFO L280 TraceCheckUtils]: 45: Hoare triple {17434#true} isMethaneAlarm_#t~ret16 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret16 && isMethaneAlarm_#t~ret16 <= 2147483647;isMethaneAlarm_~retValue_acc~4 := isMethaneAlarm_#t~ret16;havoc isMethaneAlarm_#t~ret16;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~4; {17434#true} is VALID [2020-07-28 19:05:59,140 INFO L280 TraceCheckUtils]: 46: Hoare triple {17434#true} processEnvironment_#t~ret15 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret15 && processEnvironment_#t~ret15 <= 2147483647;processEnvironment_~tmp~3 := processEnvironment_#t~ret15;havoc processEnvironment_#t~ret15; {17434#true} is VALID [2020-07-28 19:05:59,140 INFO L280 TraceCheckUtils]: 47: Hoare triple {17434#true} assume !(0 != processEnvironment_~tmp~3);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~2;havoc processEnvironment__wrappee__highWaterSensor_~tmp~2; {17434#true} is VALID [2020-07-28 19:05:59,140 INFO L280 TraceCheckUtils]: 48: Hoare triple {17434#true} assume !(0 == ~pumpRunning~0); {17434#true} is VALID [2020-07-28 19:05:59,140 INFO L280 TraceCheckUtils]: 49: Hoare triple {17434#true} havoc __utac_acc__Specification5_spec__3_#t~ret11, __utac_acc__Specification5_spec__3_#t~ret12, __utac_acc__Specification5_spec__3_~tmp~0, __utac_acc__Specification5_spec__3_~tmp___0~0;havoc __utac_acc__Specification5_spec__3_~tmp~0;havoc __utac_acc__Specification5_spec__3_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {17434#true} is VALID [2020-07-28 19:05:59,141 INFO L280 TraceCheckUtils]: 50: Hoare triple {17434#true} __utac_acc__Specification5_spec__3_#t~ret11 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret11 && __utac_acc__Specification5_spec__3_#t~ret11 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0 := __utac_acc__Specification5_spec__3_#t~ret11;havoc __utac_acc__Specification5_spec__3_#t~ret11; {17434#true} is VALID [2020-07-28 19:05:59,141 INFO L280 TraceCheckUtils]: 51: Hoare triple {17434#true} assume 2 != __utac_acc__Specification5_spec__3_~tmp~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {17434#true} is VALID [2020-07-28 19:05:59,141 INFO L280 TraceCheckUtils]: 52: Hoare triple {17434#true} __utac_acc__Specification5_spec__3_#t~ret12 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret12 && __utac_acc__Specification5_spec__3_#t~ret12 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0 := __utac_acc__Specification5_spec__3_#t~ret12;havoc __utac_acc__Specification5_spec__3_#t~ret12; {17434#true} is VALID [2020-07-28 19:05:59,141 INFO L280 TraceCheckUtils]: 53: Hoare triple {17434#true} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~0; {17434#true} is VALID [2020-07-28 19:05:59,141 INFO L280 TraceCheckUtils]: 54: Hoare triple {17434#true} assume !(0 == ~switchedOnBeforeTS~0); {17434#true} is VALID [2020-07-28 19:05:59,141 INFO L280 TraceCheckUtils]: 55: Hoare triple {17434#true} assume !false; {17434#true} is VALID [2020-07-28 19:05:59,142 INFO L280 TraceCheckUtils]: 56: Hoare triple {17434#true} assume test_~splverifierCounter~0 < 4; {17434#true} is VALID [2020-07-28 19:05:59,142 INFO L280 TraceCheckUtils]: 57: Hoare triple {17434#true} assume -2147483648 <= test_#t~nondet34 && test_#t~nondet34 <= 2147483647;test_~tmp~5 := test_#t~nondet34;havoc test_#t~nondet34; {17434#true} is VALID [2020-07-28 19:05:59,142 INFO L280 TraceCheckUtils]: 58: Hoare triple {17434#true} assume !(0 != test_~tmp~5); {17434#true} is VALID [2020-07-28 19:05:59,142 INFO L280 TraceCheckUtils]: 59: Hoare triple {17434#true} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp___0~2 := test_#t~nondet35;havoc test_#t~nondet35; {17434#true} is VALID [2020-07-28 19:05:59,142 INFO L280 TraceCheckUtils]: 60: Hoare triple {17434#true} assume 0 != test_~tmp___0~2; {17434#true} is VALID [2020-07-28 19:05:59,142 INFO L280 TraceCheckUtils]: 61: Hoare triple {17434#true} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {17434#true} is VALID [2020-07-28 19:05:59,143 INFO L280 TraceCheckUtils]: 62: Hoare triple {17434#true} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___2~0 := test_#t~nondet36;havoc test_#t~nondet36; {17434#true} is VALID [2020-07-28 19:05:59,143 INFO L280 TraceCheckUtils]: 63: Hoare triple {17434#true} assume 0 != test_~tmp___2~0; {17434#true} is VALID [2020-07-28 19:05:59,143 INFO L280 TraceCheckUtils]: 64: Hoare triple {17434#true} havoc __utac_acc__Specification5_spec__2_#t~ret10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {17434#true} is VALID [2020-07-28 19:05:59,143 INFO L280 TraceCheckUtils]: 65: Hoare triple {17434#true} __utac_acc__Specification5_spec__2_#t~ret10 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret10 && __utac_acc__Specification5_spec__2_#t~ret10 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret10;havoc __utac_acc__Specification5_spec__2_#t~ret10; {17434#true} is VALID [2020-07-28 19:05:59,143 INFO L280 TraceCheckUtils]: 66: Hoare triple {17434#true} assume 0 != ~pumpRunning~0; {17434#true} is VALID [2020-07-28 19:05:59,143 INFO L280 TraceCheckUtils]: 67: Hoare triple {17434#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {17434#true} is VALID [2020-07-28 19:05:59,144 INFO L280 TraceCheckUtils]: 68: Hoare triple {17434#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {17434#true} is VALID [2020-07-28 19:05:59,144 INFO L280 TraceCheckUtils]: 69: Hoare triple {17434#true} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret16, isMethaneAlarm_~retValue_acc~4;havoc isMethaneAlarm_~retValue_acc~4;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {17434#true} is VALID [2020-07-28 19:05:59,144 INFO L280 TraceCheckUtils]: 70: Hoare triple {17434#true} isMethaneAlarm_#t~ret16 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret16 && isMethaneAlarm_#t~ret16 <= 2147483647;isMethaneAlarm_~retValue_acc~4 := isMethaneAlarm_#t~ret16;havoc isMethaneAlarm_#t~ret16;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~4; {17434#true} is VALID [2020-07-28 19:05:59,144 INFO L280 TraceCheckUtils]: 71: Hoare triple {17434#true} processEnvironment_#t~ret15 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret15 && processEnvironment_#t~ret15 <= 2147483647;processEnvironment_~tmp~3 := processEnvironment_#t~ret15;havoc processEnvironment_#t~ret15; {17434#true} is VALID [2020-07-28 19:05:59,144 INFO L280 TraceCheckUtils]: 72: Hoare triple {17434#true} assume 0 != processEnvironment_~tmp~3;~pumpRunning~0 := 0; {17434#true} is VALID [2020-07-28 19:05:59,144 INFO L280 TraceCheckUtils]: 73: Hoare triple {17434#true} havoc __utac_acc__Specification5_spec__3_#t~ret11, __utac_acc__Specification5_spec__3_#t~ret12, __utac_acc__Specification5_spec__3_~tmp~0, __utac_acc__Specification5_spec__3_~tmp___0~0;havoc __utac_acc__Specification5_spec__3_~tmp~0;havoc __utac_acc__Specification5_spec__3_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {17434#true} is VALID [2020-07-28 19:05:59,145 INFO L280 TraceCheckUtils]: 74: Hoare triple {17434#true} __utac_acc__Specification5_spec__3_#t~ret11 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret11 && __utac_acc__Specification5_spec__3_#t~ret11 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0 := __utac_acc__Specification5_spec__3_#t~ret11;havoc __utac_acc__Specification5_spec__3_#t~ret11; {17434#true} is VALID [2020-07-28 19:05:59,145 INFO L280 TraceCheckUtils]: 75: Hoare triple {17434#true} assume 2 != __utac_acc__Specification5_spec__3_~tmp~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {17434#true} is VALID [2020-07-28 19:05:59,145 INFO L280 TraceCheckUtils]: 76: Hoare triple {17434#true} __utac_acc__Specification5_spec__3_#t~ret12 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret12 && __utac_acc__Specification5_spec__3_#t~ret12 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0 := __utac_acc__Specification5_spec__3_#t~ret12;havoc __utac_acc__Specification5_spec__3_#t~ret12; {17434#true} is VALID [2020-07-28 19:05:59,145 INFO L280 TraceCheckUtils]: 77: Hoare triple {17434#true} assume !(0 != __utac_acc__Specification5_spec__3_~tmp___0~0); {17434#true} is VALID [2020-07-28 19:05:59,145 INFO L280 TraceCheckUtils]: 78: Hoare triple {17434#true} assume !false; {17434#true} is VALID [2020-07-28 19:05:59,145 INFO L280 TraceCheckUtils]: 79: Hoare triple {17434#true} assume test_~splverifierCounter~0 < 4; {17434#true} is VALID [2020-07-28 19:05:59,146 INFO L280 TraceCheckUtils]: 80: Hoare triple {17434#true} assume -2147483648 <= test_#t~nondet34 && test_#t~nondet34 <= 2147483647;test_~tmp~5 := test_#t~nondet34;havoc test_#t~nondet34; {17434#true} is VALID [2020-07-28 19:05:59,146 INFO L280 TraceCheckUtils]: 81: Hoare triple {17434#true} assume 0 != test_~tmp~5; {17434#true} is VALID [2020-07-28 19:05:59,146 INFO L280 TraceCheckUtils]: 82: Hoare triple {17434#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {17434#true} is VALID [2020-07-28 19:05:59,146 INFO L280 TraceCheckUtils]: 83: Hoare triple {17434#true} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp___0~2 := test_#t~nondet35;havoc test_#t~nondet35; {17434#true} is VALID [2020-07-28 19:05:59,146 INFO L280 TraceCheckUtils]: 84: Hoare triple {17434#true} assume !(0 != test_~tmp___0~2); {17434#true} is VALID [2020-07-28 19:05:59,146 INFO L280 TraceCheckUtils]: 85: Hoare triple {17434#true} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___2~0 := test_#t~nondet36;havoc test_#t~nondet36; {17434#true} is VALID [2020-07-28 19:05:59,147 INFO L280 TraceCheckUtils]: 86: Hoare triple {17434#true} assume 0 != test_~tmp___2~0; {17434#true} is VALID [2020-07-28 19:05:59,147 INFO L280 TraceCheckUtils]: 87: Hoare triple {17434#true} havoc __utac_acc__Specification5_spec__2_#t~ret10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {17434#true} is VALID [2020-07-28 19:05:59,147 INFO L280 TraceCheckUtils]: 88: Hoare triple {17434#true} __utac_acc__Specification5_spec__2_#t~ret10 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret10 && __utac_acc__Specification5_spec__2_#t~ret10 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret10;havoc __utac_acc__Specification5_spec__2_#t~ret10; {17434#true} is VALID [2020-07-28 19:05:59,147 INFO L280 TraceCheckUtils]: 89: Hoare triple {17434#true} assume !(0 != ~pumpRunning~0); {17434#true} is VALID [2020-07-28 19:05:59,147 INFO L280 TraceCheckUtils]: 90: Hoare triple {17434#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {17434#true} is VALID [2020-07-28 19:05:59,147 INFO L280 TraceCheckUtils]: 91: Hoare triple {17434#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~2;havoc processEnvironment__wrappee__highWaterSensor_~tmp~2; {17434#true} is VALID [2020-07-28 19:05:59,148 INFO L280 TraceCheckUtils]: 92: Hoare triple {17434#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret33, isHighWaterLevel_~retValue_acc~6, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~6;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {17434#true} is VALID [2020-07-28 19:05:59,148 INFO L280 TraceCheckUtils]: 93: Hoare triple {17434#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~2 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,149 INFO L280 TraceCheckUtils]: 94: Hoare triple {17436#(<= ~waterLevel~0 1)} isHighWaterLevel_#t~ret33 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret33 && isHighWaterLevel_#t~ret33 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret33;havoc isHighWaterLevel_#t~ret33; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,150 INFO L280 TraceCheckUtils]: 95: Hoare triple {17436#(<= ~waterLevel~0 1)} assume 0 != isHighWaterLevel_~tmp~4;isHighWaterLevel_~tmp___0~1 := 0; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,150 INFO L280 TraceCheckUtils]: 96: Hoare triple {17436#(<= ~waterLevel~0 1)} isHighWaterLevel_~retValue_acc~6 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~6; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,151 INFO L280 TraceCheckUtils]: 97: Hoare triple {17436#(<= ~waterLevel~0 1)} processEnvironment__wrappee__highWaterSensor_#t~ret14 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret14 && processEnvironment__wrappee__highWaterSensor_#t~ret14 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~2 := processEnvironment__wrappee__highWaterSensor_#t~ret14;havoc processEnvironment__wrappee__highWaterSensor_#t~ret14; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,151 INFO L280 TraceCheckUtils]: 98: Hoare triple {17436#(<= ~waterLevel~0 1)} assume !(0 != processEnvironment__wrappee__highWaterSensor_~tmp~2); {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,152 INFO L280 TraceCheckUtils]: 99: Hoare triple {17436#(<= ~waterLevel~0 1)} havoc __utac_acc__Specification5_spec__3_#t~ret11, __utac_acc__Specification5_spec__3_#t~ret12, __utac_acc__Specification5_spec__3_~tmp~0, __utac_acc__Specification5_spec__3_~tmp___0~0;havoc __utac_acc__Specification5_spec__3_~tmp~0;havoc __utac_acc__Specification5_spec__3_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,152 INFO L280 TraceCheckUtils]: 100: Hoare triple {17436#(<= ~waterLevel~0 1)} __utac_acc__Specification5_spec__3_#t~ret11 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret11 && __utac_acc__Specification5_spec__3_#t~ret11 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0 := __utac_acc__Specification5_spec__3_#t~ret11;havoc __utac_acc__Specification5_spec__3_#t~ret11; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,153 INFO L280 TraceCheckUtils]: 101: Hoare triple {17436#(<= ~waterLevel~0 1)} assume 2 != __utac_acc__Specification5_spec__3_~tmp~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,153 INFO L280 TraceCheckUtils]: 102: Hoare triple {17436#(<= ~waterLevel~0 1)} __utac_acc__Specification5_spec__3_#t~ret12 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret12 && __utac_acc__Specification5_spec__3_#t~ret12 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0 := __utac_acc__Specification5_spec__3_#t~ret12;havoc __utac_acc__Specification5_spec__3_#t~ret12; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,154 INFO L280 TraceCheckUtils]: 103: Hoare triple {17436#(<= ~waterLevel~0 1)} assume !(0 != __utac_acc__Specification5_spec__3_~tmp___0~0); {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,154 INFO L280 TraceCheckUtils]: 104: Hoare triple {17436#(<= ~waterLevel~0 1)} assume !false; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,155 INFO L280 TraceCheckUtils]: 105: Hoare triple {17436#(<= ~waterLevel~0 1)} assume test_~splverifierCounter~0 < 4; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,156 INFO L280 TraceCheckUtils]: 106: Hoare triple {17436#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet34 && test_#t~nondet34 <= 2147483647;test_~tmp~5 := test_#t~nondet34;havoc test_#t~nondet34; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,156 INFO L280 TraceCheckUtils]: 107: Hoare triple {17436#(<= ~waterLevel~0 1)} assume 0 != test_~tmp~5; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,157 INFO L280 TraceCheckUtils]: 108: Hoare triple {17436#(<= ~waterLevel~0 1)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {17437#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:59,158 INFO L280 TraceCheckUtils]: 109: Hoare triple {17437#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp___0~2 := test_#t~nondet35;havoc test_#t~nondet35; {17437#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:59,158 INFO L280 TraceCheckUtils]: 110: Hoare triple {17437#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___0~2); {17437#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:59,159 INFO L280 TraceCheckUtils]: 111: Hoare triple {17437#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___2~0 := test_#t~nondet36;havoc test_#t~nondet36; {17437#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:59,159 INFO L280 TraceCheckUtils]: 112: Hoare triple {17437#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0; {17437#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:59,160 INFO L280 TraceCheckUtils]: 113: Hoare triple {17437#(<= ~waterLevel~0 2)} havoc __utac_acc__Specification5_spec__2_#t~ret10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {17437#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:59,160 INFO L280 TraceCheckUtils]: 114: Hoare triple {17437#(<= ~waterLevel~0 2)} __utac_acc__Specification5_spec__2_#t~ret10 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret10 && __utac_acc__Specification5_spec__2_#t~ret10 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret10;havoc __utac_acc__Specification5_spec__2_#t~ret10; {17437#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:59,161 INFO L280 TraceCheckUtils]: 115: Hoare triple {17437#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0); {17437#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:59,161 INFO L280 TraceCheckUtils]: 116: Hoare triple {17437#(<= ~waterLevel~0 2)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {17437#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:59,162 INFO L280 TraceCheckUtils]: 117: Hoare triple {17437#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~2;havoc processEnvironment__wrappee__highWaterSensor_~tmp~2; {17437#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:59,162 INFO L280 TraceCheckUtils]: 118: Hoare triple {17437#(<= ~waterLevel~0 2)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret33, isHighWaterLevel_~retValue_acc~6, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~6;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {17437#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:59,163 INFO L280 TraceCheckUtils]: 119: Hoare triple {17437#(<= ~waterLevel~0 2)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {17438#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:05:59,164 INFO L280 TraceCheckUtils]: 120: Hoare triple {17438#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} isHighWaterLevel_#t~ret33 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret33 && isHighWaterLevel_#t~ret33 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret33;havoc isHighWaterLevel_#t~ret33; {17438#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:05:59,164 INFO L280 TraceCheckUtils]: 121: Hoare triple {17438#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {17438#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:05:59,165 INFO L280 TraceCheckUtils]: 122: Hoare triple {17438#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} isHighWaterLevel_~retValue_acc~6 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~6; {17438#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:05:59,166 INFO L280 TraceCheckUtils]: 123: Hoare triple {17438#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} processEnvironment__wrappee__highWaterSensor_#t~ret14 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret14 && processEnvironment__wrappee__highWaterSensor_#t~ret14 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~2 := processEnvironment__wrappee__highWaterSensor_#t~ret14;havoc processEnvironment__wrappee__highWaterSensor_#t~ret14; {17438#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:05:59,166 INFO L280 TraceCheckUtils]: 124: Hoare triple {17438#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~2;~pumpRunning~0 := 1; {17438#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:05:59,167 INFO L280 TraceCheckUtils]: 125: Hoare triple {17438#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} havoc __utac_acc__Specification5_spec__3_#t~ret11, __utac_acc__Specification5_spec__3_#t~ret12, __utac_acc__Specification5_spec__3_~tmp~0, __utac_acc__Specification5_spec__3_~tmp___0~0;havoc __utac_acc__Specification5_spec__3_~tmp~0;havoc __utac_acc__Specification5_spec__3_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {17439#(and (<= |ULTIMATE.start_getWaterLevel_#res| 2) (<= 2 |ULTIMATE.start_getWaterLevel_#res|))} is VALID [2020-07-28 19:05:59,168 INFO L280 TraceCheckUtils]: 126: Hoare triple {17439#(and (<= |ULTIMATE.start_getWaterLevel_#res| 2) (<= 2 |ULTIMATE.start_getWaterLevel_#res|))} __utac_acc__Specification5_spec__3_#t~ret11 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret11 && __utac_acc__Specification5_spec__3_#t~ret11 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0 := __utac_acc__Specification5_spec__3_#t~ret11;havoc __utac_acc__Specification5_spec__3_#t~ret11; {17440#(and (< 1 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~0) (<= ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~0 2))} is VALID [2020-07-28 19:05:59,169 INFO L280 TraceCheckUtils]: 127: Hoare triple {17440#(and (< 1 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~0) (<= ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~0 2))} assume 2 != __utac_acc__Specification5_spec__3_~tmp~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {17435#false} is VALID [2020-07-28 19:05:59,169 INFO L280 TraceCheckUtils]: 128: Hoare triple {17435#false} __utac_acc__Specification5_spec__3_#t~ret12 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret12 && __utac_acc__Specification5_spec__3_#t~ret12 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0 := __utac_acc__Specification5_spec__3_#t~ret12;havoc __utac_acc__Specification5_spec__3_#t~ret12; {17435#false} is VALID [2020-07-28 19:05:59,169 INFO L280 TraceCheckUtils]: 129: Hoare triple {17435#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~0; {17435#false} is VALID [2020-07-28 19:05:59,169 INFO L280 TraceCheckUtils]: 130: Hoare triple {17435#false} assume 0 == ~switchedOnBeforeTS~0; {17435#false} is VALID [2020-07-28 19:05:59,170 INFO L280 TraceCheckUtils]: 131: Hoare triple {17435#false} assume !false; {17435#false} is VALID [2020-07-28 19:05:59,182 INFO L134 CoverageAnalysis]: Checked inductivity of 201 backedges. 97 proven. 8 refuted. 0 times theorem prover too weak. 96 trivial. 0 not checked. [2020-07-28 19:05:59,183 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [127881403] [2020-07-28 19:05:59,184 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [513064861] [2020-07-28 19:05:59,184 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 5 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 5 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2020-07-28 19:05:59,307 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:05:59,310 INFO L263 TraceCheckSpWp]: Trace formula consists of 644 conjuncts, 14 conjunts are in the unsatisfiable core [2020-07-28 19:05:59,346 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:05:59,350 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2020-07-28 19:05:59,675 INFO L280 TraceCheckUtils]: 0: Hoare triple {17434#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(13);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string20.base, #t~string20.offset, 1);call write~init~int(110, #t~string20.base, 1 + #t~string20.offset, 1);call write~init~int(0, #t~string20.base, 2 + #t~string20.offset, 1);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string22.base, #t~string22.offset, 1);call write~init~int(102, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(102, #t~string22.base, 2 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 3 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string24.base, #t~string24.offset, 1);call write~init~int(80, #t~string24.base, 1 + #t~string24.offset, 1);call write~init~int(117, #t~string24.base, 2 + #t~string24.offset, 1);call write~init~int(109, #t~string24.base, 3 + #t~string24.offset, 1);call write~init~int(112, #t~string24.base, 4 + #t~string24.offset, 1);call write~init~int(58, #t~string24.base, 5 + #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 6 + #t~string24.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string26.base, #t~string26.offset, 1);call write~init~int(110, #t~string26.base, 1 + #t~string26.offset, 1);call write~init~int(0, #t~string26.base, 2 + #t~string26.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string28.base, #t~string28.offset, 1);call write~init~int(102, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(102, #t~string28.base, 2 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 3 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string30.base, #t~string30.offset, 1);call write~init~int(32, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 2 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string32.base, #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 1 + #t~string32.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(30);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(9);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(21);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(30);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(9);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,675 INFO L280 TraceCheckUtils]: 1: Hoare triple {17436#(<= ~waterLevel~0 1)} havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~3, main_~tmp~1;havoc main_~retValue_acc~3;havoc main_~tmp~1; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,676 INFO L280 TraceCheckUtils]: 2: Hoare triple {17436#(<= ~waterLevel~0 1)} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,677 INFO L280 TraceCheckUtils]: 3: Hoare triple {17436#(<= ~waterLevel~0 1)} main_#t~ret13 := valid_product_#res;assume -2147483648 <= main_#t~ret13 && main_#t~ret13 <= 2147483647;main_~tmp~1 := main_#t~ret13;havoc main_#t~ret13; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,677 INFO L280 TraceCheckUtils]: 4: Hoare triple {17436#(<= ~waterLevel~0 1)} assume 0 != main_~tmp~1; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,680 INFO L280 TraceCheckUtils]: 5: Hoare triple {17436#(<= ~waterLevel~0 1)} ~switchedOnBeforeTS~0 := 0; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,682 INFO L280 TraceCheckUtils]: 6: Hoare triple {17436#(<= ~waterLevel~0 1)} havoc test_#t~nondet34, test_#t~nondet35, test_#t~nondet36, test_#t~nondet37, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~2, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~2;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,683 INFO L280 TraceCheckUtils]: 7: Hoare triple {17436#(<= ~waterLevel~0 1)} assume !false; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,683 INFO L280 TraceCheckUtils]: 8: Hoare triple {17436#(<= ~waterLevel~0 1)} assume test_~splverifierCounter~0 < 4; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,684 INFO L280 TraceCheckUtils]: 9: Hoare triple {17436#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet34 && test_#t~nondet34 <= 2147483647;test_~tmp~5 := test_#t~nondet34;havoc test_#t~nondet34; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,684 INFO L280 TraceCheckUtils]: 10: Hoare triple {17436#(<= ~waterLevel~0 1)} assume 0 != test_~tmp~5; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,685 INFO L280 TraceCheckUtils]: 11: Hoare triple {17436#(<= ~waterLevel~0 1)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {17437#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:59,685 INFO L280 TraceCheckUtils]: 12: Hoare triple {17437#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp___0~2 := test_#t~nondet35;havoc test_#t~nondet35; {17437#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:59,685 INFO L280 TraceCheckUtils]: 13: Hoare triple {17437#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___0~2); {17437#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:59,686 INFO L280 TraceCheckUtils]: 14: Hoare triple {17437#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___2~0 := test_#t~nondet36;havoc test_#t~nondet36; {17437#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:59,687 INFO L280 TraceCheckUtils]: 15: Hoare triple {17437#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0; {17437#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:59,687 INFO L280 TraceCheckUtils]: 16: Hoare triple {17437#(<= ~waterLevel~0 2)} havoc __utac_acc__Specification5_spec__2_#t~ret10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {17437#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:59,688 INFO L280 TraceCheckUtils]: 17: Hoare triple {17437#(<= ~waterLevel~0 2)} __utac_acc__Specification5_spec__2_#t~ret10 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret10 && __utac_acc__Specification5_spec__2_#t~ret10 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret10;havoc __utac_acc__Specification5_spec__2_#t~ret10; {17437#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:59,688 INFO L280 TraceCheckUtils]: 18: Hoare triple {17437#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0); {17437#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:59,688 INFO L280 TraceCheckUtils]: 19: Hoare triple {17437#(<= ~waterLevel~0 2)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {17437#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:59,689 INFO L280 TraceCheckUtils]: 20: Hoare triple {17437#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~2;havoc processEnvironment__wrappee__highWaterSensor_~tmp~2; {17437#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:59,689 INFO L280 TraceCheckUtils]: 21: Hoare triple {17437#(<= ~waterLevel~0 2)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret33, isHighWaterLevel_~retValue_acc~6, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~6;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {17437#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:59,690 INFO L280 TraceCheckUtils]: 22: Hoare triple {17437#(<= ~waterLevel~0 2)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {17437#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:59,690 INFO L280 TraceCheckUtils]: 23: Hoare triple {17437#(<= ~waterLevel~0 2)} isHighWaterLevel_#t~ret33 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret33 && isHighWaterLevel_#t~ret33 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret33;havoc isHighWaterLevel_#t~ret33; {17437#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:59,691 INFO L280 TraceCheckUtils]: 24: Hoare triple {17437#(<= ~waterLevel~0 2)} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {17437#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:59,692 INFO L280 TraceCheckUtils]: 25: Hoare triple {17437#(<= ~waterLevel~0 2)} isHighWaterLevel_~retValue_acc~6 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~6; {17437#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:59,692 INFO L280 TraceCheckUtils]: 26: Hoare triple {17437#(<= ~waterLevel~0 2)} processEnvironment__wrappee__highWaterSensor_#t~ret14 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret14 && processEnvironment__wrappee__highWaterSensor_#t~ret14 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~2 := processEnvironment__wrappee__highWaterSensor_#t~ret14;havoc processEnvironment__wrappee__highWaterSensor_#t~ret14; {17437#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:59,693 INFO L280 TraceCheckUtils]: 27: Hoare triple {17437#(<= ~waterLevel~0 2)} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~2;~pumpRunning~0 := 1; {17437#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:59,694 INFO L280 TraceCheckUtils]: 28: Hoare triple {17437#(<= ~waterLevel~0 2)} havoc __utac_acc__Specification5_spec__3_#t~ret11, __utac_acc__Specification5_spec__3_#t~ret12, __utac_acc__Specification5_spec__3_~tmp~0, __utac_acc__Specification5_spec__3_~tmp___0~0;havoc __utac_acc__Specification5_spec__3_~tmp~0;havoc __utac_acc__Specification5_spec__3_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {17437#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:59,694 INFO L280 TraceCheckUtils]: 29: Hoare triple {17437#(<= ~waterLevel~0 2)} __utac_acc__Specification5_spec__3_#t~ret11 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret11 && __utac_acc__Specification5_spec__3_#t~ret11 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0 := __utac_acc__Specification5_spec__3_#t~ret11;havoc __utac_acc__Specification5_spec__3_#t~ret11; {17437#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:59,695 INFO L280 TraceCheckUtils]: 30: Hoare triple {17437#(<= ~waterLevel~0 2)} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~0); {17437#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:59,695 INFO L280 TraceCheckUtils]: 31: Hoare triple {17437#(<= ~waterLevel~0 2)} assume !false; {17437#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:59,696 INFO L280 TraceCheckUtils]: 32: Hoare triple {17437#(<= ~waterLevel~0 2)} assume test_~splverifierCounter~0 < 4; {17437#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:59,697 INFO L280 TraceCheckUtils]: 33: Hoare triple {17437#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet34 && test_#t~nondet34 <= 2147483647;test_~tmp~5 := test_#t~nondet34;havoc test_#t~nondet34; {17437#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:59,697 INFO L280 TraceCheckUtils]: 34: Hoare triple {17437#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp~5); {17437#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:59,698 INFO L280 TraceCheckUtils]: 35: Hoare triple {17437#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp___0~2 := test_#t~nondet35;havoc test_#t~nondet35; {17437#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:59,698 INFO L280 TraceCheckUtils]: 36: Hoare triple {17437#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___0~2); {17437#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:59,699 INFO L280 TraceCheckUtils]: 37: Hoare triple {17437#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___2~0 := test_#t~nondet36;havoc test_#t~nondet36; {17437#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:59,700 INFO L280 TraceCheckUtils]: 38: Hoare triple {17437#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0; {17437#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:59,700 INFO L280 TraceCheckUtils]: 39: Hoare triple {17437#(<= ~waterLevel~0 2)} havoc __utac_acc__Specification5_spec__2_#t~ret10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {17437#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:59,701 INFO L280 TraceCheckUtils]: 40: Hoare triple {17437#(<= ~waterLevel~0 2)} __utac_acc__Specification5_spec__2_#t~ret10 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret10 && __utac_acc__Specification5_spec__2_#t~ret10 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret10;havoc __utac_acc__Specification5_spec__2_#t~ret10; {17437#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:59,702 INFO L280 TraceCheckUtils]: 41: Hoare triple {17437#(<= ~waterLevel~0 2)} assume 0 != ~pumpRunning~0; {17437#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:59,702 INFO L280 TraceCheckUtils]: 42: Hoare triple {17437#(<= ~waterLevel~0 2)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,703 INFO L280 TraceCheckUtils]: 43: Hoare triple {17436#(<= ~waterLevel~0 1)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,703 INFO L280 TraceCheckUtils]: 44: Hoare triple {17436#(<= ~waterLevel~0 1)} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret16, isMethaneAlarm_~retValue_acc~4;havoc isMethaneAlarm_~retValue_acc~4;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,704 INFO L280 TraceCheckUtils]: 45: Hoare triple {17436#(<= ~waterLevel~0 1)} isMethaneAlarm_#t~ret16 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret16 && isMethaneAlarm_#t~ret16 <= 2147483647;isMethaneAlarm_~retValue_acc~4 := isMethaneAlarm_#t~ret16;havoc isMethaneAlarm_#t~ret16;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~4; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,704 INFO L280 TraceCheckUtils]: 46: Hoare triple {17436#(<= ~waterLevel~0 1)} processEnvironment_#t~ret15 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret15 && processEnvironment_#t~ret15 <= 2147483647;processEnvironment_~tmp~3 := processEnvironment_#t~ret15;havoc processEnvironment_#t~ret15; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,704 INFO L280 TraceCheckUtils]: 47: Hoare triple {17436#(<= ~waterLevel~0 1)} assume !(0 != processEnvironment_~tmp~3);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~2;havoc processEnvironment__wrappee__highWaterSensor_~tmp~2; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,705 INFO L280 TraceCheckUtils]: 48: Hoare triple {17436#(<= ~waterLevel~0 1)} assume !(0 == ~pumpRunning~0); {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,706 INFO L280 TraceCheckUtils]: 49: Hoare triple {17436#(<= ~waterLevel~0 1)} havoc __utac_acc__Specification5_spec__3_#t~ret11, __utac_acc__Specification5_spec__3_#t~ret12, __utac_acc__Specification5_spec__3_~tmp~0, __utac_acc__Specification5_spec__3_~tmp___0~0;havoc __utac_acc__Specification5_spec__3_~tmp~0;havoc __utac_acc__Specification5_spec__3_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,706 INFO L280 TraceCheckUtils]: 50: Hoare triple {17436#(<= ~waterLevel~0 1)} __utac_acc__Specification5_spec__3_#t~ret11 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret11 && __utac_acc__Specification5_spec__3_#t~ret11 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0 := __utac_acc__Specification5_spec__3_#t~ret11;havoc __utac_acc__Specification5_spec__3_#t~ret11; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,713 INFO L280 TraceCheckUtils]: 51: Hoare triple {17436#(<= ~waterLevel~0 1)} assume 2 != __utac_acc__Specification5_spec__3_~tmp~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,714 INFO L280 TraceCheckUtils]: 52: Hoare triple {17436#(<= ~waterLevel~0 1)} __utac_acc__Specification5_spec__3_#t~ret12 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret12 && __utac_acc__Specification5_spec__3_#t~ret12 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0 := __utac_acc__Specification5_spec__3_#t~ret12;havoc __utac_acc__Specification5_spec__3_#t~ret12; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,715 INFO L280 TraceCheckUtils]: 53: Hoare triple {17436#(<= ~waterLevel~0 1)} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~0; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,715 INFO L280 TraceCheckUtils]: 54: Hoare triple {17436#(<= ~waterLevel~0 1)} assume !(0 == ~switchedOnBeforeTS~0); {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,716 INFO L280 TraceCheckUtils]: 55: Hoare triple {17436#(<= ~waterLevel~0 1)} assume !false; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,716 INFO L280 TraceCheckUtils]: 56: Hoare triple {17436#(<= ~waterLevel~0 1)} assume test_~splverifierCounter~0 < 4; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,717 INFO L280 TraceCheckUtils]: 57: Hoare triple {17436#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet34 && test_#t~nondet34 <= 2147483647;test_~tmp~5 := test_#t~nondet34;havoc test_#t~nondet34; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,718 INFO L280 TraceCheckUtils]: 58: Hoare triple {17436#(<= ~waterLevel~0 1)} assume !(0 != test_~tmp~5); {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,718 INFO L280 TraceCheckUtils]: 59: Hoare triple {17436#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp___0~2 := test_#t~nondet35;havoc test_#t~nondet35; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,719 INFO L280 TraceCheckUtils]: 60: Hoare triple {17436#(<= ~waterLevel~0 1)} assume 0 != test_~tmp___0~2; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,719 INFO L280 TraceCheckUtils]: 61: Hoare triple {17436#(<= ~waterLevel~0 1)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,720 INFO L280 TraceCheckUtils]: 62: Hoare triple {17436#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___2~0 := test_#t~nondet36;havoc test_#t~nondet36; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,720 INFO L280 TraceCheckUtils]: 63: Hoare triple {17436#(<= ~waterLevel~0 1)} assume 0 != test_~tmp___2~0; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,721 INFO L280 TraceCheckUtils]: 64: Hoare triple {17436#(<= ~waterLevel~0 1)} havoc __utac_acc__Specification5_spec__2_#t~ret10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,722 INFO L280 TraceCheckUtils]: 65: Hoare triple {17436#(<= ~waterLevel~0 1)} __utac_acc__Specification5_spec__2_#t~ret10 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret10 && __utac_acc__Specification5_spec__2_#t~ret10 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret10;havoc __utac_acc__Specification5_spec__2_#t~ret10; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,722 INFO L280 TraceCheckUtils]: 66: Hoare triple {17436#(<= ~waterLevel~0 1)} assume 0 != ~pumpRunning~0; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,723 INFO L280 TraceCheckUtils]: 67: Hoare triple {17436#(<= ~waterLevel~0 1)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {17645#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:05:59,724 INFO L280 TraceCheckUtils]: 68: Hoare triple {17645#(<= ~waterLevel~0 0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {17645#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:05:59,724 INFO L280 TraceCheckUtils]: 69: Hoare triple {17645#(<= ~waterLevel~0 0)} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret16, isMethaneAlarm_~retValue_acc~4;havoc isMethaneAlarm_~retValue_acc~4;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {17645#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:05:59,725 INFO L280 TraceCheckUtils]: 70: Hoare triple {17645#(<= ~waterLevel~0 0)} isMethaneAlarm_#t~ret16 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret16 && isMethaneAlarm_#t~ret16 <= 2147483647;isMethaneAlarm_~retValue_acc~4 := isMethaneAlarm_#t~ret16;havoc isMethaneAlarm_#t~ret16;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~4; {17645#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:05:59,725 INFO L280 TraceCheckUtils]: 71: Hoare triple {17645#(<= ~waterLevel~0 0)} processEnvironment_#t~ret15 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret15 && processEnvironment_#t~ret15 <= 2147483647;processEnvironment_~tmp~3 := processEnvironment_#t~ret15;havoc processEnvironment_#t~ret15; {17645#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:05:59,726 INFO L280 TraceCheckUtils]: 72: Hoare triple {17645#(<= ~waterLevel~0 0)} assume 0 != processEnvironment_~tmp~3;~pumpRunning~0 := 0; {17645#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:05:59,727 INFO L280 TraceCheckUtils]: 73: Hoare triple {17645#(<= ~waterLevel~0 0)} havoc __utac_acc__Specification5_spec__3_#t~ret11, __utac_acc__Specification5_spec__3_#t~ret12, __utac_acc__Specification5_spec__3_~tmp~0, __utac_acc__Specification5_spec__3_~tmp___0~0;havoc __utac_acc__Specification5_spec__3_~tmp~0;havoc __utac_acc__Specification5_spec__3_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {17645#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:05:59,727 INFO L280 TraceCheckUtils]: 74: Hoare triple {17645#(<= ~waterLevel~0 0)} __utac_acc__Specification5_spec__3_#t~ret11 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret11 && __utac_acc__Specification5_spec__3_#t~ret11 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0 := __utac_acc__Specification5_spec__3_#t~ret11;havoc __utac_acc__Specification5_spec__3_#t~ret11; {17645#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:05:59,727 INFO L280 TraceCheckUtils]: 75: Hoare triple {17645#(<= ~waterLevel~0 0)} assume 2 != __utac_acc__Specification5_spec__3_~tmp~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {17645#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:05:59,728 INFO L280 TraceCheckUtils]: 76: Hoare triple {17645#(<= ~waterLevel~0 0)} __utac_acc__Specification5_spec__3_#t~ret12 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret12 && __utac_acc__Specification5_spec__3_#t~ret12 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0 := __utac_acc__Specification5_spec__3_#t~ret12;havoc __utac_acc__Specification5_spec__3_#t~ret12; {17645#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:05:59,728 INFO L280 TraceCheckUtils]: 77: Hoare triple {17645#(<= ~waterLevel~0 0)} assume !(0 != __utac_acc__Specification5_spec__3_~tmp___0~0); {17645#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:05:59,729 INFO L280 TraceCheckUtils]: 78: Hoare triple {17645#(<= ~waterLevel~0 0)} assume !false; {17645#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:05:59,729 INFO L280 TraceCheckUtils]: 79: Hoare triple {17645#(<= ~waterLevel~0 0)} assume test_~splverifierCounter~0 < 4; {17645#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:05:59,729 INFO L280 TraceCheckUtils]: 80: Hoare triple {17645#(<= ~waterLevel~0 0)} assume -2147483648 <= test_#t~nondet34 && test_#t~nondet34 <= 2147483647;test_~tmp~5 := test_#t~nondet34;havoc test_#t~nondet34; {17645#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:05:59,730 INFO L280 TraceCheckUtils]: 81: Hoare triple {17645#(<= ~waterLevel~0 0)} assume 0 != test_~tmp~5; {17645#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:05:59,730 INFO L280 TraceCheckUtils]: 82: Hoare triple {17645#(<= ~waterLevel~0 0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,731 INFO L280 TraceCheckUtils]: 83: Hoare triple {17436#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp___0~2 := test_#t~nondet35;havoc test_#t~nondet35; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,732 INFO L280 TraceCheckUtils]: 84: Hoare triple {17436#(<= ~waterLevel~0 1)} assume !(0 != test_~tmp___0~2); {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,732 INFO L280 TraceCheckUtils]: 85: Hoare triple {17436#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___2~0 := test_#t~nondet36;havoc test_#t~nondet36; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,733 INFO L280 TraceCheckUtils]: 86: Hoare triple {17436#(<= ~waterLevel~0 1)} assume 0 != test_~tmp___2~0; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,734 INFO L280 TraceCheckUtils]: 87: Hoare triple {17436#(<= ~waterLevel~0 1)} havoc __utac_acc__Specification5_spec__2_#t~ret10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,735 INFO L280 TraceCheckUtils]: 88: Hoare triple {17436#(<= ~waterLevel~0 1)} __utac_acc__Specification5_spec__2_#t~ret10 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret10 && __utac_acc__Specification5_spec__2_#t~ret10 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret10;havoc __utac_acc__Specification5_spec__2_#t~ret10; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,735 INFO L280 TraceCheckUtils]: 89: Hoare triple {17436#(<= ~waterLevel~0 1)} assume !(0 != ~pumpRunning~0); {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,736 INFO L280 TraceCheckUtils]: 90: Hoare triple {17436#(<= ~waterLevel~0 1)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,736 INFO L280 TraceCheckUtils]: 91: Hoare triple {17436#(<= ~waterLevel~0 1)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~2;havoc processEnvironment__wrappee__highWaterSensor_~tmp~2; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,737 INFO L280 TraceCheckUtils]: 92: Hoare triple {17436#(<= ~waterLevel~0 1)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret33, isHighWaterLevel_~retValue_acc~6, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~6;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,737 INFO L280 TraceCheckUtils]: 93: Hoare triple {17436#(<= ~waterLevel~0 1)} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~2 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,738 INFO L280 TraceCheckUtils]: 94: Hoare triple {17436#(<= ~waterLevel~0 1)} isHighWaterLevel_#t~ret33 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret33 && isHighWaterLevel_#t~ret33 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret33;havoc isHighWaterLevel_#t~ret33; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,738 INFO L280 TraceCheckUtils]: 95: Hoare triple {17436#(<= ~waterLevel~0 1)} assume 0 != isHighWaterLevel_~tmp~4;isHighWaterLevel_~tmp___0~1 := 0; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,738 INFO L280 TraceCheckUtils]: 96: Hoare triple {17436#(<= ~waterLevel~0 1)} isHighWaterLevel_~retValue_acc~6 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~6; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,739 INFO L280 TraceCheckUtils]: 97: Hoare triple {17436#(<= ~waterLevel~0 1)} processEnvironment__wrappee__highWaterSensor_#t~ret14 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret14 && processEnvironment__wrappee__highWaterSensor_#t~ret14 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~2 := processEnvironment__wrappee__highWaterSensor_#t~ret14;havoc processEnvironment__wrappee__highWaterSensor_#t~ret14; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,740 INFO L280 TraceCheckUtils]: 98: Hoare triple {17436#(<= ~waterLevel~0 1)} assume !(0 != processEnvironment__wrappee__highWaterSensor_~tmp~2); {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,740 INFO L280 TraceCheckUtils]: 99: Hoare triple {17436#(<= ~waterLevel~0 1)} havoc __utac_acc__Specification5_spec__3_#t~ret11, __utac_acc__Specification5_spec__3_#t~ret12, __utac_acc__Specification5_spec__3_~tmp~0, __utac_acc__Specification5_spec__3_~tmp___0~0;havoc __utac_acc__Specification5_spec__3_~tmp~0;havoc __utac_acc__Specification5_spec__3_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,741 INFO L280 TraceCheckUtils]: 100: Hoare triple {17436#(<= ~waterLevel~0 1)} __utac_acc__Specification5_spec__3_#t~ret11 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret11 && __utac_acc__Specification5_spec__3_#t~ret11 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0 := __utac_acc__Specification5_spec__3_#t~ret11;havoc __utac_acc__Specification5_spec__3_#t~ret11; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,741 INFO L280 TraceCheckUtils]: 101: Hoare triple {17436#(<= ~waterLevel~0 1)} assume 2 != __utac_acc__Specification5_spec__3_~tmp~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,741 INFO L280 TraceCheckUtils]: 102: Hoare triple {17436#(<= ~waterLevel~0 1)} __utac_acc__Specification5_spec__3_#t~ret12 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret12 && __utac_acc__Specification5_spec__3_#t~ret12 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0 := __utac_acc__Specification5_spec__3_#t~ret12;havoc __utac_acc__Specification5_spec__3_#t~ret12; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,742 INFO L280 TraceCheckUtils]: 103: Hoare triple {17436#(<= ~waterLevel~0 1)} assume !(0 != __utac_acc__Specification5_spec__3_~tmp___0~0); {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,742 INFO L280 TraceCheckUtils]: 104: Hoare triple {17436#(<= ~waterLevel~0 1)} assume !false; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,743 INFO L280 TraceCheckUtils]: 105: Hoare triple {17436#(<= ~waterLevel~0 1)} assume test_~splverifierCounter~0 < 4; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,743 INFO L280 TraceCheckUtils]: 106: Hoare triple {17436#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet34 && test_#t~nondet34 <= 2147483647;test_~tmp~5 := test_#t~nondet34;havoc test_#t~nondet34; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,743 INFO L280 TraceCheckUtils]: 107: Hoare triple {17436#(<= ~waterLevel~0 1)} assume 0 != test_~tmp~5; {17436#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:05:59,744 INFO L280 TraceCheckUtils]: 108: Hoare triple {17436#(<= ~waterLevel~0 1)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {17437#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:59,745 INFO L280 TraceCheckUtils]: 109: Hoare triple {17437#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp___0~2 := test_#t~nondet35;havoc test_#t~nondet35; {17437#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:59,745 INFO L280 TraceCheckUtils]: 110: Hoare triple {17437#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___0~2); {17437#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:59,746 INFO L280 TraceCheckUtils]: 111: Hoare triple {17437#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___2~0 := test_#t~nondet36;havoc test_#t~nondet36; {17437#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:59,746 INFO L280 TraceCheckUtils]: 112: Hoare triple {17437#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0; {17437#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:59,747 INFO L280 TraceCheckUtils]: 113: Hoare triple {17437#(<= ~waterLevel~0 2)} havoc __utac_acc__Specification5_spec__2_#t~ret10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {17437#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:59,747 INFO L280 TraceCheckUtils]: 114: Hoare triple {17437#(<= ~waterLevel~0 2)} __utac_acc__Specification5_spec__2_#t~ret10 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret10 && __utac_acc__Specification5_spec__2_#t~ret10 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret10;havoc __utac_acc__Specification5_spec__2_#t~ret10; {17437#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:59,747 INFO L280 TraceCheckUtils]: 115: Hoare triple {17437#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0); {17437#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:59,748 INFO L280 TraceCheckUtils]: 116: Hoare triple {17437#(<= ~waterLevel~0 2)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {17437#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:59,748 INFO L280 TraceCheckUtils]: 117: Hoare triple {17437#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~2;havoc processEnvironment__wrappee__highWaterSensor_~tmp~2; {17437#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:59,749 INFO L280 TraceCheckUtils]: 118: Hoare triple {17437#(<= ~waterLevel~0 2)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret33, isHighWaterLevel_~retValue_acc~6, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~6;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {17437#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:05:59,750 INFO L280 TraceCheckUtils]: 119: Hoare triple {17437#(<= ~waterLevel~0 2)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {17438#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:05:59,751 INFO L280 TraceCheckUtils]: 120: Hoare triple {17438#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} isHighWaterLevel_#t~ret33 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret33 && isHighWaterLevel_#t~ret33 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret33;havoc isHighWaterLevel_#t~ret33; {17438#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:05:59,751 INFO L280 TraceCheckUtils]: 121: Hoare triple {17438#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {17438#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:05:59,752 INFO L280 TraceCheckUtils]: 122: Hoare triple {17438#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} isHighWaterLevel_~retValue_acc~6 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~6; {17438#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:05:59,753 INFO L280 TraceCheckUtils]: 123: Hoare triple {17438#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} processEnvironment__wrappee__highWaterSensor_#t~ret14 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret14 && processEnvironment__wrappee__highWaterSensor_#t~ret14 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~2 := processEnvironment__wrappee__highWaterSensor_#t~ret14;havoc processEnvironment__wrappee__highWaterSensor_#t~ret14; {17438#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:05:59,754 INFO L280 TraceCheckUtils]: 124: Hoare triple {17438#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~2;~pumpRunning~0 := 1; {17438#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:05:59,754 INFO L280 TraceCheckUtils]: 125: Hoare triple {17438#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} havoc __utac_acc__Specification5_spec__3_#t~ret11, __utac_acc__Specification5_spec__3_#t~ret12, __utac_acc__Specification5_spec__3_~tmp~0, __utac_acc__Specification5_spec__3_~tmp___0~0;havoc __utac_acc__Specification5_spec__3_~tmp~0;havoc __utac_acc__Specification5_spec__3_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {17439#(and (<= |ULTIMATE.start_getWaterLevel_#res| 2) (<= 2 |ULTIMATE.start_getWaterLevel_#res|))} is VALID [2020-07-28 19:05:59,755 INFO L280 TraceCheckUtils]: 126: Hoare triple {17439#(and (<= |ULTIMATE.start_getWaterLevel_#res| 2) (<= 2 |ULTIMATE.start_getWaterLevel_#res|))} __utac_acc__Specification5_spec__3_#t~ret11 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret11 && __utac_acc__Specification5_spec__3_#t~ret11 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0 := __utac_acc__Specification5_spec__3_#t~ret11;havoc __utac_acc__Specification5_spec__3_#t~ret11; {17440#(and (< 1 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~0) (<= ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~0 2))} is VALID [2020-07-28 19:05:59,755 INFO L280 TraceCheckUtils]: 127: Hoare triple {17440#(and (< 1 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~0) (<= ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~0 2))} assume 2 != __utac_acc__Specification5_spec__3_~tmp~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {17435#false} is VALID [2020-07-28 19:05:59,755 INFO L280 TraceCheckUtils]: 128: Hoare triple {17435#false} __utac_acc__Specification5_spec__3_#t~ret12 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret12 && __utac_acc__Specification5_spec__3_#t~ret12 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0 := __utac_acc__Specification5_spec__3_#t~ret12;havoc __utac_acc__Specification5_spec__3_#t~ret12; {17435#false} is VALID [2020-07-28 19:05:59,756 INFO L280 TraceCheckUtils]: 129: Hoare triple {17435#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~0; {17435#false} is VALID [2020-07-28 19:05:59,756 INFO L280 TraceCheckUtils]: 130: Hoare triple {17435#false} assume 0 == ~switchedOnBeforeTS~0; {17435#false} is VALID [2020-07-28 19:05:59,756 INFO L280 TraceCheckUtils]: 131: Hoare triple {17435#false} assume !false; {17435#false} is VALID [2020-07-28 19:05:59,771 INFO L134 CoverageAnalysis]: Checked inductivity of 201 backedges. 95 proven. 54 refuted. 0 times theorem prover too weak. 52 trivial. 0 not checked. [2020-07-28 19:05:59,771 INFO L220 FreeRefinementEngine]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2020-07-28 19:05:59,771 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 7] total 8 [2020-07-28 19:05:59,772 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1669943932] [2020-07-28 19:05:59,772 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 132 [2020-07-28 19:05:59,773 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:05:59,773 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states. [2020-07-28 19:05:59,939 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 146 edges. 146 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:05:59,939 INFO L459 AbstractCegarLoop]: Interpolant automaton has 8 states [2020-07-28 19:05:59,940 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:05:59,940 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2020-07-28 19:05:59,940 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2020-07-28 19:05:59,941 INFO L87 Difference]: Start difference. First operand 492 states and 599 transitions. Second operand 8 states. [2020-07-28 19:06:02,776 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:02,776 INFO L93 Difference]: Finished difference Result 928 states and 1141 transitions. [2020-07-28 19:06:02,776 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2020-07-28 19:06:02,777 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 132 [2020-07-28 19:06:02,777 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:06:02,777 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 8 states. [2020-07-28 19:06:02,778 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 221 transitions. [2020-07-28 19:06:02,778 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 8 states. [2020-07-28 19:06:02,779 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 221 transitions. [2020-07-28 19:06:02,780 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 9 states and 221 transitions. [2020-07-28 19:06:03,075 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 221 edges. 221 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:06:03,076 INFO L225 Difference]: With dead ends: 928 [2020-07-28 19:06:03,076 INFO L226 Difference]: Without dead ends: 0 [2020-07-28 19:06:03,081 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 142 GetRequests, 132 SyntacticMatches, 1 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 14 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=35, Invalid=75, Unknown=0, NotChecked=0, Total=110 [2020-07-28 19:06:03,081 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2020-07-28 19:06:03,082 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2020-07-28 19:06:03,082 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:06:03,082 INFO L82 GeneralOperation]: Start isEquivalent. First operand 0 states. Second operand 0 states. [2020-07-28 19:06:03,082 INFO L74 IsIncluded]: Start isIncluded. First operand 0 states. Second operand 0 states. [2020-07-28 19:06:03,082 INFO L87 Difference]: Start difference. First operand 0 states. Second operand 0 states. [2020-07-28 19:06:03,082 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:03,083 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2020-07-28 19:06:03,083 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2020-07-28 19:06:03,083 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:06:03,084 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:06:03,084 INFO L74 IsIncluded]: Start isIncluded. First operand 0 states. Second operand 0 states. [2020-07-28 19:06:03,084 INFO L87 Difference]: Start difference. First operand 0 states. Second operand 0 states. [2020-07-28 19:06:03,085 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:03,085 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2020-07-28 19:06:03,085 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2020-07-28 19:06:03,085 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:06:03,085 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:06:03,085 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:06:03,086 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:06:03,086 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 0 states. [2020-07-28 19:06:03,086 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2020-07-28 19:06:03,086 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 132 [2020-07-28 19:06:03,086 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:06:03,087 INFO L479 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2020-07-28 19:06:03,087 INFO L480 AbstractCegarLoop]: Interpolant automaton has 8 states. [2020-07-28 19:06:03,088 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2020-07-28 19:06:03,088 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:06:03,297 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13,5 z3 -smt2 -in SMTLIB2_COMPLIANT=true [2020-07-28 19:06:03,301 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2020-07-28 19:06:03,508 WARN L193 SmtUtils]: Spent 193.00 ms on a formula simplification. DAG size of input: 118 DAG size of output: 94 [2020-07-28 19:06:03,717 WARN L193 SmtUtils]: Spent 200.00 ms on a formula simplification. DAG size of input: 162 DAG size of output: 113 [2020-07-28 19:06:04,021 WARN L193 SmtUtils]: Spent 295.00 ms on a formula simplification. DAG size of input: 217 DAG size of output: 169 [2020-07-28 19:06:04,468 WARN L193 SmtUtils]: Spent 387.00 ms on a formula simplification. DAG size of input: 223 DAG size of output: 159 [2020-07-28 19:06:04,836 WARN L193 SmtUtils]: Spent 256.00 ms on a formula simplification. DAG size of input: 212 DAG size of output: 150 [2020-07-28 19:06:05,014 WARN L193 SmtUtils]: Spent 123.00 ms on a formula simplification. DAG size of input: 163 DAG size of output: 104 [2020-07-28 19:06:05,228 WARN L193 SmtUtils]: Spent 208.00 ms on a formula simplification. DAG size of input: 208 DAG size of output: 146 [2020-07-28 19:06:05,538 WARN L193 SmtUtils]: Spent 272.00 ms on a formula simplification. DAG size of input: 205 DAG size of output: 167 [2020-07-28 19:06:05,851 WARN L193 SmtUtils]: Spent 296.00 ms on a formula simplification. DAG size of input: 209 DAG size of output: 145 [2020-07-28 19:06:06,257 WARN L193 SmtUtils]: Spent 390.00 ms on a formula simplification. DAG size of input: 92 DAG size of output: 21 [2020-07-28 19:06:06,744 WARN L193 SmtUtils]: Spent 469.00 ms on a formula simplification. DAG size of input: 110 DAG size of output: 21 [2020-07-28 19:06:07,443 WARN L193 SmtUtils]: Spent 693.00 ms on a formula simplification. DAG size of input: 167 DAG size of output: 21 [2020-07-28 19:06:08,307 WARN L193 SmtUtils]: Spent 728.00 ms on a formula simplification. DAG size of input: 156 DAG size of output: 18 [2020-07-28 19:06:08,550 WARN L193 SmtUtils]: Spent 239.00 ms on a formula simplification. DAG size of input: 76 DAG size of output: 37 [2020-07-28 19:06:09,392 WARN L193 SmtUtils]: Spent 833.00 ms on a formula simplification. DAG size of input: 146 DAG size of output: 35 [2020-07-28 19:06:09,592 WARN L193 SmtUtils]: Spent 188.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 23 [2020-07-28 19:06:10,060 WARN L193 SmtUtils]: Spent 451.00 ms on a formula simplification. DAG size of input: 102 DAG size of output: 46 [2020-07-28 19:06:10,692 WARN L193 SmtUtils]: Spent 623.00 ms on a formula simplification. DAG size of input: 141 DAG size of output: 23 [2020-07-28 19:06:10,853 WARN L193 SmtUtils]: Spent 139.00 ms on a formula simplification. DAG size of input: 61 DAG size of output: 21 [2020-07-28 19:06:11,708 WARN L193 SmtUtils]: Spent 847.00 ms on a formula simplification. DAG size of input: 162 DAG size of output: 23 [2020-07-28 19:06:12,294 WARN L193 SmtUtils]: Spent 563.00 ms on a formula simplification. DAG size of input: 142 DAG size of output: 31 [2020-07-28 19:06:12,301 INFO L268 CegarLoopResult]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 299) no Hoare annotation was computed. [2020-07-28 19:06:12,301 INFO L268 CegarLoopResult]: For program point L498(lines 497 542) no Hoare annotation was computed. [2020-07-28 19:06:12,302 INFO L264 CegarLoopResult]: At program point L135(lines 126 139) the Hoare annotation is: false [2020-07-28 19:06:12,302 INFO L264 CegarLoopResult]: At program point L135-1(lines 126 139) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (= 0 ~pumpRunning~0)) (.cse2 (= 1 ~systemActive~0))) (or (and (= 1 |ULTIMATE.start_isHighWaterSensorDry_#res|) .cse0 .cse1 (<= ~waterLevel~0 1) .cse2) (and (<= 2 ~waterLevel~0) .cse0 (<= ~waterLevel~0 2) .cse1 .cse2))) [2020-07-28 19:06:12,302 INFO L264 CegarLoopResult]: At program point L135-2(lines 126 139) the Hoare annotation is: false [2020-07-28 19:06:12,302 INFO L264 CegarLoopResult]: At program point L135-3(lines 126 139) the Hoare annotation is: false [2020-07-28 19:06:12,303 INFO L264 CegarLoopResult]: At program point L135-4(lines 126 139) the Hoare annotation is: false [2020-07-28 19:06:12,303 INFO L264 CegarLoopResult]: At program point L135-5(lines 126 139) the Hoare annotation is: false [2020-07-28 19:06:12,303 INFO L268 CegarLoopResult]: For program point L499(lines 499 503) no Hoare annotation was computed. [2020-07-28 19:06:12,303 INFO L268 CegarLoopResult]: For program point L533(lines 533 537) no Hoare annotation was computed. [2020-07-28 19:06:12,303 INFO L268 CegarLoopResult]: For program point L533-2(lines 527 538) no Hoare annotation was computed. [2020-07-28 19:06:12,303 INFO L268 CegarLoopResult]: For program point L170(lines 170 187) no Hoare annotation was computed. [2020-07-28 19:06:12,303 INFO L264 CegarLoopResult]: At program point L170-1(lines 1 951) the Hoare annotation is: (let ((.cse1 (<= ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~0 1)) (.cse2 (<= ~waterLevel~0 1)) (.cse5 (<= |ULTIMATE.start_getWaterLevel_#res| 1)) (.cse6 (<= 2 ~waterLevel~0)) (.cse7 (<= |ULTIMATE.start_getWaterLevel_#res| 2)) (.cse8 (< 1 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~0)) (.cse9 (<= ~waterLevel~0 2)) (.cse11 (<= ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~0 2)) (.cse12 (<= 2 |ULTIMATE.start_getWaterLevel_#res|)) (.cse4 (= 1 ~pumpRunning~0)) (.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse10 (= 0 ~pumpRunning~0)) (.cse3 (= 1 ~systemActive~0))) (or (and .cse0 (= ~methaneLevelCritical~0 |ULTIMATE.start_isMethaneLevelCritical_#res|) (= 0 |ULTIMATE.start_isMethaneAlarm_#res|) .cse1 (= 1 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp___0~0) (= 1 |ULTIMATE.start_isPumpRunning_#res|) .cse2 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse3 (= ~methaneLevelCritical~0 ULTIMATE.start_processEnvironment_~tmp~3) .cse4 .cse5) (and .cse6 .cse7 .cse0 .cse8 .cse9 .cse10 .cse11 .cse12 .cse3) (and .cse0 .cse1 .cse10 .cse2 .cse3 .cse5) (and .cse6 .cse7 .cse0 .cse8 .cse9 .cse11 .cse12 .cse3 .cse4) (and .cse0 .cse10 (= 1 ~waterLevel~0) .cse3))) [2020-07-28 19:06:12,304 INFO L268 CegarLoopResult]: For program point L170-2(lines 170 187) no Hoare annotation was computed. [2020-07-28 19:06:12,304 INFO L264 CegarLoopResult]: At program point L170-3(lines 1 951) the Hoare annotation is: false [2020-07-28 19:06:12,304 INFO L268 CegarLoopResult]: For program point L170-4(lines 170 187) no Hoare annotation was computed. [2020-07-28 19:06:12,304 INFO L264 CegarLoopResult]: At program point L170-5(lines 1 951) the Hoare annotation is: false [2020-07-28 19:06:12,304 INFO L264 CegarLoopResult]: At program point L204-2(lines 204 218) the Hoare annotation is: false [2020-07-28 19:06:12,304 INFO L268 CegarLoopResult]: For program point L205(line 205) no Hoare annotation was computed. [2020-07-28 19:06:12,304 INFO L268 CegarLoopResult]: For program point L174(lines 174 184) no Hoare annotation was computed. [2020-07-28 19:06:12,304 INFO L268 CegarLoopResult]: For program point L174-2(lines 174 184) no Hoare annotation was computed. [2020-07-28 19:06:12,304 INFO L268 CegarLoopResult]: For program point L174-4(lines 174 184) no Hoare annotation was computed. [2020-07-28 19:06:12,305 INFO L268 CegarLoopResult]: For program point ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION(line 299) no Hoare annotation was computed. [2020-07-28 19:06:12,305 INFO L268 CegarLoopResult]: For program point L208(lines 208 212) no Hoare annotation was computed. [2020-07-28 19:06:12,305 INFO L268 CegarLoopResult]: For program point L175(lines 175 181) no Hoare annotation was computed. [2020-07-28 19:06:12,306 INFO L268 CegarLoopResult]: For program point L208-1(lines 208 212) no Hoare annotation was computed. [2020-07-28 19:06:12,306 INFO L268 CegarLoopResult]: For program point L175-2(lines 175 181) no Hoare annotation was computed. [2020-07-28 19:06:12,306 INFO L268 CegarLoopResult]: For program point L175-4(lines 175 181) no Hoare annotation was computed. [2020-07-28 19:06:12,306 INFO L268 CegarLoopResult]: For program point L374(lines 374 391) no Hoare annotation was computed. [2020-07-28 19:06:12,307 INFO L268 CegarLoopResult]: For program point L374-1(lines 374 391) no Hoare annotation was computed. [2020-07-28 19:06:12,307 INFO L268 CegarLoopResult]: For program point L374-2(lines 374 391) no Hoare annotation was computed. [2020-07-28 19:06:12,307 INFO L268 CegarLoopResult]: For program point L77(lines 77 81) no Hoare annotation was computed. [2020-07-28 19:06:12,308 INFO L268 CegarLoopResult]: For program point L507(lines 507 513) no Hoare annotation was computed. [2020-07-28 19:06:12,309 INFO L264 CegarLoopResult]: At program point L507-1(lines 507 513) the Hoare annotation is: (let ((.cse3 (= 1 ~pumpRunning~0)) (.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (<= ~waterLevel~0 2)) (.cse2 (= 1 ~systemActive~0))) (or (and (= 0 ~methaneLevelCritical~0) .cse0 .cse1 .cse2 .cse3) (and (<= |ULTIMATE.start_getWaterLevel_#res| 2) (<= 2 ~waterLevel~0) .cse0 (< 1 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~0) .cse1 (<= ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~0 2) (<= 2 |ULTIMATE.start_getWaterLevel_#res|) .cse2 .cse3) (and .cse0 .cse1 (= 0 ~pumpRunning~0) .cse2))) [2020-07-28 19:06:12,310 INFO L264 CegarLoopResult]: At program point L574(lines 1 951) the Hoare annotation is: (and (= 0 ~methaneLevelCritical~0) (= 0 ~pumpRunning~0) (= 1 ~waterLevel~0) (= 1 ~systemActive~0)) [2020-07-28 19:06:12,310 INFO L268 CegarLoopResult]: For program point L476(lines 476 480) no Hoare annotation was computed. [2020-07-28 19:06:12,310 INFO L268 CegarLoopResult]: For program point L476-2(lines 476 480) no Hoare annotation was computed. [2020-07-28 19:06:12,310 INFO L268 CegarLoopResult]: For program point L476-3(lines 476 480) no Hoare annotation was computed. [2020-07-28 19:06:12,310 INFO L268 CegarLoopResult]: For program point L476-5(lines 476 480) no Hoare annotation was computed. [2020-07-28 19:06:12,311 INFO L268 CegarLoopResult]: For program point L476-6(lines 476 480) no Hoare annotation was computed. [2020-07-28 19:06:12,311 INFO L268 CegarLoopResult]: For program point L476-8(lines 476 480) no Hoare annotation was computed. [2020-07-28 19:06:12,311 INFO L268 CegarLoopResult]: For program point L476-9(lines 476 480) no Hoare annotation was computed. [2020-07-28 19:06:12,311 INFO L268 CegarLoopResult]: For program point L476-11(lines 476 480) no Hoare annotation was computed. [2020-07-28 19:06:12,311 INFO L268 CegarLoopResult]: For program point L476-12(lines 476 480) no Hoare annotation was computed. [2020-07-28 19:06:12,311 INFO L268 CegarLoopResult]: For program point L476-14(lines 476 480) no Hoare annotation was computed. [2020-07-28 19:06:12,312 INFO L268 CegarLoopResult]: For program point L476-15(lines 476 480) no Hoare annotation was computed. [2020-07-28 19:06:12,312 INFO L268 CegarLoopResult]: For program point L476-17(lines 476 480) no Hoare annotation was computed. [2020-07-28 19:06:12,312 INFO L264 CegarLoopResult]: At program point L543(lines 496 544) the Hoare annotation is: false [2020-07-28 19:06:12,312 INFO L268 CegarLoopResult]: For program point L378(lines 378 386) no Hoare annotation was computed. [2020-07-28 19:06:12,312 INFO L268 CegarLoopResult]: For program point L378-1(lines 378 386) no Hoare annotation was computed. [2020-07-28 19:06:12,312 INFO L268 CegarLoopResult]: For program point L378-2(lines 378 386) no Hoare annotation was computed. [2020-07-28 19:06:12,313 INFO L268 CegarLoopResult]: For program point L281(lines 281 288) no Hoare annotation was computed. [2020-07-28 19:06:12,313 INFO L271 CegarLoopResult]: At program point L281-1(lines 281 288) the Hoare annotation is: true [2020-07-28 19:06:12,313 INFO L264 CegarLoopResult]: At program point L149(lines 144 151) the Hoare annotation is: (and (= 0 ~methaneLevelCritical~0) (= 0 ~pumpRunning~0) (= 1 ~waterLevel~0) (= 1 ~systemActive~0)) [2020-07-28 19:06:12,313 INFO L268 CegarLoopResult]: For program point L348(lines 348 365) no Hoare annotation was computed. [2020-07-28 19:06:12,313 INFO L268 CegarLoopResult]: For program point L348-1(lines 348 365) no Hoare annotation was computed. [2020-07-28 19:06:12,314 INFO L268 CegarLoopResult]: For program point L348-2(lines 348 365) no Hoare annotation was computed. [2020-07-28 19:06:12,314 INFO L268 CegarLoopResult]: For program point L348-3(lines 348 365) no Hoare annotation was computed. [2020-07-28 19:06:12,314 INFO L268 CegarLoopResult]: For program point L348-4(lines 348 365) no Hoare annotation was computed. [2020-07-28 19:06:12,314 INFO L268 CegarLoopResult]: For program point L348-5(lines 348 365) no Hoare annotation was computed. [2020-07-28 19:06:12,315 INFO L264 CegarLoopResult]: At program point L316(lines 312 334) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (= 1 ~systemActive~0))) (or (and .cse0 (= 1 |ULTIMATE.start_isPumpRunning_#res|) (<= ~waterLevel~0 1) (= 1 ~switchedOnBeforeTS~0) .cse1 (= 1 ~pumpRunning~0)) (and .cse0 (<= ~waterLevel~0 2) (= 0 ~pumpRunning~0) .cse1))) [2020-07-28 19:06:12,315 INFO L264 CegarLoopResult]: At program point L316-1(lines 312 334) the Hoare annotation is: false [2020-07-28 19:06:12,315 INFO L264 CegarLoopResult]: At program point L316-2(lines 312 334) the Hoare annotation is: false [2020-07-28 19:06:12,315 INFO L264 CegarLoopResult]: At program point L482(lines 467 485) the Hoare annotation is: false [2020-07-28 19:06:12,315 INFO L264 CegarLoopResult]: At program point L482-1(lines 467 485) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (= 0 ~pumpRunning~0)) (.cse2 (= 1 ~systemActive~0))) (or (and (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1) .cse0 .cse1 (= 0 |ULTIMATE.start_isHighWaterLevel_#res|) (<= ~waterLevel~0 1) .cse2) (and (<= 2 ~waterLevel~0) .cse0 (<= ~waterLevel~0 2) .cse1 .cse2))) [2020-07-28 19:06:12,315 INFO L264 CegarLoopResult]: At program point L482-2(lines 467 485) the Hoare annotation is: false [2020-07-28 19:06:12,315 INFO L264 CegarLoopResult]: At program point L482-3(lines 467 485) the Hoare annotation is: false [2020-07-28 19:06:12,315 INFO L264 CegarLoopResult]: At program point L482-4(lines 467 485) the Hoare annotation is: false [2020-07-28 19:06:12,315 INFO L268 CegarLoopResult]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2020-07-28 19:06:12,315 INFO L264 CegarLoopResult]: At program point L482-5(lines 467 485) the Hoare annotation is: false [2020-07-28 19:06:12,315 INFO L268 CegarLoopResult]: For program point L53(lines 53 57) no Hoare annotation was computed. [2020-07-28 19:06:12,316 INFO L268 CegarLoopResult]: For program point L53-3(lines 53 57) no Hoare annotation was computed. [2020-07-28 19:06:12,316 INFO L268 CegarLoopResult]: For program point L53-6(lines 53 57) no Hoare annotation was computed. [2020-07-28 19:06:12,316 INFO L264 CegarLoopResult]: At program point L582(lines 577 585) the Hoare annotation is: (and (= 0 ~methaneLevelCritical~0) (= 0 ~pumpRunning~0) (= 1 ~waterLevel~0) (= 1 ~systemActive~0)) [2020-07-28 19:06:12,316 INFO L268 CegarLoopResult]: For program point L517(lines 517 523) no Hoare annotation was computed. [2020-07-28 19:06:12,316 INFO L264 CegarLoopResult]: At program point L517-1(lines 517 523) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (<= ~waterLevel~0 2)) (.cse2 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 (= 1 ~pumpRunning~0)) (and .cse0 .cse1 (= 0 ~pumpRunning~0) .cse2))) [2020-07-28 19:06:12,316 INFO L264 CegarLoopResult]: At program point L418(lines 411 421) the Hoare annotation is: (and (= |ULTIMATE.start_isMethaneAlarm_#res| ~methaneLevelCritical~0) (= 0 ULTIMATE.start_test_~splverifierCounter~0) (= ~methaneLevelCritical~0 |ULTIMATE.start_isMethaneLevelCritical_#res|) (= 1 |ULTIMATE.start_isPumpRunning_#res|) (<= ~waterLevel~0 1) (= 1 ~switchedOnBeforeTS~0) (= 1 ~systemActive~0) (= 1 ~pumpRunning~0)) [2020-07-28 19:06:12,316 INFO L264 CegarLoopResult]: At program point L418-1(lines 411 421) the Hoare annotation is: false [2020-07-28 19:06:12,316 INFO L268 CegarLoopResult]: For program point L352(lines 352 360) no Hoare annotation was computed. [2020-07-28 19:06:12,316 INFO L264 CegarLoopResult]: At program point L418-2(lines 411 421) the Hoare annotation is: false [2020-07-28 19:06:12,316 INFO L268 CegarLoopResult]: For program point L352-1(lines 352 360) no Hoare annotation was computed. [2020-07-28 19:06:12,317 INFO L268 CegarLoopResult]: For program point L352-2(lines 352 360) no Hoare annotation was computed. [2020-07-28 19:06:12,317 INFO L264 CegarLoopResult]: At program point L253(lines 249 255) the Hoare annotation is: (and (= 0 ~methaneLevelCritical~0) (= 0 ~pumpRunning~0) (= 1 ~waterLevel~0) (= 1 ~systemActive~0)) [2020-07-28 19:06:12,317 INFO L268 CegarLoopResult]: For program point L352-3(lines 352 360) no Hoare annotation was computed. [2020-07-28 19:06:12,317 INFO L268 CegarLoopResult]: For program point L352-4(lines 352 360) no Hoare annotation was computed. [2020-07-28 19:06:12,317 INFO L268 CegarLoopResult]: For program point L352-5(lines 352 360) no Hoare annotation was computed. [2020-07-28 19:06:12,317 INFO L264 CegarLoopResult]: At program point L122(lines 117 125) the Hoare annotation is: (let ((.cse2 (<= ~waterLevel~0 1)) (.cse9 (= 1 ~pumpRunning~0)) (.cse4 (<= |ULTIMATE.start_getWaterLevel_#res| 1)) (.cse5 (<= 2 ~waterLevel~0)) (.cse6 (<= |ULTIMATE.start_getWaterLevel_#res| 2)) (.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse7 (<= ~waterLevel~0 2)) (.cse1 (= 0 ~pumpRunning~0)) (.cse8 (<= 2 |ULTIMATE.start_getWaterLevel_#res|)) (.cse3 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse6 .cse0 .cse7 .cse8 .cse3 .cse9) (and .cse0 (= ~methaneLevelCritical~0 |ULTIMATE.start_isMethaneLevelCritical_#res|) (= 0 |ULTIMATE.start_isMethaneAlarm_#res|) (= 1 |ULTIMATE.start_isPumpRunning_#res|) .cse2 (= 1 ~switchedOnBeforeTS~0) (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse3 (= ~methaneLevelCritical~0 ULTIMATE.start_processEnvironment_~tmp~3) .cse9 .cse4) (and .cse5 .cse6 .cse0 .cse7 .cse1 .cse8 .cse3))) [2020-07-28 19:06:12,317 INFO L264 CegarLoopResult]: At program point L122-1(lines 117 125) the Hoare annotation is: false [2020-07-28 19:06:12,317 INFO L264 CegarLoopResult]: At program point L122-2(lines 117 125) the Hoare annotation is: false [2020-07-28 19:06:12,318 INFO L264 CegarLoopResult]: At program point L90(lines 85 93) the Hoare annotation is: (and (= 0 ULTIMATE.start_test_~splverifierCounter~0) (= ~methaneLevelCritical~0 |ULTIMATE.start_isMethaneLevelCritical_#res|) (= 1 |ULTIMATE.start_isPumpRunning_#res|) (<= ~waterLevel~0 1) (= 1 ~switchedOnBeforeTS~0) (= 1 ~systemActive~0) (= 1 ~pumpRunning~0)) [2020-07-28 19:06:12,318 INFO L264 CegarLoopResult]: At program point L90-1(lines 85 93) the Hoare annotation is: false [2020-07-28 19:06:12,318 INFO L264 CegarLoopResult]: At program point L90-2(lines 85 93) the Hoare annotation is: false [2020-07-28 19:06:12,318 INFO L268 CegarLoopResult]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2020-07-28 19:06:12,318 INFO L264 CegarLoopResult]: At program point L323(lines 323 329) the Hoare annotation is: (let ((.cse2 (= 1 ~pumpRunning~0)) (.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse3 (<= ~waterLevel~0 2)) (.cse1 (= 1 ~systemActive~0))) (or (and .cse0 (= ~methaneLevelCritical~0 |ULTIMATE.start_isMethaneLevelCritical_#res|) (= 0 |ULTIMATE.start_isMethaneAlarm_#res|) (= 1 |ULTIMATE.start_isPumpRunning_#res|) (<= ~waterLevel~0 1) (= 1 ~switchedOnBeforeTS~0) (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse1 .cse2 (= ~methaneLevelCritical~0 ULTIMATE.start_processEnvironment_~tmp~3)) (and (<= 2 ~waterLevel~0) .cse0 .cse3 .cse1 .cse2) (and .cse0 .cse3 (= 0 ~pumpRunning~0) .cse1))) [2020-07-28 19:06:12,318 INFO L264 CegarLoopResult]: At program point L323-1(lines 323 329) the Hoare annotation is: false [2020-07-28 19:06:12,318 INFO L271 CegarLoopResult]: At program point L290(lines 271 293) the Hoare annotation is: true [2020-07-28 19:06:12,318 INFO L264 CegarLoopResult]: At program point L323-2(lines 323 329) the Hoare annotation is: false [2020-07-28 19:06:12,318 INFO L264 CegarLoopResult]: At program point L159(lines 316 322) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (<= ~waterLevel~0 2)) (.cse2 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 (= 1 |ULTIMATE.start_isPumpRunning_#res|) (= 1 ~switchedOnBeforeTS~0) .cse2 (= 1 ~pumpRunning~0)) (and .cse0 .cse1 (= 0 |ULTIMATE.start_isPumpRunning_#res|) (= 0 ~pumpRunning~0) .cse2))) [2020-07-28 19:06:12,318 INFO L264 CegarLoopResult]: At program point L159-1(lines 316 322) the Hoare annotation is: false [2020-07-28 19:06:12,319 INFO L264 CegarLoopResult]: At program point L159-2(lines 316 322) the Hoare annotation is: false [2020-07-28 19:06:12,319 INFO L268 CegarLoopResult]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2020-07-28 19:06:12,319 INFO L264 CegarLoopResult]: At program point L427(lines 422 430) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (<= ~waterLevel~0 2)) (.cse2 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 (= 1 |ULTIMATE.start_isPumpRunning_#res|) .cse2 (= 1 ~pumpRunning~0)) (and .cse0 .cse1 (= 0 |ULTIMATE.start_isPumpRunning_#res|) (= 0 ~pumpRunning~0) .cse2))) [2020-07-28 19:06:12,319 INFO L264 CegarLoopResult]: At program point L427-1(lines 422 430) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (<= ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~0 1)) (.cse2 (<= ~waterLevel~0 1)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (<= |ULTIMATE.start_getWaterLevel_#res| 1))) (or (and .cse0 (= ~methaneLevelCritical~0 |ULTIMATE.start_isMethaneLevelCritical_#res|) (= 0 |ULTIMATE.start_isMethaneAlarm_#res|) .cse1 (= 1 |ULTIMATE.start_isPumpRunning_#res|) .cse2 (= 1 ~switchedOnBeforeTS~0) (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse3 (= ~methaneLevelCritical~0 ULTIMATE.start_processEnvironment_~tmp~3) (= 1 ~pumpRunning~0) .cse4) (and .cse0 .cse1 (= 0 |ULTIMATE.start_isPumpRunning_#res|) (= 0 ~pumpRunning~0) .cse2 .cse3 .cse4))) [2020-07-28 19:06:12,319 INFO L264 CegarLoopResult]: At program point L427-2(lines 422 430) the Hoare annotation is: false [2020-07-28 19:06:12,319 INFO L264 CegarLoopResult]: At program point L427-3(lines 422 430) the Hoare annotation is: false [2020-07-28 19:06:12,319 INFO L264 CegarLoopResult]: At program point L427-4(lines 422 430) the Hoare annotation is: false [2020-07-28 19:06:12,319 INFO L264 CegarLoopResult]: At program point L427-5(lines 422 430) the Hoare annotation is: false [2020-07-28 19:06:12,320 INFO L268 CegarLoopResult]: For program point L130(lines 130 136) no Hoare annotation was computed. [2020-07-28 19:06:12,320 INFO L268 CegarLoopResult]: For program point L130-1(lines 130 136) no Hoare annotation was computed. [2020-07-28 19:06:12,320 INFO L268 CegarLoopResult]: For program point L130-2(lines 130 136) no Hoare annotation was computed. [2020-07-28 19:06:12,320 INFO L268 CegarLoopResult]: For program point L130-3(lines 130 136) no Hoare annotation was computed. [2020-07-28 19:06:12,320 INFO L268 CegarLoopResult]: For program point L130-4(lines 130 136) no Hoare annotation was computed. [2020-07-28 19:06:12,320 INFO L268 CegarLoopResult]: For program point L130-5(lines 130 136) no Hoare annotation was computed. [2020-07-28 19:06:12,320 INFO L268 CegarLoopResult]: For program point L527(lines 527 538) no Hoare annotation was computed. [2020-07-28 19:06:12,320 INFO L268 CegarLoopResult]: For program point L65(lines 65 69) no Hoare annotation was computed. [2020-07-28 19:06:12,320 INFO L268 CegarLoopResult]: For program point L-1(line -1) no Hoare annotation was computed. [2020-07-28 19:06:12,320 INFO L268 CegarLoopResult]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 299) no Hoare annotation was computed. [2020-07-28 19:06:12,320 INFO L268 CegarLoopResult]: For program point L299(line 299) no Hoare annotation was computed. [2020-07-28 19:06:12,321 INFO L268 CegarLoopResult]: For program point L299-1(line 299) no Hoare annotation was computed. [2020-07-28 19:06:12,321 INFO L268 CegarLoopResult]: For program point L299-2(line 299) no Hoare annotation was computed. [2020-07-28 19:06:12,325 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2020-07-28 19:06:12,325 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2020-07-28 19:06:12,329 WARN L170 areAnnotationChecker]: L281 has no Hoare annotation [2020-07-28 19:06:12,329 WARN L170 areAnnotationChecker]: L281 has no Hoare annotation [2020-07-28 19:06:12,329 WARN L170 areAnnotationChecker]: L281 has no Hoare annotation [2020-07-28 19:06:12,331 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2020-07-28 19:06:12,331 WARN L170 areAnnotationChecker]: L498 has no Hoare annotation [2020-07-28 19:06:12,331 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2020-07-28 19:06:12,332 WARN L170 areAnnotationChecker]: L498 has no Hoare annotation [2020-07-28 19:06:12,332 WARN L170 areAnnotationChecker]: L498 has no Hoare annotation [2020-07-28 19:06:12,332 WARN L170 areAnnotationChecker]: L499 has no Hoare annotation [2020-07-28 19:06:12,332 WARN L170 areAnnotationChecker]: L53-3 has no Hoare annotation [2020-07-28 19:06:12,332 WARN L170 areAnnotationChecker]: L507 has no Hoare annotation [2020-07-28 19:06:12,332 WARN L170 areAnnotationChecker]: L507 has no Hoare annotation [2020-07-28 19:06:12,332 WARN L170 areAnnotationChecker]: L53-3 has no Hoare annotation [2020-07-28 19:06:12,332 WARN L170 areAnnotationChecker]: L53-3 has no Hoare annotation [2020-07-28 19:06:12,332 WARN L170 areAnnotationChecker]: L374-1 has no Hoare annotation [2020-07-28 19:06:12,332 WARN L170 areAnnotationChecker]: L65 has no Hoare annotation [2020-07-28 19:06:12,332 WARN L170 areAnnotationChecker]: L65 has no Hoare annotation [2020-07-28 19:06:12,332 WARN L170 areAnnotationChecker]: L517 has no Hoare annotation [2020-07-28 19:06:12,333 WARN L170 areAnnotationChecker]: L374-1 has no Hoare annotation [2020-07-28 19:06:12,333 WARN L170 areAnnotationChecker]: L374-1 has no Hoare annotation [2020-07-28 19:06:12,333 WARN L170 areAnnotationChecker]: L517 has no Hoare annotation [2020-07-28 19:06:12,333 WARN L170 areAnnotationChecker]: L517 has no Hoare annotation [2020-07-28 19:06:12,333 WARN L170 areAnnotationChecker]: L348-3 has no Hoare annotation [2020-07-28 19:06:12,333 WARN L170 areAnnotationChecker]: L348-3 has no Hoare annotation [2020-07-28 19:06:12,333 WARN L170 areAnnotationChecker]: L170-2 has no Hoare annotation [2020-07-28 19:06:12,333 WARN L170 areAnnotationChecker]: L77 has no Hoare annotation [2020-07-28 19:06:12,333 WARN L170 areAnnotationChecker]: L77 has no Hoare annotation [2020-07-28 19:06:12,333 WARN L170 areAnnotationChecker]: L527 has no Hoare annotation [2020-07-28 19:06:12,333 WARN L170 areAnnotationChecker]: L378-1 has no Hoare annotation [2020-07-28 19:06:12,333 WARN L170 areAnnotationChecker]: L130-3 has no Hoare annotation [2020-07-28 19:06:12,334 WARN L170 areAnnotationChecker]: L130-3 has no Hoare annotation [2020-07-28 19:06:12,334 WARN L170 areAnnotationChecker]: L170-2 has no Hoare annotation [2020-07-28 19:06:12,334 WARN L170 areAnnotationChecker]: L170-2 has no Hoare annotation [2020-07-28 19:06:12,334 WARN L170 areAnnotationChecker]: L527 has no Hoare annotation [2020-07-28 19:06:12,334 WARN L170 areAnnotationChecker]: L527 has no Hoare annotation [2020-07-28 19:06:12,334 WARN L170 areAnnotationChecker]: L378-1 has no Hoare annotation [2020-07-28 19:06:12,334 WARN L170 areAnnotationChecker]: L378-1 has no Hoare annotation [2020-07-28 19:06:12,334 WARN L170 areAnnotationChecker]: L476-9 has no Hoare annotation [2020-07-28 19:06:12,334 WARN L170 areAnnotationChecker]: L174-2 has no Hoare annotation [2020-07-28 19:06:12,334 WARN L170 areAnnotationChecker]: L533-2 has no Hoare annotation [2020-07-28 19:06:12,334 WARN L170 areAnnotationChecker]: L533 has no Hoare annotation [2020-07-28 19:06:12,334 WARN L170 areAnnotationChecker]: L533 has no Hoare annotation [2020-07-28 19:06:12,335 WARN L170 areAnnotationChecker]: L348-2 has no Hoare annotation [2020-07-28 19:06:12,335 WARN L170 areAnnotationChecker]: L348-2 has no Hoare annotation [2020-07-28 19:06:12,335 WARN L170 areAnnotationChecker]: L476-9 has no Hoare annotation [2020-07-28 19:06:12,335 WARN L170 areAnnotationChecker]: L476-9 has no Hoare annotation [2020-07-28 19:06:12,335 WARN L170 areAnnotationChecker]: L174-2 has no Hoare annotation [2020-07-28 19:06:12,335 WARN L170 areAnnotationChecker]: L174-2 has no Hoare annotation [2020-07-28 19:06:12,335 WARN L170 areAnnotationChecker]: L205 has no Hoare annotation [2020-07-28 19:06:12,336 WARN L170 areAnnotationChecker]: L130-2 has no Hoare annotation [2020-07-28 19:06:12,336 WARN L170 areAnnotationChecker]: L130-2 has no Hoare annotation [2020-07-28 19:06:12,337 WARN L170 areAnnotationChecker]: L476-11 has no Hoare annotation [2020-07-28 19:06:12,337 WARN L170 areAnnotationChecker]: L175-2 has no Hoare annotation [2020-07-28 19:06:12,337 WARN L170 areAnnotationChecker]: L175-2 has no Hoare annotation [2020-07-28 19:06:12,337 WARN L170 areAnnotationChecker]: L205 has no Hoare annotation [2020-07-28 19:06:12,337 WARN L170 areAnnotationChecker]: L53 has no Hoare annotation [2020-07-28 19:06:12,338 WARN L170 areAnnotationChecker]: L476-6 has no Hoare annotation [2020-07-28 19:06:12,338 WARN L170 areAnnotationChecker]: L352-3 has no Hoare annotation [2020-07-28 19:06:12,338 WARN L170 areAnnotationChecker]: L299-1 has no Hoare annotation [2020-07-28 19:06:12,338 WARN L170 areAnnotationChecker]: L299-1 has no Hoare annotation [2020-07-28 19:06:12,338 WARN L170 areAnnotationChecker]: L208 has no Hoare annotation [2020-07-28 19:06:12,338 WARN L170 areAnnotationChecker]: L208 has no Hoare annotation [2020-07-28 19:06:12,338 WARN L170 areAnnotationChecker]: L53 has no Hoare annotation [2020-07-28 19:06:12,338 WARN L170 areAnnotationChecker]: L53 has no Hoare annotation [2020-07-28 19:06:12,338 WARN L170 areAnnotationChecker]: L374 has no Hoare annotation [2020-07-28 19:06:12,339 WARN L170 areAnnotationChecker]: L476-6 has no Hoare annotation [2020-07-28 19:06:12,339 WARN L170 areAnnotationChecker]: L476-6 has no Hoare annotation [2020-07-28 19:06:12,339 WARN L170 areAnnotationChecker]: L352-3 has no Hoare annotation [2020-07-28 19:06:12,339 WARN L170 areAnnotationChecker]: L352-3 has no Hoare annotation [2020-07-28 19:06:12,340 WARN L170 areAnnotationChecker]: L208-1 has no Hoare annotation [2020-07-28 19:06:12,340 WARN L170 areAnnotationChecker]: L374 has no Hoare annotation [2020-07-28 19:06:12,340 WARN L170 areAnnotationChecker]: L374 has no Hoare annotation [2020-07-28 19:06:12,341 WARN L170 areAnnotationChecker]: L476-8 has no Hoare annotation [2020-07-28 19:06:12,341 WARN L170 areAnnotationChecker]: L348-1 has no Hoare annotation [2020-07-28 19:06:12,342 WARN L170 areAnnotationChecker]: L348-1 has no Hoare annotation [2020-07-28 19:06:12,342 WARN L170 areAnnotationChecker]: L170 has no Hoare annotation [2020-07-28 19:06:12,342 WARN L170 areAnnotationChecker]: L352-2 has no Hoare annotation [2020-07-28 19:06:12,342 WARN L170 areAnnotationChecker]: L53-6 has no Hoare annotation [2020-07-28 19:06:12,342 WARN L170 areAnnotationChecker]: L378 has no Hoare annotation [2020-07-28 19:06:12,342 WARN L170 areAnnotationChecker]: L130-1 has no Hoare annotation [2020-07-28 19:06:12,342 WARN L170 areAnnotationChecker]: L130-1 has no Hoare annotation [2020-07-28 19:06:12,342 WARN L170 areAnnotationChecker]: L170 has no Hoare annotation [2020-07-28 19:06:12,342 WARN L170 areAnnotationChecker]: L170 has no Hoare annotation [2020-07-28 19:06:12,342 WARN L170 areAnnotationChecker]: L352-2 has no Hoare annotation [2020-07-28 19:06:12,342 WARN L170 areAnnotationChecker]: L352-2 has no Hoare annotation [2020-07-28 19:06:12,342 WARN L170 areAnnotationChecker]: L53-6 has no Hoare annotation [2020-07-28 19:06:12,343 WARN L170 areAnnotationChecker]: L53-6 has no Hoare annotation [2020-07-28 19:06:12,343 WARN L170 areAnnotationChecker]: L374-2 has no Hoare annotation [2020-07-28 19:06:12,343 WARN L170 areAnnotationChecker]: L378 has no Hoare annotation [2020-07-28 19:06:12,343 WARN L170 areAnnotationChecker]: L378 has no Hoare annotation [2020-07-28 19:06:12,343 WARN L170 areAnnotationChecker]: L476-3 has no Hoare annotation [2020-07-28 19:06:12,343 WARN L170 areAnnotationChecker]: L174 has no Hoare annotation [2020-07-28 19:06:12,343 WARN L170 areAnnotationChecker]: L374-2 has no Hoare annotation [2020-07-28 19:06:12,343 WARN L170 areAnnotationChecker]: L374-2 has no Hoare annotation [2020-07-28 19:06:12,343 WARN L170 areAnnotationChecker]: L348 has no Hoare annotation [2020-07-28 19:06:12,343 WARN L170 areAnnotationChecker]: L348 has no Hoare annotation [2020-07-28 19:06:12,343 WARN L170 areAnnotationChecker]: L476-3 has no Hoare annotation [2020-07-28 19:06:12,343 WARN L170 areAnnotationChecker]: L476-3 has no Hoare annotation [2020-07-28 19:06:12,344 WARN L170 areAnnotationChecker]: L174 has no Hoare annotation [2020-07-28 19:06:12,344 WARN L170 areAnnotationChecker]: L174 has no Hoare annotation [2020-07-28 19:06:12,344 WARN L170 areAnnotationChecker]: L348-5 has no Hoare annotation [2020-07-28 19:06:12,344 WARN L170 areAnnotationChecker]: L348-5 has no Hoare annotation [2020-07-28 19:06:12,344 WARN L170 areAnnotationChecker]: L170-4 has no Hoare annotation [2020-07-28 19:06:12,344 WARN L170 areAnnotationChecker]: L130 has no Hoare annotation [2020-07-28 19:06:12,344 WARN L170 areAnnotationChecker]: L130 has no Hoare annotation [2020-07-28 19:06:12,344 WARN L170 areAnnotationChecker]: L476-5 has no Hoare annotation [2020-07-28 19:06:12,344 WARN L170 areAnnotationChecker]: L175 has no Hoare annotation [2020-07-28 19:06:12,344 WARN L170 areAnnotationChecker]: L175 has no Hoare annotation [2020-07-28 19:06:12,344 WARN L170 areAnnotationChecker]: L378-2 has no Hoare annotation [2020-07-28 19:06:12,344 WARN L170 areAnnotationChecker]: L130-5 has no Hoare annotation [2020-07-28 19:06:12,345 WARN L170 areAnnotationChecker]: L130-5 has no Hoare annotation [2020-07-28 19:06:12,345 WARN L170 areAnnotationChecker]: L170-4 has no Hoare annotation [2020-07-28 19:06:12,345 WARN L170 areAnnotationChecker]: L170-4 has no Hoare annotation [2020-07-28 19:06:12,345 WARN L170 areAnnotationChecker]: L476 has no Hoare annotation [2020-07-28 19:06:12,345 WARN L170 areAnnotationChecker]: L352-1 has no Hoare annotation [2020-07-28 19:06:12,345 WARN L170 areAnnotationChecker]: L299 has no Hoare annotation [2020-07-28 19:06:12,345 WARN L170 areAnnotationChecker]: L299 has no Hoare annotation [2020-07-28 19:06:12,345 WARN L170 areAnnotationChecker]: L378-2 has no Hoare annotation [2020-07-28 19:06:12,345 WARN L170 areAnnotationChecker]: L378-2 has no Hoare annotation [2020-07-28 19:06:12,345 WARN L170 areAnnotationChecker]: L476-15 has no Hoare annotation [2020-07-28 19:06:12,345 WARN L170 areAnnotationChecker]: L174-4 has no Hoare annotation [2020-07-28 19:06:12,345 WARN L170 areAnnotationChecker]: L476 has no Hoare annotation [2020-07-28 19:06:12,346 WARN L170 areAnnotationChecker]: L476 has no Hoare annotation [2020-07-28 19:06:12,346 WARN L170 areAnnotationChecker]: L352-1 has no Hoare annotation [2020-07-28 19:06:12,346 WARN L170 areAnnotationChecker]: L352-1 has no Hoare annotation [2020-07-28 19:06:12,346 WARN L170 areAnnotationChecker]: L348-4 has no Hoare annotation [2020-07-28 19:06:12,346 WARN L170 areAnnotationChecker]: L348-4 has no Hoare annotation [2020-07-28 19:06:12,346 WARN L170 areAnnotationChecker]: L476-15 has no Hoare annotation [2020-07-28 19:06:12,346 WARN L170 areAnnotationChecker]: L476-15 has no Hoare annotation [2020-07-28 19:06:12,346 WARN L170 areAnnotationChecker]: L174-4 has no Hoare annotation [2020-07-28 19:06:12,346 WARN L170 areAnnotationChecker]: L174-4 has no Hoare annotation [2020-07-28 19:06:12,346 WARN L170 areAnnotationChecker]: L476-2 has no Hoare annotation [2020-07-28 19:06:12,346 WARN L170 areAnnotationChecker]: L130-4 has no Hoare annotation [2020-07-28 19:06:12,346 WARN L170 areAnnotationChecker]: L130-4 has no Hoare annotation [2020-07-28 19:06:12,346 WARN L170 areAnnotationChecker]: L476-17 has no Hoare annotation [2020-07-28 19:06:12,347 WARN L170 areAnnotationChecker]: L175-4 has no Hoare annotation [2020-07-28 19:06:12,347 WARN L170 areAnnotationChecker]: L175-4 has no Hoare annotation [2020-07-28 19:06:12,347 WARN L170 areAnnotationChecker]: L352 has no Hoare annotation [2020-07-28 19:06:12,347 WARN L170 areAnnotationChecker]: L476-12 has no Hoare annotation [2020-07-28 19:06:12,347 WARN L170 areAnnotationChecker]: L352-5 has no Hoare annotation [2020-07-28 19:06:12,347 WARN L170 areAnnotationChecker]: L299-2 has no Hoare annotation [2020-07-28 19:06:12,347 WARN L170 areAnnotationChecker]: L299-2 has no Hoare annotation [2020-07-28 19:06:12,347 WARN L170 areAnnotationChecker]: L352 has no Hoare annotation [2020-07-28 19:06:12,347 WARN L170 areAnnotationChecker]: L352 has no Hoare annotation [2020-07-28 19:06:12,347 WARN L170 areAnnotationChecker]: L476-12 has no Hoare annotation [2020-07-28 19:06:12,347 WARN L170 areAnnotationChecker]: L476-12 has no Hoare annotation [2020-07-28 19:06:12,347 WARN L170 areAnnotationChecker]: L352-5 has no Hoare annotation [2020-07-28 19:06:12,348 WARN L170 areAnnotationChecker]: L352-5 has no Hoare annotation [2020-07-28 19:06:12,348 WARN L170 areAnnotationChecker]: L476-14 has no Hoare annotation [2020-07-28 19:06:12,348 WARN L170 areAnnotationChecker]: L352-4 has no Hoare annotation [2020-07-28 19:06:12,348 WARN L170 areAnnotationChecker]: L352-4 has no Hoare annotation [2020-07-28 19:06:12,348 WARN L170 areAnnotationChecker]: L352-4 has no Hoare annotation [2020-07-28 19:06:12,348 INFO L163 areAnnotationChecker]: CFG has 26 edges. 26 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. 0 times interpolants missing. [2020-07-28 19:06:12,379 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 28.07 07:06:12 BoogieIcfgContainer [2020-07-28 19:06:12,379 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2020-07-28 19:06:12,380 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2020-07-28 19:06:12,380 INFO L271 PluginConnector]: Initializing Witness Printer... [2020-07-28 19:06:12,380 INFO L275 PluginConnector]: Witness Printer initialized [2020-07-28 19:06:12,381 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.07 07:05:29" (3/4) ... [2020-07-28 19:06:12,384 INFO L137 WitnessPrinter]: Generating witness for correct program [2020-07-28 19:06:12,404 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 38 nodes and edges [2020-07-28 19:06:12,405 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 20 nodes and edges [2020-07-28 19:06:12,406 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 9 nodes and edges [2020-07-28 19:06:12,407 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2020-07-28 19:06:12,408 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2020-07-28 19:06:12,408 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2020-07-28 19:06:12,409 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2020-07-28 19:06:12,443 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((0 == splverifierCounter && methaneLevelCritical == \result) && 0 == \result) && tmp <= 1) && 1 == tmp___0) && 1 == \result) && waterLevel <= 1) && 0 == \result) && 1 == systemActive) && methaneLevelCritical == tmp) && 1 == pumpRunning) && \result <= 1) || ((((((((2 <= waterLevel && \result <= 2) && 0 == splverifierCounter) && 1 < tmp) && waterLevel <= 2) && 0 == pumpRunning) && tmp <= 2) && 2 <= \result) && 1 == systemActive)) || (((((0 == splverifierCounter && tmp <= 1) && 0 == pumpRunning) && waterLevel <= 1) && 1 == systemActive) && \result <= 1)) || ((((((((2 <= waterLevel && \result <= 2) && 0 == splverifierCounter) && 1 < tmp) && waterLevel <= 2) && tmp <= 2) && 2 <= \result) && 1 == systemActive) && 1 == pumpRunning)) || (((0 == splverifierCounter && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive) [2020-07-28 19:06:12,443 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((0 == methaneLevelCritical && 0 == splverifierCounter) && waterLevel <= 2) && 1 == systemActive) && 1 == pumpRunning) || ((((((((\result <= 2 && 2 <= waterLevel) && 0 == splverifierCounter) && 1 < tmp) && waterLevel <= 2) && tmp <= 2) && 2 <= \result) && 1 == systemActive) && 1 == pumpRunning)) || (((0 == splverifierCounter && waterLevel <= 2) && 0 == pumpRunning) && 1 == systemActive) [2020-07-28 19:06:12,446 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((0 == splverifierCounter && waterLevel <= 2) && 1 == \result) && 1 == systemActive) && 1 == pumpRunning) || ((((0 == splverifierCounter && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && 1 == systemActive) [2020-07-28 19:06:12,447 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((0 == splverifierCounter && waterLevel <= 2) && 1 == \result) && 1 == switchedOnBeforeTS) && 1 == systemActive) && 1 == pumpRunning) || ((((0 == splverifierCounter && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && 1 == systemActive) [2020-07-28 19:06:12,447 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((0 == splverifierCounter && 1 == \result) && waterLevel <= 1) && 1 == switchedOnBeforeTS) && 1 == systemActive) && 1 == pumpRunning) || (((0 == splverifierCounter && waterLevel <= 2) && 0 == pumpRunning) && 1 == systemActive) [2020-07-28 19:06:12,448 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((0 == splverifierCounter && methaneLevelCritical == \result) && 0 == \result) && 1 == \result) && waterLevel <= 1) && 1 == switchedOnBeforeTS) && 0 == \result) && 1 == systemActive) && 1 == pumpRunning) && methaneLevelCritical == tmp) || ((((2 <= waterLevel && 0 == splverifierCounter) && waterLevel <= 2) && 1 == systemActive) && 1 == pumpRunning)) || (((0 == splverifierCounter && waterLevel <= 2) && 0 == pumpRunning) && 1 == systemActive) [2020-07-28 19:06:12,449 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((0 == splverifierCounter && 0 == pumpRunning) && waterLevel <= 1) && 1 == systemActive) && \result <= 1) || ((((((2 <= waterLevel && \result <= 2) && 0 == splverifierCounter) && waterLevel <= 2) && 2 <= \result) && 1 == systemActive) && 1 == pumpRunning)) || ((((((((((0 == splverifierCounter && methaneLevelCritical == \result) && 0 == \result) && 1 == \result) && waterLevel <= 1) && 1 == switchedOnBeforeTS) && 0 == \result) && 1 == systemActive) && methaneLevelCritical == tmp) && 1 == pumpRunning) && \result <= 1)) || ((((((2 <= waterLevel && \result <= 2) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == pumpRunning) && 2 <= \result) && 1 == systemActive) [2020-07-28 19:06:12,449 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((0 == splverifierCounter && methaneLevelCritical == \result) && 1 == \result) && waterLevel <= 1) && 1 == switchedOnBeforeTS) && 1 == systemActive) && 1 == pumpRunning [2020-07-28 19:06:12,449 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((\result == methaneLevelCritical && 0 == splverifierCounter) && methaneLevelCritical == \result) && 1 == \result) && waterLevel <= 1) && 1 == switchedOnBeforeTS) && 1 == systemActive) && 1 == pumpRunning [2020-07-28 19:06:12,450 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((1 == \result && 0 == splverifierCounter) && 0 == pumpRunning) && waterLevel <= 1) && 1 == systemActive) || ((((2 <= waterLevel && 0 == splverifierCounter) && waterLevel <= 2) && 0 == pumpRunning) && 1 == systemActive) [2020-07-28 19:06:12,450 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((0 == splverifierCounter && methaneLevelCritical == \result) && 0 == \result) && tmp <= 1) && 1 == \result) && waterLevel <= 1) && 1 == switchedOnBeforeTS) && 0 == \result) && 1 == systemActive) && methaneLevelCritical == tmp) && 1 == pumpRunning) && \result <= 1) || ((((((0 == splverifierCounter && tmp <= 1) && 0 == \result) && 0 == pumpRunning) && waterLevel <= 1) && 1 == systemActive) && \result <= 1) [2020-07-28 19:06:12,451 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((0 == tmp___0 && 0 == splverifierCounter) && 0 == pumpRunning) && 0 == \result) && waterLevel <= 1) && 1 == systemActive) || ((((2 <= waterLevel && 0 == splverifierCounter) && waterLevel <= 2) && 0 == pumpRunning) && 1 == systemActive) [2020-07-28 19:06:12,523 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2020-07-28 19:06:12,523 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2020-07-28 19:06:12,526 INFO L168 Benchmark]: Toolchain (without parser) took 45812.56 ms. Allocated memory was 1.0 GB in the beginning and 1.8 GB in the end (delta: 731.9 MB). Free memory was 954.9 MB in the beginning and 914.2 MB in the end (delta: 40.6 MB). Peak memory consumption was 772.6 MB. Max. memory is 11.5 GB. [2020-07-28 19:06:12,526 INFO L168 Benchmark]: CDTParser took 0.73 ms. Allocated memory is still 1.0 GB. Free memory is still 981.7 MB. There was no memory consumed. Max. memory is 11.5 GB. [2020-07-28 19:06:12,527 INFO L168 Benchmark]: CACSL2BoogieTranslator took 722.89 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 131.6 MB). Free memory was 954.9 MB in the beginning and 1.1 GB in the end (delta: -146.4 MB). Peak memory consumption was 25.9 MB. Max. memory is 11.5 GB. [2020-07-28 19:06:12,527 INFO L168 Benchmark]: Boogie Procedure Inliner took 102.98 ms. Allocated memory is still 1.2 GB. Free memory is still 1.1 GB. There was no memory consumed. Max. memory is 11.5 GB. [2020-07-28 19:06:12,527 INFO L168 Benchmark]: Boogie Preprocessor took 84.46 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.7 MB). Peak memory consumption was 6.7 MB. Max. memory is 11.5 GB. [2020-07-28 19:06:12,528 INFO L168 Benchmark]: RCFGBuilder took 1585.58 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 915.7 MB in the end (delta: 178.8 MB). Peak memory consumption was 178.8 MB. Max. memory is 11.5 GB. [2020-07-28 19:06:12,528 INFO L168 Benchmark]: TraceAbstraction took 43157.60 ms. Allocated memory was 1.2 GB in the beginning and 1.8 GB in the end (delta: 600.3 MB). Free memory was 915.7 MB in the beginning and 932.6 MB in the end (delta: -16.9 MB). Peak memory consumption was 583.4 MB. Max. memory is 11.5 GB. [2020-07-28 19:06:12,529 INFO L168 Benchmark]: Witness Printer took 143.75 ms. Allocated memory is still 1.8 GB. Free memory was 932.6 MB in the beginning and 914.2 MB in the end (delta: 18.4 MB). Peak memory consumption was 18.4 MB. Max. memory is 11.5 GB. [2020-07-28 19:06:12,531 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - AssertionsEnabledResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.73 ms. Allocated memory is still 1.0 GB. Free memory is still 981.7 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 722.89 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 131.6 MB). Free memory was 954.9 MB in the beginning and 1.1 GB in the end (delta: -146.4 MB). Peak memory consumption was 25.9 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 102.98 ms. Allocated memory is still 1.2 GB. Free memory is still 1.1 GB. There was no memory consumed. Max. memory is 11.5 GB. * Boogie Preprocessor took 84.46 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.7 MB). Peak memory consumption was 6.7 MB. Max. memory is 11.5 GB. * RCFGBuilder took 1585.58 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 915.7 MB in the end (delta: 178.8 MB). Peak memory consumption was 178.8 MB. Max. memory is 11.5 GB. * TraceAbstraction took 43157.60 ms. Allocated memory was 1.2 GB in the beginning and 1.8 GB in the end (delta: 600.3 MB). Free memory was 915.7 MB in the beginning and 932.6 MB in the end (delta: -16.9 MB). Peak memory consumption was 583.4 MB. Max. memory is 11.5 GB. * Witness Printer took 143.75 ms. Allocated memory is still 1.8 GB. Free memory was 932.6 MB in the beginning and 914.2 MB in the end (delta: 18.4 MB). Peak memory consumption was 18.4 MB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - PositiveResult [Line: 299]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 299]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 299]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - AllSpecificationsHoldResult: All specifications hold 3 specifications checked. All of them hold - InvariantResult [Line: 126]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 126]: Loop Invariant Derived loop invariant: ((((1 == \result && 0 == splverifierCounter) && 0 == pumpRunning) && waterLevel <= 1) && 1 == systemActive) || ((((2 <= waterLevel && 0 == splverifierCounter) && waterLevel <= 2) && 0 == pumpRunning) && 1 == systemActive) - InvariantResult [Line: 467]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 126]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 467]: Loop Invariant Derived loop invariant: (((((0 == tmp___0 && 0 == splverifierCounter) && 0 == pumpRunning) && 0 == \result) && waterLevel <= 1) && 1 == systemActive) || ((((2 <= waterLevel && 0 == splverifierCounter) && waterLevel <= 2) && 0 == pumpRunning) && 1 == systemActive) - InvariantResult [Line: 422]: Loop Invariant Derived loop invariant: ((((0 == splverifierCounter && waterLevel <= 2) && 1 == \result) && 1 == systemActive) && 1 == pumpRunning) || ((((0 == splverifierCounter && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && 1 == systemActive) - InvariantResult [Line: 467]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 422]: Loop Invariant Derived loop invariant: (((((((((((0 == splverifierCounter && methaneLevelCritical == \result) && 0 == \result) && tmp <= 1) && 1 == \result) && waterLevel <= 1) && 1 == switchedOnBeforeTS) && 0 == \result) && 1 == systemActive) && methaneLevelCritical == tmp) && 1 == pumpRunning) && \result <= 1) || ((((((0 == splverifierCounter && tmp <= 1) && 0 == \result) && 0 == pumpRunning) && waterLevel <= 1) && 1 == systemActive) && \result <= 1) - InvariantResult [Line: 467]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 204]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((0 == methaneLevelCritical && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive - InvariantResult [Line: 144]: Loop Invariant Derived loop invariant: ((0 == methaneLevelCritical && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive - InvariantResult [Line: 126]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 281]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 126]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 126]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 249]: Loop Invariant Derived loop invariant: ((0 == methaneLevelCritical && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive - InvariantResult [Line: 577]: Loop Invariant Derived loop invariant: ((0 == methaneLevelCritical && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive - InvariantResult [Line: 517]: Loop Invariant Derived loop invariant: (((0 == splverifierCounter && waterLevel <= 2) && 1 == systemActive) && 1 == pumpRunning) || (((0 == splverifierCounter && waterLevel <= 2) && 0 == pumpRunning) && 1 == systemActive) - InvariantResult [Line: 117]: Loop Invariant Derived loop invariant: ((((((0 == splverifierCounter && 0 == pumpRunning) && waterLevel <= 1) && 1 == systemActive) && \result <= 1) || ((((((2 <= waterLevel && \result <= 2) && 0 == splverifierCounter) && waterLevel <= 2) && 2 <= \result) && 1 == systemActive) && 1 == pumpRunning)) || ((((((((((0 == splverifierCounter && methaneLevelCritical == \result) && 0 == \result) && 1 == \result) && waterLevel <= 1) && 1 == switchedOnBeforeTS) && 0 == \result) && 1 == systemActive) && methaneLevelCritical == tmp) && 1 == pumpRunning) && \result <= 1)) || ((((((2 <= waterLevel && \result <= 2) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == pumpRunning) && 2 <= \result) && 1 == systemActive) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 323]: Loop Invariant Derived loop invariant: ((((((((((0 == splverifierCounter && methaneLevelCritical == \result) && 0 == \result) && 1 == \result) && waterLevel <= 1) && 1 == switchedOnBeforeTS) && 0 == \result) && 1 == systemActive) && 1 == pumpRunning) && methaneLevelCritical == tmp) || ((((2 <= waterLevel && 0 == splverifierCounter) && waterLevel <= 2) && 1 == systemActive) && 1 == pumpRunning)) || (((0 == splverifierCounter && waterLevel <= 2) && 0 == pumpRunning) && 1 == systemActive) - InvariantResult [Line: 323]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 411]: Loop Invariant Derived loop invariant: ((((((\result == methaneLevelCritical && 0 == splverifierCounter) && methaneLevelCritical == \result) && 1 == \result) && waterLevel <= 1) && 1 == switchedOnBeforeTS) && 1 == systemActive) && 1 == pumpRunning - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 411]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 323]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 316]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 411]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 316]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((((((((((0 == splverifierCounter && methaneLevelCritical == \result) && 0 == \result) && tmp <= 1) && 1 == tmp___0) && 1 == \result) && waterLevel <= 1) && 0 == \result) && 1 == systemActive) && methaneLevelCritical == tmp) && 1 == pumpRunning) && \result <= 1) || ((((((((2 <= waterLevel && \result <= 2) && 0 == splverifierCounter) && 1 < tmp) && waterLevel <= 2) && 0 == pumpRunning) && tmp <= 2) && 2 <= \result) && 1 == systemActive)) || (((((0 == splverifierCounter && tmp <= 1) && 0 == pumpRunning) && waterLevel <= 1) && 1 == systemActive) && \result <= 1)) || ((((((((2 <= waterLevel && \result <= 2) && 0 == splverifierCounter) && 1 < tmp) && waterLevel <= 2) && tmp <= 2) && 2 <= \result) && 1 == systemActive) && 1 == pumpRunning)) || (((0 == splverifierCounter && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive) - InvariantResult [Line: 312]: Loop Invariant Derived loop invariant: (((((0 == splverifierCounter && 1 == \result) && waterLevel <= 1) && 1 == switchedOnBeforeTS) && 1 == systemActive) && 1 == pumpRunning) || (((0 == splverifierCounter && waterLevel <= 2) && 0 == pumpRunning) && 1 == systemActive) - InvariantResult [Line: 271]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 312]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 117]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 117]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 312]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 85]: Loop Invariant Derived loop invariant: (((((0 == splverifierCounter && methaneLevelCritical == \result) && 1 == \result) && waterLevel <= 1) && 1 == switchedOnBeforeTS) && 1 == systemActive) && 1 == pumpRunning - InvariantResult [Line: 496]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 316]: Loop Invariant Derived loop invariant: (((((0 == splverifierCounter && waterLevel <= 2) && 1 == \result) && 1 == switchedOnBeforeTS) && 1 == systemActive) && 1 == pumpRunning) || ((((0 == splverifierCounter && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && 1 == systemActive) - InvariantResult [Line: 422]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 467]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 422]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 467]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 422]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 422]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 85]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 507]: Loop Invariant Derived loop invariant: (((((0 == methaneLevelCritical && 0 == splverifierCounter) && waterLevel <= 2) && 1 == systemActive) && 1 == pumpRunning) || ((((((((\result <= 2 && 2 <= waterLevel) && 0 == splverifierCounter) && 1 < tmp) && waterLevel <= 2) && tmp <= 2) && 2 <= \result) && 1 == systemActive) && 1 == pumpRunning)) || (((0 == splverifierCounter && waterLevel <= 2) && 0 == pumpRunning) && 1 == systemActive) - InvariantResult [Line: 85]: Loop Invariant Derived loop invariant: 0 - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 120 locations, 3 error locations. Started 1 CEGAR loops. VerificationResult: SAFE, OverallTime: 34.0s, OverallIterations: 14, TraceHistogramMax: 5, AutomataDifference: 23.6s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 9.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 1556 SDtfs, 2395 SDslu, 3704 SDs, 0 SdLazy, 778 SolverSat, 175 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 1.2s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 530 GetRequests, 432 SyntacticMatches, 1 SemanticMatches, 97 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 331 ImplicationChecksByTransitivity, 1.2s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=492occurred in iteration=13, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 4.0s AutomataMinimizationTime, 14 MinimizatonAttempts, 1564 StatesRemovedByMinimization, 9 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 49 LocationsWithAnnotation, 49 PreInvPairs, 310 NumberOfFragments, 729 HoareAnnotationTreeSize, 49 FomulaSimplifications, 1345689 FormulaSimplificationTreeSizeReduction, 2.5s HoareSimplificationTime, 49 FomulaSimplificationsInter, 149961 FormulaSimplificationTreeSizeReductionInter, 6.3s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.8s SatisfiabilityAnalysisTime, 2.9s InterpolantComputationTime, 1152 NumberOfCodeBlocks, 1152 NumberOfCodeBlocksAsserted, 18 NumberOfCheckSat, 1134 ConstructedInterpolants, 0 QuantifiedInterpolants, 216420 SizeOfPredicates, 13 NumberOfNonLiveVariables, 2168 ConjunctsInSsa, 32 ConjunctsInUnsatCore, 18 InterpolantComputations, 10 PerfectInterpolantSequences, 903/992 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be correct! Received shutdown request...