./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec5_product53.cil.c --full-output -ea --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 8bd4bc60 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx12G -Xms1G -ea -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec5_product53.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 4f6c889e7a16ef76fe9fccec0743002e303bbe32 ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................. Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.25-8bd4bc6 [2020-07-28 19:06:09,126 INFO L177 SettingsManager]: Resetting all preferences to default values... [2020-07-28 19:06:09,128 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2020-07-28 19:06:09,141 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2020-07-28 19:06:09,141 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2020-07-28 19:06:09,143 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2020-07-28 19:06:09,144 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2020-07-28 19:06:09,146 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2020-07-28 19:06:09,148 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2020-07-28 19:06:09,149 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2020-07-28 19:06:09,151 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2020-07-28 19:06:09,152 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2020-07-28 19:06:09,152 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2020-07-28 19:06:09,153 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2020-07-28 19:06:09,155 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2020-07-28 19:06:09,156 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2020-07-28 19:06:09,159 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2020-07-28 19:06:09,160 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2020-07-28 19:06:09,163 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2020-07-28 19:06:09,169 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2020-07-28 19:06:09,172 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2020-07-28 19:06:09,175 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2020-07-28 19:06:09,177 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2020-07-28 19:06:09,181 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2020-07-28 19:06:09,183 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2020-07-28 19:06:09,185 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2020-07-28 19:06:09,188 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2020-07-28 19:06:09,189 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2020-07-28 19:06:09,191 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2020-07-28 19:06:09,192 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2020-07-28 19:06:09,192 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2020-07-28 19:06:09,193 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2020-07-28 19:06:09,195 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2020-07-28 19:06:09,196 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2020-07-28 19:06:09,197 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2020-07-28 19:06:09,198 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2020-07-28 19:06:09,199 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2020-07-28 19:06:09,199 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2020-07-28 19:06:09,200 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2020-07-28 19:06:09,201 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2020-07-28 19:06:09,203 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2020-07-28 19:06:09,204 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2020-07-28 19:06:09,219 INFO L113 SettingsManager]: Loading preferences was successful [2020-07-28 19:06:09,220 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2020-07-28 19:06:09,221 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2020-07-28 19:06:09,222 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2020-07-28 19:06:09,222 INFO L138 SettingsManager]: * Use SBE=true [2020-07-28 19:06:09,222 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2020-07-28 19:06:09,223 INFO L138 SettingsManager]: * sizeof long=4 [2020-07-28 19:06:09,223 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2020-07-28 19:06:09,223 INFO L138 SettingsManager]: * sizeof POINTER=4 [2020-07-28 19:06:09,223 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2020-07-28 19:06:09,224 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2020-07-28 19:06:09,224 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2020-07-28 19:06:09,224 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2020-07-28 19:06:09,224 INFO L138 SettingsManager]: * sizeof long double=12 [2020-07-28 19:06:09,225 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2020-07-28 19:06:09,225 INFO L138 SettingsManager]: * Use constant arrays=true [2020-07-28 19:06:09,225 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2020-07-28 19:06:09,226 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2020-07-28 19:06:09,226 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2020-07-28 19:06:09,226 INFO L138 SettingsManager]: * To the following directory=./dump/ [2020-07-28 19:06:09,226 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2020-07-28 19:06:09,227 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2020-07-28 19:06:09,227 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2020-07-28 19:06:09,227 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2020-07-28 19:06:09,228 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2020-07-28 19:06:09,228 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2020-07-28 19:06:09,228 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2020-07-28 19:06:09,228 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2020-07-28 19:06:09,229 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2020-07-28 19:06:09,229 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 4f6c889e7a16ef76fe9fccec0743002e303bbe32 [2020-07-28 19:06:09,612 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2020-07-28 19:06:09,626 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2020-07-28 19:06:09,630 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2020-07-28 19:06:09,632 INFO L271 PluginConnector]: Initializing CDTParser... [2020-07-28 19:06:09,632 INFO L275 PluginConnector]: CDTParser initialized [2020-07-28 19:06:09,633 INFO L429 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec5_product53.cil.c [2020-07-28 19:06:09,697 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/6bcb1aa3e/00fe14110a3846c9adfd595751a233fa/FLAGfc98257cd [2020-07-28 19:06:10,219 INFO L306 CDTParser]: Found 1 translation units. [2020-07-28 19:06:10,221 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product53.cil.c [2020-07-28 19:06:10,238 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/6bcb1aa3e/00fe14110a3846c9adfd595751a233fa/FLAGfc98257cd [2020-07-28 19:06:10,572 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/6bcb1aa3e/00fe14110a3846c9adfd595751a233fa [2020-07-28 19:06:10,577 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2020-07-28 19:06:10,581 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2020-07-28 19:06:10,582 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2020-07-28 19:06:10,582 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2020-07-28 19:06:10,586 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2020-07-28 19:06:10,588 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.07 07:06:10" (1/1) ... [2020-07-28 19:06:10,591 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@1728e5ee and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:06:10, skipping insertion in model container [2020-07-28 19:06:10,591 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.07 07:06:10" (1/1) ... [2020-07-28 19:06:10,600 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2020-07-28 19:06:10,671 INFO L178 MainTranslator]: Built tables and reachable declarations [2020-07-28 19:06:11,235 INFO L206 PostProcessor]: Analyzing one entry point: main [2020-07-28 19:06:11,250 INFO L203 MainTranslator]: Completed pre-run [2020-07-28 19:06:11,341 INFO L206 PostProcessor]: Analyzing one entry point: main [2020-07-28 19:06:11,391 INFO L208 MainTranslator]: Completed translation [2020-07-28 19:06:11,392 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:06:11 WrapperNode [2020-07-28 19:06:11,392 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2020-07-28 19:06:11,394 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2020-07-28 19:06:11,395 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2020-07-28 19:06:11,395 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2020-07-28 19:06:11,405 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:06:11" (1/1) ... [2020-07-28 19:06:11,427 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:06:11" (1/1) ... [2020-07-28 19:06:11,543 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2020-07-28 19:06:11,544 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2020-07-28 19:06:11,544 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2020-07-28 19:06:11,544 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2020-07-28 19:06:11,555 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:06:11" (1/1) ... [2020-07-28 19:06:11,555 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:06:11" (1/1) ... [2020-07-28 19:06:11,562 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:06:11" (1/1) ... [2020-07-28 19:06:11,563 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:06:11" (1/1) ... [2020-07-28 19:06:11,587 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:06:11" (1/1) ... [2020-07-28 19:06:11,602 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:06:11" (1/1) ... [2020-07-28 19:06:11,606 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:06:11" (1/1) ... [2020-07-28 19:06:11,614 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2020-07-28 19:06:11,614 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2020-07-28 19:06:11,615 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2020-07-28 19:06:11,615 INFO L275 PluginConnector]: RCFGBuilder initialized [2020-07-28 19:06:11,616 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:06:11" (1/1) ... No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2020-07-28 19:06:11,690 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2020-07-28 19:06:11,690 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2020-07-28 19:06:11,690 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2020-07-28 19:06:11,691 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2020-07-28 19:06:13,747 INFO L290 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2020-07-28 19:06:13,748 INFO L295 CfgBuilder]: Removed 290 assume(true) statements. [2020-07-28 19:06:13,753 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.07 07:06:13 BoogieIcfgContainer [2020-07-28 19:06:13,754 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2020-07-28 19:06:13,755 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2020-07-28 19:06:13,755 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2020-07-28 19:06:13,758 INFO L275 PluginConnector]: TraceAbstraction initialized [2020-07-28 19:06:13,759 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 28.07 07:06:10" (1/3) ... [2020-07-28 19:06:13,760 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7ca772ca and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.07 07:06:13, skipping insertion in model container [2020-07-28 19:06:13,760 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:06:11" (2/3) ... [2020-07-28 19:06:13,760 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7ca772ca and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.07 07:06:13, skipping insertion in model container [2020-07-28 19:06:13,760 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.07 07:06:13" (3/3) ... [2020-07-28 19:06:13,762 INFO L109 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product53.cil.c [2020-07-28 19:06:13,773 INFO L157 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2020-07-28 19:06:13,781 INFO L169 ceAbstractionStarter]: Appying trace abstraction to program that has 3 error locations. [2020-07-28 19:06:13,797 INFO L251 AbstractCegarLoop]: Starting to check reachability of 3 error locations. [2020-07-28 19:06:13,825 INFO L375 AbstractCegarLoop]: Interprodecural is true [2020-07-28 19:06:13,825 INFO L376 AbstractCegarLoop]: Hoare is true [2020-07-28 19:06:13,825 INFO L377 AbstractCegarLoop]: Compute interpolants for FPandBP [2020-07-28 19:06:13,825 INFO L378 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2020-07-28 19:06:13,826 INFO L379 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2020-07-28 19:06:13,826 INFO L380 AbstractCegarLoop]: Difference is false [2020-07-28 19:06:13,826 INFO L381 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2020-07-28 19:06:13,826 INFO L385 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2020-07-28 19:06:13,848 INFO L276 IsEmpty]: Start isEmpty. Operand 198 states. [2020-07-28 19:06:13,855 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2020-07-28 19:06:13,855 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:06:13,856 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:06:13,857 INFO L427 AbstractCegarLoop]: === Iteration 1 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:06:13,863 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:06:13,863 INFO L82 PathProgramCache]: Analyzing trace with hash -750612192, now seen corresponding path program 1 times [2020-07-28 19:06:13,873 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:06:13,874 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1910890242] [2020-07-28 19:06:13,874 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:06:14,087 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:06:14,239 INFO L280 TraceCheckUtils]: 0: Hoare triple {201#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(13);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string42.base, #t~string42.offset, 1);call write~init~int(110, #t~string42.base, 1 + #t~string42.offset, 1);call write~init~int(0, #t~string42.base, 2 + #t~string42.offset, 1);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string44.base, #t~string44.offset, 1);call write~init~int(102, #t~string44.base, 1 + #t~string44.offset, 1);call write~init~int(102, #t~string44.base, 2 + #t~string44.offset, 1);call write~init~int(0, #t~string44.base, 3 + #t~string44.offset, 1);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string46.base, #t~string46.offset, 1);call write~init~int(80, #t~string46.base, 1 + #t~string46.offset, 1);call write~init~int(117, #t~string46.base, 2 + #t~string46.offset, 1);call write~init~int(109, #t~string46.base, 3 + #t~string46.offset, 1);call write~init~int(112, #t~string46.base, 4 + #t~string46.offset, 1);call write~init~int(58, #t~string46.base, 5 + #t~string46.offset, 1);call write~init~int(0, #t~string46.base, 6 + #t~string46.offset, 1);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string48.base, #t~string48.offset, 1);call write~init~int(110, #t~string48.base, 1 + #t~string48.offset, 1);call write~init~int(0, #t~string48.base, 2 + #t~string48.offset, 1);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string50.base, #t~string50.offset, 1);call write~init~int(102, #t~string50.base, 1 + #t~string50.offset, 1);call write~init~int(102, #t~string50.base, 2 + #t~string50.offset, 1);call write~init~int(0, #t~string50.base, 3 + #t~string50.offset, 1);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string52.base, #t~string52.offset, 1);call write~init~int(32, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 2 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string54.base, #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 1 + #t~string54.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(13);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string69.base, #t~string69.offset, 1);call write~init~int(77, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(101, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(116, #t~string69.base, 3 + #t~string69.offset, 1);call write~init~int(104, #t~string69.base, 4 + #t~string69.offset, 1);call write~init~int(58, #t~string69.base, 5 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 6 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string71.base, #t~string71.offset, 1);call write~init~int(82, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(73, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(84, #t~string71.base, 3 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 4 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string73.base, #t~string73.offset, 1);call write~init~int(75, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 2 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string75.base, #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 1 + #t~string75.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {201#true} is VALID [2020-07-28 19:06:14,240 INFO L280 TraceCheckUtils]: 1: Hoare triple {201#true} havoc main_#res;havoc main_#t~ret65, main_~retValue_acc~9, main_~tmp~10;havoc main_~retValue_acc~9;havoc main_~tmp~10; {201#true} is VALID [2020-07-28 19:06:14,240 INFO L280 TraceCheckUtils]: 2: Hoare triple {201#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {201#true} is VALID [2020-07-28 19:06:14,241 INFO L280 TraceCheckUtils]: 3: Hoare triple {201#true} main_#t~ret65 := valid_product_#res;assume -2147483648 <= main_#t~ret65 && main_#t~ret65 <= 2147483647;main_~tmp~10 := main_#t~ret65;havoc main_#t~ret65; {201#true} is VALID [2020-07-28 19:06:14,241 INFO L280 TraceCheckUtils]: 4: Hoare triple {201#true} assume 0 != main_~tmp~10; {201#true} is VALID [2020-07-28 19:06:14,242 INFO L280 TraceCheckUtils]: 5: Hoare triple {201#true} ~switchedOnBeforeTS~0 := 0; {201#true} is VALID [2020-07-28 19:06:14,242 INFO L280 TraceCheckUtils]: 6: Hoare triple {201#true} havoc test_#t~nondet58, test_#t~nondet59, test_#t~nondet60, test_#t~nondet61, test_~splverifierCounter~0, test_~tmp~8, test_~tmp___0~2, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~8;havoc test_~tmp___0~2;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {201#true} is VALID [2020-07-28 19:06:14,243 INFO L280 TraceCheckUtils]: 7: Hoare triple {201#true} assume !true; {202#false} is VALID [2020-07-28 19:06:14,244 INFO L280 TraceCheckUtils]: 8: Hoare triple {202#false} havoc cleanup_~i~0, cleanup_~__cil_tmp2~0;havoc cleanup_~i~0;havoc cleanup_~__cil_tmp2~0;havoc __utac_acc__Specification5_spec__2_#t~ret62;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {202#false} is VALID [2020-07-28 19:06:14,244 INFO L280 TraceCheckUtils]: 9: Hoare triple {202#false} __utac_acc__Specification5_spec__2_#t~ret62 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret62 && __utac_acc__Specification5_spec__2_#t~ret62 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret62;havoc __utac_acc__Specification5_spec__2_#t~ret62; {202#false} is VALID [2020-07-28 19:06:14,244 INFO L280 TraceCheckUtils]: 10: Hoare triple {202#false} assume !(0 != ~pumpRunning~0); {202#false} is VALID [2020-07-28 19:06:14,245 INFO L280 TraceCheckUtils]: 11: Hoare triple {202#false} assume !(0 != ~systemActive~0); {202#false} is VALID [2020-07-28 19:06:14,245 INFO L280 TraceCheckUtils]: 12: Hoare triple {202#false} havoc __utac_acc__Specification5_spec__3_#t~ret63, __utac_acc__Specification5_spec__3_#t~ret64, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {202#false} is VALID [2020-07-28 19:06:14,246 INFO L280 TraceCheckUtils]: 13: Hoare triple {202#false} __utac_acc__Specification5_spec__3_#t~ret63 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret63 && __utac_acc__Specification5_spec__3_#t~ret63 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret63;havoc __utac_acc__Specification5_spec__3_#t~ret63; {202#false} is VALID [2020-07-28 19:06:14,246 INFO L280 TraceCheckUtils]: 14: Hoare triple {202#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {202#false} is VALID [2020-07-28 19:06:14,246 INFO L280 TraceCheckUtils]: 15: Hoare triple {202#false} __utac_acc__Specification5_spec__3_#t~ret64 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret64 && __utac_acc__Specification5_spec__3_#t~ret64 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret64;havoc __utac_acc__Specification5_spec__3_#t~ret64; {202#false} is VALID [2020-07-28 19:06:14,247 INFO L280 TraceCheckUtils]: 16: Hoare triple {202#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3; {202#false} is VALID [2020-07-28 19:06:14,247 INFO L280 TraceCheckUtils]: 17: Hoare triple {202#false} assume 0 == ~switchedOnBeforeTS~0; {202#false} is VALID [2020-07-28 19:06:14,247 INFO L280 TraceCheckUtils]: 18: Hoare triple {202#false} assume !false; {202#false} is VALID [2020-07-28 19:06:14,251 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:06:14,252 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1910890242] [2020-07-28 19:06:14,253 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:06:14,254 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2020-07-28 19:06:14,255 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [975892307] [2020-07-28 19:06:14,261 INFO L78 Accepts]: Start accepts. Automaton has 2 states. Word has length 19 [2020-07-28 19:06:14,263 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:06:14,267 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states. [2020-07-28 19:06:14,315 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 19 edges. 19 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:06:14,315 INFO L459 AbstractCegarLoop]: Interpolant automaton has 2 states [2020-07-28 19:06:14,316 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:06:14,324 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2020-07-28 19:06:14,325 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2020-07-28 19:06:14,328 INFO L87 Difference]: Start difference. First operand 198 states. Second operand 2 states. [2020-07-28 19:06:14,814 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:14,815 INFO L93 Difference]: Finished difference Result 389 states and 592 transitions. [2020-07-28 19:06:14,815 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2020-07-28 19:06:14,815 INFO L78 Accepts]: Start accepts. Automaton has 2 states. Word has length 19 [2020-07-28 19:06:14,816 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:06:14,817 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2 states. [2020-07-28 19:06:14,833 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 592 transitions. [2020-07-28 19:06:14,834 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2 states. [2020-07-28 19:06:14,842 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 592 transitions. [2020-07-28 19:06:14,842 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states and 592 transitions. [2020-07-28 19:06:15,547 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 592 edges. 592 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:06:15,587 INFO L225 Difference]: With dead ends: 389 [2020-07-28 19:06:15,588 INFO L226 Difference]: Without dead ends: 194 [2020-07-28 19:06:15,597 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2020-07-28 19:06:15,618 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 194 states. [2020-07-28 19:06:15,685 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 194 to 194. [2020-07-28 19:06:15,685 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:06:15,686 INFO L82 GeneralOperation]: Start isEquivalent. First operand 194 states. Second operand 194 states. [2020-07-28 19:06:15,686 INFO L74 IsIncluded]: Start isIncluded. First operand 194 states. Second operand 194 states. [2020-07-28 19:06:15,687 INFO L87 Difference]: Start difference. First operand 194 states. Second operand 194 states. [2020-07-28 19:06:15,699 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:15,700 INFO L93 Difference]: Finished difference Result 194 states and 288 transitions. [2020-07-28 19:06:15,700 INFO L276 IsEmpty]: Start isEmpty. Operand 194 states and 288 transitions. [2020-07-28 19:06:15,708 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:06:15,709 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:06:15,709 INFO L74 IsIncluded]: Start isIncluded. First operand 194 states. Second operand 194 states. [2020-07-28 19:06:15,709 INFO L87 Difference]: Start difference. First operand 194 states. Second operand 194 states. [2020-07-28 19:06:15,726 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:15,726 INFO L93 Difference]: Finished difference Result 194 states and 288 transitions. [2020-07-28 19:06:15,726 INFO L276 IsEmpty]: Start isEmpty. Operand 194 states and 288 transitions. [2020-07-28 19:06:15,730 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:06:15,730 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:06:15,730 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:06:15,731 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:06:15,731 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 194 states. [2020-07-28 19:06:15,742 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 194 states to 194 states and 288 transitions. [2020-07-28 19:06:15,744 INFO L78 Accepts]: Start accepts. Automaton has 194 states and 288 transitions. Word has length 19 [2020-07-28 19:06:15,744 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:06:15,745 INFO L479 AbstractCegarLoop]: Abstraction has 194 states and 288 transitions. [2020-07-28 19:06:15,746 INFO L480 AbstractCegarLoop]: Interpolant automaton has 2 states. [2020-07-28 19:06:15,746 INFO L276 IsEmpty]: Start isEmpty. Operand 194 states and 288 transitions. [2020-07-28 19:06:15,747 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2020-07-28 19:06:15,748 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:06:15,748 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:06:15,749 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2020-07-28 19:06:15,750 INFO L427 AbstractCegarLoop]: === Iteration 2 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:06:15,750 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:06:15,751 INFO L82 PathProgramCache]: Analyzing trace with hash 1114380044, now seen corresponding path program 1 times [2020-07-28 19:06:15,752 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:06:15,752 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1109568837] [2020-07-28 19:06:15,752 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:06:15,817 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:06:15,917 INFO L280 TraceCheckUtils]: 0: Hoare triple {1389#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(13);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string42.base, #t~string42.offset, 1);call write~init~int(110, #t~string42.base, 1 + #t~string42.offset, 1);call write~init~int(0, #t~string42.base, 2 + #t~string42.offset, 1);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string44.base, #t~string44.offset, 1);call write~init~int(102, #t~string44.base, 1 + #t~string44.offset, 1);call write~init~int(102, #t~string44.base, 2 + #t~string44.offset, 1);call write~init~int(0, #t~string44.base, 3 + #t~string44.offset, 1);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string46.base, #t~string46.offset, 1);call write~init~int(80, #t~string46.base, 1 + #t~string46.offset, 1);call write~init~int(117, #t~string46.base, 2 + #t~string46.offset, 1);call write~init~int(109, #t~string46.base, 3 + #t~string46.offset, 1);call write~init~int(112, #t~string46.base, 4 + #t~string46.offset, 1);call write~init~int(58, #t~string46.base, 5 + #t~string46.offset, 1);call write~init~int(0, #t~string46.base, 6 + #t~string46.offset, 1);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string48.base, #t~string48.offset, 1);call write~init~int(110, #t~string48.base, 1 + #t~string48.offset, 1);call write~init~int(0, #t~string48.base, 2 + #t~string48.offset, 1);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string50.base, #t~string50.offset, 1);call write~init~int(102, #t~string50.base, 1 + #t~string50.offset, 1);call write~init~int(102, #t~string50.base, 2 + #t~string50.offset, 1);call write~init~int(0, #t~string50.base, 3 + #t~string50.offset, 1);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string52.base, #t~string52.offset, 1);call write~init~int(32, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 2 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string54.base, #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 1 + #t~string54.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(13);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string69.base, #t~string69.offset, 1);call write~init~int(77, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(101, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(116, #t~string69.base, 3 + #t~string69.offset, 1);call write~init~int(104, #t~string69.base, 4 + #t~string69.offset, 1);call write~init~int(58, #t~string69.base, 5 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 6 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string71.base, #t~string71.offset, 1);call write~init~int(82, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(73, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(84, #t~string71.base, 3 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 4 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string73.base, #t~string73.offset, 1);call write~init~int(75, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 2 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string75.base, #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 1 + #t~string75.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {1389#true} is VALID [2020-07-28 19:06:15,917 INFO L280 TraceCheckUtils]: 1: Hoare triple {1389#true} havoc main_#res;havoc main_#t~ret65, main_~retValue_acc~9, main_~tmp~10;havoc main_~retValue_acc~9;havoc main_~tmp~10; {1389#true} is VALID [2020-07-28 19:06:15,918 INFO L280 TraceCheckUtils]: 2: Hoare triple {1389#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {1389#true} is VALID [2020-07-28 19:06:15,918 INFO L280 TraceCheckUtils]: 3: Hoare triple {1389#true} main_#t~ret65 := valid_product_#res;assume -2147483648 <= main_#t~ret65 && main_#t~ret65 <= 2147483647;main_~tmp~10 := main_#t~ret65;havoc main_#t~ret65; {1389#true} is VALID [2020-07-28 19:06:15,918 INFO L280 TraceCheckUtils]: 4: Hoare triple {1389#true} assume 0 != main_~tmp~10; {1389#true} is VALID [2020-07-28 19:06:15,918 INFO L280 TraceCheckUtils]: 5: Hoare triple {1389#true} ~switchedOnBeforeTS~0 := 0; {1389#true} is VALID [2020-07-28 19:06:15,920 INFO L280 TraceCheckUtils]: 6: Hoare triple {1389#true} havoc test_#t~nondet58, test_#t~nondet59, test_#t~nondet60, test_#t~nondet61, test_~splverifierCounter~0, test_~tmp~8, test_~tmp___0~2, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~8;havoc test_~tmp___0~2;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {1391#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} is VALID [2020-07-28 19:06:15,922 INFO L280 TraceCheckUtils]: 7: Hoare triple {1391#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} assume !false; {1391#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} is VALID [2020-07-28 19:06:15,923 INFO L280 TraceCheckUtils]: 8: Hoare triple {1391#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} assume !(test_~splverifierCounter~0 < 4); {1390#false} is VALID [2020-07-28 19:06:15,923 INFO L280 TraceCheckUtils]: 9: Hoare triple {1390#false} havoc cleanup_~i~0, cleanup_~__cil_tmp2~0;havoc cleanup_~i~0;havoc cleanup_~__cil_tmp2~0;havoc __utac_acc__Specification5_spec__2_#t~ret62;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {1390#false} is VALID [2020-07-28 19:06:15,924 INFO L280 TraceCheckUtils]: 10: Hoare triple {1390#false} __utac_acc__Specification5_spec__2_#t~ret62 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret62 && __utac_acc__Specification5_spec__2_#t~ret62 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret62;havoc __utac_acc__Specification5_spec__2_#t~ret62; {1390#false} is VALID [2020-07-28 19:06:15,924 INFO L280 TraceCheckUtils]: 11: Hoare triple {1390#false} assume !(0 != ~pumpRunning~0); {1390#false} is VALID [2020-07-28 19:06:15,924 INFO L280 TraceCheckUtils]: 12: Hoare triple {1390#false} assume !(0 != ~systemActive~0); {1390#false} is VALID [2020-07-28 19:06:15,925 INFO L280 TraceCheckUtils]: 13: Hoare triple {1390#false} havoc __utac_acc__Specification5_spec__3_#t~ret63, __utac_acc__Specification5_spec__3_#t~ret64, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {1390#false} is VALID [2020-07-28 19:06:15,925 INFO L280 TraceCheckUtils]: 14: Hoare triple {1390#false} __utac_acc__Specification5_spec__3_#t~ret63 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret63 && __utac_acc__Specification5_spec__3_#t~ret63 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret63;havoc __utac_acc__Specification5_spec__3_#t~ret63; {1390#false} is VALID [2020-07-28 19:06:15,925 INFO L280 TraceCheckUtils]: 15: Hoare triple {1390#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {1390#false} is VALID [2020-07-28 19:06:15,925 INFO L280 TraceCheckUtils]: 16: Hoare triple {1390#false} __utac_acc__Specification5_spec__3_#t~ret64 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret64 && __utac_acc__Specification5_spec__3_#t~ret64 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret64;havoc __utac_acc__Specification5_spec__3_#t~ret64; {1390#false} is VALID [2020-07-28 19:06:15,926 INFO L280 TraceCheckUtils]: 17: Hoare triple {1390#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3; {1390#false} is VALID [2020-07-28 19:06:15,926 INFO L280 TraceCheckUtils]: 18: Hoare triple {1390#false} assume 0 == ~switchedOnBeforeTS~0; {1390#false} is VALID [2020-07-28 19:06:15,926 INFO L280 TraceCheckUtils]: 19: Hoare triple {1390#false} assume !false; {1390#false} is VALID [2020-07-28 19:06:15,932 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:06:15,933 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1109568837] [2020-07-28 19:06:15,933 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:06:15,933 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2020-07-28 19:06:15,934 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [28222014] [2020-07-28 19:06:15,936 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 20 [2020-07-28 19:06:15,936 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:06:15,936 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 19:06:15,973 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 20 edges. 20 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:06:15,973 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 19:06:15,973 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:06:15,974 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 19:06:15,974 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:06:15,974 INFO L87 Difference]: Start difference. First operand 194 states and 288 transitions. Second operand 3 states. [2020-07-28 19:06:16,250 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:16,250 INFO L93 Difference]: Finished difference Result 194 states and 288 transitions. [2020-07-28 19:06:16,250 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 19:06:16,251 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 20 [2020-07-28 19:06:16,251 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:06:16,251 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:06:16,255 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 288 transitions. [2020-07-28 19:06:16,255 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:06:16,260 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 288 transitions. [2020-07-28 19:06:16,260 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 288 transitions. [2020-07-28 19:06:16,585 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 288 edges. 288 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:06:16,586 INFO L225 Difference]: With dead ends: 194 [2020-07-28 19:06:16,587 INFO L226 Difference]: Without dead ends: 75 [2020-07-28 19:06:16,588 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:06:16,589 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 75 states. [2020-07-28 19:06:16,626 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 75 to 75. [2020-07-28 19:06:16,627 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:06:16,627 INFO L82 GeneralOperation]: Start isEquivalent. First operand 75 states. Second operand 75 states. [2020-07-28 19:06:16,627 INFO L74 IsIncluded]: Start isIncluded. First operand 75 states. Second operand 75 states. [2020-07-28 19:06:16,627 INFO L87 Difference]: Start difference. First operand 75 states. Second operand 75 states. [2020-07-28 19:06:16,632 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:16,632 INFO L93 Difference]: Finished difference Result 75 states and 110 transitions. [2020-07-28 19:06:16,632 INFO L276 IsEmpty]: Start isEmpty. Operand 75 states and 110 transitions. [2020-07-28 19:06:16,633 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:06:16,635 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:06:16,635 INFO L74 IsIncluded]: Start isIncluded. First operand 75 states. Second operand 75 states. [2020-07-28 19:06:16,635 INFO L87 Difference]: Start difference. First operand 75 states. Second operand 75 states. [2020-07-28 19:06:16,638 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:16,639 INFO L93 Difference]: Finished difference Result 75 states and 110 transitions. [2020-07-28 19:06:16,639 INFO L276 IsEmpty]: Start isEmpty. Operand 75 states and 110 transitions. [2020-07-28 19:06:16,640 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:06:16,640 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:06:16,641 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:06:16,641 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:06:16,641 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 75 states. [2020-07-28 19:06:16,646 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 75 states to 75 states and 110 transitions. [2020-07-28 19:06:16,647 INFO L78 Accepts]: Start accepts. Automaton has 75 states and 110 transitions. Word has length 20 [2020-07-28 19:06:16,647 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:06:16,648 INFO L479 AbstractCegarLoop]: Abstraction has 75 states and 110 transitions. [2020-07-28 19:06:16,648 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 19:06:16,648 INFO L276 IsEmpty]: Start isEmpty. Operand 75 states and 110 transitions. [2020-07-28 19:06:16,649 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2020-07-28 19:06:16,649 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:06:16,652 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:06:16,652 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2020-07-28 19:06:16,653 INFO L427 AbstractCegarLoop]: === Iteration 3 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:06:16,653 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:06:16,653 INFO L82 PathProgramCache]: Analyzing trace with hash 298878360, now seen corresponding path program 1 times [2020-07-28 19:06:16,654 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:06:16,654 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1902582528] [2020-07-28 19:06:16,655 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:06:16,741 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:06:16,800 INFO L280 TraceCheckUtils]: 0: Hoare triple {1911#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(13);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string42.base, #t~string42.offset, 1);call write~init~int(110, #t~string42.base, 1 + #t~string42.offset, 1);call write~init~int(0, #t~string42.base, 2 + #t~string42.offset, 1);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string44.base, #t~string44.offset, 1);call write~init~int(102, #t~string44.base, 1 + #t~string44.offset, 1);call write~init~int(102, #t~string44.base, 2 + #t~string44.offset, 1);call write~init~int(0, #t~string44.base, 3 + #t~string44.offset, 1);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string46.base, #t~string46.offset, 1);call write~init~int(80, #t~string46.base, 1 + #t~string46.offset, 1);call write~init~int(117, #t~string46.base, 2 + #t~string46.offset, 1);call write~init~int(109, #t~string46.base, 3 + #t~string46.offset, 1);call write~init~int(112, #t~string46.base, 4 + #t~string46.offset, 1);call write~init~int(58, #t~string46.base, 5 + #t~string46.offset, 1);call write~init~int(0, #t~string46.base, 6 + #t~string46.offset, 1);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string48.base, #t~string48.offset, 1);call write~init~int(110, #t~string48.base, 1 + #t~string48.offset, 1);call write~init~int(0, #t~string48.base, 2 + #t~string48.offset, 1);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string50.base, #t~string50.offset, 1);call write~init~int(102, #t~string50.base, 1 + #t~string50.offset, 1);call write~init~int(102, #t~string50.base, 2 + #t~string50.offset, 1);call write~init~int(0, #t~string50.base, 3 + #t~string50.offset, 1);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string52.base, #t~string52.offset, 1);call write~init~int(32, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 2 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string54.base, #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 1 + #t~string54.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(13);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string69.base, #t~string69.offset, 1);call write~init~int(77, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(101, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(116, #t~string69.base, 3 + #t~string69.offset, 1);call write~init~int(104, #t~string69.base, 4 + #t~string69.offset, 1);call write~init~int(58, #t~string69.base, 5 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 6 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string71.base, #t~string71.offset, 1);call write~init~int(82, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(73, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(84, #t~string71.base, 3 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 4 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string73.base, #t~string73.offset, 1);call write~init~int(75, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 2 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string75.base, #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 1 + #t~string75.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {1913#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:06:16,801 INFO L280 TraceCheckUtils]: 1: Hoare triple {1913#(= 1 ~systemActive~0)} havoc main_#res;havoc main_#t~ret65, main_~retValue_acc~9, main_~tmp~10;havoc main_~retValue_acc~9;havoc main_~tmp~10; {1913#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:06:16,802 INFO L280 TraceCheckUtils]: 2: Hoare triple {1913#(= 1 ~systemActive~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {1913#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:06:16,803 INFO L280 TraceCheckUtils]: 3: Hoare triple {1913#(= 1 ~systemActive~0)} main_#t~ret65 := valid_product_#res;assume -2147483648 <= main_#t~ret65 && main_#t~ret65 <= 2147483647;main_~tmp~10 := main_#t~ret65;havoc main_#t~ret65; {1913#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:06:16,804 INFO L280 TraceCheckUtils]: 4: Hoare triple {1913#(= 1 ~systemActive~0)} assume 0 != main_~tmp~10; {1913#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:06:16,805 INFO L280 TraceCheckUtils]: 5: Hoare triple {1913#(= 1 ~systemActive~0)} ~switchedOnBeforeTS~0 := 0; {1913#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:06:16,806 INFO L280 TraceCheckUtils]: 6: Hoare triple {1913#(= 1 ~systemActive~0)} havoc test_#t~nondet58, test_#t~nondet59, test_#t~nondet60, test_#t~nondet61, test_~splverifierCounter~0, test_~tmp~8, test_~tmp___0~2, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~8;havoc test_~tmp___0~2;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {1913#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:06:16,807 INFO L280 TraceCheckUtils]: 7: Hoare triple {1913#(= 1 ~systemActive~0)} assume !false; {1913#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:06:16,808 INFO L280 TraceCheckUtils]: 8: Hoare triple {1913#(= 1 ~systemActive~0)} assume test_~splverifierCounter~0 < 4; {1913#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:06:16,809 INFO L280 TraceCheckUtils]: 9: Hoare triple {1913#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet58 && test_#t~nondet58 <= 2147483647;test_~tmp~8 := test_#t~nondet58;havoc test_#t~nondet58; {1913#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:06:16,810 INFO L280 TraceCheckUtils]: 10: Hoare triple {1913#(= 1 ~systemActive~0)} assume !(0 != test_~tmp~8); {1913#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:06:16,810 INFO L280 TraceCheckUtils]: 11: Hoare triple {1913#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet59 && test_#t~nondet59 <= 2147483647;test_~tmp___0~2 := test_#t~nondet59;havoc test_#t~nondet59; {1913#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:06:16,811 INFO L280 TraceCheckUtils]: 12: Hoare triple {1913#(= 1 ~systemActive~0)} assume !(0 != test_~tmp___0~2); {1913#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:06:16,812 INFO L280 TraceCheckUtils]: 13: Hoare triple {1913#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet60 && test_#t~nondet60 <= 2147483647;test_~tmp___2~0 := test_#t~nondet60;havoc test_#t~nondet60; {1913#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:06:16,813 INFO L280 TraceCheckUtils]: 14: Hoare triple {1913#(= 1 ~systemActive~0)} assume 0 != test_~tmp___2~0; {1913#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:06:16,814 INFO L280 TraceCheckUtils]: 15: Hoare triple {1913#(= 1 ~systemActive~0)} havoc __utac_acc__Specification5_spec__2_#t~ret62;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {1913#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:06:16,814 INFO L280 TraceCheckUtils]: 16: Hoare triple {1913#(= 1 ~systemActive~0)} __utac_acc__Specification5_spec__2_#t~ret62 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret62 && __utac_acc__Specification5_spec__2_#t~ret62 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret62;havoc __utac_acc__Specification5_spec__2_#t~ret62; {1913#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:06:16,816 INFO L280 TraceCheckUtils]: 17: Hoare triple {1913#(= 1 ~systemActive~0)} assume !(0 != ~pumpRunning~0); {1913#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:06:16,817 INFO L280 TraceCheckUtils]: 18: Hoare triple {1913#(= 1 ~systemActive~0)} assume !(0 != ~systemActive~0); {1912#false} is VALID [2020-07-28 19:06:16,817 INFO L280 TraceCheckUtils]: 19: Hoare triple {1912#false} havoc __utac_acc__Specification5_spec__3_#t~ret63, __utac_acc__Specification5_spec__3_#t~ret64, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {1912#false} is VALID [2020-07-28 19:06:16,818 INFO L280 TraceCheckUtils]: 20: Hoare triple {1912#false} __utac_acc__Specification5_spec__3_#t~ret63 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret63 && __utac_acc__Specification5_spec__3_#t~ret63 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret63;havoc __utac_acc__Specification5_spec__3_#t~ret63; {1912#false} is VALID [2020-07-28 19:06:16,818 INFO L280 TraceCheckUtils]: 21: Hoare triple {1912#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {1912#false} is VALID [2020-07-28 19:06:16,819 INFO L280 TraceCheckUtils]: 22: Hoare triple {1912#false} __utac_acc__Specification5_spec__3_#t~ret64 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret64 && __utac_acc__Specification5_spec__3_#t~ret64 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret64;havoc __utac_acc__Specification5_spec__3_#t~ret64; {1912#false} is VALID [2020-07-28 19:06:16,819 INFO L280 TraceCheckUtils]: 23: Hoare triple {1912#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3; {1912#false} is VALID [2020-07-28 19:06:16,819 INFO L280 TraceCheckUtils]: 24: Hoare triple {1912#false} assume 0 == ~switchedOnBeforeTS~0; {1912#false} is VALID [2020-07-28 19:06:16,819 INFO L280 TraceCheckUtils]: 25: Hoare triple {1912#false} assume !false; {1912#false} is VALID [2020-07-28 19:06:16,822 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:06:16,822 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1902582528] [2020-07-28 19:06:16,823 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:06:16,823 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2020-07-28 19:06:16,823 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1809702590] [2020-07-28 19:06:16,824 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 26 [2020-07-28 19:06:16,824 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:06:16,825 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 19:06:16,868 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 26 edges. 26 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:06:16,869 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 19:06:16,869 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:06:16,869 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 19:06:16,870 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:06:16,870 INFO L87 Difference]: Start difference. First operand 75 states and 110 transitions. Second operand 3 states. [2020-07-28 19:06:17,123 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:17,123 INFO L93 Difference]: Finished difference Result 143 states and 213 transitions. [2020-07-28 19:06:17,123 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 19:06:17,125 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 26 [2020-07-28 19:06:17,126 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:06:17,126 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:06:17,131 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 213 transitions. [2020-07-28 19:06:17,132 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:06:17,135 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 213 transitions. [2020-07-28 19:06:17,136 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 213 transitions. [2020-07-28 19:06:17,367 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 213 edges. 213 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:06:17,369 INFO L225 Difference]: With dead ends: 143 [2020-07-28 19:06:17,369 INFO L226 Difference]: Without dead ends: 75 [2020-07-28 19:06:17,370 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:06:17,371 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 75 states. [2020-07-28 19:06:17,418 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 75 to 75. [2020-07-28 19:06:17,418 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:06:17,418 INFO L82 GeneralOperation]: Start isEquivalent. First operand 75 states. Second operand 75 states. [2020-07-28 19:06:17,419 INFO L74 IsIncluded]: Start isIncluded. First operand 75 states. Second operand 75 states. [2020-07-28 19:06:17,419 INFO L87 Difference]: Start difference. First operand 75 states. Second operand 75 states. [2020-07-28 19:06:17,422 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:17,422 INFO L93 Difference]: Finished difference Result 75 states and 109 transitions. [2020-07-28 19:06:17,422 INFO L276 IsEmpty]: Start isEmpty. Operand 75 states and 109 transitions. [2020-07-28 19:06:17,423 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:06:17,423 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:06:17,423 INFO L74 IsIncluded]: Start isIncluded. First operand 75 states. Second operand 75 states. [2020-07-28 19:06:17,423 INFO L87 Difference]: Start difference. First operand 75 states. Second operand 75 states. [2020-07-28 19:06:17,427 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:17,427 INFO L93 Difference]: Finished difference Result 75 states and 109 transitions. [2020-07-28 19:06:17,427 INFO L276 IsEmpty]: Start isEmpty. Operand 75 states and 109 transitions. [2020-07-28 19:06:17,428 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:06:17,428 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:06:17,428 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:06:17,428 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:06:17,428 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 75 states. [2020-07-28 19:06:17,431 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 75 states to 75 states and 109 transitions. [2020-07-28 19:06:17,432 INFO L78 Accepts]: Start accepts. Automaton has 75 states and 109 transitions. Word has length 26 [2020-07-28 19:06:17,432 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:06:17,432 INFO L479 AbstractCegarLoop]: Abstraction has 75 states and 109 transitions. [2020-07-28 19:06:17,432 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 19:06:17,432 INFO L276 IsEmpty]: Start isEmpty. Operand 75 states and 109 transitions. [2020-07-28 19:06:17,433 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2020-07-28 19:06:17,433 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:06:17,433 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:06:17,434 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2020-07-28 19:06:17,434 INFO L427 AbstractCegarLoop]: === Iteration 4 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:06:17,434 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:06:17,435 INFO L82 PathProgramCache]: Analyzing trace with hash -149422890, now seen corresponding path program 1 times [2020-07-28 19:06:17,435 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:06:17,435 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [230944295] [2020-07-28 19:06:17,436 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:06:17,463 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:06:17,503 INFO L280 TraceCheckUtils]: 0: Hoare triple {2361#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(13);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string42.base, #t~string42.offset, 1);call write~init~int(110, #t~string42.base, 1 + #t~string42.offset, 1);call write~init~int(0, #t~string42.base, 2 + #t~string42.offset, 1);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string44.base, #t~string44.offset, 1);call write~init~int(102, #t~string44.base, 1 + #t~string44.offset, 1);call write~init~int(102, #t~string44.base, 2 + #t~string44.offset, 1);call write~init~int(0, #t~string44.base, 3 + #t~string44.offset, 1);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string46.base, #t~string46.offset, 1);call write~init~int(80, #t~string46.base, 1 + #t~string46.offset, 1);call write~init~int(117, #t~string46.base, 2 + #t~string46.offset, 1);call write~init~int(109, #t~string46.base, 3 + #t~string46.offset, 1);call write~init~int(112, #t~string46.base, 4 + #t~string46.offset, 1);call write~init~int(58, #t~string46.base, 5 + #t~string46.offset, 1);call write~init~int(0, #t~string46.base, 6 + #t~string46.offset, 1);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string48.base, #t~string48.offset, 1);call write~init~int(110, #t~string48.base, 1 + #t~string48.offset, 1);call write~init~int(0, #t~string48.base, 2 + #t~string48.offset, 1);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string50.base, #t~string50.offset, 1);call write~init~int(102, #t~string50.base, 1 + #t~string50.offset, 1);call write~init~int(102, #t~string50.base, 2 + #t~string50.offset, 1);call write~init~int(0, #t~string50.base, 3 + #t~string50.offset, 1);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string52.base, #t~string52.offset, 1);call write~init~int(32, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 2 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string54.base, #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 1 + #t~string54.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(13);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string69.base, #t~string69.offset, 1);call write~init~int(77, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(101, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(116, #t~string69.base, 3 + #t~string69.offset, 1);call write~init~int(104, #t~string69.base, 4 + #t~string69.offset, 1);call write~init~int(58, #t~string69.base, 5 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 6 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string71.base, #t~string71.offset, 1);call write~init~int(82, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(73, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(84, #t~string71.base, 3 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 4 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string73.base, #t~string73.offset, 1);call write~init~int(75, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 2 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string75.base, #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 1 + #t~string75.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {2363#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:17,504 INFO L280 TraceCheckUtils]: 1: Hoare triple {2363#(= 0 ~pumpRunning~0)} havoc main_#res;havoc main_#t~ret65, main_~retValue_acc~9, main_~tmp~10;havoc main_~retValue_acc~9;havoc main_~tmp~10; {2363#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:17,505 INFO L280 TraceCheckUtils]: 2: Hoare triple {2363#(= 0 ~pumpRunning~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {2363#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:17,505 INFO L280 TraceCheckUtils]: 3: Hoare triple {2363#(= 0 ~pumpRunning~0)} main_#t~ret65 := valid_product_#res;assume -2147483648 <= main_#t~ret65 && main_#t~ret65 <= 2147483647;main_~tmp~10 := main_#t~ret65;havoc main_#t~ret65; {2363#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:17,506 INFO L280 TraceCheckUtils]: 4: Hoare triple {2363#(= 0 ~pumpRunning~0)} assume 0 != main_~tmp~10; {2363#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:17,507 INFO L280 TraceCheckUtils]: 5: Hoare triple {2363#(= 0 ~pumpRunning~0)} ~switchedOnBeforeTS~0 := 0; {2363#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:17,508 INFO L280 TraceCheckUtils]: 6: Hoare triple {2363#(= 0 ~pumpRunning~0)} havoc test_#t~nondet58, test_#t~nondet59, test_#t~nondet60, test_#t~nondet61, test_~splverifierCounter~0, test_~tmp~8, test_~tmp___0~2, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~8;havoc test_~tmp___0~2;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {2363#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:17,509 INFO L280 TraceCheckUtils]: 7: Hoare triple {2363#(= 0 ~pumpRunning~0)} assume !false; {2363#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:17,509 INFO L280 TraceCheckUtils]: 8: Hoare triple {2363#(= 0 ~pumpRunning~0)} assume test_~splverifierCounter~0 < 4; {2363#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:17,510 INFO L280 TraceCheckUtils]: 9: Hoare triple {2363#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet58 && test_#t~nondet58 <= 2147483647;test_~tmp~8 := test_#t~nondet58;havoc test_#t~nondet58; {2363#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:17,511 INFO L280 TraceCheckUtils]: 10: Hoare triple {2363#(= 0 ~pumpRunning~0)} assume !(0 != test_~tmp~8); {2363#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:17,511 INFO L280 TraceCheckUtils]: 11: Hoare triple {2363#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet59 && test_#t~nondet59 <= 2147483647;test_~tmp___0~2 := test_#t~nondet59;havoc test_#t~nondet59; {2363#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:17,512 INFO L280 TraceCheckUtils]: 12: Hoare triple {2363#(= 0 ~pumpRunning~0)} assume !(0 != test_~tmp___0~2); {2363#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:17,513 INFO L280 TraceCheckUtils]: 13: Hoare triple {2363#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet60 && test_#t~nondet60 <= 2147483647;test_~tmp___2~0 := test_#t~nondet60;havoc test_#t~nondet60; {2363#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:17,514 INFO L280 TraceCheckUtils]: 14: Hoare triple {2363#(= 0 ~pumpRunning~0)} assume 0 != test_~tmp___2~0; {2363#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:17,514 INFO L280 TraceCheckUtils]: 15: Hoare triple {2363#(= 0 ~pumpRunning~0)} havoc __utac_acc__Specification5_spec__2_#t~ret62;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {2363#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:17,515 INFO L280 TraceCheckUtils]: 16: Hoare triple {2363#(= 0 ~pumpRunning~0)} __utac_acc__Specification5_spec__2_#t~ret62 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret62 && __utac_acc__Specification5_spec__2_#t~ret62 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret62;havoc __utac_acc__Specification5_spec__2_#t~ret62; {2363#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:17,516 INFO L280 TraceCheckUtils]: 17: Hoare triple {2363#(= 0 ~pumpRunning~0)} assume !(0 != ~pumpRunning~0); {2363#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:17,516 INFO L280 TraceCheckUtils]: 18: Hoare triple {2363#(= 0 ~pumpRunning~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret37, processEnvironment_~tmp~5;havoc processEnvironment_~tmp~5; {2363#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:17,517 INFO L280 TraceCheckUtils]: 19: Hoare triple {2363#(= 0 ~pumpRunning~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret36, processEnvironment__wrappee__lowWaterSensor_~tmp~4;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~4; {2363#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:17,518 INFO L280 TraceCheckUtils]: 20: Hoare triple {2363#(= 0 ~pumpRunning~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret35, processEnvironment__wrappee__highWaterSensor_~tmp~3;havoc processEnvironment__wrappee__highWaterSensor_~tmp~3; {2363#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:17,519 INFO L280 TraceCheckUtils]: 21: Hoare triple {2363#(= 0 ~pumpRunning~0)} assume !(0 == ~pumpRunning~0); {2362#false} is VALID [2020-07-28 19:06:17,519 INFO L280 TraceCheckUtils]: 22: Hoare triple {2362#false} havoc __utac_acc__Specification5_spec__3_#t~ret63, __utac_acc__Specification5_spec__3_#t~ret64, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {2362#false} is VALID [2020-07-28 19:06:17,519 INFO L280 TraceCheckUtils]: 23: Hoare triple {2362#false} __utac_acc__Specification5_spec__3_#t~ret63 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret63 && __utac_acc__Specification5_spec__3_#t~ret63 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret63;havoc __utac_acc__Specification5_spec__3_#t~ret63; {2362#false} is VALID [2020-07-28 19:06:17,520 INFO L280 TraceCheckUtils]: 24: Hoare triple {2362#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {2362#false} is VALID [2020-07-28 19:06:17,520 INFO L280 TraceCheckUtils]: 25: Hoare triple {2362#false} __utac_acc__Specification5_spec__3_#t~ret64 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret64 && __utac_acc__Specification5_spec__3_#t~ret64 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret64;havoc __utac_acc__Specification5_spec__3_#t~ret64; {2362#false} is VALID [2020-07-28 19:06:17,520 INFO L280 TraceCheckUtils]: 26: Hoare triple {2362#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3; {2362#false} is VALID [2020-07-28 19:06:17,520 INFO L280 TraceCheckUtils]: 27: Hoare triple {2362#false} assume 0 == ~switchedOnBeforeTS~0; {2362#false} is VALID [2020-07-28 19:06:17,521 INFO L280 TraceCheckUtils]: 28: Hoare triple {2362#false} assume !false; {2362#false} is VALID [2020-07-28 19:06:17,523 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:06:17,523 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [230944295] [2020-07-28 19:06:17,523 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:06:17,524 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2020-07-28 19:06:17,524 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [67965119] [2020-07-28 19:06:17,524 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 29 [2020-07-28 19:06:17,525 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:06:17,525 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 19:06:17,564 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 29 edges. 29 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:06:17,564 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 19:06:17,565 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:06:17,565 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 19:06:17,565 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:06:17,565 INFO L87 Difference]: Start difference. First operand 75 states and 109 transitions. Second operand 3 states. [2020-07-28 19:06:17,909 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:17,909 INFO L93 Difference]: Finished difference Result 155 states and 227 transitions. [2020-07-28 19:06:17,909 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 19:06:17,910 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 29 [2020-07-28 19:06:17,910 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:06:17,910 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:06:17,913 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 227 transitions. [2020-07-28 19:06:17,914 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:06:17,917 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 227 transitions. [2020-07-28 19:06:17,917 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 227 transitions. [2020-07-28 19:06:18,161 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 227 edges. 227 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:06:18,163 INFO L225 Difference]: With dead ends: 155 [2020-07-28 19:06:18,163 INFO L226 Difference]: Without dead ends: 87 [2020-07-28 19:06:18,164 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:06:18,164 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 87 states. [2020-07-28 19:06:18,218 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 87 to 85. [2020-07-28 19:06:18,219 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:06:18,219 INFO L82 GeneralOperation]: Start isEquivalent. First operand 87 states. Second operand 85 states. [2020-07-28 19:06:18,219 INFO L74 IsIncluded]: Start isIncluded. First operand 87 states. Second operand 85 states. [2020-07-28 19:06:18,219 INFO L87 Difference]: Start difference. First operand 87 states. Second operand 85 states. [2020-07-28 19:06:18,224 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:18,224 INFO L93 Difference]: Finished difference Result 87 states and 120 transitions. [2020-07-28 19:06:18,225 INFO L276 IsEmpty]: Start isEmpty. Operand 87 states and 120 transitions. [2020-07-28 19:06:18,225 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:06:18,225 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:06:18,225 INFO L74 IsIncluded]: Start isIncluded. First operand 85 states. Second operand 87 states. [2020-07-28 19:06:18,226 INFO L87 Difference]: Start difference. First operand 85 states. Second operand 87 states. [2020-07-28 19:06:18,229 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:18,230 INFO L93 Difference]: Finished difference Result 87 states and 120 transitions. [2020-07-28 19:06:18,230 INFO L276 IsEmpty]: Start isEmpty. Operand 87 states and 120 transitions. [2020-07-28 19:06:18,230 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:06:18,231 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:06:18,231 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:06:18,231 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:06:18,231 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 85 states. [2020-07-28 19:06:18,239 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 85 states to 85 states and 119 transitions. [2020-07-28 19:06:18,240 INFO L78 Accepts]: Start accepts. Automaton has 85 states and 119 transitions. Word has length 29 [2020-07-28 19:06:18,240 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:06:18,240 INFO L479 AbstractCegarLoop]: Abstraction has 85 states and 119 transitions. [2020-07-28 19:06:18,241 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 19:06:18,241 INFO L276 IsEmpty]: Start isEmpty. Operand 85 states and 119 transitions. [2020-07-28 19:06:18,241 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2020-07-28 19:06:18,242 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:06:18,242 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:06:18,242 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2020-07-28 19:06:18,243 INFO L427 AbstractCegarLoop]: === Iteration 5 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:06:18,243 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:06:18,243 INFO L82 PathProgramCache]: Analyzing trace with hash 1951483845, now seen corresponding path program 1 times [2020-07-28 19:06:18,246 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:06:18,246 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [227691118] [2020-07-28 19:06:18,246 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:06:18,286 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:06:18,380 INFO L280 TraceCheckUtils]: 0: Hoare triple {2867#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(13);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string42.base, #t~string42.offset, 1);call write~init~int(110, #t~string42.base, 1 + #t~string42.offset, 1);call write~init~int(0, #t~string42.base, 2 + #t~string42.offset, 1);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string44.base, #t~string44.offset, 1);call write~init~int(102, #t~string44.base, 1 + #t~string44.offset, 1);call write~init~int(102, #t~string44.base, 2 + #t~string44.offset, 1);call write~init~int(0, #t~string44.base, 3 + #t~string44.offset, 1);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string46.base, #t~string46.offset, 1);call write~init~int(80, #t~string46.base, 1 + #t~string46.offset, 1);call write~init~int(117, #t~string46.base, 2 + #t~string46.offset, 1);call write~init~int(109, #t~string46.base, 3 + #t~string46.offset, 1);call write~init~int(112, #t~string46.base, 4 + #t~string46.offset, 1);call write~init~int(58, #t~string46.base, 5 + #t~string46.offset, 1);call write~init~int(0, #t~string46.base, 6 + #t~string46.offset, 1);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string48.base, #t~string48.offset, 1);call write~init~int(110, #t~string48.base, 1 + #t~string48.offset, 1);call write~init~int(0, #t~string48.base, 2 + #t~string48.offset, 1);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string50.base, #t~string50.offset, 1);call write~init~int(102, #t~string50.base, 1 + #t~string50.offset, 1);call write~init~int(102, #t~string50.base, 2 + #t~string50.offset, 1);call write~init~int(0, #t~string50.base, 3 + #t~string50.offset, 1);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string52.base, #t~string52.offset, 1);call write~init~int(32, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 2 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string54.base, #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 1 + #t~string54.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(13);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string69.base, #t~string69.offset, 1);call write~init~int(77, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(101, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(116, #t~string69.base, 3 + #t~string69.offset, 1);call write~init~int(104, #t~string69.base, 4 + #t~string69.offset, 1);call write~init~int(58, #t~string69.base, 5 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 6 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string71.base, #t~string71.offset, 1);call write~init~int(82, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(73, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(84, #t~string71.base, 3 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 4 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string73.base, #t~string73.offset, 1);call write~init~int(75, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 2 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string75.base, #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 1 + #t~string75.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {2867#true} is VALID [2020-07-28 19:06:18,380 INFO L280 TraceCheckUtils]: 1: Hoare triple {2867#true} havoc main_#res;havoc main_#t~ret65, main_~retValue_acc~9, main_~tmp~10;havoc main_~retValue_acc~9;havoc main_~tmp~10; {2867#true} is VALID [2020-07-28 19:06:18,380 INFO L280 TraceCheckUtils]: 2: Hoare triple {2867#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {2867#true} is VALID [2020-07-28 19:06:18,381 INFO L280 TraceCheckUtils]: 3: Hoare triple {2867#true} main_#t~ret65 := valid_product_#res;assume -2147483648 <= main_#t~ret65 && main_#t~ret65 <= 2147483647;main_~tmp~10 := main_#t~ret65;havoc main_#t~ret65; {2867#true} is VALID [2020-07-28 19:06:18,381 INFO L280 TraceCheckUtils]: 4: Hoare triple {2867#true} assume 0 != main_~tmp~10; {2867#true} is VALID [2020-07-28 19:06:18,382 INFO L280 TraceCheckUtils]: 5: Hoare triple {2867#true} ~switchedOnBeforeTS~0 := 0; {2867#true} is VALID [2020-07-28 19:06:18,382 INFO L280 TraceCheckUtils]: 6: Hoare triple {2867#true} havoc test_#t~nondet58, test_#t~nondet59, test_#t~nondet60, test_#t~nondet61, test_~splverifierCounter~0, test_~tmp~8, test_~tmp___0~2, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~8;havoc test_~tmp___0~2;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {2867#true} is VALID [2020-07-28 19:06:18,382 INFO L280 TraceCheckUtils]: 7: Hoare triple {2867#true} assume !false; {2867#true} is VALID [2020-07-28 19:06:18,382 INFO L280 TraceCheckUtils]: 8: Hoare triple {2867#true} assume test_~splverifierCounter~0 < 4; {2867#true} is VALID [2020-07-28 19:06:18,383 INFO L280 TraceCheckUtils]: 9: Hoare triple {2867#true} assume -2147483648 <= test_#t~nondet58 && test_#t~nondet58 <= 2147483647;test_~tmp~8 := test_#t~nondet58;havoc test_#t~nondet58; {2867#true} is VALID [2020-07-28 19:06:18,383 INFO L280 TraceCheckUtils]: 10: Hoare triple {2867#true} assume !(0 != test_~tmp~8); {2867#true} is VALID [2020-07-28 19:06:18,383 INFO L280 TraceCheckUtils]: 11: Hoare triple {2867#true} assume -2147483648 <= test_#t~nondet59 && test_#t~nondet59 <= 2147483647;test_~tmp___0~2 := test_#t~nondet59;havoc test_#t~nondet59; {2867#true} is VALID [2020-07-28 19:06:18,384 INFO L280 TraceCheckUtils]: 12: Hoare triple {2867#true} assume !(0 != test_~tmp___0~2); {2867#true} is VALID [2020-07-28 19:06:18,384 INFO L280 TraceCheckUtils]: 13: Hoare triple {2867#true} assume -2147483648 <= test_#t~nondet60 && test_#t~nondet60 <= 2147483647;test_~tmp___2~0 := test_#t~nondet60;havoc test_#t~nondet60; {2867#true} is VALID [2020-07-28 19:06:18,384 INFO L280 TraceCheckUtils]: 14: Hoare triple {2867#true} assume 0 != test_~tmp___2~0; {2867#true} is VALID [2020-07-28 19:06:18,385 INFO L280 TraceCheckUtils]: 15: Hoare triple {2867#true} havoc __utac_acc__Specification5_spec__2_#t~ret62;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {2867#true} is VALID [2020-07-28 19:06:18,385 INFO L280 TraceCheckUtils]: 16: Hoare triple {2867#true} __utac_acc__Specification5_spec__2_#t~ret62 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret62 && __utac_acc__Specification5_spec__2_#t~ret62 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret62;havoc __utac_acc__Specification5_spec__2_#t~ret62; {2867#true} is VALID [2020-07-28 19:06:18,385 INFO L280 TraceCheckUtils]: 17: Hoare triple {2867#true} assume !(0 != ~pumpRunning~0); {2867#true} is VALID [2020-07-28 19:06:18,385 INFO L280 TraceCheckUtils]: 18: Hoare triple {2867#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret37, processEnvironment_~tmp~5;havoc processEnvironment_~tmp~5; {2867#true} is VALID [2020-07-28 19:06:18,386 INFO L280 TraceCheckUtils]: 19: Hoare triple {2867#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret36, processEnvironment__wrappee__lowWaterSensor_~tmp~4;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~4; {2867#true} is VALID [2020-07-28 19:06:18,386 INFO L280 TraceCheckUtils]: 20: Hoare triple {2867#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret35, processEnvironment__wrappee__highWaterSensor_~tmp~3;havoc processEnvironment__wrappee__highWaterSensor_~tmp~3; {2867#true} is VALID [2020-07-28 19:06:18,390 INFO L280 TraceCheckUtils]: 21: Hoare triple {2867#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret55, isHighWaterLevel_~retValue_acc~5, isHighWaterLevel_~tmp~6, isHighWaterLevel_~tmp___0~0;havoc isHighWaterLevel_~retValue_acc~5;havoc isHighWaterLevel_~tmp~6;havoc isHighWaterLevel_~tmp___0~0;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~12;havoc isHighWaterSensorDry_~retValue_acc~12; {2867#true} is VALID [2020-07-28 19:06:18,390 INFO L280 TraceCheckUtils]: 22: Hoare triple {2867#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~12 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~12; {2867#true} is VALID [2020-07-28 19:06:18,391 INFO L280 TraceCheckUtils]: 23: Hoare triple {2867#true} isHighWaterLevel_#t~ret55 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret55 && isHighWaterLevel_#t~ret55 <= 2147483647;isHighWaterLevel_~tmp~6 := isHighWaterLevel_#t~ret55;havoc isHighWaterLevel_#t~ret55; {2867#true} is VALID [2020-07-28 19:06:18,392 INFO L280 TraceCheckUtils]: 24: Hoare triple {2867#true} assume 0 != isHighWaterLevel_~tmp~6;isHighWaterLevel_~tmp___0~0 := 0; {2869#(= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~0)} is VALID [2020-07-28 19:06:18,393 INFO L280 TraceCheckUtils]: 25: Hoare triple {2869#(= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~0)} isHighWaterLevel_~retValue_acc~5 := isHighWaterLevel_~tmp___0~0;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~5; {2870#(= 0 |ULTIMATE.start_isHighWaterLevel_#res|)} is VALID [2020-07-28 19:06:18,407 INFO L280 TraceCheckUtils]: 26: Hoare triple {2870#(= 0 |ULTIMATE.start_isHighWaterLevel_#res|)} processEnvironment__wrappee__highWaterSensor_#t~ret35 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret35 && processEnvironment__wrappee__highWaterSensor_#t~ret35 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~3 := processEnvironment__wrappee__highWaterSensor_#t~ret35;havoc processEnvironment__wrappee__highWaterSensor_#t~ret35; {2871#(= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~3)} is VALID [2020-07-28 19:06:18,408 INFO L280 TraceCheckUtils]: 27: Hoare triple {2871#(= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~3)} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~3;~pumpRunning~0 := 1; {2868#false} is VALID [2020-07-28 19:06:18,408 INFO L280 TraceCheckUtils]: 28: Hoare triple {2868#false} havoc __utac_acc__Specification5_spec__3_#t~ret63, __utac_acc__Specification5_spec__3_#t~ret64, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {2868#false} is VALID [2020-07-28 19:06:18,408 INFO L280 TraceCheckUtils]: 29: Hoare triple {2868#false} __utac_acc__Specification5_spec__3_#t~ret63 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret63 && __utac_acc__Specification5_spec__3_#t~ret63 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret63;havoc __utac_acc__Specification5_spec__3_#t~ret63; {2868#false} is VALID [2020-07-28 19:06:18,409 INFO L280 TraceCheckUtils]: 30: Hoare triple {2868#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {2868#false} is VALID [2020-07-28 19:06:18,409 INFO L280 TraceCheckUtils]: 31: Hoare triple {2868#false} __utac_acc__Specification5_spec__3_#t~ret64 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret64 && __utac_acc__Specification5_spec__3_#t~ret64 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret64;havoc __utac_acc__Specification5_spec__3_#t~ret64; {2868#false} is VALID [2020-07-28 19:06:18,409 INFO L280 TraceCheckUtils]: 32: Hoare triple {2868#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3; {2868#false} is VALID [2020-07-28 19:06:18,409 INFO L280 TraceCheckUtils]: 33: Hoare triple {2868#false} assume 0 == ~switchedOnBeforeTS~0; {2868#false} is VALID [2020-07-28 19:06:18,410 INFO L280 TraceCheckUtils]: 34: Hoare triple {2868#false} assume !false; {2868#false} is VALID [2020-07-28 19:06:18,411 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:06:18,412 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [227691118] [2020-07-28 19:06:18,412 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:06:18,412 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:06:18,412 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [53252335] [2020-07-28 19:06:18,413 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 35 [2020-07-28 19:06:18,415 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:06:18,415 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:06:18,453 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 35 edges. 35 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:06:18,454 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:06:18,454 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:06:18,454 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:06:18,454 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:06:18,454 INFO L87 Difference]: Start difference. First operand 85 states and 119 transitions. Second operand 5 states. [2020-07-28 19:06:19,261 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:19,262 INFO L93 Difference]: Finished difference Result 223 states and 310 transitions. [2020-07-28 19:06:19,262 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2020-07-28 19:06:19,262 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 35 [2020-07-28 19:06:19,263 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:06:19,264 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:06:19,268 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 248 transitions. [2020-07-28 19:06:19,268 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:06:19,272 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 248 transitions. [2020-07-28 19:06:19,272 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states and 248 transitions. [2020-07-28 19:06:19,560 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 248 edges. 248 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:06:19,566 INFO L225 Difference]: With dead ends: 223 [2020-07-28 19:06:19,566 INFO L226 Difference]: Without dead ends: 145 [2020-07-28 19:06:19,567 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2020-07-28 19:06:19,568 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 145 states. [2020-07-28 19:06:19,661 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 145 to 94. [2020-07-28 19:06:19,661 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:06:19,661 INFO L82 GeneralOperation]: Start isEquivalent. First operand 145 states. Second operand 94 states. [2020-07-28 19:06:19,662 INFO L74 IsIncluded]: Start isIncluded. First operand 145 states. Second operand 94 states. [2020-07-28 19:06:19,662 INFO L87 Difference]: Start difference. First operand 145 states. Second operand 94 states. [2020-07-28 19:06:19,669 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:19,669 INFO L93 Difference]: Finished difference Result 145 states and 195 transitions. [2020-07-28 19:06:19,669 INFO L276 IsEmpty]: Start isEmpty. Operand 145 states and 195 transitions. [2020-07-28 19:06:19,670 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:06:19,670 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:06:19,670 INFO L74 IsIncluded]: Start isIncluded. First operand 94 states. Second operand 145 states. [2020-07-28 19:06:19,670 INFO L87 Difference]: Start difference. First operand 94 states. Second operand 145 states. [2020-07-28 19:06:19,686 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:19,686 INFO L93 Difference]: Finished difference Result 145 states and 195 transitions. [2020-07-28 19:06:19,686 INFO L276 IsEmpty]: Start isEmpty. Operand 145 states and 195 transitions. [2020-07-28 19:06:19,687 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:06:19,687 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:06:19,687 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:06:19,687 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:06:19,687 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 94 states. [2020-07-28 19:06:19,690 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 94 states to 94 states and 128 transitions. [2020-07-28 19:06:19,691 INFO L78 Accepts]: Start accepts. Automaton has 94 states and 128 transitions. Word has length 35 [2020-07-28 19:06:19,691 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:06:19,691 INFO L479 AbstractCegarLoop]: Abstraction has 94 states and 128 transitions. [2020-07-28 19:06:19,691 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:06:19,691 INFO L276 IsEmpty]: Start isEmpty. Operand 94 states and 128 transitions. [2020-07-28 19:06:19,692 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2020-07-28 19:06:19,692 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:06:19,692 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:06:19,692 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2020-07-28 19:06:19,692 INFO L427 AbstractCegarLoop]: === Iteration 6 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:06:19,693 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:06:19,693 INFO L82 PathProgramCache]: Analyzing trace with hash -1410019742, now seen corresponding path program 1 times [2020-07-28 19:06:19,693 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:06:19,693 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [997944028] [2020-07-28 19:06:19,693 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:06:19,715 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:06:19,765 INFO L280 TraceCheckUtils]: 0: Hoare triple {3603#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(13);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string42.base, #t~string42.offset, 1);call write~init~int(110, #t~string42.base, 1 + #t~string42.offset, 1);call write~init~int(0, #t~string42.base, 2 + #t~string42.offset, 1);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string44.base, #t~string44.offset, 1);call write~init~int(102, #t~string44.base, 1 + #t~string44.offset, 1);call write~init~int(102, #t~string44.base, 2 + #t~string44.offset, 1);call write~init~int(0, #t~string44.base, 3 + #t~string44.offset, 1);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string46.base, #t~string46.offset, 1);call write~init~int(80, #t~string46.base, 1 + #t~string46.offset, 1);call write~init~int(117, #t~string46.base, 2 + #t~string46.offset, 1);call write~init~int(109, #t~string46.base, 3 + #t~string46.offset, 1);call write~init~int(112, #t~string46.base, 4 + #t~string46.offset, 1);call write~init~int(58, #t~string46.base, 5 + #t~string46.offset, 1);call write~init~int(0, #t~string46.base, 6 + #t~string46.offset, 1);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string48.base, #t~string48.offset, 1);call write~init~int(110, #t~string48.base, 1 + #t~string48.offset, 1);call write~init~int(0, #t~string48.base, 2 + #t~string48.offset, 1);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string50.base, #t~string50.offset, 1);call write~init~int(102, #t~string50.base, 1 + #t~string50.offset, 1);call write~init~int(102, #t~string50.base, 2 + #t~string50.offset, 1);call write~init~int(0, #t~string50.base, 3 + #t~string50.offset, 1);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string52.base, #t~string52.offset, 1);call write~init~int(32, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 2 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string54.base, #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 1 + #t~string54.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(13);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string69.base, #t~string69.offset, 1);call write~init~int(77, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(101, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(116, #t~string69.base, 3 + #t~string69.offset, 1);call write~init~int(104, #t~string69.base, 4 + #t~string69.offset, 1);call write~init~int(58, #t~string69.base, 5 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 6 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string71.base, #t~string71.offset, 1);call write~init~int(82, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(73, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(84, #t~string71.base, 3 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 4 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string73.base, #t~string73.offset, 1);call write~init~int(75, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 2 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string75.base, #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 1 + #t~string75.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {3605#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:19,766 INFO L280 TraceCheckUtils]: 1: Hoare triple {3605#(= 0 ~pumpRunning~0)} havoc main_#res;havoc main_#t~ret65, main_~retValue_acc~9, main_~tmp~10;havoc main_~retValue_acc~9;havoc main_~tmp~10; {3605#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:19,766 INFO L280 TraceCheckUtils]: 2: Hoare triple {3605#(= 0 ~pumpRunning~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {3605#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:19,767 INFO L280 TraceCheckUtils]: 3: Hoare triple {3605#(= 0 ~pumpRunning~0)} main_#t~ret65 := valid_product_#res;assume -2147483648 <= main_#t~ret65 && main_#t~ret65 <= 2147483647;main_~tmp~10 := main_#t~ret65;havoc main_#t~ret65; {3605#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:19,767 INFO L280 TraceCheckUtils]: 4: Hoare triple {3605#(= 0 ~pumpRunning~0)} assume 0 != main_~tmp~10; {3605#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:19,768 INFO L280 TraceCheckUtils]: 5: Hoare triple {3605#(= 0 ~pumpRunning~0)} ~switchedOnBeforeTS~0 := 0; {3605#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:19,769 INFO L280 TraceCheckUtils]: 6: Hoare triple {3605#(= 0 ~pumpRunning~0)} havoc test_#t~nondet58, test_#t~nondet59, test_#t~nondet60, test_#t~nondet61, test_~splverifierCounter~0, test_~tmp~8, test_~tmp___0~2, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~8;havoc test_~tmp___0~2;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {3605#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:19,769 INFO L280 TraceCheckUtils]: 7: Hoare triple {3605#(= 0 ~pumpRunning~0)} assume !false; {3605#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:19,770 INFO L280 TraceCheckUtils]: 8: Hoare triple {3605#(= 0 ~pumpRunning~0)} assume test_~splverifierCounter~0 < 4; {3605#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:19,770 INFO L280 TraceCheckUtils]: 9: Hoare triple {3605#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet58 && test_#t~nondet58 <= 2147483647;test_~tmp~8 := test_#t~nondet58;havoc test_#t~nondet58; {3605#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:19,771 INFO L280 TraceCheckUtils]: 10: Hoare triple {3605#(= 0 ~pumpRunning~0)} assume !(0 != test_~tmp~8); {3605#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:19,771 INFO L280 TraceCheckUtils]: 11: Hoare triple {3605#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet59 && test_#t~nondet59 <= 2147483647;test_~tmp___0~2 := test_#t~nondet59;havoc test_#t~nondet59; {3605#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:19,772 INFO L280 TraceCheckUtils]: 12: Hoare triple {3605#(= 0 ~pumpRunning~0)} assume !(0 != test_~tmp___0~2); {3605#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:19,772 INFO L280 TraceCheckUtils]: 13: Hoare triple {3605#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet60 && test_#t~nondet60 <= 2147483647;test_~tmp___2~0 := test_#t~nondet60;havoc test_#t~nondet60; {3605#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:19,773 INFO L280 TraceCheckUtils]: 14: Hoare triple {3605#(= 0 ~pumpRunning~0)} assume 0 != test_~tmp___2~0; {3605#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:19,773 INFO L280 TraceCheckUtils]: 15: Hoare triple {3605#(= 0 ~pumpRunning~0)} havoc __utac_acc__Specification5_spec__2_#t~ret62;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {3605#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:19,774 INFO L280 TraceCheckUtils]: 16: Hoare triple {3605#(= 0 ~pumpRunning~0)} __utac_acc__Specification5_spec__2_#t~ret62 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret62 && __utac_acc__Specification5_spec__2_#t~ret62 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret62;havoc __utac_acc__Specification5_spec__2_#t~ret62; {3605#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:19,774 INFO L280 TraceCheckUtils]: 17: Hoare triple {3605#(= 0 ~pumpRunning~0)} assume !(0 != ~pumpRunning~0); {3605#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:19,775 INFO L280 TraceCheckUtils]: 18: Hoare triple {3605#(= 0 ~pumpRunning~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret37, processEnvironment_~tmp~5;havoc processEnvironment_~tmp~5; {3605#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:19,775 INFO L280 TraceCheckUtils]: 19: Hoare triple {3605#(= 0 ~pumpRunning~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret36, processEnvironment__wrappee__lowWaterSensor_~tmp~4;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~4; {3605#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:19,776 INFO L280 TraceCheckUtils]: 20: Hoare triple {3605#(= 0 ~pumpRunning~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret35, processEnvironment__wrappee__highWaterSensor_~tmp~3;havoc processEnvironment__wrappee__highWaterSensor_~tmp~3; {3605#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:19,777 INFO L280 TraceCheckUtils]: 21: Hoare triple {3605#(= 0 ~pumpRunning~0)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret55, isHighWaterLevel_~retValue_acc~5, isHighWaterLevel_~tmp~6, isHighWaterLevel_~tmp___0~0;havoc isHighWaterLevel_~retValue_acc~5;havoc isHighWaterLevel_~tmp~6;havoc isHighWaterLevel_~tmp___0~0;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~12;havoc isHighWaterSensorDry_~retValue_acc~12; {3605#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:19,778 INFO L280 TraceCheckUtils]: 22: Hoare triple {3605#(= 0 ~pumpRunning~0)} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~12 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~12; {3605#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:19,778 INFO L280 TraceCheckUtils]: 23: Hoare triple {3605#(= 0 ~pumpRunning~0)} isHighWaterLevel_#t~ret55 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret55 && isHighWaterLevel_#t~ret55 <= 2147483647;isHighWaterLevel_~tmp~6 := isHighWaterLevel_#t~ret55;havoc isHighWaterLevel_#t~ret55; {3605#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:19,779 INFO L280 TraceCheckUtils]: 24: Hoare triple {3605#(= 0 ~pumpRunning~0)} assume 0 != isHighWaterLevel_~tmp~6;isHighWaterLevel_~tmp___0~0 := 0; {3605#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:19,779 INFO L280 TraceCheckUtils]: 25: Hoare triple {3605#(= 0 ~pumpRunning~0)} isHighWaterLevel_~retValue_acc~5 := isHighWaterLevel_~tmp___0~0;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~5; {3605#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:19,780 INFO L280 TraceCheckUtils]: 26: Hoare triple {3605#(= 0 ~pumpRunning~0)} processEnvironment__wrappee__highWaterSensor_#t~ret35 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret35 && processEnvironment__wrappee__highWaterSensor_#t~ret35 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~3 := processEnvironment__wrappee__highWaterSensor_#t~ret35;havoc processEnvironment__wrappee__highWaterSensor_#t~ret35; {3605#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:19,780 INFO L280 TraceCheckUtils]: 27: Hoare triple {3605#(= 0 ~pumpRunning~0)} assume !(0 != processEnvironment__wrappee__highWaterSensor_~tmp~3); {3605#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:19,781 INFO L280 TraceCheckUtils]: 28: Hoare triple {3605#(= 0 ~pumpRunning~0)} havoc __utac_acc__Specification5_spec__3_#t~ret63, __utac_acc__Specification5_spec__3_#t~ret64, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {3605#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:19,781 INFO L280 TraceCheckUtils]: 29: Hoare triple {3605#(= 0 ~pumpRunning~0)} __utac_acc__Specification5_spec__3_#t~ret63 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret63 && __utac_acc__Specification5_spec__3_#t~ret63 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret63;havoc __utac_acc__Specification5_spec__3_#t~ret63; {3605#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:19,782 INFO L280 TraceCheckUtils]: 30: Hoare triple {3605#(= 0 ~pumpRunning~0)} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {3606#(= 0 |ULTIMATE.start_isPumpRunning_#res|)} is VALID [2020-07-28 19:06:19,783 INFO L280 TraceCheckUtils]: 31: Hoare triple {3606#(= 0 |ULTIMATE.start_isPumpRunning_#res|)} __utac_acc__Specification5_spec__3_#t~ret64 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret64 && __utac_acc__Specification5_spec__3_#t~ret64 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret64;havoc __utac_acc__Specification5_spec__3_#t~ret64; {3607#(= 0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp___0~3)} is VALID [2020-07-28 19:06:19,783 INFO L280 TraceCheckUtils]: 32: Hoare triple {3607#(= 0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp___0~3)} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3; {3604#false} is VALID [2020-07-28 19:06:19,783 INFO L280 TraceCheckUtils]: 33: Hoare triple {3604#false} assume 0 == ~switchedOnBeforeTS~0; {3604#false} is VALID [2020-07-28 19:06:19,784 INFO L280 TraceCheckUtils]: 34: Hoare triple {3604#false} assume !false; {3604#false} is VALID [2020-07-28 19:06:19,786 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:06:19,786 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [997944028] [2020-07-28 19:06:19,786 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:06:19,786 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2020-07-28 19:06:19,786 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2126607027] [2020-07-28 19:06:19,787 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 35 [2020-07-28 19:06:19,787 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:06:19,787 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:06:19,827 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 35 edges. 35 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:06:19,828 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:06:19,828 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:06:19,828 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:06:19,828 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:06:19,828 INFO L87 Difference]: Start difference. First operand 94 states and 128 transitions. Second operand 5 states. [2020-07-28 19:06:20,815 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:20,816 INFO L93 Difference]: Finished difference Result 313 states and 429 transitions. [2020-07-28 19:06:20,816 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2020-07-28 19:06:20,816 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 35 [2020-07-28 19:06:20,817 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:06:20,817 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:06:20,821 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 365 transitions. [2020-07-28 19:06:20,822 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:06:20,825 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 365 transitions. [2020-07-28 19:06:20,825 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 9 states and 365 transitions. [2020-07-28 19:06:21,311 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 365 edges. 365 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:06:21,316 INFO L225 Difference]: With dead ends: 313 [2020-07-28 19:06:21,316 INFO L226 Difference]: Without dead ends: 226 [2020-07-28 19:06:21,317 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2020-07-28 19:06:21,318 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 226 states. [2020-07-28 19:06:21,411 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 226 to 93. [2020-07-28 19:06:21,411 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:06:21,411 INFO L82 GeneralOperation]: Start isEquivalent. First operand 226 states. Second operand 93 states. [2020-07-28 19:06:21,412 INFO L74 IsIncluded]: Start isIncluded. First operand 226 states. Second operand 93 states. [2020-07-28 19:06:21,412 INFO L87 Difference]: Start difference. First operand 226 states. Second operand 93 states. [2020-07-28 19:06:21,419 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:21,420 INFO L93 Difference]: Finished difference Result 226 states and 307 transitions. [2020-07-28 19:06:21,420 INFO L276 IsEmpty]: Start isEmpty. Operand 226 states and 307 transitions. [2020-07-28 19:06:21,421 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:06:21,421 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:06:21,421 INFO L74 IsIncluded]: Start isIncluded. First operand 93 states. Second operand 226 states. [2020-07-28 19:06:21,421 INFO L87 Difference]: Start difference. First operand 93 states. Second operand 226 states. [2020-07-28 19:06:21,430 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:21,431 INFO L93 Difference]: Finished difference Result 226 states and 307 transitions. [2020-07-28 19:06:21,431 INFO L276 IsEmpty]: Start isEmpty. Operand 226 states and 307 transitions. [2020-07-28 19:06:21,431 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:06:21,432 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:06:21,432 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:06:21,432 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:06:21,432 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 93 states. [2020-07-28 19:06:21,434 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 93 states to 93 states and 125 transitions. [2020-07-28 19:06:21,435 INFO L78 Accepts]: Start accepts. Automaton has 93 states and 125 transitions. Word has length 35 [2020-07-28 19:06:21,435 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:06:21,435 INFO L479 AbstractCegarLoop]: Abstraction has 93 states and 125 transitions. [2020-07-28 19:06:21,435 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:06:21,436 INFO L276 IsEmpty]: Start isEmpty. Operand 93 states and 125 transitions. [2020-07-28 19:06:21,437 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2020-07-28 19:06:21,437 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:06:21,437 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:06:21,438 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2020-07-28 19:06:21,438 INFO L427 AbstractCegarLoop]: === Iteration 7 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:06:21,438 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:06:21,438 INFO L82 PathProgramCache]: Analyzing trace with hash -1642418873, now seen corresponding path program 1 times [2020-07-28 19:06:21,439 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:06:21,439 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [22592734] [2020-07-28 19:06:21,440 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:06:21,474 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:06:21,531 INFO L280 TraceCheckUtils]: 0: Hoare triple {4624#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(13);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string42.base, #t~string42.offset, 1);call write~init~int(110, #t~string42.base, 1 + #t~string42.offset, 1);call write~init~int(0, #t~string42.base, 2 + #t~string42.offset, 1);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string44.base, #t~string44.offset, 1);call write~init~int(102, #t~string44.base, 1 + #t~string44.offset, 1);call write~init~int(102, #t~string44.base, 2 + #t~string44.offset, 1);call write~init~int(0, #t~string44.base, 3 + #t~string44.offset, 1);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string46.base, #t~string46.offset, 1);call write~init~int(80, #t~string46.base, 1 + #t~string46.offset, 1);call write~init~int(117, #t~string46.base, 2 + #t~string46.offset, 1);call write~init~int(109, #t~string46.base, 3 + #t~string46.offset, 1);call write~init~int(112, #t~string46.base, 4 + #t~string46.offset, 1);call write~init~int(58, #t~string46.base, 5 + #t~string46.offset, 1);call write~init~int(0, #t~string46.base, 6 + #t~string46.offset, 1);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string48.base, #t~string48.offset, 1);call write~init~int(110, #t~string48.base, 1 + #t~string48.offset, 1);call write~init~int(0, #t~string48.base, 2 + #t~string48.offset, 1);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string50.base, #t~string50.offset, 1);call write~init~int(102, #t~string50.base, 1 + #t~string50.offset, 1);call write~init~int(102, #t~string50.base, 2 + #t~string50.offset, 1);call write~init~int(0, #t~string50.base, 3 + #t~string50.offset, 1);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string52.base, #t~string52.offset, 1);call write~init~int(32, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 2 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string54.base, #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 1 + #t~string54.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(13);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string69.base, #t~string69.offset, 1);call write~init~int(77, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(101, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(116, #t~string69.base, 3 + #t~string69.offset, 1);call write~init~int(104, #t~string69.base, 4 + #t~string69.offset, 1);call write~init~int(58, #t~string69.base, 5 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 6 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string71.base, #t~string71.offset, 1);call write~init~int(82, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(73, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(84, #t~string71.base, 3 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 4 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string73.base, #t~string73.offset, 1);call write~init~int(75, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 2 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string75.base, #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 1 + #t~string75.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {4624#true} is VALID [2020-07-28 19:06:21,532 INFO L280 TraceCheckUtils]: 1: Hoare triple {4624#true} havoc main_#res;havoc main_#t~ret65, main_~retValue_acc~9, main_~tmp~10;havoc main_~retValue_acc~9;havoc main_~tmp~10; {4624#true} is VALID [2020-07-28 19:06:21,532 INFO L280 TraceCheckUtils]: 2: Hoare triple {4624#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {4624#true} is VALID [2020-07-28 19:06:21,532 INFO L280 TraceCheckUtils]: 3: Hoare triple {4624#true} main_#t~ret65 := valid_product_#res;assume -2147483648 <= main_#t~ret65 && main_#t~ret65 <= 2147483647;main_~tmp~10 := main_#t~ret65;havoc main_#t~ret65; {4624#true} is VALID [2020-07-28 19:06:21,532 INFO L280 TraceCheckUtils]: 4: Hoare triple {4624#true} assume 0 != main_~tmp~10; {4624#true} is VALID [2020-07-28 19:06:21,533 INFO L280 TraceCheckUtils]: 5: Hoare triple {4624#true} ~switchedOnBeforeTS~0 := 0; {4624#true} is VALID [2020-07-28 19:06:21,533 INFO L280 TraceCheckUtils]: 6: Hoare triple {4624#true} havoc test_#t~nondet58, test_#t~nondet59, test_#t~nondet60, test_#t~nondet61, test_~splverifierCounter~0, test_~tmp~8, test_~tmp___0~2, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~8;havoc test_~tmp___0~2;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {4624#true} is VALID [2020-07-28 19:06:21,533 INFO L280 TraceCheckUtils]: 7: Hoare triple {4624#true} assume !false; {4624#true} is VALID [2020-07-28 19:06:21,534 INFO L280 TraceCheckUtils]: 8: Hoare triple {4624#true} assume test_~splverifierCounter~0 < 4; {4624#true} is VALID [2020-07-28 19:06:21,535 INFO L280 TraceCheckUtils]: 9: Hoare triple {4624#true} assume -2147483648 <= test_#t~nondet58 && test_#t~nondet58 <= 2147483647;test_~tmp~8 := test_#t~nondet58;havoc test_#t~nondet58; {4624#true} is VALID [2020-07-28 19:06:21,535 INFO L280 TraceCheckUtils]: 10: Hoare triple {4624#true} assume !(0 != test_~tmp~8); {4624#true} is VALID [2020-07-28 19:06:21,535 INFO L280 TraceCheckUtils]: 11: Hoare triple {4624#true} assume -2147483648 <= test_#t~nondet59 && test_#t~nondet59 <= 2147483647;test_~tmp___0~2 := test_#t~nondet59;havoc test_#t~nondet59; {4624#true} is VALID [2020-07-28 19:06:21,535 INFO L280 TraceCheckUtils]: 12: Hoare triple {4624#true} assume !(0 != test_~tmp___0~2); {4624#true} is VALID [2020-07-28 19:06:21,535 INFO L280 TraceCheckUtils]: 13: Hoare triple {4624#true} assume -2147483648 <= test_#t~nondet60 && test_#t~nondet60 <= 2147483647;test_~tmp___2~0 := test_#t~nondet60;havoc test_#t~nondet60; {4624#true} is VALID [2020-07-28 19:06:21,536 INFO L280 TraceCheckUtils]: 14: Hoare triple {4624#true} assume 0 != test_~tmp___2~0; {4624#true} is VALID [2020-07-28 19:06:21,536 INFO L280 TraceCheckUtils]: 15: Hoare triple {4624#true} havoc __utac_acc__Specification5_spec__2_#t~ret62;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {4624#true} is VALID [2020-07-28 19:06:21,536 INFO L280 TraceCheckUtils]: 16: Hoare triple {4624#true} __utac_acc__Specification5_spec__2_#t~ret62 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret62 && __utac_acc__Specification5_spec__2_#t~ret62 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret62;havoc __utac_acc__Specification5_spec__2_#t~ret62; {4624#true} is VALID [2020-07-28 19:06:21,538 INFO L280 TraceCheckUtils]: 17: Hoare triple {4624#true} assume !(0 != ~pumpRunning~0); {4624#true} is VALID [2020-07-28 19:06:21,538 INFO L280 TraceCheckUtils]: 18: Hoare triple {4624#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret37, processEnvironment_~tmp~5;havoc processEnvironment_~tmp~5; {4624#true} is VALID [2020-07-28 19:06:21,538 INFO L280 TraceCheckUtils]: 19: Hoare triple {4624#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret36, processEnvironment__wrappee__lowWaterSensor_~tmp~4;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~4; {4624#true} is VALID [2020-07-28 19:06:21,539 INFO L280 TraceCheckUtils]: 20: Hoare triple {4624#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret35, processEnvironment__wrappee__highWaterSensor_~tmp~3;havoc processEnvironment__wrappee__highWaterSensor_~tmp~3; {4624#true} is VALID [2020-07-28 19:06:21,539 INFO L280 TraceCheckUtils]: 21: Hoare triple {4624#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret55, isHighWaterLevel_~retValue_acc~5, isHighWaterLevel_~tmp~6, isHighWaterLevel_~tmp___0~0;havoc isHighWaterLevel_~retValue_acc~5;havoc isHighWaterLevel_~tmp~6;havoc isHighWaterLevel_~tmp___0~0;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~12;havoc isHighWaterSensorDry_~retValue_acc~12; {4624#true} is VALID [2020-07-28 19:06:21,540 INFO L280 TraceCheckUtils]: 22: Hoare triple {4624#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~12 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~12; {4626#(= 1 |ULTIMATE.start_isHighWaterSensorDry_#res|)} is VALID [2020-07-28 19:06:21,541 INFO L280 TraceCheckUtils]: 23: Hoare triple {4626#(= 1 |ULTIMATE.start_isHighWaterSensorDry_#res|)} isHighWaterLevel_#t~ret55 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret55 && isHighWaterLevel_#t~ret55 <= 2147483647;isHighWaterLevel_~tmp~6 := isHighWaterLevel_#t~ret55;havoc isHighWaterLevel_#t~ret55; {4627#(= ULTIMATE.start_isHighWaterLevel_~tmp~6 1)} is VALID [2020-07-28 19:06:21,542 INFO L280 TraceCheckUtils]: 24: Hoare triple {4627#(= ULTIMATE.start_isHighWaterLevel_~tmp~6 1)} assume !(0 != isHighWaterLevel_~tmp~6);isHighWaterLevel_~tmp___0~0 := 1; {4625#false} is VALID [2020-07-28 19:06:21,542 INFO L280 TraceCheckUtils]: 25: Hoare triple {4625#false} isHighWaterLevel_~retValue_acc~5 := isHighWaterLevel_~tmp___0~0;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~5; {4625#false} is VALID [2020-07-28 19:06:21,542 INFO L280 TraceCheckUtils]: 26: Hoare triple {4625#false} processEnvironment__wrappee__highWaterSensor_#t~ret35 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret35 && processEnvironment__wrappee__highWaterSensor_#t~ret35 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~3 := processEnvironment__wrappee__highWaterSensor_#t~ret35;havoc processEnvironment__wrappee__highWaterSensor_#t~ret35; {4625#false} is VALID [2020-07-28 19:06:21,542 INFO L280 TraceCheckUtils]: 27: Hoare triple {4625#false} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~3;~pumpRunning~0 := 1; {4625#false} is VALID [2020-07-28 19:06:21,543 INFO L280 TraceCheckUtils]: 28: Hoare triple {4625#false} havoc __utac_acc__Specification5_spec__3_#t~ret63, __utac_acc__Specification5_spec__3_#t~ret64, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {4625#false} is VALID [2020-07-28 19:06:21,543 INFO L280 TraceCheckUtils]: 29: Hoare triple {4625#false} __utac_acc__Specification5_spec__3_#t~ret63 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret63 && __utac_acc__Specification5_spec__3_#t~ret63 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret63;havoc __utac_acc__Specification5_spec__3_#t~ret63; {4625#false} is VALID [2020-07-28 19:06:21,543 INFO L280 TraceCheckUtils]: 30: Hoare triple {4625#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {4625#false} is VALID [2020-07-28 19:06:21,543 INFO L280 TraceCheckUtils]: 31: Hoare triple {4625#false} __utac_acc__Specification5_spec__3_#t~ret64 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret64 && __utac_acc__Specification5_spec__3_#t~ret64 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret64;havoc __utac_acc__Specification5_spec__3_#t~ret64; {4625#false} is VALID [2020-07-28 19:06:21,544 INFO L280 TraceCheckUtils]: 32: Hoare triple {4625#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3; {4625#false} is VALID [2020-07-28 19:06:21,544 INFO L280 TraceCheckUtils]: 33: Hoare triple {4625#false} assume 0 == ~switchedOnBeforeTS~0; {4625#false} is VALID [2020-07-28 19:06:21,544 INFO L280 TraceCheckUtils]: 34: Hoare triple {4625#false} assume !false; {4625#false} is VALID [2020-07-28 19:06:21,545 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:06:21,545 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [22592734] [2020-07-28 19:06:21,545 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:06:21,546 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2020-07-28 19:06:21,546 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1539064298] [2020-07-28 19:06:21,552 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 35 [2020-07-28 19:06:21,552 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:06:21,552 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2020-07-28 19:06:21,594 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 35 edges. 35 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:06:21,594 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2020-07-28 19:06:21,594 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:06:21,594 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2020-07-28 19:06:21,594 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2020-07-28 19:06:21,595 INFO L87 Difference]: Start difference. First operand 93 states and 125 transitions. Second operand 4 states. [2020-07-28 19:06:22,128 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:22,129 INFO L93 Difference]: Finished difference Result 217 states and 291 transitions. [2020-07-28 19:06:22,129 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2020-07-28 19:06:22,129 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 35 [2020-07-28 19:06:22,129 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:06:22,130 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 19:06:22,132 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 217 transitions. [2020-07-28 19:06:22,132 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 19:06:22,134 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 217 transitions. [2020-07-28 19:06:22,134 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 217 transitions. [2020-07-28 19:06:22,380 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 217 edges. 217 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:06:22,383 INFO L225 Difference]: With dead ends: 217 [2020-07-28 19:06:22,383 INFO L226 Difference]: Without dead ends: 131 [2020-07-28 19:06:22,384 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:06:22,385 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 131 states. [2020-07-28 19:06:22,516 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 131 to 99. [2020-07-28 19:06:22,516 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:06:22,516 INFO L82 GeneralOperation]: Start isEquivalent. First operand 131 states. Second operand 99 states. [2020-07-28 19:06:22,516 INFO L74 IsIncluded]: Start isIncluded. First operand 131 states. Second operand 99 states. [2020-07-28 19:06:22,517 INFO L87 Difference]: Start difference. First operand 131 states. Second operand 99 states. [2020-07-28 19:06:22,520 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:22,520 INFO L93 Difference]: Finished difference Result 131 states and 170 transitions. [2020-07-28 19:06:22,520 INFO L276 IsEmpty]: Start isEmpty. Operand 131 states and 170 transitions. [2020-07-28 19:06:22,520 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:06:22,521 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:06:22,521 INFO L74 IsIncluded]: Start isIncluded. First operand 99 states. Second operand 131 states. [2020-07-28 19:06:22,521 INFO L87 Difference]: Start difference. First operand 99 states. Second operand 131 states. [2020-07-28 19:06:22,524 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:22,524 INFO L93 Difference]: Finished difference Result 131 states and 170 transitions. [2020-07-28 19:06:22,524 INFO L276 IsEmpty]: Start isEmpty. Operand 131 states and 170 transitions. [2020-07-28 19:06:22,524 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:06:22,525 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:06:22,525 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:06:22,525 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:06:22,525 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 99 states. [2020-07-28 19:06:22,527 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 99 states to 99 states and 131 transitions. [2020-07-28 19:06:22,527 INFO L78 Accepts]: Start accepts. Automaton has 99 states and 131 transitions. Word has length 35 [2020-07-28 19:06:22,528 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:06:22,528 INFO L479 AbstractCegarLoop]: Abstraction has 99 states and 131 transitions. [2020-07-28 19:06:22,528 INFO L480 AbstractCegarLoop]: Interpolant automaton has 4 states. [2020-07-28 19:06:22,528 INFO L276 IsEmpty]: Start isEmpty. Operand 99 states and 131 transitions. [2020-07-28 19:06:22,529 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2020-07-28 19:06:22,529 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:06:22,529 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:06:22,529 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2020-07-28 19:06:22,529 INFO L427 AbstractCegarLoop]: === Iteration 8 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:06:22,530 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:06:22,530 INFO L82 PathProgramCache]: Analyzing trace with hash 2065742409, now seen corresponding path program 1 times [2020-07-28 19:06:22,530 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:06:22,530 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1105634884] [2020-07-28 19:06:22,530 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:06:22,550 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:06:22,586 INFO L280 TraceCheckUtils]: 0: Hoare triple {5330#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(13);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string42.base, #t~string42.offset, 1);call write~init~int(110, #t~string42.base, 1 + #t~string42.offset, 1);call write~init~int(0, #t~string42.base, 2 + #t~string42.offset, 1);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string44.base, #t~string44.offset, 1);call write~init~int(102, #t~string44.base, 1 + #t~string44.offset, 1);call write~init~int(102, #t~string44.base, 2 + #t~string44.offset, 1);call write~init~int(0, #t~string44.base, 3 + #t~string44.offset, 1);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string46.base, #t~string46.offset, 1);call write~init~int(80, #t~string46.base, 1 + #t~string46.offset, 1);call write~init~int(117, #t~string46.base, 2 + #t~string46.offset, 1);call write~init~int(109, #t~string46.base, 3 + #t~string46.offset, 1);call write~init~int(112, #t~string46.base, 4 + #t~string46.offset, 1);call write~init~int(58, #t~string46.base, 5 + #t~string46.offset, 1);call write~init~int(0, #t~string46.base, 6 + #t~string46.offset, 1);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string48.base, #t~string48.offset, 1);call write~init~int(110, #t~string48.base, 1 + #t~string48.offset, 1);call write~init~int(0, #t~string48.base, 2 + #t~string48.offset, 1);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string50.base, #t~string50.offset, 1);call write~init~int(102, #t~string50.base, 1 + #t~string50.offset, 1);call write~init~int(102, #t~string50.base, 2 + #t~string50.offset, 1);call write~init~int(0, #t~string50.base, 3 + #t~string50.offset, 1);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string52.base, #t~string52.offset, 1);call write~init~int(32, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 2 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string54.base, #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 1 + #t~string54.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(13);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string69.base, #t~string69.offset, 1);call write~init~int(77, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(101, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(116, #t~string69.base, 3 + #t~string69.offset, 1);call write~init~int(104, #t~string69.base, 4 + #t~string69.offset, 1);call write~init~int(58, #t~string69.base, 5 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 6 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string71.base, #t~string71.offset, 1);call write~init~int(82, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(73, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(84, #t~string71.base, 3 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 4 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string73.base, #t~string73.offset, 1);call write~init~int(75, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 2 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string75.base, #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 1 + #t~string75.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {5332#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:22,587 INFO L280 TraceCheckUtils]: 1: Hoare triple {5332#(= 1 ~waterLevel~0)} havoc main_#res;havoc main_#t~ret65, main_~retValue_acc~9, main_~tmp~10;havoc main_~retValue_acc~9;havoc main_~tmp~10; {5332#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:22,588 INFO L280 TraceCheckUtils]: 2: Hoare triple {5332#(= 1 ~waterLevel~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {5332#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:22,589 INFO L280 TraceCheckUtils]: 3: Hoare triple {5332#(= 1 ~waterLevel~0)} main_#t~ret65 := valid_product_#res;assume -2147483648 <= main_#t~ret65 && main_#t~ret65 <= 2147483647;main_~tmp~10 := main_#t~ret65;havoc main_#t~ret65; {5332#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:22,589 INFO L280 TraceCheckUtils]: 4: Hoare triple {5332#(= 1 ~waterLevel~0)} assume 0 != main_~tmp~10; {5332#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:22,590 INFO L280 TraceCheckUtils]: 5: Hoare triple {5332#(= 1 ~waterLevel~0)} ~switchedOnBeforeTS~0 := 0; {5332#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:22,591 INFO L280 TraceCheckUtils]: 6: Hoare triple {5332#(= 1 ~waterLevel~0)} havoc test_#t~nondet58, test_#t~nondet59, test_#t~nondet60, test_#t~nondet61, test_~splverifierCounter~0, test_~tmp~8, test_~tmp___0~2, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~8;havoc test_~tmp___0~2;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {5332#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:22,592 INFO L280 TraceCheckUtils]: 7: Hoare triple {5332#(= 1 ~waterLevel~0)} assume !false; {5332#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:22,593 INFO L280 TraceCheckUtils]: 8: Hoare triple {5332#(= 1 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {5332#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:22,593 INFO L280 TraceCheckUtils]: 9: Hoare triple {5332#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet58 && test_#t~nondet58 <= 2147483647;test_~tmp~8 := test_#t~nondet58;havoc test_#t~nondet58; {5332#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:22,594 INFO L280 TraceCheckUtils]: 10: Hoare triple {5332#(= 1 ~waterLevel~0)} assume !(0 != test_~tmp~8); {5332#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:22,595 INFO L280 TraceCheckUtils]: 11: Hoare triple {5332#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet59 && test_#t~nondet59 <= 2147483647;test_~tmp___0~2 := test_#t~nondet59;havoc test_#t~nondet59; {5332#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:22,595 INFO L280 TraceCheckUtils]: 12: Hoare triple {5332#(= 1 ~waterLevel~0)} assume !(0 != test_~tmp___0~2); {5332#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:22,596 INFO L280 TraceCheckUtils]: 13: Hoare triple {5332#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet60 && test_#t~nondet60 <= 2147483647;test_~tmp___2~0 := test_#t~nondet60;havoc test_#t~nondet60; {5332#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:22,597 INFO L280 TraceCheckUtils]: 14: Hoare triple {5332#(= 1 ~waterLevel~0)} assume 0 != test_~tmp___2~0; {5332#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:22,597 INFO L280 TraceCheckUtils]: 15: Hoare triple {5332#(= 1 ~waterLevel~0)} havoc __utac_acc__Specification5_spec__2_#t~ret62;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {5332#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:22,598 INFO L280 TraceCheckUtils]: 16: Hoare triple {5332#(= 1 ~waterLevel~0)} __utac_acc__Specification5_spec__2_#t~ret62 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret62 && __utac_acc__Specification5_spec__2_#t~ret62 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret62;havoc __utac_acc__Specification5_spec__2_#t~ret62; {5332#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:22,599 INFO L280 TraceCheckUtils]: 17: Hoare triple {5332#(= 1 ~waterLevel~0)} assume !(0 != ~pumpRunning~0); {5332#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:22,600 INFO L280 TraceCheckUtils]: 18: Hoare triple {5332#(= 1 ~waterLevel~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret37, processEnvironment_~tmp~5;havoc processEnvironment_~tmp~5; {5332#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:22,600 INFO L280 TraceCheckUtils]: 19: Hoare triple {5332#(= 1 ~waterLevel~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret36, processEnvironment__wrappee__lowWaterSensor_~tmp~4;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~4; {5332#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:22,601 INFO L280 TraceCheckUtils]: 20: Hoare triple {5332#(= 1 ~waterLevel~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret35, processEnvironment__wrappee__highWaterSensor_~tmp~3;havoc processEnvironment__wrappee__highWaterSensor_~tmp~3; {5332#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:22,602 INFO L280 TraceCheckUtils]: 21: Hoare triple {5332#(= 1 ~waterLevel~0)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret55, isHighWaterLevel_~retValue_acc~5, isHighWaterLevel_~tmp~6, isHighWaterLevel_~tmp___0~0;havoc isHighWaterLevel_~retValue_acc~5;havoc isHighWaterLevel_~tmp~6;havoc isHighWaterLevel_~tmp___0~0;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~12;havoc isHighWaterSensorDry_~retValue_acc~12; {5332#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:22,603 INFO L280 TraceCheckUtils]: 22: Hoare triple {5332#(= 1 ~waterLevel~0)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~12 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~12; {5331#false} is VALID [2020-07-28 19:06:22,603 INFO L280 TraceCheckUtils]: 23: Hoare triple {5331#false} isHighWaterLevel_#t~ret55 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret55 && isHighWaterLevel_#t~ret55 <= 2147483647;isHighWaterLevel_~tmp~6 := isHighWaterLevel_#t~ret55;havoc isHighWaterLevel_#t~ret55; {5331#false} is VALID [2020-07-28 19:06:22,603 INFO L280 TraceCheckUtils]: 24: Hoare triple {5331#false} assume !(0 != isHighWaterLevel_~tmp~6);isHighWaterLevel_~tmp___0~0 := 1; {5331#false} is VALID [2020-07-28 19:06:22,603 INFO L280 TraceCheckUtils]: 25: Hoare triple {5331#false} isHighWaterLevel_~retValue_acc~5 := isHighWaterLevel_~tmp___0~0;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~5; {5331#false} is VALID [2020-07-28 19:06:22,603 INFO L280 TraceCheckUtils]: 26: Hoare triple {5331#false} processEnvironment__wrappee__highWaterSensor_#t~ret35 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret35 && processEnvironment__wrappee__highWaterSensor_#t~ret35 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~3 := processEnvironment__wrappee__highWaterSensor_#t~ret35;havoc processEnvironment__wrappee__highWaterSensor_#t~ret35; {5331#false} is VALID [2020-07-28 19:06:22,604 INFO L280 TraceCheckUtils]: 27: Hoare triple {5331#false} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~3;~pumpRunning~0 := 1; {5331#false} is VALID [2020-07-28 19:06:22,604 INFO L280 TraceCheckUtils]: 28: Hoare triple {5331#false} havoc __utac_acc__Specification5_spec__3_#t~ret63, __utac_acc__Specification5_spec__3_#t~ret64, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {5331#false} is VALID [2020-07-28 19:06:22,604 INFO L280 TraceCheckUtils]: 29: Hoare triple {5331#false} __utac_acc__Specification5_spec__3_#t~ret63 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret63 && __utac_acc__Specification5_spec__3_#t~ret63 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret63;havoc __utac_acc__Specification5_spec__3_#t~ret63; {5331#false} is VALID [2020-07-28 19:06:22,605 INFO L280 TraceCheckUtils]: 30: Hoare triple {5331#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {5331#false} is VALID [2020-07-28 19:06:22,605 INFO L280 TraceCheckUtils]: 31: Hoare triple {5331#false} __utac_acc__Specification5_spec__3_#t~ret64 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret64 && __utac_acc__Specification5_spec__3_#t~ret64 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret64;havoc __utac_acc__Specification5_spec__3_#t~ret64; {5331#false} is VALID [2020-07-28 19:06:22,605 INFO L280 TraceCheckUtils]: 32: Hoare triple {5331#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3; {5331#false} is VALID [2020-07-28 19:06:22,605 INFO L280 TraceCheckUtils]: 33: Hoare triple {5331#false} assume 0 == ~switchedOnBeforeTS~0; {5331#false} is VALID [2020-07-28 19:06:22,605 INFO L280 TraceCheckUtils]: 34: Hoare triple {5331#false} assume !false; {5331#false} is VALID [2020-07-28 19:06:22,607 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:06:22,608 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1105634884] [2020-07-28 19:06:22,608 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:06:22,608 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2020-07-28 19:06:22,608 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [207181496] [2020-07-28 19:06:22,609 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 35 [2020-07-28 19:06:22,609 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:06:22,609 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 19:06:22,651 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 35 edges. 35 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:06:22,651 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 19:06:22,651 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:06:22,652 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 19:06:22,652 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:06:22,652 INFO L87 Difference]: Start difference. First operand 99 states and 131 transitions. Second operand 3 states. [2020-07-28 19:06:23,034 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:23,034 INFO L93 Difference]: Finished difference Result 220 states and 292 transitions. [2020-07-28 19:06:23,034 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 19:06:23,034 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 35 [2020-07-28 19:06:23,035 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:06:23,035 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:06:23,037 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 206 transitions. [2020-07-28 19:06:23,037 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:06:23,038 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 206 transitions. [2020-07-28 19:06:23,039 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 206 transitions. [2020-07-28 19:06:23,263 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 206 edges. 206 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:06:23,266 INFO L225 Difference]: With dead ends: 220 [2020-07-28 19:06:23,266 INFO L226 Difference]: Without dead ends: 128 [2020-07-28 19:06:23,267 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:06:23,268 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 128 states. [2020-07-28 19:06:23,440 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 128 to 128. [2020-07-28 19:06:23,440 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:06:23,440 INFO L82 GeneralOperation]: Start isEquivalent. First operand 128 states. Second operand 128 states. [2020-07-28 19:06:23,440 INFO L74 IsIncluded]: Start isIncluded. First operand 128 states. Second operand 128 states. [2020-07-28 19:06:23,440 INFO L87 Difference]: Start difference. First operand 128 states. Second operand 128 states. [2020-07-28 19:06:23,445 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:23,445 INFO L93 Difference]: Finished difference Result 128 states and 166 transitions. [2020-07-28 19:06:23,445 INFO L276 IsEmpty]: Start isEmpty. Operand 128 states and 166 transitions. [2020-07-28 19:06:23,446 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:06:23,446 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:06:23,446 INFO L74 IsIncluded]: Start isIncluded. First operand 128 states. Second operand 128 states. [2020-07-28 19:06:23,446 INFO L87 Difference]: Start difference. First operand 128 states. Second operand 128 states. [2020-07-28 19:06:23,449 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:23,449 INFO L93 Difference]: Finished difference Result 128 states and 166 transitions. [2020-07-28 19:06:23,449 INFO L276 IsEmpty]: Start isEmpty. Operand 128 states and 166 transitions. [2020-07-28 19:06:23,450 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:06:23,450 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:06:23,450 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:06:23,450 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:06:23,450 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 128 states. [2020-07-28 19:06:23,453 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 128 states to 128 states and 166 transitions. [2020-07-28 19:06:23,453 INFO L78 Accepts]: Start accepts. Automaton has 128 states and 166 transitions. Word has length 35 [2020-07-28 19:06:23,453 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:06:23,453 INFO L479 AbstractCegarLoop]: Abstraction has 128 states and 166 transitions. [2020-07-28 19:06:23,453 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 19:06:23,454 INFO L276 IsEmpty]: Start isEmpty. Operand 128 states and 166 transitions. [2020-07-28 19:06:23,454 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2020-07-28 19:06:23,454 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:06:23,454 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:06:23,455 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2020-07-28 19:06:23,455 INFO L427 AbstractCegarLoop]: === Iteration 9 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:06:23,455 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:06:23,455 INFO L82 PathProgramCache]: Analyzing trace with hash 1741083913, now seen corresponding path program 1 times [2020-07-28 19:06:23,455 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:06:23,456 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1332513420] [2020-07-28 19:06:23,456 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:06:23,479 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:06:23,586 INFO L280 TraceCheckUtils]: 0: Hoare triple {6071#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(13);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string42.base, #t~string42.offset, 1);call write~init~int(110, #t~string42.base, 1 + #t~string42.offset, 1);call write~init~int(0, #t~string42.base, 2 + #t~string42.offset, 1);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string44.base, #t~string44.offset, 1);call write~init~int(102, #t~string44.base, 1 + #t~string44.offset, 1);call write~init~int(102, #t~string44.base, 2 + #t~string44.offset, 1);call write~init~int(0, #t~string44.base, 3 + #t~string44.offset, 1);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string46.base, #t~string46.offset, 1);call write~init~int(80, #t~string46.base, 1 + #t~string46.offset, 1);call write~init~int(117, #t~string46.base, 2 + #t~string46.offset, 1);call write~init~int(109, #t~string46.base, 3 + #t~string46.offset, 1);call write~init~int(112, #t~string46.base, 4 + #t~string46.offset, 1);call write~init~int(58, #t~string46.base, 5 + #t~string46.offset, 1);call write~init~int(0, #t~string46.base, 6 + #t~string46.offset, 1);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string48.base, #t~string48.offset, 1);call write~init~int(110, #t~string48.base, 1 + #t~string48.offset, 1);call write~init~int(0, #t~string48.base, 2 + #t~string48.offset, 1);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string50.base, #t~string50.offset, 1);call write~init~int(102, #t~string50.base, 1 + #t~string50.offset, 1);call write~init~int(102, #t~string50.base, 2 + #t~string50.offset, 1);call write~init~int(0, #t~string50.base, 3 + #t~string50.offset, 1);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string52.base, #t~string52.offset, 1);call write~init~int(32, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 2 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string54.base, #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 1 + #t~string54.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(13);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string69.base, #t~string69.offset, 1);call write~init~int(77, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(101, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(116, #t~string69.base, 3 + #t~string69.offset, 1);call write~init~int(104, #t~string69.base, 4 + #t~string69.offset, 1);call write~init~int(58, #t~string69.base, 5 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 6 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string71.base, #t~string71.offset, 1);call write~init~int(82, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(73, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(84, #t~string71.base, 3 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 4 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string73.base, #t~string73.offset, 1);call write~init~int(75, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 2 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string75.base, #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 1 + #t~string75.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {6073#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:23,586 INFO L280 TraceCheckUtils]: 1: Hoare triple {6073#(= 1 ~waterLevel~0)} havoc main_#res;havoc main_#t~ret65, main_~retValue_acc~9, main_~tmp~10;havoc main_~retValue_acc~9;havoc main_~tmp~10; {6073#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:23,587 INFO L280 TraceCheckUtils]: 2: Hoare triple {6073#(= 1 ~waterLevel~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {6073#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:23,588 INFO L280 TraceCheckUtils]: 3: Hoare triple {6073#(= 1 ~waterLevel~0)} main_#t~ret65 := valid_product_#res;assume -2147483648 <= main_#t~ret65 && main_#t~ret65 <= 2147483647;main_~tmp~10 := main_#t~ret65;havoc main_#t~ret65; {6073#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:23,588 INFO L280 TraceCheckUtils]: 4: Hoare triple {6073#(= 1 ~waterLevel~0)} assume 0 != main_~tmp~10; {6073#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:23,589 INFO L280 TraceCheckUtils]: 5: Hoare triple {6073#(= 1 ~waterLevel~0)} ~switchedOnBeforeTS~0 := 0; {6073#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:23,589 INFO L280 TraceCheckUtils]: 6: Hoare triple {6073#(= 1 ~waterLevel~0)} havoc test_#t~nondet58, test_#t~nondet59, test_#t~nondet60, test_#t~nondet61, test_~splverifierCounter~0, test_~tmp~8, test_~tmp___0~2, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~8;havoc test_~tmp___0~2;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {6073#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:23,590 INFO L280 TraceCheckUtils]: 7: Hoare triple {6073#(= 1 ~waterLevel~0)} assume !false; {6073#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:23,590 INFO L280 TraceCheckUtils]: 8: Hoare triple {6073#(= 1 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {6073#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:23,591 INFO L280 TraceCheckUtils]: 9: Hoare triple {6073#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet58 && test_#t~nondet58 <= 2147483647;test_~tmp~8 := test_#t~nondet58;havoc test_#t~nondet58; {6073#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:23,592 INFO L280 TraceCheckUtils]: 10: Hoare triple {6073#(= 1 ~waterLevel~0)} assume 0 != test_~tmp~8; {6073#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:23,592 INFO L280 TraceCheckUtils]: 11: Hoare triple {6073#(= 1 ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {6074#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:23,593 INFO L280 TraceCheckUtils]: 12: Hoare triple {6074#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume -2147483648 <= test_#t~nondet59 && test_#t~nondet59 <= 2147483647;test_~tmp___0~2 := test_#t~nondet59;havoc test_#t~nondet59; {6074#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:23,594 INFO L280 TraceCheckUtils]: 13: Hoare triple {6074#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(0 != test_~tmp___0~2); {6074#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:23,595 INFO L280 TraceCheckUtils]: 14: Hoare triple {6074#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume -2147483648 <= test_#t~nondet60 && test_#t~nondet60 <= 2147483647;test_~tmp___2~0 := test_#t~nondet60;havoc test_#t~nondet60; {6074#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:23,596 INFO L280 TraceCheckUtils]: 15: Hoare triple {6074#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume 0 != test_~tmp___2~0; {6074#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:23,597 INFO L280 TraceCheckUtils]: 16: Hoare triple {6074#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} havoc __utac_acc__Specification5_spec__2_#t~ret62;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {6074#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:23,598 INFO L280 TraceCheckUtils]: 17: Hoare triple {6074#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} __utac_acc__Specification5_spec__2_#t~ret62 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret62 && __utac_acc__Specification5_spec__2_#t~ret62 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret62;havoc __utac_acc__Specification5_spec__2_#t~ret62; {6074#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:23,599 INFO L280 TraceCheckUtils]: 18: Hoare triple {6074#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(0 != ~pumpRunning~0); {6074#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:23,600 INFO L280 TraceCheckUtils]: 19: Hoare triple {6074#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret37, processEnvironment_~tmp~5;havoc processEnvironment_~tmp~5; {6074#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:23,601 INFO L280 TraceCheckUtils]: 20: Hoare triple {6074#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret36, processEnvironment__wrappee__lowWaterSensor_~tmp~4;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~4; {6074#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:23,602 INFO L280 TraceCheckUtils]: 21: Hoare triple {6074#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret35, processEnvironment__wrappee__highWaterSensor_~tmp~3;havoc processEnvironment__wrappee__highWaterSensor_~tmp~3; {6074#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:23,603 INFO L280 TraceCheckUtils]: 22: Hoare triple {6074#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret55, isHighWaterLevel_~retValue_acc~5, isHighWaterLevel_~tmp~6, isHighWaterLevel_~tmp___0~0;havoc isHighWaterLevel_~retValue_acc~5;havoc isHighWaterLevel_~tmp~6;havoc isHighWaterLevel_~tmp___0~0;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~12;havoc isHighWaterSensorDry_~retValue_acc~12; {6074#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:23,604 INFO L280 TraceCheckUtils]: 23: Hoare triple {6074#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~12 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~12; {6074#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:23,605 INFO L280 TraceCheckUtils]: 24: Hoare triple {6074#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} isHighWaterLevel_#t~ret55 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret55 && isHighWaterLevel_#t~ret55 <= 2147483647;isHighWaterLevel_~tmp~6 := isHighWaterLevel_#t~ret55;havoc isHighWaterLevel_#t~ret55; {6074#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:23,606 INFO L280 TraceCheckUtils]: 25: Hoare triple {6074#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(0 != isHighWaterLevel_~tmp~6);isHighWaterLevel_~tmp___0~0 := 1; {6074#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:23,607 INFO L280 TraceCheckUtils]: 26: Hoare triple {6074#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} isHighWaterLevel_~retValue_acc~5 := isHighWaterLevel_~tmp___0~0;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~5; {6074#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:23,608 INFO L280 TraceCheckUtils]: 27: Hoare triple {6074#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} processEnvironment__wrappee__highWaterSensor_#t~ret35 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret35 && processEnvironment__wrappee__highWaterSensor_#t~ret35 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~3 := processEnvironment__wrappee__highWaterSensor_#t~ret35;havoc processEnvironment__wrappee__highWaterSensor_#t~ret35; {6074#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:23,609 INFO L280 TraceCheckUtils]: 28: Hoare triple {6074#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~3;~pumpRunning~0 := 1; {6074#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:23,610 INFO L280 TraceCheckUtils]: 29: Hoare triple {6074#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} havoc __utac_acc__Specification5_spec__3_#t~ret63, __utac_acc__Specification5_spec__3_#t~ret64, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {6075#(and (<= |ULTIMATE.start_getWaterLevel_#res| 2) (<= 2 |ULTIMATE.start_getWaterLevel_#res|))} is VALID [2020-07-28 19:06:23,611 INFO L280 TraceCheckUtils]: 30: Hoare triple {6075#(and (<= |ULTIMATE.start_getWaterLevel_#res| 2) (<= 2 |ULTIMATE.start_getWaterLevel_#res|))} __utac_acc__Specification5_spec__3_#t~ret63 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret63 && __utac_acc__Specification5_spec__3_#t~ret63 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret63;havoc __utac_acc__Specification5_spec__3_#t~ret63; {6076#(and (< 1 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9) (<= ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9 2))} is VALID [2020-07-28 19:06:23,613 INFO L280 TraceCheckUtils]: 31: Hoare triple {6076#(and (< 1 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9) (<= ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9 2))} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {6072#false} is VALID [2020-07-28 19:06:23,613 INFO L280 TraceCheckUtils]: 32: Hoare triple {6072#false} __utac_acc__Specification5_spec__3_#t~ret64 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret64 && __utac_acc__Specification5_spec__3_#t~ret64 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret64;havoc __utac_acc__Specification5_spec__3_#t~ret64; {6072#false} is VALID [2020-07-28 19:06:23,613 INFO L280 TraceCheckUtils]: 33: Hoare triple {6072#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3; {6072#false} is VALID [2020-07-28 19:06:23,613 INFO L280 TraceCheckUtils]: 34: Hoare triple {6072#false} assume 0 == ~switchedOnBeforeTS~0; {6072#false} is VALID [2020-07-28 19:06:23,613 INFO L280 TraceCheckUtils]: 35: Hoare triple {6072#false} assume !false; {6072#false} is VALID [2020-07-28 19:06:23,617 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:06:23,617 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1332513420] [2020-07-28 19:06:23,617 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:06:23,617 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:06:23,618 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [805592369] [2020-07-28 19:06:23,618 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 36 [2020-07-28 19:06:23,619 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:06:23,619 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states. [2020-07-28 19:06:23,666 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 36 edges. 36 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:06:23,667 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2020-07-28 19:06:23,667 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:06:23,667 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2020-07-28 19:06:23,667 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2020-07-28 19:06:23,668 INFO L87 Difference]: Start difference. First operand 128 states and 166 transitions. Second operand 6 states. [2020-07-28 19:06:25,894 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:25,895 INFO L93 Difference]: Finished difference Result 620 states and 827 transitions. [2020-07-28 19:06:25,895 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2020-07-28 19:06:25,895 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 36 [2020-07-28 19:06:25,896 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:06:25,896 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 19:06:25,899 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 525 transitions. [2020-07-28 19:06:25,899 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 19:06:25,904 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 525 transitions. [2020-07-28 19:06:25,904 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 10 states and 525 transitions. [2020-07-28 19:06:26,463 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 525 edges. 525 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:06:26,488 INFO L225 Difference]: With dead ends: 620 [2020-07-28 19:06:26,488 INFO L226 Difference]: Without dead ends: 528 [2020-07-28 19:06:26,489 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=34, Invalid=76, Unknown=0, NotChecked=0, Total=110 [2020-07-28 19:06:26,490 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 528 states. [2020-07-28 19:06:26,872 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 528 to 222. [2020-07-28 19:06:26,872 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:06:26,872 INFO L82 GeneralOperation]: Start isEquivalent. First operand 528 states. Second operand 222 states. [2020-07-28 19:06:26,872 INFO L74 IsIncluded]: Start isIncluded. First operand 528 states. Second operand 222 states. [2020-07-28 19:06:26,873 INFO L87 Difference]: Start difference. First operand 528 states. Second operand 222 states. [2020-07-28 19:06:26,893 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:26,893 INFO L93 Difference]: Finished difference Result 528 states and 678 transitions. [2020-07-28 19:06:26,893 INFO L276 IsEmpty]: Start isEmpty. Operand 528 states and 678 transitions. [2020-07-28 19:06:26,895 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:06:26,895 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:06:26,896 INFO L74 IsIncluded]: Start isIncluded. First operand 222 states. Second operand 528 states. [2020-07-28 19:06:26,896 INFO L87 Difference]: Start difference. First operand 222 states. Second operand 528 states. [2020-07-28 19:06:26,917 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:26,918 INFO L93 Difference]: Finished difference Result 528 states and 678 transitions. [2020-07-28 19:06:26,918 INFO L276 IsEmpty]: Start isEmpty. Operand 528 states and 678 transitions. [2020-07-28 19:06:26,919 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:06:26,919 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:06:26,920 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:06:26,920 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:06:26,920 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 222 states. [2020-07-28 19:06:26,927 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 222 states to 222 states and 288 transitions. [2020-07-28 19:06:26,928 INFO L78 Accepts]: Start accepts. Automaton has 222 states and 288 transitions. Word has length 36 [2020-07-28 19:06:26,928 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:06:26,928 INFO L479 AbstractCegarLoop]: Abstraction has 222 states and 288 transitions. [2020-07-28 19:06:26,928 INFO L480 AbstractCegarLoop]: Interpolant automaton has 6 states. [2020-07-28 19:06:26,928 INFO L276 IsEmpty]: Start isEmpty. Operand 222 states and 288 transitions. [2020-07-28 19:06:26,930 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2020-07-28 19:06:26,930 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:06:26,931 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:06:26,931 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2020-07-28 19:06:26,932 INFO L427 AbstractCegarLoop]: === Iteration 10 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:06:26,932 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:06:26,932 INFO L82 PathProgramCache]: Analyzing trace with hash -905921982, now seen corresponding path program 1 times [2020-07-28 19:06:26,932 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:06:26,932 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [166744820] [2020-07-28 19:06:26,933 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:06:26,978 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:06:27,084 INFO L280 TraceCheckUtils]: 0: Hoare triple {8304#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(13);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string42.base, #t~string42.offset, 1);call write~init~int(110, #t~string42.base, 1 + #t~string42.offset, 1);call write~init~int(0, #t~string42.base, 2 + #t~string42.offset, 1);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string44.base, #t~string44.offset, 1);call write~init~int(102, #t~string44.base, 1 + #t~string44.offset, 1);call write~init~int(102, #t~string44.base, 2 + #t~string44.offset, 1);call write~init~int(0, #t~string44.base, 3 + #t~string44.offset, 1);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string46.base, #t~string46.offset, 1);call write~init~int(80, #t~string46.base, 1 + #t~string46.offset, 1);call write~init~int(117, #t~string46.base, 2 + #t~string46.offset, 1);call write~init~int(109, #t~string46.base, 3 + #t~string46.offset, 1);call write~init~int(112, #t~string46.base, 4 + #t~string46.offset, 1);call write~init~int(58, #t~string46.base, 5 + #t~string46.offset, 1);call write~init~int(0, #t~string46.base, 6 + #t~string46.offset, 1);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string48.base, #t~string48.offset, 1);call write~init~int(110, #t~string48.base, 1 + #t~string48.offset, 1);call write~init~int(0, #t~string48.base, 2 + #t~string48.offset, 1);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string50.base, #t~string50.offset, 1);call write~init~int(102, #t~string50.base, 1 + #t~string50.offset, 1);call write~init~int(102, #t~string50.base, 2 + #t~string50.offset, 1);call write~init~int(0, #t~string50.base, 3 + #t~string50.offset, 1);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string52.base, #t~string52.offset, 1);call write~init~int(32, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 2 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string54.base, #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 1 + #t~string54.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(13);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string69.base, #t~string69.offset, 1);call write~init~int(77, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(101, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(116, #t~string69.base, 3 + #t~string69.offset, 1);call write~init~int(104, #t~string69.base, 4 + #t~string69.offset, 1);call write~init~int(58, #t~string69.base, 5 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 6 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string71.base, #t~string71.offset, 1);call write~init~int(82, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(73, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(84, #t~string71.base, 3 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 4 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string73.base, #t~string73.offset, 1);call write~init~int(75, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 2 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string75.base, #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 1 + #t~string75.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {8306#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:06:27,089 INFO L280 TraceCheckUtils]: 1: Hoare triple {8306#(= 1 ~systemActive~0)} havoc main_#res;havoc main_#t~ret65, main_~retValue_acc~9, main_~tmp~10;havoc main_~retValue_acc~9;havoc main_~tmp~10; {8306#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:06:27,090 INFO L280 TraceCheckUtils]: 2: Hoare triple {8306#(= 1 ~systemActive~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {8306#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:06:27,091 INFO L280 TraceCheckUtils]: 3: Hoare triple {8306#(= 1 ~systemActive~0)} main_#t~ret65 := valid_product_#res;assume -2147483648 <= main_#t~ret65 && main_#t~ret65 <= 2147483647;main_~tmp~10 := main_#t~ret65;havoc main_#t~ret65; {8306#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:06:27,091 INFO L280 TraceCheckUtils]: 4: Hoare triple {8306#(= 1 ~systemActive~0)} assume 0 != main_~tmp~10; {8306#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:06:27,092 INFO L280 TraceCheckUtils]: 5: Hoare triple {8306#(= 1 ~systemActive~0)} ~switchedOnBeforeTS~0 := 0; {8306#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:06:27,094 INFO L280 TraceCheckUtils]: 6: Hoare triple {8306#(= 1 ~systemActive~0)} havoc test_#t~nondet58, test_#t~nondet59, test_#t~nondet60, test_#t~nondet61, test_~splverifierCounter~0, test_~tmp~8, test_~tmp___0~2, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~8;havoc test_~tmp___0~2;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {8306#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:06:27,095 INFO L280 TraceCheckUtils]: 7: Hoare triple {8306#(= 1 ~systemActive~0)} assume !false; {8306#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:06:27,096 INFO L280 TraceCheckUtils]: 8: Hoare triple {8306#(= 1 ~systemActive~0)} assume test_~splverifierCounter~0 < 4; {8306#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:06:27,096 INFO L280 TraceCheckUtils]: 9: Hoare triple {8306#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet58 && test_#t~nondet58 <= 2147483647;test_~tmp~8 := test_#t~nondet58;havoc test_#t~nondet58; {8306#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:06:27,097 INFO L280 TraceCheckUtils]: 10: Hoare triple {8306#(= 1 ~systemActive~0)} assume 0 != test_~tmp~8; {8306#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:06:27,098 INFO L280 TraceCheckUtils]: 11: Hoare triple {8306#(= 1 ~systemActive~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {8306#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:06:27,098 INFO L280 TraceCheckUtils]: 12: Hoare triple {8306#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet59 && test_#t~nondet59 <= 2147483647;test_~tmp___0~2 := test_#t~nondet59;havoc test_#t~nondet59; {8306#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:06:27,099 INFO L280 TraceCheckUtils]: 13: Hoare triple {8306#(= 1 ~systemActive~0)} assume !(0 != test_~tmp___0~2); {8306#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:06:27,099 INFO L280 TraceCheckUtils]: 14: Hoare triple {8306#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet60 && test_#t~nondet60 <= 2147483647;test_~tmp___2~0 := test_#t~nondet60;havoc test_#t~nondet60; {8306#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:06:27,100 INFO L280 TraceCheckUtils]: 15: Hoare triple {8306#(= 1 ~systemActive~0)} assume 0 != test_~tmp___2~0; {8306#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:06:27,100 INFO L280 TraceCheckUtils]: 16: Hoare triple {8306#(= 1 ~systemActive~0)} havoc __utac_acc__Specification5_spec__2_#t~ret62;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {8306#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:06:27,101 INFO L280 TraceCheckUtils]: 17: Hoare triple {8306#(= 1 ~systemActive~0)} __utac_acc__Specification5_spec__2_#t~ret62 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret62 && __utac_acc__Specification5_spec__2_#t~ret62 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret62;havoc __utac_acc__Specification5_spec__2_#t~ret62; {8306#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:06:27,101 INFO L280 TraceCheckUtils]: 18: Hoare triple {8306#(= 1 ~systemActive~0)} assume !(0 != ~pumpRunning~0); {8306#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:06:27,102 INFO L280 TraceCheckUtils]: 19: Hoare triple {8306#(= 1 ~systemActive~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret37, processEnvironment_~tmp~5;havoc processEnvironment_~tmp~5; {8304#true} is VALID [2020-07-28 19:06:27,102 INFO L280 TraceCheckUtils]: 20: Hoare triple {8304#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret36, processEnvironment__wrappee__lowWaterSensor_~tmp~4;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~4; {8304#true} is VALID [2020-07-28 19:06:27,102 INFO L280 TraceCheckUtils]: 21: Hoare triple {8304#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret35, processEnvironment__wrappee__highWaterSensor_~tmp~3;havoc processEnvironment__wrappee__highWaterSensor_~tmp~3; {8304#true} is VALID [2020-07-28 19:06:27,102 INFO L280 TraceCheckUtils]: 22: Hoare triple {8304#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret55, isHighWaterLevel_~retValue_acc~5, isHighWaterLevel_~tmp~6, isHighWaterLevel_~tmp___0~0;havoc isHighWaterLevel_~retValue_acc~5;havoc isHighWaterLevel_~tmp~6;havoc isHighWaterLevel_~tmp___0~0;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~12;havoc isHighWaterSensorDry_~retValue_acc~12; {8304#true} is VALID [2020-07-28 19:06:27,103 INFO L280 TraceCheckUtils]: 23: Hoare triple {8304#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~12 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~12; {8304#true} is VALID [2020-07-28 19:06:27,103 INFO L280 TraceCheckUtils]: 24: Hoare triple {8304#true} isHighWaterLevel_#t~ret55 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret55 && isHighWaterLevel_#t~ret55 <= 2147483647;isHighWaterLevel_~tmp~6 := isHighWaterLevel_#t~ret55;havoc isHighWaterLevel_#t~ret55; {8304#true} is VALID [2020-07-28 19:06:27,103 INFO L280 TraceCheckUtils]: 25: Hoare triple {8304#true} assume !(0 != isHighWaterLevel_~tmp~6);isHighWaterLevel_~tmp___0~0 := 1; {8304#true} is VALID [2020-07-28 19:06:27,103 INFO L280 TraceCheckUtils]: 26: Hoare triple {8304#true} isHighWaterLevel_~retValue_acc~5 := isHighWaterLevel_~tmp___0~0;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~5; {8304#true} is VALID [2020-07-28 19:06:27,103 INFO L280 TraceCheckUtils]: 27: Hoare triple {8304#true} processEnvironment__wrappee__highWaterSensor_#t~ret35 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret35 && processEnvironment__wrappee__highWaterSensor_#t~ret35 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~3 := processEnvironment__wrappee__highWaterSensor_#t~ret35;havoc processEnvironment__wrappee__highWaterSensor_#t~ret35; {8304#true} is VALID [2020-07-28 19:06:27,103 INFO L280 TraceCheckUtils]: 28: Hoare triple {8304#true} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~3;~pumpRunning~0 := 1; {8304#true} is VALID [2020-07-28 19:06:27,104 INFO L280 TraceCheckUtils]: 29: Hoare triple {8304#true} havoc __utac_acc__Specification5_spec__3_#t~ret63, __utac_acc__Specification5_spec__3_#t~ret64, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {8304#true} is VALID [2020-07-28 19:06:27,104 INFO L280 TraceCheckUtils]: 30: Hoare triple {8304#true} __utac_acc__Specification5_spec__3_#t~ret63 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret63 && __utac_acc__Specification5_spec__3_#t~ret63 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret63;havoc __utac_acc__Specification5_spec__3_#t~ret63; {8304#true} is VALID [2020-07-28 19:06:27,104 INFO L280 TraceCheckUtils]: 31: Hoare triple {8304#true} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~9); {8304#true} is VALID [2020-07-28 19:06:27,104 INFO L280 TraceCheckUtils]: 32: Hoare triple {8304#true} assume !false; {8304#true} is VALID [2020-07-28 19:06:27,104 INFO L280 TraceCheckUtils]: 33: Hoare triple {8304#true} assume test_~splverifierCounter~0 < 4; {8304#true} is VALID [2020-07-28 19:06:27,105 INFO L280 TraceCheckUtils]: 34: Hoare triple {8304#true} assume -2147483648 <= test_#t~nondet58 && test_#t~nondet58 <= 2147483647;test_~tmp~8 := test_#t~nondet58;havoc test_#t~nondet58; {8304#true} is VALID [2020-07-28 19:06:27,105 INFO L280 TraceCheckUtils]: 35: Hoare triple {8304#true} assume !(0 != test_~tmp~8); {8304#true} is VALID [2020-07-28 19:06:27,105 INFO L280 TraceCheckUtils]: 36: Hoare triple {8304#true} assume -2147483648 <= test_#t~nondet59 && test_#t~nondet59 <= 2147483647;test_~tmp___0~2 := test_#t~nondet59;havoc test_#t~nondet59; {8304#true} is VALID [2020-07-28 19:06:27,105 INFO L280 TraceCheckUtils]: 37: Hoare triple {8304#true} assume !(0 != test_~tmp___0~2); {8304#true} is VALID [2020-07-28 19:06:27,105 INFO L280 TraceCheckUtils]: 38: Hoare triple {8304#true} assume -2147483648 <= test_#t~nondet60 && test_#t~nondet60 <= 2147483647;test_~tmp___2~0 := test_#t~nondet60;havoc test_#t~nondet60; {8304#true} is VALID [2020-07-28 19:06:27,106 INFO L280 TraceCheckUtils]: 39: Hoare triple {8304#true} assume 0 != test_~tmp___2~0; {8304#true} is VALID [2020-07-28 19:06:27,106 INFO L280 TraceCheckUtils]: 40: Hoare triple {8304#true} havoc __utac_acc__Specification5_spec__2_#t~ret62;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {8304#true} is VALID [2020-07-28 19:06:27,106 INFO L280 TraceCheckUtils]: 41: Hoare triple {8304#true} __utac_acc__Specification5_spec__2_#t~ret62 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret62 && __utac_acc__Specification5_spec__2_#t~ret62 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret62;havoc __utac_acc__Specification5_spec__2_#t~ret62; {8304#true} is VALID [2020-07-28 19:06:27,106 INFO L280 TraceCheckUtils]: 42: Hoare triple {8304#true} assume 0 != ~pumpRunning~0; {8304#true} is VALID [2020-07-28 19:06:27,106 INFO L280 TraceCheckUtils]: 43: Hoare triple {8304#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {8304#true} is VALID [2020-07-28 19:06:27,107 INFO L280 TraceCheckUtils]: 44: Hoare triple {8304#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret37, processEnvironment_~tmp~5;havoc processEnvironment_~tmp~5; {8304#true} is VALID [2020-07-28 19:06:27,107 INFO L280 TraceCheckUtils]: 45: Hoare triple {8304#true} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret38, isMethaneAlarm_~retValue_acc~3;havoc isMethaneAlarm_~retValue_acc~3;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~10;havoc isMethaneLevelCritical_~retValue_acc~10;isMethaneLevelCritical_~retValue_acc~10 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~10; {8304#true} is VALID [2020-07-28 19:06:27,107 INFO L280 TraceCheckUtils]: 46: Hoare triple {8304#true} isMethaneAlarm_#t~ret38 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret38 && isMethaneAlarm_#t~ret38 <= 2147483647;isMethaneAlarm_~retValue_acc~3 := isMethaneAlarm_#t~ret38;havoc isMethaneAlarm_#t~ret38;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~3; {8304#true} is VALID [2020-07-28 19:06:27,107 INFO L280 TraceCheckUtils]: 47: Hoare triple {8304#true} processEnvironment_#t~ret37 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret37 && processEnvironment_#t~ret37 <= 2147483647;processEnvironment_~tmp~5 := processEnvironment_#t~ret37;havoc processEnvironment_#t~ret37; {8304#true} is VALID [2020-07-28 19:06:27,107 INFO L280 TraceCheckUtils]: 48: Hoare triple {8304#true} assume !(0 != processEnvironment_~tmp~5);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret36, processEnvironment__wrappee__lowWaterSensor_~tmp~4;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~4; {8304#true} is VALID [2020-07-28 19:06:27,108 INFO L280 TraceCheckUtils]: 49: Hoare triple {8304#true} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret56, isLowWaterLevel_~retValue_acc~6, isLowWaterLevel_~tmp~7, isLowWaterLevel_~tmp___0~1;havoc isLowWaterLevel_~retValue_acc~6;havoc isLowWaterLevel_~tmp~7;havoc isLowWaterLevel_~tmp___0~1;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~13;havoc isLowWaterSensorDry_~retValue_acc~13;isLowWaterSensorDry_~retValue_acc~13 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~13; {8304#true} is VALID [2020-07-28 19:06:27,108 INFO L280 TraceCheckUtils]: 50: Hoare triple {8304#true} isLowWaterLevel_#t~ret56 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret56 && isLowWaterLevel_#t~ret56 <= 2147483647;isLowWaterLevel_~tmp~7 := isLowWaterLevel_#t~ret56;havoc isLowWaterLevel_#t~ret56; {8304#true} is VALID [2020-07-28 19:06:27,111 INFO L280 TraceCheckUtils]: 51: Hoare triple {8304#true} assume !(0 != isLowWaterLevel_~tmp~7);isLowWaterLevel_~tmp___0~1 := 1; {8307#(not (= 0 ULTIMATE.start_isLowWaterLevel_~tmp___0~1))} is VALID [2020-07-28 19:06:27,112 INFO L280 TraceCheckUtils]: 52: Hoare triple {8307#(not (= 0 ULTIMATE.start_isLowWaterLevel_~tmp___0~1))} isLowWaterLevel_~retValue_acc~6 := isLowWaterLevel_~tmp___0~1;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~6; {8308#(not (= 0 |ULTIMATE.start_isLowWaterLevel_#res|))} is VALID [2020-07-28 19:06:27,113 INFO L280 TraceCheckUtils]: 53: Hoare triple {8308#(not (= 0 |ULTIMATE.start_isLowWaterLevel_#res|))} processEnvironment__wrappee__lowWaterSensor_#t~ret36 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__lowWaterSensor_#t~ret36 && processEnvironment__wrappee__lowWaterSensor_#t~ret36 <= 2147483647;processEnvironment__wrappee__lowWaterSensor_~tmp~4 := processEnvironment__wrappee__lowWaterSensor_#t~ret36;havoc processEnvironment__wrappee__lowWaterSensor_#t~ret36; {8309#(not (= 0 ULTIMATE.start_processEnvironment__wrappee__lowWaterSensor_~tmp~4))} is VALID [2020-07-28 19:06:27,113 INFO L280 TraceCheckUtils]: 54: Hoare triple {8309#(not (= 0 ULTIMATE.start_processEnvironment__wrappee__lowWaterSensor_~tmp~4))} assume !(0 != processEnvironment__wrappee__lowWaterSensor_~tmp~4);havoc processEnvironment__wrappee__highWaterSensor_#t~ret35, processEnvironment__wrappee__highWaterSensor_~tmp~3;havoc processEnvironment__wrappee__highWaterSensor_~tmp~3; {8305#false} is VALID [2020-07-28 19:06:27,113 INFO L280 TraceCheckUtils]: 55: Hoare triple {8305#false} assume !(0 == ~pumpRunning~0); {8305#false} is VALID [2020-07-28 19:06:27,114 INFO L280 TraceCheckUtils]: 56: Hoare triple {8305#false} havoc __utac_acc__Specification5_spec__3_#t~ret63, __utac_acc__Specification5_spec__3_#t~ret64, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {8305#false} is VALID [2020-07-28 19:06:27,114 INFO L280 TraceCheckUtils]: 57: Hoare triple {8305#false} __utac_acc__Specification5_spec__3_#t~ret63 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret63 && __utac_acc__Specification5_spec__3_#t~ret63 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret63;havoc __utac_acc__Specification5_spec__3_#t~ret63; {8305#false} is VALID [2020-07-28 19:06:27,114 INFO L280 TraceCheckUtils]: 58: Hoare triple {8305#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {8305#false} is VALID [2020-07-28 19:06:27,114 INFO L280 TraceCheckUtils]: 59: Hoare triple {8305#false} __utac_acc__Specification5_spec__3_#t~ret64 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret64 && __utac_acc__Specification5_spec__3_#t~ret64 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret64;havoc __utac_acc__Specification5_spec__3_#t~ret64; {8305#false} is VALID [2020-07-28 19:06:27,114 INFO L280 TraceCheckUtils]: 60: Hoare triple {8305#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3; {8305#false} is VALID [2020-07-28 19:06:27,114 INFO L280 TraceCheckUtils]: 61: Hoare triple {8305#false} assume 0 == ~switchedOnBeforeTS~0; {8305#false} is VALID [2020-07-28 19:06:27,115 INFO L280 TraceCheckUtils]: 62: Hoare triple {8305#false} assume !false; {8305#false} is VALID [2020-07-28 19:06:27,119 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 3 proven. 12 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2020-07-28 19:06:27,119 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [166744820] [2020-07-28 19:06:27,119 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1414403566] [2020-07-28 19:06:27,120 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 2 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2020-07-28 19:06:27,295 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:06:27,299 INFO L263 TraceCheckSpWp]: Trace formula consists of 441 conjuncts, 5 conjunts are in the unsatisfiable core [2020-07-28 19:06:27,332 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:06:27,341 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2020-07-28 19:06:27,587 INFO L280 TraceCheckUtils]: 0: Hoare triple {8304#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(13);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string42.base, #t~string42.offset, 1);call write~init~int(110, #t~string42.base, 1 + #t~string42.offset, 1);call write~init~int(0, #t~string42.base, 2 + #t~string42.offset, 1);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string44.base, #t~string44.offset, 1);call write~init~int(102, #t~string44.base, 1 + #t~string44.offset, 1);call write~init~int(102, #t~string44.base, 2 + #t~string44.offset, 1);call write~init~int(0, #t~string44.base, 3 + #t~string44.offset, 1);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string46.base, #t~string46.offset, 1);call write~init~int(80, #t~string46.base, 1 + #t~string46.offset, 1);call write~init~int(117, #t~string46.base, 2 + #t~string46.offset, 1);call write~init~int(109, #t~string46.base, 3 + #t~string46.offset, 1);call write~init~int(112, #t~string46.base, 4 + #t~string46.offset, 1);call write~init~int(58, #t~string46.base, 5 + #t~string46.offset, 1);call write~init~int(0, #t~string46.base, 6 + #t~string46.offset, 1);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string48.base, #t~string48.offset, 1);call write~init~int(110, #t~string48.base, 1 + #t~string48.offset, 1);call write~init~int(0, #t~string48.base, 2 + #t~string48.offset, 1);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string50.base, #t~string50.offset, 1);call write~init~int(102, #t~string50.base, 1 + #t~string50.offset, 1);call write~init~int(102, #t~string50.base, 2 + #t~string50.offset, 1);call write~init~int(0, #t~string50.base, 3 + #t~string50.offset, 1);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string52.base, #t~string52.offset, 1);call write~init~int(32, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 2 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string54.base, #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 1 + #t~string54.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(13);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string69.base, #t~string69.offset, 1);call write~init~int(77, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(101, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(116, #t~string69.base, 3 + #t~string69.offset, 1);call write~init~int(104, #t~string69.base, 4 + #t~string69.offset, 1);call write~init~int(58, #t~string69.base, 5 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 6 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string71.base, #t~string71.offset, 1);call write~init~int(82, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(73, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(84, #t~string71.base, 3 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 4 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string73.base, #t~string73.offset, 1);call write~init~int(75, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 2 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string75.base, #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 1 + #t~string75.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {8304#true} is VALID [2020-07-28 19:06:27,588 INFO L280 TraceCheckUtils]: 1: Hoare triple {8304#true} havoc main_#res;havoc main_#t~ret65, main_~retValue_acc~9, main_~tmp~10;havoc main_~retValue_acc~9;havoc main_~tmp~10; {8304#true} is VALID [2020-07-28 19:06:27,588 INFO L280 TraceCheckUtils]: 2: Hoare triple {8304#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {8304#true} is VALID [2020-07-28 19:06:27,588 INFO L280 TraceCheckUtils]: 3: Hoare triple {8304#true} main_#t~ret65 := valid_product_#res;assume -2147483648 <= main_#t~ret65 && main_#t~ret65 <= 2147483647;main_~tmp~10 := main_#t~ret65;havoc main_#t~ret65; {8304#true} is VALID [2020-07-28 19:06:27,589 INFO L280 TraceCheckUtils]: 4: Hoare triple {8304#true} assume 0 != main_~tmp~10; {8304#true} is VALID [2020-07-28 19:06:27,589 INFO L280 TraceCheckUtils]: 5: Hoare triple {8304#true} ~switchedOnBeforeTS~0 := 0; {8304#true} is VALID [2020-07-28 19:06:27,589 INFO L280 TraceCheckUtils]: 6: Hoare triple {8304#true} havoc test_#t~nondet58, test_#t~nondet59, test_#t~nondet60, test_#t~nondet61, test_~splverifierCounter~0, test_~tmp~8, test_~tmp___0~2, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~8;havoc test_~tmp___0~2;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {8304#true} is VALID [2020-07-28 19:06:27,589 INFO L280 TraceCheckUtils]: 7: Hoare triple {8304#true} assume !false; {8304#true} is VALID [2020-07-28 19:06:27,590 INFO L280 TraceCheckUtils]: 8: Hoare triple {8304#true} assume test_~splverifierCounter~0 < 4; {8304#true} is VALID [2020-07-28 19:06:27,590 INFO L280 TraceCheckUtils]: 9: Hoare triple {8304#true} assume -2147483648 <= test_#t~nondet58 && test_#t~nondet58 <= 2147483647;test_~tmp~8 := test_#t~nondet58;havoc test_#t~nondet58; {8304#true} is VALID [2020-07-28 19:06:27,590 INFO L280 TraceCheckUtils]: 10: Hoare triple {8304#true} assume 0 != test_~tmp~8; {8304#true} is VALID [2020-07-28 19:06:27,590 INFO L280 TraceCheckUtils]: 11: Hoare triple {8304#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {8304#true} is VALID [2020-07-28 19:06:27,590 INFO L280 TraceCheckUtils]: 12: Hoare triple {8304#true} assume -2147483648 <= test_#t~nondet59 && test_#t~nondet59 <= 2147483647;test_~tmp___0~2 := test_#t~nondet59;havoc test_#t~nondet59; {8304#true} is VALID [2020-07-28 19:06:27,591 INFO L280 TraceCheckUtils]: 13: Hoare triple {8304#true} assume !(0 != test_~tmp___0~2); {8304#true} is VALID [2020-07-28 19:06:27,591 INFO L280 TraceCheckUtils]: 14: Hoare triple {8304#true} assume -2147483648 <= test_#t~nondet60 && test_#t~nondet60 <= 2147483647;test_~tmp___2~0 := test_#t~nondet60;havoc test_#t~nondet60; {8304#true} is VALID [2020-07-28 19:06:27,591 INFO L280 TraceCheckUtils]: 15: Hoare triple {8304#true} assume 0 != test_~tmp___2~0; {8304#true} is VALID [2020-07-28 19:06:27,597 INFO L280 TraceCheckUtils]: 16: Hoare triple {8304#true} havoc __utac_acc__Specification5_spec__2_#t~ret62;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {8304#true} is VALID [2020-07-28 19:06:27,597 INFO L280 TraceCheckUtils]: 17: Hoare triple {8304#true} __utac_acc__Specification5_spec__2_#t~ret62 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret62 && __utac_acc__Specification5_spec__2_#t~ret62 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret62;havoc __utac_acc__Specification5_spec__2_#t~ret62; {8304#true} is VALID [2020-07-28 19:06:27,597 INFO L280 TraceCheckUtils]: 18: Hoare triple {8304#true} assume !(0 != ~pumpRunning~0); {8304#true} is VALID [2020-07-28 19:06:27,597 INFO L280 TraceCheckUtils]: 19: Hoare triple {8304#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret37, processEnvironment_~tmp~5;havoc processEnvironment_~tmp~5; {8304#true} is VALID [2020-07-28 19:06:27,597 INFO L280 TraceCheckUtils]: 20: Hoare triple {8304#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret36, processEnvironment__wrappee__lowWaterSensor_~tmp~4;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~4; {8304#true} is VALID [2020-07-28 19:06:27,598 INFO L280 TraceCheckUtils]: 21: Hoare triple {8304#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret35, processEnvironment__wrappee__highWaterSensor_~tmp~3;havoc processEnvironment__wrappee__highWaterSensor_~tmp~3; {8304#true} is VALID [2020-07-28 19:06:27,598 INFO L280 TraceCheckUtils]: 22: Hoare triple {8304#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret55, isHighWaterLevel_~retValue_acc~5, isHighWaterLevel_~tmp~6, isHighWaterLevel_~tmp___0~0;havoc isHighWaterLevel_~retValue_acc~5;havoc isHighWaterLevel_~tmp~6;havoc isHighWaterLevel_~tmp___0~0;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~12;havoc isHighWaterSensorDry_~retValue_acc~12; {8304#true} is VALID [2020-07-28 19:06:27,598 INFO L280 TraceCheckUtils]: 23: Hoare triple {8304#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~12 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~12; {8304#true} is VALID [2020-07-28 19:06:27,598 INFO L280 TraceCheckUtils]: 24: Hoare triple {8304#true} isHighWaterLevel_#t~ret55 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret55 && isHighWaterLevel_#t~ret55 <= 2147483647;isHighWaterLevel_~tmp~6 := isHighWaterLevel_#t~ret55;havoc isHighWaterLevel_#t~ret55; {8304#true} is VALID [2020-07-28 19:06:27,599 INFO L280 TraceCheckUtils]: 25: Hoare triple {8304#true} assume !(0 != isHighWaterLevel_~tmp~6);isHighWaterLevel_~tmp___0~0 := 1; {8304#true} is VALID [2020-07-28 19:06:27,599 INFO L280 TraceCheckUtils]: 26: Hoare triple {8304#true} isHighWaterLevel_~retValue_acc~5 := isHighWaterLevel_~tmp___0~0;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~5; {8304#true} is VALID [2020-07-28 19:06:27,599 INFO L280 TraceCheckUtils]: 27: Hoare triple {8304#true} processEnvironment__wrappee__highWaterSensor_#t~ret35 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret35 && processEnvironment__wrappee__highWaterSensor_#t~ret35 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~3 := processEnvironment__wrappee__highWaterSensor_#t~ret35;havoc processEnvironment__wrappee__highWaterSensor_#t~ret35; {8304#true} is VALID [2020-07-28 19:06:27,603 INFO L280 TraceCheckUtils]: 28: Hoare triple {8304#true} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~3;~pumpRunning~0 := 1; {8397#(<= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:06:27,603 INFO L280 TraceCheckUtils]: 29: Hoare triple {8397#(<= 1 ~pumpRunning~0)} havoc __utac_acc__Specification5_spec__3_#t~ret63, __utac_acc__Specification5_spec__3_#t~ret64, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {8397#(<= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:06:27,604 INFO L280 TraceCheckUtils]: 30: Hoare triple {8397#(<= 1 ~pumpRunning~0)} __utac_acc__Specification5_spec__3_#t~ret63 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret63 && __utac_acc__Specification5_spec__3_#t~ret63 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret63;havoc __utac_acc__Specification5_spec__3_#t~ret63; {8397#(<= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:06:27,605 INFO L280 TraceCheckUtils]: 31: Hoare triple {8397#(<= 1 ~pumpRunning~0)} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~9); {8397#(<= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:06:27,605 INFO L280 TraceCheckUtils]: 32: Hoare triple {8397#(<= 1 ~pumpRunning~0)} assume !false; {8397#(<= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:06:27,606 INFO L280 TraceCheckUtils]: 33: Hoare triple {8397#(<= 1 ~pumpRunning~0)} assume test_~splverifierCounter~0 < 4; {8397#(<= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:06:27,607 INFO L280 TraceCheckUtils]: 34: Hoare triple {8397#(<= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet58 && test_#t~nondet58 <= 2147483647;test_~tmp~8 := test_#t~nondet58;havoc test_#t~nondet58; {8397#(<= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:06:27,608 INFO L280 TraceCheckUtils]: 35: Hoare triple {8397#(<= 1 ~pumpRunning~0)} assume !(0 != test_~tmp~8); {8397#(<= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:06:27,608 INFO L280 TraceCheckUtils]: 36: Hoare triple {8397#(<= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet59 && test_#t~nondet59 <= 2147483647;test_~tmp___0~2 := test_#t~nondet59;havoc test_#t~nondet59; {8397#(<= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:06:27,609 INFO L280 TraceCheckUtils]: 37: Hoare triple {8397#(<= 1 ~pumpRunning~0)} assume !(0 != test_~tmp___0~2); {8397#(<= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:06:27,610 INFO L280 TraceCheckUtils]: 38: Hoare triple {8397#(<= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet60 && test_#t~nondet60 <= 2147483647;test_~tmp___2~0 := test_#t~nondet60;havoc test_#t~nondet60; {8397#(<= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:06:27,612 INFO L280 TraceCheckUtils]: 39: Hoare triple {8397#(<= 1 ~pumpRunning~0)} assume 0 != test_~tmp___2~0; {8397#(<= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:06:27,613 INFO L280 TraceCheckUtils]: 40: Hoare triple {8397#(<= 1 ~pumpRunning~0)} havoc __utac_acc__Specification5_spec__2_#t~ret62;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {8434#(<= 1 |ULTIMATE.start_isPumpRunning_#res|)} is VALID [2020-07-28 19:06:27,614 INFO L280 TraceCheckUtils]: 41: Hoare triple {8434#(<= 1 |ULTIMATE.start_isPumpRunning_#res|)} __utac_acc__Specification5_spec__2_#t~ret62 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret62 && __utac_acc__Specification5_spec__2_#t~ret62 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret62;havoc __utac_acc__Specification5_spec__2_#t~ret62; {8438#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2020-07-28 19:06:27,614 INFO L280 TraceCheckUtils]: 42: Hoare triple {8438#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != ~pumpRunning~0; {8438#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2020-07-28 19:06:27,619 INFO L280 TraceCheckUtils]: 43: Hoare triple {8438#(<= 1 ~switchedOnBeforeTS~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {8438#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2020-07-28 19:06:27,621 INFO L280 TraceCheckUtils]: 44: Hoare triple {8438#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret37, processEnvironment_~tmp~5;havoc processEnvironment_~tmp~5; {8438#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2020-07-28 19:06:27,622 INFO L280 TraceCheckUtils]: 45: Hoare triple {8438#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret38, isMethaneAlarm_~retValue_acc~3;havoc isMethaneAlarm_~retValue_acc~3;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~10;havoc isMethaneLevelCritical_~retValue_acc~10;isMethaneLevelCritical_~retValue_acc~10 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~10; {8438#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2020-07-28 19:06:27,622 INFO L280 TraceCheckUtils]: 46: Hoare triple {8438#(<= 1 ~switchedOnBeforeTS~0)} isMethaneAlarm_#t~ret38 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret38 && isMethaneAlarm_#t~ret38 <= 2147483647;isMethaneAlarm_~retValue_acc~3 := isMethaneAlarm_#t~ret38;havoc isMethaneAlarm_#t~ret38;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~3; {8438#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2020-07-28 19:06:27,623 INFO L280 TraceCheckUtils]: 47: Hoare triple {8438#(<= 1 ~switchedOnBeforeTS~0)} processEnvironment_#t~ret37 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret37 && processEnvironment_#t~ret37 <= 2147483647;processEnvironment_~tmp~5 := processEnvironment_#t~ret37;havoc processEnvironment_#t~ret37; {8438#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2020-07-28 19:06:27,625 INFO L280 TraceCheckUtils]: 48: Hoare triple {8438#(<= 1 ~switchedOnBeforeTS~0)} assume !(0 != processEnvironment_~tmp~5);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret36, processEnvironment__wrappee__lowWaterSensor_~tmp~4;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~4; {8438#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2020-07-28 19:06:27,626 INFO L280 TraceCheckUtils]: 49: Hoare triple {8438#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret56, isLowWaterLevel_~retValue_acc~6, isLowWaterLevel_~tmp~7, isLowWaterLevel_~tmp___0~1;havoc isLowWaterLevel_~retValue_acc~6;havoc isLowWaterLevel_~tmp~7;havoc isLowWaterLevel_~tmp___0~1;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~13;havoc isLowWaterSensorDry_~retValue_acc~13;isLowWaterSensorDry_~retValue_acc~13 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~13; {8438#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2020-07-28 19:06:27,627 INFO L280 TraceCheckUtils]: 50: Hoare triple {8438#(<= 1 ~switchedOnBeforeTS~0)} isLowWaterLevel_#t~ret56 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret56 && isLowWaterLevel_#t~ret56 <= 2147483647;isLowWaterLevel_~tmp~7 := isLowWaterLevel_#t~ret56;havoc isLowWaterLevel_#t~ret56; {8438#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2020-07-28 19:06:27,632 INFO L280 TraceCheckUtils]: 51: Hoare triple {8438#(<= 1 ~switchedOnBeforeTS~0)} assume !(0 != isLowWaterLevel_~tmp~7);isLowWaterLevel_~tmp___0~1 := 1; {8438#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2020-07-28 19:06:27,633 INFO L280 TraceCheckUtils]: 52: Hoare triple {8438#(<= 1 ~switchedOnBeforeTS~0)} isLowWaterLevel_~retValue_acc~6 := isLowWaterLevel_~tmp___0~1;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~6; {8438#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2020-07-28 19:06:27,634 INFO L280 TraceCheckUtils]: 53: Hoare triple {8438#(<= 1 ~switchedOnBeforeTS~0)} processEnvironment__wrappee__lowWaterSensor_#t~ret36 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__lowWaterSensor_#t~ret36 && processEnvironment__wrappee__lowWaterSensor_#t~ret36 <= 2147483647;processEnvironment__wrappee__lowWaterSensor_~tmp~4 := processEnvironment__wrappee__lowWaterSensor_#t~ret36;havoc processEnvironment__wrappee__lowWaterSensor_#t~ret36; {8438#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2020-07-28 19:06:27,635 INFO L280 TraceCheckUtils]: 54: Hoare triple {8438#(<= 1 ~switchedOnBeforeTS~0)} assume !(0 != processEnvironment__wrappee__lowWaterSensor_~tmp~4);havoc processEnvironment__wrappee__highWaterSensor_#t~ret35, processEnvironment__wrappee__highWaterSensor_~tmp~3;havoc processEnvironment__wrappee__highWaterSensor_~tmp~3; {8438#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2020-07-28 19:06:27,635 INFO L280 TraceCheckUtils]: 55: Hoare triple {8438#(<= 1 ~switchedOnBeforeTS~0)} assume !(0 == ~pumpRunning~0); {8438#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2020-07-28 19:06:27,636 INFO L280 TraceCheckUtils]: 56: Hoare triple {8438#(<= 1 ~switchedOnBeforeTS~0)} havoc __utac_acc__Specification5_spec__3_#t~ret63, __utac_acc__Specification5_spec__3_#t~ret64, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {8438#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2020-07-28 19:06:27,637 INFO L280 TraceCheckUtils]: 57: Hoare triple {8438#(<= 1 ~switchedOnBeforeTS~0)} __utac_acc__Specification5_spec__3_#t~ret63 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret63 && __utac_acc__Specification5_spec__3_#t~ret63 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret63;havoc __utac_acc__Specification5_spec__3_#t~ret63; {8438#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2020-07-28 19:06:27,637 INFO L280 TraceCheckUtils]: 58: Hoare triple {8438#(<= 1 ~switchedOnBeforeTS~0)} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {8438#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2020-07-28 19:06:27,638 INFO L280 TraceCheckUtils]: 59: Hoare triple {8438#(<= 1 ~switchedOnBeforeTS~0)} __utac_acc__Specification5_spec__3_#t~ret64 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret64 && __utac_acc__Specification5_spec__3_#t~ret64 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret64;havoc __utac_acc__Specification5_spec__3_#t~ret64; {8438#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2020-07-28 19:06:27,639 INFO L280 TraceCheckUtils]: 60: Hoare triple {8438#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3; {8438#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2020-07-28 19:06:27,639 INFO L280 TraceCheckUtils]: 61: Hoare triple {8438#(<= 1 ~switchedOnBeforeTS~0)} assume 0 == ~switchedOnBeforeTS~0; {8305#false} is VALID [2020-07-28 19:06:27,639 INFO L280 TraceCheckUtils]: 62: Hoare triple {8305#false} assume !false; {8305#false} is VALID [2020-07-28 19:06:27,647 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 13 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:06:27,647 INFO L220 FreeRefinementEngine]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2020-07-28 19:06:27,647 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5] total 9 [2020-07-28 19:06:27,648 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1468938982] [2020-07-28 19:06:27,648 INFO L78 Accepts]: Start accepts. Automaton has 9 states. Word has length 63 [2020-07-28 19:06:27,649 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:06:27,649 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 9 states. [2020-07-28 19:06:27,812 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 107 edges. 107 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:06:27,813 INFO L459 AbstractCegarLoop]: Interpolant automaton has 9 states [2020-07-28 19:06:27,813 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:06:27,813 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2020-07-28 19:06:27,813 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=57, Unknown=0, NotChecked=0, Total=72 [2020-07-28 19:06:27,813 INFO L87 Difference]: Start difference. First operand 222 states and 288 transitions. Second operand 9 states. [2020-07-28 19:06:31,702 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:31,703 INFO L93 Difference]: Finished difference Result 922 states and 1248 transitions. [2020-07-28 19:06:31,703 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2020-07-28 19:06:31,703 INFO L78 Accepts]: Start accepts. Automaton has 9 states. Word has length 63 [2020-07-28 19:06:31,705 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:06:31,705 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 9 states. [2020-07-28 19:06:31,714 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 22 states to 22 states and 505 transitions. [2020-07-28 19:06:31,715 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 9 states. [2020-07-28 19:06:31,722 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 22 states to 22 states and 505 transitions. [2020-07-28 19:06:31,722 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 22 states and 505 transitions. [2020-07-28 19:06:32,386 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 505 edges. 505 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:06:32,428 INFO L225 Difference]: With dead ends: 922 [2020-07-28 19:06:32,428 INFO L226 Difference]: Without dead ends: 707 [2020-07-28 19:06:32,429 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 102 GetRequests, 76 SyntacticMatches, 0 SemanticMatches, 26 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 147 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=206, Invalid=550, Unknown=0, NotChecked=0, Total=756 [2020-07-28 19:06:32,430 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 707 states. [2020-07-28 19:06:32,908 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 707 to 198. [2020-07-28 19:06:32,908 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:06:32,909 INFO L82 GeneralOperation]: Start isEquivalent. First operand 707 states. Second operand 198 states. [2020-07-28 19:06:32,909 INFO L74 IsIncluded]: Start isIncluded. First operand 707 states. Second operand 198 states. [2020-07-28 19:06:32,909 INFO L87 Difference]: Start difference. First operand 707 states. Second operand 198 states. [2020-07-28 19:06:32,943 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:32,944 INFO L93 Difference]: Finished difference Result 707 states and 948 transitions. [2020-07-28 19:06:32,944 INFO L276 IsEmpty]: Start isEmpty. Operand 707 states and 948 transitions. [2020-07-28 19:06:32,946 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:06:32,946 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:06:32,946 INFO L74 IsIncluded]: Start isIncluded. First operand 198 states. Second operand 707 states. [2020-07-28 19:06:32,947 INFO L87 Difference]: Start difference. First operand 198 states. Second operand 707 states. [2020-07-28 19:06:32,983 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:32,984 INFO L93 Difference]: Finished difference Result 707 states and 948 transitions. [2020-07-28 19:06:32,984 INFO L276 IsEmpty]: Start isEmpty. Operand 707 states and 948 transitions. [2020-07-28 19:06:32,986 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:06:32,986 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:06:32,986 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:06:32,986 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:06:32,987 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 198 states. [2020-07-28 19:06:32,994 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 198 states to 198 states and 250 transitions. [2020-07-28 19:06:32,995 INFO L78 Accepts]: Start accepts. Automaton has 198 states and 250 transitions. Word has length 63 [2020-07-28 19:06:32,996 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:06:32,996 INFO L479 AbstractCegarLoop]: Abstraction has 198 states and 250 transitions. [2020-07-28 19:06:32,996 INFO L480 AbstractCegarLoop]: Interpolant automaton has 9 states. [2020-07-28 19:06:32,996 INFO L276 IsEmpty]: Start isEmpty. Operand 198 states and 250 transitions. [2020-07-28 19:06:32,998 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 108 [2020-07-28 19:06:32,998 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:06:32,999 INFO L422 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:06:33,211 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2020-07-28 19:06:33,212 INFO L427 AbstractCegarLoop]: === Iteration 11 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:06:33,213 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:06:33,213 INFO L82 PathProgramCache]: Analyzing trace with hash 1180397555, now seen corresponding path program 1 times [2020-07-28 19:06:33,213 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:06:33,213 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1049577467] [2020-07-28 19:06:33,213 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:06:33,280 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:06:33,381 INFO L280 TraceCheckUtils]: 0: Hoare triple {11503#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(13);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string42.base, #t~string42.offset, 1);call write~init~int(110, #t~string42.base, 1 + #t~string42.offset, 1);call write~init~int(0, #t~string42.base, 2 + #t~string42.offset, 1);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string44.base, #t~string44.offset, 1);call write~init~int(102, #t~string44.base, 1 + #t~string44.offset, 1);call write~init~int(102, #t~string44.base, 2 + #t~string44.offset, 1);call write~init~int(0, #t~string44.base, 3 + #t~string44.offset, 1);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string46.base, #t~string46.offset, 1);call write~init~int(80, #t~string46.base, 1 + #t~string46.offset, 1);call write~init~int(117, #t~string46.base, 2 + #t~string46.offset, 1);call write~init~int(109, #t~string46.base, 3 + #t~string46.offset, 1);call write~init~int(112, #t~string46.base, 4 + #t~string46.offset, 1);call write~init~int(58, #t~string46.base, 5 + #t~string46.offset, 1);call write~init~int(0, #t~string46.base, 6 + #t~string46.offset, 1);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string48.base, #t~string48.offset, 1);call write~init~int(110, #t~string48.base, 1 + #t~string48.offset, 1);call write~init~int(0, #t~string48.base, 2 + #t~string48.offset, 1);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string50.base, #t~string50.offset, 1);call write~init~int(102, #t~string50.base, 1 + #t~string50.offset, 1);call write~init~int(102, #t~string50.base, 2 + #t~string50.offset, 1);call write~init~int(0, #t~string50.base, 3 + #t~string50.offset, 1);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string52.base, #t~string52.offset, 1);call write~init~int(32, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 2 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string54.base, #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 1 + #t~string54.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(13);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string69.base, #t~string69.offset, 1);call write~init~int(77, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(101, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(116, #t~string69.base, 3 + #t~string69.offset, 1);call write~init~int(104, #t~string69.base, 4 + #t~string69.offset, 1);call write~init~int(58, #t~string69.base, 5 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 6 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string71.base, #t~string71.offset, 1);call write~init~int(82, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(73, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(84, #t~string71.base, 3 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 4 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string73.base, #t~string73.offset, 1);call write~init~int(75, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 2 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string75.base, #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 1 + #t~string75.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {11505#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:33,382 INFO L280 TraceCheckUtils]: 1: Hoare triple {11505#(= 1 ~waterLevel~0)} havoc main_#res;havoc main_#t~ret65, main_~retValue_acc~9, main_~tmp~10;havoc main_~retValue_acc~9;havoc main_~tmp~10; {11505#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:33,382 INFO L280 TraceCheckUtils]: 2: Hoare triple {11505#(= 1 ~waterLevel~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {11505#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:33,383 INFO L280 TraceCheckUtils]: 3: Hoare triple {11505#(= 1 ~waterLevel~0)} main_#t~ret65 := valid_product_#res;assume -2147483648 <= main_#t~ret65 && main_#t~ret65 <= 2147483647;main_~tmp~10 := main_#t~ret65;havoc main_#t~ret65; {11505#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:33,383 INFO L280 TraceCheckUtils]: 4: Hoare triple {11505#(= 1 ~waterLevel~0)} assume 0 != main_~tmp~10; {11505#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:33,384 INFO L280 TraceCheckUtils]: 5: Hoare triple {11505#(= 1 ~waterLevel~0)} ~switchedOnBeforeTS~0 := 0; {11505#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:33,385 INFO L280 TraceCheckUtils]: 6: Hoare triple {11505#(= 1 ~waterLevel~0)} havoc test_#t~nondet58, test_#t~nondet59, test_#t~nondet60, test_#t~nondet61, test_~splverifierCounter~0, test_~tmp~8, test_~tmp___0~2, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~8;havoc test_~tmp___0~2;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {11505#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:33,385 INFO L280 TraceCheckUtils]: 7: Hoare triple {11505#(= 1 ~waterLevel~0)} assume !false; {11505#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:33,386 INFO L280 TraceCheckUtils]: 8: Hoare triple {11505#(= 1 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {11505#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:33,387 INFO L280 TraceCheckUtils]: 9: Hoare triple {11505#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet58 && test_#t~nondet58 <= 2147483647;test_~tmp~8 := test_#t~nondet58;havoc test_#t~nondet58; {11505#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:33,387 INFO L280 TraceCheckUtils]: 10: Hoare triple {11505#(= 1 ~waterLevel~0)} assume 0 != test_~tmp~8; {11505#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:33,388 INFO L280 TraceCheckUtils]: 11: Hoare triple {11505#(= 1 ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {11506#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:33,389 INFO L280 TraceCheckUtils]: 12: Hoare triple {11506#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet59 && test_#t~nondet59 <= 2147483647;test_~tmp___0~2 := test_#t~nondet59;havoc test_#t~nondet59; {11506#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:33,389 INFO L280 TraceCheckUtils]: 13: Hoare triple {11506#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___0~2); {11506#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:33,390 INFO L280 TraceCheckUtils]: 14: Hoare triple {11506#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet60 && test_#t~nondet60 <= 2147483647;test_~tmp___2~0 := test_#t~nondet60;havoc test_#t~nondet60; {11506#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:33,391 INFO L280 TraceCheckUtils]: 15: Hoare triple {11506#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0; {11506#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:33,391 INFO L280 TraceCheckUtils]: 16: Hoare triple {11506#(<= ~waterLevel~0 2)} havoc __utac_acc__Specification5_spec__2_#t~ret62;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {11506#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:33,392 INFO L280 TraceCheckUtils]: 17: Hoare triple {11506#(<= ~waterLevel~0 2)} __utac_acc__Specification5_spec__2_#t~ret62 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret62 && __utac_acc__Specification5_spec__2_#t~ret62 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret62;havoc __utac_acc__Specification5_spec__2_#t~ret62; {11506#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:33,393 INFO L280 TraceCheckUtils]: 18: Hoare triple {11506#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0); {11506#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:33,393 INFO L280 TraceCheckUtils]: 19: Hoare triple {11506#(<= ~waterLevel~0 2)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret37, processEnvironment_~tmp~5;havoc processEnvironment_~tmp~5; {11506#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:33,394 INFO L280 TraceCheckUtils]: 20: Hoare triple {11506#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret36, processEnvironment__wrappee__lowWaterSensor_~tmp~4;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~4; {11506#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:33,395 INFO L280 TraceCheckUtils]: 21: Hoare triple {11506#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret35, processEnvironment__wrappee__highWaterSensor_~tmp~3;havoc processEnvironment__wrappee__highWaterSensor_~tmp~3; {11506#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:33,396 INFO L280 TraceCheckUtils]: 22: Hoare triple {11506#(<= ~waterLevel~0 2)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret55, isHighWaterLevel_~retValue_acc~5, isHighWaterLevel_~tmp~6, isHighWaterLevel_~tmp___0~0;havoc isHighWaterLevel_~retValue_acc~5;havoc isHighWaterLevel_~tmp~6;havoc isHighWaterLevel_~tmp___0~0;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~12;havoc isHighWaterSensorDry_~retValue_acc~12; {11506#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:33,397 INFO L280 TraceCheckUtils]: 23: Hoare triple {11506#(<= ~waterLevel~0 2)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~12 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~12; {11506#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:33,397 INFO L280 TraceCheckUtils]: 24: Hoare triple {11506#(<= ~waterLevel~0 2)} isHighWaterLevel_#t~ret55 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret55 && isHighWaterLevel_#t~ret55 <= 2147483647;isHighWaterLevel_~tmp~6 := isHighWaterLevel_#t~ret55;havoc isHighWaterLevel_#t~ret55; {11506#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:33,398 INFO L280 TraceCheckUtils]: 25: Hoare triple {11506#(<= ~waterLevel~0 2)} assume !(0 != isHighWaterLevel_~tmp~6);isHighWaterLevel_~tmp___0~0 := 1; {11506#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:33,399 INFO L280 TraceCheckUtils]: 26: Hoare triple {11506#(<= ~waterLevel~0 2)} isHighWaterLevel_~retValue_acc~5 := isHighWaterLevel_~tmp___0~0;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~5; {11506#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:33,400 INFO L280 TraceCheckUtils]: 27: Hoare triple {11506#(<= ~waterLevel~0 2)} processEnvironment__wrappee__highWaterSensor_#t~ret35 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret35 && processEnvironment__wrappee__highWaterSensor_#t~ret35 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~3 := processEnvironment__wrappee__highWaterSensor_#t~ret35;havoc processEnvironment__wrappee__highWaterSensor_#t~ret35; {11506#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:33,401 INFO L280 TraceCheckUtils]: 28: Hoare triple {11506#(<= ~waterLevel~0 2)} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~3;~pumpRunning~0 := 1; {11506#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:33,401 INFO L280 TraceCheckUtils]: 29: Hoare triple {11506#(<= ~waterLevel~0 2)} havoc __utac_acc__Specification5_spec__3_#t~ret63, __utac_acc__Specification5_spec__3_#t~ret64, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {11506#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:33,402 INFO L280 TraceCheckUtils]: 30: Hoare triple {11506#(<= ~waterLevel~0 2)} __utac_acc__Specification5_spec__3_#t~ret63 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret63 && __utac_acc__Specification5_spec__3_#t~ret63 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret63;havoc __utac_acc__Specification5_spec__3_#t~ret63; {11506#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:33,403 INFO L280 TraceCheckUtils]: 31: Hoare triple {11506#(<= ~waterLevel~0 2)} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~9); {11506#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:33,404 INFO L280 TraceCheckUtils]: 32: Hoare triple {11506#(<= ~waterLevel~0 2)} assume !false; {11506#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:33,405 INFO L280 TraceCheckUtils]: 33: Hoare triple {11506#(<= ~waterLevel~0 2)} assume test_~splverifierCounter~0 < 4; {11506#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:33,405 INFO L280 TraceCheckUtils]: 34: Hoare triple {11506#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet58 && test_#t~nondet58 <= 2147483647;test_~tmp~8 := test_#t~nondet58;havoc test_#t~nondet58; {11506#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:33,406 INFO L280 TraceCheckUtils]: 35: Hoare triple {11506#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp~8); {11506#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:33,407 INFO L280 TraceCheckUtils]: 36: Hoare triple {11506#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet59 && test_#t~nondet59 <= 2147483647;test_~tmp___0~2 := test_#t~nondet59;havoc test_#t~nondet59; {11506#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:33,407 INFO L280 TraceCheckUtils]: 37: Hoare triple {11506#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___0~2); {11506#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:33,408 INFO L280 TraceCheckUtils]: 38: Hoare triple {11506#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet60 && test_#t~nondet60 <= 2147483647;test_~tmp___2~0 := test_#t~nondet60;havoc test_#t~nondet60; {11506#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:33,409 INFO L280 TraceCheckUtils]: 39: Hoare triple {11506#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0; {11506#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:33,409 INFO L280 TraceCheckUtils]: 40: Hoare triple {11506#(<= ~waterLevel~0 2)} havoc __utac_acc__Specification5_spec__2_#t~ret62;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {11506#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:33,410 INFO L280 TraceCheckUtils]: 41: Hoare triple {11506#(<= ~waterLevel~0 2)} __utac_acc__Specification5_spec__2_#t~ret62 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret62 && __utac_acc__Specification5_spec__2_#t~ret62 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret62;havoc __utac_acc__Specification5_spec__2_#t~ret62; {11506#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:33,411 INFO L280 TraceCheckUtils]: 42: Hoare triple {11506#(<= ~waterLevel~0 2)} assume 0 != ~pumpRunning~0; {11506#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:33,412 INFO L280 TraceCheckUtils]: 43: Hoare triple {11506#(<= ~waterLevel~0 2)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {11507#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:33,413 INFO L280 TraceCheckUtils]: 44: Hoare triple {11507#(<= ~waterLevel~0 1)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret37, processEnvironment_~tmp~5;havoc processEnvironment_~tmp~5; {11507#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:33,413 INFO L280 TraceCheckUtils]: 45: Hoare triple {11507#(<= ~waterLevel~0 1)} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret38, isMethaneAlarm_~retValue_acc~3;havoc isMethaneAlarm_~retValue_acc~3;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~10;havoc isMethaneLevelCritical_~retValue_acc~10;isMethaneLevelCritical_~retValue_acc~10 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~10; {11507#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:33,414 INFO L280 TraceCheckUtils]: 46: Hoare triple {11507#(<= ~waterLevel~0 1)} isMethaneAlarm_#t~ret38 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret38 && isMethaneAlarm_#t~ret38 <= 2147483647;isMethaneAlarm_~retValue_acc~3 := isMethaneAlarm_#t~ret38;havoc isMethaneAlarm_#t~ret38;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~3; {11507#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:33,415 INFO L280 TraceCheckUtils]: 47: Hoare triple {11507#(<= ~waterLevel~0 1)} processEnvironment_#t~ret37 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret37 && processEnvironment_#t~ret37 <= 2147483647;processEnvironment_~tmp~5 := processEnvironment_#t~ret37;havoc processEnvironment_#t~ret37; {11507#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:33,415 INFO L280 TraceCheckUtils]: 48: Hoare triple {11507#(<= ~waterLevel~0 1)} assume !(0 != processEnvironment_~tmp~5);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret36, processEnvironment__wrappee__lowWaterSensor_~tmp~4;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~4; {11507#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:33,416 INFO L280 TraceCheckUtils]: 49: Hoare triple {11507#(<= ~waterLevel~0 1)} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret56, isLowWaterLevel_~retValue_acc~6, isLowWaterLevel_~tmp~7, isLowWaterLevel_~tmp___0~1;havoc isLowWaterLevel_~retValue_acc~6;havoc isLowWaterLevel_~tmp~7;havoc isLowWaterLevel_~tmp___0~1;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~13;havoc isLowWaterSensorDry_~retValue_acc~13;isLowWaterSensorDry_~retValue_acc~13 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~13; {11507#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:33,417 INFO L280 TraceCheckUtils]: 50: Hoare triple {11507#(<= ~waterLevel~0 1)} isLowWaterLevel_#t~ret56 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret56 && isLowWaterLevel_#t~ret56 <= 2147483647;isLowWaterLevel_~tmp~7 := isLowWaterLevel_#t~ret56;havoc isLowWaterLevel_#t~ret56; {11507#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:33,417 INFO L280 TraceCheckUtils]: 51: Hoare triple {11507#(<= ~waterLevel~0 1)} assume 0 != isLowWaterLevel_~tmp~7;isLowWaterLevel_~tmp___0~1 := 0; {11507#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:33,418 INFO L280 TraceCheckUtils]: 52: Hoare triple {11507#(<= ~waterLevel~0 1)} isLowWaterLevel_~retValue_acc~6 := isLowWaterLevel_~tmp___0~1;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~6; {11507#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:33,419 INFO L280 TraceCheckUtils]: 53: Hoare triple {11507#(<= ~waterLevel~0 1)} processEnvironment__wrappee__lowWaterSensor_#t~ret36 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__lowWaterSensor_#t~ret36 && processEnvironment__wrappee__lowWaterSensor_#t~ret36 <= 2147483647;processEnvironment__wrappee__lowWaterSensor_~tmp~4 := processEnvironment__wrappee__lowWaterSensor_#t~ret36;havoc processEnvironment__wrappee__lowWaterSensor_#t~ret36; {11507#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:33,420 INFO L280 TraceCheckUtils]: 54: Hoare triple {11507#(<= ~waterLevel~0 1)} assume !(0 != processEnvironment__wrappee__lowWaterSensor_~tmp~4);havoc processEnvironment__wrappee__highWaterSensor_#t~ret35, processEnvironment__wrappee__highWaterSensor_~tmp~3;havoc processEnvironment__wrappee__highWaterSensor_~tmp~3; {11507#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:33,420 INFO L280 TraceCheckUtils]: 55: Hoare triple {11507#(<= ~waterLevel~0 1)} assume !(0 == ~pumpRunning~0); {11507#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:33,421 INFO L280 TraceCheckUtils]: 56: Hoare triple {11507#(<= ~waterLevel~0 1)} havoc __utac_acc__Specification5_spec__3_#t~ret63, __utac_acc__Specification5_spec__3_#t~ret64, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {11508#(<= |ULTIMATE.start_getWaterLevel_#res| 1)} is VALID [2020-07-28 19:06:33,423 INFO L280 TraceCheckUtils]: 57: Hoare triple {11508#(<= |ULTIMATE.start_getWaterLevel_#res| 1)} __utac_acc__Specification5_spec__3_#t~ret63 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret63 && __utac_acc__Specification5_spec__3_#t~ret63 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret63;havoc __utac_acc__Specification5_spec__3_#t~ret63; {11509#(<= ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9 1)} is VALID [2020-07-28 19:06:33,424 INFO L280 TraceCheckUtils]: 58: Hoare triple {11509#(<= ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9 1)} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~9); {11504#false} is VALID [2020-07-28 19:06:33,424 INFO L280 TraceCheckUtils]: 59: Hoare triple {11504#false} assume !false; {11504#false} is VALID [2020-07-28 19:06:33,424 INFO L280 TraceCheckUtils]: 60: Hoare triple {11504#false} assume test_~splverifierCounter~0 < 4; {11504#false} is VALID [2020-07-28 19:06:33,424 INFO L280 TraceCheckUtils]: 61: Hoare triple {11504#false} assume -2147483648 <= test_#t~nondet58 && test_#t~nondet58 <= 2147483647;test_~tmp~8 := test_#t~nondet58;havoc test_#t~nondet58; {11504#false} is VALID [2020-07-28 19:06:33,424 INFO L280 TraceCheckUtils]: 62: Hoare triple {11504#false} assume !(0 != test_~tmp~8); {11504#false} is VALID [2020-07-28 19:06:33,425 INFO L280 TraceCheckUtils]: 63: Hoare triple {11504#false} assume -2147483648 <= test_#t~nondet59 && test_#t~nondet59 <= 2147483647;test_~tmp___0~2 := test_#t~nondet59;havoc test_#t~nondet59; {11504#false} is VALID [2020-07-28 19:06:33,425 INFO L280 TraceCheckUtils]: 64: Hoare triple {11504#false} assume !(0 != test_~tmp___0~2); {11504#false} is VALID [2020-07-28 19:06:33,425 INFO L280 TraceCheckUtils]: 65: Hoare triple {11504#false} assume -2147483648 <= test_#t~nondet60 && test_#t~nondet60 <= 2147483647;test_~tmp___2~0 := test_#t~nondet60;havoc test_#t~nondet60; {11504#false} is VALID [2020-07-28 19:06:33,426 INFO L280 TraceCheckUtils]: 66: Hoare triple {11504#false} assume 0 != test_~tmp___2~0; {11504#false} is VALID [2020-07-28 19:06:33,426 INFO L280 TraceCheckUtils]: 67: Hoare triple {11504#false} havoc __utac_acc__Specification5_spec__2_#t~ret62;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {11504#false} is VALID [2020-07-28 19:06:33,426 INFO L280 TraceCheckUtils]: 68: Hoare triple {11504#false} __utac_acc__Specification5_spec__2_#t~ret62 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret62 && __utac_acc__Specification5_spec__2_#t~ret62 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret62;havoc __utac_acc__Specification5_spec__2_#t~ret62; {11504#false} is VALID [2020-07-28 19:06:33,426 INFO L280 TraceCheckUtils]: 69: Hoare triple {11504#false} assume 0 != ~pumpRunning~0; {11504#false} is VALID [2020-07-28 19:06:33,426 INFO L280 TraceCheckUtils]: 70: Hoare triple {11504#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {11504#false} is VALID [2020-07-28 19:06:33,426 INFO L280 TraceCheckUtils]: 71: Hoare triple {11504#false} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret37, processEnvironment_~tmp~5;havoc processEnvironment_~tmp~5; {11504#false} is VALID [2020-07-28 19:06:33,427 INFO L280 TraceCheckUtils]: 72: Hoare triple {11504#false} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret38, isMethaneAlarm_~retValue_acc~3;havoc isMethaneAlarm_~retValue_acc~3;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~10;havoc isMethaneLevelCritical_~retValue_acc~10;isMethaneLevelCritical_~retValue_acc~10 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~10; {11504#false} is VALID [2020-07-28 19:06:33,427 INFO L280 TraceCheckUtils]: 73: Hoare triple {11504#false} isMethaneAlarm_#t~ret38 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret38 && isMethaneAlarm_#t~ret38 <= 2147483647;isMethaneAlarm_~retValue_acc~3 := isMethaneAlarm_#t~ret38;havoc isMethaneAlarm_#t~ret38;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~3; {11504#false} is VALID [2020-07-28 19:06:33,427 INFO L280 TraceCheckUtils]: 74: Hoare triple {11504#false} processEnvironment_#t~ret37 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret37 && processEnvironment_#t~ret37 <= 2147483647;processEnvironment_~tmp~5 := processEnvironment_#t~ret37;havoc processEnvironment_#t~ret37; {11504#false} is VALID [2020-07-28 19:06:33,427 INFO L280 TraceCheckUtils]: 75: Hoare triple {11504#false} assume 0 != processEnvironment_~tmp~5;~pumpRunning~0 := 0; {11504#false} is VALID [2020-07-28 19:06:33,427 INFO L280 TraceCheckUtils]: 76: Hoare triple {11504#false} havoc __utac_acc__Specification5_spec__3_#t~ret63, __utac_acc__Specification5_spec__3_#t~ret64, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {11504#false} is VALID [2020-07-28 19:06:33,427 INFO L280 TraceCheckUtils]: 77: Hoare triple {11504#false} __utac_acc__Specification5_spec__3_#t~ret63 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret63 && __utac_acc__Specification5_spec__3_#t~ret63 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret63;havoc __utac_acc__Specification5_spec__3_#t~ret63; {11504#false} is VALID [2020-07-28 19:06:33,428 INFO L280 TraceCheckUtils]: 78: Hoare triple {11504#false} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~9); {11504#false} is VALID [2020-07-28 19:06:33,428 INFO L280 TraceCheckUtils]: 79: Hoare triple {11504#false} assume !false; {11504#false} is VALID [2020-07-28 19:06:33,428 INFO L280 TraceCheckUtils]: 80: Hoare triple {11504#false} assume test_~splverifierCounter~0 < 4; {11504#false} is VALID [2020-07-28 19:06:33,428 INFO L280 TraceCheckUtils]: 81: Hoare triple {11504#false} assume -2147483648 <= test_#t~nondet58 && test_#t~nondet58 <= 2147483647;test_~tmp~8 := test_#t~nondet58;havoc test_#t~nondet58; {11504#false} is VALID [2020-07-28 19:06:33,429 INFO L280 TraceCheckUtils]: 82: Hoare triple {11504#false} assume !(0 != test_~tmp~8); {11504#false} is VALID [2020-07-28 19:06:33,429 INFO L280 TraceCheckUtils]: 83: Hoare triple {11504#false} assume -2147483648 <= test_#t~nondet59 && test_#t~nondet59 <= 2147483647;test_~tmp___0~2 := test_#t~nondet59;havoc test_#t~nondet59; {11504#false} is VALID [2020-07-28 19:06:33,429 INFO L280 TraceCheckUtils]: 84: Hoare triple {11504#false} assume !(0 != test_~tmp___0~2); {11504#false} is VALID [2020-07-28 19:06:33,430 INFO L280 TraceCheckUtils]: 85: Hoare triple {11504#false} assume -2147483648 <= test_#t~nondet60 && test_#t~nondet60 <= 2147483647;test_~tmp___2~0 := test_#t~nondet60;havoc test_#t~nondet60; {11504#false} is VALID [2020-07-28 19:06:33,430 INFO L280 TraceCheckUtils]: 86: Hoare triple {11504#false} assume 0 != test_~tmp___2~0; {11504#false} is VALID [2020-07-28 19:06:33,430 INFO L280 TraceCheckUtils]: 87: Hoare triple {11504#false} havoc __utac_acc__Specification5_spec__2_#t~ret62;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {11504#false} is VALID [2020-07-28 19:06:33,430 INFO L280 TraceCheckUtils]: 88: Hoare triple {11504#false} __utac_acc__Specification5_spec__2_#t~ret62 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret62 && __utac_acc__Specification5_spec__2_#t~ret62 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret62;havoc __utac_acc__Specification5_spec__2_#t~ret62; {11504#false} is VALID [2020-07-28 19:06:33,430 INFO L280 TraceCheckUtils]: 89: Hoare triple {11504#false} assume !(0 != ~pumpRunning~0); {11504#false} is VALID [2020-07-28 19:06:33,431 INFO L280 TraceCheckUtils]: 90: Hoare triple {11504#false} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret37, processEnvironment_~tmp~5;havoc processEnvironment_~tmp~5; {11504#false} is VALID [2020-07-28 19:06:33,431 INFO L280 TraceCheckUtils]: 91: Hoare triple {11504#false} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret36, processEnvironment__wrappee__lowWaterSensor_~tmp~4;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~4; {11504#false} is VALID [2020-07-28 19:06:33,431 INFO L280 TraceCheckUtils]: 92: Hoare triple {11504#false} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret35, processEnvironment__wrappee__highWaterSensor_~tmp~3;havoc processEnvironment__wrappee__highWaterSensor_~tmp~3; {11504#false} is VALID [2020-07-28 19:06:33,432 INFO L280 TraceCheckUtils]: 93: Hoare triple {11504#false} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret55, isHighWaterLevel_~retValue_acc~5, isHighWaterLevel_~tmp~6, isHighWaterLevel_~tmp___0~0;havoc isHighWaterLevel_~retValue_acc~5;havoc isHighWaterLevel_~tmp~6;havoc isHighWaterLevel_~tmp___0~0;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~12;havoc isHighWaterSensorDry_~retValue_acc~12; {11504#false} is VALID [2020-07-28 19:06:33,432 INFO L280 TraceCheckUtils]: 94: Hoare triple {11504#false} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~12 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~12; {11504#false} is VALID [2020-07-28 19:06:33,432 INFO L280 TraceCheckUtils]: 95: Hoare triple {11504#false} isHighWaterLevel_#t~ret55 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret55 && isHighWaterLevel_#t~ret55 <= 2147483647;isHighWaterLevel_~tmp~6 := isHighWaterLevel_#t~ret55;havoc isHighWaterLevel_#t~ret55; {11504#false} is VALID [2020-07-28 19:06:33,433 INFO L280 TraceCheckUtils]: 96: Hoare triple {11504#false} assume !(0 != isHighWaterLevel_~tmp~6);isHighWaterLevel_~tmp___0~0 := 1; {11504#false} is VALID [2020-07-28 19:06:33,433 INFO L280 TraceCheckUtils]: 97: Hoare triple {11504#false} isHighWaterLevel_~retValue_acc~5 := isHighWaterLevel_~tmp___0~0;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~5; {11504#false} is VALID [2020-07-28 19:06:33,433 INFO L280 TraceCheckUtils]: 98: Hoare triple {11504#false} processEnvironment__wrappee__highWaterSensor_#t~ret35 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret35 && processEnvironment__wrappee__highWaterSensor_#t~ret35 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~3 := processEnvironment__wrappee__highWaterSensor_#t~ret35;havoc processEnvironment__wrappee__highWaterSensor_#t~ret35; {11504#false} is VALID [2020-07-28 19:06:33,433 INFO L280 TraceCheckUtils]: 99: Hoare triple {11504#false} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~3;~pumpRunning~0 := 1; {11504#false} is VALID [2020-07-28 19:06:33,434 INFO L280 TraceCheckUtils]: 100: Hoare triple {11504#false} havoc __utac_acc__Specification5_spec__3_#t~ret63, __utac_acc__Specification5_spec__3_#t~ret64, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {11504#false} is VALID [2020-07-28 19:06:33,434 INFO L280 TraceCheckUtils]: 101: Hoare triple {11504#false} __utac_acc__Specification5_spec__3_#t~ret63 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret63 && __utac_acc__Specification5_spec__3_#t~ret63 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret63;havoc __utac_acc__Specification5_spec__3_#t~ret63; {11504#false} is VALID [2020-07-28 19:06:33,434 INFO L280 TraceCheckUtils]: 102: Hoare triple {11504#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {11504#false} is VALID [2020-07-28 19:06:33,434 INFO L280 TraceCheckUtils]: 103: Hoare triple {11504#false} __utac_acc__Specification5_spec__3_#t~ret64 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret64 && __utac_acc__Specification5_spec__3_#t~ret64 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret64;havoc __utac_acc__Specification5_spec__3_#t~ret64; {11504#false} is VALID [2020-07-28 19:06:33,435 INFO L280 TraceCheckUtils]: 104: Hoare triple {11504#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3; {11504#false} is VALID [2020-07-28 19:06:33,435 INFO L280 TraceCheckUtils]: 105: Hoare triple {11504#false} assume 0 == ~switchedOnBeforeTS~0; {11504#false} is VALID [2020-07-28 19:06:33,435 INFO L280 TraceCheckUtils]: 106: Hoare triple {11504#false} assume !false; {11504#false} is VALID [2020-07-28 19:06:33,449 INFO L134 CoverageAnalysis]: Checked inductivity of 108 backedges. 79 proven. 6 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2020-07-28 19:06:33,450 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1049577467] [2020-07-28 19:06:33,450 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1872086901] [2020-07-28 19:06:33,450 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 3 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2020-07-28 19:06:33,580 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:06:33,583 INFO L263 TraceCheckSpWp]: Trace formula consists of 570 conjuncts, 7 conjunts are in the unsatisfiable core [2020-07-28 19:06:33,613 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:06:33,617 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2020-07-28 19:06:33,857 INFO L280 TraceCheckUtils]: 0: Hoare triple {11503#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(13);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string42.base, #t~string42.offset, 1);call write~init~int(110, #t~string42.base, 1 + #t~string42.offset, 1);call write~init~int(0, #t~string42.base, 2 + #t~string42.offset, 1);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string44.base, #t~string44.offset, 1);call write~init~int(102, #t~string44.base, 1 + #t~string44.offset, 1);call write~init~int(102, #t~string44.base, 2 + #t~string44.offset, 1);call write~init~int(0, #t~string44.base, 3 + #t~string44.offset, 1);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string46.base, #t~string46.offset, 1);call write~init~int(80, #t~string46.base, 1 + #t~string46.offset, 1);call write~init~int(117, #t~string46.base, 2 + #t~string46.offset, 1);call write~init~int(109, #t~string46.base, 3 + #t~string46.offset, 1);call write~init~int(112, #t~string46.base, 4 + #t~string46.offset, 1);call write~init~int(58, #t~string46.base, 5 + #t~string46.offset, 1);call write~init~int(0, #t~string46.base, 6 + #t~string46.offset, 1);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string48.base, #t~string48.offset, 1);call write~init~int(110, #t~string48.base, 1 + #t~string48.offset, 1);call write~init~int(0, #t~string48.base, 2 + #t~string48.offset, 1);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string50.base, #t~string50.offset, 1);call write~init~int(102, #t~string50.base, 1 + #t~string50.offset, 1);call write~init~int(102, #t~string50.base, 2 + #t~string50.offset, 1);call write~init~int(0, #t~string50.base, 3 + #t~string50.offset, 1);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string52.base, #t~string52.offset, 1);call write~init~int(32, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 2 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string54.base, #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 1 + #t~string54.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(13);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string69.base, #t~string69.offset, 1);call write~init~int(77, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(101, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(116, #t~string69.base, 3 + #t~string69.offset, 1);call write~init~int(104, #t~string69.base, 4 + #t~string69.offset, 1);call write~init~int(58, #t~string69.base, 5 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 6 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string71.base, #t~string71.offset, 1);call write~init~int(82, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(73, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(84, #t~string71.base, 3 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 4 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string73.base, #t~string73.offset, 1);call write~init~int(75, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 2 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string75.base, #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 1 + #t~string75.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {11507#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:33,858 INFO L280 TraceCheckUtils]: 1: Hoare triple {11507#(<= ~waterLevel~0 1)} havoc main_#res;havoc main_#t~ret65, main_~retValue_acc~9, main_~tmp~10;havoc main_~retValue_acc~9;havoc main_~tmp~10; {11507#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:33,858 INFO L280 TraceCheckUtils]: 2: Hoare triple {11507#(<= ~waterLevel~0 1)} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {11507#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:33,859 INFO L280 TraceCheckUtils]: 3: Hoare triple {11507#(<= ~waterLevel~0 1)} main_#t~ret65 := valid_product_#res;assume -2147483648 <= main_#t~ret65 && main_#t~ret65 <= 2147483647;main_~tmp~10 := main_#t~ret65;havoc main_#t~ret65; {11507#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:33,859 INFO L280 TraceCheckUtils]: 4: Hoare triple {11507#(<= ~waterLevel~0 1)} assume 0 != main_~tmp~10; {11507#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:33,860 INFO L280 TraceCheckUtils]: 5: Hoare triple {11507#(<= ~waterLevel~0 1)} ~switchedOnBeforeTS~0 := 0; {11507#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:33,860 INFO L280 TraceCheckUtils]: 6: Hoare triple {11507#(<= ~waterLevel~0 1)} havoc test_#t~nondet58, test_#t~nondet59, test_#t~nondet60, test_#t~nondet61, test_~splverifierCounter~0, test_~tmp~8, test_~tmp___0~2, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~8;havoc test_~tmp___0~2;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {11507#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:33,860 INFO L280 TraceCheckUtils]: 7: Hoare triple {11507#(<= ~waterLevel~0 1)} assume !false; {11507#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:33,861 INFO L280 TraceCheckUtils]: 8: Hoare triple {11507#(<= ~waterLevel~0 1)} assume test_~splverifierCounter~0 < 4; {11507#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:33,863 INFO L280 TraceCheckUtils]: 9: Hoare triple {11507#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet58 && test_#t~nondet58 <= 2147483647;test_~tmp~8 := test_#t~nondet58;havoc test_#t~nondet58; {11507#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:33,864 INFO L280 TraceCheckUtils]: 10: Hoare triple {11507#(<= ~waterLevel~0 1)} assume 0 != test_~tmp~8; {11507#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:33,867 INFO L280 TraceCheckUtils]: 11: Hoare triple {11507#(<= ~waterLevel~0 1)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {11506#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:33,870 INFO L280 TraceCheckUtils]: 12: Hoare triple {11506#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet59 && test_#t~nondet59 <= 2147483647;test_~tmp___0~2 := test_#t~nondet59;havoc test_#t~nondet59; {11506#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:33,870 INFO L280 TraceCheckUtils]: 13: Hoare triple {11506#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___0~2); {11506#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:33,871 INFO L280 TraceCheckUtils]: 14: Hoare triple {11506#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet60 && test_#t~nondet60 <= 2147483647;test_~tmp___2~0 := test_#t~nondet60;havoc test_#t~nondet60; {11506#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:33,872 INFO L280 TraceCheckUtils]: 15: Hoare triple {11506#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0; {11506#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:33,872 INFO L280 TraceCheckUtils]: 16: Hoare triple {11506#(<= ~waterLevel~0 2)} havoc __utac_acc__Specification5_spec__2_#t~ret62;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {11506#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:33,873 INFO L280 TraceCheckUtils]: 17: Hoare triple {11506#(<= ~waterLevel~0 2)} __utac_acc__Specification5_spec__2_#t~ret62 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret62 && __utac_acc__Specification5_spec__2_#t~ret62 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret62;havoc __utac_acc__Specification5_spec__2_#t~ret62; {11506#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:33,874 INFO L280 TraceCheckUtils]: 18: Hoare triple {11506#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0); {11506#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:33,874 INFO L280 TraceCheckUtils]: 19: Hoare triple {11506#(<= ~waterLevel~0 2)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret37, processEnvironment_~tmp~5;havoc processEnvironment_~tmp~5; {11506#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:33,875 INFO L280 TraceCheckUtils]: 20: Hoare triple {11506#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret36, processEnvironment__wrappee__lowWaterSensor_~tmp~4;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~4; {11506#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:33,876 INFO L280 TraceCheckUtils]: 21: Hoare triple {11506#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret35, processEnvironment__wrappee__highWaterSensor_~tmp~3;havoc processEnvironment__wrappee__highWaterSensor_~tmp~3; {11506#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:33,876 INFO L280 TraceCheckUtils]: 22: Hoare triple {11506#(<= ~waterLevel~0 2)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret55, isHighWaterLevel_~retValue_acc~5, isHighWaterLevel_~tmp~6, isHighWaterLevel_~tmp___0~0;havoc isHighWaterLevel_~retValue_acc~5;havoc isHighWaterLevel_~tmp~6;havoc isHighWaterLevel_~tmp___0~0;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~12;havoc isHighWaterSensorDry_~retValue_acc~12; {11506#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:33,877 INFO L280 TraceCheckUtils]: 23: Hoare triple {11506#(<= ~waterLevel~0 2)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~12 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~12; {11506#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:33,878 INFO L280 TraceCheckUtils]: 24: Hoare triple {11506#(<= ~waterLevel~0 2)} isHighWaterLevel_#t~ret55 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret55 && isHighWaterLevel_#t~ret55 <= 2147483647;isHighWaterLevel_~tmp~6 := isHighWaterLevel_#t~ret55;havoc isHighWaterLevel_#t~ret55; {11506#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:33,878 INFO L280 TraceCheckUtils]: 25: Hoare triple {11506#(<= ~waterLevel~0 2)} assume !(0 != isHighWaterLevel_~tmp~6);isHighWaterLevel_~tmp___0~0 := 1; {11506#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:33,879 INFO L280 TraceCheckUtils]: 26: Hoare triple {11506#(<= ~waterLevel~0 2)} isHighWaterLevel_~retValue_acc~5 := isHighWaterLevel_~tmp___0~0;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~5; {11506#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:33,880 INFO L280 TraceCheckUtils]: 27: Hoare triple {11506#(<= ~waterLevel~0 2)} processEnvironment__wrappee__highWaterSensor_#t~ret35 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret35 && processEnvironment__wrappee__highWaterSensor_#t~ret35 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~3 := processEnvironment__wrappee__highWaterSensor_#t~ret35;havoc processEnvironment__wrappee__highWaterSensor_#t~ret35; {11506#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:33,880 INFO L280 TraceCheckUtils]: 28: Hoare triple {11506#(<= ~waterLevel~0 2)} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~3;~pumpRunning~0 := 1; {11506#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:33,881 INFO L280 TraceCheckUtils]: 29: Hoare triple {11506#(<= ~waterLevel~0 2)} havoc __utac_acc__Specification5_spec__3_#t~ret63, __utac_acc__Specification5_spec__3_#t~ret64, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {11506#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:33,881 INFO L280 TraceCheckUtils]: 30: Hoare triple {11506#(<= ~waterLevel~0 2)} __utac_acc__Specification5_spec__3_#t~ret63 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret63 && __utac_acc__Specification5_spec__3_#t~ret63 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret63;havoc __utac_acc__Specification5_spec__3_#t~ret63; {11506#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:33,881 INFO L280 TraceCheckUtils]: 31: Hoare triple {11506#(<= ~waterLevel~0 2)} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~9); {11506#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:33,882 INFO L280 TraceCheckUtils]: 32: Hoare triple {11506#(<= ~waterLevel~0 2)} assume !false; {11506#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:33,882 INFO L280 TraceCheckUtils]: 33: Hoare triple {11506#(<= ~waterLevel~0 2)} assume test_~splverifierCounter~0 < 4; {11506#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:33,882 INFO L280 TraceCheckUtils]: 34: Hoare triple {11506#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet58 && test_#t~nondet58 <= 2147483647;test_~tmp~8 := test_#t~nondet58;havoc test_#t~nondet58; {11506#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:33,883 INFO L280 TraceCheckUtils]: 35: Hoare triple {11506#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp~8); {11506#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:33,883 INFO L280 TraceCheckUtils]: 36: Hoare triple {11506#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet59 && test_#t~nondet59 <= 2147483647;test_~tmp___0~2 := test_#t~nondet59;havoc test_#t~nondet59; {11506#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:33,884 INFO L280 TraceCheckUtils]: 37: Hoare triple {11506#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___0~2); {11506#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:33,884 INFO L280 TraceCheckUtils]: 38: Hoare triple {11506#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet60 && test_#t~nondet60 <= 2147483647;test_~tmp___2~0 := test_#t~nondet60;havoc test_#t~nondet60; {11506#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:33,884 INFO L280 TraceCheckUtils]: 39: Hoare triple {11506#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0; {11506#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:33,885 INFO L280 TraceCheckUtils]: 40: Hoare triple {11506#(<= ~waterLevel~0 2)} havoc __utac_acc__Specification5_spec__2_#t~ret62;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {11506#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:33,885 INFO L280 TraceCheckUtils]: 41: Hoare triple {11506#(<= ~waterLevel~0 2)} __utac_acc__Specification5_spec__2_#t~ret62 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret62 && __utac_acc__Specification5_spec__2_#t~ret62 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret62;havoc __utac_acc__Specification5_spec__2_#t~ret62; {11506#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:33,886 INFO L280 TraceCheckUtils]: 42: Hoare triple {11506#(<= ~waterLevel~0 2)} assume 0 != ~pumpRunning~0; {11506#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:33,886 INFO L280 TraceCheckUtils]: 43: Hoare triple {11506#(<= ~waterLevel~0 2)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {11507#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:33,887 INFO L280 TraceCheckUtils]: 44: Hoare triple {11507#(<= ~waterLevel~0 1)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret37, processEnvironment_~tmp~5;havoc processEnvironment_~tmp~5; {11507#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:33,887 INFO L280 TraceCheckUtils]: 45: Hoare triple {11507#(<= ~waterLevel~0 1)} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret38, isMethaneAlarm_~retValue_acc~3;havoc isMethaneAlarm_~retValue_acc~3;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~10;havoc isMethaneLevelCritical_~retValue_acc~10;isMethaneLevelCritical_~retValue_acc~10 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~10; {11507#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:33,887 INFO L280 TraceCheckUtils]: 46: Hoare triple {11507#(<= ~waterLevel~0 1)} isMethaneAlarm_#t~ret38 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret38 && isMethaneAlarm_#t~ret38 <= 2147483647;isMethaneAlarm_~retValue_acc~3 := isMethaneAlarm_#t~ret38;havoc isMethaneAlarm_#t~ret38;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~3; {11507#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:33,888 INFO L280 TraceCheckUtils]: 47: Hoare triple {11507#(<= ~waterLevel~0 1)} processEnvironment_#t~ret37 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret37 && processEnvironment_#t~ret37 <= 2147483647;processEnvironment_~tmp~5 := processEnvironment_#t~ret37;havoc processEnvironment_#t~ret37; {11507#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:33,888 INFO L280 TraceCheckUtils]: 48: Hoare triple {11507#(<= ~waterLevel~0 1)} assume !(0 != processEnvironment_~tmp~5);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret36, processEnvironment__wrappee__lowWaterSensor_~tmp~4;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~4; {11507#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:33,889 INFO L280 TraceCheckUtils]: 49: Hoare triple {11507#(<= ~waterLevel~0 1)} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret56, isLowWaterLevel_~retValue_acc~6, isLowWaterLevel_~tmp~7, isLowWaterLevel_~tmp___0~1;havoc isLowWaterLevel_~retValue_acc~6;havoc isLowWaterLevel_~tmp~7;havoc isLowWaterLevel_~tmp___0~1;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~13;havoc isLowWaterSensorDry_~retValue_acc~13;isLowWaterSensorDry_~retValue_acc~13 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~13; {11507#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:33,891 INFO L280 TraceCheckUtils]: 50: Hoare triple {11507#(<= ~waterLevel~0 1)} isLowWaterLevel_#t~ret56 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret56 && isLowWaterLevel_#t~ret56 <= 2147483647;isLowWaterLevel_~tmp~7 := isLowWaterLevel_#t~ret56;havoc isLowWaterLevel_#t~ret56; {11507#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:33,893 INFO L280 TraceCheckUtils]: 51: Hoare triple {11507#(<= ~waterLevel~0 1)} assume 0 != isLowWaterLevel_~tmp~7;isLowWaterLevel_~tmp___0~1 := 0; {11507#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:33,895 INFO L280 TraceCheckUtils]: 52: Hoare triple {11507#(<= ~waterLevel~0 1)} isLowWaterLevel_~retValue_acc~6 := isLowWaterLevel_~tmp___0~1;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~6; {11507#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:33,896 INFO L280 TraceCheckUtils]: 53: Hoare triple {11507#(<= ~waterLevel~0 1)} processEnvironment__wrappee__lowWaterSensor_#t~ret36 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__lowWaterSensor_#t~ret36 && processEnvironment__wrappee__lowWaterSensor_#t~ret36 <= 2147483647;processEnvironment__wrappee__lowWaterSensor_~tmp~4 := processEnvironment__wrappee__lowWaterSensor_#t~ret36;havoc processEnvironment__wrappee__lowWaterSensor_#t~ret36; {11507#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:33,896 INFO L280 TraceCheckUtils]: 54: Hoare triple {11507#(<= ~waterLevel~0 1)} assume !(0 != processEnvironment__wrappee__lowWaterSensor_~tmp~4);havoc processEnvironment__wrappee__highWaterSensor_#t~ret35, processEnvironment__wrappee__highWaterSensor_~tmp~3;havoc processEnvironment__wrappee__highWaterSensor_~tmp~3; {11507#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:33,897 INFO L280 TraceCheckUtils]: 55: Hoare triple {11507#(<= ~waterLevel~0 1)} assume !(0 == ~pumpRunning~0); {11507#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:33,897 INFO L280 TraceCheckUtils]: 56: Hoare triple {11507#(<= ~waterLevel~0 1)} havoc __utac_acc__Specification5_spec__3_#t~ret63, __utac_acc__Specification5_spec__3_#t~ret64, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {11508#(<= |ULTIMATE.start_getWaterLevel_#res| 1)} is VALID [2020-07-28 19:06:33,898 INFO L280 TraceCheckUtils]: 57: Hoare triple {11508#(<= |ULTIMATE.start_getWaterLevel_#res| 1)} __utac_acc__Specification5_spec__3_#t~ret63 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret63 && __utac_acc__Specification5_spec__3_#t~ret63 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret63;havoc __utac_acc__Specification5_spec__3_#t~ret63; {11509#(<= ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9 1)} is VALID [2020-07-28 19:06:33,898 INFO L280 TraceCheckUtils]: 58: Hoare triple {11509#(<= ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9 1)} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~9); {11504#false} is VALID [2020-07-28 19:06:33,899 INFO L280 TraceCheckUtils]: 59: Hoare triple {11504#false} assume !false; {11504#false} is VALID [2020-07-28 19:06:33,899 INFO L280 TraceCheckUtils]: 60: Hoare triple {11504#false} assume test_~splverifierCounter~0 < 4; {11504#false} is VALID [2020-07-28 19:06:33,899 INFO L280 TraceCheckUtils]: 61: Hoare triple {11504#false} assume -2147483648 <= test_#t~nondet58 && test_#t~nondet58 <= 2147483647;test_~tmp~8 := test_#t~nondet58;havoc test_#t~nondet58; {11504#false} is VALID [2020-07-28 19:06:33,899 INFO L280 TraceCheckUtils]: 62: Hoare triple {11504#false} assume !(0 != test_~tmp~8); {11504#false} is VALID [2020-07-28 19:06:33,899 INFO L280 TraceCheckUtils]: 63: Hoare triple {11504#false} assume -2147483648 <= test_#t~nondet59 && test_#t~nondet59 <= 2147483647;test_~tmp___0~2 := test_#t~nondet59;havoc test_#t~nondet59; {11504#false} is VALID [2020-07-28 19:06:33,899 INFO L280 TraceCheckUtils]: 64: Hoare triple {11504#false} assume !(0 != test_~tmp___0~2); {11504#false} is VALID [2020-07-28 19:06:33,899 INFO L280 TraceCheckUtils]: 65: Hoare triple {11504#false} assume -2147483648 <= test_#t~nondet60 && test_#t~nondet60 <= 2147483647;test_~tmp___2~0 := test_#t~nondet60;havoc test_#t~nondet60; {11504#false} is VALID [2020-07-28 19:06:33,899 INFO L280 TraceCheckUtils]: 66: Hoare triple {11504#false} assume 0 != test_~tmp___2~0; {11504#false} is VALID [2020-07-28 19:06:33,900 INFO L280 TraceCheckUtils]: 67: Hoare triple {11504#false} havoc __utac_acc__Specification5_spec__2_#t~ret62;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {11504#false} is VALID [2020-07-28 19:06:33,900 INFO L280 TraceCheckUtils]: 68: Hoare triple {11504#false} __utac_acc__Specification5_spec__2_#t~ret62 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret62 && __utac_acc__Specification5_spec__2_#t~ret62 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret62;havoc __utac_acc__Specification5_spec__2_#t~ret62; {11504#false} is VALID [2020-07-28 19:06:33,900 INFO L280 TraceCheckUtils]: 69: Hoare triple {11504#false} assume 0 != ~pumpRunning~0; {11504#false} is VALID [2020-07-28 19:06:33,900 INFO L280 TraceCheckUtils]: 70: Hoare triple {11504#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {11504#false} is VALID [2020-07-28 19:06:33,900 INFO L280 TraceCheckUtils]: 71: Hoare triple {11504#false} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret37, processEnvironment_~tmp~5;havoc processEnvironment_~tmp~5; {11504#false} is VALID [2020-07-28 19:06:33,900 INFO L280 TraceCheckUtils]: 72: Hoare triple {11504#false} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret38, isMethaneAlarm_~retValue_acc~3;havoc isMethaneAlarm_~retValue_acc~3;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~10;havoc isMethaneLevelCritical_~retValue_acc~10;isMethaneLevelCritical_~retValue_acc~10 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~10; {11504#false} is VALID [2020-07-28 19:06:33,900 INFO L280 TraceCheckUtils]: 73: Hoare triple {11504#false} isMethaneAlarm_#t~ret38 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret38 && isMethaneAlarm_#t~ret38 <= 2147483647;isMethaneAlarm_~retValue_acc~3 := isMethaneAlarm_#t~ret38;havoc isMethaneAlarm_#t~ret38;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~3; {11504#false} is VALID [2020-07-28 19:06:33,901 INFO L280 TraceCheckUtils]: 74: Hoare triple {11504#false} processEnvironment_#t~ret37 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret37 && processEnvironment_#t~ret37 <= 2147483647;processEnvironment_~tmp~5 := processEnvironment_#t~ret37;havoc processEnvironment_#t~ret37; {11504#false} is VALID [2020-07-28 19:06:33,901 INFO L280 TraceCheckUtils]: 75: Hoare triple {11504#false} assume 0 != processEnvironment_~tmp~5;~pumpRunning~0 := 0; {11504#false} is VALID [2020-07-28 19:06:33,901 INFO L280 TraceCheckUtils]: 76: Hoare triple {11504#false} havoc __utac_acc__Specification5_spec__3_#t~ret63, __utac_acc__Specification5_spec__3_#t~ret64, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {11504#false} is VALID [2020-07-28 19:06:33,901 INFO L280 TraceCheckUtils]: 77: Hoare triple {11504#false} __utac_acc__Specification5_spec__3_#t~ret63 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret63 && __utac_acc__Specification5_spec__3_#t~ret63 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret63;havoc __utac_acc__Specification5_spec__3_#t~ret63; {11504#false} is VALID [2020-07-28 19:06:33,901 INFO L280 TraceCheckUtils]: 78: Hoare triple {11504#false} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~9); {11504#false} is VALID [2020-07-28 19:06:33,901 INFO L280 TraceCheckUtils]: 79: Hoare triple {11504#false} assume !false; {11504#false} is VALID [2020-07-28 19:06:33,901 INFO L280 TraceCheckUtils]: 80: Hoare triple {11504#false} assume test_~splverifierCounter~0 < 4; {11504#false} is VALID [2020-07-28 19:06:33,902 INFO L280 TraceCheckUtils]: 81: Hoare triple {11504#false} assume -2147483648 <= test_#t~nondet58 && test_#t~nondet58 <= 2147483647;test_~tmp~8 := test_#t~nondet58;havoc test_#t~nondet58; {11504#false} is VALID [2020-07-28 19:06:33,902 INFO L280 TraceCheckUtils]: 82: Hoare triple {11504#false} assume !(0 != test_~tmp~8); {11504#false} is VALID [2020-07-28 19:06:33,902 INFO L280 TraceCheckUtils]: 83: Hoare triple {11504#false} assume -2147483648 <= test_#t~nondet59 && test_#t~nondet59 <= 2147483647;test_~tmp___0~2 := test_#t~nondet59;havoc test_#t~nondet59; {11504#false} is VALID [2020-07-28 19:06:33,902 INFO L280 TraceCheckUtils]: 84: Hoare triple {11504#false} assume !(0 != test_~tmp___0~2); {11504#false} is VALID [2020-07-28 19:06:33,902 INFO L280 TraceCheckUtils]: 85: Hoare triple {11504#false} assume -2147483648 <= test_#t~nondet60 && test_#t~nondet60 <= 2147483647;test_~tmp___2~0 := test_#t~nondet60;havoc test_#t~nondet60; {11504#false} is VALID [2020-07-28 19:06:33,902 INFO L280 TraceCheckUtils]: 86: Hoare triple {11504#false} assume 0 != test_~tmp___2~0; {11504#false} is VALID [2020-07-28 19:06:33,902 INFO L280 TraceCheckUtils]: 87: Hoare triple {11504#false} havoc __utac_acc__Specification5_spec__2_#t~ret62;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {11504#false} is VALID [2020-07-28 19:06:33,903 INFO L280 TraceCheckUtils]: 88: Hoare triple {11504#false} __utac_acc__Specification5_spec__2_#t~ret62 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret62 && __utac_acc__Specification5_spec__2_#t~ret62 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret62;havoc __utac_acc__Specification5_spec__2_#t~ret62; {11504#false} is VALID [2020-07-28 19:06:33,903 INFO L280 TraceCheckUtils]: 89: Hoare triple {11504#false} assume !(0 != ~pumpRunning~0); {11504#false} is VALID [2020-07-28 19:06:33,903 INFO L280 TraceCheckUtils]: 90: Hoare triple {11504#false} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret37, processEnvironment_~tmp~5;havoc processEnvironment_~tmp~5; {11504#false} is VALID [2020-07-28 19:06:33,903 INFO L280 TraceCheckUtils]: 91: Hoare triple {11504#false} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret36, processEnvironment__wrappee__lowWaterSensor_~tmp~4;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~4; {11504#false} is VALID [2020-07-28 19:06:33,903 INFO L280 TraceCheckUtils]: 92: Hoare triple {11504#false} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret35, processEnvironment__wrappee__highWaterSensor_~tmp~3;havoc processEnvironment__wrappee__highWaterSensor_~tmp~3; {11504#false} is VALID [2020-07-28 19:06:33,903 INFO L280 TraceCheckUtils]: 93: Hoare triple {11504#false} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret55, isHighWaterLevel_~retValue_acc~5, isHighWaterLevel_~tmp~6, isHighWaterLevel_~tmp___0~0;havoc isHighWaterLevel_~retValue_acc~5;havoc isHighWaterLevel_~tmp~6;havoc isHighWaterLevel_~tmp___0~0;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~12;havoc isHighWaterSensorDry_~retValue_acc~12; {11504#false} is VALID [2020-07-28 19:06:33,903 INFO L280 TraceCheckUtils]: 94: Hoare triple {11504#false} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~12 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~12; {11504#false} is VALID [2020-07-28 19:06:33,903 INFO L280 TraceCheckUtils]: 95: Hoare triple {11504#false} isHighWaterLevel_#t~ret55 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret55 && isHighWaterLevel_#t~ret55 <= 2147483647;isHighWaterLevel_~tmp~6 := isHighWaterLevel_#t~ret55;havoc isHighWaterLevel_#t~ret55; {11504#false} is VALID [2020-07-28 19:06:33,904 INFO L280 TraceCheckUtils]: 96: Hoare triple {11504#false} assume !(0 != isHighWaterLevel_~tmp~6);isHighWaterLevel_~tmp___0~0 := 1; {11504#false} is VALID [2020-07-28 19:06:33,904 INFO L280 TraceCheckUtils]: 97: Hoare triple {11504#false} isHighWaterLevel_~retValue_acc~5 := isHighWaterLevel_~tmp___0~0;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~5; {11504#false} is VALID [2020-07-28 19:06:33,904 INFO L280 TraceCheckUtils]: 98: Hoare triple {11504#false} processEnvironment__wrappee__highWaterSensor_#t~ret35 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret35 && processEnvironment__wrappee__highWaterSensor_#t~ret35 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~3 := processEnvironment__wrappee__highWaterSensor_#t~ret35;havoc processEnvironment__wrappee__highWaterSensor_#t~ret35; {11504#false} is VALID [2020-07-28 19:06:33,904 INFO L280 TraceCheckUtils]: 99: Hoare triple {11504#false} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~3;~pumpRunning~0 := 1; {11504#false} is VALID [2020-07-28 19:06:33,905 INFO L280 TraceCheckUtils]: 100: Hoare triple {11504#false} havoc __utac_acc__Specification5_spec__3_#t~ret63, __utac_acc__Specification5_spec__3_#t~ret64, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {11504#false} is VALID [2020-07-28 19:06:33,906 INFO L280 TraceCheckUtils]: 101: Hoare triple {11504#false} __utac_acc__Specification5_spec__3_#t~ret63 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret63 && __utac_acc__Specification5_spec__3_#t~ret63 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret63;havoc __utac_acc__Specification5_spec__3_#t~ret63; {11504#false} is VALID [2020-07-28 19:06:33,906 INFO L280 TraceCheckUtils]: 102: Hoare triple {11504#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {11504#false} is VALID [2020-07-28 19:06:33,906 INFO L280 TraceCheckUtils]: 103: Hoare triple {11504#false} __utac_acc__Specification5_spec__3_#t~ret64 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret64 && __utac_acc__Specification5_spec__3_#t~ret64 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret64;havoc __utac_acc__Specification5_spec__3_#t~ret64; {11504#false} is VALID [2020-07-28 19:06:33,906 INFO L280 TraceCheckUtils]: 104: Hoare triple {11504#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3; {11504#false} is VALID [2020-07-28 19:06:33,906 INFO L280 TraceCheckUtils]: 105: Hoare triple {11504#false} assume 0 == ~switchedOnBeforeTS~0; {11504#false} is VALID [2020-07-28 19:06:33,906 INFO L280 TraceCheckUtils]: 106: Hoare triple {11504#false} assume !false; {11504#false} is VALID [2020-07-28 19:06:33,925 INFO L134 CoverageAnalysis]: Checked inductivity of 108 backedges. 79 proven. 6 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2020-07-28 19:06:33,925 INFO L220 FreeRefinementEngine]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2020-07-28 19:06:33,925 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5] total 6 [2020-07-28 19:06:33,926 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1400384999] [2020-07-28 19:06:33,927 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 107 [2020-07-28 19:06:33,928 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:06:33,928 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states. [2020-07-28 19:06:34,057 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 100 edges. 100 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:06:34,057 INFO L459 AbstractCegarLoop]: Interpolant automaton has 7 states [2020-07-28 19:06:34,057 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:06:34,057 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2020-07-28 19:06:34,057 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=28, Unknown=0, NotChecked=0, Total=42 [2020-07-28 19:06:34,058 INFO L87 Difference]: Start difference. First operand 198 states and 250 transitions. Second operand 7 states. [2020-07-28 19:06:36,102 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:36,102 INFO L93 Difference]: Finished difference Result 592 states and 750 transitions. [2020-07-28 19:06:36,102 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2020-07-28 19:06:36,102 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 107 [2020-07-28 19:06:36,102 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:06:36,103 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2020-07-28 19:06:36,104 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 285 transitions. [2020-07-28 19:06:36,104 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2020-07-28 19:06:36,106 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 285 transitions. [2020-07-28 19:06:36,106 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 10 states and 285 transitions. [2020-07-28 19:06:36,433 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 285 edges. 285 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:06:36,443 INFO L225 Difference]: With dead ends: 592 [2020-07-28 19:06:36,443 INFO L226 Difference]: Without dead ends: 401 [2020-07-28 19:06:36,444 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 117 GetRequests, 107 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 14 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=50, Invalid=82, Unknown=0, NotChecked=0, Total=132 [2020-07-28 19:06:36,445 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 401 states. [2020-07-28 19:06:36,984 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 401 to 230. [2020-07-28 19:06:36,984 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:06:36,985 INFO L82 GeneralOperation]: Start isEquivalent. First operand 401 states. Second operand 230 states. [2020-07-28 19:06:36,985 INFO L74 IsIncluded]: Start isIncluded. First operand 401 states. Second operand 230 states. [2020-07-28 19:06:36,985 INFO L87 Difference]: Start difference. First operand 401 states. Second operand 230 states. [2020-07-28 19:06:36,998 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:36,998 INFO L93 Difference]: Finished difference Result 401 states and 499 transitions. [2020-07-28 19:06:36,998 INFO L276 IsEmpty]: Start isEmpty. Operand 401 states and 499 transitions. [2020-07-28 19:06:36,999 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:06:37,000 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:06:37,000 INFO L74 IsIncluded]: Start isIncluded. First operand 230 states. Second operand 401 states. [2020-07-28 19:06:37,000 INFO L87 Difference]: Start difference. First operand 230 states. Second operand 401 states. [2020-07-28 19:06:37,012 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:37,012 INFO L93 Difference]: Finished difference Result 401 states and 499 transitions. [2020-07-28 19:06:37,013 INFO L276 IsEmpty]: Start isEmpty. Operand 401 states and 499 transitions. [2020-07-28 19:06:37,013 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:06:37,014 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:06:37,014 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:06:37,014 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:06:37,014 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 230 states. [2020-07-28 19:06:37,020 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 230 states to 230 states and 285 transitions. [2020-07-28 19:06:37,020 INFO L78 Accepts]: Start accepts. Automaton has 230 states and 285 transitions. Word has length 107 [2020-07-28 19:06:37,021 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:06:37,021 INFO L479 AbstractCegarLoop]: Abstraction has 230 states and 285 transitions. [2020-07-28 19:06:37,021 INFO L480 AbstractCegarLoop]: Interpolant automaton has 7 states. [2020-07-28 19:06:37,021 INFO L276 IsEmpty]: Start isEmpty. Operand 230 states and 285 transitions. [2020-07-28 19:06:37,022 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 113 [2020-07-28 19:06:37,022 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:06:37,023 INFO L422 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:06:37,235 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,3 z3 -smt2 -in SMTLIB2_COMPLIANT=true [2020-07-28 19:06:37,236 INFO L427 AbstractCegarLoop]: === Iteration 12 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:06:37,236 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:06:37,236 INFO L82 PathProgramCache]: Analyzing trace with hash -201297047, now seen corresponding path program 1 times [2020-07-28 19:06:37,236 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:06:37,237 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2028767513] [2020-07-28 19:06:37,237 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:06:37,274 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:06:37,344 INFO L280 TraceCheckUtils]: 0: Hoare triple {13783#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(13);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string42.base, #t~string42.offset, 1);call write~init~int(110, #t~string42.base, 1 + #t~string42.offset, 1);call write~init~int(0, #t~string42.base, 2 + #t~string42.offset, 1);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string44.base, #t~string44.offset, 1);call write~init~int(102, #t~string44.base, 1 + #t~string44.offset, 1);call write~init~int(102, #t~string44.base, 2 + #t~string44.offset, 1);call write~init~int(0, #t~string44.base, 3 + #t~string44.offset, 1);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string46.base, #t~string46.offset, 1);call write~init~int(80, #t~string46.base, 1 + #t~string46.offset, 1);call write~init~int(117, #t~string46.base, 2 + #t~string46.offset, 1);call write~init~int(109, #t~string46.base, 3 + #t~string46.offset, 1);call write~init~int(112, #t~string46.base, 4 + #t~string46.offset, 1);call write~init~int(58, #t~string46.base, 5 + #t~string46.offset, 1);call write~init~int(0, #t~string46.base, 6 + #t~string46.offset, 1);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string48.base, #t~string48.offset, 1);call write~init~int(110, #t~string48.base, 1 + #t~string48.offset, 1);call write~init~int(0, #t~string48.base, 2 + #t~string48.offset, 1);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string50.base, #t~string50.offset, 1);call write~init~int(102, #t~string50.base, 1 + #t~string50.offset, 1);call write~init~int(102, #t~string50.base, 2 + #t~string50.offset, 1);call write~init~int(0, #t~string50.base, 3 + #t~string50.offset, 1);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string52.base, #t~string52.offset, 1);call write~init~int(32, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 2 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string54.base, #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 1 + #t~string54.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(13);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string69.base, #t~string69.offset, 1);call write~init~int(77, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(101, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(116, #t~string69.base, 3 + #t~string69.offset, 1);call write~init~int(104, #t~string69.base, 4 + #t~string69.offset, 1);call write~init~int(58, #t~string69.base, 5 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 6 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string71.base, #t~string71.offset, 1);call write~init~int(82, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(73, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(84, #t~string71.base, 3 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 4 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string73.base, #t~string73.offset, 1);call write~init~int(75, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 2 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string75.base, #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 1 + #t~string75.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {13783#true} is VALID [2020-07-28 19:06:37,345 INFO L280 TraceCheckUtils]: 1: Hoare triple {13783#true} havoc main_#res;havoc main_#t~ret65, main_~retValue_acc~9, main_~tmp~10;havoc main_~retValue_acc~9;havoc main_~tmp~10; {13783#true} is VALID [2020-07-28 19:06:37,345 INFO L280 TraceCheckUtils]: 2: Hoare triple {13783#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {13783#true} is VALID [2020-07-28 19:06:37,345 INFO L280 TraceCheckUtils]: 3: Hoare triple {13783#true} main_#t~ret65 := valid_product_#res;assume -2147483648 <= main_#t~ret65 && main_#t~ret65 <= 2147483647;main_~tmp~10 := main_#t~ret65;havoc main_#t~ret65; {13783#true} is VALID [2020-07-28 19:06:37,345 INFO L280 TraceCheckUtils]: 4: Hoare triple {13783#true} assume 0 != main_~tmp~10; {13783#true} is VALID [2020-07-28 19:06:37,346 INFO L280 TraceCheckUtils]: 5: Hoare triple {13783#true} ~switchedOnBeforeTS~0 := 0; {13783#true} is VALID [2020-07-28 19:06:37,346 INFO L280 TraceCheckUtils]: 6: Hoare triple {13783#true} havoc test_#t~nondet58, test_#t~nondet59, test_#t~nondet60, test_#t~nondet61, test_~splverifierCounter~0, test_~tmp~8, test_~tmp___0~2, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~8;havoc test_~tmp___0~2;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {13783#true} is VALID [2020-07-28 19:06:37,346 INFO L280 TraceCheckUtils]: 7: Hoare triple {13783#true} assume !false; {13783#true} is VALID [2020-07-28 19:06:37,346 INFO L280 TraceCheckUtils]: 8: Hoare triple {13783#true} assume test_~splverifierCounter~0 < 4; {13783#true} is VALID [2020-07-28 19:06:37,346 INFO L280 TraceCheckUtils]: 9: Hoare triple {13783#true} assume -2147483648 <= test_#t~nondet58 && test_#t~nondet58 <= 2147483647;test_~tmp~8 := test_#t~nondet58;havoc test_#t~nondet58; {13783#true} is VALID [2020-07-28 19:06:37,346 INFO L280 TraceCheckUtils]: 10: Hoare triple {13783#true} assume 0 != test_~tmp~8; {13783#true} is VALID [2020-07-28 19:06:37,347 INFO L280 TraceCheckUtils]: 11: Hoare triple {13783#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {13783#true} is VALID [2020-07-28 19:06:37,347 INFO L280 TraceCheckUtils]: 12: Hoare triple {13783#true} assume -2147483648 <= test_#t~nondet59 && test_#t~nondet59 <= 2147483647;test_~tmp___0~2 := test_#t~nondet59;havoc test_#t~nondet59; {13783#true} is VALID [2020-07-28 19:06:37,347 INFO L280 TraceCheckUtils]: 13: Hoare triple {13783#true} assume !(0 != test_~tmp___0~2); {13783#true} is VALID [2020-07-28 19:06:37,347 INFO L280 TraceCheckUtils]: 14: Hoare triple {13783#true} assume -2147483648 <= test_#t~nondet60 && test_#t~nondet60 <= 2147483647;test_~tmp___2~0 := test_#t~nondet60;havoc test_#t~nondet60; {13783#true} is VALID [2020-07-28 19:06:37,347 INFO L280 TraceCheckUtils]: 15: Hoare triple {13783#true} assume 0 != test_~tmp___2~0; {13783#true} is VALID [2020-07-28 19:06:37,348 INFO L280 TraceCheckUtils]: 16: Hoare triple {13783#true} havoc __utac_acc__Specification5_spec__2_#t~ret62;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {13783#true} is VALID [2020-07-28 19:06:37,348 INFO L280 TraceCheckUtils]: 17: Hoare triple {13783#true} __utac_acc__Specification5_spec__2_#t~ret62 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret62 && __utac_acc__Specification5_spec__2_#t~ret62 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret62;havoc __utac_acc__Specification5_spec__2_#t~ret62; {13783#true} is VALID [2020-07-28 19:06:37,348 INFO L280 TraceCheckUtils]: 18: Hoare triple {13783#true} assume !(0 != ~pumpRunning~0); {13783#true} is VALID [2020-07-28 19:06:37,348 INFO L280 TraceCheckUtils]: 19: Hoare triple {13783#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret37, processEnvironment_~tmp~5;havoc processEnvironment_~tmp~5; {13783#true} is VALID [2020-07-28 19:06:37,348 INFO L280 TraceCheckUtils]: 20: Hoare triple {13783#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret36, processEnvironment__wrappee__lowWaterSensor_~tmp~4;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~4; {13783#true} is VALID [2020-07-28 19:06:37,348 INFO L280 TraceCheckUtils]: 21: Hoare triple {13783#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret35, processEnvironment__wrappee__highWaterSensor_~tmp~3;havoc processEnvironment__wrappee__highWaterSensor_~tmp~3; {13783#true} is VALID [2020-07-28 19:06:37,349 INFO L280 TraceCheckUtils]: 22: Hoare triple {13783#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret55, isHighWaterLevel_~retValue_acc~5, isHighWaterLevel_~tmp~6, isHighWaterLevel_~tmp___0~0;havoc isHighWaterLevel_~retValue_acc~5;havoc isHighWaterLevel_~tmp~6;havoc isHighWaterLevel_~tmp___0~0;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~12;havoc isHighWaterSensorDry_~retValue_acc~12; {13783#true} is VALID [2020-07-28 19:06:37,349 INFO L280 TraceCheckUtils]: 23: Hoare triple {13783#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~12 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~12; {13783#true} is VALID [2020-07-28 19:06:37,349 INFO L280 TraceCheckUtils]: 24: Hoare triple {13783#true} isHighWaterLevel_#t~ret55 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret55 && isHighWaterLevel_#t~ret55 <= 2147483647;isHighWaterLevel_~tmp~6 := isHighWaterLevel_#t~ret55;havoc isHighWaterLevel_#t~ret55; {13783#true} is VALID [2020-07-28 19:06:37,349 INFO L280 TraceCheckUtils]: 25: Hoare triple {13783#true} assume !(0 != isHighWaterLevel_~tmp~6);isHighWaterLevel_~tmp___0~0 := 1; {13783#true} is VALID [2020-07-28 19:06:37,349 INFO L280 TraceCheckUtils]: 26: Hoare triple {13783#true} isHighWaterLevel_~retValue_acc~5 := isHighWaterLevel_~tmp___0~0;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~5; {13783#true} is VALID [2020-07-28 19:06:37,349 INFO L280 TraceCheckUtils]: 27: Hoare triple {13783#true} processEnvironment__wrappee__highWaterSensor_#t~ret35 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret35 && processEnvironment__wrappee__highWaterSensor_#t~ret35 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~3 := processEnvironment__wrappee__highWaterSensor_#t~ret35;havoc processEnvironment__wrappee__highWaterSensor_#t~ret35; {13783#true} is VALID [2020-07-28 19:06:37,350 INFO L280 TraceCheckUtils]: 28: Hoare triple {13783#true} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~3;~pumpRunning~0 := 1; {13785#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:06:37,351 INFO L280 TraceCheckUtils]: 29: Hoare triple {13785#(= 1 ~pumpRunning~0)} havoc __utac_acc__Specification5_spec__3_#t~ret63, __utac_acc__Specification5_spec__3_#t~ret64, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {13785#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:06:37,351 INFO L280 TraceCheckUtils]: 30: Hoare triple {13785#(= 1 ~pumpRunning~0)} __utac_acc__Specification5_spec__3_#t~ret63 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret63 && __utac_acc__Specification5_spec__3_#t~ret63 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret63;havoc __utac_acc__Specification5_spec__3_#t~ret63; {13785#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:06:37,352 INFO L280 TraceCheckUtils]: 31: Hoare triple {13785#(= 1 ~pumpRunning~0)} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~9); {13785#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:06:37,352 INFO L280 TraceCheckUtils]: 32: Hoare triple {13785#(= 1 ~pumpRunning~0)} assume !false; {13785#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:06:37,353 INFO L280 TraceCheckUtils]: 33: Hoare triple {13785#(= 1 ~pumpRunning~0)} assume test_~splverifierCounter~0 < 4; {13785#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:06:37,353 INFO L280 TraceCheckUtils]: 34: Hoare triple {13785#(= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet58 && test_#t~nondet58 <= 2147483647;test_~tmp~8 := test_#t~nondet58;havoc test_#t~nondet58; {13785#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:06:37,354 INFO L280 TraceCheckUtils]: 35: Hoare triple {13785#(= 1 ~pumpRunning~0)} assume !(0 != test_~tmp~8); {13785#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:06:37,354 INFO L280 TraceCheckUtils]: 36: Hoare triple {13785#(= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet59 && test_#t~nondet59 <= 2147483647;test_~tmp___0~2 := test_#t~nondet59;havoc test_#t~nondet59; {13785#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:06:37,355 INFO L280 TraceCheckUtils]: 37: Hoare triple {13785#(= 1 ~pumpRunning~0)} assume !(0 != test_~tmp___0~2); {13785#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:06:37,355 INFO L280 TraceCheckUtils]: 38: Hoare triple {13785#(= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet60 && test_#t~nondet60 <= 2147483647;test_~tmp___2~0 := test_#t~nondet60;havoc test_#t~nondet60; {13785#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:06:37,356 INFO L280 TraceCheckUtils]: 39: Hoare triple {13785#(= 1 ~pumpRunning~0)} assume 0 != test_~tmp___2~0; {13785#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:06:37,356 INFO L280 TraceCheckUtils]: 40: Hoare triple {13785#(= 1 ~pumpRunning~0)} havoc __utac_acc__Specification5_spec__2_#t~ret62;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {13785#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:06:37,357 INFO L280 TraceCheckUtils]: 41: Hoare triple {13785#(= 1 ~pumpRunning~0)} __utac_acc__Specification5_spec__2_#t~ret62 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret62 && __utac_acc__Specification5_spec__2_#t~ret62 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret62;havoc __utac_acc__Specification5_spec__2_#t~ret62; {13785#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:06:37,357 INFO L280 TraceCheckUtils]: 42: Hoare triple {13785#(= 1 ~pumpRunning~0)} assume 0 != ~pumpRunning~0; {13785#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:06:37,374 INFO L280 TraceCheckUtils]: 43: Hoare triple {13785#(= 1 ~pumpRunning~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {13785#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:06:37,375 INFO L280 TraceCheckUtils]: 44: Hoare triple {13785#(= 1 ~pumpRunning~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret37, processEnvironment_~tmp~5;havoc processEnvironment_~tmp~5; {13785#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:06:37,375 INFO L280 TraceCheckUtils]: 45: Hoare triple {13785#(= 1 ~pumpRunning~0)} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret38, isMethaneAlarm_~retValue_acc~3;havoc isMethaneAlarm_~retValue_acc~3;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~10;havoc isMethaneLevelCritical_~retValue_acc~10;isMethaneLevelCritical_~retValue_acc~10 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~10; {13785#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:06:37,376 INFO L280 TraceCheckUtils]: 46: Hoare triple {13785#(= 1 ~pumpRunning~0)} isMethaneAlarm_#t~ret38 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret38 && isMethaneAlarm_#t~ret38 <= 2147483647;isMethaneAlarm_~retValue_acc~3 := isMethaneAlarm_#t~ret38;havoc isMethaneAlarm_#t~ret38;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~3; {13785#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:06:37,376 INFO L280 TraceCheckUtils]: 47: Hoare triple {13785#(= 1 ~pumpRunning~0)} processEnvironment_#t~ret37 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret37 && processEnvironment_#t~ret37 <= 2147483647;processEnvironment_~tmp~5 := processEnvironment_#t~ret37;havoc processEnvironment_#t~ret37; {13785#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:06:37,377 INFO L280 TraceCheckUtils]: 48: Hoare triple {13785#(= 1 ~pumpRunning~0)} assume !(0 != processEnvironment_~tmp~5);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret36, processEnvironment__wrappee__lowWaterSensor_~tmp~4;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~4; {13785#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:06:37,377 INFO L280 TraceCheckUtils]: 49: Hoare triple {13785#(= 1 ~pumpRunning~0)} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret56, isLowWaterLevel_~retValue_acc~6, isLowWaterLevel_~tmp~7, isLowWaterLevel_~tmp___0~1;havoc isLowWaterLevel_~retValue_acc~6;havoc isLowWaterLevel_~tmp~7;havoc isLowWaterLevel_~tmp___0~1;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~13;havoc isLowWaterSensorDry_~retValue_acc~13;isLowWaterSensorDry_~retValue_acc~13 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~13; {13785#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:06:37,378 INFO L280 TraceCheckUtils]: 50: Hoare triple {13785#(= 1 ~pumpRunning~0)} isLowWaterLevel_#t~ret56 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret56 && isLowWaterLevel_#t~ret56 <= 2147483647;isLowWaterLevel_~tmp~7 := isLowWaterLevel_#t~ret56;havoc isLowWaterLevel_#t~ret56; {13785#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:06:37,378 INFO L280 TraceCheckUtils]: 51: Hoare triple {13785#(= 1 ~pumpRunning~0)} assume 0 != isLowWaterLevel_~tmp~7;isLowWaterLevel_~tmp___0~1 := 0; {13785#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:06:37,379 INFO L280 TraceCheckUtils]: 52: Hoare triple {13785#(= 1 ~pumpRunning~0)} isLowWaterLevel_~retValue_acc~6 := isLowWaterLevel_~tmp___0~1;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~6; {13785#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:06:37,379 INFO L280 TraceCheckUtils]: 53: Hoare triple {13785#(= 1 ~pumpRunning~0)} processEnvironment__wrappee__lowWaterSensor_#t~ret36 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__lowWaterSensor_#t~ret36 && processEnvironment__wrappee__lowWaterSensor_#t~ret36 <= 2147483647;processEnvironment__wrappee__lowWaterSensor_~tmp~4 := processEnvironment__wrappee__lowWaterSensor_#t~ret36;havoc processEnvironment__wrappee__lowWaterSensor_#t~ret36; {13785#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:06:37,380 INFO L280 TraceCheckUtils]: 54: Hoare triple {13785#(= 1 ~pumpRunning~0)} assume !(0 != processEnvironment__wrappee__lowWaterSensor_~tmp~4);havoc processEnvironment__wrappee__highWaterSensor_#t~ret35, processEnvironment__wrappee__highWaterSensor_~tmp~3;havoc processEnvironment__wrappee__highWaterSensor_~tmp~3; {13785#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:06:37,380 INFO L280 TraceCheckUtils]: 55: Hoare triple {13785#(= 1 ~pumpRunning~0)} assume !(0 == ~pumpRunning~0); {13785#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:06:37,381 INFO L280 TraceCheckUtils]: 56: Hoare triple {13785#(= 1 ~pumpRunning~0)} havoc __utac_acc__Specification5_spec__3_#t~ret63, __utac_acc__Specification5_spec__3_#t~ret64, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {13785#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:06:37,381 INFO L280 TraceCheckUtils]: 57: Hoare triple {13785#(= 1 ~pumpRunning~0)} __utac_acc__Specification5_spec__3_#t~ret63 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret63 && __utac_acc__Specification5_spec__3_#t~ret63 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret63;havoc __utac_acc__Specification5_spec__3_#t~ret63; {13785#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:06:37,382 INFO L280 TraceCheckUtils]: 58: Hoare triple {13785#(= 1 ~pumpRunning~0)} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {13786#(= 1 |ULTIMATE.start_isPumpRunning_#res|)} is VALID [2020-07-28 19:06:37,383 INFO L280 TraceCheckUtils]: 59: Hoare triple {13786#(= 1 |ULTIMATE.start_isPumpRunning_#res|)} __utac_acc__Specification5_spec__3_#t~ret64 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret64 && __utac_acc__Specification5_spec__3_#t~ret64 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret64;havoc __utac_acc__Specification5_spec__3_#t~ret64; {13787#(= ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp___0~3 1)} is VALID [2020-07-28 19:06:37,384 INFO L280 TraceCheckUtils]: 60: Hoare triple {13787#(= ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp___0~3 1)} assume !(0 != __utac_acc__Specification5_spec__3_~tmp___0~3); {13784#false} is VALID [2020-07-28 19:06:37,384 INFO L280 TraceCheckUtils]: 61: Hoare triple {13784#false} assume !false; {13784#false} is VALID [2020-07-28 19:06:37,384 INFO L280 TraceCheckUtils]: 62: Hoare triple {13784#false} assume test_~splverifierCounter~0 < 4; {13784#false} is VALID [2020-07-28 19:06:37,384 INFO L280 TraceCheckUtils]: 63: Hoare triple {13784#false} assume -2147483648 <= test_#t~nondet58 && test_#t~nondet58 <= 2147483647;test_~tmp~8 := test_#t~nondet58;havoc test_#t~nondet58; {13784#false} is VALID [2020-07-28 19:06:37,384 INFO L280 TraceCheckUtils]: 64: Hoare triple {13784#false} assume !(0 != test_~tmp~8); {13784#false} is VALID [2020-07-28 19:06:37,385 INFO L280 TraceCheckUtils]: 65: Hoare triple {13784#false} assume -2147483648 <= test_#t~nondet59 && test_#t~nondet59 <= 2147483647;test_~tmp___0~2 := test_#t~nondet59;havoc test_#t~nondet59; {13784#false} is VALID [2020-07-28 19:06:37,385 INFO L280 TraceCheckUtils]: 66: Hoare triple {13784#false} assume !(0 != test_~tmp___0~2); {13784#false} is VALID [2020-07-28 19:06:37,385 INFO L280 TraceCheckUtils]: 67: Hoare triple {13784#false} assume -2147483648 <= test_#t~nondet60 && test_#t~nondet60 <= 2147483647;test_~tmp___2~0 := test_#t~nondet60;havoc test_#t~nondet60; {13784#false} is VALID [2020-07-28 19:06:37,385 INFO L280 TraceCheckUtils]: 68: Hoare triple {13784#false} assume 0 != test_~tmp___2~0; {13784#false} is VALID [2020-07-28 19:06:37,385 INFO L280 TraceCheckUtils]: 69: Hoare triple {13784#false} havoc __utac_acc__Specification5_spec__2_#t~ret62;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {13784#false} is VALID [2020-07-28 19:06:37,385 INFO L280 TraceCheckUtils]: 70: Hoare triple {13784#false} __utac_acc__Specification5_spec__2_#t~ret62 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret62 && __utac_acc__Specification5_spec__2_#t~ret62 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret62;havoc __utac_acc__Specification5_spec__2_#t~ret62; {13784#false} is VALID [2020-07-28 19:06:37,386 INFO L280 TraceCheckUtils]: 71: Hoare triple {13784#false} assume 0 != ~pumpRunning~0; {13784#false} is VALID [2020-07-28 19:06:37,386 INFO L280 TraceCheckUtils]: 72: Hoare triple {13784#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {13784#false} is VALID [2020-07-28 19:06:37,386 INFO L280 TraceCheckUtils]: 73: Hoare triple {13784#false} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret37, processEnvironment_~tmp~5;havoc processEnvironment_~tmp~5; {13784#false} is VALID [2020-07-28 19:06:37,386 INFO L280 TraceCheckUtils]: 74: Hoare triple {13784#false} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret38, isMethaneAlarm_~retValue_acc~3;havoc isMethaneAlarm_~retValue_acc~3;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~10;havoc isMethaneLevelCritical_~retValue_acc~10;isMethaneLevelCritical_~retValue_acc~10 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~10; {13784#false} is VALID [2020-07-28 19:06:37,386 INFO L280 TraceCheckUtils]: 75: Hoare triple {13784#false} isMethaneAlarm_#t~ret38 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret38 && isMethaneAlarm_#t~ret38 <= 2147483647;isMethaneAlarm_~retValue_acc~3 := isMethaneAlarm_#t~ret38;havoc isMethaneAlarm_#t~ret38;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~3; {13784#false} is VALID [2020-07-28 19:06:37,387 INFO L280 TraceCheckUtils]: 76: Hoare triple {13784#false} processEnvironment_#t~ret37 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret37 && processEnvironment_#t~ret37 <= 2147483647;processEnvironment_~tmp~5 := processEnvironment_#t~ret37;havoc processEnvironment_#t~ret37; {13784#false} is VALID [2020-07-28 19:06:37,387 INFO L280 TraceCheckUtils]: 77: Hoare triple {13784#false} assume 0 != processEnvironment_~tmp~5;~pumpRunning~0 := 0; {13784#false} is VALID [2020-07-28 19:06:37,387 INFO L280 TraceCheckUtils]: 78: Hoare triple {13784#false} havoc __utac_acc__Specification5_spec__3_#t~ret63, __utac_acc__Specification5_spec__3_#t~ret64, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {13784#false} is VALID [2020-07-28 19:06:37,387 INFO L280 TraceCheckUtils]: 79: Hoare triple {13784#false} __utac_acc__Specification5_spec__3_#t~ret63 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret63 && __utac_acc__Specification5_spec__3_#t~ret63 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret63;havoc __utac_acc__Specification5_spec__3_#t~ret63; {13784#false} is VALID [2020-07-28 19:06:37,392 INFO L280 TraceCheckUtils]: 80: Hoare triple {13784#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {13784#false} is VALID [2020-07-28 19:06:37,393 INFO L280 TraceCheckUtils]: 81: Hoare triple {13784#false} __utac_acc__Specification5_spec__3_#t~ret64 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret64 && __utac_acc__Specification5_spec__3_#t~ret64 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret64;havoc __utac_acc__Specification5_spec__3_#t~ret64; {13784#false} is VALID [2020-07-28 19:06:37,393 INFO L280 TraceCheckUtils]: 82: Hoare triple {13784#false} assume !(0 != __utac_acc__Specification5_spec__3_~tmp___0~3); {13784#false} is VALID [2020-07-28 19:06:37,393 INFO L280 TraceCheckUtils]: 83: Hoare triple {13784#false} assume !false; {13784#false} is VALID [2020-07-28 19:06:37,393 INFO L280 TraceCheckUtils]: 84: Hoare triple {13784#false} assume test_~splverifierCounter~0 < 4; {13784#false} is VALID [2020-07-28 19:06:37,393 INFO L280 TraceCheckUtils]: 85: Hoare triple {13784#false} assume -2147483648 <= test_#t~nondet58 && test_#t~nondet58 <= 2147483647;test_~tmp~8 := test_#t~nondet58;havoc test_#t~nondet58; {13784#false} is VALID [2020-07-28 19:06:37,394 INFO L280 TraceCheckUtils]: 86: Hoare triple {13784#false} assume 0 != test_~tmp~8; {13784#false} is VALID [2020-07-28 19:06:37,394 INFO L280 TraceCheckUtils]: 87: Hoare triple {13784#false} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {13784#false} is VALID [2020-07-28 19:06:37,394 INFO L280 TraceCheckUtils]: 88: Hoare triple {13784#false} assume -2147483648 <= test_#t~nondet59 && test_#t~nondet59 <= 2147483647;test_~tmp___0~2 := test_#t~nondet59;havoc test_#t~nondet59; {13784#false} is VALID [2020-07-28 19:06:37,394 INFO L280 TraceCheckUtils]: 89: Hoare triple {13784#false} assume !(0 != test_~tmp___0~2); {13784#false} is VALID [2020-07-28 19:06:37,394 INFO L280 TraceCheckUtils]: 90: Hoare triple {13784#false} assume -2147483648 <= test_#t~nondet60 && test_#t~nondet60 <= 2147483647;test_~tmp___2~0 := test_#t~nondet60;havoc test_#t~nondet60; {13784#false} is VALID [2020-07-28 19:06:37,394 INFO L280 TraceCheckUtils]: 91: Hoare triple {13784#false} assume 0 != test_~tmp___2~0; {13784#false} is VALID [2020-07-28 19:06:37,395 INFO L280 TraceCheckUtils]: 92: Hoare triple {13784#false} havoc __utac_acc__Specification5_spec__2_#t~ret62;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {13784#false} is VALID [2020-07-28 19:06:37,395 INFO L280 TraceCheckUtils]: 93: Hoare triple {13784#false} __utac_acc__Specification5_spec__2_#t~ret62 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret62 && __utac_acc__Specification5_spec__2_#t~ret62 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret62;havoc __utac_acc__Specification5_spec__2_#t~ret62; {13784#false} is VALID [2020-07-28 19:06:37,395 INFO L280 TraceCheckUtils]: 94: Hoare triple {13784#false} assume !(0 != ~pumpRunning~0); {13784#false} is VALID [2020-07-28 19:06:37,395 INFO L280 TraceCheckUtils]: 95: Hoare triple {13784#false} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret37, processEnvironment_~tmp~5;havoc processEnvironment_~tmp~5; {13784#false} is VALID [2020-07-28 19:06:37,395 INFO L280 TraceCheckUtils]: 96: Hoare triple {13784#false} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret36, processEnvironment__wrappee__lowWaterSensor_~tmp~4;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~4; {13784#false} is VALID [2020-07-28 19:06:37,396 INFO L280 TraceCheckUtils]: 97: Hoare triple {13784#false} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret35, processEnvironment__wrappee__highWaterSensor_~tmp~3;havoc processEnvironment__wrappee__highWaterSensor_~tmp~3; {13784#false} is VALID [2020-07-28 19:06:37,396 INFO L280 TraceCheckUtils]: 98: Hoare triple {13784#false} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret55, isHighWaterLevel_~retValue_acc~5, isHighWaterLevel_~tmp~6, isHighWaterLevel_~tmp___0~0;havoc isHighWaterLevel_~retValue_acc~5;havoc isHighWaterLevel_~tmp~6;havoc isHighWaterLevel_~tmp___0~0;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~12;havoc isHighWaterSensorDry_~retValue_acc~12; {13784#false} is VALID [2020-07-28 19:06:37,396 INFO L280 TraceCheckUtils]: 99: Hoare triple {13784#false} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~12 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~12; {13784#false} is VALID [2020-07-28 19:06:37,396 INFO L280 TraceCheckUtils]: 100: Hoare triple {13784#false} isHighWaterLevel_#t~ret55 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret55 && isHighWaterLevel_#t~ret55 <= 2147483647;isHighWaterLevel_~tmp~6 := isHighWaterLevel_#t~ret55;havoc isHighWaterLevel_#t~ret55; {13784#false} is VALID [2020-07-28 19:06:37,396 INFO L280 TraceCheckUtils]: 101: Hoare triple {13784#false} assume !(0 != isHighWaterLevel_~tmp~6);isHighWaterLevel_~tmp___0~0 := 1; {13784#false} is VALID [2020-07-28 19:06:37,397 INFO L280 TraceCheckUtils]: 102: Hoare triple {13784#false} isHighWaterLevel_~retValue_acc~5 := isHighWaterLevel_~tmp___0~0;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~5; {13784#false} is VALID [2020-07-28 19:06:37,397 INFO L280 TraceCheckUtils]: 103: Hoare triple {13784#false} processEnvironment__wrappee__highWaterSensor_#t~ret35 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret35 && processEnvironment__wrappee__highWaterSensor_#t~ret35 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~3 := processEnvironment__wrappee__highWaterSensor_#t~ret35;havoc processEnvironment__wrappee__highWaterSensor_#t~ret35; {13784#false} is VALID [2020-07-28 19:06:37,397 INFO L280 TraceCheckUtils]: 104: Hoare triple {13784#false} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~3;~pumpRunning~0 := 1; {13784#false} is VALID [2020-07-28 19:06:37,397 INFO L280 TraceCheckUtils]: 105: Hoare triple {13784#false} havoc __utac_acc__Specification5_spec__3_#t~ret63, __utac_acc__Specification5_spec__3_#t~ret64, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {13784#false} is VALID [2020-07-28 19:06:37,397 INFO L280 TraceCheckUtils]: 106: Hoare triple {13784#false} __utac_acc__Specification5_spec__3_#t~ret63 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret63 && __utac_acc__Specification5_spec__3_#t~ret63 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret63;havoc __utac_acc__Specification5_spec__3_#t~ret63; {13784#false} is VALID [2020-07-28 19:06:37,397 INFO L280 TraceCheckUtils]: 107: Hoare triple {13784#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {13784#false} is VALID [2020-07-28 19:06:37,398 INFO L280 TraceCheckUtils]: 108: Hoare triple {13784#false} __utac_acc__Specification5_spec__3_#t~ret64 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret64 && __utac_acc__Specification5_spec__3_#t~ret64 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret64;havoc __utac_acc__Specification5_spec__3_#t~ret64; {13784#false} is VALID [2020-07-28 19:06:37,398 INFO L280 TraceCheckUtils]: 109: Hoare triple {13784#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3; {13784#false} is VALID [2020-07-28 19:06:37,398 INFO L280 TraceCheckUtils]: 110: Hoare triple {13784#false} assume 0 == ~switchedOnBeforeTS~0; {13784#false} is VALID [2020-07-28 19:06:37,398 INFO L280 TraceCheckUtils]: 111: Hoare triple {13784#false} assume !false; {13784#false} is VALID [2020-07-28 19:06:37,409 INFO L134 CoverageAnalysis]: Checked inductivity of 115 backedges. 94 proven. 0 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2020-07-28 19:06:37,410 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2028767513] [2020-07-28 19:06:37,410 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:06:37,410 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:06:37,410 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1712410694] [2020-07-28 19:06:37,411 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 112 [2020-07-28 19:06:37,411 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:06:37,411 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:06:37,519 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 96 edges. 96 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:06:37,519 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:06:37,520 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:06:37,520 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:06:37,520 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:06:37,520 INFO L87 Difference]: Start difference. First operand 230 states and 285 transitions. Second operand 5 states. [2020-07-28 19:06:38,952 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:38,952 INFO L93 Difference]: Finished difference Result 518 states and 645 transitions. [2020-07-28 19:06:38,953 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2020-07-28 19:06:38,953 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 112 [2020-07-28 19:06:38,953 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:06:38,953 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:06:38,954 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 198 transitions. [2020-07-28 19:06:38,954 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:06:38,955 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 198 transitions. [2020-07-28 19:06:38,955 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 198 transitions. [2020-07-28 19:06:39,188 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 198 edges. 198 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:06:39,196 INFO L225 Difference]: With dead ends: 518 [2020-07-28 19:06:39,196 INFO L226 Difference]: Without dead ends: 295 [2020-07-28 19:06:39,197 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2020-07-28 19:06:39,198 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 295 states. [2020-07-28 19:06:39,802 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 295 to 230. [2020-07-28 19:06:39,802 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:06:39,802 INFO L82 GeneralOperation]: Start isEquivalent. First operand 295 states. Second operand 230 states. [2020-07-28 19:06:39,802 INFO L74 IsIncluded]: Start isIncluded. First operand 295 states. Second operand 230 states. [2020-07-28 19:06:39,803 INFO L87 Difference]: Start difference. First operand 295 states. Second operand 230 states. [2020-07-28 19:06:39,809 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:39,809 INFO L93 Difference]: Finished difference Result 295 states and 364 transitions. [2020-07-28 19:06:39,810 INFO L276 IsEmpty]: Start isEmpty. Operand 295 states and 364 transitions. [2020-07-28 19:06:39,810 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:06:39,810 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:06:39,811 INFO L74 IsIncluded]: Start isIncluded. First operand 230 states. Second operand 295 states. [2020-07-28 19:06:39,811 INFO L87 Difference]: Start difference. First operand 230 states. Second operand 295 states. [2020-07-28 19:06:39,818 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:39,818 INFO L93 Difference]: Finished difference Result 295 states and 364 transitions. [2020-07-28 19:06:39,818 INFO L276 IsEmpty]: Start isEmpty. Operand 295 states and 364 transitions. [2020-07-28 19:06:39,819 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:06:39,819 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:06:39,819 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:06:39,819 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:06:39,819 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 230 states. [2020-07-28 19:06:39,825 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 230 states to 230 states and 282 transitions. [2020-07-28 19:06:39,825 INFO L78 Accepts]: Start accepts. Automaton has 230 states and 282 transitions. Word has length 112 [2020-07-28 19:06:39,826 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:06:39,826 INFO L479 AbstractCegarLoop]: Abstraction has 230 states and 282 transitions. [2020-07-28 19:06:39,826 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:06:39,826 INFO L276 IsEmpty]: Start isEmpty. Operand 230 states and 282 transitions. [2020-07-28 19:06:39,827 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 114 [2020-07-28 19:06:39,827 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:06:39,828 INFO L422 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:06:39,828 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2020-07-28 19:06:39,828 INFO L427 AbstractCegarLoop]: === Iteration 13 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:06:39,828 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:06:39,828 INFO L82 PathProgramCache]: Analyzing trace with hash 1383100964, now seen corresponding path program 1 times [2020-07-28 19:06:39,829 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:06:39,829 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [724029042] [2020-07-28 19:06:39,829 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:06:39,863 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:06:39,945 INFO L280 TraceCheckUtils]: 0: Hoare triple {15425#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(13);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string42.base, #t~string42.offset, 1);call write~init~int(110, #t~string42.base, 1 + #t~string42.offset, 1);call write~init~int(0, #t~string42.base, 2 + #t~string42.offset, 1);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string44.base, #t~string44.offset, 1);call write~init~int(102, #t~string44.base, 1 + #t~string44.offset, 1);call write~init~int(102, #t~string44.base, 2 + #t~string44.offset, 1);call write~init~int(0, #t~string44.base, 3 + #t~string44.offset, 1);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string46.base, #t~string46.offset, 1);call write~init~int(80, #t~string46.base, 1 + #t~string46.offset, 1);call write~init~int(117, #t~string46.base, 2 + #t~string46.offset, 1);call write~init~int(109, #t~string46.base, 3 + #t~string46.offset, 1);call write~init~int(112, #t~string46.base, 4 + #t~string46.offset, 1);call write~init~int(58, #t~string46.base, 5 + #t~string46.offset, 1);call write~init~int(0, #t~string46.base, 6 + #t~string46.offset, 1);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string48.base, #t~string48.offset, 1);call write~init~int(110, #t~string48.base, 1 + #t~string48.offset, 1);call write~init~int(0, #t~string48.base, 2 + #t~string48.offset, 1);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string50.base, #t~string50.offset, 1);call write~init~int(102, #t~string50.base, 1 + #t~string50.offset, 1);call write~init~int(102, #t~string50.base, 2 + #t~string50.offset, 1);call write~init~int(0, #t~string50.base, 3 + #t~string50.offset, 1);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string52.base, #t~string52.offset, 1);call write~init~int(32, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 2 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string54.base, #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 1 + #t~string54.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(13);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string69.base, #t~string69.offset, 1);call write~init~int(77, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(101, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(116, #t~string69.base, 3 + #t~string69.offset, 1);call write~init~int(104, #t~string69.base, 4 + #t~string69.offset, 1);call write~init~int(58, #t~string69.base, 5 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 6 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string71.base, #t~string71.offset, 1);call write~init~int(82, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(73, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(84, #t~string71.base, 3 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 4 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string73.base, #t~string73.offset, 1);call write~init~int(75, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 2 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string75.base, #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 1 + #t~string75.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {15427#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:39,946 INFO L280 TraceCheckUtils]: 1: Hoare triple {15427#(= 1 ~waterLevel~0)} havoc main_#res;havoc main_#t~ret65, main_~retValue_acc~9, main_~tmp~10;havoc main_~retValue_acc~9;havoc main_~tmp~10; {15427#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:39,947 INFO L280 TraceCheckUtils]: 2: Hoare triple {15427#(= 1 ~waterLevel~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {15427#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:39,947 INFO L280 TraceCheckUtils]: 3: Hoare triple {15427#(= 1 ~waterLevel~0)} main_#t~ret65 := valid_product_#res;assume -2147483648 <= main_#t~ret65 && main_#t~ret65 <= 2147483647;main_~tmp~10 := main_#t~ret65;havoc main_#t~ret65; {15427#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:39,948 INFO L280 TraceCheckUtils]: 4: Hoare triple {15427#(= 1 ~waterLevel~0)} assume 0 != main_~tmp~10; {15427#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:39,948 INFO L280 TraceCheckUtils]: 5: Hoare triple {15427#(= 1 ~waterLevel~0)} ~switchedOnBeforeTS~0 := 0; {15427#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:39,949 INFO L280 TraceCheckUtils]: 6: Hoare triple {15427#(= 1 ~waterLevel~0)} havoc test_#t~nondet58, test_#t~nondet59, test_#t~nondet60, test_#t~nondet61, test_~splverifierCounter~0, test_~tmp~8, test_~tmp___0~2, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~8;havoc test_~tmp___0~2;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {15427#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:39,949 INFO L280 TraceCheckUtils]: 7: Hoare triple {15427#(= 1 ~waterLevel~0)} assume !false; {15427#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:39,950 INFO L280 TraceCheckUtils]: 8: Hoare triple {15427#(= 1 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {15427#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:39,950 INFO L280 TraceCheckUtils]: 9: Hoare triple {15427#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet58 && test_#t~nondet58 <= 2147483647;test_~tmp~8 := test_#t~nondet58;havoc test_#t~nondet58; {15427#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:39,951 INFO L280 TraceCheckUtils]: 10: Hoare triple {15427#(= 1 ~waterLevel~0)} assume 0 != test_~tmp~8; {15427#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:39,951 INFO L280 TraceCheckUtils]: 11: Hoare triple {15427#(= 1 ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {15428#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:39,952 INFO L280 TraceCheckUtils]: 12: Hoare triple {15428#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet59 && test_#t~nondet59 <= 2147483647;test_~tmp___0~2 := test_#t~nondet59;havoc test_#t~nondet59; {15428#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:39,952 INFO L280 TraceCheckUtils]: 13: Hoare triple {15428#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___0~2); {15428#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:39,953 INFO L280 TraceCheckUtils]: 14: Hoare triple {15428#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet60 && test_#t~nondet60 <= 2147483647;test_~tmp___2~0 := test_#t~nondet60;havoc test_#t~nondet60; {15428#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:39,953 INFO L280 TraceCheckUtils]: 15: Hoare triple {15428#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0; {15428#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:39,954 INFO L280 TraceCheckUtils]: 16: Hoare triple {15428#(<= ~waterLevel~0 2)} havoc __utac_acc__Specification5_spec__2_#t~ret62;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {15428#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:39,954 INFO L280 TraceCheckUtils]: 17: Hoare triple {15428#(<= ~waterLevel~0 2)} __utac_acc__Specification5_spec__2_#t~ret62 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret62 && __utac_acc__Specification5_spec__2_#t~ret62 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret62;havoc __utac_acc__Specification5_spec__2_#t~ret62; {15428#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:39,955 INFO L280 TraceCheckUtils]: 18: Hoare triple {15428#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0); {15428#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:39,955 INFO L280 TraceCheckUtils]: 19: Hoare triple {15428#(<= ~waterLevel~0 2)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret37, processEnvironment_~tmp~5;havoc processEnvironment_~tmp~5; {15428#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:39,956 INFO L280 TraceCheckUtils]: 20: Hoare triple {15428#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret36, processEnvironment__wrappee__lowWaterSensor_~tmp~4;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~4; {15428#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:39,956 INFO L280 TraceCheckUtils]: 21: Hoare triple {15428#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret35, processEnvironment__wrappee__highWaterSensor_~tmp~3;havoc processEnvironment__wrappee__highWaterSensor_~tmp~3; {15428#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:39,957 INFO L280 TraceCheckUtils]: 22: Hoare triple {15428#(<= ~waterLevel~0 2)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret55, isHighWaterLevel_~retValue_acc~5, isHighWaterLevel_~tmp~6, isHighWaterLevel_~tmp___0~0;havoc isHighWaterLevel_~retValue_acc~5;havoc isHighWaterLevel_~tmp~6;havoc isHighWaterLevel_~tmp___0~0;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~12;havoc isHighWaterSensorDry_~retValue_acc~12; {15428#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:39,957 INFO L280 TraceCheckUtils]: 23: Hoare triple {15428#(<= ~waterLevel~0 2)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~12 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~12; {15428#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:39,958 INFO L280 TraceCheckUtils]: 24: Hoare triple {15428#(<= ~waterLevel~0 2)} isHighWaterLevel_#t~ret55 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret55 && isHighWaterLevel_#t~ret55 <= 2147483647;isHighWaterLevel_~tmp~6 := isHighWaterLevel_#t~ret55;havoc isHighWaterLevel_#t~ret55; {15428#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:39,958 INFO L280 TraceCheckUtils]: 25: Hoare triple {15428#(<= ~waterLevel~0 2)} assume !(0 != isHighWaterLevel_~tmp~6);isHighWaterLevel_~tmp___0~0 := 1; {15428#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:39,959 INFO L280 TraceCheckUtils]: 26: Hoare triple {15428#(<= ~waterLevel~0 2)} isHighWaterLevel_~retValue_acc~5 := isHighWaterLevel_~tmp___0~0;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~5; {15428#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:39,959 INFO L280 TraceCheckUtils]: 27: Hoare triple {15428#(<= ~waterLevel~0 2)} processEnvironment__wrappee__highWaterSensor_#t~ret35 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret35 && processEnvironment__wrappee__highWaterSensor_#t~ret35 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~3 := processEnvironment__wrappee__highWaterSensor_#t~ret35;havoc processEnvironment__wrappee__highWaterSensor_#t~ret35; {15428#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:39,960 INFO L280 TraceCheckUtils]: 28: Hoare triple {15428#(<= ~waterLevel~0 2)} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~3;~pumpRunning~0 := 1; {15428#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:39,960 INFO L280 TraceCheckUtils]: 29: Hoare triple {15428#(<= ~waterLevel~0 2)} havoc __utac_acc__Specification5_spec__3_#t~ret63, __utac_acc__Specification5_spec__3_#t~ret64, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {15428#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:39,961 INFO L280 TraceCheckUtils]: 30: Hoare triple {15428#(<= ~waterLevel~0 2)} __utac_acc__Specification5_spec__3_#t~ret63 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret63 && __utac_acc__Specification5_spec__3_#t~ret63 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret63;havoc __utac_acc__Specification5_spec__3_#t~ret63; {15428#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:39,961 INFO L280 TraceCheckUtils]: 31: Hoare triple {15428#(<= ~waterLevel~0 2)} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~9); {15428#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:39,962 INFO L280 TraceCheckUtils]: 32: Hoare triple {15428#(<= ~waterLevel~0 2)} assume !false; {15428#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:39,962 INFO L280 TraceCheckUtils]: 33: Hoare triple {15428#(<= ~waterLevel~0 2)} assume test_~splverifierCounter~0 < 4; {15428#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:39,963 INFO L280 TraceCheckUtils]: 34: Hoare triple {15428#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet58 && test_#t~nondet58 <= 2147483647;test_~tmp~8 := test_#t~nondet58;havoc test_#t~nondet58; {15428#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:39,963 INFO L280 TraceCheckUtils]: 35: Hoare triple {15428#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp~8); {15428#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:39,964 INFO L280 TraceCheckUtils]: 36: Hoare triple {15428#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet59 && test_#t~nondet59 <= 2147483647;test_~tmp___0~2 := test_#t~nondet59;havoc test_#t~nondet59; {15428#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:39,964 INFO L280 TraceCheckUtils]: 37: Hoare triple {15428#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___0~2); {15428#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:39,965 INFO L280 TraceCheckUtils]: 38: Hoare triple {15428#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet60 && test_#t~nondet60 <= 2147483647;test_~tmp___2~0 := test_#t~nondet60;havoc test_#t~nondet60; {15428#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:39,965 INFO L280 TraceCheckUtils]: 39: Hoare triple {15428#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0; {15428#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:39,966 INFO L280 TraceCheckUtils]: 40: Hoare triple {15428#(<= ~waterLevel~0 2)} havoc __utac_acc__Specification5_spec__2_#t~ret62;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {15428#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:39,966 INFO L280 TraceCheckUtils]: 41: Hoare triple {15428#(<= ~waterLevel~0 2)} __utac_acc__Specification5_spec__2_#t~ret62 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret62 && __utac_acc__Specification5_spec__2_#t~ret62 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret62;havoc __utac_acc__Specification5_spec__2_#t~ret62; {15428#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:39,967 INFO L280 TraceCheckUtils]: 42: Hoare triple {15428#(<= ~waterLevel~0 2)} assume 0 != ~pumpRunning~0; {15428#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:39,968 INFO L280 TraceCheckUtils]: 43: Hoare triple {15428#(<= ~waterLevel~0 2)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:39,968 INFO L280 TraceCheckUtils]: 44: Hoare triple {15429#(<= ~waterLevel~0 1)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret37, processEnvironment_~tmp~5;havoc processEnvironment_~tmp~5; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:39,969 INFO L280 TraceCheckUtils]: 45: Hoare triple {15429#(<= ~waterLevel~0 1)} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret38, isMethaneAlarm_~retValue_acc~3;havoc isMethaneAlarm_~retValue_acc~3;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~10;havoc isMethaneLevelCritical_~retValue_acc~10;isMethaneLevelCritical_~retValue_acc~10 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~10; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:39,969 INFO L280 TraceCheckUtils]: 46: Hoare triple {15429#(<= ~waterLevel~0 1)} isMethaneAlarm_#t~ret38 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret38 && isMethaneAlarm_#t~ret38 <= 2147483647;isMethaneAlarm_~retValue_acc~3 := isMethaneAlarm_#t~ret38;havoc isMethaneAlarm_#t~ret38;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~3; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:39,970 INFO L280 TraceCheckUtils]: 47: Hoare triple {15429#(<= ~waterLevel~0 1)} processEnvironment_#t~ret37 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret37 && processEnvironment_#t~ret37 <= 2147483647;processEnvironment_~tmp~5 := processEnvironment_#t~ret37;havoc processEnvironment_#t~ret37; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:39,970 INFO L280 TraceCheckUtils]: 48: Hoare triple {15429#(<= ~waterLevel~0 1)} assume !(0 != processEnvironment_~tmp~5);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret36, processEnvironment__wrappee__lowWaterSensor_~tmp~4;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~4; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:39,971 INFO L280 TraceCheckUtils]: 49: Hoare triple {15429#(<= ~waterLevel~0 1)} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret56, isLowWaterLevel_~retValue_acc~6, isLowWaterLevel_~tmp~7, isLowWaterLevel_~tmp___0~1;havoc isLowWaterLevel_~retValue_acc~6;havoc isLowWaterLevel_~tmp~7;havoc isLowWaterLevel_~tmp___0~1;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~13;havoc isLowWaterSensorDry_~retValue_acc~13;isLowWaterSensorDry_~retValue_acc~13 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~13; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:39,971 INFO L280 TraceCheckUtils]: 50: Hoare triple {15429#(<= ~waterLevel~0 1)} isLowWaterLevel_#t~ret56 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret56 && isLowWaterLevel_#t~ret56 <= 2147483647;isLowWaterLevel_~tmp~7 := isLowWaterLevel_#t~ret56;havoc isLowWaterLevel_#t~ret56; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:39,972 INFO L280 TraceCheckUtils]: 51: Hoare triple {15429#(<= ~waterLevel~0 1)} assume 0 != isLowWaterLevel_~tmp~7;isLowWaterLevel_~tmp___0~1 := 0; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:39,972 INFO L280 TraceCheckUtils]: 52: Hoare triple {15429#(<= ~waterLevel~0 1)} isLowWaterLevel_~retValue_acc~6 := isLowWaterLevel_~tmp___0~1;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~6; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:39,973 INFO L280 TraceCheckUtils]: 53: Hoare triple {15429#(<= ~waterLevel~0 1)} processEnvironment__wrappee__lowWaterSensor_#t~ret36 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__lowWaterSensor_#t~ret36 && processEnvironment__wrappee__lowWaterSensor_#t~ret36 <= 2147483647;processEnvironment__wrappee__lowWaterSensor_~tmp~4 := processEnvironment__wrappee__lowWaterSensor_#t~ret36;havoc processEnvironment__wrappee__lowWaterSensor_#t~ret36; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:39,973 INFO L280 TraceCheckUtils]: 54: Hoare triple {15429#(<= ~waterLevel~0 1)} assume !(0 != processEnvironment__wrappee__lowWaterSensor_~tmp~4);havoc processEnvironment__wrappee__highWaterSensor_#t~ret35, processEnvironment__wrappee__highWaterSensor_~tmp~3;havoc processEnvironment__wrappee__highWaterSensor_~tmp~3; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:39,974 INFO L280 TraceCheckUtils]: 55: Hoare triple {15429#(<= ~waterLevel~0 1)} assume !(0 == ~pumpRunning~0); {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:39,974 INFO L280 TraceCheckUtils]: 56: Hoare triple {15429#(<= ~waterLevel~0 1)} havoc __utac_acc__Specification5_spec__3_#t~ret63, __utac_acc__Specification5_spec__3_#t~ret64, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:39,975 INFO L280 TraceCheckUtils]: 57: Hoare triple {15429#(<= ~waterLevel~0 1)} __utac_acc__Specification5_spec__3_#t~ret63 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret63 && __utac_acc__Specification5_spec__3_#t~ret63 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret63;havoc __utac_acc__Specification5_spec__3_#t~ret63; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:39,975 INFO L280 TraceCheckUtils]: 58: Hoare triple {15429#(<= ~waterLevel~0 1)} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:39,976 INFO L280 TraceCheckUtils]: 59: Hoare triple {15429#(<= ~waterLevel~0 1)} __utac_acc__Specification5_spec__3_#t~ret64 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret64 && __utac_acc__Specification5_spec__3_#t~ret64 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret64;havoc __utac_acc__Specification5_spec__3_#t~ret64; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:39,976 INFO L280 TraceCheckUtils]: 60: Hoare triple {15429#(<= ~waterLevel~0 1)} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:39,977 INFO L280 TraceCheckUtils]: 61: Hoare triple {15429#(<= ~waterLevel~0 1)} assume !(0 == ~switchedOnBeforeTS~0); {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:39,977 INFO L280 TraceCheckUtils]: 62: Hoare triple {15429#(<= ~waterLevel~0 1)} assume !false; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:39,978 INFO L280 TraceCheckUtils]: 63: Hoare triple {15429#(<= ~waterLevel~0 1)} assume test_~splverifierCounter~0 < 4; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:39,978 INFO L280 TraceCheckUtils]: 64: Hoare triple {15429#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet58 && test_#t~nondet58 <= 2147483647;test_~tmp~8 := test_#t~nondet58;havoc test_#t~nondet58; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:39,979 INFO L280 TraceCheckUtils]: 65: Hoare triple {15429#(<= ~waterLevel~0 1)} assume !(0 != test_~tmp~8); {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:39,979 INFO L280 TraceCheckUtils]: 66: Hoare triple {15429#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet59 && test_#t~nondet59 <= 2147483647;test_~tmp___0~2 := test_#t~nondet59;havoc test_#t~nondet59; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:39,980 INFO L280 TraceCheckUtils]: 67: Hoare triple {15429#(<= ~waterLevel~0 1)} assume !(0 != test_~tmp___0~2); {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:39,980 INFO L280 TraceCheckUtils]: 68: Hoare triple {15429#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet60 && test_#t~nondet60 <= 2147483647;test_~tmp___2~0 := test_#t~nondet60;havoc test_#t~nondet60; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:39,981 INFO L280 TraceCheckUtils]: 69: Hoare triple {15429#(<= ~waterLevel~0 1)} assume 0 != test_~tmp___2~0; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:39,981 INFO L280 TraceCheckUtils]: 70: Hoare triple {15429#(<= ~waterLevel~0 1)} havoc __utac_acc__Specification5_spec__2_#t~ret62;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:39,982 INFO L280 TraceCheckUtils]: 71: Hoare triple {15429#(<= ~waterLevel~0 1)} __utac_acc__Specification5_spec__2_#t~ret62 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret62 && __utac_acc__Specification5_spec__2_#t~ret62 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret62;havoc __utac_acc__Specification5_spec__2_#t~ret62; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:39,982 INFO L280 TraceCheckUtils]: 72: Hoare triple {15429#(<= ~waterLevel~0 1)} assume 0 != ~pumpRunning~0; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:39,983 INFO L280 TraceCheckUtils]: 73: Hoare triple {15429#(<= ~waterLevel~0 1)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {15430#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:06:39,983 INFO L280 TraceCheckUtils]: 74: Hoare triple {15430#(<= ~waterLevel~0 0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret37, processEnvironment_~tmp~5;havoc processEnvironment_~tmp~5; {15430#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:06:39,984 INFO L280 TraceCheckUtils]: 75: Hoare triple {15430#(<= ~waterLevel~0 0)} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret38, isMethaneAlarm_~retValue_acc~3;havoc isMethaneAlarm_~retValue_acc~3;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~10;havoc isMethaneLevelCritical_~retValue_acc~10;isMethaneLevelCritical_~retValue_acc~10 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~10; {15430#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:06:39,984 INFO L280 TraceCheckUtils]: 76: Hoare triple {15430#(<= ~waterLevel~0 0)} isMethaneAlarm_#t~ret38 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret38 && isMethaneAlarm_#t~ret38 <= 2147483647;isMethaneAlarm_~retValue_acc~3 := isMethaneAlarm_#t~ret38;havoc isMethaneAlarm_#t~ret38;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~3; {15430#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:06:39,985 INFO L280 TraceCheckUtils]: 77: Hoare triple {15430#(<= ~waterLevel~0 0)} processEnvironment_#t~ret37 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret37 && processEnvironment_#t~ret37 <= 2147483647;processEnvironment_~tmp~5 := processEnvironment_#t~ret37;havoc processEnvironment_#t~ret37; {15430#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:06:39,985 INFO L280 TraceCheckUtils]: 78: Hoare triple {15430#(<= ~waterLevel~0 0)} assume 0 != processEnvironment_~tmp~5;~pumpRunning~0 := 0; {15430#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:06:39,986 INFO L280 TraceCheckUtils]: 79: Hoare triple {15430#(<= ~waterLevel~0 0)} havoc __utac_acc__Specification5_spec__3_#t~ret63, __utac_acc__Specification5_spec__3_#t~ret64, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {15430#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:06:39,986 INFO L280 TraceCheckUtils]: 80: Hoare triple {15430#(<= ~waterLevel~0 0)} __utac_acc__Specification5_spec__3_#t~ret63 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret63 && __utac_acc__Specification5_spec__3_#t~ret63 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret63;havoc __utac_acc__Specification5_spec__3_#t~ret63; {15430#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:06:39,987 INFO L280 TraceCheckUtils]: 81: Hoare triple {15430#(<= ~waterLevel~0 0)} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {15430#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:06:39,987 INFO L280 TraceCheckUtils]: 82: Hoare triple {15430#(<= ~waterLevel~0 0)} __utac_acc__Specification5_spec__3_#t~ret64 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret64 && __utac_acc__Specification5_spec__3_#t~ret64 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret64;havoc __utac_acc__Specification5_spec__3_#t~ret64; {15430#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:06:39,988 INFO L280 TraceCheckUtils]: 83: Hoare triple {15430#(<= ~waterLevel~0 0)} assume !(0 != __utac_acc__Specification5_spec__3_~tmp___0~3); {15430#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:06:39,989 INFO L280 TraceCheckUtils]: 84: Hoare triple {15430#(<= ~waterLevel~0 0)} assume !false; {15430#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:06:39,989 INFO L280 TraceCheckUtils]: 85: Hoare triple {15430#(<= ~waterLevel~0 0)} assume test_~splverifierCounter~0 < 4; {15430#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:06:39,990 INFO L280 TraceCheckUtils]: 86: Hoare triple {15430#(<= ~waterLevel~0 0)} assume -2147483648 <= test_#t~nondet58 && test_#t~nondet58 <= 2147483647;test_~tmp~8 := test_#t~nondet58;havoc test_#t~nondet58; {15430#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:06:39,990 INFO L280 TraceCheckUtils]: 87: Hoare triple {15430#(<= ~waterLevel~0 0)} assume 0 != test_~tmp~8; {15430#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:06:39,991 INFO L280 TraceCheckUtils]: 88: Hoare triple {15430#(<= ~waterLevel~0 0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:39,991 INFO L280 TraceCheckUtils]: 89: Hoare triple {15429#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet59 && test_#t~nondet59 <= 2147483647;test_~tmp___0~2 := test_#t~nondet59;havoc test_#t~nondet59; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:39,992 INFO L280 TraceCheckUtils]: 90: Hoare triple {15429#(<= ~waterLevel~0 1)} assume !(0 != test_~tmp___0~2); {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:39,992 INFO L280 TraceCheckUtils]: 91: Hoare triple {15429#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet60 && test_#t~nondet60 <= 2147483647;test_~tmp___2~0 := test_#t~nondet60;havoc test_#t~nondet60; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:39,993 INFO L280 TraceCheckUtils]: 92: Hoare triple {15429#(<= ~waterLevel~0 1)} assume 0 != test_~tmp___2~0; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:39,993 INFO L280 TraceCheckUtils]: 93: Hoare triple {15429#(<= ~waterLevel~0 1)} havoc __utac_acc__Specification5_spec__2_#t~ret62;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:39,994 INFO L280 TraceCheckUtils]: 94: Hoare triple {15429#(<= ~waterLevel~0 1)} __utac_acc__Specification5_spec__2_#t~ret62 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret62 && __utac_acc__Specification5_spec__2_#t~ret62 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret62;havoc __utac_acc__Specification5_spec__2_#t~ret62; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:39,994 INFO L280 TraceCheckUtils]: 95: Hoare triple {15429#(<= ~waterLevel~0 1)} assume !(0 != ~pumpRunning~0); {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:39,995 INFO L280 TraceCheckUtils]: 96: Hoare triple {15429#(<= ~waterLevel~0 1)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret37, processEnvironment_~tmp~5;havoc processEnvironment_~tmp~5; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:39,995 INFO L280 TraceCheckUtils]: 97: Hoare triple {15429#(<= ~waterLevel~0 1)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret36, processEnvironment__wrappee__lowWaterSensor_~tmp~4;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~4; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:39,996 INFO L280 TraceCheckUtils]: 98: Hoare triple {15429#(<= ~waterLevel~0 1)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret35, processEnvironment__wrappee__highWaterSensor_~tmp~3;havoc processEnvironment__wrappee__highWaterSensor_~tmp~3; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:39,996 INFO L280 TraceCheckUtils]: 99: Hoare triple {15429#(<= ~waterLevel~0 1)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret55, isHighWaterLevel_~retValue_acc~5, isHighWaterLevel_~tmp~6, isHighWaterLevel_~tmp___0~0;havoc isHighWaterLevel_~retValue_acc~5;havoc isHighWaterLevel_~tmp~6;havoc isHighWaterLevel_~tmp___0~0;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~12;havoc isHighWaterSensorDry_~retValue_acc~12; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:39,997 INFO L280 TraceCheckUtils]: 100: Hoare triple {15429#(<= ~waterLevel~0 1)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~12 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~12; {15426#false} is VALID [2020-07-28 19:06:39,997 INFO L280 TraceCheckUtils]: 101: Hoare triple {15426#false} isHighWaterLevel_#t~ret55 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret55 && isHighWaterLevel_#t~ret55 <= 2147483647;isHighWaterLevel_~tmp~6 := isHighWaterLevel_#t~ret55;havoc isHighWaterLevel_#t~ret55; {15426#false} is VALID [2020-07-28 19:06:39,998 INFO L280 TraceCheckUtils]: 102: Hoare triple {15426#false} assume !(0 != isHighWaterLevel_~tmp~6);isHighWaterLevel_~tmp___0~0 := 1; {15426#false} is VALID [2020-07-28 19:06:39,998 INFO L280 TraceCheckUtils]: 103: Hoare triple {15426#false} isHighWaterLevel_~retValue_acc~5 := isHighWaterLevel_~tmp___0~0;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~5; {15426#false} is VALID [2020-07-28 19:06:39,998 INFO L280 TraceCheckUtils]: 104: Hoare triple {15426#false} processEnvironment__wrappee__highWaterSensor_#t~ret35 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret35 && processEnvironment__wrappee__highWaterSensor_#t~ret35 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~3 := processEnvironment__wrappee__highWaterSensor_#t~ret35;havoc processEnvironment__wrappee__highWaterSensor_#t~ret35; {15426#false} is VALID [2020-07-28 19:06:39,998 INFO L280 TraceCheckUtils]: 105: Hoare triple {15426#false} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~3;~pumpRunning~0 := 1; {15426#false} is VALID [2020-07-28 19:06:39,998 INFO L280 TraceCheckUtils]: 106: Hoare triple {15426#false} havoc __utac_acc__Specification5_spec__3_#t~ret63, __utac_acc__Specification5_spec__3_#t~ret64, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {15426#false} is VALID [2020-07-28 19:06:39,998 INFO L280 TraceCheckUtils]: 107: Hoare triple {15426#false} __utac_acc__Specification5_spec__3_#t~ret63 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret63 && __utac_acc__Specification5_spec__3_#t~ret63 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret63;havoc __utac_acc__Specification5_spec__3_#t~ret63; {15426#false} is VALID [2020-07-28 19:06:39,999 INFO L280 TraceCheckUtils]: 108: Hoare triple {15426#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {15426#false} is VALID [2020-07-28 19:06:39,999 INFO L280 TraceCheckUtils]: 109: Hoare triple {15426#false} __utac_acc__Specification5_spec__3_#t~ret64 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret64 && __utac_acc__Specification5_spec__3_#t~ret64 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret64;havoc __utac_acc__Specification5_spec__3_#t~ret64; {15426#false} is VALID [2020-07-28 19:06:39,999 INFO L280 TraceCheckUtils]: 110: Hoare triple {15426#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3; {15426#false} is VALID [2020-07-28 19:06:39,999 INFO L280 TraceCheckUtils]: 111: Hoare triple {15426#false} assume 0 == ~switchedOnBeforeTS~0; {15426#false} is VALID [2020-07-28 19:06:39,999 INFO L280 TraceCheckUtils]: 112: Hoare triple {15426#false} assume !false; {15426#false} is VALID [2020-07-28 19:06:40,011 INFO L134 CoverageAnalysis]: Checked inductivity of 116 backedges. 85 proven. 15 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2020-07-28 19:06:40,015 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [724029042] [2020-07-28 19:06:40,015 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [147006337] [2020-07-28 19:06:40,016 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 4 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 4 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2020-07-28 19:06:40,141 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:06:40,143 INFO L263 TraceCheckSpWp]: Trace formula consists of 590 conjuncts, 6 conjunts are in the unsatisfiable core [2020-07-28 19:06:40,172 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:06:40,175 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2020-07-28 19:06:40,394 INFO L280 TraceCheckUtils]: 0: Hoare triple {15425#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(13);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string42.base, #t~string42.offset, 1);call write~init~int(110, #t~string42.base, 1 + #t~string42.offset, 1);call write~init~int(0, #t~string42.base, 2 + #t~string42.offset, 1);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string44.base, #t~string44.offset, 1);call write~init~int(102, #t~string44.base, 1 + #t~string44.offset, 1);call write~init~int(102, #t~string44.base, 2 + #t~string44.offset, 1);call write~init~int(0, #t~string44.base, 3 + #t~string44.offset, 1);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string46.base, #t~string46.offset, 1);call write~init~int(80, #t~string46.base, 1 + #t~string46.offset, 1);call write~init~int(117, #t~string46.base, 2 + #t~string46.offset, 1);call write~init~int(109, #t~string46.base, 3 + #t~string46.offset, 1);call write~init~int(112, #t~string46.base, 4 + #t~string46.offset, 1);call write~init~int(58, #t~string46.base, 5 + #t~string46.offset, 1);call write~init~int(0, #t~string46.base, 6 + #t~string46.offset, 1);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string48.base, #t~string48.offset, 1);call write~init~int(110, #t~string48.base, 1 + #t~string48.offset, 1);call write~init~int(0, #t~string48.base, 2 + #t~string48.offset, 1);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string50.base, #t~string50.offset, 1);call write~init~int(102, #t~string50.base, 1 + #t~string50.offset, 1);call write~init~int(102, #t~string50.base, 2 + #t~string50.offset, 1);call write~init~int(0, #t~string50.base, 3 + #t~string50.offset, 1);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string52.base, #t~string52.offset, 1);call write~init~int(32, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 2 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string54.base, #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 1 + #t~string54.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(13);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string69.base, #t~string69.offset, 1);call write~init~int(77, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(101, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(116, #t~string69.base, 3 + #t~string69.offset, 1);call write~init~int(104, #t~string69.base, 4 + #t~string69.offset, 1);call write~init~int(58, #t~string69.base, 5 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 6 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string71.base, #t~string71.offset, 1);call write~init~int(82, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(73, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(84, #t~string71.base, 3 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 4 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string73.base, #t~string73.offset, 1);call write~init~int(75, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 2 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string75.base, #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 1 + #t~string75.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:40,395 INFO L280 TraceCheckUtils]: 1: Hoare triple {15429#(<= ~waterLevel~0 1)} havoc main_#res;havoc main_#t~ret65, main_~retValue_acc~9, main_~tmp~10;havoc main_~retValue_acc~9;havoc main_~tmp~10; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:40,395 INFO L280 TraceCheckUtils]: 2: Hoare triple {15429#(<= ~waterLevel~0 1)} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:40,396 INFO L280 TraceCheckUtils]: 3: Hoare triple {15429#(<= ~waterLevel~0 1)} main_#t~ret65 := valid_product_#res;assume -2147483648 <= main_#t~ret65 && main_#t~ret65 <= 2147483647;main_~tmp~10 := main_#t~ret65;havoc main_#t~ret65; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:40,396 INFO L280 TraceCheckUtils]: 4: Hoare triple {15429#(<= ~waterLevel~0 1)} assume 0 != main_~tmp~10; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:40,396 INFO L280 TraceCheckUtils]: 5: Hoare triple {15429#(<= ~waterLevel~0 1)} ~switchedOnBeforeTS~0 := 0; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:40,397 INFO L280 TraceCheckUtils]: 6: Hoare triple {15429#(<= ~waterLevel~0 1)} havoc test_#t~nondet58, test_#t~nondet59, test_#t~nondet60, test_#t~nondet61, test_~splverifierCounter~0, test_~tmp~8, test_~tmp___0~2, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~8;havoc test_~tmp___0~2;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:40,398 INFO L280 TraceCheckUtils]: 7: Hoare triple {15429#(<= ~waterLevel~0 1)} assume !false; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:40,398 INFO L280 TraceCheckUtils]: 8: Hoare triple {15429#(<= ~waterLevel~0 1)} assume test_~splverifierCounter~0 < 4; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:40,398 INFO L280 TraceCheckUtils]: 9: Hoare triple {15429#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet58 && test_#t~nondet58 <= 2147483647;test_~tmp~8 := test_#t~nondet58;havoc test_#t~nondet58; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:40,399 INFO L280 TraceCheckUtils]: 10: Hoare triple {15429#(<= ~waterLevel~0 1)} assume 0 != test_~tmp~8; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:40,399 INFO L280 TraceCheckUtils]: 11: Hoare triple {15429#(<= ~waterLevel~0 1)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {15428#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:40,400 INFO L280 TraceCheckUtils]: 12: Hoare triple {15428#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet59 && test_#t~nondet59 <= 2147483647;test_~tmp___0~2 := test_#t~nondet59;havoc test_#t~nondet59; {15428#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:40,401 INFO L280 TraceCheckUtils]: 13: Hoare triple {15428#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___0~2); {15428#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:40,401 INFO L280 TraceCheckUtils]: 14: Hoare triple {15428#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet60 && test_#t~nondet60 <= 2147483647;test_~tmp___2~0 := test_#t~nondet60;havoc test_#t~nondet60; {15428#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:40,401 INFO L280 TraceCheckUtils]: 15: Hoare triple {15428#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0; {15428#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:40,402 INFO L280 TraceCheckUtils]: 16: Hoare triple {15428#(<= ~waterLevel~0 2)} havoc __utac_acc__Specification5_spec__2_#t~ret62;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {15428#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:40,402 INFO L280 TraceCheckUtils]: 17: Hoare triple {15428#(<= ~waterLevel~0 2)} __utac_acc__Specification5_spec__2_#t~ret62 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret62 && __utac_acc__Specification5_spec__2_#t~ret62 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret62;havoc __utac_acc__Specification5_spec__2_#t~ret62; {15428#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:40,403 INFO L280 TraceCheckUtils]: 18: Hoare triple {15428#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0); {15428#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:40,403 INFO L280 TraceCheckUtils]: 19: Hoare triple {15428#(<= ~waterLevel~0 2)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret37, processEnvironment_~tmp~5;havoc processEnvironment_~tmp~5; {15428#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:40,403 INFO L280 TraceCheckUtils]: 20: Hoare triple {15428#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret36, processEnvironment__wrappee__lowWaterSensor_~tmp~4;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~4; {15428#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:40,404 INFO L280 TraceCheckUtils]: 21: Hoare triple {15428#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret35, processEnvironment__wrappee__highWaterSensor_~tmp~3;havoc processEnvironment__wrappee__highWaterSensor_~tmp~3; {15428#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:40,404 INFO L280 TraceCheckUtils]: 22: Hoare triple {15428#(<= ~waterLevel~0 2)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret55, isHighWaterLevel_~retValue_acc~5, isHighWaterLevel_~tmp~6, isHighWaterLevel_~tmp___0~0;havoc isHighWaterLevel_~retValue_acc~5;havoc isHighWaterLevel_~tmp~6;havoc isHighWaterLevel_~tmp___0~0;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~12;havoc isHighWaterSensorDry_~retValue_acc~12; {15428#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:40,405 INFO L280 TraceCheckUtils]: 23: Hoare triple {15428#(<= ~waterLevel~0 2)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~12 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~12; {15428#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:40,405 INFO L280 TraceCheckUtils]: 24: Hoare triple {15428#(<= ~waterLevel~0 2)} isHighWaterLevel_#t~ret55 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret55 && isHighWaterLevel_#t~ret55 <= 2147483647;isHighWaterLevel_~tmp~6 := isHighWaterLevel_#t~ret55;havoc isHighWaterLevel_#t~ret55; {15428#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:40,405 INFO L280 TraceCheckUtils]: 25: Hoare triple {15428#(<= ~waterLevel~0 2)} assume !(0 != isHighWaterLevel_~tmp~6);isHighWaterLevel_~tmp___0~0 := 1; {15428#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:40,406 INFO L280 TraceCheckUtils]: 26: Hoare triple {15428#(<= ~waterLevel~0 2)} isHighWaterLevel_~retValue_acc~5 := isHighWaterLevel_~tmp___0~0;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~5; {15428#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:40,406 INFO L280 TraceCheckUtils]: 27: Hoare triple {15428#(<= ~waterLevel~0 2)} processEnvironment__wrappee__highWaterSensor_#t~ret35 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret35 && processEnvironment__wrappee__highWaterSensor_#t~ret35 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~3 := processEnvironment__wrappee__highWaterSensor_#t~ret35;havoc processEnvironment__wrappee__highWaterSensor_#t~ret35; {15428#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:40,407 INFO L280 TraceCheckUtils]: 28: Hoare triple {15428#(<= ~waterLevel~0 2)} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~3;~pumpRunning~0 := 1; {15428#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:40,407 INFO L280 TraceCheckUtils]: 29: Hoare triple {15428#(<= ~waterLevel~0 2)} havoc __utac_acc__Specification5_spec__3_#t~ret63, __utac_acc__Specification5_spec__3_#t~ret64, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {15428#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:40,407 INFO L280 TraceCheckUtils]: 30: Hoare triple {15428#(<= ~waterLevel~0 2)} __utac_acc__Specification5_spec__3_#t~ret63 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret63 && __utac_acc__Specification5_spec__3_#t~ret63 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret63;havoc __utac_acc__Specification5_spec__3_#t~ret63; {15428#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:40,408 INFO L280 TraceCheckUtils]: 31: Hoare triple {15428#(<= ~waterLevel~0 2)} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~9); {15428#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:40,408 INFO L280 TraceCheckUtils]: 32: Hoare triple {15428#(<= ~waterLevel~0 2)} assume !false; {15428#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:40,409 INFO L280 TraceCheckUtils]: 33: Hoare triple {15428#(<= ~waterLevel~0 2)} assume test_~splverifierCounter~0 < 4; {15428#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:40,409 INFO L280 TraceCheckUtils]: 34: Hoare triple {15428#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet58 && test_#t~nondet58 <= 2147483647;test_~tmp~8 := test_#t~nondet58;havoc test_#t~nondet58; {15428#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:40,410 INFO L280 TraceCheckUtils]: 35: Hoare triple {15428#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp~8); {15428#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:40,410 INFO L280 TraceCheckUtils]: 36: Hoare triple {15428#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet59 && test_#t~nondet59 <= 2147483647;test_~tmp___0~2 := test_#t~nondet59;havoc test_#t~nondet59; {15428#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:40,411 INFO L280 TraceCheckUtils]: 37: Hoare triple {15428#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___0~2); {15428#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:40,411 INFO L280 TraceCheckUtils]: 38: Hoare triple {15428#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet60 && test_#t~nondet60 <= 2147483647;test_~tmp___2~0 := test_#t~nondet60;havoc test_#t~nondet60; {15428#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:40,411 INFO L280 TraceCheckUtils]: 39: Hoare triple {15428#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0; {15428#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:40,412 INFO L280 TraceCheckUtils]: 40: Hoare triple {15428#(<= ~waterLevel~0 2)} havoc __utac_acc__Specification5_spec__2_#t~ret62;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {15428#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:40,412 INFO L280 TraceCheckUtils]: 41: Hoare triple {15428#(<= ~waterLevel~0 2)} __utac_acc__Specification5_spec__2_#t~ret62 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret62 && __utac_acc__Specification5_spec__2_#t~ret62 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret62;havoc __utac_acc__Specification5_spec__2_#t~ret62; {15428#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:40,412 INFO L280 TraceCheckUtils]: 42: Hoare triple {15428#(<= ~waterLevel~0 2)} assume 0 != ~pumpRunning~0; {15428#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:40,413 INFO L280 TraceCheckUtils]: 43: Hoare triple {15428#(<= ~waterLevel~0 2)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:40,413 INFO L280 TraceCheckUtils]: 44: Hoare triple {15429#(<= ~waterLevel~0 1)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret37, processEnvironment_~tmp~5;havoc processEnvironment_~tmp~5; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:40,414 INFO L280 TraceCheckUtils]: 45: Hoare triple {15429#(<= ~waterLevel~0 1)} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret38, isMethaneAlarm_~retValue_acc~3;havoc isMethaneAlarm_~retValue_acc~3;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~10;havoc isMethaneLevelCritical_~retValue_acc~10;isMethaneLevelCritical_~retValue_acc~10 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~10; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:40,414 INFO L280 TraceCheckUtils]: 46: Hoare triple {15429#(<= ~waterLevel~0 1)} isMethaneAlarm_#t~ret38 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret38 && isMethaneAlarm_#t~ret38 <= 2147483647;isMethaneAlarm_~retValue_acc~3 := isMethaneAlarm_#t~ret38;havoc isMethaneAlarm_#t~ret38;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~3; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:40,415 INFO L280 TraceCheckUtils]: 47: Hoare triple {15429#(<= ~waterLevel~0 1)} processEnvironment_#t~ret37 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret37 && processEnvironment_#t~ret37 <= 2147483647;processEnvironment_~tmp~5 := processEnvironment_#t~ret37;havoc processEnvironment_#t~ret37; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:40,415 INFO L280 TraceCheckUtils]: 48: Hoare triple {15429#(<= ~waterLevel~0 1)} assume !(0 != processEnvironment_~tmp~5);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret36, processEnvironment__wrappee__lowWaterSensor_~tmp~4;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~4; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:40,415 INFO L280 TraceCheckUtils]: 49: Hoare triple {15429#(<= ~waterLevel~0 1)} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret56, isLowWaterLevel_~retValue_acc~6, isLowWaterLevel_~tmp~7, isLowWaterLevel_~tmp___0~1;havoc isLowWaterLevel_~retValue_acc~6;havoc isLowWaterLevel_~tmp~7;havoc isLowWaterLevel_~tmp___0~1;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~13;havoc isLowWaterSensorDry_~retValue_acc~13;isLowWaterSensorDry_~retValue_acc~13 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~13; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:40,416 INFO L280 TraceCheckUtils]: 50: Hoare triple {15429#(<= ~waterLevel~0 1)} isLowWaterLevel_#t~ret56 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret56 && isLowWaterLevel_#t~ret56 <= 2147483647;isLowWaterLevel_~tmp~7 := isLowWaterLevel_#t~ret56;havoc isLowWaterLevel_#t~ret56; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:40,416 INFO L280 TraceCheckUtils]: 51: Hoare triple {15429#(<= ~waterLevel~0 1)} assume 0 != isLowWaterLevel_~tmp~7;isLowWaterLevel_~tmp___0~1 := 0; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:40,417 INFO L280 TraceCheckUtils]: 52: Hoare triple {15429#(<= ~waterLevel~0 1)} isLowWaterLevel_~retValue_acc~6 := isLowWaterLevel_~tmp___0~1;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~6; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:40,417 INFO L280 TraceCheckUtils]: 53: Hoare triple {15429#(<= ~waterLevel~0 1)} processEnvironment__wrappee__lowWaterSensor_#t~ret36 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__lowWaterSensor_#t~ret36 && processEnvironment__wrappee__lowWaterSensor_#t~ret36 <= 2147483647;processEnvironment__wrappee__lowWaterSensor_~tmp~4 := processEnvironment__wrappee__lowWaterSensor_#t~ret36;havoc processEnvironment__wrappee__lowWaterSensor_#t~ret36; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:40,417 INFO L280 TraceCheckUtils]: 54: Hoare triple {15429#(<= ~waterLevel~0 1)} assume !(0 != processEnvironment__wrappee__lowWaterSensor_~tmp~4);havoc processEnvironment__wrappee__highWaterSensor_#t~ret35, processEnvironment__wrappee__highWaterSensor_~tmp~3;havoc processEnvironment__wrappee__highWaterSensor_~tmp~3; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:40,418 INFO L280 TraceCheckUtils]: 55: Hoare triple {15429#(<= ~waterLevel~0 1)} assume !(0 == ~pumpRunning~0); {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:40,418 INFO L280 TraceCheckUtils]: 56: Hoare triple {15429#(<= ~waterLevel~0 1)} havoc __utac_acc__Specification5_spec__3_#t~ret63, __utac_acc__Specification5_spec__3_#t~ret64, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:40,418 INFO L280 TraceCheckUtils]: 57: Hoare triple {15429#(<= ~waterLevel~0 1)} __utac_acc__Specification5_spec__3_#t~ret63 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret63 && __utac_acc__Specification5_spec__3_#t~ret63 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret63;havoc __utac_acc__Specification5_spec__3_#t~ret63; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:40,419 INFO L280 TraceCheckUtils]: 58: Hoare triple {15429#(<= ~waterLevel~0 1)} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:40,419 INFO L280 TraceCheckUtils]: 59: Hoare triple {15429#(<= ~waterLevel~0 1)} __utac_acc__Specification5_spec__3_#t~ret64 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret64 && __utac_acc__Specification5_spec__3_#t~ret64 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret64;havoc __utac_acc__Specification5_spec__3_#t~ret64; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:40,420 INFO L280 TraceCheckUtils]: 60: Hoare triple {15429#(<= ~waterLevel~0 1)} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:40,421 INFO L280 TraceCheckUtils]: 61: Hoare triple {15429#(<= ~waterLevel~0 1)} assume !(0 == ~switchedOnBeforeTS~0); {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:40,421 INFO L280 TraceCheckUtils]: 62: Hoare triple {15429#(<= ~waterLevel~0 1)} assume !false; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:40,422 INFO L280 TraceCheckUtils]: 63: Hoare triple {15429#(<= ~waterLevel~0 1)} assume test_~splverifierCounter~0 < 4; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:40,422 INFO L280 TraceCheckUtils]: 64: Hoare triple {15429#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet58 && test_#t~nondet58 <= 2147483647;test_~tmp~8 := test_#t~nondet58;havoc test_#t~nondet58; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:40,423 INFO L280 TraceCheckUtils]: 65: Hoare triple {15429#(<= ~waterLevel~0 1)} assume !(0 != test_~tmp~8); {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:40,424 INFO L280 TraceCheckUtils]: 66: Hoare triple {15429#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet59 && test_#t~nondet59 <= 2147483647;test_~tmp___0~2 := test_#t~nondet59;havoc test_#t~nondet59; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:40,424 INFO L280 TraceCheckUtils]: 67: Hoare triple {15429#(<= ~waterLevel~0 1)} assume !(0 != test_~tmp___0~2); {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:40,424 INFO L280 TraceCheckUtils]: 68: Hoare triple {15429#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet60 && test_#t~nondet60 <= 2147483647;test_~tmp___2~0 := test_#t~nondet60;havoc test_#t~nondet60; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:40,425 INFO L280 TraceCheckUtils]: 69: Hoare triple {15429#(<= ~waterLevel~0 1)} assume 0 != test_~tmp___2~0; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:40,425 INFO L280 TraceCheckUtils]: 70: Hoare triple {15429#(<= ~waterLevel~0 1)} havoc __utac_acc__Specification5_spec__2_#t~ret62;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:40,426 INFO L280 TraceCheckUtils]: 71: Hoare triple {15429#(<= ~waterLevel~0 1)} __utac_acc__Specification5_spec__2_#t~ret62 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret62 && __utac_acc__Specification5_spec__2_#t~ret62 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret62;havoc __utac_acc__Specification5_spec__2_#t~ret62; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:40,426 INFO L280 TraceCheckUtils]: 72: Hoare triple {15429#(<= ~waterLevel~0 1)} assume 0 != ~pumpRunning~0; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:40,427 INFO L280 TraceCheckUtils]: 73: Hoare triple {15429#(<= ~waterLevel~0 1)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {15430#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:06:40,427 INFO L280 TraceCheckUtils]: 74: Hoare triple {15430#(<= ~waterLevel~0 0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret37, processEnvironment_~tmp~5;havoc processEnvironment_~tmp~5; {15430#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:06:40,427 INFO L280 TraceCheckUtils]: 75: Hoare triple {15430#(<= ~waterLevel~0 0)} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret38, isMethaneAlarm_~retValue_acc~3;havoc isMethaneAlarm_~retValue_acc~3;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~10;havoc isMethaneLevelCritical_~retValue_acc~10;isMethaneLevelCritical_~retValue_acc~10 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~10; {15430#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:06:40,428 INFO L280 TraceCheckUtils]: 76: Hoare triple {15430#(<= ~waterLevel~0 0)} isMethaneAlarm_#t~ret38 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret38 && isMethaneAlarm_#t~ret38 <= 2147483647;isMethaneAlarm_~retValue_acc~3 := isMethaneAlarm_#t~ret38;havoc isMethaneAlarm_#t~ret38;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~3; {15430#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:06:40,428 INFO L280 TraceCheckUtils]: 77: Hoare triple {15430#(<= ~waterLevel~0 0)} processEnvironment_#t~ret37 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret37 && processEnvironment_#t~ret37 <= 2147483647;processEnvironment_~tmp~5 := processEnvironment_#t~ret37;havoc processEnvironment_#t~ret37; {15430#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:06:40,429 INFO L280 TraceCheckUtils]: 78: Hoare triple {15430#(<= ~waterLevel~0 0)} assume 0 != processEnvironment_~tmp~5;~pumpRunning~0 := 0; {15430#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:06:40,429 INFO L280 TraceCheckUtils]: 79: Hoare triple {15430#(<= ~waterLevel~0 0)} havoc __utac_acc__Specification5_spec__3_#t~ret63, __utac_acc__Specification5_spec__3_#t~ret64, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {15430#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:06:40,429 INFO L280 TraceCheckUtils]: 80: Hoare triple {15430#(<= ~waterLevel~0 0)} __utac_acc__Specification5_spec__3_#t~ret63 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret63 && __utac_acc__Specification5_spec__3_#t~ret63 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret63;havoc __utac_acc__Specification5_spec__3_#t~ret63; {15430#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:06:40,430 INFO L280 TraceCheckUtils]: 81: Hoare triple {15430#(<= ~waterLevel~0 0)} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {15430#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:06:40,430 INFO L280 TraceCheckUtils]: 82: Hoare triple {15430#(<= ~waterLevel~0 0)} __utac_acc__Specification5_spec__3_#t~ret64 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret64 && __utac_acc__Specification5_spec__3_#t~ret64 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret64;havoc __utac_acc__Specification5_spec__3_#t~ret64; {15430#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:06:40,431 INFO L280 TraceCheckUtils]: 83: Hoare triple {15430#(<= ~waterLevel~0 0)} assume !(0 != __utac_acc__Specification5_spec__3_~tmp___0~3); {15430#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:06:40,431 INFO L280 TraceCheckUtils]: 84: Hoare triple {15430#(<= ~waterLevel~0 0)} assume !false; {15430#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:06:40,431 INFO L280 TraceCheckUtils]: 85: Hoare triple {15430#(<= ~waterLevel~0 0)} assume test_~splverifierCounter~0 < 4; {15430#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:06:40,432 INFO L280 TraceCheckUtils]: 86: Hoare triple {15430#(<= ~waterLevel~0 0)} assume -2147483648 <= test_#t~nondet58 && test_#t~nondet58 <= 2147483647;test_~tmp~8 := test_#t~nondet58;havoc test_#t~nondet58; {15430#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:06:40,438 INFO L280 TraceCheckUtils]: 87: Hoare triple {15430#(<= ~waterLevel~0 0)} assume 0 != test_~tmp~8; {15430#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:06:40,439 INFO L280 TraceCheckUtils]: 88: Hoare triple {15430#(<= ~waterLevel~0 0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:40,439 INFO L280 TraceCheckUtils]: 89: Hoare triple {15429#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet59 && test_#t~nondet59 <= 2147483647;test_~tmp___0~2 := test_#t~nondet59;havoc test_#t~nondet59; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:40,440 INFO L280 TraceCheckUtils]: 90: Hoare triple {15429#(<= ~waterLevel~0 1)} assume !(0 != test_~tmp___0~2); {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:40,440 INFO L280 TraceCheckUtils]: 91: Hoare triple {15429#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet60 && test_#t~nondet60 <= 2147483647;test_~tmp___2~0 := test_#t~nondet60;havoc test_#t~nondet60; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:40,441 INFO L280 TraceCheckUtils]: 92: Hoare triple {15429#(<= ~waterLevel~0 1)} assume 0 != test_~tmp___2~0; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:40,442 INFO L280 TraceCheckUtils]: 93: Hoare triple {15429#(<= ~waterLevel~0 1)} havoc __utac_acc__Specification5_spec__2_#t~ret62;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:40,442 INFO L280 TraceCheckUtils]: 94: Hoare triple {15429#(<= ~waterLevel~0 1)} __utac_acc__Specification5_spec__2_#t~ret62 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret62 && __utac_acc__Specification5_spec__2_#t~ret62 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret62;havoc __utac_acc__Specification5_spec__2_#t~ret62; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:40,443 INFO L280 TraceCheckUtils]: 95: Hoare triple {15429#(<= ~waterLevel~0 1)} assume !(0 != ~pumpRunning~0); {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:40,443 INFO L280 TraceCheckUtils]: 96: Hoare triple {15429#(<= ~waterLevel~0 1)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret37, processEnvironment_~tmp~5;havoc processEnvironment_~tmp~5; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:40,444 INFO L280 TraceCheckUtils]: 97: Hoare triple {15429#(<= ~waterLevel~0 1)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret36, processEnvironment__wrappee__lowWaterSensor_~tmp~4;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~4; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:40,444 INFO L280 TraceCheckUtils]: 98: Hoare triple {15429#(<= ~waterLevel~0 1)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret35, processEnvironment__wrappee__highWaterSensor_~tmp~3;havoc processEnvironment__wrappee__highWaterSensor_~tmp~3; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:40,445 INFO L280 TraceCheckUtils]: 99: Hoare triple {15429#(<= ~waterLevel~0 1)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret55, isHighWaterLevel_~retValue_acc~5, isHighWaterLevel_~tmp~6, isHighWaterLevel_~tmp___0~0;havoc isHighWaterLevel_~retValue_acc~5;havoc isHighWaterLevel_~tmp~6;havoc isHighWaterLevel_~tmp___0~0;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~12;havoc isHighWaterSensorDry_~retValue_acc~12; {15429#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:40,446 INFO L280 TraceCheckUtils]: 100: Hoare triple {15429#(<= ~waterLevel~0 1)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~12 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~12; {15426#false} is VALID [2020-07-28 19:06:40,446 INFO L280 TraceCheckUtils]: 101: Hoare triple {15426#false} isHighWaterLevel_#t~ret55 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret55 && isHighWaterLevel_#t~ret55 <= 2147483647;isHighWaterLevel_~tmp~6 := isHighWaterLevel_#t~ret55;havoc isHighWaterLevel_#t~ret55; {15426#false} is VALID [2020-07-28 19:06:40,447 INFO L280 TraceCheckUtils]: 102: Hoare triple {15426#false} assume !(0 != isHighWaterLevel_~tmp~6);isHighWaterLevel_~tmp___0~0 := 1; {15426#false} is VALID [2020-07-28 19:06:40,447 INFO L280 TraceCheckUtils]: 103: Hoare triple {15426#false} isHighWaterLevel_~retValue_acc~5 := isHighWaterLevel_~tmp___0~0;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~5; {15426#false} is VALID [2020-07-28 19:06:40,447 INFO L280 TraceCheckUtils]: 104: Hoare triple {15426#false} processEnvironment__wrappee__highWaterSensor_#t~ret35 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret35 && processEnvironment__wrappee__highWaterSensor_#t~ret35 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~3 := processEnvironment__wrappee__highWaterSensor_#t~ret35;havoc processEnvironment__wrappee__highWaterSensor_#t~ret35; {15426#false} is VALID [2020-07-28 19:06:40,447 INFO L280 TraceCheckUtils]: 105: Hoare triple {15426#false} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~3;~pumpRunning~0 := 1; {15426#false} is VALID [2020-07-28 19:06:40,447 INFO L280 TraceCheckUtils]: 106: Hoare triple {15426#false} havoc __utac_acc__Specification5_spec__3_#t~ret63, __utac_acc__Specification5_spec__3_#t~ret64, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {15426#false} is VALID [2020-07-28 19:06:40,447 INFO L280 TraceCheckUtils]: 107: Hoare triple {15426#false} __utac_acc__Specification5_spec__3_#t~ret63 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret63 && __utac_acc__Specification5_spec__3_#t~ret63 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret63;havoc __utac_acc__Specification5_spec__3_#t~ret63; {15426#false} is VALID [2020-07-28 19:06:40,448 INFO L280 TraceCheckUtils]: 108: Hoare triple {15426#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {15426#false} is VALID [2020-07-28 19:06:40,448 INFO L280 TraceCheckUtils]: 109: Hoare triple {15426#false} __utac_acc__Specification5_spec__3_#t~ret64 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret64 && __utac_acc__Specification5_spec__3_#t~ret64 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret64;havoc __utac_acc__Specification5_spec__3_#t~ret64; {15426#false} is VALID [2020-07-28 19:06:40,448 INFO L280 TraceCheckUtils]: 110: Hoare triple {15426#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3; {15426#false} is VALID [2020-07-28 19:06:40,448 INFO L280 TraceCheckUtils]: 111: Hoare triple {15426#false} assume 0 == ~switchedOnBeforeTS~0; {15426#false} is VALID [2020-07-28 19:06:40,449 INFO L280 TraceCheckUtils]: 112: Hoare triple {15426#false} assume !false; {15426#false} is VALID [2020-07-28 19:06:40,460 INFO L134 CoverageAnalysis]: Checked inductivity of 116 backedges. 90 proven. 6 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2020-07-28 19:06:40,461 INFO L220 FreeRefinementEngine]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2020-07-28 19:06:40,461 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 4] total 5 [2020-07-28 19:06:40,461 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [344681442] [2020-07-28 19:06:40,462 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 113 [2020-07-28 19:06:40,463 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:06:40,463 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states. [2020-07-28 19:06:40,600 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 109 edges. 109 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:06:40,600 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2020-07-28 19:06:40,601 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:06:40,601 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2020-07-28 19:06:40,601 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=16, Unknown=0, NotChecked=0, Total=30 [2020-07-28 19:06:40,601 INFO L87 Difference]: Start difference. First operand 230 states and 282 transitions. Second operand 6 states. [2020-07-28 19:06:41,996 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:41,996 INFO L93 Difference]: Finished difference Result 458 states and 566 transitions. [2020-07-28 19:06:41,996 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2020-07-28 19:06:41,997 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 113 [2020-07-28 19:06:41,997 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:06:41,997 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 19:06:41,998 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 254 transitions. [2020-07-28 19:06:41,998 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 19:06:42,000 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 254 transitions. [2020-07-28 19:06:42,000 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states and 254 transitions. [2020-07-28 19:06:42,308 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 254 edges. 254 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:06:42,318 INFO L225 Difference]: With dead ends: 458 [2020-07-28 19:06:42,318 INFO L226 Difference]: Without dead ends: 348 [2020-07-28 19:06:42,319 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 118 GetRequests, 114 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=14, Invalid=16, Unknown=0, NotChecked=0, Total=30 [2020-07-28 19:06:42,320 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 348 states. [2020-07-28 19:06:43,598 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 348 to 305. [2020-07-28 19:06:43,599 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:06:43,599 INFO L82 GeneralOperation]: Start isEquivalent. First operand 348 states. Second operand 305 states. [2020-07-28 19:06:43,599 INFO L74 IsIncluded]: Start isIncluded. First operand 348 states. Second operand 305 states. [2020-07-28 19:06:43,599 INFO L87 Difference]: Start difference. First operand 348 states. Second operand 305 states. [2020-07-28 19:06:43,619 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:43,619 INFO L93 Difference]: Finished difference Result 348 states and 427 transitions. [2020-07-28 19:06:43,619 INFO L276 IsEmpty]: Start isEmpty. Operand 348 states and 427 transitions. [2020-07-28 19:06:43,621 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:06:43,621 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:06:43,622 INFO L74 IsIncluded]: Start isIncluded. First operand 305 states. Second operand 348 states. [2020-07-28 19:06:43,622 INFO L87 Difference]: Start difference. First operand 305 states. Second operand 348 states. [2020-07-28 19:06:43,640 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:43,640 INFO L93 Difference]: Finished difference Result 348 states and 427 transitions. [2020-07-28 19:06:43,641 INFO L276 IsEmpty]: Start isEmpty. Operand 348 states and 427 transitions. [2020-07-28 19:06:43,642 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:06:43,642 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:06:43,642 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:06:43,643 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:06:43,643 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 305 states. [2020-07-28 19:06:43,659 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 305 states to 305 states and 375 transitions. [2020-07-28 19:06:43,659 INFO L78 Accepts]: Start accepts. Automaton has 305 states and 375 transitions. Word has length 113 [2020-07-28 19:06:43,660 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:06:43,660 INFO L479 AbstractCegarLoop]: Abstraction has 305 states and 375 transitions. [2020-07-28 19:06:43,660 INFO L480 AbstractCegarLoop]: Interpolant automaton has 6 states. [2020-07-28 19:06:43,661 INFO L276 IsEmpty]: Start isEmpty. Operand 305 states and 375 transitions. [2020-07-28 19:06:43,664 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 141 [2020-07-28 19:06:43,664 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:06:43,665 INFO L422 BasicCegarLoop]: trace histogram [5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:06:43,877 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable12 [2020-07-28 19:06:43,878 INFO L427 AbstractCegarLoop]: === Iteration 14 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:06:43,878 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:06:43,879 INFO L82 PathProgramCache]: Analyzing trace with hash 621842217, now seen corresponding path program 1 times [2020-07-28 19:06:43,879 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:06:43,879 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1953736148] [2020-07-28 19:06:43,880 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:06:43,975 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:06:44,216 INFO L280 TraceCheckUtils]: 0: Hoare triple {17519#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(13);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string42.base, #t~string42.offset, 1);call write~init~int(110, #t~string42.base, 1 + #t~string42.offset, 1);call write~init~int(0, #t~string42.base, 2 + #t~string42.offset, 1);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string44.base, #t~string44.offset, 1);call write~init~int(102, #t~string44.base, 1 + #t~string44.offset, 1);call write~init~int(102, #t~string44.base, 2 + #t~string44.offset, 1);call write~init~int(0, #t~string44.base, 3 + #t~string44.offset, 1);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string46.base, #t~string46.offset, 1);call write~init~int(80, #t~string46.base, 1 + #t~string46.offset, 1);call write~init~int(117, #t~string46.base, 2 + #t~string46.offset, 1);call write~init~int(109, #t~string46.base, 3 + #t~string46.offset, 1);call write~init~int(112, #t~string46.base, 4 + #t~string46.offset, 1);call write~init~int(58, #t~string46.base, 5 + #t~string46.offset, 1);call write~init~int(0, #t~string46.base, 6 + #t~string46.offset, 1);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string48.base, #t~string48.offset, 1);call write~init~int(110, #t~string48.base, 1 + #t~string48.offset, 1);call write~init~int(0, #t~string48.base, 2 + #t~string48.offset, 1);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string50.base, #t~string50.offset, 1);call write~init~int(102, #t~string50.base, 1 + #t~string50.offset, 1);call write~init~int(102, #t~string50.base, 2 + #t~string50.offset, 1);call write~init~int(0, #t~string50.base, 3 + #t~string50.offset, 1);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string52.base, #t~string52.offset, 1);call write~init~int(32, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 2 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string54.base, #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 1 + #t~string54.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(13);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string69.base, #t~string69.offset, 1);call write~init~int(77, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(101, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(116, #t~string69.base, 3 + #t~string69.offset, 1);call write~init~int(104, #t~string69.base, 4 + #t~string69.offset, 1);call write~init~int(58, #t~string69.base, 5 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 6 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string71.base, #t~string71.offset, 1);call write~init~int(82, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(73, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(84, #t~string71.base, 3 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 4 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string73.base, #t~string73.offset, 1);call write~init~int(75, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 2 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string75.base, #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 1 + #t~string75.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,217 INFO L280 TraceCheckUtils]: 1: Hoare triple {17521#(= 1 ~waterLevel~0)} havoc main_#res;havoc main_#t~ret65, main_~retValue_acc~9, main_~tmp~10;havoc main_~retValue_acc~9;havoc main_~tmp~10; {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,218 INFO L280 TraceCheckUtils]: 2: Hoare triple {17521#(= 1 ~waterLevel~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,219 INFO L280 TraceCheckUtils]: 3: Hoare triple {17521#(= 1 ~waterLevel~0)} main_#t~ret65 := valid_product_#res;assume -2147483648 <= main_#t~ret65 && main_#t~ret65 <= 2147483647;main_~tmp~10 := main_#t~ret65;havoc main_#t~ret65; {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,220 INFO L280 TraceCheckUtils]: 4: Hoare triple {17521#(= 1 ~waterLevel~0)} assume 0 != main_~tmp~10; {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,220 INFO L280 TraceCheckUtils]: 5: Hoare triple {17521#(= 1 ~waterLevel~0)} ~switchedOnBeforeTS~0 := 0; {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,221 INFO L280 TraceCheckUtils]: 6: Hoare triple {17521#(= 1 ~waterLevel~0)} havoc test_#t~nondet58, test_#t~nondet59, test_#t~nondet60, test_#t~nondet61, test_~splverifierCounter~0, test_~tmp~8, test_~tmp___0~2, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~8;havoc test_~tmp___0~2;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,222 INFO L280 TraceCheckUtils]: 7: Hoare triple {17521#(= 1 ~waterLevel~0)} assume !false; {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,223 INFO L280 TraceCheckUtils]: 8: Hoare triple {17521#(= 1 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,224 INFO L280 TraceCheckUtils]: 9: Hoare triple {17521#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet58 && test_#t~nondet58 <= 2147483647;test_~tmp~8 := test_#t~nondet58;havoc test_#t~nondet58; {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,225 INFO L280 TraceCheckUtils]: 10: Hoare triple {17521#(= 1 ~waterLevel~0)} assume 0 != test_~tmp~8; {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,226 INFO L280 TraceCheckUtils]: 11: Hoare triple {17521#(= 1 ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:44,227 INFO L280 TraceCheckUtils]: 12: Hoare triple {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume -2147483648 <= test_#t~nondet59 && test_#t~nondet59 <= 2147483647;test_~tmp___0~2 := test_#t~nondet59;havoc test_#t~nondet59; {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:44,228 INFO L280 TraceCheckUtils]: 13: Hoare triple {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(0 != test_~tmp___0~2); {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:44,229 INFO L280 TraceCheckUtils]: 14: Hoare triple {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume -2147483648 <= test_#t~nondet60 && test_#t~nondet60 <= 2147483647;test_~tmp___2~0 := test_#t~nondet60;havoc test_#t~nondet60; {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:44,231 INFO L280 TraceCheckUtils]: 15: Hoare triple {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume 0 != test_~tmp___2~0; {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:44,232 INFO L280 TraceCheckUtils]: 16: Hoare triple {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} havoc __utac_acc__Specification5_spec__2_#t~ret62;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:44,233 INFO L280 TraceCheckUtils]: 17: Hoare triple {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} __utac_acc__Specification5_spec__2_#t~ret62 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret62 && __utac_acc__Specification5_spec__2_#t~ret62 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret62;havoc __utac_acc__Specification5_spec__2_#t~ret62; {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:44,234 INFO L280 TraceCheckUtils]: 18: Hoare triple {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(0 != ~pumpRunning~0); {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:44,235 INFO L280 TraceCheckUtils]: 19: Hoare triple {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret37, processEnvironment_~tmp~5;havoc processEnvironment_~tmp~5; {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:44,236 INFO L280 TraceCheckUtils]: 20: Hoare triple {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret36, processEnvironment__wrappee__lowWaterSensor_~tmp~4;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~4; {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:44,237 INFO L280 TraceCheckUtils]: 21: Hoare triple {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret35, processEnvironment__wrappee__highWaterSensor_~tmp~3;havoc processEnvironment__wrappee__highWaterSensor_~tmp~3; {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:44,238 INFO L280 TraceCheckUtils]: 22: Hoare triple {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret55, isHighWaterLevel_~retValue_acc~5, isHighWaterLevel_~tmp~6, isHighWaterLevel_~tmp___0~0;havoc isHighWaterLevel_~retValue_acc~5;havoc isHighWaterLevel_~tmp~6;havoc isHighWaterLevel_~tmp___0~0;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~12;havoc isHighWaterSensorDry_~retValue_acc~12; {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:44,239 INFO L280 TraceCheckUtils]: 23: Hoare triple {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~12 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~12; {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:44,240 INFO L280 TraceCheckUtils]: 24: Hoare triple {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} isHighWaterLevel_#t~ret55 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret55 && isHighWaterLevel_#t~ret55 <= 2147483647;isHighWaterLevel_~tmp~6 := isHighWaterLevel_#t~ret55;havoc isHighWaterLevel_#t~ret55; {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:44,241 INFO L280 TraceCheckUtils]: 25: Hoare triple {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(0 != isHighWaterLevel_~tmp~6);isHighWaterLevel_~tmp___0~0 := 1; {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:44,242 INFO L280 TraceCheckUtils]: 26: Hoare triple {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} isHighWaterLevel_~retValue_acc~5 := isHighWaterLevel_~tmp___0~0;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~5; {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:44,244 INFO L280 TraceCheckUtils]: 27: Hoare triple {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} processEnvironment__wrappee__highWaterSensor_#t~ret35 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret35 && processEnvironment__wrappee__highWaterSensor_#t~ret35 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~3 := processEnvironment__wrappee__highWaterSensor_#t~ret35;havoc processEnvironment__wrappee__highWaterSensor_#t~ret35; {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:44,245 INFO L280 TraceCheckUtils]: 28: Hoare triple {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~3;~pumpRunning~0 := 1; {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:44,246 INFO L280 TraceCheckUtils]: 29: Hoare triple {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} havoc __utac_acc__Specification5_spec__3_#t~ret63, __utac_acc__Specification5_spec__3_#t~ret64, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:44,247 INFO L280 TraceCheckUtils]: 30: Hoare triple {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} __utac_acc__Specification5_spec__3_#t~ret63 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret63 && __utac_acc__Specification5_spec__3_#t~ret63 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret63;havoc __utac_acc__Specification5_spec__3_#t~ret63; {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:44,248 INFO L280 TraceCheckUtils]: 31: Hoare triple {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~9); {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:44,249 INFO L280 TraceCheckUtils]: 32: Hoare triple {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !false; {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:44,251 INFO L280 TraceCheckUtils]: 33: Hoare triple {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume test_~splverifierCounter~0 < 4; {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:44,252 INFO L280 TraceCheckUtils]: 34: Hoare triple {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume -2147483648 <= test_#t~nondet58 && test_#t~nondet58 <= 2147483647;test_~tmp~8 := test_#t~nondet58;havoc test_#t~nondet58; {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:44,253 INFO L280 TraceCheckUtils]: 35: Hoare triple {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(0 != test_~tmp~8); {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:44,254 INFO L280 TraceCheckUtils]: 36: Hoare triple {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume -2147483648 <= test_#t~nondet59 && test_#t~nondet59 <= 2147483647;test_~tmp___0~2 := test_#t~nondet59;havoc test_#t~nondet59; {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:44,255 INFO L280 TraceCheckUtils]: 37: Hoare triple {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(0 != test_~tmp___0~2); {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:44,256 INFO L280 TraceCheckUtils]: 38: Hoare triple {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume -2147483648 <= test_#t~nondet60 && test_#t~nondet60 <= 2147483647;test_~tmp___2~0 := test_#t~nondet60;havoc test_#t~nondet60; {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:44,257 INFO L280 TraceCheckUtils]: 39: Hoare triple {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume 0 != test_~tmp___2~0; {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:44,258 INFO L280 TraceCheckUtils]: 40: Hoare triple {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} havoc __utac_acc__Specification5_spec__2_#t~ret62;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:44,260 INFO L280 TraceCheckUtils]: 41: Hoare triple {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} __utac_acc__Specification5_spec__2_#t~ret62 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret62 && __utac_acc__Specification5_spec__2_#t~ret62 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret62;havoc __utac_acc__Specification5_spec__2_#t~ret62; {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:44,261 INFO L280 TraceCheckUtils]: 42: Hoare triple {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume 0 != ~pumpRunning~0; {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:44,262 INFO L280 TraceCheckUtils]: 43: Hoare triple {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,263 INFO L280 TraceCheckUtils]: 44: Hoare triple {17521#(= 1 ~waterLevel~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret37, processEnvironment_~tmp~5;havoc processEnvironment_~tmp~5; {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,264 INFO L280 TraceCheckUtils]: 45: Hoare triple {17521#(= 1 ~waterLevel~0)} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret38, isMethaneAlarm_~retValue_acc~3;havoc isMethaneAlarm_~retValue_acc~3;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~10;havoc isMethaneLevelCritical_~retValue_acc~10;isMethaneLevelCritical_~retValue_acc~10 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~10; {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,265 INFO L280 TraceCheckUtils]: 46: Hoare triple {17521#(= 1 ~waterLevel~0)} isMethaneAlarm_#t~ret38 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret38 && isMethaneAlarm_#t~ret38 <= 2147483647;isMethaneAlarm_~retValue_acc~3 := isMethaneAlarm_#t~ret38;havoc isMethaneAlarm_#t~ret38;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~3; {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,266 INFO L280 TraceCheckUtils]: 47: Hoare triple {17521#(= 1 ~waterLevel~0)} processEnvironment_#t~ret37 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret37 && processEnvironment_#t~ret37 <= 2147483647;processEnvironment_~tmp~5 := processEnvironment_#t~ret37;havoc processEnvironment_#t~ret37; {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,266 INFO L280 TraceCheckUtils]: 48: Hoare triple {17521#(= 1 ~waterLevel~0)} assume !(0 != processEnvironment_~tmp~5);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret36, processEnvironment__wrappee__lowWaterSensor_~tmp~4;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~4; {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,267 INFO L280 TraceCheckUtils]: 49: Hoare triple {17521#(= 1 ~waterLevel~0)} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret56, isLowWaterLevel_~retValue_acc~6, isLowWaterLevel_~tmp~7, isLowWaterLevel_~tmp___0~1;havoc isLowWaterLevel_~retValue_acc~6;havoc isLowWaterLevel_~tmp~7;havoc isLowWaterLevel_~tmp___0~1;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~13;havoc isLowWaterSensorDry_~retValue_acc~13;isLowWaterSensorDry_~retValue_acc~13 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~13; {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,268 INFO L280 TraceCheckUtils]: 50: Hoare triple {17521#(= 1 ~waterLevel~0)} isLowWaterLevel_#t~ret56 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret56 && isLowWaterLevel_#t~ret56 <= 2147483647;isLowWaterLevel_~tmp~7 := isLowWaterLevel_#t~ret56;havoc isLowWaterLevel_#t~ret56; {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,269 INFO L280 TraceCheckUtils]: 51: Hoare triple {17521#(= 1 ~waterLevel~0)} assume 0 != isLowWaterLevel_~tmp~7;isLowWaterLevel_~tmp___0~1 := 0; {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,270 INFO L280 TraceCheckUtils]: 52: Hoare triple {17521#(= 1 ~waterLevel~0)} isLowWaterLevel_~retValue_acc~6 := isLowWaterLevel_~tmp___0~1;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~6; {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,271 INFO L280 TraceCheckUtils]: 53: Hoare triple {17521#(= 1 ~waterLevel~0)} processEnvironment__wrappee__lowWaterSensor_#t~ret36 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__lowWaterSensor_#t~ret36 && processEnvironment__wrappee__lowWaterSensor_#t~ret36 <= 2147483647;processEnvironment__wrappee__lowWaterSensor_~tmp~4 := processEnvironment__wrappee__lowWaterSensor_#t~ret36;havoc processEnvironment__wrappee__lowWaterSensor_#t~ret36; {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,272 INFO L280 TraceCheckUtils]: 54: Hoare triple {17521#(= 1 ~waterLevel~0)} assume !(0 != processEnvironment__wrappee__lowWaterSensor_~tmp~4);havoc processEnvironment__wrappee__highWaterSensor_#t~ret35, processEnvironment__wrappee__highWaterSensor_~tmp~3;havoc processEnvironment__wrappee__highWaterSensor_~tmp~3; {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,272 INFO L280 TraceCheckUtils]: 55: Hoare triple {17521#(= 1 ~waterLevel~0)} assume !(0 == ~pumpRunning~0); {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,273 INFO L280 TraceCheckUtils]: 56: Hoare triple {17521#(= 1 ~waterLevel~0)} havoc __utac_acc__Specification5_spec__3_#t~ret63, __utac_acc__Specification5_spec__3_#t~ret64, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,274 INFO L280 TraceCheckUtils]: 57: Hoare triple {17521#(= 1 ~waterLevel~0)} __utac_acc__Specification5_spec__3_#t~ret63 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret63 && __utac_acc__Specification5_spec__3_#t~ret63 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret63;havoc __utac_acc__Specification5_spec__3_#t~ret63; {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,275 INFO L280 TraceCheckUtils]: 58: Hoare triple {17521#(= 1 ~waterLevel~0)} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,276 INFO L280 TraceCheckUtils]: 59: Hoare triple {17521#(= 1 ~waterLevel~0)} __utac_acc__Specification5_spec__3_#t~ret64 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret64 && __utac_acc__Specification5_spec__3_#t~ret64 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret64;havoc __utac_acc__Specification5_spec__3_#t~ret64; {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,277 INFO L280 TraceCheckUtils]: 60: Hoare triple {17521#(= 1 ~waterLevel~0)} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3; {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,278 INFO L280 TraceCheckUtils]: 61: Hoare triple {17521#(= 1 ~waterLevel~0)} assume !(0 == ~switchedOnBeforeTS~0); {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,279 INFO L280 TraceCheckUtils]: 62: Hoare triple {17521#(= 1 ~waterLevel~0)} assume !false; {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,280 INFO L280 TraceCheckUtils]: 63: Hoare triple {17521#(= 1 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,281 INFO L280 TraceCheckUtils]: 64: Hoare triple {17521#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet58 && test_#t~nondet58 <= 2147483647;test_~tmp~8 := test_#t~nondet58;havoc test_#t~nondet58; {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,283 INFO L280 TraceCheckUtils]: 65: Hoare triple {17521#(= 1 ~waterLevel~0)} assume !(0 != test_~tmp~8); {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,283 INFO L280 TraceCheckUtils]: 66: Hoare triple {17521#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet59 && test_#t~nondet59 <= 2147483647;test_~tmp___0~2 := test_#t~nondet59;havoc test_#t~nondet59; {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,284 INFO L280 TraceCheckUtils]: 67: Hoare triple {17521#(= 1 ~waterLevel~0)} assume !(0 != test_~tmp___0~2); {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,285 INFO L280 TraceCheckUtils]: 68: Hoare triple {17521#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet60 && test_#t~nondet60 <= 2147483647;test_~tmp___2~0 := test_#t~nondet60;havoc test_#t~nondet60; {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,286 INFO L280 TraceCheckUtils]: 69: Hoare triple {17521#(= 1 ~waterLevel~0)} assume 0 != test_~tmp___2~0; {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,287 INFO L280 TraceCheckUtils]: 70: Hoare triple {17521#(= 1 ~waterLevel~0)} havoc __utac_acc__Specification5_spec__2_#t~ret62;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,288 INFO L280 TraceCheckUtils]: 71: Hoare triple {17521#(= 1 ~waterLevel~0)} __utac_acc__Specification5_spec__2_#t~ret62 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret62 && __utac_acc__Specification5_spec__2_#t~ret62 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret62;havoc __utac_acc__Specification5_spec__2_#t~ret62; {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,289 INFO L280 TraceCheckUtils]: 72: Hoare triple {17521#(= 1 ~waterLevel~0)} assume 0 != ~pumpRunning~0; {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,290 INFO L280 TraceCheckUtils]: 73: Hoare triple {17521#(= 1 ~waterLevel~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {17523#(and (<= 0 ~waterLevel~0) (<= ~waterLevel~0 0))} is VALID [2020-07-28 19:06:44,291 INFO L280 TraceCheckUtils]: 74: Hoare triple {17523#(and (<= 0 ~waterLevel~0) (<= ~waterLevel~0 0))} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret37, processEnvironment_~tmp~5;havoc processEnvironment_~tmp~5; {17523#(and (<= 0 ~waterLevel~0) (<= ~waterLevel~0 0))} is VALID [2020-07-28 19:06:44,292 INFO L280 TraceCheckUtils]: 75: Hoare triple {17523#(and (<= 0 ~waterLevel~0) (<= ~waterLevel~0 0))} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret38, isMethaneAlarm_~retValue_acc~3;havoc isMethaneAlarm_~retValue_acc~3;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~10;havoc isMethaneLevelCritical_~retValue_acc~10;isMethaneLevelCritical_~retValue_acc~10 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~10; {17523#(and (<= 0 ~waterLevel~0) (<= ~waterLevel~0 0))} is VALID [2020-07-28 19:06:44,293 INFO L280 TraceCheckUtils]: 76: Hoare triple {17523#(and (<= 0 ~waterLevel~0) (<= ~waterLevel~0 0))} isMethaneAlarm_#t~ret38 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret38 && isMethaneAlarm_#t~ret38 <= 2147483647;isMethaneAlarm_~retValue_acc~3 := isMethaneAlarm_#t~ret38;havoc isMethaneAlarm_#t~ret38;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~3; {17523#(and (<= 0 ~waterLevel~0) (<= ~waterLevel~0 0))} is VALID [2020-07-28 19:06:44,294 INFO L280 TraceCheckUtils]: 77: Hoare triple {17523#(and (<= 0 ~waterLevel~0) (<= ~waterLevel~0 0))} processEnvironment_#t~ret37 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret37 && processEnvironment_#t~ret37 <= 2147483647;processEnvironment_~tmp~5 := processEnvironment_#t~ret37;havoc processEnvironment_#t~ret37; {17523#(and (<= 0 ~waterLevel~0) (<= ~waterLevel~0 0))} is VALID [2020-07-28 19:06:44,295 INFO L280 TraceCheckUtils]: 78: Hoare triple {17523#(and (<= 0 ~waterLevel~0) (<= ~waterLevel~0 0))} assume 0 != processEnvironment_~tmp~5;~pumpRunning~0 := 0; {17523#(and (<= 0 ~waterLevel~0) (<= ~waterLevel~0 0))} is VALID [2020-07-28 19:06:44,296 INFO L280 TraceCheckUtils]: 79: Hoare triple {17523#(and (<= 0 ~waterLevel~0) (<= ~waterLevel~0 0))} havoc __utac_acc__Specification5_spec__3_#t~ret63, __utac_acc__Specification5_spec__3_#t~ret64, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {17523#(and (<= 0 ~waterLevel~0) (<= ~waterLevel~0 0))} is VALID [2020-07-28 19:06:44,298 INFO L280 TraceCheckUtils]: 80: Hoare triple {17523#(and (<= 0 ~waterLevel~0) (<= ~waterLevel~0 0))} __utac_acc__Specification5_spec__3_#t~ret63 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret63 && __utac_acc__Specification5_spec__3_#t~ret63 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret63;havoc __utac_acc__Specification5_spec__3_#t~ret63; {17523#(and (<= 0 ~waterLevel~0) (<= ~waterLevel~0 0))} is VALID [2020-07-28 19:06:44,299 INFO L280 TraceCheckUtils]: 81: Hoare triple {17523#(and (<= 0 ~waterLevel~0) (<= ~waterLevel~0 0))} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {17523#(and (<= 0 ~waterLevel~0) (<= ~waterLevel~0 0))} is VALID [2020-07-28 19:06:44,300 INFO L280 TraceCheckUtils]: 82: Hoare triple {17523#(and (<= 0 ~waterLevel~0) (<= ~waterLevel~0 0))} __utac_acc__Specification5_spec__3_#t~ret64 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret64 && __utac_acc__Specification5_spec__3_#t~ret64 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret64;havoc __utac_acc__Specification5_spec__3_#t~ret64; {17523#(and (<= 0 ~waterLevel~0) (<= ~waterLevel~0 0))} is VALID [2020-07-28 19:06:44,301 INFO L280 TraceCheckUtils]: 83: Hoare triple {17523#(and (<= 0 ~waterLevel~0) (<= ~waterLevel~0 0))} assume !(0 != __utac_acc__Specification5_spec__3_~tmp___0~3); {17523#(and (<= 0 ~waterLevel~0) (<= ~waterLevel~0 0))} is VALID [2020-07-28 19:06:44,302 INFO L280 TraceCheckUtils]: 84: Hoare triple {17523#(and (<= 0 ~waterLevel~0) (<= ~waterLevel~0 0))} assume !false; {17523#(and (<= 0 ~waterLevel~0) (<= ~waterLevel~0 0))} is VALID [2020-07-28 19:06:44,303 INFO L280 TraceCheckUtils]: 85: Hoare triple {17523#(and (<= 0 ~waterLevel~0) (<= ~waterLevel~0 0))} assume test_~splverifierCounter~0 < 4; {17523#(and (<= 0 ~waterLevel~0) (<= ~waterLevel~0 0))} is VALID [2020-07-28 19:06:44,304 INFO L280 TraceCheckUtils]: 86: Hoare triple {17523#(and (<= 0 ~waterLevel~0) (<= ~waterLevel~0 0))} assume -2147483648 <= test_#t~nondet58 && test_#t~nondet58 <= 2147483647;test_~tmp~8 := test_#t~nondet58;havoc test_#t~nondet58; {17523#(and (<= 0 ~waterLevel~0) (<= ~waterLevel~0 0))} is VALID [2020-07-28 19:06:44,306 INFO L280 TraceCheckUtils]: 87: Hoare triple {17523#(and (<= 0 ~waterLevel~0) (<= ~waterLevel~0 0))} assume 0 != test_~tmp~8; {17523#(and (<= 0 ~waterLevel~0) (<= ~waterLevel~0 0))} is VALID [2020-07-28 19:06:44,307 INFO L280 TraceCheckUtils]: 88: Hoare triple {17523#(and (<= 0 ~waterLevel~0) (<= ~waterLevel~0 0))} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,308 INFO L280 TraceCheckUtils]: 89: Hoare triple {17521#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet59 && test_#t~nondet59 <= 2147483647;test_~tmp___0~2 := test_#t~nondet59;havoc test_#t~nondet59; {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,309 INFO L280 TraceCheckUtils]: 90: Hoare triple {17521#(= 1 ~waterLevel~0)} assume !(0 != test_~tmp___0~2); {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,310 INFO L280 TraceCheckUtils]: 91: Hoare triple {17521#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet60 && test_#t~nondet60 <= 2147483647;test_~tmp___2~0 := test_#t~nondet60;havoc test_#t~nondet60; {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,311 INFO L280 TraceCheckUtils]: 92: Hoare triple {17521#(= 1 ~waterLevel~0)} assume 0 != test_~tmp___2~0; {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,312 INFO L280 TraceCheckUtils]: 93: Hoare triple {17521#(= 1 ~waterLevel~0)} havoc __utac_acc__Specification5_spec__2_#t~ret62;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,313 INFO L280 TraceCheckUtils]: 94: Hoare triple {17521#(= 1 ~waterLevel~0)} __utac_acc__Specification5_spec__2_#t~ret62 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret62 && __utac_acc__Specification5_spec__2_#t~ret62 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret62;havoc __utac_acc__Specification5_spec__2_#t~ret62; {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,314 INFO L280 TraceCheckUtils]: 95: Hoare triple {17521#(= 1 ~waterLevel~0)} assume !(0 != ~pumpRunning~0); {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,314 INFO L280 TraceCheckUtils]: 96: Hoare triple {17521#(= 1 ~waterLevel~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret37, processEnvironment_~tmp~5;havoc processEnvironment_~tmp~5; {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,315 INFO L280 TraceCheckUtils]: 97: Hoare triple {17521#(= 1 ~waterLevel~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret36, processEnvironment__wrappee__lowWaterSensor_~tmp~4;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~4; {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,316 INFO L280 TraceCheckUtils]: 98: Hoare triple {17521#(= 1 ~waterLevel~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret35, processEnvironment__wrappee__highWaterSensor_~tmp~3;havoc processEnvironment__wrappee__highWaterSensor_~tmp~3; {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,317 INFO L280 TraceCheckUtils]: 99: Hoare triple {17521#(= 1 ~waterLevel~0)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret55, isHighWaterLevel_~retValue_acc~5, isHighWaterLevel_~tmp~6, isHighWaterLevel_~tmp___0~0;havoc isHighWaterLevel_~retValue_acc~5;havoc isHighWaterLevel_~tmp~6;havoc isHighWaterLevel_~tmp___0~0;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~12;havoc isHighWaterSensorDry_~retValue_acc~12; {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,318 INFO L280 TraceCheckUtils]: 100: Hoare triple {17521#(= 1 ~waterLevel~0)} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~12 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~12; {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,319 INFO L280 TraceCheckUtils]: 101: Hoare triple {17521#(= 1 ~waterLevel~0)} isHighWaterLevel_#t~ret55 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret55 && isHighWaterLevel_#t~ret55 <= 2147483647;isHighWaterLevel_~tmp~6 := isHighWaterLevel_#t~ret55;havoc isHighWaterLevel_#t~ret55; {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,320 INFO L280 TraceCheckUtils]: 102: Hoare triple {17521#(= 1 ~waterLevel~0)} assume 0 != isHighWaterLevel_~tmp~6;isHighWaterLevel_~tmp___0~0 := 0; {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,321 INFO L280 TraceCheckUtils]: 103: Hoare triple {17521#(= 1 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~5 := isHighWaterLevel_~tmp___0~0;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~5; {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,322 INFO L280 TraceCheckUtils]: 104: Hoare triple {17521#(= 1 ~waterLevel~0)} processEnvironment__wrappee__highWaterSensor_#t~ret35 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret35 && processEnvironment__wrappee__highWaterSensor_#t~ret35 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~3 := processEnvironment__wrappee__highWaterSensor_#t~ret35;havoc processEnvironment__wrappee__highWaterSensor_#t~ret35; {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,323 INFO L280 TraceCheckUtils]: 105: Hoare triple {17521#(= 1 ~waterLevel~0)} assume !(0 != processEnvironment__wrappee__highWaterSensor_~tmp~3); {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,324 INFO L280 TraceCheckUtils]: 106: Hoare triple {17521#(= 1 ~waterLevel~0)} havoc __utac_acc__Specification5_spec__3_#t~ret63, __utac_acc__Specification5_spec__3_#t~ret64, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,325 INFO L280 TraceCheckUtils]: 107: Hoare triple {17521#(= 1 ~waterLevel~0)} __utac_acc__Specification5_spec__3_#t~ret63 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret63 && __utac_acc__Specification5_spec__3_#t~ret63 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret63;havoc __utac_acc__Specification5_spec__3_#t~ret63; {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,325 INFO L280 TraceCheckUtils]: 108: Hoare triple {17521#(= 1 ~waterLevel~0)} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,326 INFO L280 TraceCheckUtils]: 109: Hoare triple {17521#(= 1 ~waterLevel~0)} __utac_acc__Specification5_spec__3_#t~ret64 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret64 && __utac_acc__Specification5_spec__3_#t~ret64 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret64;havoc __utac_acc__Specification5_spec__3_#t~ret64; {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,330 INFO L280 TraceCheckUtils]: 110: Hoare triple {17521#(= 1 ~waterLevel~0)} assume !(0 != __utac_acc__Specification5_spec__3_~tmp___0~3); {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,331 INFO L280 TraceCheckUtils]: 111: Hoare triple {17521#(= 1 ~waterLevel~0)} assume !false; {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,333 INFO L280 TraceCheckUtils]: 112: Hoare triple {17521#(= 1 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,334 INFO L280 TraceCheckUtils]: 113: Hoare triple {17521#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet58 && test_#t~nondet58 <= 2147483647;test_~tmp~8 := test_#t~nondet58;havoc test_#t~nondet58; {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,334 INFO L280 TraceCheckUtils]: 114: Hoare triple {17521#(= 1 ~waterLevel~0)} assume 0 != test_~tmp~8; {17521#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:44,336 INFO L280 TraceCheckUtils]: 115: Hoare triple {17521#(= 1 ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:44,337 INFO L280 TraceCheckUtils]: 116: Hoare triple {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume -2147483648 <= test_#t~nondet59 && test_#t~nondet59 <= 2147483647;test_~tmp___0~2 := test_#t~nondet59;havoc test_#t~nondet59; {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:44,338 INFO L280 TraceCheckUtils]: 117: Hoare triple {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(0 != test_~tmp___0~2); {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:44,339 INFO L280 TraceCheckUtils]: 118: Hoare triple {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume -2147483648 <= test_#t~nondet60 && test_#t~nondet60 <= 2147483647;test_~tmp___2~0 := test_#t~nondet60;havoc test_#t~nondet60; {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:44,340 INFO L280 TraceCheckUtils]: 119: Hoare triple {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume 0 != test_~tmp___2~0; {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:44,341 INFO L280 TraceCheckUtils]: 120: Hoare triple {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} havoc __utac_acc__Specification5_spec__2_#t~ret62;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:44,343 INFO L280 TraceCheckUtils]: 121: Hoare triple {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} __utac_acc__Specification5_spec__2_#t~ret62 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret62 && __utac_acc__Specification5_spec__2_#t~ret62 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret62;havoc __utac_acc__Specification5_spec__2_#t~ret62; {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:44,344 INFO L280 TraceCheckUtils]: 122: Hoare triple {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(0 != ~pumpRunning~0); {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:44,345 INFO L280 TraceCheckUtils]: 123: Hoare triple {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret37, processEnvironment_~tmp~5;havoc processEnvironment_~tmp~5; {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:44,346 INFO L280 TraceCheckUtils]: 124: Hoare triple {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret36, processEnvironment__wrappee__lowWaterSensor_~tmp~4;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~4; {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:44,347 INFO L280 TraceCheckUtils]: 125: Hoare triple {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret35, processEnvironment__wrappee__highWaterSensor_~tmp~3;havoc processEnvironment__wrappee__highWaterSensor_~tmp~3; {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:44,348 INFO L280 TraceCheckUtils]: 126: Hoare triple {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret55, isHighWaterLevel_~retValue_acc~5, isHighWaterLevel_~tmp~6, isHighWaterLevel_~tmp___0~0;havoc isHighWaterLevel_~retValue_acc~5;havoc isHighWaterLevel_~tmp~6;havoc isHighWaterLevel_~tmp___0~0;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~12;havoc isHighWaterSensorDry_~retValue_acc~12; {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:44,350 INFO L280 TraceCheckUtils]: 127: Hoare triple {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~12 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~12; {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:44,351 INFO L280 TraceCheckUtils]: 128: Hoare triple {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} isHighWaterLevel_#t~ret55 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret55 && isHighWaterLevel_#t~ret55 <= 2147483647;isHighWaterLevel_~tmp~6 := isHighWaterLevel_#t~ret55;havoc isHighWaterLevel_#t~ret55; {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:44,352 INFO L280 TraceCheckUtils]: 129: Hoare triple {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(0 != isHighWaterLevel_~tmp~6);isHighWaterLevel_~tmp___0~0 := 1; {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:44,353 INFO L280 TraceCheckUtils]: 130: Hoare triple {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} isHighWaterLevel_~retValue_acc~5 := isHighWaterLevel_~tmp___0~0;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~5; {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:44,355 INFO L280 TraceCheckUtils]: 131: Hoare triple {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} processEnvironment__wrappee__highWaterSensor_#t~ret35 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret35 && processEnvironment__wrappee__highWaterSensor_#t~ret35 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~3 := processEnvironment__wrappee__highWaterSensor_#t~ret35;havoc processEnvironment__wrappee__highWaterSensor_#t~ret35; {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:44,356 INFO L280 TraceCheckUtils]: 132: Hoare triple {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~3;~pumpRunning~0 := 1; {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:44,357 INFO L280 TraceCheckUtils]: 133: Hoare triple {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} havoc __utac_acc__Specification5_spec__3_#t~ret63, __utac_acc__Specification5_spec__3_#t~ret64, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {17524#(and (<= |ULTIMATE.start_getWaterLevel_#res| 2) (<= 2 |ULTIMATE.start_getWaterLevel_#res|))} is VALID [2020-07-28 19:06:44,359 INFO L280 TraceCheckUtils]: 134: Hoare triple {17524#(and (<= |ULTIMATE.start_getWaterLevel_#res| 2) (<= 2 |ULTIMATE.start_getWaterLevel_#res|))} __utac_acc__Specification5_spec__3_#t~ret63 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret63 && __utac_acc__Specification5_spec__3_#t~ret63 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret63;havoc __utac_acc__Specification5_spec__3_#t~ret63; {17525#(and (< 1 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9) (<= ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9 2))} is VALID [2020-07-28 19:06:44,360 INFO L280 TraceCheckUtils]: 135: Hoare triple {17525#(and (< 1 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9) (<= ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9 2))} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {17520#false} is VALID [2020-07-28 19:06:44,360 INFO L280 TraceCheckUtils]: 136: Hoare triple {17520#false} __utac_acc__Specification5_spec__3_#t~ret64 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret64 && __utac_acc__Specification5_spec__3_#t~ret64 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret64;havoc __utac_acc__Specification5_spec__3_#t~ret64; {17520#false} is VALID [2020-07-28 19:06:44,361 INFO L280 TraceCheckUtils]: 137: Hoare triple {17520#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3; {17520#false} is VALID [2020-07-28 19:06:44,361 INFO L280 TraceCheckUtils]: 138: Hoare triple {17520#false} assume 0 == ~switchedOnBeforeTS~0; {17520#false} is VALID [2020-07-28 19:06:44,361 INFO L280 TraceCheckUtils]: 139: Hoare triple {17520#false} assume !false; {17520#false} is VALID [2020-07-28 19:06:44,418 INFO L134 CoverageAnalysis]: Checked inductivity of 204 backedges. 7 proven. 138 refuted. 0 times theorem prover too weak. 59 trivial. 0 not checked. [2020-07-28 19:06:44,419 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1953736148] [2020-07-28 19:06:44,419 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [638668966] [2020-07-28 19:06:44,420 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 5 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 5 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2020-07-28 19:06:44,575 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:06:44,578 INFO L263 TraceCheckSpWp]: Trace formula consists of 669 conjuncts, 14 conjunts are in the unsatisfiable core [2020-07-28 19:06:44,626 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:06:44,635 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2020-07-28 19:06:45,052 INFO L280 TraceCheckUtils]: 0: Hoare triple {17519#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(13);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string42.base, #t~string42.offset, 1);call write~init~int(110, #t~string42.base, 1 + #t~string42.offset, 1);call write~init~int(0, #t~string42.base, 2 + #t~string42.offset, 1);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string44.base, #t~string44.offset, 1);call write~init~int(102, #t~string44.base, 1 + #t~string44.offset, 1);call write~init~int(102, #t~string44.base, 2 + #t~string44.offset, 1);call write~init~int(0, #t~string44.base, 3 + #t~string44.offset, 1);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string46.base, #t~string46.offset, 1);call write~init~int(80, #t~string46.base, 1 + #t~string46.offset, 1);call write~init~int(117, #t~string46.base, 2 + #t~string46.offset, 1);call write~init~int(109, #t~string46.base, 3 + #t~string46.offset, 1);call write~init~int(112, #t~string46.base, 4 + #t~string46.offset, 1);call write~init~int(58, #t~string46.base, 5 + #t~string46.offset, 1);call write~init~int(0, #t~string46.base, 6 + #t~string46.offset, 1);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string48.base, #t~string48.offset, 1);call write~init~int(110, #t~string48.base, 1 + #t~string48.offset, 1);call write~init~int(0, #t~string48.base, 2 + #t~string48.offset, 1);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string50.base, #t~string50.offset, 1);call write~init~int(102, #t~string50.base, 1 + #t~string50.offset, 1);call write~init~int(102, #t~string50.base, 2 + #t~string50.offset, 1);call write~init~int(0, #t~string50.base, 3 + #t~string50.offset, 1);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string52.base, #t~string52.offset, 1);call write~init~int(32, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 2 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string54.base, #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 1 + #t~string54.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(13);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string69.base, #t~string69.offset, 1);call write~init~int(77, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(101, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(116, #t~string69.base, 3 + #t~string69.offset, 1);call write~init~int(104, #t~string69.base, 4 + #t~string69.offset, 1);call write~init~int(58, #t~string69.base, 5 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 6 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string71.base, #t~string71.offset, 1);call write~init~int(82, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(73, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(84, #t~string71.base, 3 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 4 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string73.base, #t~string73.offset, 1);call write~init~int(75, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 2 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string75.base, #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 1 + #t~string75.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,053 INFO L280 TraceCheckUtils]: 1: Hoare triple {17529#(<= ~waterLevel~0 1)} havoc main_#res;havoc main_#t~ret65, main_~retValue_acc~9, main_~tmp~10;havoc main_~retValue_acc~9;havoc main_~tmp~10; {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,053 INFO L280 TraceCheckUtils]: 2: Hoare triple {17529#(<= ~waterLevel~0 1)} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,054 INFO L280 TraceCheckUtils]: 3: Hoare triple {17529#(<= ~waterLevel~0 1)} main_#t~ret65 := valid_product_#res;assume -2147483648 <= main_#t~ret65 && main_#t~ret65 <= 2147483647;main_~tmp~10 := main_#t~ret65;havoc main_#t~ret65; {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,055 INFO L280 TraceCheckUtils]: 4: Hoare triple {17529#(<= ~waterLevel~0 1)} assume 0 != main_~tmp~10; {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,055 INFO L280 TraceCheckUtils]: 5: Hoare triple {17529#(<= ~waterLevel~0 1)} ~switchedOnBeforeTS~0 := 0; {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,056 INFO L280 TraceCheckUtils]: 6: Hoare triple {17529#(<= ~waterLevel~0 1)} havoc test_#t~nondet58, test_#t~nondet59, test_#t~nondet60, test_#t~nondet61, test_~splverifierCounter~0, test_~tmp~8, test_~tmp___0~2, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~8;havoc test_~tmp___0~2;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,056 INFO L280 TraceCheckUtils]: 7: Hoare triple {17529#(<= ~waterLevel~0 1)} assume !false; {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,057 INFO L280 TraceCheckUtils]: 8: Hoare triple {17529#(<= ~waterLevel~0 1)} assume test_~splverifierCounter~0 < 4; {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,058 INFO L280 TraceCheckUtils]: 9: Hoare triple {17529#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet58 && test_#t~nondet58 <= 2147483647;test_~tmp~8 := test_#t~nondet58;havoc test_#t~nondet58; {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,058 INFO L280 TraceCheckUtils]: 10: Hoare triple {17529#(<= ~waterLevel~0 1)} assume 0 != test_~tmp~8; {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,059 INFO L280 TraceCheckUtils]: 11: Hoare triple {17529#(<= ~waterLevel~0 1)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {17563#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:45,060 INFO L280 TraceCheckUtils]: 12: Hoare triple {17563#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet59 && test_#t~nondet59 <= 2147483647;test_~tmp___0~2 := test_#t~nondet59;havoc test_#t~nondet59; {17563#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:45,061 INFO L280 TraceCheckUtils]: 13: Hoare triple {17563#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___0~2); {17563#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:45,061 INFO L280 TraceCheckUtils]: 14: Hoare triple {17563#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet60 && test_#t~nondet60 <= 2147483647;test_~tmp___2~0 := test_#t~nondet60;havoc test_#t~nondet60; {17563#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:45,062 INFO L280 TraceCheckUtils]: 15: Hoare triple {17563#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0; {17563#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:45,063 INFO L280 TraceCheckUtils]: 16: Hoare triple {17563#(<= ~waterLevel~0 2)} havoc __utac_acc__Specification5_spec__2_#t~ret62;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {17563#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:45,063 INFO L280 TraceCheckUtils]: 17: Hoare triple {17563#(<= ~waterLevel~0 2)} __utac_acc__Specification5_spec__2_#t~ret62 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret62 && __utac_acc__Specification5_spec__2_#t~ret62 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret62;havoc __utac_acc__Specification5_spec__2_#t~ret62; {17563#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:45,064 INFO L280 TraceCheckUtils]: 18: Hoare triple {17563#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0); {17563#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:45,065 INFO L280 TraceCheckUtils]: 19: Hoare triple {17563#(<= ~waterLevel~0 2)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret37, processEnvironment_~tmp~5;havoc processEnvironment_~tmp~5; {17563#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:45,065 INFO L280 TraceCheckUtils]: 20: Hoare triple {17563#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret36, processEnvironment__wrappee__lowWaterSensor_~tmp~4;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~4; {17563#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:45,066 INFO L280 TraceCheckUtils]: 21: Hoare triple {17563#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret35, processEnvironment__wrappee__highWaterSensor_~tmp~3;havoc processEnvironment__wrappee__highWaterSensor_~tmp~3; {17563#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:45,066 INFO L280 TraceCheckUtils]: 22: Hoare triple {17563#(<= ~waterLevel~0 2)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret55, isHighWaterLevel_~retValue_acc~5, isHighWaterLevel_~tmp~6, isHighWaterLevel_~tmp___0~0;havoc isHighWaterLevel_~retValue_acc~5;havoc isHighWaterLevel_~tmp~6;havoc isHighWaterLevel_~tmp___0~0;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~12;havoc isHighWaterSensorDry_~retValue_acc~12; {17563#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:45,071 INFO L280 TraceCheckUtils]: 23: Hoare triple {17563#(<= ~waterLevel~0 2)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~12 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~12; {17563#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:45,071 INFO L280 TraceCheckUtils]: 24: Hoare triple {17563#(<= ~waterLevel~0 2)} isHighWaterLevel_#t~ret55 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret55 && isHighWaterLevel_#t~ret55 <= 2147483647;isHighWaterLevel_~tmp~6 := isHighWaterLevel_#t~ret55;havoc isHighWaterLevel_#t~ret55; {17563#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:45,072 INFO L280 TraceCheckUtils]: 25: Hoare triple {17563#(<= ~waterLevel~0 2)} assume !(0 != isHighWaterLevel_~tmp~6);isHighWaterLevel_~tmp___0~0 := 1; {17563#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:45,073 INFO L280 TraceCheckUtils]: 26: Hoare triple {17563#(<= ~waterLevel~0 2)} isHighWaterLevel_~retValue_acc~5 := isHighWaterLevel_~tmp___0~0;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~5; {17563#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:45,074 INFO L280 TraceCheckUtils]: 27: Hoare triple {17563#(<= ~waterLevel~0 2)} processEnvironment__wrappee__highWaterSensor_#t~ret35 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret35 && processEnvironment__wrappee__highWaterSensor_#t~ret35 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~3 := processEnvironment__wrappee__highWaterSensor_#t~ret35;havoc processEnvironment__wrappee__highWaterSensor_#t~ret35; {17563#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:45,077 INFO L280 TraceCheckUtils]: 28: Hoare triple {17563#(<= ~waterLevel~0 2)} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~3;~pumpRunning~0 := 1; {17563#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:45,077 INFO L280 TraceCheckUtils]: 29: Hoare triple {17563#(<= ~waterLevel~0 2)} havoc __utac_acc__Specification5_spec__3_#t~ret63, __utac_acc__Specification5_spec__3_#t~ret64, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {17563#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:45,078 INFO L280 TraceCheckUtils]: 30: Hoare triple {17563#(<= ~waterLevel~0 2)} __utac_acc__Specification5_spec__3_#t~ret63 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret63 && __utac_acc__Specification5_spec__3_#t~ret63 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret63;havoc __utac_acc__Specification5_spec__3_#t~ret63; {17563#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:45,079 INFO L280 TraceCheckUtils]: 31: Hoare triple {17563#(<= ~waterLevel~0 2)} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~9); {17563#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:45,080 INFO L280 TraceCheckUtils]: 32: Hoare triple {17563#(<= ~waterLevel~0 2)} assume !false; {17563#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:45,082 INFO L280 TraceCheckUtils]: 33: Hoare triple {17563#(<= ~waterLevel~0 2)} assume test_~splverifierCounter~0 < 4; {17563#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:45,086 INFO L280 TraceCheckUtils]: 34: Hoare triple {17563#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet58 && test_#t~nondet58 <= 2147483647;test_~tmp~8 := test_#t~nondet58;havoc test_#t~nondet58; {17563#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:45,087 INFO L280 TraceCheckUtils]: 35: Hoare triple {17563#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp~8); {17563#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:45,088 INFO L280 TraceCheckUtils]: 36: Hoare triple {17563#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet59 && test_#t~nondet59 <= 2147483647;test_~tmp___0~2 := test_#t~nondet59;havoc test_#t~nondet59; {17563#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:45,089 INFO L280 TraceCheckUtils]: 37: Hoare triple {17563#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___0~2); {17563#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:45,089 INFO L280 TraceCheckUtils]: 38: Hoare triple {17563#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet60 && test_#t~nondet60 <= 2147483647;test_~tmp___2~0 := test_#t~nondet60;havoc test_#t~nondet60; {17563#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:45,090 INFO L280 TraceCheckUtils]: 39: Hoare triple {17563#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0; {17563#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:45,091 INFO L280 TraceCheckUtils]: 40: Hoare triple {17563#(<= ~waterLevel~0 2)} havoc __utac_acc__Specification5_spec__2_#t~ret62;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {17563#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:45,091 INFO L280 TraceCheckUtils]: 41: Hoare triple {17563#(<= ~waterLevel~0 2)} __utac_acc__Specification5_spec__2_#t~ret62 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret62 && __utac_acc__Specification5_spec__2_#t~ret62 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret62;havoc __utac_acc__Specification5_spec__2_#t~ret62; {17563#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:45,092 INFO L280 TraceCheckUtils]: 42: Hoare triple {17563#(<= ~waterLevel~0 2)} assume 0 != ~pumpRunning~0; {17563#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:45,093 INFO L280 TraceCheckUtils]: 43: Hoare triple {17563#(<= ~waterLevel~0 2)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,093 INFO L280 TraceCheckUtils]: 44: Hoare triple {17529#(<= ~waterLevel~0 1)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret37, processEnvironment_~tmp~5;havoc processEnvironment_~tmp~5; {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,094 INFO L280 TraceCheckUtils]: 45: Hoare triple {17529#(<= ~waterLevel~0 1)} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret38, isMethaneAlarm_~retValue_acc~3;havoc isMethaneAlarm_~retValue_acc~3;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~10;havoc isMethaneLevelCritical_~retValue_acc~10;isMethaneLevelCritical_~retValue_acc~10 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~10; {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,095 INFO L280 TraceCheckUtils]: 46: Hoare triple {17529#(<= ~waterLevel~0 1)} isMethaneAlarm_#t~ret38 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret38 && isMethaneAlarm_#t~ret38 <= 2147483647;isMethaneAlarm_~retValue_acc~3 := isMethaneAlarm_#t~ret38;havoc isMethaneAlarm_#t~ret38;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~3; {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,095 INFO L280 TraceCheckUtils]: 47: Hoare triple {17529#(<= ~waterLevel~0 1)} processEnvironment_#t~ret37 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret37 && processEnvironment_#t~ret37 <= 2147483647;processEnvironment_~tmp~5 := processEnvironment_#t~ret37;havoc processEnvironment_#t~ret37; {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,096 INFO L280 TraceCheckUtils]: 48: Hoare triple {17529#(<= ~waterLevel~0 1)} assume !(0 != processEnvironment_~tmp~5);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret36, processEnvironment__wrappee__lowWaterSensor_~tmp~4;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~4; {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,097 INFO L280 TraceCheckUtils]: 49: Hoare triple {17529#(<= ~waterLevel~0 1)} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret56, isLowWaterLevel_~retValue_acc~6, isLowWaterLevel_~tmp~7, isLowWaterLevel_~tmp___0~1;havoc isLowWaterLevel_~retValue_acc~6;havoc isLowWaterLevel_~tmp~7;havoc isLowWaterLevel_~tmp___0~1;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~13;havoc isLowWaterSensorDry_~retValue_acc~13;isLowWaterSensorDry_~retValue_acc~13 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~13; {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,097 INFO L280 TraceCheckUtils]: 50: Hoare triple {17529#(<= ~waterLevel~0 1)} isLowWaterLevel_#t~ret56 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret56 && isLowWaterLevel_#t~ret56 <= 2147483647;isLowWaterLevel_~tmp~7 := isLowWaterLevel_#t~ret56;havoc isLowWaterLevel_#t~ret56; {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,098 INFO L280 TraceCheckUtils]: 51: Hoare triple {17529#(<= ~waterLevel~0 1)} assume 0 != isLowWaterLevel_~tmp~7;isLowWaterLevel_~tmp___0~1 := 0; {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,099 INFO L280 TraceCheckUtils]: 52: Hoare triple {17529#(<= ~waterLevel~0 1)} isLowWaterLevel_~retValue_acc~6 := isLowWaterLevel_~tmp___0~1;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~6; {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,099 INFO L280 TraceCheckUtils]: 53: Hoare triple {17529#(<= ~waterLevel~0 1)} processEnvironment__wrappee__lowWaterSensor_#t~ret36 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__lowWaterSensor_#t~ret36 && processEnvironment__wrappee__lowWaterSensor_#t~ret36 <= 2147483647;processEnvironment__wrappee__lowWaterSensor_~tmp~4 := processEnvironment__wrappee__lowWaterSensor_#t~ret36;havoc processEnvironment__wrappee__lowWaterSensor_#t~ret36; {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,100 INFO L280 TraceCheckUtils]: 54: Hoare triple {17529#(<= ~waterLevel~0 1)} assume !(0 != processEnvironment__wrappee__lowWaterSensor_~tmp~4);havoc processEnvironment__wrappee__highWaterSensor_#t~ret35, processEnvironment__wrappee__highWaterSensor_~tmp~3;havoc processEnvironment__wrappee__highWaterSensor_~tmp~3; {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,101 INFO L280 TraceCheckUtils]: 55: Hoare triple {17529#(<= ~waterLevel~0 1)} assume !(0 == ~pumpRunning~0); {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,101 INFO L280 TraceCheckUtils]: 56: Hoare triple {17529#(<= ~waterLevel~0 1)} havoc __utac_acc__Specification5_spec__3_#t~ret63, __utac_acc__Specification5_spec__3_#t~ret64, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,102 INFO L280 TraceCheckUtils]: 57: Hoare triple {17529#(<= ~waterLevel~0 1)} __utac_acc__Specification5_spec__3_#t~ret63 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret63 && __utac_acc__Specification5_spec__3_#t~ret63 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret63;havoc __utac_acc__Specification5_spec__3_#t~ret63; {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,103 INFO L280 TraceCheckUtils]: 58: Hoare triple {17529#(<= ~waterLevel~0 1)} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,103 INFO L280 TraceCheckUtils]: 59: Hoare triple {17529#(<= ~waterLevel~0 1)} __utac_acc__Specification5_spec__3_#t~ret64 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret64 && __utac_acc__Specification5_spec__3_#t~ret64 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret64;havoc __utac_acc__Specification5_spec__3_#t~ret64; {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,104 INFO L280 TraceCheckUtils]: 60: Hoare triple {17529#(<= ~waterLevel~0 1)} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3; {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,104 INFO L280 TraceCheckUtils]: 61: Hoare triple {17529#(<= ~waterLevel~0 1)} assume !(0 == ~switchedOnBeforeTS~0); {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,105 INFO L280 TraceCheckUtils]: 62: Hoare triple {17529#(<= ~waterLevel~0 1)} assume !false; {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,106 INFO L280 TraceCheckUtils]: 63: Hoare triple {17529#(<= ~waterLevel~0 1)} assume test_~splverifierCounter~0 < 4; {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,106 INFO L280 TraceCheckUtils]: 64: Hoare triple {17529#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet58 && test_#t~nondet58 <= 2147483647;test_~tmp~8 := test_#t~nondet58;havoc test_#t~nondet58; {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,107 INFO L280 TraceCheckUtils]: 65: Hoare triple {17529#(<= ~waterLevel~0 1)} assume !(0 != test_~tmp~8); {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,108 INFO L280 TraceCheckUtils]: 66: Hoare triple {17529#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet59 && test_#t~nondet59 <= 2147483647;test_~tmp___0~2 := test_#t~nondet59;havoc test_#t~nondet59; {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,108 INFO L280 TraceCheckUtils]: 67: Hoare triple {17529#(<= ~waterLevel~0 1)} assume !(0 != test_~tmp___0~2); {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,109 INFO L280 TraceCheckUtils]: 68: Hoare triple {17529#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet60 && test_#t~nondet60 <= 2147483647;test_~tmp___2~0 := test_#t~nondet60;havoc test_#t~nondet60; {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,110 INFO L280 TraceCheckUtils]: 69: Hoare triple {17529#(<= ~waterLevel~0 1)} assume 0 != test_~tmp___2~0; {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,110 INFO L280 TraceCheckUtils]: 70: Hoare triple {17529#(<= ~waterLevel~0 1)} havoc __utac_acc__Specification5_spec__2_#t~ret62;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,111 INFO L280 TraceCheckUtils]: 71: Hoare triple {17529#(<= ~waterLevel~0 1)} __utac_acc__Specification5_spec__2_#t~ret62 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret62 && __utac_acc__Specification5_spec__2_#t~ret62 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret62;havoc __utac_acc__Specification5_spec__2_#t~ret62; {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,112 INFO L280 TraceCheckUtils]: 72: Hoare triple {17529#(<= ~waterLevel~0 1)} assume 0 != ~pumpRunning~0; {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,113 INFO L280 TraceCheckUtils]: 73: Hoare triple {17529#(<= ~waterLevel~0 1)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {17750#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:06:45,113 INFO L280 TraceCheckUtils]: 74: Hoare triple {17750#(<= ~waterLevel~0 0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret37, processEnvironment_~tmp~5;havoc processEnvironment_~tmp~5; {17750#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:06:45,114 INFO L280 TraceCheckUtils]: 75: Hoare triple {17750#(<= ~waterLevel~0 0)} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret38, isMethaneAlarm_~retValue_acc~3;havoc isMethaneAlarm_~retValue_acc~3;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~10;havoc isMethaneLevelCritical_~retValue_acc~10;isMethaneLevelCritical_~retValue_acc~10 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~10; {17750#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:06:45,115 INFO L280 TraceCheckUtils]: 76: Hoare triple {17750#(<= ~waterLevel~0 0)} isMethaneAlarm_#t~ret38 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret38 && isMethaneAlarm_#t~ret38 <= 2147483647;isMethaneAlarm_~retValue_acc~3 := isMethaneAlarm_#t~ret38;havoc isMethaneAlarm_#t~ret38;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~3; {17750#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:06:45,115 INFO L280 TraceCheckUtils]: 77: Hoare triple {17750#(<= ~waterLevel~0 0)} processEnvironment_#t~ret37 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret37 && processEnvironment_#t~ret37 <= 2147483647;processEnvironment_~tmp~5 := processEnvironment_#t~ret37;havoc processEnvironment_#t~ret37; {17750#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:06:45,116 INFO L280 TraceCheckUtils]: 78: Hoare triple {17750#(<= ~waterLevel~0 0)} assume 0 != processEnvironment_~tmp~5;~pumpRunning~0 := 0; {17750#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:06:45,117 INFO L280 TraceCheckUtils]: 79: Hoare triple {17750#(<= ~waterLevel~0 0)} havoc __utac_acc__Specification5_spec__3_#t~ret63, __utac_acc__Specification5_spec__3_#t~ret64, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {17750#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:06:45,117 INFO L280 TraceCheckUtils]: 80: Hoare triple {17750#(<= ~waterLevel~0 0)} __utac_acc__Specification5_spec__3_#t~ret63 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret63 && __utac_acc__Specification5_spec__3_#t~ret63 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret63;havoc __utac_acc__Specification5_spec__3_#t~ret63; {17750#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:06:45,118 INFO L280 TraceCheckUtils]: 81: Hoare triple {17750#(<= ~waterLevel~0 0)} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {17750#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:06:45,119 INFO L280 TraceCheckUtils]: 82: Hoare triple {17750#(<= ~waterLevel~0 0)} __utac_acc__Specification5_spec__3_#t~ret64 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret64 && __utac_acc__Specification5_spec__3_#t~ret64 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret64;havoc __utac_acc__Specification5_spec__3_#t~ret64; {17750#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:06:45,119 INFO L280 TraceCheckUtils]: 83: Hoare triple {17750#(<= ~waterLevel~0 0)} assume !(0 != __utac_acc__Specification5_spec__3_~tmp___0~3); {17750#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:06:45,120 INFO L280 TraceCheckUtils]: 84: Hoare triple {17750#(<= ~waterLevel~0 0)} assume !false; {17750#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:06:45,121 INFO L280 TraceCheckUtils]: 85: Hoare triple {17750#(<= ~waterLevel~0 0)} assume test_~splverifierCounter~0 < 4; {17750#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:06:45,122 INFO L280 TraceCheckUtils]: 86: Hoare triple {17750#(<= ~waterLevel~0 0)} assume -2147483648 <= test_#t~nondet58 && test_#t~nondet58 <= 2147483647;test_~tmp~8 := test_#t~nondet58;havoc test_#t~nondet58; {17750#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:06:45,122 INFO L280 TraceCheckUtils]: 87: Hoare triple {17750#(<= ~waterLevel~0 0)} assume 0 != test_~tmp~8; {17750#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:06:45,123 INFO L280 TraceCheckUtils]: 88: Hoare triple {17750#(<= ~waterLevel~0 0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,124 INFO L280 TraceCheckUtils]: 89: Hoare triple {17529#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet59 && test_#t~nondet59 <= 2147483647;test_~tmp___0~2 := test_#t~nondet59;havoc test_#t~nondet59; {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,125 INFO L280 TraceCheckUtils]: 90: Hoare triple {17529#(<= ~waterLevel~0 1)} assume !(0 != test_~tmp___0~2); {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,125 INFO L280 TraceCheckUtils]: 91: Hoare triple {17529#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet60 && test_#t~nondet60 <= 2147483647;test_~tmp___2~0 := test_#t~nondet60;havoc test_#t~nondet60; {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,126 INFO L280 TraceCheckUtils]: 92: Hoare triple {17529#(<= ~waterLevel~0 1)} assume 0 != test_~tmp___2~0; {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,127 INFO L280 TraceCheckUtils]: 93: Hoare triple {17529#(<= ~waterLevel~0 1)} havoc __utac_acc__Specification5_spec__2_#t~ret62;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,127 INFO L280 TraceCheckUtils]: 94: Hoare triple {17529#(<= ~waterLevel~0 1)} __utac_acc__Specification5_spec__2_#t~ret62 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret62 && __utac_acc__Specification5_spec__2_#t~ret62 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret62;havoc __utac_acc__Specification5_spec__2_#t~ret62; {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,128 INFO L280 TraceCheckUtils]: 95: Hoare triple {17529#(<= ~waterLevel~0 1)} assume !(0 != ~pumpRunning~0); {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,129 INFO L280 TraceCheckUtils]: 96: Hoare triple {17529#(<= ~waterLevel~0 1)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret37, processEnvironment_~tmp~5;havoc processEnvironment_~tmp~5; {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,129 INFO L280 TraceCheckUtils]: 97: Hoare triple {17529#(<= ~waterLevel~0 1)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret36, processEnvironment__wrappee__lowWaterSensor_~tmp~4;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~4; {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,130 INFO L280 TraceCheckUtils]: 98: Hoare triple {17529#(<= ~waterLevel~0 1)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret35, processEnvironment__wrappee__highWaterSensor_~tmp~3;havoc processEnvironment__wrappee__highWaterSensor_~tmp~3; {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,131 INFO L280 TraceCheckUtils]: 99: Hoare triple {17529#(<= ~waterLevel~0 1)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret55, isHighWaterLevel_~retValue_acc~5, isHighWaterLevel_~tmp~6, isHighWaterLevel_~tmp___0~0;havoc isHighWaterLevel_~retValue_acc~5;havoc isHighWaterLevel_~tmp~6;havoc isHighWaterLevel_~tmp___0~0;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~12;havoc isHighWaterSensorDry_~retValue_acc~12; {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,131 INFO L280 TraceCheckUtils]: 100: Hoare triple {17529#(<= ~waterLevel~0 1)} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~12 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~12; {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,132 INFO L280 TraceCheckUtils]: 101: Hoare triple {17529#(<= ~waterLevel~0 1)} isHighWaterLevel_#t~ret55 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret55 && isHighWaterLevel_#t~ret55 <= 2147483647;isHighWaterLevel_~tmp~6 := isHighWaterLevel_#t~ret55;havoc isHighWaterLevel_#t~ret55; {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,133 INFO L280 TraceCheckUtils]: 102: Hoare triple {17529#(<= ~waterLevel~0 1)} assume 0 != isHighWaterLevel_~tmp~6;isHighWaterLevel_~tmp___0~0 := 0; {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,133 INFO L280 TraceCheckUtils]: 103: Hoare triple {17529#(<= ~waterLevel~0 1)} isHighWaterLevel_~retValue_acc~5 := isHighWaterLevel_~tmp___0~0;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~5; {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,134 INFO L280 TraceCheckUtils]: 104: Hoare triple {17529#(<= ~waterLevel~0 1)} processEnvironment__wrappee__highWaterSensor_#t~ret35 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret35 && processEnvironment__wrappee__highWaterSensor_#t~ret35 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~3 := processEnvironment__wrappee__highWaterSensor_#t~ret35;havoc processEnvironment__wrappee__highWaterSensor_#t~ret35; {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,135 INFO L280 TraceCheckUtils]: 105: Hoare triple {17529#(<= ~waterLevel~0 1)} assume !(0 != processEnvironment__wrappee__highWaterSensor_~tmp~3); {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,135 INFO L280 TraceCheckUtils]: 106: Hoare triple {17529#(<= ~waterLevel~0 1)} havoc __utac_acc__Specification5_spec__3_#t~ret63, __utac_acc__Specification5_spec__3_#t~ret64, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,136 INFO L280 TraceCheckUtils]: 107: Hoare triple {17529#(<= ~waterLevel~0 1)} __utac_acc__Specification5_spec__3_#t~ret63 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret63 && __utac_acc__Specification5_spec__3_#t~ret63 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret63;havoc __utac_acc__Specification5_spec__3_#t~ret63; {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,136 INFO L280 TraceCheckUtils]: 108: Hoare triple {17529#(<= ~waterLevel~0 1)} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,137 INFO L280 TraceCheckUtils]: 109: Hoare triple {17529#(<= ~waterLevel~0 1)} __utac_acc__Specification5_spec__3_#t~ret64 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret64 && __utac_acc__Specification5_spec__3_#t~ret64 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret64;havoc __utac_acc__Specification5_spec__3_#t~ret64; {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,138 INFO L280 TraceCheckUtils]: 110: Hoare triple {17529#(<= ~waterLevel~0 1)} assume !(0 != __utac_acc__Specification5_spec__3_~tmp___0~3); {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,138 INFO L280 TraceCheckUtils]: 111: Hoare triple {17529#(<= ~waterLevel~0 1)} assume !false; {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,139 INFO L280 TraceCheckUtils]: 112: Hoare triple {17529#(<= ~waterLevel~0 1)} assume test_~splverifierCounter~0 < 4; {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,140 INFO L280 TraceCheckUtils]: 113: Hoare triple {17529#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet58 && test_#t~nondet58 <= 2147483647;test_~tmp~8 := test_#t~nondet58;havoc test_#t~nondet58; {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,140 INFO L280 TraceCheckUtils]: 114: Hoare triple {17529#(<= ~waterLevel~0 1)} assume 0 != test_~tmp~8; {17529#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:06:45,141 INFO L280 TraceCheckUtils]: 115: Hoare triple {17529#(<= ~waterLevel~0 1)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {17563#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:45,142 INFO L280 TraceCheckUtils]: 116: Hoare triple {17563#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet59 && test_#t~nondet59 <= 2147483647;test_~tmp___0~2 := test_#t~nondet59;havoc test_#t~nondet59; {17563#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:45,143 INFO L280 TraceCheckUtils]: 117: Hoare triple {17563#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___0~2); {17563#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:45,143 INFO L280 TraceCheckUtils]: 118: Hoare triple {17563#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet60 && test_#t~nondet60 <= 2147483647;test_~tmp___2~0 := test_#t~nondet60;havoc test_#t~nondet60; {17563#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:45,144 INFO L280 TraceCheckUtils]: 119: Hoare triple {17563#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0; {17563#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:45,145 INFO L280 TraceCheckUtils]: 120: Hoare triple {17563#(<= ~waterLevel~0 2)} havoc __utac_acc__Specification5_spec__2_#t~ret62;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {17563#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:45,145 INFO L280 TraceCheckUtils]: 121: Hoare triple {17563#(<= ~waterLevel~0 2)} __utac_acc__Specification5_spec__2_#t~ret62 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret62 && __utac_acc__Specification5_spec__2_#t~ret62 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret62;havoc __utac_acc__Specification5_spec__2_#t~ret62; {17563#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:45,146 INFO L280 TraceCheckUtils]: 122: Hoare triple {17563#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0); {17563#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:45,147 INFO L280 TraceCheckUtils]: 123: Hoare triple {17563#(<= ~waterLevel~0 2)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret37, processEnvironment_~tmp~5;havoc processEnvironment_~tmp~5; {17563#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:45,147 INFO L280 TraceCheckUtils]: 124: Hoare triple {17563#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret36, processEnvironment__wrappee__lowWaterSensor_~tmp~4;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~4; {17563#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:45,148 INFO L280 TraceCheckUtils]: 125: Hoare triple {17563#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret35, processEnvironment__wrappee__highWaterSensor_~tmp~3;havoc processEnvironment__wrappee__highWaterSensor_~tmp~3; {17563#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:45,148 INFO L280 TraceCheckUtils]: 126: Hoare triple {17563#(<= ~waterLevel~0 2)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret55, isHighWaterLevel_~retValue_acc~5, isHighWaterLevel_~tmp~6, isHighWaterLevel_~tmp___0~0;havoc isHighWaterLevel_~retValue_acc~5;havoc isHighWaterLevel_~tmp~6;havoc isHighWaterLevel_~tmp___0~0;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~12;havoc isHighWaterSensorDry_~retValue_acc~12; {17563#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:06:45,149 INFO L280 TraceCheckUtils]: 127: Hoare triple {17563#(<= ~waterLevel~0 2)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~12 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~12; {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:45,150 INFO L280 TraceCheckUtils]: 128: Hoare triple {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} isHighWaterLevel_#t~ret55 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret55 && isHighWaterLevel_#t~ret55 <= 2147483647;isHighWaterLevel_~tmp~6 := isHighWaterLevel_#t~ret55;havoc isHighWaterLevel_#t~ret55; {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:45,151 INFO L280 TraceCheckUtils]: 129: Hoare triple {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(0 != isHighWaterLevel_~tmp~6);isHighWaterLevel_~tmp___0~0 := 1; {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:45,152 INFO L280 TraceCheckUtils]: 130: Hoare triple {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} isHighWaterLevel_~retValue_acc~5 := isHighWaterLevel_~tmp___0~0;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~5; {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:45,152 INFO L280 TraceCheckUtils]: 131: Hoare triple {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} processEnvironment__wrappee__highWaterSensor_#t~ret35 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret35 && processEnvironment__wrappee__highWaterSensor_#t~ret35 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~3 := processEnvironment__wrappee__highWaterSensor_#t~ret35;havoc processEnvironment__wrappee__highWaterSensor_#t~ret35; {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:45,153 INFO L280 TraceCheckUtils]: 132: Hoare triple {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~3;~pumpRunning~0 := 1; {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:06:45,154 INFO L280 TraceCheckUtils]: 133: Hoare triple {17522#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} havoc __utac_acc__Specification5_spec__3_#t~ret63, __utac_acc__Specification5_spec__3_#t~ret64, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {17524#(and (<= |ULTIMATE.start_getWaterLevel_#res| 2) (<= 2 |ULTIMATE.start_getWaterLevel_#res|))} is VALID [2020-07-28 19:06:45,155 INFO L280 TraceCheckUtils]: 134: Hoare triple {17524#(and (<= |ULTIMATE.start_getWaterLevel_#res| 2) (<= 2 |ULTIMATE.start_getWaterLevel_#res|))} __utac_acc__Specification5_spec__3_#t~ret63 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret63 && __utac_acc__Specification5_spec__3_#t~ret63 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret63;havoc __utac_acc__Specification5_spec__3_#t~ret63; {17525#(and (< 1 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9) (<= ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9 2))} is VALID [2020-07-28 19:06:45,156 INFO L280 TraceCheckUtils]: 135: Hoare triple {17525#(and (< 1 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9) (<= ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9 2))} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {17520#false} is VALID [2020-07-28 19:06:45,156 INFO L280 TraceCheckUtils]: 136: Hoare triple {17520#false} __utac_acc__Specification5_spec__3_#t~ret64 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret64 && __utac_acc__Specification5_spec__3_#t~ret64 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret64;havoc __utac_acc__Specification5_spec__3_#t~ret64; {17520#false} is VALID [2020-07-28 19:06:45,157 INFO L280 TraceCheckUtils]: 137: Hoare triple {17520#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3; {17520#false} is VALID [2020-07-28 19:06:45,157 INFO L280 TraceCheckUtils]: 138: Hoare triple {17520#false} assume 0 == ~switchedOnBeforeTS~0; {17520#false} is VALID [2020-07-28 19:06:45,157 INFO L280 TraceCheckUtils]: 139: Hoare triple {17520#false} assume !false; {17520#false} is VALID [2020-07-28 19:06:45,178 INFO L134 CoverageAnalysis]: Checked inductivity of 204 backedges. 96 proven. 55 refuted. 0 times theorem prover too weak. 53 trivial. 0 not checked. [2020-07-28 19:06:45,179 INFO L220 FreeRefinementEngine]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2020-07-28 19:06:45,179 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 7] total 9 [2020-07-28 19:06:45,179 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [848624007] [2020-07-28 19:06:45,180 INFO L78 Accepts]: Start accepts. Automaton has 10 states. Word has length 140 [2020-07-28 19:06:45,181 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:06:45,181 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 10 states. [2020-07-28 19:06:45,428 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 190 edges. 190 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:06:45,428 INFO L459 AbstractCegarLoop]: Interpolant automaton has 10 states [2020-07-28 19:06:45,428 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:06:45,429 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2020-07-28 19:06:45,429 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=26, Invalid=64, Unknown=0, NotChecked=0, Total=90 [2020-07-28 19:06:45,429 INFO L87 Difference]: Start difference. First operand 305 states and 375 transitions. Second operand 10 states. [2020-07-28 19:06:48,230 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:48,230 INFO L93 Difference]: Finished difference Result 585 states and 728 transitions. [2020-07-28 19:06:48,230 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2020-07-28 19:06:48,230 INFO L78 Accepts]: Start accepts. Automaton has 10 states. Word has length 140 [2020-07-28 19:06:48,231 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:06:48,231 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 10 states. [2020-07-28 19:06:48,232 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 258 transitions. [2020-07-28 19:06:48,232 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 10 states. [2020-07-28 19:06:48,234 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 258 transitions. [2020-07-28 19:06:48,234 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states and 258 transitions. [2020-07-28 19:06:48,562 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 258 edges. 258 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:06:48,563 INFO L225 Difference]: With dead ends: 585 [2020-07-28 19:06:48,563 INFO L226 Difference]: Without dead ends: 0 [2020-07-28 19:06:48,564 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 151 GetRequests, 137 SyntacticMatches, 3 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=45, Invalid=111, Unknown=0, NotChecked=0, Total=156 [2020-07-28 19:06:48,564 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2020-07-28 19:06:48,564 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2020-07-28 19:06:48,564 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:06:48,565 INFO L82 GeneralOperation]: Start isEquivalent. First operand 0 states. Second operand 0 states. [2020-07-28 19:06:48,565 INFO L74 IsIncluded]: Start isIncluded. First operand 0 states. Second operand 0 states. [2020-07-28 19:06:48,565 INFO L87 Difference]: Start difference. First operand 0 states. Second operand 0 states. [2020-07-28 19:06:48,565 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:48,567 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2020-07-28 19:06:48,567 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2020-07-28 19:06:48,567 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:06:48,567 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:06:48,567 INFO L74 IsIncluded]: Start isIncluded. First operand 0 states. Second operand 0 states. [2020-07-28 19:06:48,567 INFO L87 Difference]: Start difference. First operand 0 states. Second operand 0 states. [2020-07-28 19:06:48,567 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:48,568 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2020-07-28 19:06:48,568 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2020-07-28 19:06:48,568 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:06:48,568 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:06:48,568 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:06:48,568 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:06:48,568 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 0 states. [2020-07-28 19:06:48,569 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2020-07-28 19:06:48,569 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 140 [2020-07-28 19:06:48,569 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:06:48,569 INFO L479 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2020-07-28 19:06:48,569 INFO L480 AbstractCegarLoop]: Interpolant automaton has 10 states. [2020-07-28 19:06:48,569 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2020-07-28 19:06:48,569 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:06:48,770 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13,5 z3 -smt2 -in SMTLIB2_COMPLIANT=true [2020-07-28 19:06:48,773 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2020-07-28 19:06:49,076 WARN L193 SmtUtils]: Spent 220.00 ms on a formula simplification. DAG size of input: 173 DAG size of output: 116 [2020-07-28 19:06:49,302 WARN L193 SmtUtils]: Spent 182.00 ms on a formula simplification. DAG size of input: 173 DAG size of output: 106 [2020-07-28 19:06:49,423 WARN L193 SmtUtils]: Spent 108.00 ms on a formula simplification. DAG size of input: 145 DAG size of output: 96 [2020-07-28 19:06:50,015 WARN L193 SmtUtils]: Spent 120.00 ms on a formula simplification. DAG size of input: 173 DAG size of output: 116 [2020-07-28 19:06:50,833 WARN L193 SmtUtils]: Spent 617.00 ms on a formula simplification. DAG size of input: 114 DAG size of output: 30 [2020-07-28 19:06:51,308 WARN L193 SmtUtils]: Spent 373.00 ms on a formula simplification. DAG size of input: 98 DAG size of output: 30 [2020-07-28 19:06:51,749 WARN L193 SmtUtils]: Spent 406.00 ms on a formula simplification. DAG size of input: 90 DAG size of output: 32 [2020-07-28 19:06:52,297 WARN L193 SmtUtils]: Spent 432.00 ms on a formula simplification. DAG size of input: 90 DAG size of output: 35 [2020-07-28 19:06:52,539 WARN L193 SmtUtils]: Spent 237.00 ms on a formula simplification. DAG size of input: 74 DAG size of output: 24 [2020-07-28 19:06:53,172 WARN L193 SmtUtils]: Spent 621.00 ms on a formula simplification. DAG size of input: 82 DAG size of output: 37 [2020-07-28 19:06:53,408 WARN L193 SmtUtils]: Spent 183.00 ms on a formula simplification. DAG size of input: 30 DAG size of output: 24 [2020-07-28 19:06:53,678 WARN L193 SmtUtils]: Spent 265.00 ms on a formula simplification. DAG size of input: 92 DAG size of output: 26 [2020-07-28 19:06:53,994 WARN L193 SmtUtils]: Spent 287.00 ms on a formula simplification. DAG size of input: 35 DAG size of output: 28 [2020-07-28 19:06:54,480 WARN L193 SmtUtils]: Spent 468.00 ms on a formula simplification. DAG size of input: 105 DAG size of output: 34 [2020-07-28 19:06:55,096 WARN L193 SmtUtils]: Spent 609.00 ms on a formula simplification. DAG size of input: 114 DAG size of output: 30 [2020-07-28 19:06:55,127 INFO L268 CegarLoopResult]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 902) no Hoare annotation was computed. [2020-07-28 19:06:55,127 INFO L268 CegarLoopResult]: For program point L696(lines 695 740) no Hoare annotation was computed. [2020-07-28 19:06:55,128 INFO L268 CegarLoopResult]: For program point L697(lines 697 701) no Hoare annotation was computed. [2020-07-28 19:06:55,128 INFO L264 CegarLoopResult]: At program point L565(lines 560 568) the Hoare annotation is: (let ((.cse4 (<= 0 ~waterLevel~0)) (.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse5 (<= ~waterLevel~0 2)) (.cse1 (= 0 |ULTIMATE.start_isPumpRunning_#res|)) (.cse2 (= 0 ~pumpRunning~0)) (.cse3 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 (= 1 ~waterLevel~0) .cse3) (and .cse0 .cse4 .cse5 (= 1 |ULTIMATE.start_isPumpRunning_#res|) .cse3 (= 1 ~pumpRunning~0)) (and (<= ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9 1) .cse0 .cse4 .cse1 .cse2 (<= ~waterLevel~0 1) .cse3 (<= |ULTIMATE.start_getWaterLevel_#res| 1)) (and (<= 2 ~waterLevel~0) .cse0 .cse5 .cse1 .cse2 .cse3))) [2020-07-28 19:06:55,129 INFO L264 CegarLoopResult]: At program point L565-1(lines 560 568) the Hoare annotation is: (let ((.cse0 (<= ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9 1)) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse2 (<= 0 ~waterLevel~0)) (.cse3 (<= ~waterLevel~0 1)) (.cse4 (= 1 ~systemActive~0)) (.cse5 (<= |ULTIMATE.start_getWaterLevel_#res| 1))) (or (and .cse0 .cse1 .cse2 (= 0 |ULTIMATE.start_isPumpRunning_#res|) (= 0 ~pumpRunning~0) .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 (= 1 |ULTIMATE.start_isPumpRunning_#res|) (<= 1 ~switchedOnBeforeTS~0) .cse3 .cse4 (= 1 ~pumpRunning~0) .cse5))) [2020-07-28 19:06:55,129 INFO L264 CegarLoopResult]: At program point L565-2(lines 560 568) the Hoare annotation is: false [2020-07-28 19:06:55,129 INFO L264 CegarLoopResult]: At program point L565-3(lines 560 568) the Hoare annotation is: false [2020-07-28 19:06:55,129 INFO L264 CegarLoopResult]: At program point L565-4(lines 560 568) the Hoare annotation is: false [2020-07-28 19:06:55,129 INFO L264 CegarLoopResult]: At program point L565-5(lines 560 568) the Hoare annotation is: false [2020-07-28 19:06:55,129 INFO L264 CegarLoopResult]: At program point L995(lines 986 999) the Hoare annotation is: false [2020-07-28 19:06:55,129 INFO L264 CegarLoopResult]: At program point L995-1(lines 986 999) the Hoare annotation is: false [2020-07-28 19:06:55,130 INFO L264 CegarLoopResult]: At program point L995-2(lines 986 999) the Hoare annotation is: false [2020-07-28 19:06:55,130 INFO L264 CegarLoopResult]: At program point L995-3(lines 986 999) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (= 0 ~pumpRunning~0)) (.cse2 (= 1 ~systemActive~0))) (or (and (= 1 |ULTIMATE.start_isHighWaterSensorDry_#res|) .cse0 (<= 0 ~waterLevel~0) .cse1 (<= ~waterLevel~0 1) .cse2) (and (<= 2 ~waterLevel~0) .cse0 (<= ~waterLevel~0 2) .cse1 .cse2))) [2020-07-28 19:06:55,130 INFO L264 CegarLoopResult]: At program point L995-4(lines 986 999) the Hoare annotation is: false [2020-07-28 19:06:55,130 INFO L264 CegarLoopResult]: At program point L995-5(lines 986 999) the Hoare annotation is: false [2020-07-28 19:06:55,130 INFO L264 CegarLoopResult]: At program point L995-6(lines 986 999) the Hoare annotation is: false [2020-07-28 19:06:55,130 INFO L264 CegarLoopResult]: At program point L995-7(lines 986 999) the Hoare annotation is: false [2020-07-28 19:06:55,130 INFO L268 CegarLoopResult]: For program point L731(lines 731 735) no Hoare annotation was computed. [2020-07-28 19:06:55,130 INFO L264 CegarLoopResult]: At program point L995-8(lines 986 999) the Hoare annotation is: false [2020-07-28 19:06:55,130 INFO L264 CegarLoopResult]: At program point L995-9(lines 986 999) the Hoare annotation is: false [2020-07-28 19:06:55,130 INFO L268 CegarLoopResult]: For program point L731-2(lines 725 736) no Hoare annotation was computed. [2020-07-28 19:06:55,130 INFO L264 CegarLoopResult]: At program point L995-10(lines 986 999) the Hoare annotation is: false [2020-07-28 19:06:55,131 INFO L264 CegarLoopResult]: At program point L995-11(lines 986 999) the Hoare annotation is: false [2020-07-28 19:06:55,131 INFO L268 CegarLoopResult]: For program point L633(lines 633 637) no Hoare annotation was computed. [2020-07-28 19:06:55,131 INFO L268 CegarLoopResult]: For program point L633-2(lines 633 637) no Hoare annotation was computed. [2020-07-28 19:06:55,131 INFO L268 CegarLoopResult]: For program point L633-3(lines 633 637) no Hoare annotation was computed. [2020-07-28 19:06:55,131 INFO L268 CegarLoopResult]: For program point L633-5(lines 633 637) no Hoare annotation was computed. [2020-07-28 19:06:55,131 INFO L264 CegarLoopResult]: At program point L435(lines 435 441) the Hoare annotation is: (let ((.cse1 (<= 0 ~waterLevel~0)) (.cse3 (<= ~waterLevel~0 1)) (.cse2 (= 0 ~pumpRunning~0)) (.cse6 (<= 2 ~waterLevel~0)) (.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse7 (<= ~waterLevel~0 2)) (.cse4 (= 1 ~systemActive~0)) (.cse5 (= 1 ~pumpRunning~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 (= 1 |ULTIMATE.start_isPumpRunning_#res|) (<= 1 ~switchedOnBeforeTS~0) .cse3 .cse4 .cse5) (and .cse6 .cse0 .cse7 .cse2 .cse4) (and .cse6 .cse0 .cse7 .cse4 .cse5))) [2020-07-28 19:06:55,131 INFO L268 CegarLoopResult]: For program point L633-6(lines 633 637) no Hoare annotation was computed. [2020-07-28 19:06:55,131 INFO L264 CegarLoopResult]: At program point L435-1(lines 435 441) the Hoare annotation is: false [2020-07-28 19:06:55,132 INFO L268 CegarLoopResult]: For program point L633-8(lines 633 637) no Hoare annotation was computed. [2020-07-28 19:06:55,132 INFO L264 CegarLoopResult]: At program point L435-2(lines 435 441) the Hoare annotation is: false [2020-07-28 19:06:55,132 INFO L268 CegarLoopResult]: For program point L633-9(lines 633 637) no Hoare annotation was computed. [2020-07-28 19:06:55,132 INFO L268 CegarLoopResult]: For program point L633-11(lines 633 637) no Hoare annotation was computed. [2020-07-28 19:06:55,132 INFO L268 CegarLoopResult]: For program point L633-12(lines 633 637) no Hoare annotation was computed. [2020-07-28 19:06:55,132 INFO L268 CegarLoopResult]: For program point L633-14(lines 633 637) no Hoare annotation was computed. [2020-07-28 19:06:55,132 INFO L268 CegarLoopResult]: For program point L633-15(lines 633 637) no Hoare annotation was computed. [2020-07-28 19:06:55,132 INFO L268 CegarLoopResult]: For program point L633-17(lines 633 637) no Hoare annotation was computed. [2020-07-28 19:06:55,133 INFO L264 CegarLoopResult]: At program point L768(lines 428 434) the Hoare annotation is: (let ((.cse1 (<= 0 ~waterLevel~0)) (.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse2 (<= ~waterLevel~0 2)) (.cse4 (= 0 |ULTIMATE.start_isPumpRunning_#res|)) (.cse5 (= 0 ~pumpRunning~0)) (.cse3 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 (= 1 |ULTIMATE.start_isPumpRunning_#res|) (<= 1 ~switchedOnBeforeTS~0) .cse3 (= 1 ~pumpRunning~0)) (and .cse0 .cse4 .cse5 (= 1 ~waterLevel~0) .cse3) (and (<= ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9 1) .cse0 .cse1 .cse4 .cse5 (<= ~waterLevel~0 1) .cse3 (<= |ULTIMATE.start_getWaterLevel_#res| 1)) (and (<= 2 ~waterLevel~0) .cse0 .cse2 .cse4 .cse5 .cse3))) [2020-07-28 19:06:55,133 INFO L264 CegarLoopResult]: At program point L768-1(lines 428 434) the Hoare annotation is: false [2020-07-28 19:06:55,133 INFO L264 CegarLoopResult]: At program point L768-2(lines 428 434) the Hoare annotation is: false [2020-07-28 19:06:55,133 INFO L264 CegarLoopResult]: At program point L669(lines 1 1008) the Hoare annotation is: (and (= 0 ~pumpRunning~0) (= 1 ~waterLevel~0) (= 1 ~systemActive~0)) [2020-07-28 19:06:55,133 INFO L268 CegarLoopResult]: For program point ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION(line 902) no Hoare annotation was computed. [2020-07-28 19:06:55,133 INFO L268 CegarLoopResult]: For program point L902(line 902) no Hoare annotation was computed. [2020-07-28 19:06:55,133 INFO L268 CegarLoopResult]: For program point L902-1(line 902) no Hoare annotation was computed. [2020-07-28 19:06:55,133 INFO L268 CegarLoopResult]: For program point L902-2(line 902) no Hoare annotation was computed. [2020-07-28 19:06:55,133 INFO L268 CegarLoopResult]: For program point L705(lines 705 711) no Hoare annotation was computed. [2020-07-28 19:06:55,134 INFO L264 CegarLoopResult]: At program point L705-1(lines 705 711) the Hoare annotation is: (let ((.cse2 (= 0 ~pumpRunning~0)) (.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse4 (<= 0 ~waterLevel~0)) (.cse1 (<= ~waterLevel~0 2)) (.cse3 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 (= 1 ~waterLevel~0) .cse3) (and (<= ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9 1) .cse0 .cse4 .cse2 (<= ~waterLevel~0 1) .cse3 (<= |ULTIMATE.start_getWaterLevel_#res| 1)) (and (<= 2 ~waterLevel~0) .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse1 .cse3 (= 1 ~pumpRunning~0)))) [2020-07-28 19:06:55,134 INFO L264 CegarLoopResult]: At program point L639(lines 624 642) the Hoare annotation is: (and (= 0 ULTIMATE.start_test_~splverifierCounter~0) (<= 0 ~waterLevel~0) (= 1 |ULTIMATE.start_isPumpRunning_#res|) (<= 1 ~switchedOnBeforeTS~0) (<= ~waterLevel~0 1) (= 1 ~systemActive~0) (= 1 ~pumpRunning~0)) [2020-07-28 19:06:55,134 INFO L264 CegarLoopResult]: At program point L639-1(lines 624 642) the Hoare annotation is: false [2020-07-28 19:06:55,134 INFO L264 CegarLoopResult]: At program point L639-2(lines 624 642) the Hoare annotation is: false [2020-07-28 19:06:55,134 INFO L264 CegarLoopResult]: At program point L639-3(lines 624 642) the Hoare annotation is: false [2020-07-28 19:06:55,134 INFO L264 CegarLoopResult]: At program point L639-4(lines 624 642) the Hoare annotation is: false [2020-07-28 19:06:55,134 INFO L264 CegarLoopResult]: At program point L639-5(lines 624 642) the Hoare annotation is: false [2020-07-28 19:06:55,135 INFO L268 CegarLoopResult]: For program point L937(lines 937 941) no Hoare annotation was computed. [2020-07-28 19:06:55,135 INFO L264 CegarLoopResult]: At program point L1005(lines 1000 1008) the Hoare annotation is: (and (= 0 ULTIMATE.start_test_~splverifierCounter~0) (<= 0 ~waterLevel~0) (= 1 |ULTIMATE.start_isPumpRunning_#res|) (<= 1 ~switchedOnBeforeTS~0) (<= ~waterLevel~0 1) (= 1 ~systemActive~0) (= 1 ~pumpRunning~0)) [2020-07-28 19:06:55,135 INFO L264 CegarLoopResult]: At program point L1005-1(lines 1000 1008) the Hoare annotation is: false [2020-07-28 19:06:55,135 INFO L264 CegarLoopResult]: At program point L1005-2(lines 1000 1008) the Hoare annotation is: false [2020-07-28 19:06:55,135 INFO L264 CegarLoopResult]: At program point L1005-3(lines 1000 1008) the Hoare annotation is: false [2020-07-28 19:06:55,135 INFO L264 CegarLoopResult]: At program point L1005-4(lines 1000 1008) the Hoare annotation is: false [2020-07-28 19:06:55,135 INFO L264 CegarLoopResult]: At program point L1005-5(lines 1000 1008) the Hoare annotation is: false [2020-07-28 19:06:55,135 INFO L264 CegarLoopResult]: At program point L741(lines 694 742) the Hoare annotation is: false [2020-07-28 19:06:55,136 INFO L264 CegarLoopResult]: At program point L677(lines 672 680) the Hoare annotation is: (and (= 0 ~pumpRunning~0) (= 1 ~waterLevel~0) (= 1 ~systemActive~0)) [2020-07-28 19:06:55,136 INFO L268 CegarLoopResult]: For program point L512(lines 512 529) no Hoare annotation was computed. [2020-07-28 19:06:55,136 INFO L268 CegarLoopResult]: For program point L512-1(lines 512 529) no Hoare annotation was computed. [2020-07-28 19:06:55,136 INFO L268 CegarLoopResult]: For program point L512-2(lines 512 529) no Hoare annotation was computed. [2020-07-28 19:06:55,136 INFO L268 CegarLoopResult]: For program point L779(lines 779 796) no Hoare annotation was computed. [2020-07-28 19:06:55,136 INFO L264 CegarLoopResult]: At program point L779-1(lines 1 1008) the Hoare annotation is: (let ((.cse0 (<= ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9 1)) (.cse2 (<= 0 ~waterLevel~0)) (.cse3 (<= ~waterLevel~0 1)) (.cse6 (<= |ULTIMATE.start_getWaterLevel_#res| 1)) (.cse7 (<= 2 ~waterLevel~0)) (.cse8 (<= |ULTIMATE.start_getWaterLevel_#res| 2)) (.cse9 (< 1 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9)) (.cse10 (<= ~waterLevel~0 2)) (.cse12 (<= ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9 2)) (.cse13 (<= 2 |ULTIMATE.start_getWaterLevel_#res|)) (.cse5 (= 1 ~pumpRunning~0)) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse11 (= 0 ~pumpRunning~0)) (.cse4 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 (= 1 |ULTIMATE.start_isPumpRunning_#res|) .cse3 (= 1 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp___0~3) .cse4 .cse5 .cse6) (and .cse7 .cse8 .cse1 .cse9 .cse10 .cse11 .cse12 .cse13 .cse4) (and .cse0 .cse1 .cse2 .cse11 .cse3 .cse4 .cse6) (and .cse7 .cse8 .cse1 .cse9 .cse10 .cse12 .cse13 .cse4 .cse5) (and .cse1 .cse11 (= 1 ~waterLevel~0) .cse4))) [2020-07-28 19:06:55,136 INFO L264 CegarLoopResult]: At program point L812-2(lines 812 826) the Hoare annotation is: false [2020-07-28 19:06:55,136 INFO L268 CegarLoopResult]: For program point L779-2(lines 779 796) no Hoare annotation was computed. [2020-07-28 19:06:55,137 INFO L264 CegarLoopResult]: At program point L779-3(lines 1 1008) the Hoare annotation is: false [2020-07-28 19:06:55,137 INFO L268 CegarLoopResult]: For program point L779-4(lines 779 796) no Hoare annotation was computed. [2020-07-28 19:06:55,137 INFO L268 CegarLoopResult]: For program point L614(lines 614 618) no Hoare annotation was computed. [2020-07-28 19:06:55,137 INFO L264 CegarLoopResult]: At program point L779-5(lines 1 1008) the Hoare annotation is: false [2020-07-28 19:06:55,137 INFO L268 CegarLoopResult]: For program point L614-2(lines 614 618) no Hoare annotation was computed. [2020-07-28 19:06:55,137 INFO L268 CegarLoopResult]: For program point L614-3(lines 614 618) no Hoare annotation was computed. [2020-07-28 19:06:55,137 INFO L268 CegarLoopResult]: For program point L614-5(lines 614 618) no Hoare annotation was computed. [2020-07-28 19:06:55,137 INFO L268 CegarLoopResult]: For program point L614-6(lines 614 618) no Hoare annotation was computed. [2020-07-28 19:06:55,137 INFO L268 CegarLoopResult]: For program point L614-8(lines 614 618) no Hoare annotation was computed. [2020-07-28 19:06:55,137 INFO L268 CegarLoopResult]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2020-07-28 19:06:55,137 INFO L268 CegarLoopResult]: For program point L614-9(lines 614 618) no Hoare annotation was computed. [2020-07-28 19:06:55,138 INFO L268 CegarLoopResult]: For program point L614-11(lines 614 618) no Hoare annotation was computed. [2020-07-28 19:06:55,138 INFO L268 CegarLoopResult]: For program point L614-12(lines 614 618) no Hoare annotation was computed. [2020-07-28 19:06:55,138 INFO L268 CegarLoopResult]: For program point L614-14(lines 614 618) no Hoare annotation was computed. [2020-07-28 19:06:55,138 INFO L268 CegarLoopResult]: For program point L614-15(lines 614 618) no Hoare annotation was computed. [2020-07-28 19:06:55,138 INFO L268 CegarLoopResult]: For program point L614-17(lines 614 618) no Hoare annotation was computed. [2020-07-28 19:06:55,138 INFO L268 CegarLoopResult]: For program point L614-18(lines 614 618) no Hoare annotation was computed. [2020-07-28 19:06:55,138 INFO L268 CegarLoopResult]: For program point L614-20(lines 614 618) no Hoare annotation was computed. [2020-07-28 19:06:55,138 INFO L268 CegarLoopResult]: For program point L614-21(lines 614 618) no Hoare annotation was computed. [2020-07-28 19:06:55,138 INFO L268 CegarLoopResult]: For program point L614-23(lines 614 618) no Hoare annotation was computed. [2020-07-28 19:06:55,138 INFO L268 CegarLoopResult]: For program point L614-24(lines 614 618) no Hoare annotation was computed. [2020-07-28 19:06:55,138 INFO L268 CegarLoopResult]: For program point L813(line 813) no Hoare annotation was computed. [2020-07-28 19:06:55,138 INFO L268 CegarLoopResult]: For program point L614-26(lines 614 618) no Hoare annotation was computed. [2020-07-28 19:06:55,139 INFO L268 CegarLoopResult]: For program point L614-27(lines 614 618) no Hoare annotation was computed. [2020-07-28 19:06:55,139 INFO L268 CegarLoopResult]: For program point L614-29(lines 614 618) no Hoare annotation was computed. [2020-07-28 19:06:55,139 INFO L268 CegarLoopResult]: For program point L614-30(lines 614 618) no Hoare annotation was computed. [2020-07-28 19:06:55,139 INFO L268 CegarLoopResult]: For program point L614-32(lines 614 618) no Hoare annotation was computed. [2020-07-28 19:06:55,139 INFO L268 CegarLoopResult]: For program point L614-33(lines 614 618) no Hoare annotation was computed. [2020-07-28 19:06:55,139 INFO L268 CegarLoopResult]: For program point L516(lines 516 524) no Hoare annotation was computed. [2020-07-28 19:06:55,139 INFO L268 CegarLoopResult]: For program point L516-1(lines 516 524) no Hoare annotation was computed. [2020-07-28 19:06:55,139 INFO L268 CegarLoopResult]: For program point L614-35(lines 614 618) no Hoare annotation was computed. [2020-07-28 19:06:55,139 INFO L268 CegarLoopResult]: For program point L516-2(lines 516 524) no Hoare annotation was computed. [2020-07-28 19:06:55,139 INFO L268 CegarLoopResult]: For program point L913(lines 913 917) no Hoare annotation was computed. [2020-07-28 19:06:55,140 INFO L268 CegarLoopResult]: For program point L913-3(lines 913 917) no Hoare annotation was computed. [2020-07-28 19:06:55,140 INFO L268 CegarLoopResult]: For program point L715(lines 715 721) no Hoare annotation was computed. [2020-07-28 19:06:55,140 INFO L268 CegarLoopResult]: For program point L913-6(lines 913 917) no Hoare annotation was computed. [2020-07-28 19:06:55,140 INFO L264 CegarLoopResult]: At program point L715-1(lines 715 721) the Hoare annotation is: (let ((.cse2 (= 0 ~pumpRunning~0)) (.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse4 (<= 0 ~waterLevel~0)) (.cse1 (<= ~waterLevel~0 2)) (.cse3 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 (= 1 ~waterLevel~0) .cse3) (and (<= ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9 1) .cse0 .cse4 .cse2 (<= ~waterLevel~0 1) .cse3 (<= |ULTIMATE.start_getWaterLevel_#res| 1)) (and (<= 2 ~waterLevel~0) .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse1 .cse3 (= 1 ~pumpRunning~0)))) [2020-07-28 19:06:55,140 INFO L268 CegarLoopResult]: For program point L816(lines 816 820) no Hoare annotation was computed. [2020-07-28 19:06:55,140 INFO L268 CegarLoopResult]: For program point L783(lines 783 793) no Hoare annotation was computed. [2020-07-28 19:06:55,140 INFO L268 CegarLoopResult]: For program point L816-1(lines 816 820) no Hoare annotation was computed. [2020-07-28 19:06:55,140 INFO L268 CegarLoopResult]: For program point L783-2(lines 783 793) no Hoare annotation was computed. [2020-07-28 19:06:55,140 INFO L268 CegarLoopResult]: For program point L783-4(lines 783 793) no Hoare annotation was computed. [2020-07-28 19:06:55,141 INFO L268 CegarLoopResult]: For program point L486(lines 486 503) no Hoare annotation was computed. [2020-07-28 19:06:55,141 INFO L268 CegarLoopResult]: For program point L486-1(lines 486 503) no Hoare annotation was computed. [2020-07-28 19:06:55,141 INFO L268 CegarLoopResult]: For program point L486-2(lines 486 503) no Hoare annotation was computed. [2020-07-28 19:06:55,141 INFO L268 CegarLoopResult]: For program point L486-3(lines 486 503) no Hoare annotation was computed. [2020-07-28 19:06:55,141 INFO L268 CegarLoopResult]: For program point L486-4(lines 486 503) no Hoare annotation was computed. [2020-07-28 19:06:55,141 INFO L268 CegarLoopResult]: For program point L486-5(lines 486 503) no Hoare annotation was computed. [2020-07-28 19:06:55,141 INFO L264 CegarLoopResult]: At program point L982(lines 977 985) the Hoare annotation is: (let ((.cse6 (= 1 ~pumpRunning~0)) (.cse7 (<= 0 ~waterLevel~0)) (.cse8 (<= ~waterLevel~0 1)) (.cse9 (<= |ULTIMATE.start_getWaterLevel_#res| 1)) (.cse0 (<= 2 ~waterLevel~0)) (.cse1 (<= |ULTIMATE.start_getWaterLevel_#res| 2)) (.cse2 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse3 (<= ~waterLevel~0 2)) (.cse10 (= 0 ~pumpRunning~0)) (.cse4 (<= 2 |ULTIMATE.start_getWaterLevel_#res|)) (.cse5 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse2 .cse7 (= 1 |ULTIMATE.start_isPumpRunning_#res|) (<= 1 ~switchedOnBeforeTS~0) .cse8 .cse5 .cse6 .cse9) (and .cse2 .cse7 .cse10 .cse8 .cse5 .cse9) (and .cse0 .cse1 .cse2 .cse3 .cse10 .cse4 .cse5))) [2020-07-28 19:06:55,141 INFO L264 CegarLoopResult]: At program point L982-1(lines 977 985) the Hoare annotation is: false [2020-07-28 19:06:55,141 INFO L264 CegarLoopResult]: At program point L982-2(lines 977 985) the Hoare annotation is: false [2020-07-28 19:06:55,142 INFO L268 CegarLoopResult]: For program point L784(lines 784 790) no Hoare annotation was computed. [2020-07-28 19:06:55,142 INFO L268 CegarLoopResult]: For program point L784-2(lines 784 790) no Hoare annotation was computed. [2020-07-28 19:06:55,142 INFO L268 CegarLoopResult]: For program point L784-4(lines 784 790) no Hoare annotation was computed. [2020-07-28 19:06:55,142 INFO L268 CegarLoopResult]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2020-07-28 19:06:55,142 INFO L264 CegarLoopResult]: At program point L950(lines 945 953) the Hoare annotation is: (and (= 0 ULTIMATE.start_test_~splverifierCounter~0) (<= 0 ~waterLevel~0) (= 1 |ULTIMATE.start_isPumpRunning_#res|) (<= 1 ~switchedOnBeforeTS~0) (<= ~waterLevel~0 1) (= 1 ~systemActive~0) (= 1 ~pumpRunning~0)) [2020-07-28 19:06:55,142 INFO L264 CegarLoopResult]: At program point L950-1(lines 945 953) the Hoare annotation is: false [2020-07-28 19:06:55,142 INFO L268 CegarLoopResult]: For program point L884(lines 884 891) no Hoare annotation was computed. [2020-07-28 19:06:55,142 INFO L264 CegarLoopResult]: At program point L950-2(lines 945 953) the Hoare annotation is: false [2020-07-28 19:06:55,142 INFO L271 CegarLoopResult]: At program point L884-1(lines 884 891) the Hoare annotation is: true [2020-07-28 19:06:55,142 INFO L264 CegarLoopResult]: At program point L620(lines 605 623) the Hoare annotation is: false [2020-07-28 19:06:55,142 INFO L264 CegarLoopResult]: At program point L620-1(lines 605 623) the Hoare annotation is: false [2020-07-28 19:06:55,143 INFO L264 CegarLoopResult]: At program point L620-2(lines 605 623) the Hoare annotation is: false [2020-07-28 19:06:55,143 INFO L264 CegarLoopResult]: At program point L620-3(lines 605 623) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (= 0 ~pumpRunning~0)) (.cse2 (= 1 ~systemActive~0))) (or (and .cse0 (<= 0 ~waterLevel~0) .cse1 (= 0 |ULTIMATE.start_isHighWaterLevel_#res|) (<= ~waterLevel~0 1) (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~0) .cse2) (and (<= 2 ~waterLevel~0) .cse0 (<= ~waterLevel~0 2) .cse1 .cse2))) [2020-07-28 19:06:55,143 INFO L264 CegarLoopResult]: At program point L620-4(lines 605 623) the Hoare annotation is: false [2020-07-28 19:06:55,143 INFO L264 CegarLoopResult]: At program point L620-5(lines 605 623) the Hoare annotation is: false [2020-07-28 19:06:55,143 INFO L264 CegarLoopResult]: At program point L620-6(lines 605 623) the Hoare annotation is: false [2020-07-28 19:06:55,143 INFO L264 CegarLoopResult]: At program point L620-7(lines 605 623) the Hoare annotation is: false [2020-07-28 19:06:55,143 INFO L264 CegarLoopResult]: At program point L620-8(lines 605 623) the Hoare annotation is: false [2020-07-28 19:06:55,143 INFO L264 CegarLoopResult]: At program point L620-9(lines 605 623) the Hoare annotation is: false [2020-07-28 19:06:55,143 INFO L264 CegarLoopResult]: At program point L620-10(lines 605 623) the Hoare annotation is: false [2020-07-28 19:06:55,143 INFO L264 CegarLoopResult]: At program point L620-11(lines 605 623) the Hoare annotation is: false [2020-07-28 19:06:55,144 INFO L264 CegarLoopResult]: At program point L556(lines 549 559) the Hoare annotation is: (and (= 0 ULTIMATE.start_test_~splverifierCounter~0) (<= 0 ~waterLevel~0) (= 1 |ULTIMATE.start_isPumpRunning_#res|) (<= 1 ~switchedOnBeforeTS~0) (<= ~waterLevel~0 1) (= 1 ~systemActive~0) (= 1 ~pumpRunning~0)) [2020-07-28 19:06:55,144 INFO L264 CegarLoopResult]: At program point L556-1(lines 549 559) the Hoare annotation is: false [2020-07-28 19:06:55,144 INFO L268 CegarLoopResult]: For program point L490(lines 490 498) no Hoare annotation was computed. [2020-07-28 19:06:55,144 INFO L264 CegarLoopResult]: At program point L556-2(lines 549 559) the Hoare annotation is: false [2020-07-28 19:06:55,144 INFO L268 CegarLoopResult]: For program point L490-1(lines 490 498) no Hoare annotation was computed. [2020-07-28 19:06:55,144 INFO L268 CegarLoopResult]: For program point L490-2(lines 490 498) no Hoare annotation was computed. [2020-07-28 19:06:55,144 INFO L268 CegarLoopResult]: For program point L490-3(lines 490 498) no Hoare annotation was computed. [2020-07-28 19:06:55,144 INFO L268 CegarLoopResult]: For program point L490-4(lines 490 498) no Hoare annotation was computed. [2020-07-28 19:06:55,144 INFO L268 CegarLoopResult]: For program point L490-5(lines 490 498) no Hoare annotation was computed. [2020-07-28 19:06:55,144 INFO L268 CegarLoopResult]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2020-07-28 19:06:55,144 INFO L268 CegarLoopResult]: For program point L460(lines 460 477) no Hoare annotation was computed. [2020-07-28 19:06:55,145 INFO L268 CegarLoopResult]: For program point L460-1(lines 460 477) no Hoare annotation was computed. [2020-07-28 19:06:55,145 INFO L268 CegarLoopResult]: For program point L460-2(lines 460 477) no Hoare annotation was computed. [2020-07-28 19:06:55,145 INFO L268 CegarLoopResult]: For program point L460-3(lines 460 477) no Hoare annotation was computed. [2020-07-28 19:06:55,145 INFO L268 CegarLoopResult]: For program point L460-4(lines 460 477) no Hoare annotation was computed. [2020-07-28 19:06:55,145 INFO L268 CegarLoopResult]: For program point L460-5(lines 460 477) no Hoare annotation was computed. [2020-07-28 19:06:55,145 INFO L268 CegarLoopResult]: For program point L460-6(lines 460 477) no Hoare annotation was computed. [2020-07-28 19:06:55,145 INFO L268 CegarLoopResult]: For program point L460-7(lines 460 477) no Hoare annotation was computed. [2020-07-28 19:06:55,145 INFO L268 CegarLoopResult]: For program point L460-8(lines 460 477) no Hoare annotation was computed. [2020-07-28 19:06:55,145 INFO L268 CegarLoopResult]: For program point L460-9(lines 460 477) no Hoare annotation was computed. [2020-07-28 19:06:55,145 INFO L268 CegarLoopResult]: For program point L460-10(lines 460 477) no Hoare annotation was computed. [2020-07-28 19:06:55,145 INFO L268 CegarLoopResult]: For program point L460-11(lines 460 477) no Hoare annotation was computed. [2020-07-28 19:06:55,146 INFO L264 CegarLoopResult]: At program point L758(lines 753 760) the Hoare annotation is: (and (= 0 ~pumpRunning~0) (= 1 ~waterLevel~0) (= 1 ~systemActive~0)) [2020-07-28 19:06:55,146 INFO L268 CegarLoopResult]: For program point L725(lines 725 736) no Hoare annotation was computed. [2020-07-28 19:06:55,146 INFO L264 CegarLoopResult]: At program point L428(lines 424 446) the Hoare annotation is: (let ((.cse1 (<= 0 ~waterLevel~0)) (.cse3 (<= ~waterLevel~0 1)) (.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse2 (= 0 ~pumpRunning~0)) (.cse4 (= 1 ~systemActive~0))) (or (and (<= ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9 1) .cse0 .cse1 .cse2 .cse3 .cse4 (<= |ULTIMATE.start_getWaterLevel_#res| 1)) (and .cse0 .cse1 (= 1 |ULTIMATE.start_isPumpRunning_#res|) (<= 1 ~switchedOnBeforeTS~0) .cse3 .cse4 (= 1 ~pumpRunning~0)) (and (<= 2 ~waterLevel~0) .cse0 (<= ~waterLevel~0 2) .cse2 .cse4) (and .cse0 .cse2 (= 1 ~waterLevel~0) .cse4))) [2020-07-28 19:06:55,146 INFO L264 CegarLoopResult]: At program point L428-1(lines 424 446) the Hoare annotation is: false [2020-07-28 19:06:55,146 INFO L264 CegarLoopResult]: At program point L428-2(lines 424 446) the Hoare annotation is: false [2020-07-28 19:06:55,146 INFO L268 CegarLoopResult]: For program point L-1(line -1) no Hoare annotation was computed. [2020-07-28 19:06:55,146 INFO L268 CegarLoopResult]: For program point L990(lines 990 996) no Hoare annotation was computed. [2020-07-28 19:06:55,146 INFO L268 CegarLoopResult]: For program point L990-1(lines 990 996) no Hoare annotation was computed. [2020-07-28 19:06:55,146 INFO L268 CegarLoopResult]: For program point L990-2(lines 990 996) no Hoare annotation was computed. [2020-07-28 19:06:55,147 INFO L268 CegarLoopResult]: For program point L990-3(lines 990 996) no Hoare annotation was computed. [2020-07-28 19:06:55,147 INFO L268 CegarLoopResult]: For program point L990-4(lines 990 996) no Hoare annotation was computed. [2020-07-28 19:06:55,147 INFO L268 CegarLoopResult]: For program point L990-5(lines 990 996) no Hoare annotation was computed. [2020-07-28 19:06:55,147 INFO L268 CegarLoopResult]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 902) no Hoare annotation was computed. [2020-07-28 19:06:55,147 INFO L268 CegarLoopResult]: For program point L990-6(lines 990 996) no Hoare annotation was computed. [2020-07-28 19:06:55,147 INFO L268 CegarLoopResult]: For program point L990-7(lines 990 996) no Hoare annotation was computed. [2020-07-28 19:06:55,147 INFO L268 CegarLoopResult]: For program point L990-8(lines 990 996) no Hoare annotation was computed. [2020-07-28 19:06:55,147 INFO L268 CegarLoopResult]: For program point L990-9(lines 990 996) no Hoare annotation was computed. [2020-07-28 19:06:55,147 INFO L268 CegarLoopResult]: For program point L990-10(lines 990 996) no Hoare annotation was computed. [2020-07-28 19:06:55,147 INFO L268 CegarLoopResult]: For program point L990-11(lines 990 996) no Hoare annotation was computed. [2020-07-28 19:06:55,148 INFO L268 CegarLoopResult]: For program point L925(lines 925 929) no Hoare annotation was computed. [2020-07-28 19:06:55,148 INFO L271 CegarLoopResult]: At program point L893(lines 874 896) the Hoare annotation is: true [2020-07-28 19:06:55,148 INFO L264 CegarLoopResult]: At program point L860(lines 856 862) the Hoare annotation is: (and (= 0 ~pumpRunning~0) (= 1 ~waterLevel~0) (= 1 ~systemActive~0)) [2020-07-28 19:06:55,148 INFO L268 CegarLoopResult]: For program point L464(lines 464 472) no Hoare annotation was computed. [2020-07-28 19:06:55,148 INFO L268 CegarLoopResult]: For program point L464-1(lines 464 472) no Hoare annotation was computed. [2020-07-28 19:06:55,148 INFO L268 CegarLoopResult]: For program point L464-2(lines 464 472) no Hoare annotation was computed. [2020-07-28 19:06:55,148 INFO L268 CegarLoopResult]: For program point L464-3(lines 464 472) no Hoare annotation was computed. [2020-07-28 19:06:55,148 INFO L268 CegarLoopResult]: For program point L464-4(lines 464 472) no Hoare annotation was computed. [2020-07-28 19:06:55,148 INFO L268 CegarLoopResult]: For program point L464-5(lines 464 472) no Hoare annotation was computed. [2020-07-28 19:06:55,148 INFO L268 CegarLoopResult]: For program point L464-6(lines 464 472) no Hoare annotation was computed. [2020-07-28 19:06:55,148 INFO L268 CegarLoopResult]: For program point L464-7(lines 464 472) no Hoare annotation was computed. [2020-07-28 19:06:55,149 INFO L268 CegarLoopResult]: For program point L464-8(lines 464 472) no Hoare annotation was computed. [2020-07-28 19:06:55,149 INFO L268 CegarLoopResult]: For program point L464-9(lines 464 472) no Hoare annotation was computed. [2020-07-28 19:06:55,149 INFO L268 CegarLoopResult]: For program point L464-10(lines 464 472) no Hoare annotation was computed. [2020-07-28 19:06:55,149 INFO L268 CegarLoopResult]: For program point L464-11(lines 464 472) no Hoare annotation was computed. [2020-07-28 19:06:55,154 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2020-07-28 19:06:55,154 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2020-07-28 19:06:55,155 WARN L170 areAnnotationChecker]: L884 has no Hoare annotation [2020-07-28 19:06:55,155 WARN L170 areAnnotationChecker]: L884 has no Hoare annotation [2020-07-28 19:06:55,155 WARN L170 areAnnotationChecker]: L884 has no Hoare annotation [2020-07-28 19:06:55,157 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2020-07-28 19:06:55,157 WARN L170 areAnnotationChecker]: L696 has no Hoare annotation [2020-07-28 19:06:55,157 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2020-07-28 19:06:55,157 WARN L170 areAnnotationChecker]: L696 has no Hoare annotation [2020-07-28 19:06:55,158 WARN L170 areAnnotationChecker]: L696 has no Hoare annotation [2020-07-28 19:06:55,158 WARN L170 areAnnotationChecker]: L697 has no Hoare annotation [2020-07-28 19:06:55,158 WARN L170 areAnnotationChecker]: L913-3 has no Hoare annotation [2020-07-28 19:06:55,158 WARN L170 areAnnotationChecker]: L705 has no Hoare annotation [2020-07-28 19:06:55,158 WARN L170 areAnnotationChecker]: L705 has no Hoare annotation [2020-07-28 19:06:55,158 WARN L170 areAnnotationChecker]: L913-3 has no Hoare annotation [2020-07-28 19:06:55,158 WARN L170 areAnnotationChecker]: L913-3 has no Hoare annotation [2020-07-28 19:06:55,158 WARN L170 areAnnotationChecker]: L512-1 has no Hoare annotation [2020-07-28 19:06:55,158 WARN L170 areAnnotationChecker]: L925 has no Hoare annotation [2020-07-28 19:06:55,158 WARN L170 areAnnotationChecker]: L925 has no Hoare annotation [2020-07-28 19:06:55,158 WARN L170 areAnnotationChecker]: L715 has no Hoare annotation [2020-07-28 19:06:55,159 WARN L170 areAnnotationChecker]: L512-1 has no Hoare annotation [2020-07-28 19:06:55,159 WARN L170 areAnnotationChecker]: L512-1 has no Hoare annotation [2020-07-28 19:06:55,159 WARN L170 areAnnotationChecker]: L715 has no Hoare annotation [2020-07-28 19:06:55,159 WARN L170 areAnnotationChecker]: L715 has no Hoare annotation [2020-07-28 19:06:55,159 WARN L170 areAnnotationChecker]: L486-3 has no Hoare annotation [2020-07-28 19:06:55,159 WARN L170 areAnnotationChecker]: L486-3 has no Hoare annotation [2020-07-28 19:06:55,159 WARN L170 areAnnotationChecker]: L779-2 has no Hoare annotation [2020-07-28 19:06:55,159 WARN L170 areAnnotationChecker]: L937 has no Hoare annotation [2020-07-28 19:06:55,159 WARN L170 areAnnotationChecker]: L937 has no Hoare annotation [2020-07-28 19:06:55,159 WARN L170 areAnnotationChecker]: L725 has no Hoare annotation [2020-07-28 19:06:55,159 WARN L170 areAnnotationChecker]: L516-1 has no Hoare annotation [2020-07-28 19:06:55,159 WARN L170 areAnnotationChecker]: L633-9 has no Hoare annotation [2020-07-28 19:06:55,160 WARN L170 areAnnotationChecker]: L460-7 has no Hoare annotation [2020-07-28 19:06:55,160 WARN L170 areAnnotationChecker]: L460-7 has no Hoare annotation [2020-07-28 19:06:55,160 WARN L170 areAnnotationChecker]: L779-2 has no Hoare annotation [2020-07-28 19:06:55,160 WARN L170 areAnnotationChecker]: L779-2 has no Hoare annotation [2020-07-28 19:06:55,160 WARN L170 areAnnotationChecker]: L725 has no Hoare annotation [2020-07-28 19:06:55,160 WARN L170 areAnnotationChecker]: L725 has no Hoare annotation [2020-07-28 19:06:55,160 WARN L170 areAnnotationChecker]: L516-1 has no Hoare annotation [2020-07-28 19:06:55,160 WARN L170 areAnnotationChecker]: L516-1 has no Hoare annotation [2020-07-28 19:06:55,160 WARN L170 areAnnotationChecker]: L633-9 has no Hoare annotation [2020-07-28 19:06:55,160 WARN L170 areAnnotationChecker]: L633-9 has no Hoare annotation [2020-07-28 19:06:55,160 WARN L170 areAnnotationChecker]: L990-7 has no Hoare annotation [2020-07-28 19:06:55,160 WARN L170 areAnnotationChecker]: L990-7 has no Hoare annotation [2020-07-28 19:06:55,160 WARN L170 areAnnotationChecker]: L783-2 has no Hoare annotation [2020-07-28 19:06:55,161 WARN L170 areAnnotationChecker]: L731-2 has no Hoare annotation [2020-07-28 19:06:55,161 WARN L170 areAnnotationChecker]: L731 has no Hoare annotation [2020-07-28 19:06:55,161 WARN L170 areAnnotationChecker]: L731 has no Hoare annotation [2020-07-28 19:06:55,161 WARN L170 areAnnotationChecker]: L486-2 has no Hoare annotation [2020-07-28 19:06:55,161 WARN L170 areAnnotationChecker]: L486-2 has no Hoare annotation [2020-07-28 19:06:55,161 WARN L170 areAnnotationChecker]: L633-11 has no Hoare annotation [2020-07-28 19:06:55,161 WARN L170 areAnnotationChecker]: L614-21 has no Hoare annotation [2020-07-28 19:06:55,161 WARN L170 areAnnotationChecker]: L783-2 has no Hoare annotation [2020-07-28 19:06:55,161 WARN L170 areAnnotationChecker]: L783-2 has no Hoare annotation [2020-07-28 19:06:55,161 WARN L170 areAnnotationChecker]: L813 has no Hoare annotation [2020-07-28 19:06:55,163 WARN L170 areAnnotationChecker]: L633-6 has no Hoare annotation [2020-07-28 19:06:55,163 WARN L170 areAnnotationChecker]: L460-5 has no Hoare annotation [2020-07-28 19:06:55,163 WARN L170 areAnnotationChecker]: L460-5 has no Hoare annotation [2020-07-28 19:06:55,163 WARN L170 areAnnotationChecker]: L490-3 has no Hoare annotation [2020-07-28 19:06:55,163 WARN L170 areAnnotationChecker]: L614-21 has no Hoare annotation [2020-07-28 19:06:55,163 WARN L170 areAnnotationChecker]: L614-21 has no Hoare annotation [2020-07-28 19:06:55,163 WARN L170 areAnnotationChecker]: L784-2 has no Hoare annotation [2020-07-28 19:06:55,163 WARN L170 areAnnotationChecker]: L784-2 has no Hoare annotation [2020-07-28 19:06:55,163 WARN L170 areAnnotationChecker]: L813 has no Hoare annotation [2020-07-28 19:06:55,163 WARN L170 areAnnotationChecker]: L913 has no Hoare annotation [2020-07-28 19:06:55,174 WARN L170 areAnnotationChecker]: L633-6 has no Hoare annotation [2020-07-28 19:06:55,174 WARN L170 areAnnotationChecker]: L633-6 has no Hoare annotation [2020-07-28 19:06:55,174 WARN L170 areAnnotationChecker]: L990-5 has no Hoare annotation [2020-07-28 19:06:55,174 WARN L170 areAnnotationChecker]: L990-5 has no Hoare annotation [2020-07-28 19:06:55,174 WARN L170 areAnnotationChecker]: L490-3 has no Hoare annotation [2020-07-28 19:06:55,175 WARN L170 areAnnotationChecker]: L490-3 has no Hoare annotation [2020-07-28 19:06:55,175 WARN L170 areAnnotationChecker]: L614-23 has no Hoare annotation [2020-07-28 19:06:55,175 WARN L170 areAnnotationChecker]: L902-1 has no Hoare annotation [2020-07-28 19:06:55,175 WARN L170 areAnnotationChecker]: L902-1 has no Hoare annotation [2020-07-28 19:06:55,175 WARN L170 areAnnotationChecker]: L816 has no Hoare annotation [2020-07-28 19:06:55,175 WARN L170 areAnnotationChecker]: L816 has no Hoare annotation [2020-07-28 19:06:55,175 WARN L170 areAnnotationChecker]: L913 has no Hoare annotation [2020-07-28 19:06:55,175 WARN L170 areAnnotationChecker]: L913 has no Hoare annotation [2020-07-28 19:06:55,175 WARN L170 areAnnotationChecker]: L512 has no Hoare annotation [2020-07-28 19:06:55,177 WARN L170 areAnnotationChecker]: L633-8 has no Hoare annotation [2020-07-28 19:06:55,177 WARN L170 areAnnotationChecker]: L614-15 has no Hoare annotation [2020-07-28 19:06:55,177 WARN L170 areAnnotationChecker]: L460-6 has no Hoare annotation [2020-07-28 19:06:55,177 WARN L170 areAnnotationChecker]: L460-6 has no Hoare annotation [2020-07-28 19:06:55,177 WARN L170 areAnnotationChecker]: L464-7 has no Hoare annotation [2020-07-28 19:06:55,177 WARN L170 areAnnotationChecker]: L816-1 has no Hoare annotation [2020-07-28 19:06:55,177 WARN L170 areAnnotationChecker]: L512 has no Hoare annotation [2020-07-28 19:06:55,177 WARN L170 areAnnotationChecker]: L512 has no Hoare annotation [2020-07-28 19:06:55,179 WARN L170 areAnnotationChecker]: L490-2 has no Hoare annotation [2020-07-28 19:06:55,179 WARN L170 areAnnotationChecker]: L614-15 has no Hoare annotation [2020-07-28 19:06:55,180 WARN L170 areAnnotationChecker]: L614-15 has no Hoare annotation [2020-07-28 19:06:55,180 WARN L170 areAnnotationChecker]: L990-6 has no Hoare annotation [2020-07-28 19:06:55,180 WARN L170 areAnnotationChecker]: L990-6 has no Hoare annotation [2020-07-28 19:06:55,180 WARN L170 areAnnotationChecker]: L464-7 has no Hoare annotation [2020-07-28 19:06:55,180 WARN L170 areAnnotationChecker]: L464-7 has no Hoare annotation [2020-07-28 19:06:55,182 WARN L170 areAnnotationChecker]: L486-1 has no Hoare annotation [2020-07-28 19:06:55,182 WARN L170 areAnnotationChecker]: L486-1 has no Hoare annotation [2020-07-28 19:06:55,182 WARN L170 areAnnotationChecker]: L779 has no Hoare annotation [2020-07-28 19:06:55,182 WARN L170 areAnnotationChecker]: L490-2 has no Hoare annotation [2020-07-28 19:06:55,182 WARN L170 areAnnotationChecker]: L490-2 has no Hoare annotation [2020-07-28 19:06:55,182 WARN L170 areAnnotationChecker]: L614-17 has no Hoare annotation [2020-07-28 19:06:55,182 WARN L170 areAnnotationChecker]: L614-18 has no Hoare annotation [2020-07-28 19:06:55,183 WARN L170 areAnnotationChecker]: L913-6 has no Hoare annotation [2020-07-28 19:06:55,183 WARN L170 areAnnotationChecker]: L516 has no Hoare annotation [2020-07-28 19:06:55,183 WARN L170 areAnnotationChecker]: L633-3 has no Hoare annotation [2020-07-28 19:06:55,183 WARN L170 areAnnotationChecker]: L460-3 has no Hoare annotation [2020-07-28 19:06:55,183 WARN L170 areAnnotationChecker]: L460-3 has no Hoare annotation [2020-07-28 19:06:55,183 WARN L170 areAnnotationChecker]: L779 has no Hoare annotation [2020-07-28 19:06:55,183 WARN L170 areAnnotationChecker]: L779 has no Hoare annotation [2020-07-28 19:06:55,183 WARN L170 areAnnotationChecker]: L460-4 has no Hoare annotation [2020-07-28 19:06:55,183 WARN L170 areAnnotationChecker]: L460-4 has no Hoare annotation [2020-07-28 19:06:55,183 WARN L170 areAnnotationChecker]: L464-5 has no Hoare annotation [2020-07-28 19:06:55,183 WARN L170 areAnnotationChecker]: L614-18 has no Hoare annotation [2020-07-28 19:06:55,183 WARN L170 areAnnotationChecker]: L614-18 has no Hoare annotation [2020-07-28 19:06:55,184 WARN L170 areAnnotationChecker]: L913-6 has no Hoare annotation [2020-07-28 19:06:55,184 WARN L170 areAnnotationChecker]: L913-6 has no Hoare annotation [2020-07-28 19:06:55,184 WARN L170 areAnnotationChecker]: L512-2 has no Hoare annotation [2020-07-28 19:06:55,184 WARN L170 areAnnotationChecker]: L516 has no Hoare annotation [2020-07-28 19:06:55,184 WARN L170 areAnnotationChecker]: L516 has no Hoare annotation [2020-07-28 19:06:55,184 WARN L170 areAnnotationChecker]: L633-3 has no Hoare annotation [2020-07-28 19:06:55,184 WARN L170 areAnnotationChecker]: L633-3 has no Hoare annotation [2020-07-28 19:06:55,184 WARN L170 areAnnotationChecker]: L990-3 has no Hoare annotation [2020-07-28 19:06:55,184 WARN L170 areAnnotationChecker]: L990-3 has no Hoare annotation [2020-07-28 19:06:55,184 WARN L170 areAnnotationChecker]: L783 has no Hoare annotation [2020-07-28 19:06:55,184 WARN L170 areAnnotationChecker]: L990-4 has no Hoare annotation [2020-07-28 19:06:55,184 WARN L170 areAnnotationChecker]: L990-4 has no Hoare annotation [2020-07-28 19:06:55,185 WARN L170 areAnnotationChecker]: L464-5 has no Hoare annotation [2020-07-28 19:06:55,185 WARN L170 areAnnotationChecker]: L464-5 has no Hoare annotation [2020-07-28 19:06:55,185 WARN L170 areAnnotationChecker]: L614-20 has no Hoare annotation [2020-07-28 19:06:55,185 WARN L170 areAnnotationChecker]: L512-2 has no Hoare annotation [2020-07-28 19:06:55,185 WARN L170 areAnnotationChecker]: L512-2 has no Hoare annotation [2020-07-28 19:06:55,185 WARN L170 areAnnotationChecker]: L486 has no Hoare annotation [2020-07-28 19:06:55,185 WARN L170 areAnnotationChecker]: L486 has no Hoare annotation [2020-07-28 19:06:55,185 WARN L170 areAnnotationChecker]: L633-5 has no Hoare annotation [2020-07-28 19:06:55,185 WARN L170 areAnnotationChecker]: L614-9 has no Hoare annotation [2020-07-28 19:06:55,185 WARN L170 areAnnotationChecker]: L783 has no Hoare annotation [2020-07-28 19:06:55,185 WARN L170 areAnnotationChecker]: L783 has no Hoare annotation [2020-07-28 19:06:55,185 WARN L170 areAnnotationChecker]: L614-12 has no Hoare annotation [2020-07-28 19:06:55,186 WARN L170 areAnnotationChecker]: L464-6 has no Hoare annotation [2020-07-28 19:06:55,186 WARN L170 areAnnotationChecker]: L486-5 has no Hoare annotation [2020-07-28 19:06:55,186 WARN L170 areAnnotationChecker]: L486-5 has no Hoare annotation [2020-07-28 19:06:55,186 WARN L170 areAnnotationChecker]: L779-4 has no Hoare annotation [2020-07-28 19:06:55,186 WARN L170 areAnnotationChecker]: L633 has no Hoare annotation [2020-07-28 19:06:55,186 WARN L170 areAnnotationChecker]: L460-1 has no Hoare annotation [2020-07-28 19:06:55,186 WARN L170 areAnnotationChecker]: L460-1 has no Hoare annotation [2020-07-28 19:06:55,186 WARN L170 areAnnotationChecker]: L490-1 has no Hoare annotation [2020-07-28 19:06:55,186 WARN L170 areAnnotationChecker]: L614-9 has no Hoare annotation [2020-07-28 19:06:55,186 WARN L170 areAnnotationChecker]: L614-9 has no Hoare annotation [2020-07-28 19:06:55,187 WARN L170 areAnnotationChecker]: L784 has no Hoare annotation [2020-07-28 19:06:55,187 WARN L170 areAnnotationChecker]: L784 has no Hoare annotation [2020-07-28 19:06:55,187 WARN L170 areAnnotationChecker]: L614-12 has no Hoare annotation [2020-07-28 19:06:55,187 WARN L170 areAnnotationChecker]: L614-12 has no Hoare annotation [2020-07-28 19:06:55,187 WARN L170 areAnnotationChecker]: L464-6 has no Hoare annotation [2020-07-28 19:06:55,187 WARN L170 areAnnotationChecker]: L464-6 has no Hoare annotation [2020-07-28 19:06:55,187 WARN L170 areAnnotationChecker]: L516-2 has no Hoare annotation [2020-07-28 19:06:55,187 WARN L170 areAnnotationChecker]: L633-15 has no Hoare annotation [2020-07-28 19:06:55,187 WARN L170 areAnnotationChecker]: L460-11 has no Hoare annotation [2020-07-28 19:06:55,187 WARN L170 areAnnotationChecker]: L460-11 has no Hoare annotation [2020-07-28 19:06:55,187 WARN L170 areAnnotationChecker]: L779-4 has no Hoare annotation [2020-07-28 19:06:55,187 WARN L170 areAnnotationChecker]: L779-4 has no Hoare annotation [2020-07-28 19:06:55,187 WARN L170 areAnnotationChecker]: L633 has no Hoare annotation [2020-07-28 19:06:55,188 WARN L170 areAnnotationChecker]: L633 has no Hoare annotation [2020-07-28 19:06:55,188 WARN L170 areAnnotationChecker]: L990-1 has no Hoare annotation [2020-07-28 19:06:55,188 WARN L170 areAnnotationChecker]: L990-1 has no Hoare annotation [2020-07-28 19:06:55,188 WARN L170 areAnnotationChecker]: L490-1 has no Hoare annotation [2020-07-28 19:06:55,188 WARN L170 areAnnotationChecker]: L490-1 has no Hoare annotation [2020-07-28 19:06:55,188 WARN L170 areAnnotationChecker]: L614-11 has no Hoare annotation [2020-07-28 19:06:55,188 WARN L170 areAnnotationChecker]: L902 has no Hoare annotation [2020-07-28 19:06:55,188 WARN L170 areAnnotationChecker]: L902 has no Hoare annotation [2020-07-28 19:06:55,188 WARN L170 areAnnotationChecker]: L614-14 has no Hoare annotation [2020-07-28 19:06:55,188 WARN L170 areAnnotationChecker]: L516-2 has no Hoare annotation [2020-07-28 19:06:55,188 WARN L170 areAnnotationChecker]: L516-2 has no Hoare annotation [2020-07-28 19:06:55,189 WARN L170 areAnnotationChecker]: L633-15 has no Hoare annotation [2020-07-28 19:06:55,189 WARN L170 areAnnotationChecker]: L633-15 has no Hoare annotation [2020-07-28 19:06:55,189 WARN L170 areAnnotationChecker]: L990-11 has no Hoare annotation [2020-07-28 19:06:55,189 WARN L170 areAnnotationChecker]: L990-11 has no Hoare annotation [2020-07-28 19:06:55,189 WARN L170 areAnnotationChecker]: L783-4 has no Hoare annotation [2020-07-28 19:06:55,189 WARN L170 areAnnotationChecker]: L633-2 has no Hoare annotation [2020-07-28 19:06:55,189 WARN L170 areAnnotationChecker]: L614-3 has no Hoare annotation [2020-07-28 19:06:55,189 WARN L170 areAnnotationChecker]: L460-2 has no Hoare annotation [2020-07-28 19:06:55,189 WARN L170 areAnnotationChecker]: L460-2 has no Hoare annotation [2020-07-28 19:06:55,189 WARN L170 areAnnotationChecker]: L464-3 has no Hoare annotation [2020-07-28 19:06:55,190 WARN L170 areAnnotationChecker]: L464-4 has no Hoare annotation [2020-07-28 19:06:55,190 WARN L170 areAnnotationChecker]: L486-4 has no Hoare annotation [2020-07-28 19:06:55,191 WARN L170 areAnnotationChecker]: L486-4 has no Hoare annotation [2020-07-28 19:06:55,191 WARN L170 areAnnotationChecker]: L633-17 has no Hoare annotation [2020-07-28 19:06:55,191 WARN L170 areAnnotationChecker]: L614-33 has no Hoare annotation [2020-07-28 19:06:55,191 WARN L170 areAnnotationChecker]: L783-4 has no Hoare annotation [2020-07-28 19:06:55,191 WARN L170 areAnnotationChecker]: L783-4 has no Hoare annotation [2020-07-28 19:06:55,191 WARN L170 areAnnotationChecker]: L490 has no Hoare annotation [2020-07-28 19:06:55,191 WARN L170 areAnnotationChecker]: L614-3 has no Hoare annotation [2020-07-28 19:06:55,191 WARN L170 areAnnotationChecker]: L614-3 has no Hoare annotation [2020-07-28 19:06:55,191 WARN L170 areAnnotationChecker]: L990-2 has no Hoare annotation [2020-07-28 19:06:55,191 WARN L170 areAnnotationChecker]: L990-2 has no Hoare annotation [2020-07-28 19:06:55,191 WARN L170 areAnnotationChecker]: L464-3 has no Hoare annotation [2020-07-28 19:06:55,192 WARN L170 areAnnotationChecker]: L464-3 has no Hoare annotation [2020-07-28 19:06:55,192 WARN L170 areAnnotationChecker]: L464-4 has no Hoare annotation [2020-07-28 19:06:55,192 WARN L170 areAnnotationChecker]: L464-4 has no Hoare annotation [2020-07-28 19:06:55,192 WARN L170 areAnnotationChecker]: L633-12 has no Hoare annotation [2020-07-28 19:06:55,192 WARN L170 areAnnotationChecker]: L460-9 has no Hoare annotation [2020-07-28 19:06:55,192 WARN L170 areAnnotationChecker]: L460-9 has no Hoare annotation [2020-07-28 19:06:55,192 WARN L170 areAnnotationChecker]: L490-5 has no Hoare annotation [2020-07-28 19:06:55,192 WARN L170 areAnnotationChecker]: L614-33 has no Hoare annotation [2020-07-28 19:06:55,192 WARN L170 areAnnotationChecker]: L614-33 has no Hoare annotation [2020-07-28 19:06:55,192 WARN L170 areAnnotationChecker]: L784-4 has no Hoare annotation [2020-07-28 19:06:55,192 WARN L170 areAnnotationChecker]: L784-4 has no Hoare annotation [2020-07-28 19:06:55,192 WARN L170 areAnnotationChecker]: L490 has no Hoare annotation [2020-07-28 19:06:55,193 WARN L170 areAnnotationChecker]: L490 has no Hoare annotation [2020-07-28 19:06:55,193 WARN L170 areAnnotationChecker]: L614-5 has no Hoare annotation [2020-07-28 19:06:55,193 WARN L170 areAnnotationChecker]: L614-6 has no Hoare annotation [2020-07-28 19:06:55,193 WARN L170 areAnnotationChecker]: L633-12 has no Hoare annotation [2020-07-28 19:06:55,193 WARN L170 areAnnotationChecker]: L633-12 has no Hoare annotation [2020-07-28 19:06:55,193 WARN L170 areAnnotationChecker]: L990-9 has no Hoare annotation [2020-07-28 19:06:55,193 WARN L170 areAnnotationChecker]: L990-9 has no Hoare annotation [2020-07-28 19:06:55,193 WARN L170 areAnnotationChecker]: L490-5 has no Hoare annotation [2020-07-28 19:06:55,193 WARN L170 areAnnotationChecker]: L490-5 has no Hoare annotation [2020-07-28 19:06:55,193 WARN L170 areAnnotationChecker]: L614-35 has no Hoare annotation [2020-07-28 19:06:55,193 WARN L170 areAnnotationChecker]: L902-2 has no Hoare annotation [2020-07-28 19:06:55,193 WARN L170 areAnnotationChecker]: L902-2 has no Hoare annotation [2020-07-28 19:06:55,194 WARN L170 areAnnotationChecker]: L460 has no Hoare annotation [2020-07-28 19:06:55,194 WARN L170 areAnnotationChecker]: L460 has no Hoare annotation [2020-07-28 19:06:55,194 WARN L170 areAnnotationChecker]: L464-1 has no Hoare annotation [2020-07-28 19:06:55,194 WARN L170 areAnnotationChecker]: L614-6 has no Hoare annotation [2020-07-28 19:06:55,194 WARN L170 areAnnotationChecker]: L614-6 has no Hoare annotation [2020-07-28 19:06:55,194 WARN L170 areAnnotationChecker]: L633-14 has no Hoare annotation [2020-07-28 19:06:55,194 WARN L170 areAnnotationChecker]: L614-27 has no Hoare annotation [2020-07-28 19:06:55,194 WARN L170 areAnnotationChecker]: L460-10 has no Hoare annotation [2020-07-28 19:06:55,194 WARN L170 areAnnotationChecker]: L460-10 has no Hoare annotation [2020-07-28 19:06:55,194 WARN L170 areAnnotationChecker]: L464-11 has no Hoare annotation [2020-07-28 19:06:55,194 WARN L170 areAnnotationChecker]: L990 has no Hoare annotation [2020-07-28 19:06:55,195 WARN L170 areAnnotationChecker]: L990 has no Hoare annotation [2020-07-28 19:06:55,195 WARN L170 areAnnotationChecker]: L464-1 has no Hoare annotation [2020-07-28 19:06:55,195 WARN L170 areAnnotationChecker]: L464-1 has no Hoare annotation [2020-07-28 19:06:55,195 WARN L170 areAnnotationChecker]: L614-8 has no Hoare annotation [2020-07-28 19:06:55,195 WARN L170 areAnnotationChecker]: L490-4 has no Hoare annotation [2020-07-28 19:06:55,195 WARN L170 areAnnotationChecker]: L614-27 has no Hoare annotation [2020-07-28 19:06:55,195 WARN L170 areAnnotationChecker]: L614-27 has no Hoare annotation [2020-07-28 19:06:55,195 WARN L170 areAnnotationChecker]: L990-10 has no Hoare annotation [2020-07-28 19:06:55,195 WARN L170 areAnnotationChecker]: L990-10 has no Hoare annotation [2020-07-28 19:06:55,195 WARN L170 areAnnotationChecker]: L464-11 has no Hoare annotation [2020-07-28 19:06:55,195 WARN L170 areAnnotationChecker]: L464-11 has no Hoare annotation [2020-07-28 19:06:55,196 WARN L170 areAnnotationChecker]: L614 has no Hoare annotation [2020-07-28 19:06:55,196 WARN L170 areAnnotationChecker]: L464-2 has no Hoare annotation [2020-07-28 19:06:55,196 WARN L170 areAnnotationChecker]: L490-4 has no Hoare annotation [2020-07-28 19:06:55,196 WARN L170 areAnnotationChecker]: L490-4 has no Hoare annotation [2020-07-28 19:06:55,196 WARN L170 areAnnotationChecker]: L614-29 has no Hoare annotation [2020-07-28 19:06:55,196 WARN L170 areAnnotationChecker]: L614-30 has no Hoare annotation [2020-07-28 19:06:55,196 WARN L170 areAnnotationChecker]: L614 has no Hoare annotation [2020-07-28 19:06:55,196 WARN L170 areAnnotationChecker]: L614 has no Hoare annotation [2020-07-28 19:06:55,196 WARN L170 areAnnotationChecker]: L464-2 has no Hoare annotation [2020-07-28 19:06:55,196 WARN L170 areAnnotationChecker]: L464-2 has no Hoare annotation [2020-07-28 19:06:55,196 WARN L170 areAnnotationChecker]: L460-8 has no Hoare annotation [2020-07-28 19:06:55,196 WARN L170 areAnnotationChecker]: L460-8 has no Hoare annotation [2020-07-28 19:06:55,197 WARN L170 areAnnotationChecker]: L464-9 has no Hoare annotation [2020-07-28 19:06:55,197 WARN L170 areAnnotationChecker]: L614-30 has no Hoare annotation [2020-07-28 19:06:55,197 WARN L170 areAnnotationChecker]: L614-30 has no Hoare annotation [2020-07-28 19:06:55,197 WARN L170 areAnnotationChecker]: L614-2 has no Hoare annotation [2020-07-28 19:06:55,197 WARN L170 areAnnotationChecker]: L990-8 has no Hoare annotation [2020-07-28 19:06:55,198 WARN L170 areAnnotationChecker]: L990-8 has no Hoare annotation [2020-07-28 19:06:55,198 WARN L170 areAnnotationChecker]: L464-9 has no Hoare annotation [2020-07-28 19:06:55,198 WARN L170 areAnnotationChecker]: L464-9 has no Hoare annotation [2020-07-28 19:06:55,198 WARN L170 areAnnotationChecker]: L614-32 has no Hoare annotation [2020-07-28 19:06:55,198 WARN L170 areAnnotationChecker]: L464 has no Hoare annotation [2020-07-28 19:06:55,198 WARN L170 areAnnotationChecker]: L614-24 has no Hoare annotation [2020-07-28 19:06:55,198 WARN L170 areAnnotationChecker]: L464-10 has no Hoare annotation [2020-07-28 19:06:55,198 WARN L170 areAnnotationChecker]: L464 has no Hoare annotation [2020-07-28 19:06:55,198 WARN L170 areAnnotationChecker]: L464 has no Hoare annotation [2020-07-28 19:06:55,198 WARN L170 areAnnotationChecker]: L614-24 has no Hoare annotation [2020-07-28 19:06:55,198 WARN L170 areAnnotationChecker]: L614-24 has no Hoare annotation [2020-07-28 19:06:55,198 WARN L170 areAnnotationChecker]: L464-10 has no Hoare annotation [2020-07-28 19:06:55,198 WARN L170 areAnnotationChecker]: L464-10 has no Hoare annotation [2020-07-28 19:06:55,199 WARN L170 areAnnotationChecker]: L614-26 has no Hoare annotation [2020-07-28 19:06:55,199 WARN L170 areAnnotationChecker]: L464-8 has no Hoare annotation [2020-07-28 19:06:55,199 WARN L170 areAnnotationChecker]: L464-8 has no Hoare annotation [2020-07-28 19:06:55,199 WARN L170 areAnnotationChecker]: L464-8 has no Hoare annotation [2020-07-28 19:06:55,199 INFO L163 areAnnotationChecker]: CFG has 26 edges. 26 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. 0 times interpolants missing. [2020-07-28 19:06:55,251 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 28.07 07:06:55 BoogieIcfgContainer [2020-07-28 19:06:55,252 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2020-07-28 19:06:55,253 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2020-07-28 19:06:55,253 INFO L271 PluginConnector]: Initializing Witness Printer... [2020-07-28 19:06:55,254 INFO L275 PluginConnector]: Witness Printer initialized [2020-07-28 19:06:55,254 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.07 07:06:13" (3/4) ... [2020-07-28 19:06:55,258 INFO L137 WitnessPrinter]: Generating witness for correct program [2020-07-28 19:06:55,285 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 38 nodes and edges [2020-07-28 19:06:55,287 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 20 nodes and edges [2020-07-28 19:06:55,289 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 9 nodes and edges [2020-07-28 19:06:55,291 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2020-07-28 19:06:55,292 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2020-07-28 19:06:55,294 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2020-07-28 19:06:55,296 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2020-07-28 19:06:55,329 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((tmp <= 1 && 0 == splverifierCounter) && 0 <= waterLevel) && 1 == \result) && waterLevel <= 1) && 1 == tmp___0) && 1 == systemActive) && 1 == pumpRunning) && \result <= 1) || ((((((((2 <= waterLevel && \result <= 2) && 0 == splverifierCounter) && 1 < tmp) && waterLevel <= 2) && 0 == pumpRunning) && tmp <= 2) && 2 <= \result) && 1 == systemActive)) || ((((((tmp <= 1 && 0 == splverifierCounter) && 0 <= waterLevel) && 0 == pumpRunning) && waterLevel <= 1) && 1 == systemActive) && \result <= 1)) || ((((((((2 <= waterLevel && \result <= 2) && 0 == splverifierCounter) && 1 < tmp) && waterLevel <= 2) && tmp <= 2) && 2 <= \result) && 1 == systemActive) && 1 == pumpRunning)) || (((0 == splverifierCounter && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive) [2020-07-28 19:06:55,329 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((0 == splverifierCounter && waterLevel <= 2) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive) || ((((((tmp <= 1 && 0 == splverifierCounter) && 0 <= waterLevel) && 0 == pumpRunning) && waterLevel <= 1) && 1 == systemActive) && \result <= 1)) || ((((2 <= waterLevel && 0 == splverifierCounter) && waterLevel <= 2) && 0 == pumpRunning) && 1 == systemActive)) || ((((0 == splverifierCounter && 0 <= waterLevel) && waterLevel <= 2) && 1 == systemActive) && 1 == pumpRunning) [2020-07-28 19:06:55,330 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((0 == splverifierCounter && waterLevel <= 2) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive) || ((((((tmp <= 1 && 0 == splverifierCounter) && 0 <= waterLevel) && 0 == pumpRunning) && waterLevel <= 1) && 1 == systemActive) && \result <= 1)) || ((((2 <= waterLevel && 0 == splverifierCounter) && waterLevel <= 2) && 0 == pumpRunning) && 1 == systemActive)) || ((((0 == splverifierCounter && 0 <= waterLevel) && waterLevel <= 2) && 1 == systemActive) && 1 == pumpRunning) [2020-07-28 19:06:55,331 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((0 == splverifierCounter && 0 == \result) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive) || (((((0 == splverifierCounter && 0 <= waterLevel) && waterLevel <= 2) && 1 == \result) && 1 == systemActive) && 1 == pumpRunning)) || (((((((tmp <= 1 && 0 == splverifierCounter) && 0 <= waterLevel) && 0 == \result) && 0 == pumpRunning) && waterLevel <= 1) && 1 == systemActive) && \result <= 1)) || (((((2 <= waterLevel && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && 1 == systemActive) [2020-07-28 19:06:55,331 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((0 == splverifierCounter && 0 <= waterLevel) && waterLevel <= 2) && 1 == \result) && 1 <= switchedOnBeforeTS) && 1 == systemActive) && 1 == pumpRunning) || ((((0 == splverifierCounter && 0 == \result) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive)) || (((((((tmp <= 1 && 0 == splverifierCounter) && 0 <= waterLevel) && 0 == \result) && 0 == pumpRunning) && waterLevel <= 1) && 1 == systemActive) && \result <= 1)) || (((((2 <= waterLevel && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && 1 == systemActive) [2020-07-28 19:06:55,331 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((tmp <= 1 && 0 == splverifierCounter) && 0 <= waterLevel) && 0 == pumpRunning) && waterLevel <= 1) && 1 == systemActive) && \result <= 1) || ((((((0 == splverifierCounter && 0 <= waterLevel) && 1 == \result) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && 1 == systemActive) && 1 == pumpRunning)) || ((((2 <= waterLevel && 0 == splverifierCounter) && waterLevel <= 2) && 0 == pumpRunning) && 1 == systemActive)) || (((0 == splverifierCounter && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive) [2020-07-28 19:06:55,332 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((0 == splverifierCounter && 0 <= waterLevel) && 0 == pumpRunning) && waterLevel <= 1) && 1 == systemActive) || ((((((0 == splverifierCounter && 0 <= waterLevel) && 1 == \result) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && 1 == systemActive) && 1 == pumpRunning)) || ((((2 <= waterLevel && 0 == splverifierCounter) && waterLevel <= 2) && 0 == pumpRunning) && 1 == systemActive)) || ((((2 <= waterLevel && 0 == splverifierCounter) && waterLevel <= 2) && 1 == systemActive) && 1 == pumpRunning) [2020-07-28 19:06:55,333 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((2 <= waterLevel && \result <= 2) && 0 == splverifierCounter) && waterLevel <= 2) && 2 <= \result) && 1 == systemActive) && 1 == pumpRunning) || (((((((0 == splverifierCounter && 0 <= waterLevel) && 1 == \result) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && 1 == systemActive) && 1 == pumpRunning) && \result <= 1)) || (((((0 == splverifierCounter && 0 <= waterLevel) && 0 == pumpRunning) && waterLevel <= 1) && 1 == systemActive) && \result <= 1)) || ((((((2 <= waterLevel && \result <= 2) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == pumpRunning) && 2 <= \result) && 1 == systemActive) [2020-07-28 19:06:55,333 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((0 == splverifierCounter && 0 <= waterLevel) && 1 == \result) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && 1 == systemActive) && 1 == pumpRunning [2020-07-28 19:06:55,334 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((0 == splverifierCounter && 0 <= waterLevel) && 1 == \result) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && 1 == systemActive) && 1 == pumpRunning [2020-07-28 19:06:55,335 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((tmp <= 1 && 0 == splverifierCounter) && 0 <= waterLevel) && 0 == \result) && 0 == pumpRunning) && waterLevel <= 1) && 1 == systemActive) && \result <= 1) || ((((((((tmp <= 1 && 0 == splverifierCounter) && 0 <= waterLevel) && 1 == \result) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && 1 == systemActive) && 1 == pumpRunning) && \result <= 1) [2020-07-28 19:06:55,335 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((1 == \result && 0 == splverifierCounter) && 0 <= waterLevel) && 0 == pumpRunning) && waterLevel <= 1) && 1 == systemActive) || ((((2 <= waterLevel && 0 == splverifierCounter) && waterLevel <= 2) && 0 == pumpRunning) && 1 == systemActive) [2020-07-28 19:06:55,337 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((0 == splverifierCounter && 0 <= waterLevel) && 0 == pumpRunning) && 0 == \result) && waterLevel <= 1) && 0 == tmp___0) && 1 == systemActive) || ((((2 <= waterLevel && 0 == splverifierCounter) && waterLevel <= 2) && 0 == pumpRunning) && 1 == systemActive) [2020-07-28 19:06:55,338 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((0 == splverifierCounter && 0 <= waterLevel) && 1 == \result) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && 1 == systemActive) && 1 == pumpRunning [2020-07-28 19:06:55,339 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((0 == splverifierCounter && 0 <= waterLevel) && 1 == \result) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && 1 == systemActive) && 1 == pumpRunning [2020-07-28 19:06:55,468 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2020-07-28 19:06:55,469 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2020-07-28 19:06:55,472 INFO L168 Benchmark]: Toolchain (without parser) took 44893.49 ms. Allocated memory was 1.0 GB in the beginning and 1.7 GB in the end (delta: 679.0 MB). Free memory was 958.9 MB in the beginning and 1.2 GB in the end (delta: -193.6 MB). Peak memory consumption was 485.3 MB. Max. memory is 11.5 GB. [2020-07-28 19:06:55,472 INFO L168 Benchmark]: CDTParser took 0.36 ms. Allocated memory is still 1.0 GB. Free memory is still 987.1 MB. There was no memory consumed. Max. memory is 11.5 GB. [2020-07-28 19:06:55,473 INFO L168 Benchmark]: CACSL2BoogieTranslator took 810.98 ms. Allocated memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: 114.8 MB). Free memory was 953.5 MB in the beginning and 1.1 GB in the end (delta: -137.6 MB). Peak memory consumption was 21.7 MB. Max. memory is 11.5 GB. [2020-07-28 19:06:55,473 INFO L168 Benchmark]: Boogie Procedure Inliner took 149.90 ms. Allocated memory is still 1.1 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.7 MB). Peak memory consumption was 6.7 MB. Max. memory is 11.5 GB. [2020-07-28 19:06:55,480 INFO L168 Benchmark]: Boogie Preprocessor took 70.15 ms. Allocated memory is still 1.1 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 13.4 MB). Peak memory consumption was 13.4 MB. Max. memory is 11.5 GB. [2020-07-28 19:06:55,481 INFO L168 Benchmark]: RCFGBuilder took 2139.35 ms. Allocated memory is still 1.1 GB. Free memory was 1.1 GB in the beginning and 836.7 MB in the end (delta: 234.4 MB). Peak memory consumption was 234.4 MB. Max. memory is 11.5 GB. [2020-07-28 19:06:55,481 INFO L168 Benchmark]: TraceAbstraction took 41497.68 ms. Allocated memory was 1.1 GB in the beginning and 1.7 GB in the end (delta: 564.1 MB). Free memory was 836.7 MB in the beginning and 1.2 GB in the end (delta: -333.1 MB). Peak memory consumption was 231.0 MB. Max. memory is 11.5 GB. [2020-07-28 19:06:55,481 INFO L168 Benchmark]: Witness Printer took 216.03 ms. Allocated memory is still 1.7 GB. Free memory was 1.2 GB in the beginning and 1.2 GB in the end (delta: 17.3 MB). Peak memory consumption was 17.3 MB. Max. memory is 11.5 GB. [2020-07-28 19:06:55,485 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - AssertionsEnabledResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.36 ms. Allocated memory is still 1.0 GB. Free memory is still 987.1 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 810.98 ms. Allocated memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: 114.8 MB). Free memory was 953.5 MB in the beginning and 1.1 GB in the end (delta: -137.6 MB). Peak memory consumption was 21.7 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 149.90 ms. Allocated memory is still 1.1 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.7 MB). Peak memory consumption was 6.7 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 70.15 ms. Allocated memory is still 1.1 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 13.4 MB). Peak memory consumption was 13.4 MB. Max. memory is 11.5 GB. * RCFGBuilder took 2139.35 ms. Allocated memory is still 1.1 GB. Free memory was 1.1 GB in the beginning and 836.7 MB in the end (delta: 234.4 MB). Peak memory consumption was 234.4 MB. Max. memory is 11.5 GB. * TraceAbstraction took 41497.68 ms. Allocated memory was 1.1 GB in the beginning and 1.7 GB in the end (delta: 564.1 MB). Free memory was 836.7 MB in the beginning and 1.2 GB in the end (delta: -333.1 MB). Peak memory consumption was 231.0 MB. Max. memory is 11.5 GB. * Witness Printer took 216.03 ms. Allocated memory is still 1.7 GB. Free memory was 1.2 GB in the beginning and 1.2 GB in the end (delta: 17.3 MB). Peak memory consumption was 17.3 MB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - PositiveResult [Line: 902]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 902]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 902]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - AllSpecificationsHoldResult: All specifications hold 3 specifications checked. All of them hold - InvariantResult [Line: 986]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 986]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1000]: Loop Invariant Derived loop invariant: (((((0 == splverifierCounter && 0 <= waterLevel) && 1 == \result) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && 1 == systemActive) && 1 == pumpRunning - InvariantResult [Line: 1000]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 945]: Loop Invariant Derived loop invariant: (((((0 == splverifierCounter && 0 <= waterLevel) && 1 == \result) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && 1 == systemActive) && 1 == pumpRunning - InvariantResult [Line: 1000]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 705]: Loop Invariant Derived loop invariant: ((((((0 == splverifierCounter && waterLevel <= 2) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive) || ((((((tmp <= 1 && 0 == splverifierCounter) && 0 <= waterLevel) && 0 == pumpRunning) && waterLevel <= 1) && 1 == systemActive) && \result <= 1)) || ((((2 <= waterLevel && 0 == splverifierCounter) && waterLevel <= 2) && 0 == pumpRunning) && 1 == systemActive)) || ((((0 == splverifierCounter && 0 <= waterLevel) && waterLevel <= 2) && 1 == systemActive) && 1 == pumpRunning) - InvariantResult [Line: 945]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1000]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 624]: Loop Invariant Derived loop invariant: (((((0 == splverifierCounter && 0 <= waterLevel) && 1 == \result) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && 1 == systemActive) && 1 == pumpRunning - InvariantResult [Line: 986]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 428]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 435]: Loop Invariant Derived loop invariant: ((((((0 == splverifierCounter && 0 <= waterLevel) && 0 == pumpRunning) && waterLevel <= 1) && 1 == systemActive) || ((((((0 == splverifierCounter && 0 <= waterLevel) && 1 == \result) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && 1 == systemActive) && 1 == pumpRunning)) || ((((2 <= waterLevel && 0 == splverifierCounter) && waterLevel <= 2) && 0 == pumpRunning) && 1 == systemActive)) || ((((2 <= waterLevel && 0 == splverifierCounter) && waterLevel <= 2) && 1 == systemActive) && 1 == pumpRunning) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (0 == pumpRunning && 1 == waterLevel) && 1 == systemActive - InvariantResult [Line: 986]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 435]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 986]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 435]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 986]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 986]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 986]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 986]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 424]: Loop Invariant Derived loop invariant: ((((((((tmp <= 1 && 0 == splverifierCounter) && 0 <= waterLevel) && 0 == pumpRunning) && waterLevel <= 1) && 1 == systemActive) && \result <= 1) || ((((((0 == splverifierCounter && 0 <= waterLevel) && 1 == \result) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && 1 == systemActive) && 1 == pumpRunning)) || ((((2 <= waterLevel && 0 == splverifierCounter) && waterLevel <= 2) && 0 == pumpRunning) && 1 == systemActive)) || (((0 == splverifierCounter && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive) - InvariantResult [Line: 549]: Loop Invariant Derived loop invariant: (((((0 == splverifierCounter && 0 <= waterLevel) && 1 == \result) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && 1 == systemActive) && 1 == pumpRunning - InvariantResult [Line: 986]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 424]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 549]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 428]: Loop Invariant Derived loop invariant: ((((((((0 == splverifierCounter && 0 <= waterLevel) && waterLevel <= 2) && 1 == \result) && 1 <= switchedOnBeforeTS) && 1 == systemActive) && 1 == pumpRunning) || ((((0 == splverifierCounter && 0 == \result) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive)) || (((((((tmp <= 1 && 0 == splverifierCounter) && 0 <= waterLevel) && 0 == \result) && 0 == pumpRunning) && waterLevel <= 1) && 1 == systemActive) && \result <= 1)) || (((((2 <= waterLevel && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && 1 == systemActive) - InvariantResult [Line: 986]: Loop Invariant Derived loop invariant: (((((1 == \result && 0 == splverifierCounter) && 0 <= waterLevel) && 0 == pumpRunning) && waterLevel <= 1) && 1 == systemActive) || ((((2 <= waterLevel && 0 == splverifierCounter) && waterLevel <= 2) && 0 == pumpRunning) && 1 == systemActive) - InvariantResult [Line: 424]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 549]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((((((tmp <= 1 && 0 == splverifierCounter) && 0 <= waterLevel) && 1 == \result) && waterLevel <= 1) && 1 == tmp___0) && 1 == systemActive) && 1 == pumpRunning) && \result <= 1) || ((((((((2 <= waterLevel && \result <= 2) && 0 == splverifierCounter) && 1 < tmp) && waterLevel <= 2) && 0 == pumpRunning) && tmp <= 2) && 2 <= \result) && 1 == systemActive)) || ((((((tmp <= 1 && 0 == splverifierCounter) && 0 <= waterLevel) && 0 == pumpRunning) && waterLevel <= 1) && 1 == systemActive) && \result <= 1)) || ((((((((2 <= waterLevel && \result <= 2) && 0 == splverifierCounter) && 1 < tmp) && waterLevel <= 2) && tmp <= 2) && 2 <= \result) && 1 == systemActive) && 1 == pumpRunning)) || (((0 == splverifierCounter && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive) - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 428]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 986]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 874]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 856]: Loop Invariant Derived loop invariant: (0 == pumpRunning && 1 == waterLevel) && 1 == systemActive - InvariantResult [Line: 672]: Loop Invariant Derived loop invariant: (0 == pumpRunning && 1 == waterLevel) && 1 == systemActive - InvariantResult [Line: 605]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 605]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 605]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 605]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 753]: Loop Invariant Derived loop invariant: (0 == pumpRunning && 1 == waterLevel) && 1 == systemActive - InvariantResult [Line: 560]: Loop Invariant Derived loop invariant: (((((((tmp <= 1 && 0 == splverifierCounter) && 0 <= waterLevel) && 0 == \result) && 0 == pumpRunning) && waterLevel <= 1) && 1 == systemActive) && \result <= 1) || ((((((((tmp <= 1 && 0 == splverifierCounter) && 0 <= waterLevel) && 1 == \result) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && 1 == systemActive) && 1 == pumpRunning) && \result <= 1) - InvariantResult [Line: 977]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 605]: Loop Invariant Derived loop invariant: ((((((0 == splverifierCounter && 0 <= waterLevel) && 0 == pumpRunning) && 0 == \result) && waterLevel <= 1) && 0 == tmp___0) && 1 == systemActive) || ((((2 <= waterLevel && 0 == splverifierCounter) && waterLevel <= 2) && 0 == pumpRunning) && 1 == systemActive) - InvariantResult [Line: 560]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 605]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 560]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 605]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 560]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 605]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 560]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 605]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 605]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 977]: Loop Invariant Derived loop invariant: ((((((((2 <= waterLevel && \result <= 2) && 0 == splverifierCounter) && waterLevel <= 2) && 2 <= \result) && 1 == systemActive) && 1 == pumpRunning) || (((((((0 == splverifierCounter && 0 <= waterLevel) && 1 == \result) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && 1 == systemActive) && 1 == pumpRunning) && \result <= 1)) || (((((0 == splverifierCounter && 0 <= waterLevel) && 0 == pumpRunning) && waterLevel <= 1) && 1 == systemActive) && \result <= 1)) || ((((((2 <= waterLevel && \result <= 2) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == pumpRunning) && 2 <= \result) && 1 == systemActive) - InvariantResult [Line: 605]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 977]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 560]: Loop Invariant Derived loop invariant: ((((((0 == splverifierCounter && 0 == \result) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive) || (((((0 == splverifierCounter && 0 <= waterLevel) && waterLevel <= 2) && 1 == \result) && 1 == systemActive) && 1 == pumpRunning)) || (((((((tmp <= 1 && 0 == splverifierCounter) && 0 <= waterLevel) && 0 == \result) && 0 == pumpRunning) && waterLevel <= 1) && 1 == systemActive) && \result <= 1)) || (((((2 <= waterLevel && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && 1 == systemActive) - InvariantResult [Line: 715]: Loop Invariant Derived loop invariant: ((((((0 == splverifierCounter && waterLevel <= 2) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive) || ((((((tmp <= 1 && 0 == splverifierCounter) && 0 <= waterLevel) && 0 == pumpRunning) && waterLevel <= 1) && 1 == systemActive) && \result <= 1)) || ((((2 <= waterLevel && 0 == splverifierCounter) && waterLevel <= 2) && 0 == pumpRunning) && 1 == systemActive)) || ((((0 == splverifierCounter && 0 <= waterLevel) && waterLevel <= 2) && 1 == systemActive) && 1 == pumpRunning) - InvariantResult [Line: 605]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 945]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1000]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 624]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 884]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1000]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 624]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 624]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 624]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 694]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 624]: Loop Invariant Derived loop invariant: 0 - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 198 locations, 3 error locations. Started 1 CEGAR loops. VerificationResult: SAFE, OverallTime: 34.9s, OverallIterations: 14, TraceHistogramMax: 5, AutomataDifference: 23.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 6.3s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 1915 SDtfs, 2307 SDslu, 3713 SDs, 0 SdLazy, 653 SolverSat, 119 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 1.1s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 542 GetRequests, 454 SyntacticMatches, 3 SemanticMatches, 85 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 188 ImplicationChecksByTransitivity, 1.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=305occurred in iteration=13, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 4.4s AutomataMinimizationTime, 14 MinimizatonAttempts, 1312 StatesRemovedByMinimization, 9 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 73 LocationsWithAnnotation, 73 PreInvPairs, 228 NumberOfFragments, 970 HoareAnnotationTreeSize, 73 FomulaSimplifications, 1024886 FormulaSimplificationTreeSizeReduction, 1.2s HoareSimplificationTime, 73 FomulaSimplificationsInter, 46866 FormulaSimplificationTreeSizeReductionInter, 4.9s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.9s SatisfiabilityAnalysisTime, 3.4s InterpolantComputationTime, 1228 NumberOfCodeBlocks, 1228 NumberOfCodeBlocksAsserted, 18 NumberOfCheckSat, 1210 ConstructedInterpolants, 0 QuantifiedInterpolants, 325550 SizeOfPredicates, 13 NumberOfNonLiveVariables, 2270 ConjunctsInSsa, 32 ConjunctsInUnsatCore, 18 InterpolantComputations, 10 PerfectInterpolantSequences, 762/1003 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be correct! Received shutdown request...