./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec5_product59.cil.c --full-output -ea --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 8bd4bc60 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx12G -Xms1G -ea -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec5_product59.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 3e1b0443329a7a45dbd5811d3e88a5ff99628068 ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................ Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.25-8bd4bc6 [2020-07-28 19:06:41,730 INFO L177 SettingsManager]: Resetting all preferences to default values... [2020-07-28 19:06:41,732 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2020-07-28 19:06:41,750 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2020-07-28 19:06:41,751 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2020-07-28 19:06:41,753 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2020-07-28 19:06:41,755 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2020-07-28 19:06:41,768 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2020-07-28 19:06:41,770 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2020-07-28 19:06:41,772 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2020-07-28 19:06:41,774 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2020-07-28 19:06:41,776 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2020-07-28 19:06:41,776 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2020-07-28 19:06:41,780 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2020-07-28 19:06:41,781 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2020-07-28 19:06:41,784 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2020-07-28 19:06:41,785 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2020-07-28 19:06:41,786 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2020-07-28 19:06:41,787 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2020-07-28 19:06:41,789 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2020-07-28 19:06:41,790 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2020-07-28 19:06:41,792 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2020-07-28 19:06:41,793 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2020-07-28 19:06:41,793 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2020-07-28 19:06:41,796 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2020-07-28 19:06:41,796 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2020-07-28 19:06:41,796 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2020-07-28 19:06:41,797 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2020-07-28 19:06:41,798 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2020-07-28 19:06:41,798 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2020-07-28 19:06:41,799 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2020-07-28 19:06:41,799 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2020-07-28 19:06:41,800 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2020-07-28 19:06:41,801 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2020-07-28 19:06:41,802 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2020-07-28 19:06:41,802 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2020-07-28 19:06:41,803 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2020-07-28 19:06:41,803 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2020-07-28 19:06:41,803 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2020-07-28 19:06:41,804 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2020-07-28 19:06:41,805 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2020-07-28 19:06:41,806 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2020-07-28 19:06:41,820 INFO L113 SettingsManager]: Loading preferences was successful [2020-07-28 19:06:41,820 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2020-07-28 19:06:41,822 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2020-07-28 19:06:41,822 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2020-07-28 19:06:41,822 INFO L138 SettingsManager]: * Use SBE=true [2020-07-28 19:06:41,822 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2020-07-28 19:06:41,823 INFO L138 SettingsManager]: * sizeof long=4 [2020-07-28 19:06:41,823 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2020-07-28 19:06:41,823 INFO L138 SettingsManager]: * sizeof POINTER=4 [2020-07-28 19:06:41,823 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2020-07-28 19:06:41,823 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2020-07-28 19:06:41,824 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2020-07-28 19:06:41,824 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2020-07-28 19:06:41,824 INFO L138 SettingsManager]: * sizeof long double=12 [2020-07-28 19:06:41,824 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2020-07-28 19:06:41,824 INFO L138 SettingsManager]: * Use constant arrays=true [2020-07-28 19:06:41,825 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2020-07-28 19:06:41,825 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2020-07-28 19:06:41,825 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2020-07-28 19:06:41,825 INFO L138 SettingsManager]: * To the following directory=./dump/ [2020-07-28 19:06:41,826 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2020-07-28 19:06:41,826 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2020-07-28 19:06:41,826 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2020-07-28 19:06:41,826 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2020-07-28 19:06:41,826 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2020-07-28 19:06:41,827 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2020-07-28 19:06:41,827 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2020-07-28 19:06:41,827 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2020-07-28 19:06:41,827 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2020-07-28 19:06:41,828 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 3e1b0443329a7a45dbd5811d3e88a5ff99628068 [2020-07-28 19:06:42,121 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2020-07-28 19:06:42,133 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2020-07-28 19:06:42,136 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2020-07-28 19:06:42,138 INFO L271 PluginConnector]: Initializing CDTParser... [2020-07-28 19:06:42,138 INFO L275 PluginConnector]: CDTParser initialized [2020-07-28 19:06:42,139 INFO L429 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec5_product59.cil.c [2020-07-28 19:06:42,204 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/d3503f99e/8bd996e5306d44388d25e6bd8fa95dcc/FLAG5734fff3d [2020-07-28 19:06:42,639 INFO L306 CDTParser]: Found 1 translation units. [2020-07-28 19:06:42,640 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product59.cil.c [2020-07-28 19:06:42,654 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/d3503f99e/8bd996e5306d44388d25e6bd8fa95dcc/FLAG5734fff3d [2020-07-28 19:06:42,955 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/d3503f99e/8bd996e5306d44388d25e6bd8fa95dcc [2020-07-28 19:06:42,959 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2020-07-28 19:06:42,961 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2020-07-28 19:06:42,962 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2020-07-28 19:06:42,962 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2020-07-28 19:06:42,966 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2020-07-28 19:06:42,967 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.07 07:06:42" (1/1) ... [2020-07-28 19:06:42,970 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@27ade0a6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:06:42, skipping insertion in model container [2020-07-28 19:06:42,970 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.07 07:06:42" (1/1) ... [2020-07-28 19:06:42,978 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2020-07-28 19:06:43,044 INFO L178 MainTranslator]: Built tables and reachable declarations [2020-07-28 19:06:43,374 INFO L206 PostProcessor]: Analyzing one entry point: main [2020-07-28 19:06:43,457 INFO L203 MainTranslator]: Completed pre-run [2020-07-28 19:06:43,608 INFO L206 PostProcessor]: Analyzing one entry point: main [2020-07-28 19:06:43,656 INFO L208 MainTranslator]: Completed translation [2020-07-28 19:06:43,656 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:06:43 WrapperNode [2020-07-28 19:06:43,656 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2020-07-28 19:06:43,657 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2020-07-28 19:06:43,657 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2020-07-28 19:06:43,657 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2020-07-28 19:06:43,666 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:06:43" (1/1) ... [2020-07-28 19:06:43,686 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:06:43" (1/1) ... [2020-07-28 19:06:43,753 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2020-07-28 19:06:43,753 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2020-07-28 19:06:43,753 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2020-07-28 19:06:43,754 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2020-07-28 19:06:43,764 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:06:43" (1/1) ... [2020-07-28 19:06:43,764 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:06:43" (1/1) ... [2020-07-28 19:06:43,770 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:06:43" (1/1) ... [2020-07-28 19:06:43,771 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:06:43" (1/1) ... [2020-07-28 19:06:43,788 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:06:43" (1/1) ... [2020-07-28 19:06:43,813 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:06:43" (1/1) ... [2020-07-28 19:06:43,816 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:06:43" (1/1) ... [2020-07-28 19:06:43,830 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2020-07-28 19:06:43,831 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2020-07-28 19:06:43,831 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2020-07-28 19:06:43,831 INFO L275 PluginConnector]: RCFGBuilder initialized [2020-07-28 19:06:43,832 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:06:43" (1/1) ... No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2020-07-28 19:06:43,925 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2020-07-28 19:06:43,926 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2020-07-28 19:06:43,926 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2020-07-28 19:06:43,927 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2020-07-28 19:06:45,763 INFO L290 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2020-07-28 19:06:45,763 INFO L295 CfgBuilder]: Removed 210 assume(true) statements. [2020-07-28 19:06:45,768 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.07 07:06:45 BoogieIcfgContainer [2020-07-28 19:06:45,768 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2020-07-28 19:06:45,770 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2020-07-28 19:06:45,770 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2020-07-28 19:06:45,773 INFO L275 PluginConnector]: TraceAbstraction initialized [2020-07-28 19:06:45,773 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 28.07 07:06:42" (1/3) ... [2020-07-28 19:06:45,774 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@12c51c95 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.07 07:06:45, skipping insertion in model container [2020-07-28 19:06:45,774 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:06:43" (2/3) ... [2020-07-28 19:06:45,775 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@12c51c95 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.07 07:06:45, skipping insertion in model container [2020-07-28 19:06:45,775 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.07 07:06:45" (3/3) ... [2020-07-28 19:06:45,777 INFO L109 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product59.cil.c [2020-07-28 19:06:45,790 INFO L157 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2020-07-28 19:06:45,798 INFO L169 ceAbstractionStarter]: Appying trace abstraction to program that has 3 error locations. [2020-07-28 19:06:45,812 INFO L251 AbstractCegarLoop]: Starting to check reachability of 3 error locations. [2020-07-28 19:06:45,836 INFO L375 AbstractCegarLoop]: Interprodecural is true [2020-07-28 19:06:45,836 INFO L376 AbstractCegarLoop]: Hoare is true [2020-07-28 19:06:45,837 INFO L377 AbstractCegarLoop]: Compute interpolants for FPandBP [2020-07-28 19:06:45,837 INFO L378 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2020-07-28 19:06:45,837 INFO L379 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2020-07-28 19:06:45,837 INFO L380 AbstractCegarLoop]: Difference is false [2020-07-28 19:06:45,838 INFO L381 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2020-07-28 19:06:45,838 INFO L385 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2020-07-28 19:06:45,857 INFO L276 IsEmpty]: Start isEmpty. Operand 146 states. [2020-07-28 19:06:45,865 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2020-07-28 19:06:45,865 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:06:45,866 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:06:45,867 INFO L427 AbstractCegarLoop]: === Iteration 1 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:06:45,874 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:06:45,874 INFO L82 PathProgramCache]: Analyzing trace with hash 389332384, now seen corresponding path program 1 times [2020-07-28 19:06:45,888 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:06:45,888 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1871471007] [2020-07-28 19:06:45,889 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:06:46,128 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:06:46,223 INFO L280 TraceCheckUtils]: 0: Hoare triple {149#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(13);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string21.base, #t~string21.offset, 1);call write~init~int(110, #t~string21.base, 1 + #t~string21.offset, 1);call write~init~int(0, #t~string21.base, 2 + #t~string21.offset, 1);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string23.base, #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 1 + #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 2 + #t~string23.offset, 1);call write~init~int(0, #t~string23.base, 3 + #t~string23.offset, 1);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string25.base, #t~string25.offset, 1);call write~init~int(80, #t~string25.base, 1 + #t~string25.offset, 1);call write~init~int(117, #t~string25.base, 2 + #t~string25.offset, 1);call write~init~int(109, #t~string25.base, 3 + #t~string25.offset, 1);call write~init~int(112, #t~string25.base, 4 + #t~string25.offset, 1);call write~init~int(58, #t~string25.base, 5 + #t~string25.offset, 1);call write~init~int(0, #t~string25.base, 6 + #t~string25.offset, 1);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string27.base, #t~string27.offset, 1);call write~init~int(110, #t~string27.base, 1 + #t~string27.offset, 1);call write~init~int(0, #t~string27.base, 2 + #t~string27.offset, 1);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string29.base, #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 1 + #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 2 + #t~string29.offset, 1);call write~init~int(0, #t~string29.base, 3 + #t~string29.offset, 1);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string31.base, #t~string31.offset, 1);call write~init~int(32, #t~string31.base, 1 + #t~string31.offset, 1);call write~init~int(0, #t~string31.base, 2 + #t~string31.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string33.base, #t~string33.offset, 1);call write~init~int(0, #t~string33.base, 1 + #t~string33.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(21);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(30);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(9);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(25);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4; {149#true} is VALID [2020-07-28 19:06:46,223 INFO L280 TraceCheckUtils]: 1: Hoare triple {149#true} havoc main_#res;havoc main_#t~ret74, main_~retValue_acc~11, main_~tmp~10;havoc main_~retValue_acc~11;havoc main_~tmp~10; {149#true} is VALID [2020-07-28 19:06:46,224 INFO L280 TraceCheckUtils]: 2: Hoare triple {149#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~13;havoc valid_product_~retValue_acc~13;valid_product_~retValue_acc~13 := 1;valid_product_#res := valid_product_~retValue_acc~13; {149#true} is VALID [2020-07-28 19:06:46,224 INFO L280 TraceCheckUtils]: 3: Hoare triple {149#true} main_#t~ret74 := valid_product_#res;assume -2147483648 <= main_#t~ret74 && main_#t~ret74 <= 2147483647;main_~tmp~10 := main_#t~ret74;havoc main_#t~ret74; {149#true} is VALID [2020-07-28 19:06:46,225 INFO L280 TraceCheckUtils]: 4: Hoare triple {149#true} assume 0 != main_~tmp~10; {149#true} is VALID [2020-07-28 19:06:46,225 INFO L280 TraceCheckUtils]: 5: Hoare triple {149#true} ~switchedOnBeforeTS~0 := 0; {149#true} is VALID [2020-07-28 19:06:46,226 INFO L280 TraceCheckUtils]: 6: Hoare triple {149#true} havoc test_#t~nondet10, test_#t~nondet11, test_#t~nondet12, test_#t~nondet13, test_~splverifierCounter~0, test_~tmp~0, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~0;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {149#true} is VALID [2020-07-28 19:06:46,227 INFO L280 TraceCheckUtils]: 7: Hoare triple {149#true} assume !true; {150#false} is VALID [2020-07-28 19:06:46,227 INFO L280 TraceCheckUtils]: 8: Hoare triple {150#false} havoc cleanup_~i~0, cleanup_~__cil_tmp2~0;havoc cleanup_~i~0;havoc cleanup_~__cil_tmp2~0;havoc __utac_acc__Specification5_spec__2_#t~ret71;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {150#false} is VALID [2020-07-28 19:06:46,228 INFO L280 TraceCheckUtils]: 9: Hoare triple {150#false} __utac_acc__Specification5_spec__2_#t~ret71 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret71 && __utac_acc__Specification5_spec__2_#t~ret71 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret71;havoc __utac_acc__Specification5_spec__2_#t~ret71; {150#false} is VALID [2020-07-28 19:06:46,228 INFO L280 TraceCheckUtils]: 10: Hoare triple {150#false} assume !(0 != ~pumpRunning~0); {150#false} is VALID [2020-07-28 19:06:46,229 INFO L280 TraceCheckUtils]: 11: Hoare triple {150#false} assume !(0 != ~systemActive~0); {150#false} is VALID [2020-07-28 19:06:46,229 INFO L280 TraceCheckUtils]: 12: Hoare triple {150#false} havoc __utac_acc__Specification5_spec__3_#t~ret72, __utac_acc__Specification5_spec__3_#t~ret73, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {150#false} is VALID [2020-07-28 19:06:46,229 INFO L280 TraceCheckUtils]: 13: Hoare triple {150#false} __utac_acc__Specification5_spec__3_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret72 && __utac_acc__Specification5_spec__3_#t~ret72 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret72;havoc __utac_acc__Specification5_spec__3_#t~ret72; {150#false} is VALID [2020-07-28 19:06:46,230 INFO L280 TraceCheckUtils]: 14: Hoare triple {150#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {150#false} is VALID [2020-07-28 19:06:46,230 INFO L280 TraceCheckUtils]: 15: Hoare triple {150#false} __utac_acc__Specification5_spec__3_#t~ret73 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret73 && __utac_acc__Specification5_spec__3_#t~ret73 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret73;havoc __utac_acc__Specification5_spec__3_#t~ret73; {150#false} is VALID [2020-07-28 19:06:46,231 INFO L280 TraceCheckUtils]: 16: Hoare triple {150#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3; {150#false} is VALID [2020-07-28 19:06:46,231 INFO L280 TraceCheckUtils]: 17: Hoare triple {150#false} assume 0 == ~switchedOnBeforeTS~0; {150#false} is VALID [2020-07-28 19:06:46,231 INFO L280 TraceCheckUtils]: 18: Hoare triple {150#false} assume !false; {150#false} is VALID [2020-07-28 19:06:46,235 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:06:46,236 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1871471007] [2020-07-28 19:06:46,237 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:06:46,237 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2020-07-28 19:06:46,238 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1144959593] [2020-07-28 19:06:46,244 INFO L78 Accepts]: Start accepts. Automaton has 2 states. Word has length 19 [2020-07-28 19:06:46,246 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:06:46,249 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states. [2020-07-28 19:06:46,295 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 19 edges. 19 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:06:46,295 INFO L459 AbstractCegarLoop]: Interpolant automaton has 2 states [2020-07-28 19:06:46,295 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:06:46,303 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2020-07-28 19:06:46,304 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2020-07-28 19:06:46,306 INFO L87 Difference]: Start difference. First operand 146 states. Second operand 2 states. [2020-07-28 19:06:46,702 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:46,703 INFO L93 Difference]: Finished difference Result 285 states and 424 transitions. [2020-07-28 19:06:46,703 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2020-07-28 19:06:46,703 INFO L78 Accepts]: Start accepts. Automaton has 2 states. Word has length 19 [2020-07-28 19:06:46,703 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:06:46,705 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2 states. [2020-07-28 19:06:46,726 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 424 transitions. [2020-07-28 19:06:46,727 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2 states. [2020-07-28 19:06:46,737 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 424 transitions. [2020-07-28 19:06:46,738 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states and 424 transitions. [2020-07-28 19:06:47,347 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 424 edges. 424 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:06:47,366 INFO L225 Difference]: With dead ends: 285 [2020-07-28 19:06:47,366 INFO L226 Difference]: Without dead ends: 142 [2020-07-28 19:06:47,370 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2020-07-28 19:06:47,388 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 142 states. [2020-07-28 19:06:47,439 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 142 to 142. [2020-07-28 19:06:47,439 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:06:47,439 INFO L82 GeneralOperation]: Start isEquivalent. First operand 142 states. Second operand 142 states. [2020-07-28 19:06:47,440 INFO L74 IsIncluded]: Start isIncluded. First operand 142 states. Second operand 142 states. [2020-07-28 19:06:47,440 INFO L87 Difference]: Start difference. First operand 142 states. Second operand 142 states. [2020-07-28 19:06:47,450 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:47,451 INFO L93 Difference]: Finished difference Result 142 states and 204 transitions. [2020-07-28 19:06:47,451 INFO L276 IsEmpty]: Start isEmpty. Operand 142 states and 204 transitions. [2020-07-28 19:06:47,452 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:06:47,453 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:06:47,453 INFO L74 IsIncluded]: Start isIncluded. First operand 142 states. Second operand 142 states. [2020-07-28 19:06:47,453 INFO L87 Difference]: Start difference. First operand 142 states. Second operand 142 states. [2020-07-28 19:06:47,461 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:47,462 INFO L93 Difference]: Finished difference Result 142 states and 204 transitions. [2020-07-28 19:06:47,462 INFO L276 IsEmpty]: Start isEmpty. Operand 142 states and 204 transitions. [2020-07-28 19:06:47,463 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:06:47,464 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:06:47,464 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:06:47,464 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:06:47,464 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 142 states. [2020-07-28 19:06:47,472 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 142 states to 142 states and 204 transitions. [2020-07-28 19:06:47,473 INFO L78 Accepts]: Start accepts. Automaton has 142 states and 204 transitions. Word has length 19 [2020-07-28 19:06:47,474 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:06:47,474 INFO L479 AbstractCegarLoop]: Abstraction has 142 states and 204 transitions. [2020-07-28 19:06:47,474 INFO L480 AbstractCegarLoop]: Interpolant automaton has 2 states. [2020-07-28 19:06:47,474 INFO L276 IsEmpty]: Start isEmpty. Operand 142 states and 204 transitions. [2020-07-28 19:06:47,475 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2020-07-28 19:06:47,475 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:06:47,476 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:06:47,476 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2020-07-28 19:06:47,476 INFO L427 AbstractCegarLoop]: === Iteration 2 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:06:47,476 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:06:47,477 INFO L82 PathProgramCache]: Analyzing trace with hash -820290624, now seen corresponding path program 1 times [2020-07-28 19:06:47,477 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:06:47,477 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1932603469] [2020-07-28 19:06:47,477 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:06:47,538 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:06:47,650 INFO L280 TraceCheckUtils]: 0: Hoare triple {1047#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(13);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string21.base, #t~string21.offset, 1);call write~init~int(110, #t~string21.base, 1 + #t~string21.offset, 1);call write~init~int(0, #t~string21.base, 2 + #t~string21.offset, 1);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string23.base, #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 1 + #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 2 + #t~string23.offset, 1);call write~init~int(0, #t~string23.base, 3 + #t~string23.offset, 1);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string25.base, #t~string25.offset, 1);call write~init~int(80, #t~string25.base, 1 + #t~string25.offset, 1);call write~init~int(117, #t~string25.base, 2 + #t~string25.offset, 1);call write~init~int(109, #t~string25.base, 3 + #t~string25.offset, 1);call write~init~int(112, #t~string25.base, 4 + #t~string25.offset, 1);call write~init~int(58, #t~string25.base, 5 + #t~string25.offset, 1);call write~init~int(0, #t~string25.base, 6 + #t~string25.offset, 1);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string27.base, #t~string27.offset, 1);call write~init~int(110, #t~string27.base, 1 + #t~string27.offset, 1);call write~init~int(0, #t~string27.base, 2 + #t~string27.offset, 1);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string29.base, #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 1 + #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 2 + #t~string29.offset, 1);call write~init~int(0, #t~string29.base, 3 + #t~string29.offset, 1);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string31.base, #t~string31.offset, 1);call write~init~int(32, #t~string31.base, 1 + #t~string31.offset, 1);call write~init~int(0, #t~string31.base, 2 + #t~string31.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string33.base, #t~string33.offset, 1);call write~init~int(0, #t~string33.base, 1 + #t~string33.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(21);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(30);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(9);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(25);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4; {1047#true} is VALID [2020-07-28 19:06:47,650 INFO L280 TraceCheckUtils]: 1: Hoare triple {1047#true} havoc main_#res;havoc main_#t~ret74, main_~retValue_acc~11, main_~tmp~10;havoc main_~retValue_acc~11;havoc main_~tmp~10; {1047#true} is VALID [2020-07-28 19:06:47,651 INFO L280 TraceCheckUtils]: 2: Hoare triple {1047#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~13;havoc valid_product_~retValue_acc~13;valid_product_~retValue_acc~13 := 1;valid_product_#res := valid_product_~retValue_acc~13; {1047#true} is VALID [2020-07-28 19:06:47,651 INFO L280 TraceCheckUtils]: 3: Hoare triple {1047#true} main_#t~ret74 := valid_product_#res;assume -2147483648 <= main_#t~ret74 && main_#t~ret74 <= 2147483647;main_~tmp~10 := main_#t~ret74;havoc main_#t~ret74; {1047#true} is VALID [2020-07-28 19:06:47,651 INFO L280 TraceCheckUtils]: 4: Hoare triple {1047#true} assume 0 != main_~tmp~10; {1047#true} is VALID [2020-07-28 19:06:47,652 INFO L280 TraceCheckUtils]: 5: Hoare triple {1047#true} ~switchedOnBeforeTS~0 := 0; {1047#true} is VALID [2020-07-28 19:06:47,654 INFO L280 TraceCheckUtils]: 6: Hoare triple {1047#true} havoc test_#t~nondet10, test_#t~nondet11, test_#t~nondet12, test_#t~nondet13, test_~splverifierCounter~0, test_~tmp~0, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~0;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {1049#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} is VALID [2020-07-28 19:06:47,655 INFO L280 TraceCheckUtils]: 7: Hoare triple {1049#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} assume !false; {1049#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} is VALID [2020-07-28 19:06:47,656 INFO L280 TraceCheckUtils]: 8: Hoare triple {1049#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} assume !(test_~splverifierCounter~0 < 4); {1048#false} is VALID [2020-07-28 19:06:47,657 INFO L280 TraceCheckUtils]: 9: Hoare triple {1048#false} havoc cleanup_~i~0, cleanup_~__cil_tmp2~0;havoc cleanup_~i~0;havoc cleanup_~__cil_tmp2~0;havoc __utac_acc__Specification5_spec__2_#t~ret71;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {1048#false} is VALID [2020-07-28 19:06:47,657 INFO L280 TraceCheckUtils]: 10: Hoare triple {1048#false} __utac_acc__Specification5_spec__2_#t~ret71 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret71 && __utac_acc__Specification5_spec__2_#t~ret71 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret71;havoc __utac_acc__Specification5_spec__2_#t~ret71; {1048#false} is VALID [2020-07-28 19:06:47,657 INFO L280 TraceCheckUtils]: 11: Hoare triple {1048#false} assume !(0 != ~pumpRunning~0); {1048#false} is VALID [2020-07-28 19:06:47,658 INFO L280 TraceCheckUtils]: 12: Hoare triple {1048#false} assume !(0 != ~systemActive~0); {1048#false} is VALID [2020-07-28 19:06:47,658 INFO L280 TraceCheckUtils]: 13: Hoare triple {1048#false} havoc __utac_acc__Specification5_spec__3_#t~ret72, __utac_acc__Specification5_spec__3_#t~ret73, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {1048#false} is VALID [2020-07-28 19:06:47,658 INFO L280 TraceCheckUtils]: 14: Hoare triple {1048#false} __utac_acc__Specification5_spec__3_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret72 && __utac_acc__Specification5_spec__3_#t~ret72 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret72;havoc __utac_acc__Specification5_spec__3_#t~ret72; {1048#false} is VALID [2020-07-28 19:06:47,658 INFO L280 TraceCheckUtils]: 15: Hoare triple {1048#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {1048#false} is VALID [2020-07-28 19:06:47,659 INFO L280 TraceCheckUtils]: 16: Hoare triple {1048#false} __utac_acc__Specification5_spec__3_#t~ret73 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret73 && __utac_acc__Specification5_spec__3_#t~ret73 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret73;havoc __utac_acc__Specification5_spec__3_#t~ret73; {1048#false} is VALID [2020-07-28 19:06:47,659 INFO L280 TraceCheckUtils]: 17: Hoare triple {1048#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3; {1048#false} is VALID [2020-07-28 19:06:47,659 INFO L280 TraceCheckUtils]: 18: Hoare triple {1048#false} assume 0 == ~switchedOnBeforeTS~0; {1048#false} is VALID [2020-07-28 19:06:47,660 INFO L280 TraceCheckUtils]: 19: Hoare triple {1048#false} assume !false; {1048#false} is VALID [2020-07-28 19:06:47,662 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:06:47,662 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1932603469] [2020-07-28 19:06:47,663 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:06:47,663 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2020-07-28 19:06:47,663 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [677006309] [2020-07-28 19:06:47,665 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 20 [2020-07-28 19:06:47,665 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:06:47,665 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 19:06:47,699 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 20 edges. 20 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:06:47,699 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 19:06:47,699 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:06:47,700 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 19:06:47,700 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:06:47,701 INFO L87 Difference]: Start difference. First operand 142 states and 204 transitions. Second operand 3 states. [2020-07-28 19:06:47,960 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:47,960 INFO L93 Difference]: Finished difference Result 142 states and 204 transitions. [2020-07-28 19:06:47,960 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 19:06:47,961 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 20 [2020-07-28 19:06:47,961 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:06:47,961 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:06:47,963 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 204 transitions. [2020-07-28 19:06:47,964 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:06:47,966 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 204 transitions. [2020-07-28 19:06:47,966 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 204 transitions. [2020-07-28 19:06:48,196 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 204 edges. 204 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:06:48,197 INFO L225 Difference]: With dead ends: 142 [2020-07-28 19:06:48,198 INFO L226 Difference]: Without dead ends: 59 [2020-07-28 19:06:48,199 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:06:48,199 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 59 states. [2020-07-28 19:06:48,222 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 59 to 59. [2020-07-28 19:06:48,222 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:06:48,222 INFO L82 GeneralOperation]: Start isEquivalent. First operand 59 states. Second operand 59 states. [2020-07-28 19:06:48,222 INFO L74 IsIncluded]: Start isIncluded. First operand 59 states. Second operand 59 states. [2020-07-28 19:06:48,222 INFO L87 Difference]: Start difference. First operand 59 states. Second operand 59 states. [2020-07-28 19:06:48,224 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:48,225 INFO L93 Difference]: Finished difference Result 59 states and 84 transitions. [2020-07-28 19:06:48,225 INFO L276 IsEmpty]: Start isEmpty. Operand 59 states and 84 transitions. [2020-07-28 19:06:48,226 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:06:48,226 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:06:48,226 INFO L74 IsIncluded]: Start isIncluded. First operand 59 states. Second operand 59 states. [2020-07-28 19:06:48,226 INFO L87 Difference]: Start difference. First operand 59 states. Second operand 59 states. [2020-07-28 19:06:48,228 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:48,229 INFO L93 Difference]: Finished difference Result 59 states and 84 transitions. [2020-07-28 19:06:48,229 INFO L276 IsEmpty]: Start isEmpty. Operand 59 states and 84 transitions. [2020-07-28 19:06:48,230 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:06:48,230 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:06:48,230 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:06:48,230 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:06:48,230 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 59 states. [2020-07-28 19:06:48,232 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 59 states to 59 states and 84 transitions. [2020-07-28 19:06:48,232 INFO L78 Accepts]: Start accepts. Automaton has 59 states and 84 transitions. Word has length 20 [2020-07-28 19:06:48,233 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:06:48,233 INFO L479 AbstractCegarLoop]: Abstraction has 59 states and 84 transitions. [2020-07-28 19:06:48,233 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 19:06:48,233 INFO L276 IsEmpty]: Start isEmpty. Operand 59 states and 84 transitions. [2020-07-28 19:06:48,234 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2020-07-28 19:06:48,234 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:06:48,234 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:06:48,234 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2020-07-28 19:06:48,235 INFO L427 AbstractCegarLoop]: === Iteration 3 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:06:48,235 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:06:48,235 INFO L82 PathProgramCache]: Analyzing trace with hash 161597825, now seen corresponding path program 1 times [2020-07-28 19:06:48,235 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:06:48,235 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [205800450] [2020-07-28 19:06:48,236 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:06:48,268 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:06:48,342 INFO L280 TraceCheckUtils]: 0: Hoare triple {1457#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(13);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string21.base, #t~string21.offset, 1);call write~init~int(110, #t~string21.base, 1 + #t~string21.offset, 1);call write~init~int(0, #t~string21.base, 2 + #t~string21.offset, 1);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string23.base, #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 1 + #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 2 + #t~string23.offset, 1);call write~init~int(0, #t~string23.base, 3 + #t~string23.offset, 1);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string25.base, #t~string25.offset, 1);call write~init~int(80, #t~string25.base, 1 + #t~string25.offset, 1);call write~init~int(117, #t~string25.base, 2 + #t~string25.offset, 1);call write~init~int(109, #t~string25.base, 3 + #t~string25.offset, 1);call write~init~int(112, #t~string25.base, 4 + #t~string25.offset, 1);call write~init~int(58, #t~string25.base, 5 + #t~string25.offset, 1);call write~init~int(0, #t~string25.base, 6 + #t~string25.offset, 1);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string27.base, #t~string27.offset, 1);call write~init~int(110, #t~string27.base, 1 + #t~string27.offset, 1);call write~init~int(0, #t~string27.base, 2 + #t~string27.offset, 1);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string29.base, #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 1 + #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 2 + #t~string29.offset, 1);call write~init~int(0, #t~string29.base, 3 + #t~string29.offset, 1);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string31.base, #t~string31.offset, 1);call write~init~int(32, #t~string31.base, 1 + #t~string31.offset, 1);call write~init~int(0, #t~string31.base, 2 + #t~string31.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string33.base, #t~string33.offset, 1);call write~init~int(0, #t~string33.base, 1 + #t~string33.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(21);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(30);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(9);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(25);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4; {1459#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:06:48,342 INFO L280 TraceCheckUtils]: 1: Hoare triple {1459#(= 1 ~systemActive~0)} havoc main_#res;havoc main_#t~ret74, main_~retValue_acc~11, main_~tmp~10;havoc main_~retValue_acc~11;havoc main_~tmp~10; {1459#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:06:48,343 INFO L280 TraceCheckUtils]: 2: Hoare triple {1459#(= 1 ~systemActive~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~13;havoc valid_product_~retValue_acc~13;valid_product_~retValue_acc~13 := 1;valid_product_#res := valid_product_~retValue_acc~13; {1460#(= |ULTIMATE.start_valid_product_#res| ~systemActive~0)} is VALID [2020-07-28 19:06:48,344 INFO L280 TraceCheckUtils]: 3: Hoare triple {1460#(= |ULTIMATE.start_valid_product_#res| ~systemActive~0)} main_#t~ret74 := valid_product_#res;assume -2147483648 <= main_#t~ret74 && main_#t~ret74 <= 2147483647;main_~tmp~10 := main_#t~ret74;havoc main_#t~ret74; {1461#(= ULTIMATE.start_main_~tmp~10 ~systemActive~0)} is VALID [2020-07-28 19:06:48,345 INFO L280 TraceCheckUtils]: 4: Hoare triple {1461#(= ULTIMATE.start_main_~tmp~10 ~systemActive~0)} assume 0 != main_~tmp~10; {1462#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:06:48,345 INFO L280 TraceCheckUtils]: 5: Hoare triple {1462#(not (= 0 ~systemActive~0))} ~switchedOnBeforeTS~0 := 0; {1462#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:06:48,346 INFO L280 TraceCheckUtils]: 6: Hoare triple {1462#(not (= 0 ~systemActive~0))} havoc test_#t~nondet10, test_#t~nondet11, test_#t~nondet12, test_#t~nondet13, test_~splverifierCounter~0, test_~tmp~0, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~0;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {1462#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:06:48,347 INFO L280 TraceCheckUtils]: 7: Hoare triple {1462#(not (= 0 ~systemActive~0))} assume !false; {1462#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:06:48,348 INFO L280 TraceCheckUtils]: 8: Hoare triple {1462#(not (= 0 ~systemActive~0))} assume test_~splverifierCounter~0 < 4; {1462#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:06:48,348 INFO L280 TraceCheckUtils]: 9: Hoare triple {1462#(not (= 0 ~systemActive~0))} assume -2147483648 <= test_#t~nondet10 && test_#t~nondet10 <= 2147483647;test_~tmp~0 := test_#t~nondet10;havoc test_#t~nondet10; {1462#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:06:48,349 INFO L280 TraceCheckUtils]: 10: Hoare triple {1462#(not (= 0 ~systemActive~0))} assume !(0 != test_~tmp~0); {1462#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:06:48,350 INFO L280 TraceCheckUtils]: 11: Hoare triple {1462#(not (= 0 ~systemActive~0))} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp___0~0 := test_#t~nondet11;havoc test_#t~nondet11; {1462#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:06:48,351 INFO L280 TraceCheckUtils]: 12: Hoare triple {1462#(not (= 0 ~systemActive~0))} assume !(0 != test_~tmp___0~0); {1462#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:06:48,354 INFO L280 TraceCheckUtils]: 13: Hoare triple {1462#(not (= 0 ~systemActive~0))} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___2~0 := test_#t~nondet12;havoc test_#t~nondet12; {1462#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:06:48,354 INFO L280 TraceCheckUtils]: 14: Hoare triple {1462#(not (= 0 ~systemActive~0))} assume 0 != test_~tmp___2~0; {1462#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:06:48,355 INFO L280 TraceCheckUtils]: 15: Hoare triple {1462#(not (= 0 ~systemActive~0))} havoc __utac_acc__Specification5_spec__2_#t~ret71;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {1462#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:06:48,356 INFO L280 TraceCheckUtils]: 16: Hoare triple {1462#(not (= 0 ~systemActive~0))} __utac_acc__Specification5_spec__2_#t~ret71 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret71 && __utac_acc__Specification5_spec__2_#t~ret71 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret71;havoc __utac_acc__Specification5_spec__2_#t~ret71; {1462#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:06:48,356 INFO L280 TraceCheckUtils]: 17: Hoare triple {1462#(not (= 0 ~systemActive~0))} assume !(0 != ~pumpRunning~0); {1462#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:06:48,357 INFO L280 TraceCheckUtils]: 18: Hoare triple {1462#(not (= 0 ~systemActive~0))} assume !(0 != ~systemActive~0); {1458#false} is VALID [2020-07-28 19:06:48,357 INFO L280 TraceCheckUtils]: 19: Hoare triple {1458#false} havoc __utac_acc__Specification5_spec__3_#t~ret72, __utac_acc__Specification5_spec__3_#t~ret73, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {1458#false} is VALID [2020-07-28 19:06:48,357 INFO L280 TraceCheckUtils]: 20: Hoare triple {1458#false} __utac_acc__Specification5_spec__3_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret72 && __utac_acc__Specification5_spec__3_#t~ret72 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret72;havoc __utac_acc__Specification5_spec__3_#t~ret72; {1458#false} is VALID [2020-07-28 19:06:48,358 INFO L280 TraceCheckUtils]: 21: Hoare triple {1458#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {1458#false} is VALID [2020-07-28 19:06:48,358 INFO L280 TraceCheckUtils]: 22: Hoare triple {1458#false} __utac_acc__Specification5_spec__3_#t~ret73 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret73 && __utac_acc__Specification5_spec__3_#t~ret73 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret73;havoc __utac_acc__Specification5_spec__3_#t~ret73; {1458#false} is VALID [2020-07-28 19:06:48,358 INFO L280 TraceCheckUtils]: 23: Hoare triple {1458#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3; {1458#false} is VALID [2020-07-28 19:06:48,358 INFO L280 TraceCheckUtils]: 24: Hoare triple {1458#false} assume 0 == ~switchedOnBeforeTS~0; {1458#false} is VALID [2020-07-28 19:06:48,359 INFO L280 TraceCheckUtils]: 25: Hoare triple {1458#false} assume !false; {1458#false} is VALID [2020-07-28 19:06:48,360 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:06:48,361 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [205800450] [2020-07-28 19:06:48,361 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:06:48,361 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:06:48,361 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [858537651] [2020-07-28 19:06:48,362 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 26 [2020-07-28 19:06:48,362 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:06:48,362 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states. [2020-07-28 19:06:48,416 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 26 edges. 26 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:06:48,417 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2020-07-28 19:06:48,417 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:06:48,417 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2020-07-28 19:06:48,417 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2020-07-28 19:06:48,418 INFO L87 Difference]: Start difference. First operand 59 states and 84 transitions. Second operand 6 states. [2020-07-28 19:06:49,164 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:49,164 INFO L93 Difference]: Finished difference Result 189 states and 276 transitions. [2020-07-28 19:06:49,164 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2020-07-28 19:06:49,165 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 26 [2020-07-28 19:06:49,165 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:06:49,165 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 19:06:49,168 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 276 transitions. [2020-07-28 19:06:49,168 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 19:06:49,172 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 276 transitions. [2020-07-28 19:06:49,172 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states and 276 transitions. [2020-07-28 19:06:49,504 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 276 edges. 276 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:06:49,508 INFO L225 Difference]: With dead ends: 189 [2020-07-28 19:06:49,508 INFO L226 Difference]: Without dead ends: 137 [2020-07-28 19:06:49,509 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2020-07-28 19:06:49,510 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 137 states. [2020-07-28 19:06:49,607 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 137 to 81. [2020-07-28 19:06:49,608 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:06:49,608 INFO L82 GeneralOperation]: Start isEquivalent. First operand 137 states. Second operand 81 states. [2020-07-28 19:06:49,608 INFO L74 IsIncluded]: Start isIncluded. First operand 137 states. Second operand 81 states. [2020-07-28 19:06:49,608 INFO L87 Difference]: Start difference. First operand 137 states. Second operand 81 states. [2020-07-28 19:06:49,616 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:49,616 INFO L93 Difference]: Finished difference Result 137 states and 197 transitions. [2020-07-28 19:06:49,617 INFO L276 IsEmpty]: Start isEmpty. Operand 137 states and 197 transitions. [2020-07-28 19:06:49,620 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:06:49,621 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:06:49,621 INFO L74 IsIncluded]: Start isIncluded. First operand 81 states. Second operand 137 states. [2020-07-28 19:06:49,621 INFO L87 Difference]: Start difference. First operand 81 states. Second operand 137 states. [2020-07-28 19:06:49,627 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:49,627 INFO L93 Difference]: Finished difference Result 137 states and 197 transitions. [2020-07-28 19:06:49,627 INFO L276 IsEmpty]: Start isEmpty. Operand 137 states and 197 transitions. [2020-07-28 19:06:49,628 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:06:49,628 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:06:49,629 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:06:49,629 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:06:49,629 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 81 states. [2020-07-28 19:06:49,632 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 81 states to 81 states and 117 transitions. [2020-07-28 19:06:49,632 INFO L78 Accepts]: Start accepts. Automaton has 81 states and 117 transitions. Word has length 26 [2020-07-28 19:06:49,632 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:06:49,633 INFO L479 AbstractCegarLoop]: Abstraction has 81 states and 117 transitions. [2020-07-28 19:06:49,633 INFO L480 AbstractCegarLoop]: Interpolant automaton has 6 states. [2020-07-28 19:06:49,633 INFO L276 IsEmpty]: Start isEmpty. Operand 81 states and 117 transitions. [2020-07-28 19:06:49,634 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2020-07-28 19:06:49,634 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:06:49,634 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:06:49,635 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2020-07-28 19:06:49,635 INFO L427 AbstractCegarLoop]: === Iteration 4 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:06:49,635 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:06:49,636 INFO L82 PathProgramCache]: Analyzing trace with hash 1792264266, now seen corresponding path program 1 times [2020-07-28 19:06:49,636 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:06:49,636 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [807200350] [2020-07-28 19:06:49,637 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:06:49,667 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:06:49,712 INFO L280 TraceCheckUtils]: 0: Hoare triple {2126#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(13);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string21.base, #t~string21.offset, 1);call write~init~int(110, #t~string21.base, 1 + #t~string21.offset, 1);call write~init~int(0, #t~string21.base, 2 + #t~string21.offset, 1);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string23.base, #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 1 + #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 2 + #t~string23.offset, 1);call write~init~int(0, #t~string23.base, 3 + #t~string23.offset, 1);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string25.base, #t~string25.offset, 1);call write~init~int(80, #t~string25.base, 1 + #t~string25.offset, 1);call write~init~int(117, #t~string25.base, 2 + #t~string25.offset, 1);call write~init~int(109, #t~string25.base, 3 + #t~string25.offset, 1);call write~init~int(112, #t~string25.base, 4 + #t~string25.offset, 1);call write~init~int(58, #t~string25.base, 5 + #t~string25.offset, 1);call write~init~int(0, #t~string25.base, 6 + #t~string25.offset, 1);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string27.base, #t~string27.offset, 1);call write~init~int(110, #t~string27.base, 1 + #t~string27.offset, 1);call write~init~int(0, #t~string27.base, 2 + #t~string27.offset, 1);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string29.base, #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 1 + #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 2 + #t~string29.offset, 1);call write~init~int(0, #t~string29.base, 3 + #t~string29.offset, 1);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string31.base, #t~string31.offset, 1);call write~init~int(32, #t~string31.base, 1 + #t~string31.offset, 1);call write~init~int(0, #t~string31.base, 2 + #t~string31.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string33.base, #t~string33.offset, 1);call write~init~int(0, #t~string33.base, 1 + #t~string33.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(21);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(30);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(9);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(25);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4; {2128#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:49,713 INFO L280 TraceCheckUtils]: 1: Hoare triple {2128#(= 0 ~pumpRunning~0)} havoc main_#res;havoc main_#t~ret74, main_~retValue_acc~11, main_~tmp~10;havoc main_~retValue_acc~11;havoc main_~tmp~10; {2128#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:49,714 INFO L280 TraceCheckUtils]: 2: Hoare triple {2128#(= 0 ~pumpRunning~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~13;havoc valid_product_~retValue_acc~13;valid_product_~retValue_acc~13 := 1;valid_product_#res := valid_product_~retValue_acc~13; {2128#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:49,714 INFO L280 TraceCheckUtils]: 3: Hoare triple {2128#(= 0 ~pumpRunning~0)} main_#t~ret74 := valid_product_#res;assume -2147483648 <= main_#t~ret74 && main_#t~ret74 <= 2147483647;main_~tmp~10 := main_#t~ret74;havoc main_#t~ret74; {2128#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:49,715 INFO L280 TraceCheckUtils]: 4: Hoare triple {2128#(= 0 ~pumpRunning~0)} assume 0 != main_~tmp~10; {2128#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:49,716 INFO L280 TraceCheckUtils]: 5: Hoare triple {2128#(= 0 ~pumpRunning~0)} ~switchedOnBeforeTS~0 := 0; {2128#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:49,717 INFO L280 TraceCheckUtils]: 6: Hoare triple {2128#(= 0 ~pumpRunning~0)} havoc test_#t~nondet10, test_#t~nondet11, test_#t~nondet12, test_#t~nondet13, test_~splverifierCounter~0, test_~tmp~0, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~0;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {2128#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:49,717 INFO L280 TraceCheckUtils]: 7: Hoare triple {2128#(= 0 ~pumpRunning~0)} assume !false; {2128#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:49,718 INFO L280 TraceCheckUtils]: 8: Hoare triple {2128#(= 0 ~pumpRunning~0)} assume test_~splverifierCounter~0 < 4; {2128#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:49,719 INFO L280 TraceCheckUtils]: 9: Hoare triple {2128#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet10 && test_#t~nondet10 <= 2147483647;test_~tmp~0 := test_#t~nondet10;havoc test_#t~nondet10; {2128#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:49,720 INFO L280 TraceCheckUtils]: 10: Hoare triple {2128#(= 0 ~pumpRunning~0)} assume !(0 != test_~tmp~0); {2128#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:49,720 INFO L280 TraceCheckUtils]: 11: Hoare triple {2128#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp___0~0 := test_#t~nondet11;havoc test_#t~nondet11; {2128#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:49,721 INFO L280 TraceCheckUtils]: 12: Hoare triple {2128#(= 0 ~pumpRunning~0)} assume !(0 != test_~tmp___0~0); {2128#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:49,722 INFO L280 TraceCheckUtils]: 13: Hoare triple {2128#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___2~0 := test_#t~nondet12;havoc test_#t~nondet12; {2128#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:49,722 INFO L280 TraceCheckUtils]: 14: Hoare triple {2128#(= 0 ~pumpRunning~0)} assume 0 != test_~tmp___2~0; {2128#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:49,723 INFO L280 TraceCheckUtils]: 15: Hoare triple {2128#(= 0 ~pumpRunning~0)} havoc __utac_acc__Specification5_spec__2_#t~ret71;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {2128#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:49,724 INFO L280 TraceCheckUtils]: 16: Hoare triple {2128#(= 0 ~pumpRunning~0)} __utac_acc__Specification5_spec__2_#t~ret71 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret71 && __utac_acc__Specification5_spec__2_#t~ret71 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret71;havoc __utac_acc__Specification5_spec__2_#t~ret71; {2128#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:49,725 INFO L280 TraceCheckUtils]: 17: Hoare triple {2128#(= 0 ~pumpRunning~0)} assume !(0 != ~pumpRunning~0); {2128#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:49,725 INFO L280 TraceCheckUtils]: 18: Hoare triple {2128#(= 0 ~pumpRunning~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {2128#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:49,726 INFO L280 TraceCheckUtils]: 19: Hoare triple {2128#(= 0 ~pumpRunning~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {2128#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:49,727 INFO L280 TraceCheckUtils]: 20: Hoare triple {2128#(= 0 ~pumpRunning~0)} assume !(0 == ~pumpRunning~0); {2127#false} is VALID [2020-07-28 19:06:49,727 INFO L280 TraceCheckUtils]: 21: Hoare triple {2127#false} havoc __utac_acc__Specification5_spec__3_#t~ret72, __utac_acc__Specification5_spec__3_#t~ret73, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {2127#false} is VALID [2020-07-28 19:06:49,727 INFO L280 TraceCheckUtils]: 22: Hoare triple {2127#false} __utac_acc__Specification5_spec__3_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret72 && __utac_acc__Specification5_spec__3_#t~ret72 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret72;havoc __utac_acc__Specification5_spec__3_#t~ret72; {2127#false} is VALID [2020-07-28 19:06:49,728 INFO L280 TraceCheckUtils]: 23: Hoare triple {2127#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {2127#false} is VALID [2020-07-28 19:06:49,728 INFO L280 TraceCheckUtils]: 24: Hoare triple {2127#false} __utac_acc__Specification5_spec__3_#t~ret73 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret73 && __utac_acc__Specification5_spec__3_#t~ret73 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret73;havoc __utac_acc__Specification5_spec__3_#t~ret73; {2127#false} is VALID [2020-07-28 19:06:49,728 INFO L280 TraceCheckUtils]: 25: Hoare triple {2127#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3; {2127#false} is VALID [2020-07-28 19:06:49,729 INFO L280 TraceCheckUtils]: 26: Hoare triple {2127#false} assume 0 == ~switchedOnBeforeTS~0; {2127#false} is VALID [2020-07-28 19:06:49,729 INFO L280 TraceCheckUtils]: 27: Hoare triple {2127#false} assume !false; {2127#false} is VALID [2020-07-28 19:06:49,731 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:06:49,731 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [807200350] [2020-07-28 19:06:49,732 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:06:49,732 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2020-07-28 19:06:49,732 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1253483681] [2020-07-28 19:06:49,732 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 28 [2020-07-28 19:06:49,733 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:06:49,733 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 19:06:49,771 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 28 edges. 28 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:06:49,771 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 19:06:49,771 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:06:49,772 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 19:06:49,772 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:06:49,772 INFO L87 Difference]: Start difference. First operand 81 states and 117 transitions. Second operand 3 states. [2020-07-28 19:06:50,092 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:50,092 INFO L93 Difference]: Finished difference Result 179 states and 261 transitions. [2020-07-28 19:06:50,094 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 19:06:50,094 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 28 [2020-07-28 19:06:50,094 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:06:50,094 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:06:50,096 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 197 transitions. [2020-07-28 19:06:50,097 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:06:50,099 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 197 transitions. [2020-07-28 19:06:50,100 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 197 transitions. [2020-07-28 19:06:50,307 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 197 edges. 197 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:06:50,309 INFO L225 Difference]: With dead ends: 179 [2020-07-28 19:06:50,309 INFO L226 Difference]: Without dead ends: 105 [2020-07-28 19:06:50,310 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:06:50,311 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 105 states. [2020-07-28 19:06:50,454 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 105 to 103. [2020-07-28 19:06:50,454 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:06:50,454 INFO L82 GeneralOperation]: Start isEquivalent. First operand 105 states. Second operand 103 states. [2020-07-28 19:06:50,454 INFO L74 IsIncluded]: Start isIncluded. First operand 105 states. Second operand 103 states. [2020-07-28 19:06:50,455 INFO L87 Difference]: Start difference. First operand 105 states. Second operand 103 states. [2020-07-28 19:06:50,459 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:50,459 INFO L93 Difference]: Finished difference Result 105 states and 146 transitions. [2020-07-28 19:06:50,459 INFO L276 IsEmpty]: Start isEmpty. Operand 105 states and 146 transitions. [2020-07-28 19:06:50,459 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:06:50,459 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:06:50,460 INFO L74 IsIncluded]: Start isIncluded. First operand 103 states. Second operand 105 states. [2020-07-28 19:06:50,460 INFO L87 Difference]: Start difference. First operand 103 states. Second operand 105 states. [2020-07-28 19:06:50,463 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:50,463 INFO L93 Difference]: Finished difference Result 105 states and 146 transitions. [2020-07-28 19:06:50,463 INFO L276 IsEmpty]: Start isEmpty. Operand 105 states and 146 transitions. [2020-07-28 19:06:50,464 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:06:50,464 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:06:50,464 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:06:50,464 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:06:50,464 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 103 states. [2020-07-28 19:06:50,467 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 103 states to 103 states and 145 transitions. [2020-07-28 19:06:50,468 INFO L78 Accepts]: Start accepts. Automaton has 103 states and 145 transitions. Word has length 28 [2020-07-28 19:06:50,468 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:06:50,468 INFO L479 AbstractCegarLoop]: Abstraction has 103 states and 145 transitions. [2020-07-28 19:06:50,468 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 19:06:50,468 INFO L276 IsEmpty]: Start isEmpty. Operand 103 states and 145 transitions. [2020-07-28 19:06:50,469 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2020-07-28 19:06:50,469 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:06:50,469 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:06:50,469 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2020-07-28 19:06:50,470 INFO L427 AbstractCegarLoop]: === Iteration 5 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:06:50,470 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:06:50,470 INFO L82 PathProgramCache]: Analyzing trace with hash -106881590, now seen corresponding path program 1 times [2020-07-28 19:06:50,470 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:06:50,471 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2103599272] [2020-07-28 19:06:50,471 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:06:50,496 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:06:50,577 INFO L280 TraceCheckUtils]: 0: Hoare triple {2744#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(13);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string21.base, #t~string21.offset, 1);call write~init~int(110, #t~string21.base, 1 + #t~string21.offset, 1);call write~init~int(0, #t~string21.base, 2 + #t~string21.offset, 1);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string23.base, #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 1 + #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 2 + #t~string23.offset, 1);call write~init~int(0, #t~string23.base, 3 + #t~string23.offset, 1);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string25.base, #t~string25.offset, 1);call write~init~int(80, #t~string25.base, 1 + #t~string25.offset, 1);call write~init~int(117, #t~string25.base, 2 + #t~string25.offset, 1);call write~init~int(109, #t~string25.base, 3 + #t~string25.offset, 1);call write~init~int(112, #t~string25.base, 4 + #t~string25.offset, 1);call write~init~int(58, #t~string25.base, 5 + #t~string25.offset, 1);call write~init~int(0, #t~string25.base, 6 + #t~string25.offset, 1);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string27.base, #t~string27.offset, 1);call write~init~int(110, #t~string27.base, 1 + #t~string27.offset, 1);call write~init~int(0, #t~string27.base, 2 + #t~string27.offset, 1);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string29.base, #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 1 + #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 2 + #t~string29.offset, 1);call write~init~int(0, #t~string29.base, 3 + #t~string29.offset, 1);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string31.base, #t~string31.offset, 1);call write~init~int(32, #t~string31.base, 1 + #t~string31.offset, 1);call write~init~int(0, #t~string31.base, 2 + #t~string31.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string33.base, #t~string33.offset, 1);call write~init~int(0, #t~string33.base, 1 + #t~string33.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(21);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(30);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(9);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(25);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4; {2746#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:50,578 INFO L280 TraceCheckUtils]: 1: Hoare triple {2746#(= 0 ~pumpRunning~0)} havoc main_#res;havoc main_#t~ret74, main_~retValue_acc~11, main_~tmp~10;havoc main_~retValue_acc~11;havoc main_~tmp~10; {2746#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:50,578 INFO L280 TraceCheckUtils]: 2: Hoare triple {2746#(= 0 ~pumpRunning~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~13;havoc valid_product_~retValue_acc~13;valid_product_~retValue_acc~13 := 1;valid_product_#res := valid_product_~retValue_acc~13; {2746#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:50,579 INFO L280 TraceCheckUtils]: 3: Hoare triple {2746#(= 0 ~pumpRunning~0)} main_#t~ret74 := valid_product_#res;assume -2147483648 <= main_#t~ret74 && main_#t~ret74 <= 2147483647;main_~tmp~10 := main_#t~ret74;havoc main_#t~ret74; {2746#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:50,579 INFO L280 TraceCheckUtils]: 4: Hoare triple {2746#(= 0 ~pumpRunning~0)} assume 0 != main_~tmp~10; {2746#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:50,580 INFO L280 TraceCheckUtils]: 5: Hoare triple {2746#(= 0 ~pumpRunning~0)} ~switchedOnBeforeTS~0 := 0; {2746#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:50,581 INFO L280 TraceCheckUtils]: 6: Hoare triple {2746#(= 0 ~pumpRunning~0)} havoc test_#t~nondet10, test_#t~nondet11, test_#t~nondet12, test_#t~nondet13, test_~splverifierCounter~0, test_~tmp~0, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~0;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {2746#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:50,582 INFO L280 TraceCheckUtils]: 7: Hoare triple {2746#(= 0 ~pumpRunning~0)} assume !false; {2746#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:50,582 INFO L280 TraceCheckUtils]: 8: Hoare triple {2746#(= 0 ~pumpRunning~0)} assume test_~splverifierCounter~0 < 4; {2746#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:50,583 INFO L280 TraceCheckUtils]: 9: Hoare triple {2746#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet10 && test_#t~nondet10 <= 2147483647;test_~tmp~0 := test_#t~nondet10;havoc test_#t~nondet10; {2746#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:50,584 INFO L280 TraceCheckUtils]: 10: Hoare triple {2746#(= 0 ~pumpRunning~0)} assume !(0 != test_~tmp~0); {2746#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:50,584 INFO L280 TraceCheckUtils]: 11: Hoare triple {2746#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp___0~0 := test_#t~nondet11;havoc test_#t~nondet11; {2746#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:50,585 INFO L280 TraceCheckUtils]: 12: Hoare triple {2746#(= 0 ~pumpRunning~0)} assume !(0 != test_~tmp___0~0); {2746#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:50,585 INFO L280 TraceCheckUtils]: 13: Hoare triple {2746#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___2~0 := test_#t~nondet12;havoc test_#t~nondet12; {2746#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:50,591 INFO L280 TraceCheckUtils]: 14: Hoare triple {2746#(= 0 ~pumpRunning~0)} assume !(0 != test_~tmp___2~0);assume -2147483648 <= test_#t~nondet13 && test_#t~nondet13 <= 2147483647;test_~tmp___1~0 := test_#t~nondet13;havoc test_#t~nondet13; {2746#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:50,592 INFO L280 TraceCheckUtils]: 15: Hoare triple {2746#(= 0 ~pumpRunning~0)} assume 0 != test_~tmp___1~0; {2746#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:50,592 INFO L280 TraceCheckUtils]: 16: Hoare triple {2746#(= 0 ~pumpRunning~0)} assume !(0 != ~pumpRunning~0); {2746#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:50,593 INFO L280 TraceCheckUtils]: 17: Hoare triple {2746#(= 0 ~pumpRunning~0)} ~systemActive~0 := 0; {2746#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:50,594 INFO L280 TraceCheckUtils]: 18: Hoare triple {2746#(= 0 ~pumpRunning~0)} havoc __utac_acc__Specification5_spec__2_#t~ret71;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {2746#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:50,594 INFO L280 TraceCheckUtils]: 19: Hoare triple {2746#(= 0 ~pumpRunning~0)} __utac_acc__Specification5_spec__2_#t~ret71 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret71 && __utac_acc__Specification5_spec__2_#t~ret71 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret71;havoc __utac_acc__Specification5_spec__2_#t~ret71; {2746#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:50,595 INFO L280 TraceCheckUtils]: 20: Hoare triple {2746#(= 0 ~pumpRunning~0)} assume !(0 != ~pumpRunning~0); {2746#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:50,596 INFO L280 TraceCheckUtils]: 21: Hoare triple {2746#(= 0 ~pumpRunning~0)} assume !(0 != ~systemActive~0); {2746#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:50,597 INFO L280 TraceCheckUtils]: 22: Hoare triple {2746#(= 0 ~pumpRunning~0)} havoc __utac_acc__Specification5_spec__3_#t~ret72, __utac_acc__Specification5_spec__3_#t~ret73, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {2746#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:50,597 INFO L280 TraceCheckUtils]: 23: Hoare triple {2746#(= 0 ~pumpRunning~0)} __utac_acc__Specification5_spec__3_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret72 && __utac_acc__Specification5_spec__3_#t~ret72 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret72;havoc __utac_acc__Specification5_spec__3_#t~ret72; {2746#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:06:50,598 INFO L280 TraceCheckUtils]: 24: Hoare triple {2746#(= 0 ~pumpRunning~0)} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {2747#(= 0 |ULTIMATE.start_isPumpRunning_#res|)} is VALID [2020-07-28 19:06:50,599 INFO L280 TraceCheckUtils]: 25: Hoare triple {2747#(= 0 |ULTIMATE.start_isPumpRunning_#res|)} __utac_acc__Specification5_spec__3_#t~ret73 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret73 && __utac_acc__Specification5_spec__3_#t~ret73 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret73;havoc __utac_acc__Specification5_spec__3_#t~ret73; {2748#(= 0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp___0~3)} is VALID [2020-07-28 19:06:50,599 INFO L280 TraceCheckUtils]: 26: Hoare triple {2748#(= 0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp___0~3)} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3; {2745#false} is VALID [2020-07-28 19:06:50,599 INFO L280 TraceCheckUtils]: 27: Hoare triple {2745#false} assume 0 == ~switchedOnBeforeTS~0; {2745#false} is VALID [2020-07-28 19:06:50,600 INFO L280 TraceCheckUtils]: 28: Hoare triple {2745#false} assume !false; {2745#false} is VALID [2020-07-28 19:06:50,605 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:06:50,608 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2103599272] [2020-07-28 19:06:50,609 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:06:50,609 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2020-07-28 19:06:50,609 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [707662459] [2020-07-28 19:06:50,610 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 29 [2020-07-28 19:06:50,610 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:06:50,610 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:06:50,673 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 29 edges. 29 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:06:50,674 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:06:50,674 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:06:50,674 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:06:50,674 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:06:50,674 INFO L87 Difference]: Start difference. First operand 103 states and 145 transitions. Second operand 5 states. [2020-07-28 19:06:51,734 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:51,734 INFO L93 Difference]: Finished difference Result 338 states and 477 transitions. [2020-07-28 19:06:51,734 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2020-07-28 19:06:51,734 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 29 [2020-07-28 19:06:51,735 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:06:51,735 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:06:51,739 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 364 transitions. [2020-07-28 19:06:51,739 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:06:51,743 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 364 transitions. [2020-07-28 19:06:51,743 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 9 states and 364 transitions. [2020-07-28 19:06:52,127 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 364 edges. 364 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:06:52,134 INFO L225 Difference]: With dead ends: 338 [2020-07-28 19:06:52,134 INFO L226 Difference]: Without dead ends: 242 [2020-07-28 19:06:52,135 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2020-07-28 19:06:52,136 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 242 states. [2020-07-28 19:06:52,290 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 242 to 101. [2020-07-28 19:06:52,291 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:06:52,291 INFO L82 GeneralOperation]: Start isEquivalent. First operand 242 states. Second operand 101 states. [2020-07-28 19:06:52,291 INFO L74 IsIncluded]: Start isIncluded. First operand 242 states. Second operand 101 states. [2020-07-28 19:06:52,291 INFO L87 Difference]: Start difference. First operand 242 states. Second operand 101 states. [2020-07-28 19:06:52,300 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:52,300 INFO L93 Difference]: Finished difference Result 242 states and 337 transitions. [2020-07-28 19:06:52,301 INFO L276 IsEmpty]: Start isEmpty. Operand 242 states and 337 transitions. [2020-07-28 19:06:52,301 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:06:52,302 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:06:52,302 INFO L74 IsIncluded]: Start isIncluded. First operand 101 states. Second operand 242 states. [2020-07-28 19:06:52,302 INFO L87 Difference]: Start difference. First operand 101 states. Second operand 242 states. [2020-07-28 19:06:52,327 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:52,327 INFO L93 Difference]: Finished difference Result 242 states and 337 transitions. [2020-07-28 19:06:52,328 INFO L276 IsEmpty]: Start isEmpty. Operand 242 states and 337 transitions. [2020-07-28 19:06:52,328 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:06:52,329 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:06:52,329 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:06:52,329 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:06:52,329 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 101 states. [2020-07-28 19:06:52,332 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 101 states to 101 states and 139 transitions. [2020-07-28 19:06:52,332 INFO L78 Accepts]: Start accepts. Automaton has 101 states and 139 transitions. Word has length 29 [2020-07-28 19:06:52,333 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:06:52,333 INFO L479 AbstractCegarLoop]: Abstraction has 101 states and 139 transitions. [2020-07-28 19:06:52,333 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:06:52,334 INFO L276 IsEmpty]: Start isEmpty. Operand 101 states and 139 transitions. [2020-07-28 19:06:52,337 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2020-07-28 19:06:52,337 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:06:52,337 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:06:52,337 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2020-07-28 19:06:52,338 INFO L427 AbstractCegarLoop]: === Iteration 6 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:06:52,338 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:06:52,338 INFO L82 PathProgramCache]: Analyzing trace with hash -679787626, now seen corresponding path program 1 times [2020-07-28 19:06:52,338 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:06:52,338 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1484810493] [2020-07-28 19:06:52,339 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:06:52,370 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:06:52,432 INFO L280 TraceCheckUtils]: 0: Hoare triple {3876#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(13);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string21.base, #t~string21.offset, 1);call write~init~int(110, #t~string21.base, 1 + #t~string21.offset, 1);call write~init~int(0, #t~string21.base, 2 + #t~string21.offset, 1);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string23.base, #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 1 + #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 2 + #t~string23.offset, 1);call write~init~int(0, #t~string23.base, 3 + #t~string23.offset, 1);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string25.base, #t~string25.offset, 1);call write~init~int(80, #t~string25.base, 1 + #t~string25.offset, 1);call write~init~int(117, #t~string25.base, 2 + #t~string25.offset, 1);call write~init~int(109, #t~string25.base, 3 + #t~string25.offset, 1);call write~init~int(112, #t~string25.base, 4 + #t~string25.offset, 1);call write~init~int(58, #t~string25.base, 5 + #t~string25.offset, 1);call write~init~int(0, #t~string25.base, 6 + #t~string25.offset, 1);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string27.base, #t~string27.offset, 1);call write~init~int(110, #t~string27.base, 1 + #t~string27.offset, 1);call write~init~int(0, #t~string27.base, 2 + #t~string27.offset, 1);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string29.base, #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 1 + #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 2 + #t~string29.offset, 1);call write~init~int(0, #t~string29.base, 3 + #t~string29.offset, 1);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string31.base, #t~string31.offset, 1);call write~init~int(32, #t~string31.base, 1 + #t~string31.offset, 1);call write~init~int(0, #t~string31.base, 2 + #t~string31.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string33.base, #t~string33.offset, 1);call write~init~int(0, #t~string33.base, 1 + #t~string33.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(21);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(30);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(9);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(25);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4; {3876#true} is VALID [2020-07-28 19:06:52,432 INFO L280 TraceCheckUtils]: 1: Hoare triple {3876#true} havoc main_#res;havoc main_#t~ret74, main_~retValue_acc~11, main_~tmp~10;havoc main_~retValue_acc~11;havoc main_~tmp~10; {3876#true} is VALID [2020-07-28 19:06:52,433 INFO L280 TraceCheckUtils]: 2: Hoare triple {3876#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~13;havoc valid_product_~retValue_acc~13;valid_product_~retValue_acc~13 := 1;valid_product_#res := valid_product_~retValue_acc~13; {3876#true} is VALID [2020-07-28 19:06:52,433 INFO L280 TraceCheckUtils]: 3: Hoare triple {3876#true} main_#t~ret74 := valid_product_#res;assume -2147483648 <= main_#t~ret74 && main_#t~ret74 <= 2147483647;main_~tmp~10 := main_#t~ret74;havoc main_#t~ret74; {3876#true} is VALID [2020-07-28 19:06:52,433 INFO L280 TraceCheckUtils]: 4: Hoare triple {3876#true} assume 0 != main_~tmp~10; {3876#true} is VALID [2020-07-28 19:06:52,433 INFO L280 TraceCheckUtils]: 5: Hoare triple {3876#true} ~switchedOnBeforeTS~0 := 0; {3876#true} is VALID [2020-07-28 19:06:52,434 INFO L280 TraceCheckUtils]: 6: Hoare triple {3876#true} havoc test_#t~nondet10, test_#t~nondet11, test_#t~nondet12, test_#t~nondet13, test_~splverifierCounter~0, test_~tmp~0, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~0;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {3876#true} is VALID [2020-07-28 19:06:52,434 INFO L280 TraceCheckUtils]: 7: Hoare triple {3876#true} assume !false; {3876#true} is VALID [2020-07-28 19:06:52,434 INFO L280 TraceCheckUtils]: 8: Hoare triple {3876#true} assume test_~splverifierCounter~0 < 4; {3876#true} is VALID [2020-07-28 19:06:52,434 INFO L280 TraceCheckUtils]: 9: Hoare triple {3876#true} assume -2147483648 <= test_#t~nondet10 && test_#t~nondet10 <= 2147483647;test_~tmp~0 := test_#t~nondet10;havoc test_#t~nondet10; {3876#true} is VALID [2020-07-28 19:06:52,435 INFO L280 TraceCheckUtils]: 10: Hoare triple {3876#true} assume !(0 != test_~tmp~0); {3876#true} is VALID [2020-07-28 19:06:52,435 INFO L280 TraceCheckUtils]: 11: Hoare triple {3876#true} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp___0~0 := test_#t~nondet11;havoc test_#t~nondet11; {3876#true} is VALID [2020-07-28 19:06:52,435 INFO L280 TraceCheckUtils]: 12: Hoare triple {3876#true} assume !(0 != test_~tmp___0~0); {3876#true} is VALID [2020-07-28 19:06:52,435 INFO L280 TraceCheckUtils]: 13: Hoare triple {3876#true} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___2~0 := test_#t~nondet12;havoc test_#t~nondet12; {3876#true} is VALID [2020-07-28 19:06:52,436 INFO L280 TraceCheckUtils]: 14: Hoare triple {3876#true} assume 0 != test_~tmp___2~0; {3876#true} is VALID [2020-07-28 19:06:52,437 INFO L280 TraceCheckUtils]: 15: Hoare triple {3876#true} havoc __utac_acc__Specification5_spec__2_#t~ret71;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {3876#true} is VALID [2020-07-28 19:06:52,437 INFO L280 TraceCheckUtils]: 16: Hoare triple {3876#true} __utac_acc__Specification5_spec__2_#t~ret71 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret71 && __utac_acc__Specification5_spec__2_#t~ret71 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret71;havoc __utac_acc__Specification5_spec__2_#t~ret71; {3876#true} is VALID [2020-07-28 19:06:52,437 INFO L280 TraceCheckUtils]: 17: Hoare triple {3876#true} assume !(0 != ~pumpRunning~0); {3876#true} is VALID [2020-07-28 19:06:52,437 INFO L280 TraceCheckUtils]: 18: Hoare triple {3876#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {3876#true} is VALID [2020-07-28 19:06:52,438 INFO L280 TraceCheckUtils]: 19: Hoare triple {3876#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {3876#true} is VALID [2020-07-28 19:06:52,438 INFO L280 TraceCheckUtils]: 20: Hoare triple {3876#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret34, isHighWaterLevel_~retValue_acc~6, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~6;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {3876#true} is VALID [2020-07-28 19:06:52,438 INFO L280 TraceCheckUtils]: 21: Hoare triple {3876#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~2 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {3876#true} is VALID [2020-07-28 19:06:52,439 INFO L280 TraceCheckUtils]: 22: Hoare triple {3876#true} isHighWaterLevel_#t~ret34 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret34 && isHighWaterLevel_#t~ret34 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret34;havoc isHighWaterLevel_#t~ret34; {3876#true} is VALID [2020-07-28 19:06:52,440 INFO L280 TraceCheckUtils]: 23: Hoare triple {3876#true} assume 0 != isHighWaterLevel_~tmp~4;isHighWaterLevel_~tmp___0~1 := 0; {3878#(= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1)} is VALID [2020-07-28 19:06:52,441 INFO L280 TraceCheckUtils]: 24: Hoare triple {3878#(= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1)} isHighWaterLevel_~retValue_acc~6 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~6; {3879#(= 0 |ULTIMATE.start_isHighWaterLevel_#res|)} is VALID [2020-07-28 19:06:52,442 INFO L280 TraceCheckUtils]: 25: Hoare triple {3879#(= 0 |ULTIMATE.start_isHighWaterLevel_#res|)} processEnvironment__wrappee__highWaterSensor_#t~ret14 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret14 && processEnvironment__wrappee__highWaterSensor_#t~ret14 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~1 := processEnvironment__wrappee__highWaterSensor_#t~ret14;havoc processEnvironment__wrappee__highWaterSensor_#t~ret14; {3880#(= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~1)} is VALID [2020-07-28 19:06:52,442 INFO L280 TraceCheckUtils]: 26: Hoare triple {3880#(= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~1)} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc activatePump_#t~ret16, activatePump_~tmp~3;havoc activatePump_~tmp~3;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret17, isMethaneAlarm_~retValue_acc~4;havoc isMethaneAlarm_~retValue_acc~4;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {3877#false} is VALID [2020-07-28 19:06:52,443 INFO L280 TraceCheckUtils]: 27: Hoare triple {3877#false} isMethaneAlarm_#t~ret17 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret17 && isMethaneAlarm_#t~ret17 <= 2147483647;isMethaneAlarm_~retValue_acc~4 := isMethaneAlarm_#t~ret17;havoc isMethaneAlarm_#t~ret17;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~4; {3877#false} is VALID [2020-07-28 19:06:52,443 INFO L280 TraceCheckUtils]: 28: Hoare triple {3877#false} activatePump_#t~ret16 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret16 && activatePump_#t~ret16 <= 2147483647;activatePump_~tmp~3 := activatePump_#t~ret16;havoc activatePump_#t~ret16; {3877#false} is VALID [2020-07-28 19:06:52,443 INFO L280 TraceCheckUtils]: 29: Hoare triple {3877#false} assume !(0 != activatePump_~tmp~3);~pumpRunning~0 := 1; {3877#false} is VALID [2020-07-28 19:06:52,444 INFO L280 TraceCheckUtils]: 30: Hoare triple {3877#false} havoc __utac_acc__Specification5_spec__3_#t~ret72, __utac_acc__Specification5_spec__3_#t~ret73, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {3877#false} is VALID [2020-07-28 19:06:52,444 INFO L280 TraceCheckUtils]: 31: Hoare triple {3877#false} __utac_acc__Specification5_spec__3_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret72 && __utac_acc__Specification5_spec__3_#t~ret72 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret72;havoc __utac_acc__Specification5_spec__3_#t~ret72; {3877#false} is VALID [2020-07-28 19:06:52,445 INFO L280 TraceCheckUtils]: 32: Hoare triple {3877#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {3877#false} is VALID [2020-07-28 19:06:52,445 INFO L280 TraceCheckUtils]: 33: Hoare triple {3877#false} __utac_acc__Specification5_spec__3_#t~ret73 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret73 && __utac_acc__Specification5_spec__3_#t~ret73 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret73;havoc __utac_acc__Specification5_spec__3_#t~ret73; {3877#false} is VALID [2020-07-28 19:06:52,445 INFO L280 TraceCheckUtils]: 34: Hoare triple {3877#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3; {3877#false} is VALID [2020-07-28 19:06:52,446 INFO L280 TraceCheckUtils]: 35: Hoare triple {3877#false} assume 0 == ~switchedOnBeforeTS~0; {3877#false} is VALID [2020-07-28 19:06:52,446 INFO L280 TraceCheckUtils]: 36: Hoare triple {3877#false} assume !false; {3877#false} is VALID [2020-07-28 19:06:52,448 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:06:52,448 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1484810493] [2020-07-28 19:06:52,449 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:06:52,449 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:06:52,449 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [252544080] [2020-07-28 19:06:52,450 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 37 [2020-07-28 19:06:52,450 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:06:52,450 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:06:52,507 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 37 edges. 37 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:06:52,507 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:06:52,508 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:06:52,508 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:06:52,508 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:06:52,509 INFO L87 Difference]: Start difference. First operand 101 states and 139 transitions. Second operand 5 states. [2020-07-28 19:06:53,376 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:53,376 INFO L93 Difference]: Finished difference Result 288 states and 396 transitions. [2020-07-28 19:06:53,376 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2020-07-28 19:06:53,376 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 37 [2020-07-28 19:06:53,378 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:06:53,378 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:06:53,380 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 230 transitions. [2020-07-28 19:06:53,380 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:06:53,381 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 230 transitions. [2020-07-28 19:06:53,381 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states and 230 transitions. [2020-07-28 19:06:53,624 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 230 edges. 230 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:06:53,628 INFO L225 Difference]: With dead ends: 288 [2020-07-28 19:06:53,628 INFO L226 Difference]: Without dead ends: 194 [2020-07-28 19:06:53,628 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2020-07-28 19:06:53,629 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 194 states. [2020-07-28 19:06:53,804 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 194 to 107. [2020-07-28 19:06:53,805 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:06:53,805 INFO L82 GeneralOperation]: Start isEquivalent. First operand 194 states. Second operand 107 states. [2020-07-28 19:06:53,805 INFO L74 IsIncluded]: Start isIncluded. First operand 194 states. Second operand 107 states. [2020-07-28 19:06:53,805 INFO L87 Difference]: Start difference. First operand 194 states. Second operand 107 states. [2020-07-28 19:06:53,808 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:53,808 INFO L93 Difference]: Finished difference Result 194 states and 262 transitions. [2020-07-28 19:06:53,809 INFO L276 IsEmpty]: Start isEmpty. Operand 194 states and 262 transitions. [2020-07-28 19:06:53,809 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:06:53,809 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:06:53,809 INFO L74 IsIncluded]: Start isIncluded. First operand 107 states. Second operand 194 states. [2020-07-28 19:06:53,809 INFO L87 Difference]: Start difference. First operand 107 states. Second operand 194 states. [2020-07-28 19:06:53,813 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:53,813 INFO L93 Difference]: Finished difference Result 194 states and 262 transitions. [2020-07-28 19:06:53,813 INFO L276 IsEmpty]: Start isEmpty. Operand 194 states and 262 transitions. [2020-07-28 19:06:53,814 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:06:53,814 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:06:53,814 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:06:53,814 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:06:53,814 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 107 states. [2020-07-28 19:06:53,816 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 107 states to 107 states and 145 transitions. [2020-07-28 19:06:53,816 INFO L78 Accepts]: Start accepts. Automaton has 107 states and 145 transitions. Word has length 37 [2020-07-28 19:06:53,817 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:06:53,817 INFO L479 AbstractCegarLoop]: Abstraction has 107 states and 145 transitions. [2020-07-28 19:06:53,817 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:06:53,817 INFO L276 IsEmpty]: Start isEmpty. Operand 107 states and 145 transitions. [2020-07-28 19:06:53,817 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2020-07-28 19:06:53,817 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:06:53,817 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:06:53,818 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2020-07-28 19:06:53,818 INFO L427 AbstractCegarLoop]: === Iteration 7 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:06:53,818 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:06:53,818 INFO L82 PathProgramCache]: Analyzing trace with hash -1690904876, now seen corresponding path program 1 times [2020-07-28 19:06:53,818 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:06:53,818 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [725360311] [2020-07-28 19:06:53,818 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:06:53,839 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:06:53,899 INFO L280 TraceCheckUtils]: 0: Hoare triple {4849#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(13);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string21.base, #t~string21.offset, 1);call write~init~int(110, #t~string21.base, 1 + #t~string21.offset, 1);call write~init~int(0, #t~string21.base, 2 + #t~string21.offset, 1);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string23.base, #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 1 + #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 2 + #t~string23.offset, 1);call write~init~int(0, #t~string23.base, 3 + #t~string23.offset, 1);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string25.base, #t~string25.offset, 1);call write~init~int(80, #t~string25.base, 1 + #t~string25.offset, 1);call write~init~int(117, #t~string25.base, 2 + #t~string25.offset, 1);call write~init~int(109, #t~string25.base, 3 + #t~string25.offset, 1);call write~init~int(112, #t~string25.base, 4 + #t~string25.offset, 1);call write~init~int(58, #t~string25.base, 5 + #t~string25.offset, 1);call write~init~int(0, #t~string25.base, 6 + #t~string25.offset, 1);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string27.base, #t~string27.offset, 1);call write~init~int(110, #t~string27.base, 1 + #t~string27.offset, 1);call write~init~int(0, #t~string27.base, 2 + #t~string27.offset, 1);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string29.base, #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 1 + #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 2 + #t~string29.offset, 1);call write~init~int(0, #t~string29.base, 3 + #t~string29.offset, 1);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string31.base, #t~string31.offset, 1);call write~init~int(32, #t~string31.base, 1 + #t~string31.offset, 1);call write~init~int(0, #t~string31.base, 2 + #t~string31.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string33.base, #t~string33.offset, 1);call write~init~int(0, #t~string33.base, 1 + #t~string33.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(21);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(30);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(9);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(25);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4; {4849#true} is VALID [2020-07-28 19:06:53,900 INFO L280 TraceCheckUtils]: 1: Hoare triple {4849#true} havoc main_#res;havoc main_#t~ret74, main_~retValue_acc~11, main_~tmp~10;havoc main_~retValue_acc~11;havoc main_~tmp~10; {4849#true} is VALID [2020-07-28 19:06:53,900 INFO L280 TraceCheckUtils]: 2: Hoare triple {4849#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~13;havoc valid_product_~retValue_acc~13;valid_product_~retValue_acc~13 := 1;valid_product_#res := valid_product_~retValue_acc~13; {4851#(= 1 |ULTIMATE.start_valid_product_#res|)} is VALID [2020-07-28 19:06:53,901 INFO L280 TraceCheckUtils]: 3: Hoare triple {4851#(= 1 |ULTIMATE.start_valid_product_#res|)} main_#t~ret74 := valid_product_#res;assume -2147483648 <= main_#t~ret74 && main_#t~ret74 <= 2147483647;main_~tmp~10 := main_#t~ret74;havoc main_#t~ret74; {4852#(= 1 ULTIMATE.start_main_~tmp~10)} is VALID [2020-07-28 19:06:53,901 INFO L280 TraceCheckUtils]: 4: Hoare triple {4852#(= 1 ULTIMATE.start_main_~tmp~10)} assume 0 != main_~tmp~10; {4849#true} is VALID [2020-07-28 19:06:53,902 INFO L280 TraceCheckUtils]: 5: Hoare triple {4849#true} ~switchedOnBeforeTS~0 := 0; {4849#true} is VALID [2020-07-28 19:06:53,902 INFO L280 TraceCheckUtils]: 6: Hoare triple {4849#true} havoc test_#t~nondet10, test_#t~nondet11, test_#t~nondet12, test_#t~nondet13, test_~splverifierCounter~0, test_~tmp~0, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~0;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {4849#true} is VALID [2020-07-28 19:06:53,902 INFO L280 TraceCheckUtils]: 7: Hoare triple {4849#true} assume !false; {4849#true} is VALID [2020-07-28 19:06:53,902 INFO L280 TraceCheckUtils]: 8: Hoare triple {4849#true} assume test_~splverifierCounter~0 < 4; {4849#true} is VALID [2020-07-28 19:06:53,902 INFO L280 TraceCheckUtils]: 9: Hoare triple {4849#true} assume -2147483648 <= test_#t~nondet10 && test_#t~nondet10 <= 2147483647;test_~tmp~0 := test_#t~nondet10;havoc test_#t~nondet10; {4849#true} is VALID [2020-07-28 19:06:53,903 INFO L280 TraceCheckUtils]: 10: Hoare triple {4849#true} assume !(0 != test_~tmp~0); {4849#true} is VALID [2020-07-28 19:06:53,903 INFO L280 TraceCheckUtils]: 11: Hoare triple {4849#true} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp___0~0 := test_#t~nondet11;havoc test_#t~nondet11; {4849#true} is VALID [2020-07-28 19:06:53,903 INFO L280 TraceCheckUtils]: 12: Hoare triple {4849#true} assume !(0 != test_~tmp___0~0); {4849#true} is VALID [2020-07-28 19:06:53,903 INFO L280 TraceCheckUtils]: 13: Hoare triple {4849#true} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___2~0 := test_#t~nondet12;havoc test_#t~nondet12; {4849#true} is VALID [2020-07-28 19:06:53,903 INFO L280 TraceCheckUtils]: 14: Hoare triple {4849#true} assume 0 != test_~tmp___2~0; {4849#true} is VALID [2020-07-28 19:06:53,904 INFO L280 TraceCheckUtils]: 15: Hoare triple {4849#true} havoc __utac_acc__Specification5_spec__2_#t~ret71;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {4849#true} is VALID [2020-07-28 19:06:53,904 INFO L280 TraceCheckUtils]: 16: Hoare triple {4849#true} __utac_acc__Specification5_spec__2_#t~ret71 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret71 && __utac_acc__Specification5_spec__2_#t~ret71 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret71;havoc __utac_acc__Specification5_spec__2_#t~ret71; {4849#true} is VALID [2020-07-28 19:06:53,904 INFO L280 TraceCheckUtils]: 17: Hoare triple {4849#true} assume !(0 != ~pumpRunning~0); {4849#true} is VALID [2020-07-28 19:06:53,904 INFO L280 TraceCheckUtils]: 18: Hoare triple {4849#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {4849#true} is VALID [2020-07-28 19:06:53,905 INFO L280 TraceCheckUtils]: 19: Hoare triple {4849#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {4849#true} is VALID [2020-07-28 19:06:53,905 INFO L280 TraceCheckUtils]: 20: Hoare triple {4849#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret34, isHighWaterLevel_~retValue_acc~6, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~6;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {4849#true} is VALID [2020-07-28 19:06:53,906 INFO L280 TraceCheckUtils]: 21: Hoare triple {4849#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~2 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {4853#(not (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|))} is VALID [2020-07-28 19:06:53,907 INFO L280 TraceCheckUtils]: 22: Hoare triple {4853#(not (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|))} isHighWaterLevel_#t~ret34 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret34 && isHighWaterLevel_#t~ret34 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret34;havoc isHighWaterLevel_#t~ret34; {4854#(not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~4))} is VALID [2020-07-28 19:06:53,908 INFO L280 TraceCheckUtils]: 23: Hoare triple {4854#(not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~4))} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {4850#false} is VALID [2020-07-28 19:06:53,908 INFO L280 TraceCheckUtils]: 24: Hoare triple {4850#false} isHighWaterLevel_~retValue_acc~6 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~6; {4850#false} is VALID [2020-07-28 19:06:53,908 INFO L280 TraceCheckUtils]: 25: Hoare triple {4850#false} processEnvironment__wrappee__highWaterSensor_#t~ret14 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret14 && processEnvironment__wrappee__highWaterSensor_#t~ret14 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~1 := processEnvironment__wrappee__highWaterSensor_#t~ret14;havoc processEnvironment__wrappee__highWaterSensor_#t~ret14; {4850#false} is VALID [2020-07-28 19:06:53,909 INFO L280 TraceCheckUtils]: 26: Hoare triple {4850#false} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc activatePump_#t~ret16, activatePump_~tmp~3;havoc activatePump_~tmp~3;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret17, isMethaneAlarm_~retValue_acc~4;havoc isMethaneAlarm_~retValue_acc~4;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {4850#false} is VALID [2020-07-28 19:06:53,909 INFO L280 TraceCheckUtils]: 27: Hoare triple {4850#false} isMethaneAlarm_#t~ret17 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret17 && isMethaneAlarm_#t~ret17 <= 2147483647;isMethaneAlarm_~retValue_acc~4 := isMethaneAlarm_#t~ret17;havoc isMethaneAlarm_#t~ret17;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~4; {4850#false} is VALID [2020-07-28 19:06:53,909 INFO L280 TraceCheckUtils]: 28: Hoare triple {4850#false} activatePump_#t~ret16 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret16 && activatePump_#t~ret16 <= 2147483647;activatePump_~tmp~3 := activatePump_#t~ret16;havoc activatePump_#t~ret16; {4850#false} is VALID [2020-07-28 19:06:53,909 INFO L280 TraceCheckUtils]: 29: Hoare triple {4850#false} assume !(0 != activatePump_~tmp~3);~pumpRunning~0 := 1; {4850#false} is VALID [2020-07-28 19:06:53,910 INFO L280 TraceCheckUtils]: 30: Hoare triple {4850#false} havoc __utac_acc__Specification5_spec__3_#t~ret72, __utac_acc__Specification5_spec__3_#t~ret73, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {4850#false} is VALID [2020-07-28 19:06:53,910 INFO L280 TraceCheckUtils]: 31: Hoare triple {4850#false} __utac_acc__Specification5_spec__3_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret72 && __utac_acc__Specification5_spec__3_#t~ret72 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret72;havoc __utac_acc__Specification5_spec__3_#t~ret72; {4850#false} is VALID [2020-07-28 19:06:53,910 INFO L280 TraceCheckUtils]: 32: Hoare triple {4850#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {4850#false} is VALID [2020-07-28 19:06:53,910 INFO L280 TraceCheckUtils]: 33: Hoare triple {4850#false} __utac_acc__Specification5_spec__3_#t~ret73 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret73 && __utac_acc__Specification5_spec__3_#t~ret73 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret73;havoc __utac_acc__Specification5_spec__3_#t~ret73; {4850#false} is VALID [2020-07-28 19:06:53,910 INFO L280 TraceCheckUtils]: 34: Hoare triple {4850#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3; {4850#false} is VALID [2020-07-28 19:06:53,911 INFO L280 TraceCheckUtils]: 35: Hoare triple {4850#false} assume 0 == ~switchedOnBeforeTS~0; {4850#false} is VALID [2020-07-28 19:06:53,911 INFO L280 TraceCheckUtils]: 36: Hoare triple {4850#false} assume !false; {4850#false} is VALID [2020-07-28 19:06:53,912 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:06:53,913 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [725360311] [2020-07-28 19:06:53,913 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:06:53,913 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2020-07-28 19:06:53,913 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [744640671] [2020-07-28 19:06:53,914 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 37 [2020-07-28 19:06:53,914 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:06:53,914 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states. [2020-07-28 19:06:53,957 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 37 edges. 37 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:06:53,957 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2020-07-28 19:06:53,958 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:06:53,958 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2020-07-28 19:06:53,958 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2020-07-28 19:06:53,958 INFO L87 Difference]: Start difference. First operand 107 states and 145 transitions. Second operand 6 states. [2020-07-28 19:06:55,012 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:55,013 INFO L93 Difference]: Finished difference Result 305 states and 413 transitions. [2020-07-28 19:06:55,013 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2020-07-28 19:06:55,013 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 37 [2020-07-28 19:06:55,013 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:06:55,014 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 19:06:55,016 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 241 transitions. [2020-07-28 19:06:55,016 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 19:06:55,018 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 241 transitions. [2020-07-28 19:06:55,019 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 241 transitions. [2020-07-28 19:06:55,292 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 241 edges. 241 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:06:55,296 INFO L225 Difference]: With dead ends: 305 [2020-07-28 19:06:55,296 INFO L226 Difference]: Without dead ends: 205 [2020-07-28 19:06:55,297 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=34, Invalid=56, Unknown=0, NotChecked=0, Total=90 [2020-07-28 19:06:55,297 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 205 states. [2020-07-28 19:06:55,558 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 205 to 111. [2020-07-28 19:06:55,559 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:06:55,559 INFO L82 GeneralOperation]: Start isEquivalent. First operand 205 states. Second operand 111 states. [2020-07-28 19:06:55,559 INFO L74 IsIncluded]: Start isIncluded. First operand 205 states. Second operand 111 states. [2020-07-28 19:06:55,559 INFO L87 Difference]: Start difference. First operand 205 states. Second operand 111 states. [2020-07-28 19:06:55,564 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:55,564 INFO L93 Difference]: Finished difference Result 205 states and 273 transitions. [2020-07-28 19:06:55,565 INFO L276 IsEmpty]: Start isEmpty. Operand 205 states and 273 transitions. [2020-07-28 19:06:55,565 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:06:55,565 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:06:55,565 INFO L74 IsIncluded]: Start isIncluded. First operand 111 states. Second operand 205 states. [2020-07-28 19:06:55,566 INFO L87 Difference]: Start difference. First operand 111 states. Second operand 205 states. [2020-07-28 19:06:55,570 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:55,570 INFO L93 Difference]: Finished difference Result 205 states and 273 transitions. [2020-07-28 19:06:55,570 INFO L276 IsEmpty]: Start isEmpty. Operand 205 states and 273 transitions. [2020-07-28 19:06:55,571 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:06:55,571 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:06:55,572 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:06:55,572 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:06:55,572 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 111 states. [2020-07-28 19:06:55,575 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 111 states to 111 states and 149 transitions. [2020-07-28 19:06:55,576 INFO L78 Accepts]: Start accepts. Automaton has 111 states and 149 transitions. Word has length 37 [2020-07-28 19:06:55,576 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:06:55,576 INFO L479 AbstractCegarLoop]: Abstraction has 111 states and 149 transitions. [2020-07-28 19:06:55,576 INFO L480 AbstractCegarLoop]: Interpolant automaton has 6 states. [2020-07-28 19:06:55,576 INFO L276 IsEmpty]: Start isEmpty. Operand 111 states and 149 transitions. [2020-07-28 19:06:55,577 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2020-07-28 19:06:55,577 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:06:55,578 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:06:55,578 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2020-07-28 19:06:55,578 INFO L427 AbstractCegarLoop]: === Iteration 8 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:06:55,578 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:06:55,578 INFO L82 PathProgramCache]: Analyzing trace with hash 1582994066, now seen corresponding path program 1 times [2020-07-28 19:06:55,579 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:06:55,580 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1890699841] [2020-07-28 19:06:55,580 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:06:55,630 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:06:55,695 INFO L280 TraceCheckUtils]: 0: Hoare triple {5879#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(13);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string21.base, #t~string21.offset, 1);call write~init~int(110, #t~string21.base, 1 + #t~string21.offset, 1);call write~init~int(0, #t~string21.base, 2 + #t~string21.offset, 1);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string23.base, #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 1 + #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 2 + #t~string23.offset, 1);call write~init~int(0, #t~string23.base, 3 + #t~string23.offset, 1);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string25.base, #t~string25.offset, 1);call write~init~int(80, #t~string25.base, 1 + #t~string25.offset, 1);call write~init~int(117, #t~string25.base, 2 + #t~string25.offset, 1);call write~init~int(109, #t~string25.base, 3 + #t~string25.offset, 1);call write~init~int(112, #t~string25.base, 4 + #t~string25.offset, 1);call write~init~int(58, #t~string25.base, 5 + #t~string25.offset, 1);call write~init~int(0, #t~string25.base, 6 + #t~string25.offset, 1);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string27.base, #t~string27.offset, 1);call write~init~int(110, #t~string27.base, 1 + #t~string27.offset, 1);call write~init~int(0, #t~string27.base, 2 + #t~string27.offset, 1);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string29.base, #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 1 + #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 2 + #t~string29.offset, 1);call write~init~int(0, #t~string29.base, 3 + #t~string29.offset, 1);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string31.base, #t~string31.offset, 1);call write~init~int(32, #t~string31.base, 1 + #t~string31.offset, 1);call write~init~int(0, #t~string31.base, 2 + #t~string31.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string33.base, #t~string33.offset, 1);call write~init~int(0, #t~string33.base, 1 + #t~string33.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(21);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(30);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(9);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(25);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4; {5881#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:55,696 INFO L280 TraceCheckUtils]: 1: Hoare triple {5881#(= 1 ~waterLevel~0)} havoc main_#res;havoc main_#t~ret74, main_~retValue_acc~11, main_~tmp~10;havoc main_~retValue_acc~11;havoc main_~tmp~10; {5881#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:55,697 INFO L280 TraceCheckUtils]: 2: Hoare triple {5881#(= 1 ~waterLevel~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~13;havoc valid_product_~retValue_acc~13;valid_product_~retValue_acc~13 := 1;valid_product_#res := valid_product_~retValue_acc~13; {5881#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:55,697 INFO L280 TraceCheckUtils]: 3: Hoare triple {5881#(= 1 ~waterLevel~0)} main_#t~ret74 := valid_product_#res;assume -2147483648 <= main_#t~ret74 && main_#t~ret74 <= 2147483647;main_~tmp~10 := main_#t~ret74;havoc main_#t~ret74; {5881#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:55,698 INFO L280 TraceCheckUtils]: 4: Hoare triple {5881#(= 1 ~waterLevel~0)} assume 0 != main_~tmp~10; {5881#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:55,698 INFO L280 TraceCheckUtils]: 5: Hoare triple {5881#(= 1 ~waterLevel~0)} ~switchedOnBeforeTS~0 := 0; {5881#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:55,699 INFO L280 TraceCheckUtils]: 6: Hoare triple {5881#(= 1 ~waterLevel~0)} havoc test_#t~nondet10, test_#t~nondet11, test_#t~nondet12, test_#t~nondet13, test_~splverifierCounter~0, test_~tmp~0, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~0;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {5881#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:55,699 INFO L280 TraceCheckUtils]: 7: Hoare triple {5881#(= 1 ~waterLevel~0)} assume !false; {5881#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:55,700 INFO L280 TraceCheckUtils]: 8: Hoare triple {5881#(= 1 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {5881#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:55,708 INFO L280 TraceCheckUtils]: 9: Hoare triple {5881#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet10 && test_#t~nondet10 <= 2147483647;test_~tmp~0 := test_#t~nondet10;havoc test_#t~nondet10; {5881#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:55,709 INFO L280 TraceCheckUtils]: 10: Hoare triple {5881#(= 1 ~waterLevel~0)} assume !(0 != test_~tmp~0); {5881#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:55,709 INFO L280 TraceCheckUtils]: 11: Hoare triple {5881#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp___0~0 := test_#t~nondet11;havoc test_#t~nondet11; {5881#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:55,710 INFO L280 TraceCheckUtils]: 12: Hoare triple {5881#(= 1 ~waterLevel~0)} assume !(0 != test_~tmp___0~0); {5881#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:55,711 INFO L280 TraceCheckUtils]: 13: Hoare triple {5881#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___2~0 := test_#t~nondet12;havoc test_#t~nondet12; {5881#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:55,712 INFO L280 TraceCheckUtils]: 14: Hoare triple {5881#(= 1 ~waterLevel~0)} assume 0 != test_~tmp___2~0; {5881#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:55,712 INFO L280 TraceCheckUtils]: 15: Hoare triple {5881#(= 1 ~waterLevel~0)} havoc __utac_acc__Specification5_spec__2_#t~ret71;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {5881#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:55,713 INFO L280 TraceCheckUtils]: 16: Hoare triple {5881#(= 1 ~waterLevel~0)} __utac_acc__Specification5_spec__2_#t~ret71 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret71 && __utac_acc__Specification5_spec__2_#t~ret71 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret71;havoc __utac_acc__Specification5_spec__2_#t~ret71; {5881#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:55,714 INFO L280 TraceCheckUtils]: 17: Hoare triple {5881#(= 1 ~waterLevel~0)} assume !(0 != ~pumpRunning~0); {5881#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:55,715 INFO L280 TraceCheckUtils]: 18: Hoare triple {5881#(= 1 ~waterLevel~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {5881#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:55,715 INFO L280 TraceCheckUtils]: 19: Hoare triple {5881#(= 1 ~waterLevel~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {5881#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:55,716 INFO L280 TraceCheckUtils]: 20: Hoare triple {5881#(= 1 ~waterLevel~0)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret34, isHighWaterLevel_~retValue_acc~6, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~6;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {5881#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:55,717 INFO L280 TraceCheckUtils]: 21: Hoare triple {5881#(= 1 ~waterLevel~0)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {5880#false} is VALID [2020-07-28 19:06:55,717 INFO L280 TraceCheckUtils]: 22: Hoare triple {5880#false} isHighWaterLevel_#t~ret34 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret34 && isHighWaterLevel_#t~ret34 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret34;havoc isHighWaterLevel_#t~ret34; {5880#false} is VALID [2020-07-28 19:06:55,717 INFO L280 TraceCheckUtils]: 23: Hoare triple {5880#false} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {5880#false} is VALID [2020-07-28 19:06:55,718 INFO L280 TraceCheckUtils]: 24: Hoare triple {5880#false} isHighWaterLevel_~retValue_acc~6 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~6; {5880#false} is VALID [2020-07-28 19:06:55,718 INFO L280 TraceCheckUtils]: 25: Hoare triple {5880#false} processEnvironment__wrappee__highWaterSensor_#t~ret14 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret14 && processEnvironment__wrappee__highWaterSensor_#t~ret14 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~1 := processEnvironment__wrappee__highWaterSensor_#t~ret14;havoc processEnvironment__wrappee__highWaterSensor_#t~ret14; {5880#false} is VALID [2020-07-28 19:06:55,720 INFO L280 TraceCheckUtils]: 26: Hoare triple {5880#false} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc activatePump_#t~ret16, activatePump_~tmp~3;havoc activatePump_~tmp~3;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret17, isMethaneAlarm_~retValue_acc~4;havoc isMethaneAlarm_~retValue_acc~4;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {5880#false} is VALID [2020-07-28 19:06:55,720 INFO L280 TraceCheckUtils]: 27: Hoare triple {5880#false} isMethaneAlarm_#t~ret17 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret17 && isMethaneAlarm_#t~ret17 <= 2147483647;isMethaneAlarm_~retValue_acc~4 := isMethaneAlarm_#t~ret17;havoc isMethaneAlarm_#t~ret17;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~4; {5880#false} is VALID [2020-07-28 19:06:55,720 INFO L280 TraceCheckUtils]: 28: Hoare triple {5880#false} activatePump_#t~ret16 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret16 && activatePump_#t~ret16 <= 2147483647;activatePump_~tmp~3 := activatePump_#t~ret16;havoc activatePump_#t~ret16; {5880#false} is VALID [2020-07-28 19:06:55,721 INFO L280 TraceCheckUtils]: 29: Hoare triple {5880#false} assume !(0 != activatePump_~tmp~3);~pumpRunning~0 := 1; {5880#false} is VALID [2020-07-28 19:06:55,721 INFO L280 TraceCheckUtils]: 30: Hoare triple {5880#false} havoc __utac_acc__Specification5_spec__3_#t~ret72, __utac_acc__Specification5_spec__3_#t~ret73, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {5880#false} is VALID [2020-07-28 19:06:55,721 INFO L280 TraceCheckUtils]: 31: Hoare triple {5880#false} __utac_acc__Specification5_spec__3_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret72 && __utac_acc__Specification5_spec__3_#t~ret72 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret72;havoc __utac_acc__Specification5_spec__3_#t~ret72; {5880#false} is VALID [2020-07-28 19:06:55,722 INFO L280 TraceCheckUtils]: 32: Hoare triple {5880#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {5880#false} is VALID [2020-07-28 19:06:55,722 INFO L280 TraceCheckUtils]: 33: Hoare triple {5880#false} __utac_acc__Specification5_spec__3_#t~ret73 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret73 && __utac_acc__Specification5_spec__3_#t~ret73 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret73;havoc __utac_acc__Specification5_spec__3_#t~ret73; {5880#false} is VALID [2020-07-28 19:06:55,722 INFO L280 TraceCheckUtils]: 34: Hoare triple {5880#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3; {5880#false} is VALID [2020-07-28 19:06:55,723 INFO L280 TraceCheckUtils]: 35: Hoare triple {5880#false} assume 0 == ~switchedOnBeforeTS~0; {5880#false} is VALID [2020-07-28 19:06:55,723 INFO L280 TraceCheckUtils]: 36: Hoare triple {5880#false} assume !false; {5880#false} is VALID [2020-07-28 19:06:55,727 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:06:55,727 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1890699841] [2020-07-28 19:06:55,728 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:06:55,728 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2020-07-28 19:06:55,728 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [335961908] [2020-07-28 19:06:55,729 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 37 [2020-07-28 19:06:55,729 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:06:55,729 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 19:06:55,785 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 37 edges. 37 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:06:55,785 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 19:06:55,785 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:06:55,786 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 19:06:55,786 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:06:55,786 INFO L87 Difference]: Start difference. First operand 111 states and 149 transitions. Second operand 3 states. [2020-07-28 19:06:56,302 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:56,302 INFO L93 Difference]: Finished difference Result 265 states and 357 transitions. [2020-07-28 19:06:56,303 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 19:06:56,303 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 37 [2020-07-28 19:06:56,303 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:06:56,303 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:06:56,304 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 198 transitions. [2020-07-28 19:06:56,304 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:06:56,305 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 198 transitions. [2020-07-28 19:06:56,305 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 198 transitions. [2020-07-28 19:06:56,509 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 198 edges. 198 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:06:56,513 INFO L225 Difference]: With dead ends: 265 [2020-07-28 19:06:56,513 INFO L226 Difference]: Without dead ends: 161 [2020-07-28 19:06:56,514 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:06:56,514 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 161 states. [2020-07-28 19:06:56,895 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 161 to 161. [2020-07-28 19:06:56,895 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:06:56,895 INFO L82 GeneralOperation]: Start isEquivalent. First operand 161 states. Second operand 161 states. [2020-07-28 19:06:56,895 INFO L74 IsIncluded]: Start isIncluded. First operand 161 states. Second operand 161 states. [2020-07-28 19:06:56,896 INFO L87 Difference]: Start difference. First operand 161 states. Second operand 161 states. [2020-07-28 19:06:56,900 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:56,901 INFO L93 Difference]: Finished difference Result 161 states and 212 transitions. [2020-07-28 19:06:56,901 INFO L276 IsEmpty]: Start isEmpty. Operand 161 states and 212 transitions. [2020-07-28 19:06:56,901 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:06:56,901 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:06:56,901 INFO L74 IsIncluded]: Start isIncluded. First operand 161 states. Second operand 161 states. [2020-07-28 19:06:56,902 INFO L87 Difference]: Start difference. First operand 161 states. Second operand 161 states. [2020-07-28 19:06:56,905 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:56,905 INFO L93 Difference]: Finished difference Result 161 states and 212 transitions. [2020-07-28 19:06:56,905 INFO L276 IsEmpty]: Start isEmpty. Operand 161 states and 212 transitions. [2020-07-28 19:06:56,906 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:06:56,906 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:06:56,906 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:06:56,906 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:06:56,907 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 161 states. [2020-07-28 19:06:56,910 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 161 states to 161 states and 212 transitions. [2020-07-28 19:06:56,910 INFO L78 Accepts]: Start accepts. Automaton has 161 states and 212 transitions. Word has length 37 [2020-07-28 19:06:56,910 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:06:56,910 INFO L479 AbstractCegarLoop]: Abstraction has 161 states and 212 transitions. [2020-07-28 19:06:56,910 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 19:06:56,911 INFO L276 IsEmpty]: Start isEmpty. Operand 161 states and 212 transitions. [2020-07-28 19:06:56,912 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2020-07-28 19:06:56,912 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:06:56,913 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:06:56,913 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2020-07-28 19:06:56,913 INFO L427 AbstractCegarLoop]: === Iteration 9 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:06:56,913 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:06:56,914 INFO L82 PathProgramCache]: Analyzing trace with hash -1176175278, now seen corresponding path program 1 times [2020-07-28 19:06:56,914 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:06:56,914 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2145443473] [2020-07-28 19:06:56,915 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:06:56,983 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:06:57,069 INFO L280 TraceCheckUtils]: 0: Hoare triple {6821#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(13);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string21.base, #t~string21.offset, 1);call write~init~int(110, #t~string21.base, 1 + #t~string21.offset, 1);call write~init~int(0, #t~string21.base, 2 + #t~string21.offset, 1);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string23.base, #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 1 + #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 2 + #t~string23.offset, 1);call write~init~int(0, #t~string23.base, 3 + #t~string23.offset, 1);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string25.base, #t~string25.offset, 1);call write~init~int(80, #t~string25.base, 1 + #t~string25.offset, 1);call write~init~int(117, #t~string25.base, 2 + #t~string25.offset, 1);call write~init~int(109, #t~string25.base, 3 + #t~string25.offset, 1);call write~init~int(112, #t~string25.base, 4 + #t~string25.offset, 1);call write~init~int(58, #t~string25.base, 5 + #t~string25.offset, 1);call write~init~int(0, #t~string25.base, 6 + #t~string25.offset, 1);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string27.base, #t~string27.offset, 1);call write~init~int(110, #t~string27.base, 1 + #t~string27.offset, 1);call write~init~int(0, #t~string27.base, 2 + #t~string27.offset, 1);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string29.base, #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 1 + #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 2 + #t~string29.offset, 1);call write~init~int(0, #t~string29.base, 3 + #t~string29.offset, 1);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string31.base, #t~string31.offset, 1);call write~init~int(32, #t~string31.base, 1 + #t~string31.offset, 1);call write~init~int(0, #t~string31.base, 2 + #t~string31.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string33.base, #t~string33.offset, 1);call write~init~int(0, #t~string33.base, 1 + #t~string33.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(21);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(30);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(9);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(25);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4; {6823#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:57,070 INFO L280 TraceCheckUtils]: 1: Hoare triple {6823#(= 1 ~waterLevel~0)} havoc main_#res;havoc main_#t~ret74, main_~retValue_acc~11, main_~tmp~10;havoc main_~retValue_acc~11;havoc main_~tmp~10; {6823#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:57,071 INFO L280 TraceCheckUtils]: 2: Hoare triple {6823#(= 1 ~waterLevel~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~13;havoc valid_product_~retValue_acc~13;valid_product_~retValue_acc~13 := 1;valid_product_#res := valid_product_~retValue_acc~13; {6823#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:57,071 INFO L280 TraceCheckUtils]: 3: Hoare triple {6823#(= 1 ~waterLevel~0)} main_#t~ret74 := valid_product_#res;assume -2147483648 <= main_#t~ret74 && main_#t~ret74 <= 2147483647;main_~tmp~10 := main_#t~ret74;havoc main_#t~ret74; {6823#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:57,072 INFO L280 TraceCheckUtils]: 4: Hoare triple {6823#(= 1 ~waterLevel~0)} assume 0 != main_~tmp~10; {6823#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:57,072 INFO L280 TraceCheckUtils]: 5: Hoare triple {6823#(= 1 ~waterLevel~0)} ~switchedOnBeforeTS~0 := 0; {6823#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:57,073 INFO L280 TraceCheckUtils]: 6: Hoare triple {6823#(= 1 ~waterLevel~0)} havoc test_#t~nondet10, test_#t~nondet11, test_#t~nondet12, test_#t~nondet13, test_~splverifierCounter~0, test_~tmp~0, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~0;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {6823#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:57,074 INFO L280 TraceCheckUtils]: 7: Hoare triple {6823#(= 1 ~waterLevel~0)} assume !false; {6823#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:57,074 INFO L280 TraceCheckUtils]: 8: Hoare triple {6823#(= 1 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {6823#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:57,075 INFO L280 TraceCheckUtils]: 9: Hoare triple {6823#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet10 && test_#t~nondet10 <= 2147483647;test_~tmp~0 := test_#t~nondet10;havoc test_#t~nondet10; {6823#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:57,076 INFO L280 TraceCheckUtils]: 10: Hoare triple {6823#(= 1 ~waterLevel~0)} assume 0 != test_~tmp~0; {6823#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:06:57,076 INFO L280 TraceCheckUtils]: 11: Hoare triple {6823#(= 1 ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {6824#(= 2 ~waterLevel~0)} is VALID [2020-07-28 19:06:57,077 INFO L280 TraceCheckUtils]: 12: Hoare triple {6824#(= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp___0~0 := test_#t~nondet11;havoc test_#t~nondet11; {6824#(= 2 ~waterLevel~0)} is VALID [2020-07-28 19:06:57,078 INFO L280 TraceCheckUtils]: 13: Hoare triple {6824#(= 2 ~waterLevel~0)} assume !(0 != test_~tmp___0~0); {6824#(= 2 ~waterLevel~0)} is VALID [2020-07-28 19:06:57,078 INFO L280 TraceCheckUtils]: 14: Hoare triple {6824#(= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___2~0 := test_#t~nondet12;havoc test_#t~nondet12; {6824#(= 2 ~waterLevel~0)} is VALID [2020-07-28 19:06:57,079 INFO L280 TraceCheckUtils]: 15: Hoare triple {6824#(= 2 ~waterLevel~0)} assume 0 != test_~tmp___2~0; {6824#(= 2 ~waterLevel~0)} is VALID [2020-07-28 19:06:57,080 INFO L280 TraceCheckUtils]: 16: Hoare triple {6824#(= 2 ~waterLevel~0)} havoc __utac_acc__Specification5_spec__2_#t~ret71;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {6824#(= 2 ~waterLevel~0)} is VALID [2020-07-28 19:06:57,081 INFO L280 TraceCheckUtils]: 17: Hoare triple {6824#(= 2 ~waterLevel~0)} __utac_acc__Specification5_spec__2_#t~ret71 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret71 && __utac_acc__Specification5_spec__2_#t~ret71 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret71;havoc __utac_acc__Specification5_spec__2_#t~ret71; {6824#(= 2 ~waterLevel~0)} is VALID [2020-07-28 19:06:57,083 INFO L280 TraceCheckUtils]: 18: Hoare triple {6824#(= 2 ~waterLevel~0)} assume !(0 != ~pumpRunning~0); {6824#(= 2 ~waterLevel~0)} is VALID [2020-07-28 19:06:57,084 INFO L280 TraceCheckUtils]: 19: Hoare triple {6824#(= 2 ~waterLevel~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {6824#(= 2 ~waterLevel~0)} is VALID [2020-07-28 19:06:57,086 INFO L280 TraceCheckUtils]: 20: Hoare triple {6824#(= 2 ~waterLevel~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {6824#(= 2 ~waterLevel~0)} is VALID [2020-07-28 19:06:57,087 INFO L280 TraceCheckUtils]: 21: Hoare triple {6824#(= 2 ~waterLevel~0)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret34, isHighWaterLevel_~retValue_acc~6, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~6;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {6824#(= 2 ~waterLevel~0)} is VALID [2020-07-28 19:06:57,091 INFO L280 TraceCheckUtils]: 22: Hoare triple {6824#(= 2 ~waterLevel~0)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {6824#(= 2 ~waterLevel~0)} is VALID [2020-07-28 19:06:57,092 INFO L280 TraceCheckUtils]: 23: Hoare triple {6824#(= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret34 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret34 && isHighWaterLevel_#t~ret34 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret34;havoc isHighWaterLevel_#t~ret34; {6824#(= 2 ~waterLevel~0)} is VALID [2020-07-28 19:06:57,093 INFO L280 TraceCheckUtils]: 24: Hoare triple {6824#(= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {6824#(= 2 ~waterLevel~0)} is VALID [2020-07-28 19:06:57,093 INFO L280 TraceCheckUtils]: 25: Hoare triple {6824#(= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~6 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~6; {6824#(= 2 ~waterLevel~0)} is VALID [2020-07-28 19:06:57,094 INFO L280 TraceCheckUtils]: 26: Hoare triple {6824#(= 2 ~waterLevel~0)} processEnvironment__wrappee__highWaterSensor_#t~ret14 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret14 && processEnvironment__wrappee__highWaterSensor_#t~ret14 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~1 := processEnvironment__wrappee__highWaterSensor_#t~ret14;havoc processEnvironment__wrappee__highWaterSensor_#t~ret14; {6824#(= 2 ~waterLevel~0)} is VALID [2020-07-28 19:06:57,094 INFO L280 TraceCheckUtils]: 27: Hoare triple {6824#(= 2 ~waterLevel~0)} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc activatePump_#t~ret16, activatePump_~tmp~3;havoc activatePump_~tmp~3;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret17, isMethaneAlarm_~retValue_acc~4;havoc isMethaneAlarm_~retValue_acc~4;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {6824#(= 2 ~waterLevel~0)} is VALID [2020-07-28 19:06:57,095 INFO L280 TraceCheckUtils]: 28: Hoare triple {6824#(= 2 ~waterLevel~0)} isMethaneAlarm_#t~ret17 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret17 && isMethaneAlarm_#t~ret17 <= 2147483647;isMethaneAlarm_~retValue_acc~4 := isMethaneAlarm_#t~ret17;havoc isMethaneAlarm_#t~ret17;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~4; {6824#(= 2 ~waterLevel~0)} is VALID [2020-07-28 19:06:57,096 INFO L280 TraceCheckUtils]: 29: Hoare triple {6824#(= 2 ~waterLevel~0)} activatePump_#t~ret16 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret16 && activatePump_#t~ret16 <= 2147483647;activatePump_~tmp~3 := activatePump_#t~ret16;havoc activatePump_#t~ret16; {6824#(= 2 ~waterLevel~0)} is VALID [2020-07-28 19:06:57,096 INFO L280 TraceCheckUtils]: 30: Hoare triple {6824#(= 2 ~waterLevel~0)} assume !(0 != activatePump_~tmp~3);~pumpRunning~0 := 1; {6824#(= 2 ~waterLevel~0)} is VALID [2020-07-28 19:06:57,097 INFO L280 TraceCheckUtils]: 31: Hoare triple {6824#(= 2 ~waterLevel~0)} havoc __utac_acc__Specification5_spec__3_#t~ret72, __utac_acc__Specification5_spec__3_#t~ret73, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {6825#(= 2 |ULTIMATE.start_getWaterLevel_#res|)} is VALID [2020-07-28 19:06:57,098 INFO L280 TraceCheckUtils]: 32: Hoare triple {6825#(= 2 |ULTIMATE.start_getWaterLevel_#res|)} __utac_acc__Specification5_spec__3_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret72 && __utac_acc__Specification5_spec__3_#t~ret72 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret72;havoc __utac_acc__Specification5_spec__3_#t~ret72; {6826#(= 2 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9)} is VALID [2020-07-28 19:06:57,098 INFO L280 TraceCheckUtils]: 33: Hoare triple {6826#(= 2 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9)} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {6822#false} is VALID [2020-07-28 19:06:57,099 INFO L280 TraceCheckUtils]: 34: Hoare triple {6822#false} __utac_acc__Specification5_spec__3_#t~ret73 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret73 && __utac_acc__Specification5_spec__3_#t~ret73 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret73;havoc __utac_acc__Specification5_spec__3_#t~ret73; {6822#false} is VALID [2020-07-28 19:06:57,099 INFO L280 TraceCheckUtils]: 35: Hoare triple {6822#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3; {6822#false} is VALID [2020-07-28 19:06:57,099 INFO L280 TraceCheckUtils]: 36: Hoare triple {6822#false} assume 0 == ~switchedOnBeforeTS~0; {6822#false} is VALID [2020-07-28 19:06:57,099 INFO L280 TraceCheckUtils]: 37: Hoare triple {6822#false} assume !false; {6822#false} is VALID [2020-07-28 19:06:57,102 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:06:57,102 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2145443473] [2020-07-28 19:06:57,102 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:06:57,102 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:06:57,102 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2019701374] [2020-07-28 19:06:57,103 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 38 [2020-07-28 19:06:57,103 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:06:57,103 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states. [2020-07-28 19:06:57,152 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 38 edges. 38 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:06:57,152 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2020-07-28 19:06:57,152 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:06:57,153 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2020-07-28 19:06:57,153 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2020-07-28 19:06:57,153 INFO L87 Difference]: Start difference. First operand 161 states and 212 transitions. Second operand 6 states. [2020-07-28 19:06:59,921 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:06:59,922 INFO L93 Difference]: Finished difference Result 751 states and 1020 transitions. [2020-07-28 19:06:59,922 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2020-07-28 19:06:59,922 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 38 [2020-07-28 19:06:59,922 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:06:59,923 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 19:06:59,928 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 494 transitions. [2020-07-28 19:06:59,928 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 19:06:59,931 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 494 transitions. [2020-07-28 19:06:59,931 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 10 states and 494 transitions. [2020-07-28 19:07:00,475 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 494 edges. 494 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:07:00,505 INFO L225 Difference]: With dead ends: 751 [2020-07-28 19:07:00,505 INFO L226 Difference]: Without dead ends: 647 [2020-07-28 19:07:00,506 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=34, Invalid=76, Unknown=0, NotChecked=0, Total=110 [2020-07-28 19:07:00,507 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 647 states. [2020-07-28 19:07:01,124 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 647 to 268. [2020-07-28 19:07:01,124 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:07:01,124 INFO L82 GeneralOperation]: Start isEquivalent. First operand 647 states. Second operand 268 states. [2020-07-28 19:07:01,124 INFO L74 IsIncluded]: Start isIncluded. First operand 647 states. Second operand 268 states. [2020-07-28 19:07:01,125 INFO L87 Difference]: Start difference. First operand 647 states. Second operand 268 states. [2020-07-28 19:07:01,152 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:07:01,152 INFO L93 Difference]: Finished difference Result 647 states and 852 transitions. [2020-07-28 19:07:01,153 INFO L276 IsEmpty]: Start isEmpty. Operand 647 states and 852 transitions. [2020-07-28 19:07:01,154 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:07:01,154 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:07:01,154 INFO L74 IsIncluded]: Start isIncluded. First operand 268 states. Second operand 647 states. [2020-07-28 19:07:01,155 INFO L87 Difference]: Start difference. First operand 268 states. Second operand 647 states. [2020-07-28 19:07:01,187 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:07:01,188 INFO L93 Difference]: Finished difference Result 647 states and 852 transitions. [2020-07-28 19:07:01,188 INFO L276 IsEmpty]: Start isEmpty. Operand 647 states and 852 transitions. [2020-07-28 19:07:01,190 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:07:01,190 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:07:01,191 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:07:01,191 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:07:01,191 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 268 states. [2020-07-28 19:07:01,200 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 268 states to 268 states and 354 transitions. [2020-07-28 19:07:01,201 INFO L78 Accepts]: Start accepts. Automaton has 268 states and 354 transitions. Word has length 38 [2020-07-28 19:07:01,201 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:07:01,201 INFO L479 AbstractCegarLoop]: Abstraction has 268 states and 354 transitions. [2020-07-28 19:07:01,202 INFO L480 AbstractCegarLoop]: Interpolant automaton has 6 states. [2020-07-28 19:07:01,202 INFO L276 IsEmpty]: Start isEmpty. Operand 268 states and 354 transitions. [2020-07-28 19:07:01,203 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2020-07-28 19:07:01,203 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:07:01,203 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:07:01,204 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2020-07-28 19:07:01,204 INFO L427 AbstractCegarLoop]: === Iteration 10 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:07:01,204 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:07:01,205 INFO L82 PathProgramCache]: Analyzing trace with hash -1917118807, now seen corresponding path program 1 times [2020-07-28 19:07:01,205 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:07:01,205 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1208729154] [2020-07-28 19:07:01,206 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:07:01,236 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:07:01,320 INFO L280 TraceCheckUtils]: 0: Hoare triple {9606#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(13);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string21.base, #t~string21.offset, 1);call write~init~int(110, #t~string21.base, 1 + #t~string21.offset, 1);call write~init~int(0, #t~string21.base, 2 + #t~string21.offset, 1);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string23.base, #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 1 + #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 2 + #t~string23.offset, 1);call write~init~int(0, #t~string23.base, 3 + #t~string23.offset, 1);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string25.base, #t~string25.offset, 1);call write~init~int(80, #t~string25.base, 1 + #t~string25.offset, 1);call write~init~int(117, #t~string25.base, 2 + #t~string25.offset, 1);call write~init~int(109, #t~string25.base, 3 + #t~string25.offset, 1);call write~init~int(112, #t~string25.base, 4 + #t~string25.offset, 1);call write~init~int(58, #t~string25.base, 5 + #t~string25.offset, 1);call write~init~int(0, #t~string25.base, 6 + #t~string25.offset, 1);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string27.base, #t~string27.offset, 1);call write~init~int(110, #t~string27.base, 1 + #t~string27.offset, 1);call write~init~int(0, #t~string27.base, 2 + #t~string27.offset, 1);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string29.base, #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 1 + #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 2 + #t~string29.offset, 1);call write~init~int(0, #t~string29.base, 3 + #t~string29.offset, 1);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string31.base, #t~string31.offset, 1);call write~init~int(32, #t~string31.base, 1 + #t~string31.offset, 1);call write~init~int(0, #t~string31.base, 2 + #t~string31.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string33.base, #t~string33.offset, 1);call write~init~int(0, #t~string33.base, 1 + #t~string33.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(21);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(30);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(9);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(25);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4; {9606#true} is VALID [2020-07-28 19:07:01,321 INFO L280 TraceCheckUtils]: 1: Hoare triple {9606#true} havoc main_#res;havoc main_#t~ret74, main_~retValue_acc~11, main_~tmp~10;havoc main_~retValue_acc~11;havoc main_~tmp~10; {9606#true} is VALID [2020-07-28 19:07:01,322 INFO L280 TraceCheckUtils]: 2: Hoare triple {9606#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~13;havoc valid_product_~retValue_acc~13;valid_product_~retValue_acc~13 := 1;valid_product_#res := valid_product_~retValue_acc~13; {9608#(= 1 |ULTIMATE.start_valid_product_#res|)} is VALID [2020-07-28 19:07:01,323 INFO L280 TraceCheckUtils]: 3: Hoare triple {9608#(= 1 |ULTIMATE.start_valid_product_#res|)} main_#t~ret74 := valid_product_#res;assume -2147483648 <= main_#t~ret74 && main_#t~ret74 <= 2147483647;main_~tmp~10 := main_#t~ret74;havoc main_#t~ret74; {9609#(= 1 ULTIMATE.start_main_~tmp~10)} is VALID [2020-07-28 19:07:01,323 INFO L280 TraceCheckUtils]: 4: Hoare triple {9609#(= 1 ULTIMATE.start_main_~tmp~10)} assume 0 != main_~tmp~10; {9606#true} is VALID [2020-07-28 19:07:01,323 INFO L280 TraceCheckUtils]: 5: Hoare triple {9606#true} ~switchedOnBeforeTS~0 := 0; {9606#true} is VALID [2020-07-28 19:07:01,323 INFO L280 TraceCheckUtils]: 6: Hoare triple {9606#true} havoc test_#t~nondet10, test_#t~nondet11, test_#t~nondet12, test_#t~nondet13, test_~splverifierCounter~0, test_~tmp~0, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~0;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {9606#true} is VALID [2020-07-28 19:07:01,323 INFO L280 TraceCheckUtils]: 7: Hoare triple {9606#true} assume !false; {9606#true} is VALID [2020-07-28 19:07:01,324 INFO L280 TraceCheckUtils]: 8: Hoare triple {9606#true} assume test_~splverifierCounter~0 < 4; {9606#true} is VALID [2020-07-28 19:07:01,324 INFO L280 TraceCheckUtils]: 9: Hoare triple {9606#true} assume -2147483648 <= test_#t~nondet10 && test_#t~nondet10 <= 2147483647;test_~tmp~0 := test_#t~nondet10;havoc test_#t~nondet10; {9606#true} is VALID [2020-07-28 19:07:01,324 INFO L280 TraceCheckUtils]: 10: Hoare triple {9606#true} assume 0 != test_~tmp~0; {9606#true} is VALID [2020-07-28 19:07:01,324 INFO L280 TraceCheckUtils]: 11: Hoare triple {9606#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {9606#true} is VALID [2020-07-28 19:07:01,325 INFO L280 TraceCheckUtils]: 12: Hoare triple {9606#true} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp___0~0 := test_#t~nondet11;havoc test_#t~nondet11; {9606#true} is VALID [2020-07-28 19:07:01,325 INFO L280 TraceCheckUtils]: 13: Hoare triple {9606#true} assume !(0 != test_~tmp___0~0); {9606#true} is VALID [2020-07-28 19:07:01,325 INFO L280 TraceCheckUtils]: 14: Hoare triple {9606#true} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___2~0 := test_#t~nondet12;havoc test_#t~nondet12; {9606#true} is VALID [2020-07-28 19:07:01,325 INFO L280 TraceCheckUtils]: 15: Hoare triple {9606#true} assume 0 != test_~tmp___2~0; {9606#true} is VALID [2020-07-28 19:07:01,325 INFO L280 TraceCheckUtils]: 16: Hoare triple {9606#true} havoc __utac_acc__Specification5_spec__2_#t~ret71;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {9606#true} is VALID [2020-07-28 19:07:01,326 INFO L280 TraceCheckUtils]: 17: Hoare triple {9606#true} __utac_acc__Specification5_spec__2_#t~ret71 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret71 && __utac_acc__Specification5_spec__2_#t~ret71 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret71;havoc __utac_acc__Specification5_spec__2_#t~ret71; {9606#true} is VALID [2020-07-28 19:07:01,326 INFO L280 TraceCheckUtils]: 18: Hoare triple {9606#true} assume !(0 != ~pumpRunning~0); {9606#true} is VALID [2020-07-28 19:07:01,326 INFO L280 TraceCheckUtils]: 19: Hoare triple {9606#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {9606#true} is VALID [2020-07-28 19:07:01,326 INFO L280 TraceCheckUtils]: 20: Hoare triple {9606#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {9606#true} is VALID [2020-07-28 19:07:01,326 INFO L280 TraceCheckUtils]: 21: Hoare triple {9606#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret34, isHighWaterLevel_~retValue_acc~6, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~6;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {9606#true} is VALID [2020-07-28 19:07:01,326 INFO L280 TraceCheckUtils]: 22: Hoare triple {9606#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {9606#true} is VALID [2020-07-28 19:07:01,327 INFO L280 TraceCheckUtils]: 23: Hoare triple {9606#true} isHighWaterLevel_#t~ret34 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret34 && isHighWaterLevel_#t~ret34 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret34;havoc isHighWaterLevel_#t~ret34; {9606#true} is VALID [2020-07-28 19:07:01,327 INFO L280 TraceCheckUtils]: 24: Hoare triple {9606#true} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {9606#true} is VALID [2020-07-28 19:07:01,327 INFO L280 TraceCheckUtils]: 25: Hoare triple {9606#true} isHighWaterLevel_~retValue_acc~6 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~6; {9606#true} is VALID [2020-07-28 19:07:01,328 INFO L280 TraceCheckUtils]: 26: Hoare triple {9606#true} processEnvironment__wrappee__highWaterSensor_#t~ret14 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret14 && processEnvironment__wrappee__highWaterSensor_#t~ret14 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~1 := processEnvironment__wrappee__highWaterSensor_#t~ret14;havoc processEnvironment__wrappee__highWaterSensor_#t~ret14; {9606#true} is VALID [2020-07-28 19:07:01,328 INFO L280 TraceCheckUtils]: 27: Hoare triple {9606#true} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc activatePump_#t~ret16, activatePump_~tmp~3;havoc activatePump_~tmp~3;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret17, isMethaneAlarm_~retValue_acc~4;havoc isMethaneAlarm_~retValue_acc~4;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {9606#true} is VALID [2020-07-28 19:07:01,328 INFO L280 TraceCheckUtils]: 28: Hoare triple {9606#true} isMethaneAlarm_#t~ret17 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret17 && isMethaneAlarm_#t~ret17 <= 2147483647;isMethaneAlarm_~retValue_acc~4 := isMethaneAlarm_#t~ret17;havoc isMethaneAlarm_#t~ret17;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~4; {9606#true} is VALID [2020-07-28 19:07:01,328 INFO L280 TraceCheckUtils]: 29: Hoare triple {9606#true} activatePump_#t~ret16 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret16 && activatePump_#t~ret16 <= 2147483647;activatePump_~tmp~3 := activatePump_#t~ret16;havoc activatePump_#t~ret16; {9606#true} is VALID [2020-07-28 19:07:01,329 INFO L280 TraceCheckUtils]: 30: Hoare triple {9606#true} assume !(0 != activatePump_~tmp~3);~pumpRunning~0 := 1; {9610#(not (= 0 ~pumpRunning~0))} is VALID [2020-07-28 19:07:01,330 INFO L280 TraceCheckUtils]: 31: Hoare triple {9610#(not (= 0 ~pumpRunning~0))} havoc __utac_acc__Specification5_spec__3_#t~ret72, __utac_acc__Specification5_spec__3_#t~ret73, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {9610#(not (= 0 ~pumpRunning~0))} is VALID [2020-07-28 19:07:01,331 INFO L280 TraceCheckUtils]: 32: Hoare triple {9610#(not (= 0 ~pumpRunning~0))} __utac_acc__Specification5_spec__3_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret72 && __utac_acc__Specification5_spec__3_#t~ret72 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret72;havoc __utac_acc__Specification5_spec__3_#t~ret72; {9610#(not (= 0 ~pumpRunning~0))} is VALID [2020-07-28 19:07:01,331 INFO L280 TraceCheckUtils]: 33: Hoare triple {9610#(not (= 0 ~pumpRunning~0))} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~9); {9610#(not (= 0 ~pumpRunning~0))} is VALID [2020-07-28 19:07:01,332 INFO L280 TraceCheckUtils]: 34: Hoare triple {9610#(not (= 0 ~pumpRunning~0))} assume !false; {9610#(not (= 0 ~pumpRunning~0))} is VALID [2020-07-28 19:07:01,332 INFO L280 TraceCheckUtils]: 35: Hoare triple {9610#(not (= 0 ~pumpRunning~0))} assume test_~splverifierCounter~0 < 4; {9610#(not (= 0 ~pumpRunning~0))} is VALID [2020-07-28 19:07:01,333 INFO L280 TraceCheckUtils]: 36: Hoare triple {9610#(not (= 0 ~pumpRunning~0))} assume -2147483648 <= test_#t~nondet10 && test_#t~nondet10 <= 2147483647;test_~tmp~0 := test_#t~nondet10;havoc test_#t~nondet10; {9610#(not (= 0 ~pumpRunning~0))} is VALID [2020-07-28 19:07:01,334 INFO L280 TraceCheckUtils]: 37: Hoare triple {9610#(not (= 0 ~pumpRunning~0))} assume !(0 != test_~tmp~0); {9610#(not (= 0 ~pumpRunning~0))} is VALID [2020-07-28 19:07:01,334 INFO L280 TraceCheckUtils]: 38: Hoare triple {9610#(not (= 0 ~pumpRunning~0))} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp___0~0 := test_#t~nondet11;havoc test_#t~nondet11; {9610#(not (= 0 ~pumpRunning~0))} is VALID [2020-07-28 19:07:01,335 INFO L280 TraceCheckUtils]: 39: Hoare triple {9610#(not (= 0 ~pumpRunning~0))} assume !(0 != test_~tmp___0~0); {9610#(not (= 0 ~pumpRunning~0))} is VALID [2020-07-28 19:07:01,336 INFO L280 TraceCheckUtils]: 40: Hoare triple {9610#(not (= 0 ~pumpRunning~0))} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___2~0 := test_#t~nondet12;havoc test_#t~nondet12; {9610#(not (= 0 ~pumpRunning~0))} is VALID [2020-07-28 19:07:01,336 INFO L280 TraceCheckUtils]: 41: Hoare triple {9610#(not (= 0 ~pumpRunning~0))} assume 0 != test_~tmp___2~0; {9610#(not (= 0 ~pumpRunning~0))} is VALID [2020-07-28 19:07:01,337 INFO L280 TraceCheckUtils]: 42: Hoare triple {9610#(not (= 0 ~pumpRunning~0))} havoc __utac_acc__Specification5_spec__2_#t~ret71;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {9611#(not (= 0 |ULTIMATE.start_isPumpRunning_#res|))} is VALID [2020-07-28 19:07:01,338 INFO L280 TraceCheckUtils]: 43: Hoare triple {9611#(not (= 0 |ULTIMATE.start_isPumpRunning_#res|))} __utac_acc__Specification5_spec__2_#t~ret71 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret71 && __utac_acc__Specification5_spec__2_#t~ret71 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret71;havoc __utac_acc__Specification5_spec__2_#t~ret71; {9612#(not (= 0 ~switchedOnBeforeTS~0))} is VALID [2020-07-28 19:07:01,338 INFO L280 TraceCheckUtils]: 44: Hoare triple {9612#(not (= 0 ~switchedOnBeforeTS~0))} assume 0 != ~pumpRunning~0; {9612#(not (= 0 ~switchedOnBeforeTS~0))} is VALID [2020-07-28 19:07:01,339 INFO L280 TraceCheckUtils]: 45: Hoare triple {9612#(not (= 0 ~switchedOnBeforeTS~0))} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {9612#(not (= 0 ~switchedOnBeforeTS~0))} is VALID [2020-07-28 19:07:01,339 INFO L280 TraceCheckUtils]: 46: Hoare triple {9612#(not (= 0 ~switchedOnBeforeTS~0))} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {9612#(not (= 0 ~switchedOnBeforeTS~0))} is VALID [2020-07-28 19:07:01,340 INFO L280 TraceCheckUtils]: 47: Hoare triple {9612#(not (= 0 ~switchedOnBeforeTS~0))} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret35, isLowWaterLevel_~retValue_acc~7, isLowWaterLevel_~tmp~5, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~7;havoc isLowWaterLevel_~tmp~5;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~3;havoc isLowWaterSensorDry_~retValue_acc~3;isLowWaterSensorDry_~retValue_acc~3 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~3; {9612#(not (= 0 ~switchedOnBeforeTS~0))} is VALID [2020-07-28 19:07:01,341 INFO L280 TraceCheckUtils]: 48: Hoare triple {9612#(not (= 0 ~switchedOnBeforeTS~0))} isLowWaterLevel_#t~ret35 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret35 && isLowWaterLevel_#t~ret35 <= 2147483647;isLowWaterLevel_~tmp~5 := isLowWaterLevel_#t~ret35;havoc isLowWaterLevel_#t~ret35; {9612#(not (= 0 ~switchedOnBeforeTS~0))} is VALID [2020-07-28 19:07:01,341 INFO L280 TraceCheckUtils]: 49: Hoare triple {9612#(not (= 0 ~switchedOnBeforeTS~0))} assume 0 != isLowWaterLevel_~tmp~5;isLowWaterLevel_~tmp___0~2 := 0; {9612#(not (= 0 ~switchedOnBeforeTS~0))} is VALID [2020-07-28 19:07:01,342 INFO L280 TraceCheckUtils]: 50: Hoare triple {9612#(not (= 0 ~switchedOnBeforeTS~0))} isLowWaterLevel_~retValue_acc~7 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~7; {9612#(not (= 0 ~switchedOnBeforeTS~0))} is VALID [2020-07-28 19:07:01,343 INFO L280 TraceCheckUtils]: 51: Hoare triple {9612#(not (= 0 ~switchedOnBeforeTS~0))} processEnvironment_#t~ret15 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret15 && processEnvironment_#t~ret15 <= 2147483647;processEnvironment_~tmp~2 := processEnvironment_#t~ret15;havoc processEnvironment_#t~ret15; {9612#(not (= 0 ~switchedOnBeforeTS~0))} is VALID [2020-07-28 19:07:01,343 INFO L280 TraceCheckUtils]: 52: Hoare triple {9612#(not (= 0 ~switchedOnBeforeTS~0))} assume !(0 != processEnvironment_~tmp~2);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {9612#(not (= 0 ~switchedOnBeforeTS~0))} is VALID [2020-07-28 19:07:01,344 INFO L280 TraceCheckUtils]: 53: Hoare triple {9612#(not (= 0 ~switchedOnBeforeTS~0))} assume !(0 == ~pumpRunning~0); {9612#(not (= 0 ~switchedOnBeforeTS~0))} is VALID [2020-07-28 19:07:01,344 INFO L280 TraceCheckUtils]: 54: Hoare triple {9612#(not (= 0 ~switchedOnBeforeTS~0))} havoc __utac_acc__Specification5_spec__3_#t~ret72, __utac_acc__Specification5_spec__3_#t~ret73, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {9612#(not (= 0 ~switchedOnBeforeTS~0))} is VALID [2020-07-28 19:07:01,345 INFO L280 TraceCheckUtils]: 55: Hoare triple {9612#(not (= 0 ~switchedOnBeforeTS~0))} __utac_acc__Specification5_spec__3_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret72 && __utac_acc__Specification5_spec__3_#t~ret72 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret72;havoc __utac_acc__Specification5_spec__3_#t~ret72; {9612#(not (= 0 ~switchedOnBeforeTS~0))} is VALID [2020-07-28 19:07:01,346 INFO L280 TraceCheckUtils]: 56: Hoare triple {9612#(not (= 0 ~switchedOnBeforeTS~0))} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {9612#(not (= 0 ~switchedOnBeforeTS~0))} is VALID [2020-07-28 19:07:01,346 INFO L280 TraceCheckUtils]: 57: Hoare triple {9612#(not (= 0 ~switchedOnBeforeTS~0))} __utac_acc__Specification5_spec__3_#t~ret73 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret73 && __utac_acc__Specification5_spec__3_#t~ret73 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret73;havoc __utac_acc__Specification5_spec__3_#t~ret73; {9612#(not (= 0 ~switchedOnBeforeTS~0))} is VALID [2020-07-28 19:07:01,347 INFO L280 TraceCheckUtils]: 58: Hoare triple {9612#(not (= 0 ~switchedOnBeforeTS~0))} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3; {9612#(not (= 0 ~switchedOnBeforeTS~0))} is VALID [2020-07-28 19:07:01,347 INFO L280 TraceCheckUtils]: 59: Hoare triple {9612#(not (= 0 ~switchedOnBeforeTS~0))} assume 0 == ~switchedOnBeforeTS~0; {9607#false} is VALID [2020-07-28 19:07:01,348 INFO L280 TraceCheckUtils]: 60: Hoare triple {9607#false} assume !false; {9607#false} is VALID [2020-07-28 19:07:01,353 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 13 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:07:01,353 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1208729154] [2020-07-28 19:07:01,354 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1867879415] [2020-07-28 19:07:01,354 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 2 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2020-07-28 19:07:01,470 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:07:01,473 INFO L263 TraceCheckSpWp]: Trace formula consists of 437 conjuncts, 5 conjunts are in the unsatisfiable core [2020-07-28 19:07:01,496 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:07:01,505 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2020-07-28 19:07:01,731 INFO L280 TraceCheckUtils]: 0: Hoare triple {9606#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(13);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string21.base, #t~string21.offset, 1);call write~init~int(110, #t~string21.base, 1 + #t~string21.offset, 1);call write~init~int(0, #t~string21.base, 2 + #t~string21.offset, 1);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string23.base, #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 1 + #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 2 + #t~string23.offset, 1);call write~init~int(0, #t~string23.base, 3 + #t~string23.offset, 1);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string25.base, #t~string25.offset, 1);call write~init~int(80, #t~string25.base, 1 + #t~string25.offset, 1);call write~init~int(117, #t~string25.base, 2 + #t~string25.offset, 1);call write~init~int(109, #t~string25.base, 3 + #t~string25.offset, 1);call write~init~int(112, #t~string25.base, 4 + #t~string25.offset, 1);call write~init~int(58, #t~string25.base, 5 + #t~string25.offset, 1);call write~init~int(0, #t~string25.base, 6 + #t~string25.offset, 1);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string27.base, #t~string27.offset, 1);call write~init~int(110, #t~string27.base, 1 + #t~string27.offset, 1);call write~init~int(0, #t~string27.base, 2 + #t~string27.offset, 1);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string29.base, #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 1 + #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 2 + #t~string29.offset, 1);call write~init~int(0, #t~string29.base, 3 + #t~string29.offset, 1);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string31.base, #t~string31.offset, 1);call write~init~int(32, #t~string31.base, 1 + #t~string31.offset, 1);call write~init~int(0, #t~string31.base, 2 + #t~string31.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string33.base, #t~string33.offset, 1);call write~init~int(0, #t~string33.base, 1 + #t~string33.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(21);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(30);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(9);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(25);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4; {9606#true} is VALID [2020-07-28 19:07:01,731 INFO L280 TraceCheckUtils]: 1: Hoare triple {9606#true} havoc main_#res;havoc main_#t~ret74, main_~retValue_acc~11, main_~tmp~10;havoc main_~retValue_acc~11;havoc main_~tmp~10; {9606#true} is VALID [2020-07-28 19:07:01,732 INFO L280 TraceCheckUtils]: 2: Hoare triple {9606#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~13;havoc valid_product_~retValue_acc~13;valid_product_~retValue_acc~13 := 1;valid_product_#res := valid_product_~retValue_acc~13; {9606#true} is VALID [2020-07-28 19:07:01,732 INFO L280 TraceCheckUtils]: 3: Hoare triple {9606#true} main_#t~ret74 := valid_product_#res;assume -2147483648 <= main_#t~ret74 && main_#t~ret74 <= 2147483647;main_~tmp~10 := main_#t~ret74;havoc main_#t~ret74; {9606#true} is VALID [2020-07-28 19:07:01,732 INFO L280 TraceCheckUtils]: 4: Hoare triple {9606#true} assume 0 != main_~tmp~10; {9606#true} is VALID [2020-07-28 19:07:01,732 INFO L280 TraceCheckUtils]: 5: Hoare triple {9606#true} ~switchedOnBeforeTS~0 := 0; {9606#true} is VALID [2020-07-28 19:07:01,732 INFO L280 TraceCheckUtils]: 6: Hoare triple {9606#true} havoc test_#t~nondet10, test_#t~nondet11, test_#t~nondet12, test_#t~nondet13, test_~splverifierCounter~0, test_~tmp~0, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~0;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {9606#true} is VALID [2020-07-28 19:07:01,733 INFO L280 TraceCheckUtils]: 7: Hoare triple {9606#true} assume !false; {9606#true} is VALID [2020-07-28 19:07:01,733 INFO L280 TraceCheckUtils]: 8: Hoare triple {9606#true} assume test_~splverifierCounter~0 < 4; {9606#true} is VALID [2020-07-28 19:07:01,733 INFO L280 TraceCheckUtils]: 9: Hoare triple {9606#true} assume -2147483648 <= test_#t~nondet10 && test_#t~nondet10 <= 2147483647;test_~tmp~0 := test_#t~nondet10;havoc test_#t~nondet10; {9606#true} is VALID [2020-07-28 19:07:01,733 INFO L280 TraceCheckUtils]: 10: Hoare triple {9606#true} assume 0 != test_~tmp~0; {9606#true} is VALID [2020-07-28 19:07:01,734 INFO L280 TraceCheckUtils]: 11: Hoare triple {9606#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {9606#true} is VALID [2020-07-28 19:07:01,734 INFO L280 TraceCheckUtils]: 12: Hoare triple {9606#true} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp___0~0 := test_#t~nondet11;havoc test_#t~nondet11; {9606#true} is VALID [2020-07-28 19:07:01,734 INFO L280 TraceCheckUtils]: 13: Hoare triple {9606#true} assume !(0 != test_~tmp___0~0); {9606#true} is VALID [2020-07-28 19:07:01,734 INFO L280 TraceCheckUtils]: 14: Hoare triple {9606#true} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___2~0 := test_#t~nondet12;havoc test_#t~nondet12; {9606#true} is VALID [2020-07-28 19:07:01,734 INFO L280 TraceCheckUtils]: 15: Hoare triple {9606#true} assume 0 != test_~tmp___2~0; {9606#true} is VALID [2020-07-28 19:07:01,735 INFO L280 TraceCheckUtils]: 16: Hoare triple {9606#true} havoc __utac_acc__Specification5_spec__2_#t~ret71;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {9606#true} is VALID [2020-07-28 19:07:01,735 INFO L280 TraceCheckUtils]: 17: Hoare triple {9606#true} __utac_acc__Specification5_spec__2_#t~ret71 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret71 && __utac_acc__Specification5_spec__2_#t~ret71 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret71;havoc __utac_acc__Specification5_spec__2_#t~ret71; {9606#true} is VALID [2020-07-28 19:07:01,735 INFO L280 TraceCheckUtils]: 18: Hoare triple {9606#true} assume !(0 != ~pumpRunning~0); {9606#true} is VALID [2020-07-28 19:07:01,735 INFO L280 TraceCheckUtils]: 19: Hoare triple {9606#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {9606#true} is VALID [2020-07-28 19:07:01,736 INFO L280 TraceCheckUtils]: 20: Hoare triple {9606#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {9606#true} is VALID [2020-07-28 19:07:01,736 INFO L280 TraceCheckUtils]: 21: Hoare triple {9606#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret34, isHighWaterLevel_~retValue_acc~6, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~6;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {9606#true} is VALID [2020-07-28 19:07:01,736 INFO L280 TraceCheckUtils]: 22: Hoare triple {9606#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {9606#true} is VALID [2020-07-28 19:07:01,737 INFO L280 TraceCheckUtils]: 23: Hoare triple {9606#true} isHighWaterLevel_#t~ret34 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret34 && isHighWaterLevel_#t~ret34 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret34;havoc isHighWaterLevel_#t~ret34; {9606#true} is VALID [2020-07-28 19:07:01,737 INFO L280 TraceCheckUtils]: 24: Hoare triple {9606#true} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {9606#true} is VALID [2020-07-28 19:07:01,737 INFO L280 TraceCheckUtils]: 25: Hoare triple {9606#true} isHighWaterLevel_~retValue_acc~6 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~6; {9606#true} is VALID [2020-07-28 19:07:01,737 INFO L280 TraceCheckUtils]: 26: Hoare triple {9606#true} processEnvironment__wrappee__highWaterSensor_#t~ret14 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret14 && processEnvironment__wrappee__highWaterSensor_#t~ret14 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~1 := processEnvironment__wrappee__highWaterSensor_#t~ret14;havoc processEnvironment__wrappee__highWaterSensor_#t~ret14; {9606#true} is VALID [2020-07-28 19:07:01,738 INFO L280 TraceCheckUtils]: 27: Hoare triple {9606#true} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc activatePump_#t~ret16, activatePump_~tmp~3;havoc activatePump_~tmp~3;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret17, isMethaneAlarm_~retValue_acc~4;havoc isMethaneAlarm_~retValue_acc~4;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {9606#true} is VALID [2020-07-28 19:07:01,738 INFO L280 TraceCheckUtils]: 28: Hoare triple {9606#true} isMethaneAlarm_#t~ret17 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret17 && isMethaneAlarm_#t~ret17 <= 2147483647;isMethaneAlarm_~retValue_acc~4 := isMethaneAlarm_#t~ret17;havoc isMethaneAlarm_#t~ret17;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~4; {9606#true} is VALID [2020-07-28 19:07:01,738 INFO L280 TraceCheckUtils]: 29: Hoare triple {9606#true} activatePump_#t~ret16 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret16 && activatePump_#t~ret16 <= 2147483647;activatePump_~tmp~3 := activatePump_#t~ret16;havoc activatePump_#t~ret16; {9606#true} is VALID [2020-07-28 19:07:01,739 INFO L280 TraceCheckUtils]: 30: Hoare triple {9606#true} assume !(0 != activatePump_~tmp~3);~pumpRunning~0 := 1; {9706#(<= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:07:01,740 INFO L280 TraceCheckUtils]: 31: Hoare triple {9706#(<= 1 ~pumpRunning~0)} havoc __utac_acc__Specification5_spec__3_#t~ret72, __utac_acc__Specification5_spec__3_#t~ret73, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {9706#(<= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:07:01,740 INFO L280 TraceCheckUtils]: 32: Hoare triple {9706#(<= 1 ~pumpRunning~0)} __utac_acc__Specification5_spec__3_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret72 && __utac_acc__Specification5_spec__3_#t~ret72 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret72;havoc __utac_acc__Specification5_spec__3_#t~ret72; {9706#(<= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:07:01,741 INFO L280 TraceCheckUtils]: 33: Hoare triple {9706#(<= 1 ~pumpRunning~0)} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~9); {9706#(<= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:07:01,742 INFO L280 TraceCheckUtils]: 34: Hoare triple {9706#(<= 1 ~pumpRunning~0)} assume !false; {9706#(<= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:07:01,742 INFO L280 TraceCheckUtils]: 35: Hoare triple {9706#(<= 1 ~pumpRunning~0)} assume test_~splverifierCounter~0 < 4; {9706#(<= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:07:01,743 INFO L280 TraceCheckUtils]: 36: Hoare triple {9706#(<= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet10 && test_#t~nondet10 <= 2147483647;test_~tmp~0 := test_#t~nondet10;havoc test_#t~nondet10; {9706#(<= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:07:01,744 INFO L280 TraceCheckUtils]: 37: Hoare triple {9706#(<= 1 ~pumpRunning~0)} assume !(0 != test_~tmp~0); {9706#(<= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:07:01,744 INFO L280 TraceCheckUtils]: 38: Hoare triple {9706#(<= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp___0~0 := test_#t~nondet11;havoc test_#t~nondet11; {9706#(<= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:07:01,745 INFO L280 TraceCheckUtils]: 39: Hoare triple {9706#(<= 1 ~pumpRunning~0)} assume !(0 != test_~tmp___0~0); {9706#(<= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:07:01,745 INFO L280 TraceCheckUtils]: 40: Hoare triple {9706#(<= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___2~0 := test_#t~nondet12;havoc test_#t~nondet12; {9706#(<= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:07:01,746 INFO L280 TraceCheckUtils]: 41: Hoare triple {9706#(<= 1 ~pumpRunning~0)} assume 0 != test_~tmp___2~0; {9706#(<= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:07:01,747 INFO L280 TraceCheckUtils]: 42: Hoare triple {9706#(<= 1 ~pumpRunning~0)} havoc __utac_acc__Specification5_spec__2_#t~ret71;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {9743#(<= 1 |ULTIMATE.start_isPumpRunning_#res|)} is VALID [2020-07-28 19:07:01,748 INFO L280 TraceCheckUtils]: 43: Hoare triple {9743#(<= 1 |ULTIMATE.start_isPumpRunning_#res|)} __utac_acc__Specification5_spec__2_#t~ret71 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret71 && __utac_acc__Specification5_spec__2_#t~ret71 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret71;havoc __utac_acc__Specification5_spec__2_#t~ret71; {9747#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2020-07-28 19:07:01,748 INFO L280 TraceCheckUtils]: 44: Hoare triple {9747#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != ~pumpRunning~0; {9747#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2020-07-28 19:07:01,749 INFO L280 TraceCheckUtils]: 45: Hoare triple {9747#(<= 1 ~switchedOnBeforeTS~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {9747#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2020-07-28 19:07:01,751 INFO L280 TraceCheckUtils]: 46: Hoare triple {9747#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {9747#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2020-07-28 19:07:01,752 INFO L280 TraceCheckUtils]: 47: Hoare triple {9747#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret35, isLowWaterLevel_~retValue_acc~7, isLowWaterLevel_~tmp~5, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~7;havoc isLowWaterLevel_~tmp~5;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~3;havoc isLowWaterSensorDry_~retValue_acc~3;isLowWaterSensorDry_~retValue_acc~3 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~3; {9747#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2020-07-28 19:07:01,753 INFO L280 TraceCheckUtils]: 48: Hoare triple {9747#(<= 1 ~switchedOnBeforeTS~0)} isLowWaterLevel_#t~ret35 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret35 && isLowWaterLevel_#t~ret35 <= 2147483647;isLowWaterLevel_~tmp~5 := isLowWaterLevel_#t~ret35;havoc isLowWaterLevel_#t~ret35; {9747#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2020-07-28 19:07:01,754 INFO L280 TraceCheckUtils]: 49: Hoare triple {9747#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != isLowWaterLevel_~tmp~5;isLowWaterLevel_~tmp___0~2 := 0; {9747#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2020-07-28 19:07:01,755 INFO L280 TraceCheckUtils]: 50: Hoare triple {9747#(<= 1 ~switchedOnBeforeTS~0)} isLowWaterLevel_~retValue_acc~7 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~7; {9747#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2020-07-28 19:07:01,756 INFO L280 TraceCheckUtils]: 51: Hoare triple {9747#(<= 1 ~switchedOnBeforeTS~0)} processEnvironment_#t~ret15 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret15 && processEnvironment_#t~ret15 <= 2147483647;processEnvironment_~tmp~2 := processEnvironment_#t~ret15;havoc processEnvironment_#t~ret15; {9747#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2020-07-28 19:07:01,759 INFO L280 TraceCheckUtils]: 52: Hoare triple {9747#(<= 1 ~switchedOnBeforeTS~0)} assume !(0 != processEnvironment_~tmp~2);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {9747#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2020-07-28 19:07:01,759 INFO L280 TraceCheckUtils]: 53: Hoare triple {9747#(<= 1 ~switchedOnBeforeTS~0)} assume !(0 == ~pumpRunning~0); {9747#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2020-07-28 19:07:01,760 INFO L280 TraceCheckUtils]: 54: Hoare triple {9747#(<= 1 ~switchedOnBeforeTS~0)} havoc __utac_acc__Specification5_spec__3_#t~ret72, __utac_acc__Specification5_spec__3_#t~ret73, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {9747#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2020-07-28 19:07:01,761 INFO L280 TraceCheckUtils]: 55: Hoare triple {9747#(<= 1 ~switchedOnBeforeTS~0)} __utac_acc__Specification5_spec__3_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret72 && __utac_acc__Specification5_spec__3_#t~ret72 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret72;havoc __utac_acc__Specification5_spec__3_#t~ret72; {9747#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2020-07-28 19:07:01,761 INFO L280 TraceCheckUtils]: 56: Hoare triple {9747#(<= 1 ~switchedOnBeforeTS~0)} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {9747#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2020-07-28 19:07:01,762 INFO L280 TraceCheckUtils]: 57: Hoare triple {9747#(<= 1 ~switchedOnBeforeTS~0)} __utac_acc__Specification5_spec__3_#t~ret73 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret73 && __utac_acc__Specification5_spec__3_#t~ret73 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret73;havoc __utac_acc__Specification5_spec__3_#t~ret73; {9747#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2020-07-28 19:07:01,762 INFO L280 TraceCheckUtils]: 58: Hoare triple {9747#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3; {9747#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2020-07-28 19:07:01,763 INFO L280 TraceCheckUtils]: 59: Hoare triple {9747#(<= 1 ~switchedOnBeforeTS~0)} assume 0 == ~switchedOnBeforeTS~0; {9607#false} is VALID [2020-07-28 19:07:01,763 INFO L280 TraceCheckUtils]: 60: Hoare triple {9607#false} assume !false; {9607#false} is VALID [2020-07-28 19:07:01,768 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 13 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:07:01,769 INFO L220 FreeRefinementEngine]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2020-07-28 19:07:01,769 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 5] total 10 [2020-07-28 19:07:01,769 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1169328645] [2020-07-28 19:07:01,771 INFO L78 Accepts]: Start accepts. Automaton has 10 states. Word has length 61 [2020-07-28 19:07:01,771 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:07:01,771 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 10 states. [2020-07-28 19:07:01,885 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 94 edges. 94 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:07:01,885 INFO L459 AbstractCegarLoop]: Interpolant automaton has 10 states [2020-07-28 19:07:01,885 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:07:01,885 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2020-07-28 19:07:01,885 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=70, Unknown=0, NotChecked=0, Total=90 [2020-07-28 19:07:01,886 INFO L87 Difference]: Start difference. First operand 268 states and 354 transitions. Second operand 10 states. [2020-07-28 19:07:04,469 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:07:04,470 INFO L93 Difference]: Finished difference Result 666 states and 895 transitions. [2020-07-28 19:07:04,470 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2020-07-28 19:07:04,470 INFO L78 Accepts]: Start accepts. Automaton has 10 states. Word has length 61 [2020-07-28 19:07:04,471 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:07:04,471 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 10 states. [2020-07-28 19:07:04,474 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 298 transitions. [2020-07-28 19:07:04,474 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 10 states. [2020-07-28 19:07:04,476 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 298 transitions. [2020-07-28 19:07:04,476 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 13 states and 298 transitions. [2020-07-28 19:07:04,860 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 298 edges. 298 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:07:04,875 INFO L225 Difference]: With dead ends: 666 [2020-07-28 19:07:04,875 INFO L226 Difference]: Without dead ends: 405 [2020-07-28 19:07:04,876 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 85 GetRequests, 67 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 49 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=120, Invalid=260, Unknown=0, NotChecked=0, Total=380 [2020-07-28 19:07:04,877 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 405 states. [2020-07-28 19:07:05,485 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 405 to 254. [2020-07-28 19:07:05,486 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:07:05,486 INFO L82 GeneralOperation]: Start isEquivalent. First operand 405 states. Second operand 254 states. [2020-07-28 19:07:05,486 INFO L74 IsIncluded]: Start isIncluded. First operand 405 states. Second operand 254 states. [2020-07-28 19:07:05,486 INFO L87 Difference]: Start difference. First operand 405 states. Second operand 254 states. [2020-07-28 19:07:05,498 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:07:05,498 INFO L93 Difference]: Finished difference Result 405 states and 532 transitions. [2020-07-28 19:07:05,498 INFO L276 IsEmpty]: Start isEmpty. Operand 405 states and 532 transitions. [2020-07-28 19:07:05,499 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:07:05,499 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:07:05,500 INFO L74 IsIncluded]: Start isIncluded. First operand 254 states. Second operand 405 states. [2020-07-28 19:07:05,500 INFO L87 Difference]: Start difference. First operand 254 states. Second operand 405 states. [2020-07-28 19:07:05,513 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:07:05,514 INFO L93 Difference]: Finished difference Result 405 states and 532 transitions. [2020-07-28 19:07:05,514 INFO L276 IsEmpty]: Start isEmpty. Operand 405 states and 532 transitions. [2020-07-28 19:07:05,515 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:07:05,515 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:07:05,515 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:07:05,516 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:07:05,516 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 254 states. [2020-07-28 19:07:05,522 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 254 states to 254 states and 327 transitions. [2020-07-28 19:07:05,522 INFO L78 Accepts]: Start accepts. Automaton has 254 states and 327 transitions. Word has length 61 [2020-07-28 19:07:05,522 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:07:05,523 INFO L479 AbstractCegarLoop]: Abstraction has 254 states and 327 transitions. [2020-07-28 19:07:05,523 INFO L480 AbstractCegarLoop]: Interpolant automaton has 10 states. [2020-07-28 19:07:05,523 INFO L276 IsEmpty]: Start isEmpty. Operand 254 states and 327 transitions. [2020-07-28 19:07:05,524 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 110 [2020-07-28 19:07:05,524 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:07:05,524 INFO L422 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:07:05,739 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2020-07-28 19:07:05,740 INFO L427 AbstractCegarLoop]: === Iteration 11 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:07:05,740 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:07:05,741 INFO L82 PathProgramCache]: Analyzing trace with hash 1364127848, now seen corresponding path program 1 times [2020-07-28 19:07:05,741 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:07:05,741 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [566480771] [2020-07-28 19:07:05,741 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:07:05,778 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:07:05,886 INFO L280 TraceCheckUtils]: 0: Hoare triple {11964#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(13);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string21.base, #t~string21.offset, 1);call write~init~int(110, #t~string21.base, 1 + #t~string21.offset, 1);call write~init~int(0, #t~string21.base, 2 + #t~string21.offset, 1);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string23.base, #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 1 + #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 2 + #t~string23.offset, 1);call write~init~int(0, #t~string23.base, 3 + #t~string23.offset, 1);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string25.base, #t~string25.offset, 1);call write~init~int(80, #t~string25.base, 1 + #t~string25.offset, 1);call write~init~int(117, #t~string25.base, 2 + #t~string25.offset, 1);call write~init~int(109, #t~string25.base, 3 + #t~string25.offset, 1);call write~init~int(112, #t~string25.base, 4 + #t~string25.offset, 1);call write~init~int(58, #t~string25.base, 5 + #t~string25.offset, 1);call write~init~int(0, #t~string25.base, 6 + #t~string25.offset, 1);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string27.base, #t~string27.offset, 1);call write~init~int(110, #t~string27.base, 1 + #t~string27.offset, 1);call write~init~int(0, #t~string27.base, 2 + #t~string27.offset, 1);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string29.base, #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 1 + #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 2 + #t~string29.offset, 1);call write~init~int(0, #t~string29.base, 3 + #t~string29.offset, 1);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string31.base, #t~string31.offset, 1);call write~init~int(32, #t~string31.base, 1 + #t~string31.offset, 1);call write~init~int(0, #t~string31.base, 2 + #t~string31.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string33.base, #t~string33.offset, 1);call write~init~int(0, #t~string33.base, 1 + #t~string33.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(21);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(30);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(9);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(25);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4; {11966#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:07:05,887 INFO L280 TraceCheckUtils]: 1: Hoare triple {11966#(= 1 ~waterLevel~0)} havoc main_#res;havoc main_#t~ret74, main_~retValue_acc~11, main_~tmp~10;havoc main_~retValue_acc~11;havoc main_~tmp~10; {11966#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:07:05,888 INFO L280 TraceCheckUtils]: 2: Hoare triple {11966#(= 1 ~waterLevel~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~13;havoc valid_product_~retValue_acc~13;valid_product_~retValue_acc~13 := 1;valid_product_#res := valid_product_~retValue_acc~13; {11966#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:07:05,888 INFO L280 TraceCheckUtils]: 3: Hoare triple {11966#(= 1 ~waterLevel~0)} main_#t~ret74 := valid_product_#res;assume -2147483648 <= main_#t~ret74 && main_#t~ret74 <= 2147483647;main_~tmp~10 := main_#t~ret74;havoc main_#t~ret74; {11966#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:07:05,889 INFO L280 TraceCheckUtils]: 4: Hoare triple {11966#(= 1 ~waterLevel~0)} assume 0 != main_~tmp~10; {11966#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:07:05,889 INFO L280 TraceCheckUtils]: 5: Hoare triple {11966#(= 1 ~waterLevel~0)} ~switchedOnBeforeTS~0 := 0; {11966#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:07:05,890 INFO L280 TraceCheckUtils]: 6: Hoare triple {11966#(= 1 ~waterLevel~0)} havoc test_#t~nondet10, test_#t~nondet11, test_#t~nondet12, test_#t~nondet13, test_~splverifierCounter~0, test_~tmp~0, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~0;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {11966#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:07:05,890 INFO L280 TraceCheckUtils]: 7: Hoare triple {11966#(= 1 ~waterLevel~0)} assume !false; {11966#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:07:05,891 INFO L280 TraceCheckUtils]: 8: Hoare triple {11966#(= 1 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {11966#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:07:05,891 INFO L280 TraceCheckUtils]: 9: Hoare triple {11966#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet10 && test_#t~nondet10 <= 2147483647;test_~tmp~0 := test_#t~nondet10;havoc test_#t~nondet10; {11966#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:07:05,892 INFO L280 TraceCheckUtils]: 10: Hoare triple {11966#(= 1 ~waterLevel~0)} assume 0 != test_~tmp~0; {11966#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:07:05,893 INFO L280 TraceCheckUtils]: 11: Hoare triple {11966#(= 1 ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {11967#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:05,893 INFO L280 TraceCheckUtils]: 12: Hoare triple {11967#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp___0~0 := test_#t~nondet11;havoc test_#t~nondet11; {11967#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:05,894 INFO L280 TraceCheckUtils]: 13: Hoare triple {11967#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___0~0); {11967#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:05,894 INFO L280 TraceCheckUtils]: 14: Hoare triple {11967#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___2~0 := test_#t~nondet12;havoc test_#t~nondet12; {11967#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:05,895 INFO L280 TraceCheckUtils]: 15: Hoare triple {11967#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0; {11967#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:05,895 INFO L280 TraceCheckUtils]: 16: Hoare triple {11967#(<= ~waterLevel~0 2)} havoc __utac_acc__Specification5_spec__2_#t~ret71;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {11967#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:05,896 INFO L280 TraceCheckUtils]: 17: Hoare triple {11967#(<= ~waterLevel~0 2)} __utac_acc__Specification5_spec__2_#t~ret71 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret71 && __utac_acc__Specification5_spec__2_#t~ret71 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret71;havoc __utac_acc__Specification5_spec__2_#t~ret71; {11967#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:05,897 INFO L280 TraceCheckUtils]: 18: Hoare triple {11967#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0); {11967#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:05,897 INFO L280 TraceCheckUtils]: 19: Hoare triple {11967#(<= ~waterLevel~0 2)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {11967#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:05,898 INFO L280 TraceCheckUtils]: 20: Hoare triple {11967#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {11967#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:05,899 INFO L280 TraceCheckUtils]: 21: Hoare triple {11967#(<= ~waterLevel~0 2)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret34, isHighWaterLevel_~retValue_acc~6, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~6;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {11967#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:05,899 INFO L280 TraceCheckUtils]: 22: Hoare triple {11967#(<= ~waterLevel~0 2)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {11967#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:05,900 INFO L280 TraceCheckUtils]: 23: Hoare triple {11967#(<= ~waterLevel~0 2)} isHighWaterLevel_#t~ret34 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret34 && isHighWaterLevel_#t~ret34 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret34;havoc isHighWaterLevel_#t~ret34; {11967#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:05,900 INFO L280 TraceCheckUtils]: 24: Hoare triple {11967#(<= ~waterLevel~0 2)} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {11967#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:05,901 INFO L280 TraceCheckUtils]: 25: Hoare triple {11967#(<= ~waterLevel~0 2)} isHighWaterLevel_~retValue_acc~6 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~6; {11967#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:05,901 INFO L280 TraceCheckUtils]: 26: Hoare triple {11967#(<= ~waterLevel~0 2)} processEnvironment__wrappee__highWaterSensor_#t~ret14 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret14 && processEnvironment__wrappee__highWaterSensor_#t~ret14 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~1 := processEnvironment__wrappee__highWaterSensor_#t~ret14;havoc processEnvironment__wrappee__highWaterSensor_#t~ret14; {11967#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:05,902 INFO L280 TraceCheckUtils]: 27: Hoare triple {11967#(<= ~waterLevel~0 2)} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc activatePump_#t~ret16, activatePump_~tmp~3;havoc activatePump_~tmp~3;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret17, isMethaneAlarm_~retValue_acc~4;havoc isMethaneAlarm_~retValue_acc~4;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {11967#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:05,903 INFO L280 TraceCheckUtils]: 28: Hoare triple {11967#(<= ~waterLevel~0 2)} isMethaneAlarm_#t~ret17 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret17 && isMethaneAlarm_#t~ret17 <= 2147483647;isMethaneAlarm_~retValue_acc~4 := isMethaneAlarm_#t~ret17;havoc isMethaneAlarm_#t~ret17;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~4; {11967#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:05,903 INFO L280 TraceCheckUtils]: 29: Hoare triple {11967#(<= ~waterLevel~0 2)} activatePump_#t~ret16 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret16 && activatePump_#t~ret16 <= 2147483647;activatePump_~tmp~3 := activatePump_#t~ret16;havoc activatePump_#t~ret16; {11967#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:05,904 INFO L280 TraceCheckUtils]: 30: Hoare triple {11967#(<= ~waterLevel~0 2)} assume !(0 != activatePump_~tmp~3);~pumpRunning~0 := 1; {11967#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:05,904 INFO L280 TraceCheckUtils]: 31: Hoare triple {11967#(<= ~waterLevel~0 2)} havoc __utac_acc__Specification5_spec__3_#t~ret72, __utac_acc__Specification5_spec__3_#t~ret73, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {11967#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:05,905 INFO L280 TraceCheckUtils]: 32: Hoare triple {11967#(<= ~waterLevel~0 2)} __utac_acc__Specification5_spec__3_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret72 && __utac_acc__Specification5_spec__3_#t~ret72 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret72;havoc __utac_acc__Specification5_spec__3_#t~ret72; {11968#(or (<= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9) (not (= 2 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9)))} is VALID [2020-07-28 19:07:05,906 INFO L280 TraceCheckUtils]: 33: Hoare triple {11968#(or (<= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9) (not (= 2 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9)))} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~9); {11967#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:05,906 INFO L280 TraceCheckUtils]: 34: Hoare triple {11967#(<= ~waterLevel~0 2)} assume !false; {11967#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:05,907 INFO L280 TraceCheckUtils]: 35: Hoare triple {11967#(<= ~waterLevel~0 2)} assume test_~splverifierCounter~0 < 4; {11967#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:05,907 INFO L280 TraceCheckUtils]: 36: Hoare triple {11967#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet10 && test_#t~nondet10 <= 2147483647;test_~tmp~0 := test_#t~nondet10;havoc test_#t~nondet10; {11967#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:05,908 INFO L280 TraceCheckUtils]: 37: Hoare triple {11967#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp~0); {11967#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:05,909 INFO L280 TraceCheckUtils]: 38: Hoare triple {11967#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp___0~0 := test_#t~nondet11;havoc test_#t~nondet11; {11967#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:05,909 INFO L280 TraceCheckUtils]: 39: Hoare triple {11967#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___0~0); {11967#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:05,910 INFO L280 TraceCheckUtils]: 40: Hoare triple {11967#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___2~0 := test_#t~nondet12;havoc test_#t~nondet12; {11967#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:05,910 INFO L280 TraceCheckUtils]: 41: Hoare triple {11967#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0; {11967#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:05,913 INFO L280 TraceCheckUtils]: 42: Hoare triple {11967#(<= ~waterLevel~0 2)} havoc __utac_acc__Specification5_spec__2_#t~ret71;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {11967#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:05,914 INFO L280 TraceCheckUtils]: 43: Hoare triple {11967#(<= ~waterLevel~0 2)} __utac_acc__Specification5_spec__2_#t~ret71 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret71 && __utac_acc__Specification5_spec__2_#t~ret71 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret71;havoc __utac_acc__Specification5_spec__2_#t~ret71; {11967#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:05,915 INFO L280 TraceCheckUtils]: 44: Hoare triple {11967#(<= ~waterLevel~0 2)} assume 0 != ~pumpRunning~0; {11967#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:05,915 INFO L280 TraceCheckUtils]: 45: Hoare triple {11967#(<= ~waterLevel~0 2)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {11969#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:05,916 INFO L280 TraceCheckUtils]: 46: Hoare triple {11969#(<= ~waterLevel~0 1)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {11969#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:05,917 INFO L280 TraceCheckUtils]: 47: Hoare triple {11969#(<= ~waterLevel~0 1)} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret35, isLowWaterLevel_~retValue_acc~7, isLowWaterLevel_~tmp~5, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~7;havoc isLowWaterLevel_~tmp~5;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~3;havoc isLowWaterSensorDry_~retValue_acc~3;isLowWaterSensorDry_~retValue_acc~3 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~3; {11969#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:05,917 INFO L280 TraceCheckUtils]: 48: Hoare triple {11969#(<= ~waterLevel~0 1)} isLowWaterLevel_#t~ret35 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret35 && isLowWaterLevel_#t~ret35 <= 2147483647;isLowWaterLevel_~tmp~5 := isLowWaterLevel_#t~ret35;havoc isLowWaterLevel_#t~ret35; {11969#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:05,918 INFO L280 TraceCheckUtils]: 49: Hoare triple {11969#(<= ~waterLevel~0 1)} assume 0 != isLowWaterLevel_~tmp~5;isLowWaterLevel_~tmp___0~2 := 0; {11969#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:05,918 INFO L280 TraceCheckUtils]: 50: Hoare triple {11969#(<= ~waterLevel~0 1)} isLowWaterLevel_~retValue_acc~7 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~7; {11969#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:05,919 INFO L280 TraceCheckUtils]: 51: Hoare triple {11969#(<= ~waterLevel~0 1)} processEnvironment_#t~ret15 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret15 && processEnvironment_#t~ret15 <= 2147483647;processEnvironment_~tmp~2 := processEnvironment_#t~ret15;havoc processEnvironment_#t~ret15; {11969#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:05,919 INFO L280 TraceCheckUtils]: 52: Hoare triple {11969#(<= ~waterLevel~0 1)} assume !(0 != processEnvironment_~tmp~2);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {11969#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:05,920 INFO L280 TraceCheckUtils]: 53: Hoare triple {11969#(<= ~waterLevel~0 1)} assume !(0 == ~pumpRunning~0); {11969#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:05,921 INFO L280 TraceCheckUtils]: 54: Hoare triple {11969#(<= ~waterLevel~0 1)} havoc __utac_acc__Specification5_spec__3_#t~ret72, __utac_acc__Specification5_spec__3_#t~ret73, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {11970#(not (= 2 |ULTIMATE.start_getWaterLevel_#res|))} is VALID [2020-07-28 19:07:05,921 INFO L280 TraceCheckUtils]: 55: Hoare triple {11970#(not (= 2 |ULTIMATE.start_getWaterLevel_#res|))} __utac_acc__Specification5_spec__3_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret72 && __utac_acc__Specification5_spec__3_#t~ret72 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret72;havoc __utac_acc__Specification5_spec__3_#t~ret72; {11971#(not (= 2 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9))} is VALID [2020-07-28 19:07:05,922 INFO L280 TraceCheckUtils]: 56: Hoare triple {11971#(not (= 2 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9))} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~9); {11965#false} is VALID [2020-07-28 19:07:05,922 INFO L280 TraceCheckUtils]: 57: Hoare triple {11965#false} assume !false; {11965#false} is VALID [2020-07-28 19:07:05,922 INFO L280 TraceCheckUtils]: 58: Hoare triple {11965#false} assume test_~splverifierCounter~0 < 4; {11965#false} is VALID [2020-07-28 19:07:05,923 INFO L280 TraceCheckUtils]: 59: Hoare triple {11965#false} assume -2147483648 <= test_#t~nondet10 && test_#t~nondet10 <= 2147483647;test_~tmp~0 := test_#t~nondet10;havoc test_#t~nondet10; {11965#false} is VALID [2020-07-28 19:07:05,923 INFO L280 TraceCheckUtils]: 60: Hoare triple {11965#false} assume !(0 != test_~tmp~0); {11965#false} is VALID [2020-07-28 19:07:05,923 INFO L280 TraceCheckUtils]: 61: Hoare triple {11965#false} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp___0~0 := test_#t~nondet11;havoc test_#t~nondet11; {11965#false} is VALID [2020-07-28 19:07:05,923 INFO L280 TraceCheckUtils]: 62: Hoare triple {11965#false} assume !(0 != test_~tmp___0~0); {11965#false} is VALID [2020-07-28 19:07:05,923 INFO L280 TraceCheckUtils]: 63: Hoare triple {11965#false} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___2~0 := test_#t~nondet12;havoc test_#t~nondet12; {11965#false} is VALID [2020-07-28 19:07:05,923 INFO L280 TraceCheckUtils]: 64: Hoare triple {11965#false} assume 0 != test_~tmp___2~0; {11965#false} is VALID [2020-07-28 19:07:05,924 INFO L280 TraceCheckUtils]: 65: Hoare triple {11965#false} havoc __utac_acc__Specification5_spec__2_#t~ret71;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {11965#false} is VALID [2020-07-28 19:07:05,924 INFO L280 TraceCheckUtils]: 66: Hoare triple {11965#false} __utac_acc__Specification5_spec__2_#t~ret71 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret71 && __utac_acc__Specification5_spec__2_#t~ret71 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret71;havoc __utac_acc__Specification5_spec__2_#t~ret71; {11965#false} is VALID [2020-07-28 19:07:05,924 INFO L280 TraceCheckUtils]: 67: Hoare triple {11965#false} assume 0 != ~pumpRunning~0; {11965#false} is VALID [2020-07-28 19:07:05,924 INFO L280 TraceCheckUtils]: 68: Hoare triple {11965#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {11965#false} is VALID [2020-07-28 19:07:05,924 INFO L280 TraceCheckUtils]: 69: Hoare triple {11965#false} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {11965#false} is VALID [2020-07-28 19:07:05,925 INFO L280 TraceCheckUtils]: 70: Hoare triple {11965#false} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret35, isLowWaterLevel_~retValue_acc~7, isLowWaterLevel_~tmp~5, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~7;havoc isLowWaterLevel_~tmp~5;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~3;havoc isLowWaterSensorDry_~retValue_acc~3;isLowWaterSensorDry_~retValue_acc~3 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~3; {11965#false} is VALID [2020-07-28 19:07:05,925 INFO L280 TraceCheckUtils]: 71: Hoare triple {11965#false} isLowWaterLevel_#t~ret35 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret35 && isLowWaterLevel_#t~ret35 <= 2147483647;isLowWaterLevel_~tmp~5 := isLowWaterLevel_#t~ret35;havoc isLowWaterLevel_#t~ret35; {11965#false} is VALID [2020-07-28 19:07:05,925 INFO L280 TraceCheckUtils]: 72: Hoare triple {11965#false} assume 0 != isLowWaterLevel_~tmp~5;isLowWaterLevel_~tmp___0~2 := 0; {11965#false} is VALID [2020-07-28 19:07:05,925 INFO L280 TraceCheckUtils]: 73: Hoare triple {11965#false} isLowWaterLevel_~retValue_acc~7 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~7; {11965#false} is VALID [2020-07-28 19:07:05,925 INFO L280 TraceCheckUtils]: 74: Hoare triple {11965#false} processEnvironment_#t~ret15 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret15 && processEnvironment_#t~ret15 <= 2147483647;processEnvironment_~tmp~2 := processEnvironment_#t~ret15;havoc processEnvironment_#t~ret15; {11965#false} is VALID [2020-07-28 19:07:05,925 INFO L280 TraceCheckUtils]: 75: Hoare triple {11965#false} assume 0 != processEnvironment_~tmp~2;~pumpRunning~0 := 0; {11965#false} is VALID [2020-07-28 19:07:05,926 INFO L280 TraceCheckUtils]: 76: Hoare triple {11965#false} havoc __utac_acc__Specification5_spec__3_#t~ret72, __utac_acc__Specification5_spec__3_#t~ret73, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {11965#false} is VALID [2020-07-28 19:07:05,926 INFO L280 TraceCheckUtils]: 77: Hoare triple {11965#false} __utac_acc__Specification5_spec__3_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret72 && __utac_acc__Specification5_spec__3_#t~ret72 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret72;havoc __utac_acc__Specification5_spec__3_#t~ret72; {11965#false} is VALID [2020-07-28 19:07:05,926 INFO L280 TraceCheckUtils]: 78: Hoare triple {11965#false} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~9); {11965#false} is VALID [2020-07-28 19:07:05,926 INFO L280 TraceCheckUtils]: 79: Hoare triple {11965#false} assume !false; {11965#false} is VALID [2020-07-28 19:07:05,926 INFO L280 TraceCheckUtils]: 80: Hoare triple {11965#false} assume test_~splverifierCounter~0 < 4; {11965#false} is VALID [2020-07-28 19:07:05,926 INFO L280 TraceCheckUtils]: 81: Hoare triple {11965#false} assume -2147483648 <= test_#t~nondet10 && test_#t~nondet10 <= 2147483647;test_~tmp~0 := test_#t~nondet10;havoc test_#t~nondet10; {11965#false} is VALID [2020-07-28 19:07:05,927 INFO L280 TraceCheckUtils]: 82: Hoare triple {11965#false} assume !(0 != test_~tmp~0); {11965#false} is VALID [2020-07-28 19:07:05,927 INFO L280 TraceCheckUtils]: 83: Hoare triple {11965#false} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp___0~0 := test_#t~nondet11;havoc test_#t~nondet11; {11965#false} is VALID [2020-07-28 19:07:05,927 INFO L280 TraceCheckUtils]: 84: Hoare triple {11965#false} assume !(0 != test_~tmp___0~0); {11965#false} is VALID [2020-07-28 19:07:05,928 INFO L280 TraceCheckUtils]: 85: Hoare triple {11965#false} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___2~0 := test_#t~nondet12;havoc test_#t~nondet12; {11965#false} is VALID [2020-07-28 19:07:05,928 INFO L280 TraceCheckUtils]: 86: Hoare triple {11965#false} assume 0 != test_~tmp___2~0; {11965#false} is VALID [2020-07-28 19:07:05,928 INFO L280 TraceCheckUtils]: 87: Hoare triple {11965#false} havoc __utac_acc__Specification5_spec__2_#t~ret71;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {11965#false} is VALID [2020-07-28 19:07:05,928 INFO L280 TraceCheckUtils]: 88: Hoare triple {11965#false} __utac_acc__Specification5_spec__2_#t~ret71 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret71 && __utac_acc__Specification5_spec__2_#t~ret71 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret71;havoc __utac_acc__Specification5_spec__2_#t~ret71; {11965#false} is VALID [2020-07-28 19:07:05,929 INFO L280 TraceCheckUtils]: 89: Hoare triple {11965#false} assume !(0 != ~pumpRunning~0); {11965#false} is VALID [2020-07-28 19:07:05,929 INFO L280 TraceCheckUtils]: 90: Hoare triple {11965#false} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {11965#false} is VALID [2020-07-28 19:07:05,929 INFO L280 TraceCheckUtils]: 91: Hoare triple {11965#false} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {11965#false} is VALID [2020-07-28 19:07:05,930 INFO L280 TraceCheckUtils]: 92: Hoare triple {11965#false} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret34, isHighWaterLevel_~retValue_acc~6, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~6;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {11965#false} is VALID [2020-07-28 19:07:05,930 INFO L280 TraceCheckUtils]: 93: Hoare triple {11965#false} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {11965#false} is VALID [2020-07-28 19:07:05,930 INFO L280 TraceCheckUtils]: 94: Hoare triple {11965#false} isHighWaterLevel_#t~ret34 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret34 && isHighWaterLevel_#t~ret34 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret34;havoc isHighWaterLevel_#t~ret34; {11965#false} is VALID [2020-07-28 19:07:05,930 INFO L280 TraceCheckUtils]: 95: Hoare triple {11965#false} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {11965#false} is VALID [2020-07-28 19:07:05,931 INFO L280 TraceCheckUtils]: 96: Hoare triple {11965#false} isHighWaterLevel_~retValue_acc~6 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~6; {11965#false} is VALID [2020-07-28 19:07:05,931 INFO L280 TraceCheckUtils]: 97: Hoare triple {11965#false} processEnvironment__wrappee__highWaterSensor_#t~ret14 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret14 && processEnvironment__wrappee__highWaterSensor_#t~ret14 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~1 := processEnvironment__wrappee__highWaterSensor_#t~ret14;havoc processEnvironment__wrappee__highWaterSensor_#t~ret14; {11965#false} is VALID [2020-07-28 19:07:05,931 INFO L280 TraceCheckUtils]: 98: Hoare triple {11965#false} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc activatePump_#t~ret16, activatePump_~tmp~3;havoc activatePump_~tmp~3;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret17, isMethaneAlarm_~retValue_acc~4;havoc isMethaneAlarm_~retValue_acc~4;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {11965#false} is VALID [2020-07-28 19:07:05,932 INFO L280 TraceCheckUtils]: 99: Hoare triple {11965#false} isMethaneAlarm_#t~ret17 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret17 && isMethaneAlarm_#t~ret17 <= 2147483647;isMethaneAlarm_~retValue_acc~4 := isMethaneAlarm_#t~ret17;havoc isMethaneAlarm_#t~ret17;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~4; {11965#false} is VALID [2020-07-28 19:07:05,932 INFO L280 TraceCheckUtils]: 100: Hoare triple {11965#false} activatePump_#t~ret16 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret16 && activatePump_#t~ret16 <= 2147483647;activatePump_~tmp~3 := activatePump_#t~ret16;havoc activatePump_#t~ret16; {11965#false} is VALID [2020-07-28 19:07:05,932 INFO L280 TraceCheckUtils]: 101: Hoare triple {11965#false} assume !(0 != activatePump_~tmp~3);~pumpRunning~0 := 1; {11965#false} is VALID [2020-07-28 19:07:05,932 INFO L280 TraceCheckUtils]: 102: Hoare triple {11965#false} havoc __utac_acc__Specification5_spec__3_#t~ret72, __utac_acc__Specification5_spec__3_#t~ret73, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {11965#false} is VALID [2020-07-28 19:07:05,933 INFO L280 TraceCheckUtils]: 103: Hoare triple {11965#false} __utac_acc__Specification5_spec__3_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret72 && __utac_acc__Specification5_spec__3_#t~ret72 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret72;havoc __utac_acc__Specification5_spec__3_#t~ret72; {11965#false} is VALID [2020-07-28 19:07:05,933 INFO L280 TraceCheckUtils]: 104: Hoare triple {11965#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {11965#false} is VALID [2020-07-28 19:07:05,933 INFO L280 TraceCheckUtils]: 105: Hoare triple {11965#false} __utac_acc__Specification5_spec__3_#t~ret73 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret73 && __utac_acc__Specification5_spec__3_#t~ret73 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret73;havoc __utac_acc__Specification5_spec__3_#t~ret73; {11965#false} is VALID [2020-07-28 19:07:05,933 INFO L280 TraceCheckUtils]: 106: Hoare triple {11965#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3; {11965#false} is VALID [2020-07-28 19:07:05,934 INFO L280 TraceCheckUtils]: 107: Hoare triple {11965#false} assume 0 == ~switchedOnBeforeTS~0; {11965#false} is VALID [2020-07-28 19:07:05,934 INFO L280 TraceCheckUtils]: 108: Hoare triple {11965#false} assume !false; {11965#false} is VALID [2020-07-28 19:07:05,943 INFO L134 CoverageAnalysis]: Checked inductivity of 112 backedges. 84 proven. 5 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2020-07-28 19:07:05,944 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [566480771] [2020-07-28 19:07:05,944 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [547062508] [2020-07-28 19:07:05,944 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 3 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2020-07-28 19:07:06,065 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:07:06,067 INFO L263 TraceCheckSpWp]: Trace formula consists of 586 conjuncts, 7 conjunts are in the unsatisfiable core [2020-07-28 19:07:06,101 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:07:06,104 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2020-07-28 19:07:06,369 INFO L280 TraceCheckUtils]: 0: Hoare triple {11964#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(13);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string21.base, #t~string21.offset, 1);call write~init~int(110, #t~string21.base, 1 + #t~string21.offset, 1);call write~init~int(0, #t~string21.base, 2 + #t~string21.offset, 1);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string23.base, #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 1 + #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 2 + #t~string23.offset, 1);call write~init~int(0, #t~string23.base, 3 + #t~string23.offset, 1);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string25.base, #t~string25.offset, 1);call write~init~int(80, #t~string25.base, 1 + #t~string25.offset, 1);call write~init~int(117, #t~string25.base, 2 + #t~string25.offset, 1);call write~init~int(109, #t~string25.base, 3 + #t~string25.offset, 1);call write~init~int(112, #t~string25.base, 4 + #t~string25.offset, 1);call write~init~int(58, #t~string25.base, 5 + #t~string25.offset, 1);call write~init~int(0, #t~string25.base, 6 + #t~string25.offset, 1);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string27.base, #t~string27.offset, 1);call write~init~int(110, #t~string27.base, 1 + #t~string27.offset, 1);call write~init~int(0, #t~string27.base, 2 + #t~string27.offset, 1);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string29.base, #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 1 + #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 2 + #t~string29.offset, 1);call write~init~int(0, #t~string29.base, 3 + #t~string29.offset, 1);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string31.base, #t~string31.offset, 1);call write~init~int(32, #t~string31.base, 1 + #t~string31.offset, 1);call write~init~int(0, #t~string31.base, 2 + #t~string31.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string33.base, #t~string33.offset, 1);call write~init~int(0, #t~string33.base, 1 + #t~string33.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(21);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(30);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(9);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(25);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4; {11969#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:06,370 INFO L280 TraceCheckUtils]: 1: Hoare triple {11969#(<= ~waterLevel~0 1)} havoc main_#res;havoc main_#t~ret74, main_~retValue_acc~11, main_~tmp~10;havoc main_~retValue_acc~11;havoc main_~tmp~10; {11969#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:06,371 INFO L280 TraceCheckUtils]: 2: Hoare triple {11969#(<= ~waterLevel~0 1)} havoc valid_product_#res;havoc valid_product_~retValue_acc~13;havoc valid_product_~retValue_acc~13;valid_product_~retValue_acc~13 := 1;valid_product_#res := valid_product_~retValue_acc~13; {11969#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:06,371 INFO L280 TraceCheckUtils]: 3: Hoare triple {11969#(<= ~waterLevel~0 1)} main_#t~ret74 := valid_product_#res;assume -2147483648 <= main_#t~ret74 && main_#t~ret74 <= 2147483647;main_~tmp~10 := main_#t~ret74;havoc main_#t~ret74; {11969#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:06,372 INFO L280 TraceCheckUtils]: 4: Hoare triple {11969#(<= ~waterLevel~0 1)} assume 0 != main_~tmp~10; {11969#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:06,372 INFO L280 TraceCheckUtils]: 5: Hoare triple {11969#(<= ~waterLevel~0 1)} ~switchedOnBeforeTS~0 := 0; {11969#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:06,373 INFO L280 TraceCheckUtils]: 6: Hoare triple {11969#(<= ~waterLevel~0 1)} havoc test_#t~nondet10, test_#t~nondet11, test_#t~nondet12, test_#t~nondet13, test_~splverifierCounter~0, test_~tmp~0, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~0;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {11969#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:06,373 INFO L280 TraceCheckUtils]: 7: Hoare triple {11969#(<= ~waterLevel~0 1)} assume !false; {11969#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:06,373 INFO L280 TraceCheckUtils]: 8: Hoare triple {11969#(<= ~waterLevel~0 1)} assume test_~splverifierCounter~0 < 4; {11969#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:06,374 INFO L280 TraceCheckUtils]: 9: Hoare triple {11969#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet10 && test_#t~nondet10 <= 2147483647;test_~tmp~0 := test_#t~nondet10;havoc test_#t~nondet10; {11969#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:06,380 INFO L280 TraceCheckUtils]: 10: Hoare triple {11969#(<= ~waterLevel~0 1)} assume 0 != test_~tmp~0; {11969#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:06,381 INFO L280 TraceCheckUtils]: 11: Hoare triple {11969#(<= ~waterLevel~0 1)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {11967#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:06,382 INFO L280 TraceCheckUtils]: 12: Hoare triple {11967#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp___0~0 := test_#t~nondet11;havoc test_#t~nondet11; {11967#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:06,383 INFO L280 TraceCheckUtils]: 13: Hoare triple {11967#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___0~0); {11967#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:06,383 INFO L280 TraceCheckUtils]: 14: Hoare triple {11967#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___2~0 := test_#t~nondet12;havoc test_#t~nondet12; {11967#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:06,384 INFO L280 TraceCheckUtils]: 15: Hoare triple {11967#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0; {11967#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:06,384 INFO L280 TraceCheckUtils]: 16: Hoare triple {11967#(<= ~waterLevel~0 2)} havoc __utac_acc__Specification5_spec__2_#t~ret71;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {11967#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:06,385 INFO L280 TraceCheckUtils]: 17: Hoare triple {11967#(<= ~waterLevel~0 2)} __utac_acc__Specification5_spec__2_#t~ret71 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret71 && __utac_acc__Specification5_spec__2_#t~ret71 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret71;havoc __utac_acc__Specification5_spec__2_#t~ret71; {11967#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:06,386 INFO L280 TraceCheckUtils]: 18: Hoare triple {11967#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0); {11967#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:06,386 INFO L280 TraceCheckUtils]: 19: Hoare triple {11967#(<= ~waterLevel~0 2)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {11967#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:06,387 INFO L280 TraceCheckUtils]: 20: Hoare triple {11967#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {11967#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:06,388 INFO L280 TraceCheckUtils]: 21: Hoare triple {11967#(<= ~waterLevel~0 2)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret34, isHighWaterLevel_~retValue_acc~6, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~6;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {11967#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:06,388 INFO L280 TraceCheckUtils]: 22: Hoare triple {11967#(<= ~waterLevel~0 2)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {11967#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:06,389 INFO L280 TraceCheckUtils]: 23: Hoare triple {11967#(<= ~waterLevel~0 2)} isHighWaterLevel_#t~ret34 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret34 && isHighWaterLevel_#t~ret34 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret34;havoc isHighWaterLevel_#t~ret34; {11967#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:06,389 INFO L280 TraceCheckUtils]: 24: Hoare triple {11967#(<= ~waterLevel~0 2)} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {11967#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:06,389 INFO L280 TraceCheckUtils]: 25: Hoare triple {11967#(<= ~waterLevel~0 2)} isHighWaterLevel_~retValue_acc~6 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~6; {11967#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:06,390 INFO L280 TraceCheckUtils]: 26: Hoare triple {11967#(<= ~waterLevel~0 2)} processEnvironment__wrappee__highWaterSensor_#t~ret14 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret14 && processEnvironment__wrappee__highWaterSensor_#t~ret14 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~1 := processEnvironment__wrappee__highWaterSensor_#t~ret14;havoc processEnvironment__wrappee__highWaterSensor_#t~ret14; {11967#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:06,390 INFO L280 TraceCheckUtils]: 27: Hoare triple {11967#(<= ~waterLevel~0 2)} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc activatePump_#t~ret16, activatePump_~tmp~3;havoc activatePump_~tmp~3;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret17, isMethaneAlarm_~retValue_acc~4;havoc isMethaneAlarm_~retValue_acc~4;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {11967#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:06,391 INFO L280 TraceCheckUtils]: 28: Hoare triple {11967#(<= ~waterLevel~0 2)} isMethaneAlarm_#t~ret17 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret17 && isMethaneAlarm_#t~ret17 <= 2147483647;isMethaneAlarm_~retValue_acc~4 := isMethaneAlarm_#t~ret17;havoc isMethaneAlarm_#t~ret17;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~4; {11967#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:06,391 INFO L280 TraceCheckUtils]: 29: Hoare triple {11967#(<= ~waterLevel~0 2)} activatePump_#t~ret16 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret16 && activatePump_#t~ret16 <= 2147483647;activatePump_~tmp~3 := activatePump_#t~ret16;havoc activatePump_#t~ret16; {11967#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:06,391 INFO L280 TraceCheckUtils]: 30: Hoare triple {11967#(<= ~waterLevel~0 2)} assume !(0 != activatePump_~tmp~3);~pumpRunning~0 := 1; {11967#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:06,392 INFO L280 TraceCheckUtils]: 31: Hoare triple {11967#(<= ~waterLevel~0 2)} havoc __utac_acc__Specification5_spec__3_#t~ret72, __utac_acc__Specification5_spec__3_#t~ret73, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {11967#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:06,392 INFO L280 TraceCheckUtils]: 32: Hoare triple {11967#(<= ~waterLevel~0 2)} __utac_acc__Specification5_spec__3_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret72 && __utac_acc__Specification5_spec__3_#t~ret72 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret72;havoc __utac_acc__Specification5_spec__3_#t~ret72; {11967#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:06,393 INFO L280 TraceCheckUtils]: 33: Hoare triple {11967#(<= ~waterLevel~0 2)} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~9); {11967#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:06,393 INFO L280 TraceCheckUtils]: 34: Hoare triple {11967#(<= ~waterLevel~0 2)} assume !false; {11967#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:06,393 INFO L280 TraceCheckUtils]: 35: Hoare triple {11967#(<= ~waterLevel~0 2)} assume test_~splverifierCounter~0 < 4; {11967#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:06,394 INFO L280 TraceCheckUtils]: 36: Hoare triple {11967#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet10 && test_#t~nondet10 <= 2147483647;test_~tmp~0 := test_#t~nondet10;havoc test_#t~nondet10; {11967#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:06,394 INFO L280 TraceCheckUtils]: 37: Hoare triple {11967#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp~0); {11967#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:06,395 INFO L280 TraceCheckUtils]: 38: Hoare triple {11967#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp___0~0 := test_#t~nondet11;havoc test_#t~nondet11; {11967#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:06,395 INFO L280 TraceCheckUtils]: 39: Hoare triple {11967#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___0~0); {11967#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:06,395 INFO L280 TraceCheckUtils]: 40: Hoare triple {11967#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___2~0 := test_#t~nondet12;havoc test_#t~nondet12; {11967#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:06,396 INFO L280 TraceCheckUtils]: 41: Hoare triple {11967#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0; {11967#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:06,396 INFO L280 TraceCheckUtils]: 42: Hoare triple {11967#(<= ~waterLevel~0 2)} havoc __utac_acc__Specification5_spec__2_#t~ret71;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {11967#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:06,396 INFO L280 TraceCheckUtils]: 43: Hoare triple {11967#(<= ~waterLevel~0 2)} __utac_acc__Specification5_spec__2_#t~ret71 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret71 && __utac_acc__Specification5_spec__2_#t~ret71 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret71;havoc __utac_acc__Specification5_spec__2_#t~ret71; {11967#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:06,397 INFO L280 TraceCheckUtils]: 44: Hoare triple {11967#(<= ~waterLevel~0 2)} assume 0 != ~pumpRunning~0; {11967#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:06,398 INFO L280 TraceCheckUtils]: 45: Hoare triple {11967#(<= ~waterLevel~0 2)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {11969#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:06,398 INFO L280 TraceCheckUtils]: 46: Hoare triple {11969#(<= ~waterLevel~0 1)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {11969#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:06,398 INFO L280 TraceCheckUtils]: 47: Hoare triple {11969#(<= ~waterLevel~0 1)} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret35, isLowWaterLevel_~retValue_acc~7, isLowWaterLevel_~tmp~5, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~7;havoc isLowWaterLevel_~tmp~5;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~3;havoc isLowWaterSensorDry_~retValue_acc~3;isLowWaterSensorDry_~retValue_acc~3 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~3; {11969#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:06,399 INFO L280 TraceCheckUtils]: 48: Hoare triple {11969#(<= ~waterLevel~0 1)} isLowWaterLevel_#t~ret35 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret35 && isLowWaterLevel_#t~ret35 <= 2147483647;isLowWaterLevel_~tmp~5 := isLowWaterLevel_#t~ret35;havoc isLowWaterLevel_#t~ret35; {11969#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:06,399 INFO L280 TraceCheckUtils]: 49: Hoare triple {11969#(<= ~waterLevel~0 1)} assume 0 != isLowWaterLevel_~tmp~5;isLowWaterLevel_~tmp___0~2 := 0; {11969#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:06,399 INFO L280 TraceCheckUtils]: 50: Hoare triple {11969#(<= ~waterLevel~0 1)} isLowWaterLevel_~retValue_acc~7 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~7; {11969#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:06,400 INFO L280 TraceCheckUtils]: 51: Hoare triple {11969#(<= ~waterLevel~0 1)} processEnvironment_#t~ret15 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret15 && processEnvironment_#t~ret15 <= 2147483647;processEnvironment_~tmp~2 := processEnvironment_#t~ret15;havoc processEnvironment_#t~ret15; {11969#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:06,401 INFO L280 TraceCheckUtils]: 52: Hoare triple {11969#(<= ~waterLevel~0 1)} assume !(0 != processEnvironment_~tmp~2);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {11969#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:06,401 INFO L280 TraceCheckUtils]: 53: Hoare triple {11969#(<= ~waterLevel~0 1)} assume !(0 == ~pumpRunning~0); {11969#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:06,402 INFO L280 TraceCheckUtils]: 54: Hoare triple {11969#(<= ~waterLevel~0 1)} havoc __utac_acc__Specification5_spec__3_#t~ret72, __utac_acc__Specification5_spec__3_#t~ret73, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {12137#(<= |ULTIMATE.start_getWaterLevel_#res| 1)} is VALID [2020-07-28 19:07:06,403 INFO L280 TraceCheckUtils]: 55: Hoare triple {12137#(<= |ULTIMATE.start_getWaterLevel_#res| 1)} __utac_acc__Specification5_spec__3_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret72 && __utac_acc__Specification5_spec__3_#t~ret72 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret72;havoc __utac_acc__Specification5_spec__3_#t~ret72; {12141#(<= ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9 1)} is VALID [2020-07-28 19:07:06,404 INFO L280 TraceCheckUtils]: 56: Hoare triple {12141#(<= ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9 1)} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~9); {11965#false} is VALID [2020-07-28 19:07:06,404 INFO L280 TraceCheckUtils]: 57: Hoare triple {11965#false} assume !false; {11965#false} is VALID [2020-07-28 19:07:06,404 INFO L280 TraceCheckUtils]: 58: Hoare triple {11965#false} assume test_~splverifierCounter~0 < 4; {11965#false} is VALID [2020-07-28 19:07:06,404 INFO L280 TraceCheckUtils]: 59: Hoare triple {11965#false} assume -2147483648 <= test_#t~nondet10 && test_#t~nondet10 <= 2147483647;test_~tmp~0 := test_#t~nondet10;havoc test_#t~nondet10; {11965#false} is VALID [2020-07-28 19:07:06,405 INFO L280 TraceCheckUtils]: 60: Hoare triple {11965#false} assume !(0 != test_~tmp~0); {11965#false} is VALID [2020-07-28 19:07:06,405 INFO L280 TraceCheckUtils]: 61: Hoare triple {11965#false} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp___0~0 := test_#t~nondet11;havoc test_#t~nondet11; {11965#false} is VALID [2020-07-28 19:07:06,405 INFO L280 TraceCheckUtils]: 62: Hoare triple {11965#false} assume !(0 != test_~tmp___0~0); {11965#false} is VALID [2020-07-28 19:07:06,405 INFO L280 TraceCheckUtils]: 63: Hoare triple {11965#false} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___2~0 := test_#t~nondet12;havoc test_#t~nondet12; {11965#false} is VALID [2020-07-28 19:07:06,406 INFO L280 TraceCheckUtils]: 64: Hoare triple {11965#false} assume 0 != test_~tmp___2~0; {11965#false} is VALID [2020-07-28 19:07:06,406 INFO L280 TraceCheckUtils]: 65: Hoare triple {11965#false} havoc __utac_acc__Specification5_spec__2_#t~ret71;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {11965#false} is VALID [2020-07-28 19:07:06,406 INFO L280 TraceCheckUtils]: 66: Hoare triple {11965#false} __utac_acc__Specification5_spec__2_#t~ret71 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret71 && __utac_acc__Specification5_spec__2_#t~ret71 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret71;havoc __utac_acc__Specification5_spec__2_#t~ret71; {11965#false} is VALID [2020-07-28 19:07:06,406 INFO L280 TraceCheckUtils]: 67: Hoare triple {11965#false} assume 0 != ~pumpRunning~0; {11965#false} is VALID [2020-07-28 19:07:06,406 INFO L280 TraceCheckUtils]: 68: Hoare triple {11965#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {11965#false} is VALID [2020-07-28 19:07:06,406 INFO L280 TraceCheckUtils]: 69: Hoare triple {11965#false} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {11965#false} is VALID [2020-07-28 19:07:06,407 INFO L280 TraceCheckUtils]: 70: Hoare triple {11965#false} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret35, isLowWaterLevel_~retValue_acc~7, isLowWaterLevel_~tmp~5, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~7;havoc isLowWaterLevel_~tmp~5;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~3;havoc isLowWaterSensorDry_~retValue_acc~3;isLowWaterSensorDry_~retValue_acc~3 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~3; {11965#false} is VALID [2020-07-28 19:07:06,407 INFO L280 TraceCheckUtils]: 71: Hoare triple {11965#false} isLowWaterLevel_#t~ret35 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret35 && isLowWaterLevel_#t~ret35 <= 2147483647;isLowWaterLevel_~tmp~5 := isLowWaterLevel_#t~ret35;havoc isLowWaterLevel_#t~ret35; {11965#false} is VALID [2020-07-28 19:07:06,407 INFO L280 TraceCheckUtils]: 72: Hoare triple {11965#false} assume 0 != isLowWaterLevel_~tmp~5;isLowWaterLevel_~tmp___0~2 := 0; {11965#false} is VALID [2020-07-28 19:07:06,407 INFO L280 TraceCheckUtils]: 73: Hoare triple {11965#false} isLowWaterLevel_~retValue_acc~7 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~7; {11965#false} is VALID [2020-07-28 19:07:06,407 INFO L280 TraceCheckUtils]: 74: Hoare triple {11965#false} processEnvironment_#t~ret15 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret15 && processEnvironment_#t~ret15 <= 2147483647;processEnvironment_~tmp~2 := processEnvironment_#t~ret15;havoc processEnvironment_#t~ret15; {11965#false} is VALID [2020-07-28 19:07:06,407 INFO L280 TraceCheckUtils]: 75: Hoare triple {11965#false} assume 0 != processEnvironment_~tmp~2;~pumpRunning~0 := 0; {11965#false} is VALID [2020-07-28 19:07:06,407 INFO L280 TraceCheckUtils]: 76: Hoare triple {11965#false} havoc __utac_acc__Specification5_spec__3_#t~ret72, __utac_acc__Specification5_spec__3_#t~ret73, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {11965#false} is VALID [2020-07-28 19:07:06,408 INFO L280 TraceCheckUtils]: 77: Hoare triple {11965#false} __utac_acc__Specification5_spec__3_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret72 && __utac_acc__Specification5_spec__3_#t~ret72 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret72;havoc __utac_acc__Specification5_spec__3_#t~ret72; {11965#false} is VALID [2020-07-28 19:07:06,408 INFO L280 TraceCheckUtils]: 78: Hoare triple {11965#false} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~9); {11965#false} is VALID [2020-07-28 19:07:06,408 INFO L280 TraceCheckUtils]: 79: Hoare triple {11965#false} assume !false; {11965#false} is VALID [2020-07-28 19:07:06,408 INFO L280 TraceCheckUtils]: 80: Hoare triple {11965#false} assume test_~splverifierCounter~0 < 4; {11965#false} is VALID [2020-07-28 19:07:06,408 INFO L280 TraceCheckUtils]: 81: Hoare triple {11965#false} assume -2147483648 <= test_#t~nondet10 && test_#t~nondet10 <= 2147483647;test_~tmp~0 := test_#t~nondet10;havoc test_#t~nondet10; {11965#false} is VALID [2020-07-28 19:07:06,408 INFO L280 TraceCheckUtils]: 82: Hoare triple {11965#false} assume !(0 != test_~tmp~0); {11965#false} is VALID [2020-07-28 19:07:06,408 INFO L280 TraceCheckUtils]: 83: Hoare triple {11965#false} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp___0~0 := test_#t~nondet11;havoc test_#t~nondet11; {11965#false} is VALID [2020-07-28 19:07:06,409 INFO L280 TraceCheckUtils]: 84: Hoare triple {11965#false} assume !(0 != test_~tmp___0~0); {11965#false} is VALID [2020-07-28 19:07:06,409 INFO L280 TraceCheckUtils]: 85: Hoare triple {11965#false} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___2~0 := test_#t~nondet12;havoc test_#t~nondet12; {11965#false} is VALID [2020-07-28 19:07:06,409 INFO L280 TraceCheckUtils]: 86: Hoare triple {11965#false} assume 0 != test_~tmp___2~0; {11965#false} is VALID [2020-07-28 19:07:06,409 INFO L280 TraceCheckUtils]: 87: Hoare triple {11965#false} havoc __utac_acc__Specification5_spec__2_#t~ret71;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {11965#false} is VALID [2020-07-28 19:07:06,409 INFO L280 TraceCheckUtils]: 88: Hoare triple {11965#false} __utac_acc__Specification5_spec__2_#t~ret71 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret71 && __utac_acc__Specification5_spec__2_#t~ret71 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret71;havoc __utac_acc__Specification5_spec__2_#t~ret71; {11965#false} is VALID [2020-07-28 19:07:06,409 INFO L280 TraceCheckUtils]: 89: Hoare triple {11965#false} assume !(0 != ~pumpRunning~0); {11965#false} is VALID [2020-07-28 19:07:06,409 INFO L280 TraceCheckUtils]: 90: Hoare triple {11965#false} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {11965#false} is VALID [2020-07-28 19:07:06,410 INFO L280 TraceCheckUtils]: 91: Hoare triple {11965#false} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {11965#false} is VALID [2020-07-28 19:07:06,410 INFO L280 TraceCheckUtils]: 92: Hoare triple {11965#false} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret34, isHighWaterLevel_~retValue_acc~6, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~6;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {11965#false} is VALID [2020-07-28 19:07:06,410 INFO L280 TraceCheckUtils]: 93: Hoare triple {11965#false} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {11965#false} is VALID [2020-07-28 19:07:06,410 INFO L280 TraceCheckUtils]: 94: Hoare triple {11965#false} isHighWaterLevel_#t~ret34 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret34 && isHighWaterLevel_#t~ret34 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret34;havoc isHighWaterLevel_#t~ret34; {11965#false} is VALID [2020-07-28 19:07:06,410 INFO L280 TraceCheckUtils]: 95: Hoare triple {11965#false} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {11965#false} is VALID [2020-07-28 19:07:06,410 INFO L280 TraceCheckUtils]: 96: Hoare triple {11965#false} isHighWaterLevel_~retValue_acc~6 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~6; {11965#false} is VALID [2020-07-28 19:07:06,411 INFO L280 TraceCheckUtils]: 97: Hoare triple {11965#false} processEnvironment__wrappee__highWaterSensor_#t~ret14 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret14 && processEnvironment__wrappee__highWaterSensor_#t~ret14 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~1 := processEnvironment__wrappee__highWaterSensor_#t~ret14;havoc processEnvironment__wrappee__highWaterSensor_#t~ret14; {11965#false} is VALID [2020-07-28 19:07:06,411 INFO L280 TraceCheckUtils]: 98: Hoare triple {11965#false} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc activatePump_#t~ret16, activatePump_~tmp~3;havoc activatePump_~tmp~3;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret17, isMethaneAlarm_~retValue_acc~4;havoc isMethaneAlarm_~retValue_acc~4;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {11965#false} is VALID [2020-07-28 19:07:06,411 INFO L280 TraceCheckUtils]: 99: Hoare triple {11965#false} isMethaneAlarm_#t~ret17 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret17 && isMethaneAlarm_#t~ret17 <= 2147483647;isMethaneAlarm_~retValue_acc~4 := isMethaneAlarm_#t~ret17;havoc isMethaneAlarm_#t~ret17;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~4; {11965#false} is VALID [2020-07-28 19:07:06,411 INFO L280 TraceCheckUtils]: 100: Hoare triple {11965#false} activatePump_#t~ret16 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret16 && activatePump_#t~ret16 <= 2147483647;activatePump_~tmp~3 := activatePump_#t~ret16;havoc activatePump_#t~ret16; {11965#false} is VALID [2020-07-28 19:07:06,412 INFO L280 TraceCheckUtils]: 101: Hoare triple {11965#false} assume !(0 != activatePump_~tmp~3);~pumpRunning~0 := 1; {11965#false} is VALID [2020-07-28 19:07:06,412 INFO L280 TraceCheckUtils]: 102: Hoare triple {11965#false} havoc __utac_acc__Specification5_spec__3_#t~ret72, __utac_acc__Specification5_spec__3_#t~ret73, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {11965#false} is VALID [2020-07-28 19:07:06,412 INFO L280 TraceCheckUtils]: 103: Hoare triple {11965#false} __utac_acc__Specification5_spec__3_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret72 && __utac_acc__Specification5_spec__3_#t~ret72 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret72;havoc __utac_acc__Specification5_spec__3_#t~ret72; {11965#false} is VALID [2020-07-28 19:07:06,412 INFO L280 TraceCheckUtils]: 104: Hoare triple {11965#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {11965#false} is VALID [2020-07-28 19:07:06,413 INFO L280 TraceCheckUtils]: 105: Hoare triple {11965#false} __utac_acc__Specification5_spec__3_#t~ret73 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret73 && __utac_acc__Specification5_spec__3_#t~ret73 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret73;havoc __utac_acc__Specification5_spec__3_#t~ret73; {11965#false} is VALID [2020-07-28 19:07:06,413 INFO L280 TraceCheckUtils]: 106: Hoare triple {11965#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3; {11965#false} is VALID [2020-07-28 19:07:06,413 INFO L280 TraceCheckUtils]: 107: Hoare triple {11965#false} assume 0 == ~switchedOnBeforeTS~0; {11965#false} is VALID [2020-07-28 19:07:06,413 INFO L280 TraceCheckUtils]: 108: Hoare triple {11965#false} assume !false; {11965#false} is VALID [2020-07-28 19:07:06,422 INFO L134 CoverageAnalysis]: Checked inductivity of 112 backedges. 83 proven. 6 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2020-07-28 19:07:06,422 INFO L220 FreeRefinementEngine]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2020-07-28 19:07:06,423 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 5] total 9 [2020-07-28 19:07:06,423 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1665574887] [2020-07-28 19:07:06,423 INFO L78 Accepts]: Start accepts. Automaton has 10 states. Word has length 109 [2020-07-28 19:07:06,424 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:07:06,425 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 10 states. [2020-07-28 19:07:06,545 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 107 edges. 107 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:07:06,546 INFO L459 AbstractCegarLoop]: Interpolant automaton has 10 states [2020-07-28 19:07:06,546 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:07:06,546 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2020-07-28 19:07:06,547 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=27, Invalid=63, Unknown=0, NotChecked=0, Total=90 [2020-07-28 19:07:06,547 INFO L87 Difference]: Start difference. First operand 254 states and 327 transitions. Second operand 10 states. [2020-07-28 19:07:09,381 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:07:09,382 INFO L93 Difference]: Finished difference Result 851 states and 1103 transitions. [2020-07-28 19:07:09,382 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2020-07-28 19:07:09,382 INFO L78 Accepts]: Start accepts. Automaton has 10 states. Word has length 109 [2020-07-28 19:07:09,383 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:07:09,383 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 10 states. [2020-07-28 19:07:09,386 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 358 transitions. [2020-07-28 19:07:09,387 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 10 states. [2020-07-28 19:07:09,390 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 358 transitions. [2020-07-28 19:07:09,390 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 12 states and 358 transitions. [2020-07-28 19:07:09,794 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 358 edges. 358 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:07:09,817 INFO L225 Difference]: With dead ends: 851 [2020-07-28 19:07:09,818 INFO L226 Difference]: Without dead ends: 604 [2020-07-28 19:07:09,819 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 122 GetRequests, 107 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 43 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=93, Invalid=179, Unknown=0, NotChecked=0, Total=272 [2020-07-28 19:07:09,820 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 604 states. [2020-07-28 19:07:10,723 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 604 to 314. [2020-07-28 19:07:10,723 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:07:10,723 INFO L82 GeneralOperation]: Start isEquivalent. First operand 604 states. Second operand 314 states. [2020-07-28 19:07:10,723 INFO L74 IsIncluded]: Start isIncluded. First operand 604 states. Second operand 314 states. [2020-07-28 19:07:10,724 INFO L87 Difference]: Start difference. First operand 604 states. Second operand 314 states. [2020-07-28 19:07:10,748 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:07:10,748 INFO L93 Difference]: Finished difference Result 604 states and 771 transitions. [2020-07-28 19:07:10,749 INFO L276 IsEmpty]: Start isEmpty. Operand 604 states and 771 transitions. [2020-07-28 19:07:10,750 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:07:10,750 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:07:10,751 INFO L74 IsIncluded]: Start isIncluded. First operand 314 states. Second operand 604 states. [2020-07-28 19:07:10,751 INFO L87 Difference]: Start difference. First operand 314 states. Second operand 604 states. [2020-07-28 19:07:10,773 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:07:10,773 INFO L93 Difference]: Finished difference Result 604 states and 771 transitions. [2020-07-28 19:07:10,773 INFO L276 IsEmpty]: Start isEmpty. Operand 604 states and 771 transitions. [2020-07-28 19:07:10,775 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:07:10,775 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:07:10,775 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:07:10,775 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:07:10,776 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 314 states. [2020-07-28 19:07:10,785 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 314 states to 314 states and 399 transitions. [2020-07-28 19:07:10,786 INFO L78 Accepts]: Start accepts. Automaton has 314 states and 399 transitions. Word has length 109 [2020-07-28 19:07:10,786 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:07:10,786 INFO L479 AbstractCegarLoop]: Abstraction has 314 states and 399 transitions. [2020-07-28 19:07:10,786 INFO L480 AbstractCegarLoop]: Interpolant automaton has 10 states. [2020-07-28 19:07:10,786 INFO L276 IsEmpty]: Start isEmpty. Operand 314 states and 399 transitions. [2020-07-28 19:07:10,788 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 115 [2020-07-28 19:07:10,788 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:07:10,788 INFO L422 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:07:11,003 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,3 z3 -smt2 -in SMTLIB2_COMPLIANT=true [2020-07-28 19:07:11,004 INFO L427 AbstractCegarLoop]: === Iteration 12 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:07:11,005 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:07:11,005 INFO L82 PathProgramCache]: Analyzing trace with hash -198235002, now seen corresponding path program 1 times [2020-07-28 19:07:11,005 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:07:11,006 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2083944806] [2020-07-28 19:07:11,006 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:07:11,054 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:07:11,127 INFO L280 TraceCheckUtils]: 0: Hoare triple {15214#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(13);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string21.base, #t~string21.offset, 1);call write~init~int(110, #t~string21.base, 1 + #t~string21.offset, 1);call write~init~int(0, #t~string21.base, 2 + #t~string21.offset, 1);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string23.base, #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 1 + #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 2 + #t~string23.offset, 1);call write~init~int(0, #t~string23.base, 3 + #t~string23.offset, 1);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string25.base, #t~string25.offset, 1);call write~init~int(80, #t~string25.base, 1 + #t~string25.offset, 1);call write~init~int(117, #t~string25.base, 2 + #t~string25.offset, 1);call write~init~int(109, #t~string25.base, 3 + #t~string25.offset, 1);call write~init~int(112, #t~string25.base, 4 + #t~string25.offset, 1);call write~init~int(58, #t~string25.base, 5 + #t~string25.offset, 1);call write~init~int(0, #t~string25.base, 6 + #t~string25.offset, 1);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string27.base, #t~string27.offset, 1);call write~init~int(110, #t~string27.base, 1 + #t~string27.offset, 1);call write~init~int(0, #t~string27.base, 2 + #t~string27.offset, 1);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string29.base, #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 1 + #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 2 + #t~string29.offset, 1);call write~init~int(0, #t~string29.base, 3 + #t~string29.offset, 1);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string31.base, #t~string31.offset, 1);call write~init~int(32, #t~string31.base, 1 + #t~string31.offset, 1);call write~init~int(0, #t~string31.base, 2 + #t~string31.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string33.base, #t~string33.offset, 1);call write~init~int(0, #t~string33.base, 1 + #t~string33.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(21);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(30);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(9);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(25);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4; {15214#true} is VALID [2020-07-28 19:07:11,128 INFO L280 TraceCheckUtils]: 1: Hoare triple {15214#true} havoc main_#res;havoc main_#t~ret74, main_~retValue_acc~11, main_~tmp~10;havoc main_~retValue_acc~11;havoc main_~tmp~10; {15214#true} is VALID [2020-07-28 19:07:11,128 INFO L280 TraceCheckUtils]: 2: Hoare triple {15214#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~13;havoc valid_product_~retValue_acc~13;valid_product_~retValue_acc~13 := 1;valid_product_#res := valid_product_~retValue_acc~13; {15214#true} is VALID [2020-07-28 19:07:11,129 INFO L280 TraceCheckUtils]: 3: Hoare triple {15214#true} main_#t~ret74 := valid_product_#res;assume -2147483648 <= main_#t~ret74 && main_#t~ret74 <= 2147483647;main_~tmp~10 := main_#t~ret74;havoc main_#t~ret74; {15214#true} is VALID [2020-07-28 19:07:11,129 INFO L280 TraceCheckUtils]: 4: Hoare triple {15214#true} assume 0 != main_~tmp~10; {15214#true} is VALID [2020-07-28 19:07:11,129 INFO L280 TraceCheckUtils]: 5: Hoare triple {15214#true} ~switchedOnBeforeTS~0 := 0; {15214#true} is VALID [2020-07-28 19:07:11,129 INFO L280 TraceCheckUtils]: 6: Hoare triple {15214#true} havoc test_#t~nondet10, test_#t~nondet11, test_#t~nondet12, test_#t~nondet13, test_~splverifierCounter~0, test_~tmp~0, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~0;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {15214#true} is VALID [2020-07-28 19:07:11,130 INFO L280 TraceCheckUtils]: 7: Hoare triple {15214#true} assume !false; {15214#true} is VALID [2020-07-28 19:07:11,130 INFO L280 TraceCheckUtils]: 8: Hoare triple {15214#true} assume test_~splverifierCounter~0 < 4; {15214#true} is VALID [2020-07-28 19:07:11,130 INFO L280 TraceCheckUtils]: 9: Hoare triple {15214#true} assume -2147483648 <= test_#t~nondet10 && test_#t~nondet10 <= 2147483647;test_~tmp~0 := test_#t~nondet10;havoc test_#t~nondet10; {15214#true} is VALID [2020-07-28 19:07:11,131 INFO L280 TraceCheckUtils]: 10: Hoare triple {15214#true} assume 0 != test_~tmp~0; {15214#true} is VALID [2020-07-28 19:07:11,131 INFO L280 TraceCheckUtils]: 11: Hoare triple {15214#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {15214#true} is VALID [2020-07-28 19:07:11,131 INFO L280 TraceCheckUtils]: 12: Hoare triple {15214#true} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp___0~0 := test_#t~nondet11;havoc test_#t~nondet11; {15214#true} is VALID [2020-07-28 19:07:11,131 INFO L280 TraceCheckUtils]: 13: Hoare triple {15214#true} assume !(0 != test_~tmp___0~0); {15214#true} is VALID [2020-07-28 19:07:11,131 INFO L280 TraceCheckUtils]: 14: Hoare triple {15214#true} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___2~0 := test_#t~nondet12;havoc test_#t~nondet12; {15214#true} is VALID [2020-07-28 19:07:11,132 INFO L280 TraceCheckUtils]: 15: Hoare triple {15214#true} assume 0 != test_~tmp___2~0; {15214#true} is VALID [2020-07-28 19:07:11,132 INFO L280 TraceCheckUtils]: 16: Hoare triple {15214#true} havoc __utac_acc__Specification5_spec__2_#t~ret71;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {15214#true} is VALID [2020-07-28 19:07:11,132 INFO L280 TraceCheckUtils]: 17: Hoare triple {15214#true} __utac_acc__Specification5_spec__2_#t~ret71 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret71 && __utac_acc__Specification5_spec__2_#t~ret71 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret71;havoc __utac_acc__Specification5_spec__2_#t~ret71; {15214#true} is VALID [2020-07-28 19:07:11,132 INFO L280 TraceCheckUtils]: 18: Hoare triple {15214#true} assume !(0 != ~pumpRunning~0); {15214#true} is VALID [2020-07-28 19:07:11,133 INFO L280 TraceCheckUtils]: 19: Hoare triple {15214#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {15214#true} is VALID [2020-07-28 19:07:11,133 INFO L280 TraceCheckUtils]: 20: Hoare triple {15214#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {15214#true} is VALID [2020-07-28 19:07:11,133 INFO L280 TraceCheckUtils]: 21: Hoare triple {15214#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret34, isHighWaterLevel_~retValue_acc~6, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~6;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {15214#true} is VALID [2020-07-28 19:07:11,133 INFO L280 TraceCheckUtils]: 22: Hoare triple {15214#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {15214#true} is VALID [2020-07-28 19:07:11,134 INFO L280 TraceCheckUtils]: 23: Hoare triple {15214#true} isHighWaterLevel_#t~ret34 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret34 && isHighWaterLevel_#t~ret34 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret34;havoc isHighWaterLevel_#t~ret34; {15214#true} is VALID [2020-07-28 19:07:11,134 INFO L280 TraceCheckUtils]: 24: Hoare triple {15214#true} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {15214#true} is VALID [2020-07-28 19:07:11,134 INFO L280 TraceCheckUtils]: 25: Hoare triple {15214#true} isHighWaterLevel_~retValue_acc~6 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~6; {15214#true} is VALID [2020-07-28 19:07:11,134 INFO L280 TraceCheckUtils]: 26: Hoare triple {15214#true} processEnvironment__wrappee__highWaterSensor_#t~ret14 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret14 && processEnvironment__wrappee__highWaterSensor_#t~ret14 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~1 := processEnvironment__wrappee__highWaterSensor_#t~ret14;havoc processEnvironment__wrappee__highWaterSensor_#t~ret14; {15214#true} is VALID [2020-07-28 19:07:11,135 INFO L280 TraceCheckUtils]: 27: Hoare triple {15214#true} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc activatePump_#t~ret16, activatePump_~tmp~3;havoc activatePump_~tmp~3;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret17, isMethaneAlarm_~retValue_acc~4;havoc isMethaneAlarm_~retValue_acc~4;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {15214#true} is VALID [2020-07-28 19:07:11,135 INFO L280 TraceCheckUtils]: 28: Hoare triple {15214#true} isMethaneAlarm_#t~ret17 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret17 && isMethaneAlarm_#t~ret17 <= 2147483647;isMethaneAlarm_~retValue_acc~4 := isMethaneAlarm_#t~ret17;havoc isMethaneAlarm_#t~ret17;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~4; {15214#true} is VALID [2020-07-28 19:07:11,135 INFO L280 TraceCheckUtils]: 29: Hoare triple {15214#true} activatePump_#t~ret16 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret16 && activatePump_#t~ret16 <= 2147483647;activatePump_~tmp~3 := activatePump_#t~ret16;havoc activatePump_#t~ret16; {15214#true} is VALID [2020-07-28 19:07:11,136 INFO L280 TraceCheckUtils]: 30: Hoare triple {15214#true} assume !(0 != activatePump_~tmp~3);~pumpRunning~0 := 1; {15216#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:07:11,137 INFO L280 TraceCheckUtils]: 31: Hoare triple {15216#(= 1 ~pumpRunning~0)} havoc __utac_acc__Specification5_spec__3_#t~ret72, __utac_acc__Specification5_spec__3_#t~ret73, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {15216#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:07:11,138 INFO L280 TraceCheckUtils]: 32: Hoare triple {15216#(= 1 ~pumpRunning~0)} __utac_acc__Specification5_spec__3_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret72 && __utac_acc__Specification5_spec__3_#t~ret72 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret72;havoc __utac_acc__Specification5_spec__3_#t~ret72; {15216#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:07:11,139 INFO L280 TraceCheckUtils]: 33: Hoare triple {15216#(= 1 ~pumpRunning~0)} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~9); {15216#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:07:11,139 INFO L280 TraceCheckUtils]: 34: Hoare triple {15216#(= 1 ~pumpRunning~0)} assume !false; {15216#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:07:11,140 INFO L280 TraceCheckUtils]: 35: Hoare triple {15216#(= 1 ~pumpRunning~0)} assume test_~splverifierCounter~0 < 4; {15216#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:07:11,141 INFO L280 TraceCheckUtils]: 36: Hoare triple {15216#(= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet10 && test_#t~nondet10 <= 2147483647;test_~tmp~0 := test_#t~nondet10;havoc test_#t~nondet10; {15216#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:07:11,141 INFO L280 TraceCheckUtils]: 37: Hoare triple {15216#(= 1 ~pumpRunning~0)} assume !(0 != test_~tmp~0); {15216#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:07:11,142 INFO L280 TraceCheckUtils]: 38: Hoare triple {15216#(= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp___0~0 := test_#t~nondet11;havoc test_#t~nondet11; {15216#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:07:11,143 INFO L280 TraceCheckUtils]: 39: Hoare triple {15216#(= 1 ~pumpRunning~0)} assume !(0 != test_~tmp___0~0); {15216#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:07:11,143 INFO L280 TraceCheckUtils]: 40: Hoare triple {15216#(= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___2~0 := test_#t~nondet12;havoc test_#t~nondet12; {15216#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:07:11,144 INFO L280 TraceCheckUtils]: 41: Hoare triple {15216#(= 1 ~pumpRunning~0)} assume 0 != test_~tmp___2~0; {15216#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:07:11,145 INFO L280 TraceCheckUtils]: 42: Hoare triple {15216#(= 1 ~pumpRunning~0)} havoc __utac_acc__Specification5_spec__2_#t~ret71;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {15216#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:07:11,145 INFO L280 TraceCheckUtils]: 43: Hoare triple {15216#(= 1 ~pumpRunning~0)} __utac_acc__Specification5_spec__2_#t~ret71 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret71 && __utac_acc__Specification5_spec__2_#t~ret71 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret71;havoc __utac_acc__Specification5_spec__2_#t~ret71; {15216#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:07:11,146 INFO L280 TraceCheckUtils]: 44: Hoare triple {15216#(= 1 ~pumpRunning~0)} assume 0 != ~pumpRunning~0; {15216#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:07:11,146 INFO L280 TraceCheckUtils]: 45: Hoare triple {15216#(= 1 ~pumpRunning~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {15216#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:07:11,147 INFO L280 TraceCheckUtils]: 46: Hoare triple {15216#(= 1 ~pumpRunning~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {15216#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:07:11,147 INFO L280 TraceCheckUtils]: 47: Hoare triple {15216#(= 1 ~pumpRunning~0)} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret35, isLowWaterLevel_~retValue_acc~7, isLowWaterLevel_~tmp~5, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~7;havoc isLowWaterLevel_~tmp~5;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~3;havoc isLowWaterSensorDry_~retValue_acc~3;isLowWaterSensorDry_~retValue_acc~3 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~3; {15216#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:07:11,148 INFO L280 TraceCheckUtils]: 48: Hoare triple {15216#(= 1 ~pumpRunning~0)} isLowWaterLevel_#t~ret35 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret35 && isLowWaterLevel_#t~ret35 <= 2147483647;isLowWaterLevel_~tmp~5 := isLowWaterLevel_#t~ret35;havoc isLowWaterLevel_#t~ret35; {15216#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:07:11,148 INFO L280 TraceCheckUtils]: 49: Hoare triple {15216#(= 1 ~pumpRunning~0)} assume 0 != isLowWaterLevel_~tmp~5;isLowWaterLevel_~tmp___0~2 := 0; {15216#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:07:11,149 INFO L280 TraceCheckUtils]: 50: Hoare triple {15216#(= 1 ~pumpRunning~0)} isLowWaterLevel_~retValue_acc~7 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~7; {15216#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:07:11,149 INFO L280 TraceCheckUtils]: 51: Hoare triple {15216#(= 1 ~pumpRunning~0)} processEnvironment_#t~ret15 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret15 && processEnvironment_#t~ret15 <= 2147483647;processEnvironment_~tmp~2 := processEnvironment_#t~ret15;havoc processEnvironment_#t~ret15; {15216#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:07:11,150 INFO L280 TraceCheckUtils]: 52: Hoare triple {15216#(= 1 ~pumpRunning~0)} assume !(0 != processEnvironment_~tmp~2);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {15216#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:07:11,151 INFO L280 TraceCheckUtils]: 53: Hoare triple {15216#(= 1 ~pumpRunning~0)} assume !(0 == ~pumpRunning~0); {15216#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:07:11,151 INFO L280 TraceCheckUtils]: 54: Hoare triple {15216#(= 1 ~pumpRunning~0)} havoc __utac_acc__Specification5_spec__3_#t~ret72, __utac_acc__Specification5_spec__3_#t~ret73, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {15216#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:07:11,152 INFO L280 TraceCheckUtils]: 55: Hoare triple {15216#(= 1 ~pumpRunning~0)} __utac_acc__Specification5_spec__3_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret72 && __utac_acc__Specification5_spec__3_#t~ret72 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret72;havoc __utac_acc__Specification5_spec__3_#t~ret72; {15216#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:07:11,152 INFO L280 TraceCheckUtils]: 56: Hoare triple {15216#(= 1 ~pumpRunning~0)} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {15217#(= 1 |ULTIMATE.start_isPumpRunning_#res|)} is VALID [2020-07-28 19:07:11,153 INFO L280 TraceCheckUtils]: 57: Hoare triple {15217#(= 1 |ULTIMATE.start_isPumpRunning_#res|)} __utac_acc__Specification5_spec__3_#t~ret73 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret73 && __utac_acc__Specification5_spec__3_#t~ret73 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret73;havoc __utac_acc__Specification5_spec__3_#t~ret73; {15218#(= ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp___0~3 1)} is VALID [2020-07-28 19:07:11,154 INFO L280 TraceCheckUtils]: 58: Hoare triple {15218#(= ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp___0~3 1)} assume !(0 != __utac_acc__Specification5_spec__3_~tmp___0~3); {15215#false} is VALID [2020-07-28 19:07:11,154 INFO L280 TraceCheckUtils]: 59: Hoare triple {15215#false} assume !false; {15215#false} is VALID [2020-07-28 19:07:11,154 INFO L280 TraceCheckUtils]: 60: Hoare triple {15215#false} assume test_~splverifierCounter~0 < 4; {15215#false} is VALID [2020-07-28 19:07:11,154 INFO L280 TraceCheckUtils]: 61: Hoare triple {15215#false} assume -2147483648 <= test_#t~nondet10 && test_#t~nondet10 <= 2147483647;test_~tmp~0 := test_#t~nondet10;havoc test_#t~nondet10; {15215#false} is VALID [2020-07-28 19:07:11,154 INFO L280 TraceCheckUtils]: 62: Hoare triple {15215#false} assume !(0 != test_~tmp~0); {15215#false} is VALID [2020-07-28 19:07:11,155 INFO L280 TraceCheckUtils]: 63: Hoare triple {15215#false} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp___0~0 := test_#t~nondet11;havoc test_#t~nondet11; {15215#false} is VALID [2020-07-28 19:07:11,155 INFO L280 TraceCheckUtils]: 64: Hoare triple {15215#false} assume !(0 != test_~tmp___0~0); {15215#false} is VALID [2020-07-28 19:07:11,155 INFO L280 TraceCheckUtils]: 65: Hoare triple {15215#false} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___2~0 := test_#t~nondet12;havoc test_#t~nondet12; {15215#false} is VALID [2020-07-28 19:07:11,155 INFO L280 TraceCheckUtils]: 66: Hoare triple {15215#false} assume 0 != test_~tmp___2~0; {15215#false} is VALID [2020-07-28 19:07:11,156 INFO L280 TraceCheckUtils]: 67: Hoare triple {15215#false} havoc __utac_acc__Specification5_spec__2_#t~ret71;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {15215#false} is VALID [2020-07-28 19:07:11,156 INFO L280 TraceCheckUtils]: 68: Hoare triple {15215#false} __utac_acc__Specification5_spec__2_#t~ret71 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret71 && __utac_acc__Specification5_spec__2_#t~ret71 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret71;havoc __utac_acc__Specification5_spec__2_#t~ret71; {15215#false} is VALID [2020-07-28 19:07:11,156 INFO L280 TraceCheckUtils]: 69: Hoare triple {15215#false} assume 0 != ~pumpRunning~0; {15215#false} is VALID [2020-07-28 19:07:11,156 INFO L280 TraceCheckUtils]: 70: Hoare triple {15215#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {15215#false} is VALID [2020-07-28 19:07:11,156 INFO L280 TraceCheckUtils]: 71: Hoare triple {15215#false} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {15215#false} is VALID [2020-07-28 19:07:11,156 INFO L280 TraceCheckUtils]: 72: Hoare triple {15215#false} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret35, isLowWaterLevel_~retValue_acc~7, isLowWaterLevel_~tmp~5, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~7;havoc isLowWaterLevel_~tmp~5;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~3;havoc isLowWaterSensorDry_~retValue_acc~3;isLowWaterSensorDry_~retValue_acc~3 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~3; {15215#false} is VALID [2020-07-28 19:07:11,157 INFO L280 TraceCheckUtils]: 73: Hoare triple {15215#false} isLowWaterLevel_#t~ret35 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret35 && isLowWaterLevel_#t~ret35 <= 2147483647;isLowWaterLevel_~tmp~5 := isLowWaterLevel_#t~ret35;havoc isLowWaterLevel_#t~ret35; {15215#false} is VALID [2020-07-28 19:07:11,157 INFO L280 TraceCheckUtils]: 74: Hoare triple {15215#false} assume 0 != isLowWaterLevel_~tmp~5;isLowWaterLevel_~tmp___0~2 := 0; {15215#false} is VALID [2020-07-28 19:07:11,157 INFO L280 TraceCheckUtils]: 75: Hoare triple {15215#false} isLowWaterLevel_~retValue_acc~7 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~7; {15215#false} is VALID [2020-07-28 19:07:11,157 INFO L280 TraceCheckUtils]: 76: Hoare triple {15215#false} processEnvironment_#t~ret15 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret15 && processEnvironment_#t~ret15 <= 2147483647;processEnvironment_~tmp~2 := processEnvironment_#t~ret15;havoc processEnvironment_#t~ret15; {15215#false} is VALID [2020-07-28 19:07:11,157 INFO L280 TraceCheckUtils]: 77: Hoare triple {15215#false} assume 0 != processEnvironment_~tmp~2;~pumpRunning~0 := 0; {15215#false} is VALID [2020-07-28 19:07:11,157 INFO L280 TraceCheckUtils]: 78: Hoare triple {15215#false} havoc __utac_acc__Specification5_spec__3_#t~ret72, __utac_acc__Specification5_spec__3_#t~ret73, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {15215#false} is VALID [2020-07-28 19:07:11,158 INFO L280 TraceCheckUtils]: 79: Hoare triple {15215#false} __utac_acc__Specification5_spec__3_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret72 && __utac_acc__Specification5_spec__3_#t~ret72 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret72;havoc __utac_acc__Specification5_spec__3_#t~ret72; {15215#false} is VALID [2020-07-28 19:07:11,158 INFO L280 TraceCheckUtils]: 80: Hoare triple {15215#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {15215#false} is VALID [2020-07-28 19:07:11,158 INFO L280 TraceCheckUtils]: 81: Hoare triple {15215#false} __utac_acc__Specification5_spec__3_#t~ret73 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret73 && __utac_acc__Specification5_spec__3_#t~ret73 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret73;havoc __utac_acc__Specification5_spec__3_#t~ret73; {15215#false} is VALID [2020-07-28 19:07:11,158 INFO L280 TraceCheckUtils]: 82: Hoare triple {15215#false} assume !(0 != __utac_acc__Specification5_spec__3_~tmp___0~3); {15215#false} is VALID [2020-07-28 19:07:11,159 INFO L280 TraceCheckUtils]: 83: Hoare triple {15215#false} assume !false; {15215#false} is VALID [2020-07-28 19:07:11,159 INFO L280 TraceCheckUtils]: 84: Hoare triple {15215#false} assume test_~splverifierCounter~0 < 4; {15215#false} is VALID [2020-07-28 19:07:11,159 INFO L280 TraceCheckUtils]: 85: Hoare triple {15215#false} assume -2147483648 <= test_#t~nondet10 && test_#t~nondet10 <= 2147483647;test_~tmp~0 := test_#t~nondet10;havoc test_#t~nondet10; {15215#false} is VALID [2020-07-28 19:07:11,159 INFO L280 TraceCheckUtils]: 86: Hoare triple {15215#false} assume 0 != test_~tmp~0; {15215#false} is VALID [2020-07-28 19:07:11,159 INFO L280 TraceCheckUtils]: 87: Hoare triple {15215#false} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {15215#false} is VALID [2020-07-28 19:07:11,160 INFO L280 TraceCheckUtils]: 88: Hoare triple {15215#false} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp___0~0 := test_#t~nondet11;havoc test_#t~nondet11; {15215#false} is VALID [2020-07-28 19:07:11,160 INFO L280 TraceCheckUtils]: 89: Hoare triple {15215#false} assume !(0 != test_~tmp___0~0); {15215#false} is VALID [2020-07-28 19:07:11,160 INFO L280 TraceCheckUtils]: 90: Hoare triple {15215#false} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___2~0 := test_#t~nondet12;havoc test_#t~nondet12; {15215#false} is VALID [2020-07-28 19:07:11,160 INFO L280 TraceCheckUtils]: 91: Hoare triple {15215#false} assume 0 != test_~tmp___2~0; {15215#false} is VALID [2020-07-28 19:07:11,161 INFO L280 TraceCheckUtils]: 92: Hoare triple {15215#false} havoc __utac_acc__Specification5_spec__2_#t~ret71;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {15215#false} is VALID [2020-07-28 19:07:11,161 INFO L280 TraceCheckUtils]: 93: Hoare triple {15215#false} __utac_acc__Specification5_spec__2_#t~ret71 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret71 && __utac_acc__Specification5_spec__2_#t~ret71 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret71;havoc __utac_acc__Specification5_spec__2_#t~ret71; {15215#false} is VALID [2020-07-28 19:07:11,161 INFO L280 TraceCheckUtils]: 94: Hoare triple {15215#false} assume !(0 != ~pumpRunning~0); {15215#false} is VALID [2020-07-28 19:07:11,161 INFO L280 TraceCheckUtils]: 95: Hoare triple {15215#false} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {15215#false} is VALID [2020-07-28 19:07:11,162 INFO L280 TraceCheckUtils]: 96: Hoare triple {15215#false} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {15215#false} is VALID [2020-07-28 19:07:11,162 INFO L280 TraceCheckUtils]: 97: Hoare triple {15215#false} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret34, isHighWaterLevel_~retValue_acc~6, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~6;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {15215#false} is VALID [2020-07-28 19:07:11,162 INFO L280 TraceCheckUtils]: 98: Hoare triple {15215#false} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {15215#false} is VALID [2020-07-28 19:07:11,162 INFO L280 TraceCheckUtils]: 99: Hoare triple {15215#false} isHighWaterLevel_#t~ret34 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret34 && isHighWaterLevel_#t~ret34 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret34;havoc isHighWaterLevel_#t~ret34; {15215#false} is VALID [2020-07-28 19:07:11,163 INFO L280 TraceCheckUtils]: 100: Hoare triple {15215#false} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {15215#false} is VALID [2020-07-28 19:07:11,163 INFO L280 TraceCheckUtils]: 101: Hoare triple {15215#false} isHighWaterLevel_~retValue_acc~6 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~6; {15215#false} is VALID [2020-07-28 19:07:11,163 INFO L280 TraceCheckUtils]: 102: Hoare triple {15215#false} processEnvironment__wrappee__highWaterSensor_#t~ret14 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret14 && processEnvironment__wrappee__highWaterSensor_#t~ret14 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~1 := processEnvironment__wrappee__highWaterSensor_#t~ret14;havoc processEnvironment__wrappee__highWaterSensor_#t~ret14; {15215#false} is VALID [2020-07-28 19:07:11,163 INFO L280 TraceCheckUtils]: 103: Hoare triple {15215#false} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc activatePump_#t~ret16, activatePump_~tmp~3;havoc activatePump_~tmp~3;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret17, isMethaneAlarm_~retValue_acc~4;havoc isMethaneAlarm_~retValue_acc~4;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {15215#false} is VALID [2020-07-28 19:07:11,163 INFO L280 TraceCheckUtils]: 104: Hoare triple {15215#false} isMethaneAlarm_#t~ret17 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret17 && isMethaneAlarm_#t~ret17 <= 2147483647;isMethaneAlarm_~retValue_acc~4 := isMethaneAlarm_#t~ret17;havoc isMethaneAlarm_#t~ret17;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~4; {15215#false} is VALID [2020-07-28 19:07:11,164 INFO L280 TraceCheckUtils]: 105: Hoare triple {15215#false} activatePump_#t~ret16 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret16 && activatePump_#t~ret16 <= 2147483647;activatePump_~tmp~3 := activatePump_#t~ret16;havoc activatePump_#t~ret16; {15215#false} is VALID [2020-07-28 19:07:11,164 INFO L280 TraceCheckUtils]: 106: Hoare triple {15215#false} assume !(0 != activatePump_~tmp~3);~pumpRunning~0 := 1; {15215#false} is VALID [2020-07-28 19:07:11,164 INFO L280 TraceCheckUtils]: 107: Hoare triple {15215#false} havoc __utac_acc__Specification5_spec__3_#t~ret72, __utac_acc__Specification5_spec__3_#t~ret73, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {15215#false} is VALID [2020-07-28 19:07:11,164 INFO L280 TraceCheckUtils]: 108: Hoare triple {15215#false} __utac_acc__Specification5_spec__3_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret72 && __utac_acc__Specification5_spec__3_#t~ret72 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret72;havoc __utac_acc__Specification5_spec__3_#t~ret72; {15215#false} is VALID [2020-07-28 19:07:11,165 INFO L280 TraceCheckUtils]: 109: Hoare triple {15215#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {15215#false} is VALID [2020-07-28 19:07:11,165 INFO L280 TraceCheckUtils]: 110: Hoare triple {15215#false} __utac_acc__Specification5_spec__3_#t~ret73 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret73 && __utac_acc__Specification5_spec__3_#t~ret73 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret73;havoc __utac_acc__Specification5_spec__3_#t~ret73; {15215#false} is VALID [2020-07-28 19:07:11,165 INFO L280 TraceCheckUtils]: 111: Hoare triple {15215#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3; {15215#false} is VALID [2020-07-28 19:07:11,165 INFO L280 TraceCheckUtils]: 112: Hoare triple {15215#false} assume 0 == ~switchedOnBeforeTS~0; {15215#false} is VALID [2020-07-28 19:07:11,166 INFO L280 TraceCheckUtils]: 113: Hoare triple {15215#false} assume !false; {15215#false} is VALID [2020-07-28 19:07:11,174 INFO L134 CoverageAnalysis]: Checked inductivity of 119 backedges. 98 proven. 0 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2020-07-28 19:07:11,175 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2083944806] [2020-07-28 19:07:11,175 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:07:11,175 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:07:11,175 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1990313634] [2020-07-28 19:07:11,176 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 114 [2020-07-28 19:07:11,176 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:07:11,176 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:07:11,289 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 98 edges. 98 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:07:11,289 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:07:11,289 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:07:11,290 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:07:11,290 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:07:11,290 INFO L87 Difference]: Start difference. First operand 314 states and 399 transitions. Second operand 5 states. [2020-07-28 19:07:13,421 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:07:13,421 INFO L93 Difference]: Finished difference Result 748 states and 944 transitions. [2020-07-28 19:07:13,421 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2020-07-28 19:07:13,422 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 114 [2020-07-28 19:07:13,422 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:07:13,422 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:07:13,424 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 221 transitions. [2020-07-28 19:07:13,424 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:07:13,426 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 221 transitions. [2020-07-28 19:07:13,426 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 9 states and 221 transitions. [2020-07-28 19:07:13,656 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 221 edges. 221 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:07:13,672 INFO L225 Difference]: With dead ends: 748 [2020-07-28 19:07:13,672 INFO L226 Difference]: Without dead ends: 441 [2020-07-28 19:07:13,674 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2020-07-28 19:07:13,674 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 441 states. [2020-07-28 19:07:14,605 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 441 to 314. [2020-07-28 19:07:14,605 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:07:14,605 INFO L82 GeneralOperation]: Start isEquivalent. First operand 441 states. Second operand 314 states. [2020-07-28 19:07:14,605 INFO L74 IsIncluded]: Start isIncluded. First operand 441 states. Second operand 314 states. [2020-07-28 19:07:14,606 INFO L87 Difference]: Start difference. First operand 441 states. Second operand 314 states. [2020-07-28 19:07:14,615 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:07:14,615 INFO L93 Difference]: Finished difference Result 441 states and 549 transitions. [2020-07-28 19:07:14,616 INFO L276 IsEmpty]: Start isEmpty. Operand 441 states and 549 transitions. [2020-07-28 19:07:14,616 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:07:14,616 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:07:14,616 INFO L74 IsIncluded]: Start isIncluded. First operand 314 states. Second operand 441 states. [2020-07-28 19:07:14,617 INFO L87 Difference]: Start difference. First operand 314 states. Second operand 441 states. [2020-07-28 19:07:14,628 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:07:14,628 INFO L93 Difference]: Finished difference Result 441 states and 549 transitions. [2020-07-28 19:07:14,628 INFO L276 IsEmpty]: Start isEmpty. Operand 441 states and 549 transitions. [2020-07-28 19:07:14,629 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:07:14,629 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:07:14,629 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:07:14,630 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:07:14,630 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 314 states. [2020-07-28 19:07:14,637 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 314 states to 314 states and 396 transitions. [2020-07-28 19:07:14,638 INFO L78 Accepts]: Start accepts. Automaton has 314 states and 396 transitions. Word has length 114 [2020-07-28 19:07:14,638 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:07:14,638 INFO L479 AbstractCegarLoop]: Abstraction has 314 states and 396 transitions. [2020-07-28 19:07:14,638 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:07:14,638 INFO L276 IsEmpty]: Start isEmpty. Operand 314 states and 396 transitions. [2020-07-28 19:07:14,640 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 116 [2020-07-28 19:07:14,640 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:07:14,640 INFO L422 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:07:14,640 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2020-07-28 19:07:14,641 INFO L427 AbstractCegarLoop]: === Iteration 13 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:07:14,641 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:07:14,641 INFO L82 PathProgramCache]: Analyzing trace with hash -433688073, now seen corresponding path program 1 times [2020-07-28 19:07:14,642 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:07:14,642 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1460038479] [2020-07-28 19:07:14,642 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:07:14,672 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:07:14,727 INFO L280 TraceCheckUtils]: 0: Hoare triple {17654#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(13);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string21.base, #t~string21.offset, 1);call write~init~int(110, #t~string21.base, 1 + #t~string21.offset, 1);call write~init~int(0, #t~string21.base, 2 + #t~string21.offset, 1);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string23.base, #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 1 + #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 2 + #t~string23.offset, 1);call write~init~int(0, #t~string23.base, 3 + #t~string23.offset, 1);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string25.base, #t~string25.offset, 1);call write~init~int(80, #t~string25.base, 1 + #t~string25.offset, 1);call write~init~int(117, #t~string25.base, 2 + #t~string25.offset, 1);call write~init~int(109, #t~string25.base, 3 + #t~string25.offset, 1);call write~init~int(112, #t~string25.base, 4 + #t~string25.offset, 1);call write~init~int(58, #t~string25.base, 5 + #t~string25.offset, 1);call write~init~int(0, #t~string25.base, 6 + #t~string25.offset, 1);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string27.base, #t~string27.offset, 1);call write~init~int(110, #t~string27.base, 1 + #t~string27.offset, 1);call write~init~int(0, #t~string27.base, 2 + #t~string27.offset, 1);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string29.base, #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 1 + #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 2 + #t~string29.offset, 1);call write~init~int(0, #t~string29.base, 3 + #t~string29.offset, 1);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string31.base, #t~string31.offset, 1);call write~init~int(32, #t~string31.base, 1 + #t~string31.offset, 1);call write~init~int(0, #t~string31.base, 2 + #t~string31.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string33.base, #t~string33.offset, 1);call write~init~int(0, #t~string33.base, 1 + #t~string33.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(21);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(30);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(9);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(25);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4; {17654#true} is VALID [2020-07-28 19:07:14,727 INFO L280 TraceCheckUtils]: 1: Hoare triple {17654#true} havoc main_#res;havoc main_#t~ret74, main_~retValue_acc~11, main_~tmp~10;havoc main_~retValue_acc~11;havoc main_~tmp~10; {17654#true} is VALID [2020-07-28 19:07:14,728 INFO L280 TraceCheckUtils]: 2: Hoare triple {17654#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~13;havoc valid_product_~retValue_acc~13;valid_product_~retValue_acc~13 := 1;valid_product_#res := valid_product_~retValue_acc~13; {17654#true} is VALID [2020-07-28 19:07:14,728 INFO L280 TraceCheckUtils]: 3: Hoare triple {17654#true} main_#t~ret74 := valid_product_#res;assume -2147483648 <= main_#t~ret74 && main_#t~ret74 <= 2147483647;main_~tmp~10 := main_#t~ret74;havoc main_#t~ret74; {17654#true} is VALID [2020-07-28 19:07:14,728 INFO L280 TraceCheckUtils]: 4: Hoare triple {17654#true} assume 0 != main_~tmp~10; {17654#true} is VALID [2020-07-28 19:07:14,728 INFO L280 TraceCheckUtils]: 5: Hoare triple {17654#true} ~switchedOnBeforeTS~0 := 0; {17654#true} is VALID [2020-07-28 19:07:14,729 INFO L280 TraceCheckUtils]: 6: Hoare triple {17654#true} havoc test_#t~nondet10, test_#t~nondet11, test_#t~nondet12, test_#t~nondet13, test_~splverifierCounter~0, test_~tmp~0, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~0;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {17654#true} is VALID [2020-07-28 19:07:14,729 INFO L280 TraceCheckUtils]: 7: Hoare triple {17654#true} assume !false; {17654#true} is VALID [2020-07-28 19:07:14,729 INFO L280 TraceCheckUtils]: 8: Hoare triple {17654#true} assume test_~splverifierCounter~0 < 4; {17654#true} is VALID [2020-07-28 19:07:14,729 INFO L280 TraceCheckUtils]: 9: Hoare triple {17654#true} assume -2147483648 <= test_#t~nondet10 && test_#t~nondet10 <= 2147483647;test_~tmp~0 := test_#t~nondet10;havoc test_#t~nondet10; {17654#true} is VALID [2020-07-28 19:07:14,730 INFO L280 TraceCheckUtils]: 10: Hoare triple {17654#true} assume 0 != test_~tmp~0; {17654#true} is VALID [2020-07-28 19:07:14,730 INFO L280 TraceCheckUtils]: 11: Hoare triple {17654#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {17654#true} is VALID [2020-07-28 19:07:14,730 INFO L280 TraceCheckUtils]: 12: Hoare triple {17654#true} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp___0~0 := test_#t~nondet11;havoc test_#t~nondet11; {17654#true} is VALID [2020-07-28 19:07:14,730 INFO L280 TraceCheckUtils]: 13: Hoare triple {17654#true} assume !(0 != test_~tmp___0~0); {17654#true} is VALID [2020-07-28 19:07:14,731 INFO L280 TraceCheckUtils]: 14: Hoare triple {17654#true} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___2~0 := test_#t~nondet12;havoc test_#t~nondet12; {17654#true} is VALID [2020-07-28 19:07:14,731 INFO L280 TraceCheckUtils]: 15: Hoare triple {17654#true} assume 0 != test_~tmp___2~0; {17654#true} is VALID [2020-07-28 19:07:14,732 INFO L280 TraceCheckUtils]: 16: Hoare triple {17654#true} havoc __utac_acc__Specification5_spec__2_#t~ret71;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {17654#true} is VALID [2020-07-28 19:07:14,732 INFO L280 TraceCheckUtils]: 17: Hoare triple {17654#true} __utac_acc__Specification5_spec__2_#t~ret71 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret71 && __utac_acc__Specification5_spec__2_#t~ret71 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret71;havoc __utac_acc__Specification5_spec__2_#t~ret71; {17654#true} is VALID [2020-07-28 19:07:14,732 INFO L280 TraceCheckUtils]: 18: Hoare triple {17654#true} assume !(0 != ~pumpRunning~0); {17654#true} is VALID [2020-07-28 19:07:14,732 INFO L280 TraceCheckUtils]: 19: Hoare triple {17654#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {17654#true} is VALID [2020-07-28 19:07:14,733 INFO L280 TraceCheckUtils]: 20: Hoare triple {17654#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {17654#true} is VALID [2020-07-28 19:07:14,733 INFO L280 TraceCheckUtils]: 21: Hoare triple {17654#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret34, isHighWaterLevel_~retValue_acc~6, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~6;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {17654#true} is VALID [2020-07-28 19:07:14,734 INFO L280 TraceCheckUtils]: 22: Hoare triple {17654#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {17654#true} is VALID [2020-07-28 19:07:14,734 INFO L280 TraceCheckUtils]: 23: Hoare triple {17654#true} isHighWaterLevel_#t~ret34 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret34 && isHighWaterLevel_#t~ret34 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret34;havoc isHighWaterLevel_#t~ret34; {17654#true} is VALID [2020-07-28 19:07:14,734 INFO L280 TraceCheckUtils]: 24: Hoare triple {17654#true} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {17654#true} is VALID [2020-07-28 19:07:14,735 INFO L280 TraceCheckUtils]: 25: Hoare triple {17654#true} isHighWaterLevel_~retValue_acc~6 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~6; {17654#true} is VALID [2020-07-28 19:07:14,735 INFO L280 TraceCheckUtils]: 26: Hoare triple {17654#true} processEnvironment__wrappee__highWaterSensor_#t~ret14 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret14 && processEnvironment__wrappee__highWaterSensor_#t~ret14 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~1 := processEnvironment__wrappee__highWaterSensor_#t~ret14;havoc processEnvironment__wrappee__highWaterSensor_#t~ret14; {17654#true} is VALID [2020-07-28 19:07:14,735 INFO L280 TraceCheckUtils]: 27: Hoare triple {17654#true} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc activatePump_#t~ret16, activatePump_~tmp~3;havoc activatePump_~tmp~3;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret17, isMethaneAlarm_~retValue_acc~4;havoc isMethaneAlarm_~retValue_acc~4;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {17654#true} is VALID [2020-07-28 19:07:14,735 INFO L280 TraceCheckUtils]: 28: Hoare triple {17654#true} isMethaneAlarm_#t~ret17 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret17 && isMethaneAlarm_#t~ret17 <= 2147483647;isMethaneAlarm_~retValue_acc~4 := isMethaneAlarm_#t~ret17;havoc isMethaneAlarm_#t~ret17;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~4; {17654#true} is VALID [2020-07-28 19:07:14,736 INFO L280 TraceCheckUtils]: 29: Hoare triple {17654#true} activatePump_#t~ret16 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret16 && activatePump_#t~ret16 <= 2147483647;activatePump_~tmp~3 := activatePump_#t~ret16;havoc activatePump_#t~ret16; {17654#true} is VALID [2020-07-28 19:07:14,736 INFO L280 TraceCheckUtils]: 30: Hoare triple {17654#true} assume !(0 != activatePump_~tmp~3);~pumpRunning~0 := 1; {17654#true} is VALID [2020-07-28 19:07:14,736 INFO L280 TraceCheckUtils]: 31: Hoare triple {17654#true} havoc __utac_acc__Specification5_spec__3_#t~ret72, __utac_acc__Specification5_spec__3_#t~ret73, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {17654#true} is VALID [2020-07-28 19:07:14,737 INFO L280 TraceCheckUtils]: 32: Hoare triple {17654#true} __utac_acc__Specification5_spec__3_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret72 && __utac_acc__Specification5_spec__3_#t~ret72 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret72;havoc __utac_acc__Specification5_spec__3_#t~ret72; {17654#true} is VALID [2020-07-28 19:07:14,737 INFO L280 TraceCheckUtils]: 33: Hoare triple {17654#true} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~9); {17654#true} is VALID [2020-07-28 19:07:14,737 INFO L280 TraceCheckUtils]: 34: Hoare triple {17654#true} assume !false; {17654#true} is VALID [2020-07-28 19:07:14,737 INFO L280 TraceCheckUtils]: 35: Hoare triple {17654#true} assume test_~splverifierCounter~0 < 4; {17654#true} is VALID [2020-07-28 19:07:14,738 INFO L280 TraceCheckUtils]: 36: Hoare triple {17654#true} assume -2147483648 <= test_#t~nondet10 && test_#t~nondet10 <= 2147483647;test_~tmp~0 := test_#t~nondet10;havoc test_#t~nondet10; {17654#true} is VALID [2020-07-28 19:07:14,738 INFO L280 TraceCheckUtils]: 37: Hoare triple {17654#true} assume !(0 != test_~tmp~0); {17654#true} is VALID [2020-07-28 19:07:14,738 INFO L280 TraceCheckUtils]: 38: Hoare triple {17654#true} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp___0~0 := test_#t~nondet11;havoc test_#t~nondet11; {17654#true} is VALID [2020-07-28 19:07:14,738 INFO L280 TraceCheckUtils]: 39: Hoare triple {17654#true} assume !(0 != test_~tmp___0~0); {17654#true} is VALID [2020-07-28 19:07:14,739 INFO L280 TraceCheckUtils]: 40: Hoare triple {17654#true} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___2~0 := test_#t~nondet12;havoc test_#t~nondet12; {17654#true} is VALID [2020-07-28 19:07:14,739 INFO L280 TraceCheckUtils]: 41: Hoare triple {17654#true} assume 0 != test_~tmp___2~0; {17654#true} is VALID [2020-07-28 19:07:14,739 INFO L280 TraceCheckUtils]: 42: Hoare triple {17654#true} havoc __utac_acc__Specification5_spec__2_#t~ret71;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {17654#true} is VALID [2020-07-28 19:07:14,739 INFO L280 TraceCheckUtils]: 43: Hoare triple {17654#true} __utac_acc__Specification5_spec__2_#t~ret71 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret71 && __utac_acc__Specification5_spec__2_#t~ret71 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret71;havoc __utac_acc__Specification5_spec__2_#t~ret71; {17654#true} is VALID [2020-07-28 19:07:14,740 INFO L280 TraceCheckUtils]: 44: Hoare triple {17654#true} assume 0 != ~pumpRunning~0; {17654#true} is VALID [2020-07-28 19:07:14,740 INFO L280 TraceCheckUtils]: 45: Hoare triple {17654#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {17654#true} is VALID [2020-07-28 19:07:14,740 INFO L280 TraceCheckUtils]: 46: Hoare triple {17654#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {17654#true} is VALID [2020-07-28 19:07:14,740 INFO L280 TraceCheckUtils]: 47: Hoare triple {17654#true} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret35, isLowWaterLevel_~retValue_acc~7, isLowWaterLevel_~tmp~5, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~7;havoc isLowWaterLevel_~tmp~5;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~3;havoc isLowWaterSensorDry_~retValue_acc~3;isLowWaterSensorDry_~retValue_acc~3 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~3; {17654#true} is VALID [2020-07-28 19:07:14,741 INFO L280 TraceCheckUtils]: 48: Hoare triple {17654#true} isLowWaterLevel_#t~ret35 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret35 && isLowWaterLevel_#t~ret35 <= 2147483647;isLowWaterLevel_~tmp~5 := isLowWaterLevel_#t~ret35;havoc isLowWaterLevel_#t~ret35; {17654#true} is VALID [2020-07-28 19:07:14,741 INFO L280 TraceCheckUtils]: 49: Hoare triple {17654#true} assume 0 != isLowWaterLevel_~tmp~5;isLowWaterLevel_~tmp___0~2 := 0; {17654#true} is VALID [2020-07-28 19:07:14,741 INFO L280 TraceCheckUtils]: 50: Hoare triple {17654#true} isLowWaterLevel_~retValue_acc~7 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~7; {17654#true} is VALID [2020-07-28 19:07:14,741 INFO L280 TraceCheckUtils]: 51: Hoare triple {17654#true} processEnvironment_#t~ret15 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret15 && processEnvironment_#t~ret15 <= 2147483647;processEnvironment_~tmp~2 := processEnvironment_#t~ret15;havoc processEnvironment_#t~ret15; {17654#true} is VALID [2020-07-28 19:07:14,742 INFO L280 TraceCheckUtils]: 52: Hoare triple {17654#true} assume !(0 != processEnvironment_~tmp~2);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {17654#true} is VALID [2020-07-28 19:07:14,742 INFO L280 TraceCheckUtils]: 53: Hoare triple {17654#true} assume !(0 == ~pumpRunning~0); {17654#true} is VALID [2020-07-28 19:07:14,742 INFO L280 TraceCheckUtils]: 54: Hoare triple {17654#true} havoc __utac_acc__Specification5_spec__3_#t~ret72, __utac_acc__Specification5_spec__3_#t~ret73, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {17654#true} is VALID [2020-07-28 19:07:14,742 INFO L280 TraceCheckUtils]: 55: Hoare triple {17654#true} __utac_acc__Specification5_spec__3_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret72 && __utac_acc__Specification5_spec__3_#t~ret72 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret72;havoc __utac_acc__Specification5_spec__3_#t~ret72; {17654#true} is VALID [2020-07-28 19:07:14,743 INFO L280 TraceCheckUtils]: 56: Hoare triple {17654#true} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {17654#true} is VALID [2020-07-28 19:07:14,743 INFO L280 TraceCheckUtils]: 57: Hoare triple {17654#true} __utac_acc__Specification5_spec__3_#t~ret73 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret73 && __utac_acc__Specification5_spec__3_#t~ret73 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret73;havoc __utac_acc__Specification5_spec__3_#t~ret73; {17654#true} is VALID [2020-07-28 19:07:14,743 INFO L280 TraceCheckUtils]: 58: Hoare triple {17654#true} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3; {17654#true} is VALID [2020-07-28 19:07:14,744 INFO L280 TraceCheckUtils]: 59: Hoare triple {17654#true} assume !(0 == ~switchedOnBeforeTS~0); {17654#true} is VALID [2020-07-28 19:07:14,744 INFO L280 TraceCheckUtils]: 60: Hoare triple {17654#true} assume !false; {17654#true} is VALID [2020-07-28 19:07:14,744 INFO L280 TraceCheckUtils]: 61: Hoare triple {17654#true} assume test_~splverifierCounter~0 < 4; {17654#true} is VALID [2020-07-28 19:07:14,745 INFO L280 TraceCheckUtils]: 62: Hoare triple {17654#true} assume -2147483648 <= test_#t~nondet10 && test_#t~nondet10 <= 2147483647;test_~tmp~0 := test_#t~nondet10;havoc test_#t~nondet10; {17654#true} is VALID [2020-07-28 19:07:14,745 INFO L280 TraceCheckUtils]: 63: Hoare triple {17654#true} assume !(0 != test_~tmp~0); {17654#true} is VALID [2020-07-28 19:07:14,745 INFO L280 TraceCheckUtils]: 64: Hoare triple {17654#true} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp___0~0 := test_#t~nondet11;havoc test_#t~nondet11; {17654#true} is VALID [2020-07-28 19:07:14,746 INFO L280 TraceCheckUtils]: 65: Hoare triple {17654#true} assume !(0 != test_~tmp___0~0); {17654#true} is VALID [2020-07-28 19:07:14,746 INFO L280 TraceCheckUtils]: 66: Hoare triple {17654#true} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___2~0 := test_#t~nondet12;havoc test_#t~nondet12; {17654#true} is VALID [2020-07-28 19:07:14,747 INFO L280 TraceCheckUtils]: 67: Hoare triple {17654#true} assume 0 != test_~tmp___2~0; {17654#true} is VALID [2020-07-28 19:07:14,747 INFO L280 TraceCheckUtils]: 68: Hoare triple {17654#true} havoc __utac_acc__Specification5_spec__2_#t~ret71;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {17654#true} is VALID [2020-07-28 19:07:14,747 INFO L280 TraceCheckUtils]: 69: Hoare triple {17654#true} __utac_acc__Specification5_spec__2_#t~ret71 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret71 && __utac_acc__Specification5_spec__2_#t~ret71 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret71;havoc __utac_acc__Specification5_spec__2_#t~ret71; {17654#true} is VALID [2020-07-28 19:07:14,748 INFO L280 TraceCheckUtils]: 70: Hoare triple {17654#true} assume 0 != ~pumpRunning~0; {17654#true} is VALID [2020-07-28 19:07:14,748 INFO L280 TraceCheckUtils]: 71: Hoare triple {17654#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {17654#true} is VALID [2020-07-28 19:07:14,748 INFO L280 TraceCheckUtils]: 72: Hoare triple {17654#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {17654#true} is VALID [2020-07-28 19:07:14,748 INFO L280 TraceCheckUtils]: 73: Hoare triple {17654#true} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret35, isLowWaterLevel_~retValue_acc~7, isLowWaterLevel_~tmp~5, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~7;havoc isLowWaterLevel_~tmp~5;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~3;havoc isLowWaterSensorDry_~retValue_acc~3;isLowWaterSensorDry_~retValue_acc~3 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~3; {17654#true} is VALID [2020-07-28 19:07:14,749 INFO L280 TraceCheckUtils]: 74: Hoare triple {17654#true} isLowWaterLevel_#t~ret35 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret35 && isLowWaterLevel_#t~ret35 <= 2147483647;isLowWaterLevel_~tmp~5 := isLowWaterLevel_#t~ret35;havoc isLowWaterLevel_#t~ret35; {17654#true} is VALID [2020-07-28 19:07:14,753 INFO L280 TraceCheckUtils]: 75: Hoare triple {17654#true} assume 0 != isLowWaterLevel_~tmp~5;isLowWaterLevel_~tmp___0~2 := 0; {17656#(= 0 ULTIMATE.start_isLowWaterLevel_~tmp___0~2)} is VALID [2020-07-28 19:07:14,754 INFO L280 TraceCheckUtils]: 76: Hoare triple {17656#(= 0 ULTIMATE.start_isLowWaterLevel_~tmp___0~2)} isLowWaterLevel_~retValue_acc~7 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~7; {17657#(= 0 |ULTIMATE.start_isLowWaterLevel_#res|)} is VALID [2020-07-28 19:07:14,755 INFO L280 TraceCheckUtils]: 77: Hoare triple {17657#(= 0 |ULTIMATE.start_isLowWaterLevel_#res|)} processEnvironment_#t~ret15 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret15 && processEnvironment_#t~ret15 <= 2147483647;processEnvironment_~tmp~2 := processEnvironment_#t~ret15;havoc processEnvironment_#t~ret15; {17658#(= 0 ULTIMATE.start_processEnvironment_~tmp~2)} is VALID [2020-07-28 19:07:14,756 INFO L280 TraceCheckUtils]: 78: Hoare triple {17658#(= 0 ULTIMATE.start_processEnvironment_~tmp~2)} assume 0 != processEnvironment_~tmp~2;~pumpRunning~0 := 0; {17655#false} is VALID [2020-07-28 19:07:14,757 INFO L280 TraceCheckUtils]: 79: Hoare triple {17655#false} havoc __utac_acc__Specification5_spec__3_#t~ret72, __utac_acc__Specification5_spec__3_#t~ret73, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {17655#false} is VALID [2020-07-28 19:07:14,757 INFO L280 TraceCheckUtils]: 80: Hoare triple {17655#false} __utac_acc__Specification5_spec__3_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret72 && __utac_acc__Specification5_spec__3_#t~ret72 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret72;havoc __utac_acc__Specification5_spec__3_#t~ret72; {17655#false} is VALID [2020-07-28 19:07:14,757 INFO L280 TraceCheckUtils]: 81: Hoare triple {17655#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {17655#false} is VALID [2020-07-28 19:07:14,757 INFO L280 TraceCheckUtils]: 82: Hoare triple {17655#false} __utac_acc__Specification5_spec__3_#t~ret73 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret73 && __utac_acc__Specification5_spec__3_#t~ret73 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret73;havoc __utac_acc__Specification5_spec__3_#t~ret73; {17655#false} is VALID [2020-07-28 19:07:14,757 INFO L280 TraceCheckUtils]: 83: Hoare triple {17655#false} assume !(0 != __utac_acc__Specification5_spec__3_~tmp___0~3); {17655#false} is VALID [2020-07-28 19:07:14,758 INFO L280 TraceCheckUtils]: 84: Hoare triple {17655#false} assume !false; {17655#false} is VALID [2020-07-28 19:07:14,758 INFO L280 TraceCheckUtils]: 85: Hoare triple {17655#false} assume test_~splverifierCounter~0 < 4; {17655#false} is VALID [2020-07-28 19:07:14,759 INFO L280 TraceCheckUtils]: 86: Hoare triple {17655#false} assume -2147483648 <= test_#t~nondet10 && test_#t~nondet10 <= 2147483647;test_~tmp~0 := test_#t~nondet10;havoc test_#t~nondet10; {17655#false} is VALID [2020-07-28 19:07:14,759 INFO L280 TraceCheckUtils]: 87: Hoare triple {17655#false} assume 0 != test_~tmp~0; {17655#false} is VALID [2020-07-28 19:07:14,759 INFO L280 TraceCheckUtils]: 88: Hoare triple {17655#false} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {17655#false} is VALID [2020-07-28 19:07:14,759 INFO L280 TraceCheckUtils]: 89: Hoare triple {17655#false} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp___0~0 := test_#t~nondet11;havoc test_#t~nondet11; {17655#false} is VALID [2020-07-28 19:07:14,759 INFO L280 TraceCheckUtils]: 90: Hoare triple {17655#false} assume !(0 != test_~tmp___0~0); {17655#false} is VALID [2020-07-28 19:07:14,760 INFO L280 TraceCheckUtils]: 91: Hoare triple {17655#false} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___2~0 := test_#t~nondet12;havoc test_#t~nondet12; {17655#false} is VALID [2020-07-28 19:07:14,760 INFO L280 TraceCheckUtils]: 92: Hoare triple {17655#false} assume 0 != test_~tmp___2~0; {17655#false} is VALID [2020-07-28 19:07:14,760 INFO L280 TraceCheckUtils]: 93: Hoare triple {17655#false} havoc __utac_acc__Specification5_spec__2_#t~ret71;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {17655#false} is VALID [2020-07-28 19:07:14,760 INFO L280 TraceCheckUtils]: 94: Hoare triple {17655#false} __utac_acc__Specification5_spec__2_#t~ret71 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret71 && __utac_acc__Specification5_spec__2_#t~ret71 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret71;havoc __utac_acc__Specification5_spec__2_#t~ret71; {17655#false} is VALID [2020-07-28 19:07:14,761 INFO L280 TraceCheckUtils]: 95: Hoare triple {17655#false} assume !(0 != ~pumpRunning~0); {17655#false} is VALID [2020-07-28 19:07:14,761 INFO L280 TraceCheckUtils]: 96: Hoare triple {17655#false} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {17655#false} is VALID [2020-07-28 19:07:14,761 INFO L280 TraceCheckUtils]: 97: Hoare triple {17655#false} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {17655#false} is VALID [2020-07-28 19:07:14,761 INFO L280 TraceCheckUtils]: 98: Hoare triple {17655#false} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret34, isHighWaterLevel_~retValue_acc~6, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~6;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {17655#false} is VALID [2020-07-28 19:07:14,761 INFO L280 TraceCheckUtils]: 99: Hoare triple {17655#false} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {17655#false} is VALID [2020-07-28 19:07:14,761 INFO L280 TraceCheckUtils]: 100: Hoare triple {17655#false} isHighWaterLevel_#t~ret34 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret34 && isHighWaterLevel_#t~ret34 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret34;havoc isHighWaterLevel_#t~ret34; {17655#false} is VALID [2020-07-28 19:07:14,761 INFO L280 TraceCheckUtils]: 101: Hoare triple {17655#false} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {17655#false} is VALID [2020-07-28 19:07:14,762 INFO L280 TraceCheckUtils]: 102: Hoare triple {17655#false} isHighWaterLevel_~retValue_acc~6 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~6; {17655#false} is VALID [2020-07-28 19:07:14,762 INFO L280 TraceCheckUtils]: 103: Hoare triple {17655#false} processEnvironment__wrappee__highWaterSensor_#t~ret14 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret14 && processEnvironment__wrappee__highWaterSensor_#t~ret14 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~1 := processEnvironment__wrappee__highWaterSensor_#t~ret14;havoc processEnvironment__wrappee__highWaterSensor_#t~ret14; {17655#false} is VALID [2020-07-28 19:07:14,762 INFO L280 TraceCheckUtils]: 104: Hoare triple {17655#false} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc activatePump_#t~ret16, activatePump_~tmp~3;havoc activatePump_~tmp~3;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret17, isMethaneAlarm_~retValue_acc~4;havoc isMethaneAlarm_~retValue_acc~4;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {17655#false} is VALID [2020-07-28 19:07:14,762 INFO L280 TraceCheckUtils]: 105: Hoare triple {17655#false} isMethaneAlarm_#t~ret17 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret17 && isMethaneAlarm_#t~ret17 <= 2147483647;isMethaneAlarm_~retValue_acc~4 := isMethaneAlarm_#t~ret17;havoc isMethaneAlarm_#t~ret17;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~4; {17655#false} is VALID [2020-07-28 19:07:14,762 INFO L280 TraceCheckUtils]: 106: Hoare triple {17655#false} activatePump_#t~ret16 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret16 && activatePump_#t~ret16 <= 2147483647;activatePump_~tmp~3 := activatePump_#t~ret16;havoc activatePump_#t~ret16; {17655#false} is VALID [2020-07-28 19:07:14,762 INFO L280 TraceCheckUtils]: 107: Hoare triple {17655#false} assume !(0 != activatePump_~tmp~3);~pumpRunning~0 := 1; {17655#false} is VALID [2020-07-28 19:07:14,763 INFO L280 TraceCheckUtils]: 108: Hoare triple {17655#false} havoc __utac_acc__Specification5_spec__3_#t~ret72, __utac_acc__Specification5_spec__3_#t~ret73, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {17655#false} is VALID [2020-07-28 19:07:14,763 INFO L280 TraceCheckUtils]: 109: Hoare triple {17655#false} __utac_acc__Specification5_spec__3_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret72 && __utac_acc__Specification5_spec__3_#t~ret72 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret72;havoc __utac_acc__Specification5_spec__3_#t~ret72; {17655#false} is VALID [2020-07-28 19:07:14,764 INFO L280 TraceCheckUtils]: 110: Hoare triple {17655#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {17655#false} is VALID [2020-07-28 19:07:14,764 INFO L280 TraceCheckUtils]: 111: Hoare triple {17655#false} __utac_acc__Specification5_spec__3_#t~ret73 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret73 && __utac_acc__Specification5_spec__3_#t~ret73 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret73;havoc __utac_acc__Specification5_spec__3_#t~ret73; {17655#false} is VALID [2020-07-28 19:07:14,765 INFO L280 TraceCheckUtils]: 112: Hoare triple {17655#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3; {17655#false} is VALID [2020-07-28 19:07:14,765 INFO L280 TraceCheckUtils]: 113: Hoare triple {17655#false} assume 0 == ~switchedOnBeforeTS~0; {17655#false} is VALID [2020-07-28 19:07:14,765 INFO L280 TraceCheckUtils]: 114: Hoare triple {17655#false} assume !false; {17655#false} is VALID [2020-07-28 19:07:14,773 INFO L134 CoverageAnalysis]: Checked inductivity of 120 backedges. 70 proven. 0 refuted. 0 times theorem prover too weak. 50 trivial. 0 not checked. [2020-07-28 19:07:14,773 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1460038479] [2020-07-28 19:07:14,774 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:07:14,774 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:07:14,774 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [21184327] [2020-07-28 19:07:14,775 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 115 [2020-07-28 19:07:14,775 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:07:14,775 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:07:14,860 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 84 edges. 84 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:07:14,860 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:07:14,861 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:07:14,861 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:07:14,861 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:07:14,861 INFO L87 Difference]: Start difference. First operand 314 states and 396 transitions. Second operand 5 states. [2020-07-28 19:07:18,093 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:07:18,093 INFO L93 Difference]: Finished difference Result 1144 states and 1458 transitions. [2020-07-28 19:07:18,093 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2020-07-28 19:07:18,094 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 115 [2020-07-28 19:07:18,094 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:07:18,094 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:07:18,095 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 262 transitions. [2020-07-28 19:07:18,095 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:07:18,096 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 262 transitions. [2020-07-28 19:07:18,096 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states and 262 transitions. [2020-07-28 19:07:18,390 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 262 edges. 262 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:07:18,425 INFO L225 Difference]: With dead ends: 1144 [2020-07-28 19:07:18,425 INFO L226 Difference]: Without dead ends: 837 [2020-07-28 19:07:18,426 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2020-07-28 19:07:18,427 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 837 states. [2020-07-28 19:07:19,451 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 837 to 320. [2020-07-28 19:07:19,452 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:07:19,452 INFO L82 GeneralOperation]: Start isEquivalent. First operand 837 states. Second operand 320 states. [2020-07-28 19:07:19,452 INFO L74 IsIncluded]: Start isIncluded. First operand 837 states. Second operand 320 states. [2020-07-28 19:07:19,452 INFO L87 Difference]: Start difference. First operand 837 states. Second operand 320 states. [2020-07-28 19:07:19,480 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:07:19,480 INFO L93 Difference]: Finished difference Result 837 states and 1067 transitions. [2020-07-28 19:07:19,480 INFO L276 IsEmpty]: Start isEmpty. Operand 837 states and 1067 transitions. [2020-07-28 19:07:19,482 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:07:19,482 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:07:19,482 INFO L74 IsIncluded]: Start isIncluded. First operand 320 states. Second operand 837 states. [2020-07-28 19:07:19,482 INFO L87 Difference]: Start difference. First operand 320 states. Second operand 837 states. [2020-07-28 19:07:19,521 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:07:19,521 INFO L93 Difference]: Finished difference Result 837 states and 1067 transitions. [2020-07-28 19:07:19,522 INFO L276 IsEmpty]: Start isEmpty. Operand 837 states and 1067 transitions. [2020-07-28 19:07:19,524 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:07:19,524 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:07:19,524 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:07:19,524 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:07:19,524 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 320 states. [2020-07-28 19:07:19,532 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 320 states to 320 states and 402 transitions. [2020-07-28 19:07:19,532 INFO L78 Accepts]: Start accepts. Automaton has 320 states and 402 transitions. Word has length 115 [2020-07-28 19:07:19,533 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:07:19,533 INFO L479 AbstractCegarLoop]: Abstraction has 320 states and 402 transitions. [2020-07-28 19:07:19,533 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:07:19,533 INFO L276 IsEmpty]: Start isEmpty. Operand 320 states and 402 transitions. [2020-07-28 19:07:19,534 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 116 [2020-07-28 19:07:19,534 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:07:19,535 INFO L422 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:07:19,535 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2020-07-28 19:07:19,535 INFO L427 AbstractCegarLoop]: === Iteration 14 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:07:19,535 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:07:19,536 INFO L82 PathProgramCache]: Analyzing trace with hash -1805495371, now seen corresponding path program 1 times [2020-07-28 19:07:19,536 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:07:19,536 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1826696581] [2020-07-28 19:07:19,536 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:07:19,567 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:07:19,644 INFO L280 TraceCheckUtils]: 0: Hoare triple {21459#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(13);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string21.base, #t~string21.offset, 1);call write~init~int(110, #t~string21.base, 1 + #t~string21.offset, 1);call write~init~int(0, #t~string21.base, 2 + #t~string21.offset, 1);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string23.base, #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 1 + #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 2 + #t~string23.offset, 1);call write~init~int(0, #t~string23.base, 3 + #t~string23.offset, 1);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string25.base, #t~string25.offset, 1);call write~init~int(80, #t~string25.base, 1 + #t~string25.offset, 1);call write~init~int(117, #t~string25.base, 2 + #t~string25.offset, 1);call write~init~int(109, #t~string25.base, 3 + #t~string25.offset, 1);call write~init~int(112, #t~string25.base, 4 + #t~string25.offset, 1);call write~init~int(58, #t~string25.base, 5 + #t~string25.offset, 1);call write~init~int(0, #t~string25.base, 6 + #t~string25.offset, 1);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string27.base, #t~string27.offset, 1);call write~init~int(110, #t~string27.base, 1 + #t~string27.offset, 1);call write~init~int(0, #t~string27.base, 2 + #t~string27.offset, 1);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string29.base, #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 1 + #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 2 + #t~string29.offset, 1);call write~init~int(0, #t~string29.base, 3 + #t~string29.offset, 1);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string31.base, #t~string31.offset, 1);call write~init~int(32, #t~string31.base, 1 + #t~string31.offset, 1);call write~init~int(0, #t~string31.base, 2 + #t~string31.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string33.base, #t~string33.offset, 1);call write~init~int(0, #t~string33.base, 1 + #t~string33.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(21);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(30);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(9);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(25);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4; {21461#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:07:19,645 INFO L280 TraceCheckUtils]: 1: Hoare triple {21461#(= 1 ~waterLevel~0)} havoc main_#res;havoc main_#t~ret74, main_~retValue_acc~11, main_~tmp~10;havoc main_~retValue_acc~11;havoc main_~tmp~10; {21461#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:07:19,646 INFO L280 TraceCheckUtils]: 2: Hoare triple {21461#(= 1 ~waterLevel~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~13;havoc valid_product_~retValue_acc~13;valid_product_~retValue_acc~13 := 1;valid_product_#res := valid_product_~retValue_acc~13; {21461#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:07:19,646 INFO L280 TraceCheckUtils]: 3: Hoare triple {21461#(= 1 ~waterLevel~0)} main_#t~ret74 := valid_product_#res;assume -2147483648 <= main_#t~ret74 && main_#t~ret74 <= 2147483647;main_~tmp~10 := main_#t~ret74;havoc main_#t~ret74; {21461#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:07:19,647 INFO L280 TraceCheckUtils]: 4: Hoare triple {21461#(= 1 ~waterLevel~0)} assume 0 != main_~tmp~10; {21461#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:07:19,648 INFO L280 TraceCheckUtils]: 5: Hoare triple {21461#(= 1 ~waterLevel~0)} ~switchedOnBeforeTS~0 := 0; {21461#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:07:19,649 INFO L280 TraceCheckUtils]: 6: Hoare triple {21461#(= 1 ~waterLevel~0)} havoc test_#t~nondet10, test_#t~nondet11, test_#t~nondet12, test_#t~nondet13, test_~splverifierCounter~0, test_~tmp~0, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~0;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {21461#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:07:19,650 INFO L280 TraceCheckUtils]: 7: Hoare triple {21461#(= 1 ~waterLevel~0)} assume !false; {21461#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:07:19,650 INFO L280 TraceCheckUtils]: 8: Hoare triple {21461#(= 1 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {21461#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:07:19,651 INFO L280 TraceCheckUtils]: 9: Hoare triple {21461#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet10 && test_#t~nondet10 <= 2147483647;test_~tmp~0 := test_#t~nondet10;havoc test_#t~nondet10; {21461#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:07:19,652 INFO L280 TraceCheckUtils]: 10: Hoare triple {21461#(= 1 ~waterLevel~0)} assume 0 != test_~tmp~0; {21461#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:07:19,653 INFO L280 TraceCheckUtils]: 11: Hoare triple {21461#(= 1 ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:19,654 INFO L280 TraceCheckUtils]: 12: Hoare triple {21462#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp___0~0 := test_#t~nondet11;havoc test_#t~nondet11; {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:19,655 INFO L280 TraceCheckUtils]: 13: Hoare triple {21462#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___0~0); {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:19,656 INFO L280 TraceCheckUtils]: 14: Hoare triple {21462#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___2~0 := test_#t~nondet12;havoc test_#t~nondet12; {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:19,656 INFO L280 TraceCheckUtils]: 15: Hoare triple {21462#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0; {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:19,657 INFO L280 TraceCheckUtils]: 16: Hoare triple {21462#(<= ~waterLevel~0 2)} havoc __utac_acc__Specification5_spec__2_#t~ret71;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:19,658 INFO L280 TraceCheckUtils]: 17: Hoare triple {21462#(<= ~waterLevel~0 2)} __utac_acc__Specification5_spec__2_#t~ret71 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret71 && __utac_acc__Specification5_spec__2_#t~ret71 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret71;havoc __utac_acc__Specification5_spec__2_#t~ret71; {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:19,658 INFO L280 TraceCheckUtils]: 18: Hoare triple {21462#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0); {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:19,659 INFO L280 TraceCheckUtils]: 19: Hoare triple {21462#(<= ~waterLevel~0 2)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:19,660 INFO L280 TraceCheckUtils]: 20: Hoare triple {21462#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:19,661 INFO L280 TraceCheckUtils]: 21: Hoare triple {21462#(<= ~waterLevel~0 2)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret34, isHighWaterLevel_~retValue_acc~6, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~6;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:19,661 INFO L280 TraceCheckUtils]: 22: Hoare triple {21462#(<= ~waterLevel~0 2)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:19,662 INFO L280 TraceCheckUtils]: 23: Hoare triple {21462#(<= ~waterLevel~0 2)} isHighWaterLevel_#t~ret34 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret34 && isHighWaterLevel_#t~ret34 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret34;havoc isHighWaterLevel_#t~ret34; {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:19,663 INFO L280 TraceCheckUtils]: 24: Hoare triple {21462#(<= ~waterLevel~0 2)} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:19,663 INFO L280 TraceCheckUtils]: 25: Hoare triple {21462#(<= ~waterLevel~0 2)} isHighWaterLevel_~retValue_acc~6 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~6; {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:19,664 INFO L280 TraceCheckUtils]: 26: Hoare triple {21462#(<= ~waterLevel~0 2)} processEnvironment__wrappee__highWaterSensor_#t~ret14 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret14 && processEnvironment__wrappee__highWaterSensor_#t~ret14 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~1 := processEnvironment__wrappee__highWaterSensor_#t~ret14;havoc processEnvironment__wrappee__highWaterSensor_#t~ret14; {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:19,665 INFO L280 TraceCheckUtils]: 27: Hoare triple {21462#(<= ~waterLevel~0 2)} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc activatePump_#t~ret16, activatePump_~tmp~3;havoc activatePump_~tmp~3;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret17, isMethaneAlarm_~retValue_acc~4;havoc isMethaneAlarm_~retValue_acc~4;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:19,666 INFO L280 TraceCheckUtils]: 28: Hoare triple {21462#(<= ~waterLevel~0 2)} isMethaneAlarm_#t~ret17 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret17 && isMethaneAlarm_#t~ret17 <= 2147483647;isMethaneAlarm_~retValue_acc~4 := isMethaneAlarm_#t~ret17;havoc isMethaneAlarm_#t~ret17;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~4; {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:19,666 INFO L280 TraceCheckUtils]: 29: Hoare triple {21462#(<= ~waterLevel~0 2)} activatePump_#t~ret16 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret16 && activatePump_#t~ret16 <= 2147483647;activatePump_~tmp~3 := activatePump_#t~ret16;havoc activatePump_#t~ret16; {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:19,667 INFO L280 TraceCheckUtils]: 30: Hoare triple {21462#(<= ~waterLevel~0 2)} assume !(0 != activatePump_~tmp~3);~pumpRunning~0 := 1; {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:19,668 INFO L280 TraceCheckUtils]: 31: Hoare triple {21462#(<= ~waterLevel~0 2)} havoc __utac_acc__Specification5_spec__3_#t~ret72, __utac_acc__Specification5_spec__3_#t~ret73, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:19,669 INFO L280 TraceCheckUtils]: 32: Hoare triple {21462#(<= ~waterLevel~0 2)} __utac_acc__Specification5_spec__3_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret72 && __utac_acc__Specification5_spec__3_#t~ret72 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret72;havoc __utac_acc__Specification5_spec__3_#t~ret72; {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:19,670 INFO L280 TraceCheckUtils]: 33: Hoare triple {21462#(<= ~waterLevel~0 2)} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~9); {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:19,670 INFO L280 TraceCheckUtils]: 34: Hoare triple {21462#(<= ~waterLevel~0 2)} assume !false; {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:19,671 INFO L280 TraceCheckUtils]: 35: Hoare triple {21462#(<= ~waterLevel~0 2)} assume test_~splverifierCounter~0 < 4; {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:19,672 INFO L280 TraceCheckUtils]: 36: Hoare triple {21462#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet10 && test_#t~nondet10 <= 2147483647;test_~tmp~0 := test_#t~nondet10;havoc test_#t~nondet10; {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:19,673 INFO L280 TraceCheckUtils]: 37: Hoare triple {21462#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp~0); {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:19,674 INFO L280 TraceCheckUtils]: 38: Hoare triple {21462#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp___0~0 := test_#t~nondet11;havoc test_#t~nondet11; {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:19,674 INFO L280 TraceCheckUtils]: 39: Hoare triple {21462#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___0~0); {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:19,675 INFO L280 TraceCheckUtils]: 40: Hoare triple {21462#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___2~0 := test_#t~nondet12;havoc test_#t~nondet12; {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:19,676 INFO L280 TraceCheckUtils]: 41: Hoare triple {21462#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0; {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:19,676 INFO L280 TraceCheckUtils]: 42: Hoare triple {21462#(<= ~waterLevel~0 2)} havoc __utac_acc__Specification5_spec__2_#t~ret71;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:19,677 INFO L280 TraceCheckUtils]: 43: Hoare triple {21462#(<= ~waterLevel~0 2)} __utac_acc__Specification5_spec__2_#t~ret71 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret71 && __utac_acc__Specification5_spec__2_#t~ret71 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret71;havoc __utac_acc__Specification5_spec__2_#t~ret71; {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:19,678 INFO L280 TraceCheckUtils]: 44: Hoare triple {21462#(<= ~waterLevel~0 2)} assume 0 != ~pumpRunning~0; {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:19,679 INFO L280 TraceCheckUtils]: 45: Hoare triple {21462#(<= ~waterLevel~0 2)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:19,680 INFO L280 TraceCheckUtils]: 46: Hoare triple {21463#(<= ~waterLevel~0 1)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:19,680 INFO L280 TraceCheckUtils]: 47: Hoare triple {21463#(<= ~waterLevel~0 1)} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret35, isLowWaterLevel_~retValue_acc~7, isLowWaterLevel_~tmp~5, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~7;havoc isLowWaterLevel_~tmp~5;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~3;havoc isLowWaterSensorDry_~retValue_acc~3;isLowWaterSensorDry_~retValue_acc~3 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~3; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:19,681 INFO L280 TraceCheckUtils]: 48: Hoare triple {21463#(<= ~waterLevel~0 1)} isLowWaterLevel_#t~ret35 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret35 && isLowWaterLevel_#t~ret35 <= 2147483647;isLowWaterLevel_~tmp~5 := isLowWaterLevel_#t~ret35;havoc isLowWaterLevel_#t~ret35; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:19,682 INFO L280 TraceCheckUtils]: 49: Hoare triple {21463#(<= ~waterLevel~0 1)} assume 0 != isLowWaterLevel_~tmp~5;isLowWaterLevel_~tmp___0~2 := 0; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:19,682 INFO L280 TraceCheckUtils]: 50: Hoare triple {21463#(<= ~waterLevel~0 1)} isLowWaterLevel_~retValue_acc~7 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~7; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:19,683 INFO L280 TraceCheckUtils]: 51: Hoare triple {21463#(<= ~waterLevel~0 1)} processEnvironment_#t~ret15 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret15 && processEnvironment_#t~ret15 <= 2147483647;processEnvironment_~tmp~2 := processEnvironment_#t~ret15;havoc processEnvironment_#t~ret15; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:19,683 INFO L280 TraceCheckUtils]: 52: Hoare triple {21463#(<= ~waterLevel~0 1)} assume !(0 != processEnvironment_~tmp~2);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:19,684 INFO L280 TraceCheckUtils]: 53: Hoare triple {21463#(<= ~waterLevel~0 1)} assume !(0 == ~pumpRunning~0); {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:19,684 INFO L280 TraceCheckUtils]: 54: Hoare triple {21463#(<= ~waterLevel~0 1)} havoc __utac_acc__Specification5_spec__3_#t~ret72, __utac_acc__Specification5_spec__3_#t~ret73, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:19,685 INFO L280 TraceCheckUtils]: 55: Hoare triple {21463#(<= ~waterLevel~0 1)} __utac_acc__Specification5_spec__3_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret72 && __utac_acc__Specification5_spec__3_#t~ret72 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret72;havoc __utac_acc__Specification5_spec__3_#t~ret72; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:19,686 INFO L280 TraceCheckUtils]: 56: Hoare triple {21463#(<= ~waterLevel~0 1)} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:19,686 INFO L280 TraceCheckUtils]: 57: Hoare triple {21463#(<= ~waterLevel~0 1)} __utac_acc__Specification5_spec__3_#t~ret73 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret73 && __utac_acc__Specification5_spec__3_#t~ret73 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret73;havoc __utac_acc__Specification5_spec__3_#t~ret73; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:19,687 INFO L280 TraceCheckUtils]: 58: Hoare triple {21463#(<= ~waterLevel~0 1)} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:19,688 INFO L280 TraceCheckUtils]: 59: Hoare triple {21463#(<= ~waterLevel~0 1)} assume !(0 == ~switchedOnBeforeTS~0); {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:19,689 INFO L280 TraceCheckUtils]: 60: Hoare triple {21463#(<= ~waterLevel~0 1)} assume !false; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:19,690 INFO L280 TraceCheckUtils]: 61: Hoare triple {21463#(<= ~waterLevel~0 1)} assume test_~splverifierCounter~0 < 4; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:19,690 INFO L280 TraceCheckUtils]: 62: Hoare triple {21463#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet10 && test_#t~nondet10 <= 2147483647;test_~tmp~0 := test_#t~nondet10;havoc test_#t~nondet10; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:19,691 INFO L280 TraceCheckUtils]: 63: Hoare triple {21463#(<= ~waterLevel~0 1)} assume !(0 != test_~tmp~0); {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:19,692 INFO L280 TraceCheckUtils]: 64: Hoare triple {21463#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp___0~0 := test_#t~nondet11;havoc test_#t~nondet11; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:19,693 INFO L280 TraceCheckUtils]: 65: Hoare triple {21463#(<= ~waterLevel~0 1)} assume !(0 != test_~tmp___0~0); {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:19,694 INFO L280 TraceCheckUtils]: 66: Hoare triple {21463#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___2~0 := test_#t~nondet12;havoc test_#t~nondet12; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:19,694 INFO L280 TraceCheckUtils]: 67: Hoare triple {21463#(<= ~waterLevel~0 1)} assume 0 != test_~tmp___2~0; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:19,695 INFO L280 TraceCheckUtils]: 68: Hoare triple {21463#(<= ~waterLevel~0 1)} havoc __utac_acc__Specification5_spec__2_#t~ret71;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:19,696 INFO L280 TraceCheckUtils]: 69: Hoare triple {21463#(<= ~waterLevel~0 1)} __utac_acc__Specification5_spec__2_#t~ret71 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret71 && __utac_acc__Specification5_spec__2_#t~ret71 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret71;havoc __utac_acc__Specification5_spec__2_#t~ret71; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:19,697 INFO L280 TraceCheckUtils]: 70: Hoare triple {21463#(<= ~waterLevel~0 1)} assume 0 != ~pumpRunning~0; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:19,698 INFO L280 TraceCheckUtils]: 71: Hoare triple {21463#(<= ~waterLevel~0 1)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {21464#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:07:19,699 INFO L280 TraceCheckUtils]: 72: Hoare triple {21464#(<= ~waterLevel~0 0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {21464#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:07:19,699 INFO L280 TraceCheckUtils]: 73: Hoare triple {21464#(<= ~waterLevel~0 0)} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret35, isLowWaterLevel_~retValue_acc~7, isLowWaterLevel_~tmp~5, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~7;havoc isLowWaterLevel_~tmp~5;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~3;havoc isLowWaterSensorDry_~retValue_acc~3;isLowWaterSensorDry_~retValue_acc~3 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~3; {21464#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:07:19,700 INFO L280 TraceCheckUtils]: 74: Hoare triple {21464#(<= ~waterLevel~0 0)} isLowWaterLevel_#t~ret35 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret35 && isLowWaterLevel_#t~ret35 <= 2147483647;isLowWaterLevel_~tmp~5 := isLowWaterLevel_#t~ret35;havoc isLowWaterLevel_#t~ret35; {21464#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:07:19,701 INFO L280 TraceCheckUtils]: 75: Hoare triple {21464#(<= ~waterLevel~0 0)} assume !(0 != isLowWaterLevel_~tmp~5);isLowWaterLevel_~tmp___0~2 := 1; {21464#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:07:19,702 INFO L280 TraceCheckUtils]: 76: Hoare triple {21464#(<= ~waterLevel~0 0)} isLowWaterLevel_~retValue_acc~7 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~7; {21464#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:07:19,702 INFO L280 TraceCheckUtils]: 77: Hoare triple {21464#(<= ~waterLevel~0 0)} processEnvironment_#t~ret15 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret15 && processEnvironment_#t~ret15 <= 2147483647;processEnvironment_~tmp~2 := processEnvironment_#t~ret15;havoc processEnvironment_#t~ret15; {21464#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:07:19,703 INFO L280 TraceCheckUtils]: 78: Hoare triple {21464#(<= ~waterLevel~0 0)} assume 0 != processEnvironment_~tmp~2;~pumpRunning~0 := 0; {21464#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:07:19,704 INFO L280 TraceCheckUtils]: 79: Hoare triple {21464#(<= ~waterLevel~0 0)} havoc __utac_acc__Specification5_spec__3_#t~ret72, __utac_acc__Specification5_spec__3_#t~ret73, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {21464#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:07:19,705 INFO L280 TraceCheckUtils]: 80: Hoare triple {21464#(<= ~waterLevel~0 0)} __utac_acc__Specification5_spec__3_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret72 && __utac_acc__Specification5_spec__3_#t~ret72 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret72;havoc __utac_acc__Specification5_spec__3_#t~ret72; {21464#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:07:19,706 INFO L280 TraceCheckUtils]: 81: Hoare triple {21464#(<= ~waterLevel~0 0)} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {21464#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:07:19,707 INFO L280 TraceCheckUtils]: 82: Hoare triple {21464#(<= ~waterLevel~0 0)} __utac_acc__Specification5_spec__3_#t~ret73 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret73 && __utac_acc__Specification5_spec__3_#t~ret73 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret73;havoc __utac_acc__Specification5_spec__3_#t~ret73; {21464#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:07:19,708 INFO L280 TraceCheckUtils]: 83: Hoare triple {21464#(<= ~waterLevel~0 0)} assume !(0 != __utac_acc__Specification5_spec__3_~tmp___0~3); {21464#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:07:19,709 INFO L280 TraceCheckUtils]: 84: Hoare triple {21464#(<= ~waterLevel~0 0)} assume !false; {21464#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:07:19,710 INFO L280 TraceCheckUtils]: 85: Hoare triple {21464#(<= ~waterLevel~0 0)} assume test_~splverifierCounter~0 < 4; {21464#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:07:19,711 INFO L280 TraceCheckUtils]: 86: Hoare triple {21464#(<= ~waterLevel~0 0)} assume -2147483648 <= test_#t~nondet10 && test_#t~nondet10 <= 2147483647;test_~tmp~0 := test_#t~nondet10;havoc test_#t~nondet10; {21464#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:07:19,712 INFO L280 TraceCheckUtils]: 87: Hoare triple {21464#(<= ~waterLevel~0 0)} assume 0 != test_~tmp~0; {21464#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:07:19,713 INFO L280 TraceCheckUtils]: 88: Hoare triple {21464#(<= ~waterLevel~0 0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:19,714 INFO L280 TraceCheckUtils]: 89: Hoare triple {21463#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp___0~0 := test_#t~nondet11;havoc test_#t~nondet11; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:19,715 INFO L280 TraceCheckUtils]: 90: Hoare triple {21463#(<= ~waterLevel~0 1)} assume !(0 != test_~tmp___0~0); {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:19,716 INFO L280 TraceCheckUtils]: 91: Hoare triple {21463#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___2~0 := test_#t~nondet12;havoc test_#t~nondet12; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:19,717 INFO L280 TraceCheckUtils]: 92: Hoare triple {21463#(<= ~waterLevel~0 1)} assume 0 != test_~tmp___2~0; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:19,718 INFO L280 TraceCheckUtils]: 93: Hoare triple {21463#(<= ~waterLevel~0 1)} havoc __utac_acc__Specification5_spec__2_#t~ret71;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:19,718 INFO L280 TraceCheckUtils]: 94: Hoare triple {21463#(<= ~waterLevel~0 1)} __utac_acc__Specification5_spec__2_#t~ret71 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret71 && __utac_acc__Specification5_spec__2_#t~ret71 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret71;havoc __utac_acc__Specification5_spec__2_#t~ret71; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:19,719 INFO L280 TraceCheckUtils]: 95: Hoare triple {21463#(<= ~waterLevel~0 1)} assume !(0 != ~pumpRunning~0); {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:19,720 INFO L280 TraceCheckUtils]: 96: Hoare triple {21463#(<= ~waterLevel~0 1)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:19,748 INFO L280 TraceCheckUtils]: 97: Hoare triple {21463#(<= ~waterLevel~0 1)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:19,755 INFO L280 TraceCheckUtils]: 98: Hoare triple {21463#(<= ~waterLevel~0 1)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret34, isHighWaterLevel_~retValue_acc~6, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~6;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:19,758 INFO L280 TraceCheckUtils]: 99: Hoare triple {21463#(<= ~waterLevel~0 1)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {21460#false} is VALID [2020-07-28 19:07:19,759 INFO L280 TraceCheckUtils]: 100: Hoare triple {21460#false} isHighWaterLevel_#t~ret34 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret34 && isHighWaterLevel_#t~ret34 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret34;havoc isHighWaterLevel_#t~ret34; {21460#false} is VALID [2020-07-28 19:07:19,759 INFO L280 TraceCheckUtils]: 101: Hoare triple {21460#false} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {21460#false} is VALID [2020-07-28 19:07:19,759 INFO L280 TraceCheckUtils]: 102: Hoare triple {21460#false} isHighWaterLevel_~retValue_acc~6 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~6; {21460#false} is VALID [2020-07-28 19:07:19,759 INFO L280 TraceCheckUtils]: 103: Hoare triple {21460#false} processEnvironment__wrappee__highWaterSensor_#t~ret14 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret14 && processEnvironment__wrappee__highWaterSensor_#t~ret14 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~1 := processEnvironment__wrappee__highWaterSensor_#t~ret14;havoc processEnvironment__wrappee__highWaterSensor_#t~ret14; {21460#false} is VALID [2020-07-28 19:07:19,759 INFO L280 TraceCheckUtils]: 104: Hoare triple {21460#false} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc activatePump_#t~ret16, activatePump_~tmp~3;havoc activatePump_~tmp~3;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret17, isMethaneAlarm_~retValue_acc~4;havoc isMethaneAlarm_~retValue_acc~4;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {21460#false} is VALID [2020-07-28 19:07:19,759 INFO L280 TraceCheckUtils]: 105: Hoare triple {21460#false} isMethaneAlarm_#t~ret17 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret17 && isMethaneAlarm_#t~ret17 <= 2147483647;isMethaneAlarm_~retValue_acc~4 := isMethaneAlarm_#t~ret17;havoc isMethaneAlarm_#t~ret17;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~4; {21460#false} is VALID [2020-07-28 19:07:19,760 INFO L280 TraceCheckUtils]: 106: Hoare triple {21460#false} activatePump_#t~ret16 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret16 && activatePump_#t~ret16 <= 2147483647;activatePump_~tmp~3 := activatePump_#t~ret16;havoc activatePump_#t~ret16; {21460#false} is VALID [2020-07-28 19:07:19,760 INFO L280 TraceCheckUtils]: 107: Hoare triple {21460#false} assume !(0 != activatePump_~tmp~3);~pumpRunning~0 := 1; {21460#false} is VALID [2020-07-28 19:07:19,760 INFO L280 TraceCheckUtils]: 108: Hoare triple {21460#false} havoc __utac_acc__Specification5_spec__3_#t~ret72, __utac_acc__Specification5_spec__3_#t~ret73, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {21460#false} is VALID [2020-07-28 19:07:19,760 INFO L280 TraceCheckUtils]: 109: Hoare triple {21460#false} __utac_acc__Specification5_spec__3_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret72 && __utac_acc__Specification5_spec__3_#t~ret72 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret72;havoc __utac_acc__Specification5_spec__3_#t~ret72; {21460#false} is VALID [2020-07-28 19:07:19,760 INFO L280 TraceCheckUtils]: 110: Hoare triple {21460#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {21460#false} is VALID [2020-07-28 19:07:19,760 INFO L280 TraceCheckUtils]: 111: Hoare triple {21460#false} __utac_acc__Specification5_spec__3_#t~ret73 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret73 && __utac_acc__Specification5_spec__3_#t~ret73 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret73;havoc __utac_acc__Specification5_spec__3_#t~ret73; {21460#false} is VALID [2020-07-28 19:07:19,761 INFO L280 TraceCheckUtils]: 112: Hoare triple {21460#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3; {21460#false} is VALID [2020-07-28 19:07:19,761 INFO L280 TraceCheckUtils]: 113: Hoare triple {21460#false} assume 0 == ~switchedOnBeforeTS~0; {21460#false} is VALID [2020-07-28 19:07:19,761 INFO L280 TraceCheckUtils]: 114: Hoare triple {21460#false} assume !false; {21460#false} is VALID [2020-07-28 19:07:19,773 INFO L134 CoverageAnalysis]: Checked inductivity of 120 backedges. 89 proven. 15 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2020-07-28 19:07:19,773 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1826696581] [2020-07-28 19:07:19,774 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1834340347] [2020-07-28 19:07:19,774 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 4 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 4 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2020-07-28 19:07:19,896 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:07:19,898 INFO L263 TraceCheckSpWp]: Trace formula consists of 607 conjuncts, 6 conjunts are in the unsatisfiable core [2020-07-28 19:07:19,929 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:07:19,933 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2020-07-28 19:07:20,154 INFO L280 TraceCheckUtils]: 0: Hoare triple {21459#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(13);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string21.base, #t~string21.offset, 1);call write~init~int(110, #t~string21.base, 1 + #t~string21.offset, 1);call write~init~int(0, #t~string21.base, 2 + #t~string21.offset, 1);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string23.base, #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 1 + #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 2 + #t~string23.offset, 1);call write~init~int(0, #t~string23.base, 3 + #t~string23.offset, 1);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string25.base, #t~string25.offset, 1);call write~init~int(80, #t~string25.base, 1 + #t~string25.offset, 1);call write~init~int(117, #t~string25.base, 2 + #t~string25.offset, 1);call write~init~int(109, #t~string25.base, 3 + #t~string25.offset, 1);call write~init~int(112, #t~string25.base, 4 + #t~string25.offset, 1);call write~init~int(58, #t~string25.base, 5 + #t~string25.offset, 1);call write~init~int(0, #t~string25.base, 6 + #t~string25.offset, 1);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string27.base, #t~string27.offset, 1);call write~init~int(110, #t~string27.base, 1 + #t~string27.offset, 1);call write~init~int(0, #t~string27.base, 2 + #t~string27.offset, 1);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string29.base, #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 1 + #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 2 + #t~string29.offset, 1);call write~init~int(0, #t~string29.base, 3 + #t~string29.offset, 1);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string31.base, #t~string31.offset, 1);call write~init~int(32, #t~string31.base, 1 + #t~string31.offset, 1);call write~init~int(0, #t~string31.base, 2 + #t~string31.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string33.base, #t~string33.offset, 1);call write~init~int(0, #t~string33.base, 1 + #t~string33.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(21);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(30);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(9);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(25);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:20,155 INFO L280 TraceCheckUtils]: 1: Hoare triple {21463#(<= ~waterLevel~0 1)} havoc main_#res;havoc main_#t~ret74, main_~retValue_acc~11, main_~tmp~10;havoc main_~retValue_acc~11;havoc main_~tmp~10; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:20,156 INFO L280 TraceCheckUtils]: 2: Hoare triple {21463#(<= ~waterLevel~0 1)} havoc valid_product_#res;havoc valid_product_~retValue_acc~13;havoc valid_product_~retValue_acc~13;valid_product_~retValue_acc~13 := 1;valid_product_#res := valid_product_~retValue_acc~13; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:20,156 INFO L280 TraceCheckUtils]: 3: Hoare triple {21463#(<= ~waterLevel~0 1)} main_#t~ret74 := valid_product_#res;assume -2147483648 <= main_#t~ret74 && main_#t~ret74 <= 2147483647;main_~tmp~10 := main_#t~ret74;havoc main_#t~ret74; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:20,157 INFO L280 TraceCheckUtils]: 4: Hoare triple {21463#(<= ~waterLevel~0 1)} assume 0 != main_~tmp~10; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:20,157 INFO L280 TraceCheckUtils]: 5: Hoare triple {21463#(<= ~waterLevel~0 1)} ~switchedOnBeforeTS~0 := 0; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:20,163 INFO L280 TraceCheckUtils]: 6: Hoare triple {21463#(<= ~waterLevel~0 1)} havoc test_#t~nondet10, test_#t~nondet11, test_#t~nondet12, test_#t~nondet13, test_~splverifierCounter~0, test_~tmp~0, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~0;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:20,164 INFO L280 TraceCheckUtils]: 7: Hoare triple {21463#(<= ~waterLevel~0 1)} assume !false; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:20,165 INFO L280 TraceCheckUtils]: 8: Hoare triple {21463#(<= ~waterLevel~0 1)} assume test_~splverifierCounter~0 < 4; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:20,165 INFO L280 TraceCheckUtils]: 9: Hoare triple {21463#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet10 && test_#t~nondet10 <= 2147483647;test_~tmp~0 := test_#t~nondet10;havoc test_#t~nondet10; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:20,166 INFO L280 TraceCheckUtils]: 10: Hoare triple {21463#(<= ~waterLevel~0 1)} assume 0 != test_~tmp~0; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:20,167 INFO L280 TraceCheckUtils]: 11: Hoare triple {21463#(<= ~waterLevel~0 1)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:20,167 INFO L280 TraceCheckUtils]: 12: Hoare triple {21462#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp___0~0 := test_#t~nondet11;havoc test_#t~nondet11; {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:20,168 INFO L280 TraceCheckUtils]: 13: Hoare triple {21462#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___0~0); {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:20,168 INFO L280 TraceCheckUtils]: 14: Hoare triple {21462#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___2~0 := test_#t~nondet12;havoc test_#t~nondet12; {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:20,169 INFO L280 TraceCheckUtils]: 15: Hoare triple {21462#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0; {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:20,169 INFO L280 TraceCheckUtils]: 16: Hoare triple {21462#(<= ~waterLevel~0 2)} havoc __utac_acc__Specification5_spec__2_#t~ret71;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:20,170 INFO L280 TraceCheckUtils]: 17: Hoare triple {21462#(<= ~waterLevel~0 2)} __utac_acc__Specification5_spec__2_#t~ret71 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret71 && __utac_acc__Specification5_spec__2_#t~ret71 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret71;havoc __utac_acc__Specification5_spec__2_#t~ret71; {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:20,170 INFO L280 TraceCheckUtils]: 18: Hoare triple {21462#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0); {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:20,171 INFO L280 TraceCheckUtils]: 19: Hoare triple {21462#(<= ~waterLevel~0 2)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:20,171 INFO L280 TraceCheckUtils]: 20: Hoare triple {21462#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:20,172 INFO L280 TraceCheckUtils]: 21: Hoare triple {21462#(<= ~waterLevel~0 2)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret34, isHighWaterLevel_~retValue_acc~6, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~6;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:20,173 INFO L280 TraceCheckUtils]: 22: Hoare triple {21462#(<= ~waterLevel~0 2)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:20,173 INFO L280 TraceCheckUtils]: 23: Hoare triple {21462#(<= ~waterLevel~0 2)} isHighWaterLevel_#t~ret34 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret34 && isHighWaterLevel_#t~ret34 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret34;havoc isHighWaterLevel_#t~ret34; {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:20,174 INFO L280 TraceCheckUtils]: 24: Hoare triple {21462#(<= ~waterLevel~0 2)} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:20,174 INFO L280 TraceCheckUtils]: 25: Hoare triple {21462#(<= ~waterLevel~0 2)} isHighWaterLevel_~retValue_acc~6 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~6; {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:20,175 INFO L280 TraceCheckUtils]: 26: Hoare triple {21462#(<= ~waterLevel~0 2)} processEnvironment__wrappee__highWaterSensor_#t~ret14 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret14 && processEnvironment__wrappee__highWaterSensor_#t~ret14 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~1 := processEnvironment__wrappee__highWaterSensor_#t~ret14;havoc processEnvironment__wrappee__highWaterSensor_#t~ret14; {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:20,175 INFO L280 TraceCheckUtils]: 27: Hoare triple {21462#(<= ~waterLevel~0 2)} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc activatePump_#t~ret16, activatePump_~tmp~3;havoc activatePump_~tmp~3;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret17, isMethaneAlarm_~retValue_acc~4;havoc isMethaneAlarm_~retValue_acc~4;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:20,176 INFO L280 TraceCheckUtils]: 28: Hoare triple {21462#(<= ~waterLevel~0 2)} isMethaneAlarm_#t~ret17 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret17 && isMethaneAlarm_#t~ret17 <= 2147483647;isMethaneAlarm_~retValue_acc~4 := isMethaneAlarm_#t~ret17;havoc isMethaneAlarm_#t~ret17;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~4; {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:20,176 INFO L280 TraceCheckUtils]: 29: Hoare triple {21462#(<= ~waterLevel~0 2)} activatePump_#t~ret16 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret16 && activatePump_#t~ret16 <= 2147483647;activatePump_~tmp~3 := activatePump_#t~ret16;havoc activatePump_#t~ret16; {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:20,177 INFO L280 TraceCheckUtils]: 30: Hoare triple {21462#(<= ~waterLevel~0 2)} assume !(0 != activatePump_~tmp~3);~pumpRunning~0 := 1; {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:20,177 INFO L280 TraceCheckUtils]: 31: Hoare triple {21462#(<= ~waterLevel~0 2)} havoc __utac_acc__Specification5_spec__3_#t~ret72, __utac_acc__Specification5_spec__3_#t~ret73, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:20,178 INFO L280 TraceCheckUtils]: 32: Hoare triple {21462#(<= ~waterLevel~0 2)} __utac_acc__Specification5_spec__3_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret72 && __utac_acc__Specification5_spec__3_#t~ret72 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret72;havoc __utac_acc__Specification5_spec__3_#t~ret72; {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:20,179 INFO L280 TraceCheckUtils]: 33: Hoare triple {21462#(<= ~waterLevel~0 2)} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~9); {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:20,179 INFO L280 TraceCheckUtils]: 34: Hoare triple {21462#(<= ~waterLevel~0 2)} assume !false; {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:20,180 INFO L280 TraceCheckUtils]: 35: Hoare triple {21462#(<= ~waterLevel~0 2)} assume test_~splverifierCounter~0 < 4; {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:20,180 INFO L280 TraceCheckUtils]: 36: Hoare triple {21462#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet10 && test_#t~nondet10 <= 2147483647;test_~tmp~0 := test_#t~nondet10;havoc test_#t~nondet10; {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:20,181 INFO L280 TraceCheckUtils]: 37: Hoare triple {21462#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp~0); {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:20,181 INFO L280 TraceCheckUtils]: 38: Hoare triple {21462#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp___0~0 := test_#t~nondet11;havoc test_#t~nondet11; {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:20,182 INFO L280 TraceCheckUtils]: 39: Hoare triple {21462#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___0~0); {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:20,182 INFO L280 TraceCheckUtils]: 40: Hoare triple {21462#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___2~0 := test_#t~nondet12;havoc test_#t~nondet12; {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:20,183 INFO L280 TraceCheckUtils]: 41: Hoare triple {21462#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0; {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:20,183 INFO L280 TraceCheckUtils]: 42: Hoare triple {21462#(<= ~waterLevel~0 2)} havoc __utac_acc__Specification5_spec__2_#t~ret71;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:20,184 INFO L280 TraceCheckUtils]: 43: Hoare triple {21462#(<= ~waterLevel~0 2)} __utac_acc__Specification5_spec__2_#t~ret71 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret71 && __utac_acc__Specification5_spec__2_#t~ret71 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret71;havoc __utac_acc__Specification5_spec__2_#t~ret71; {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:20,184 INFO L280 TraceCheckUtils]: 44: Hoare triple {21462#(<= ~waterLevel~0 2)} assume 0 != ~pumpRunning~0; {21462#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:20,186 INFO L280 TraceCheckUtils]: 45: Hoare triple {21462#(<= ~waterLevel~0 2)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:20,186 INFO L280 TraceCheckUtils]: 46: Hoare triple {21463#(<= ~waterLevel~0 1)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:20,187 INFO L280 TraceCheckUtils]: 47: Hoare triple {21463#(<= ~waterLevel~0 1)} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret35, isLowWaterLevel_~retValue_acc~7, isLowWaterLevel_~tmp~5, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~7;havoc isLowWaterLevel_~tmp~5;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~3;havoc isLowWaterSensorDry_~retValue_acc~3;isLowWaterSensorDry_~retValue_acc~3 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~3; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:20,187 INFO L280 TraceCheckUtils]: 48: Hoare triple {21463#(<= ~waterLevel~0 1)} isLowWaterLevel_#t~ret35 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret35 && isLowWaterLevel_#t~ret35 <= 2147483647;isLowWaterLevel_~tmp~5 := isLowWaterLevel_#t~ret35;havoc isLowWaterLevel_#t~ret35; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:20,188 INFO L280 TraceCheckUtils]: 49: Hoare triple {21463#(<= ~waterLevel~0 1)} assume 0 != isLowWaterLevel_~tmp~5;isLowWaterLevel_~tmp___0~2 := 0; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:20,188 INFO L280 TraceCheckUtils]: 50: Hoare triple {21463#(<= ~waterLevel~0 1)} isLowWaterLevel_~retValue_acc~7 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~7; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:20,189 INFO L280 TraceCheckUtils]: 51: Hoare triple {21463#(<= ~waterLevel~0 1)} processEnvironment_#t~ret15 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret15 && processEnvironment_#t~ret15 <= 2147483647;processEnvironment_~tmp~2 := processEnvironment_#t~ret15;havoc processEnvironment_#t~ret15; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:20,189 INFO L280 TraceCheckUtils]: 52: Hoare triple {21463#(<= ~waterLevel~0 1)} assume !(0 != processEnvironment_~tmp~2);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:20,190 INFO L280 TraceCheckUtils]: 53: Hoare triple {21463#(<= ~waterLevel~0 1)} assume !(0 == ~pumpRunning~0); {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:20,190 INFO L280 TraceCheckUtils]: 54: Hoare triple {21463#(<= ~waterLevel~0 1)} havoc __utac_acc__Specification5_spec__3_#t~ret72, __utac_acc__Specification5_spec__3_#t~ret73, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:20,193 INFO L280 TraceCheckUtils]: 55: Hoare triple {21463#(<= ~waterLevel~0 1)} __utac_acc__Specification5_spec__3_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret72 && __utac_acc__Specification5_spec__3_#t~ret72 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret72;havoc __utac_acc__Specification5_spec__3_#t~ret72; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:20,195 INFO L280 TraceCheckUtils]: 56: Hoare triple {21463#(<= ~waterLevel~0 1)} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:20,198 INFO L280 TraceCheckUtils]: 57: Hoare triple {21463#(<= ~waterLevel~0 1)} __utac_acc__Specification5_spec__3_#t~ret73 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret73 && __utac_acc__Specification5_spec__3_#t~ret73 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret73;havoc __utac_acc__Specification5_spec__3_#t~ret73; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:20,200 INFO L280 TraceCheckUtils]: 58: Hoare triple {21463#(<= ~waterLevel~0 1)} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:20,202 INFO L280 TraceCheckUtils]: 59: Hoare triple {21463#(<= ~waterLevel~0 1)} assume !(0 == ~switchedOnBeforeTS~0); {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:20,203 INFO L280 TraceCheckUtils]: 60: Hoare triple {21463#(<= ~waterLevel~0 1)} assume !false; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:20,203 INFO L280 TraceCheckUtils]: 61: Hoare triple {21463#(<= ~waterLevel~0 1)} assume test_~splverifierCounter~0 < 4; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:20,203 INFO L280 TraceCheckUtils]: 62: Hoare triple {21463#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet10 && test_#t~nondet10 <= 2147483647;test_~tmp~0 := test_#t~nondet10;havoc test_#t~nondet10; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:20,204 INFO L280 TraceCheckUtils]: 63: Hoare triple {21463#(<= ~waterLevel~0 1)} assume !(0 != test_~tmp~0); {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:20,204 INFO L280 TraceCheckUtils]: 64: Hoare triple {21463#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp___0~0 := test_#t~nondet11;havoc test_#t~nondet11; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:20,205 INFO L280 TraceCheckUtils]: 65: Hoare triple {21463#(<= ~waterLevel~0 1)} assume !(0 != test_~tmp___0~0); {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:20,205 INFO L280 TraceCheckUtils]: 66: Hoare triple {21463#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___2~0 := test_#t~nondet12;havoc test_#t~nondet12; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:20,206 INFO L280 TraceCheckUtils]: 67: Hoare triple {21463#(<= ~waterLevel~0 1)} assume 0 != test_~tmp___2~0; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:20,206 INFO L280 TraceCheckUtils]: 68: Hoare triple {21463#(<= ~waterLevel~0 1)} havoc __utac_acc__Specification5_spec__2_#t~ret71;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:20,206 INFO L280 TraceCheckUtils]: 69: Hoare triple {21463#(<= ~waterLevel~0 1)} __utac_acc__Specification5_spec__2_#t~ret71 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret71 && __utac_acc__Specification5_spec__2_#t~ret71 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret71;havoc __utac_acc__Specification5_spec__2_#t~ret71; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:20,208 INFO L280 TraceCheckUtils]: 70: Hoare triple {21463#(<= ~waterLevel~0 1)} assume 0 != ~pumpRunning~0; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:20,208 INFO L280 TraceCheckUtils]: 71: Hoare triple {21463#(<= ~waterLevel~0 1)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {21464#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:07:20,209 INFO L280 TraceCheckUtils]: 72: Hoare triple {21464#(<= ~waterLevel~0 0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {21464#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:07:20,210 INFO L280 TraceCheckUtils]: 73: Hoare triple {21464#(<= ~waterLevel~0 0)} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret35, isLowWaterLevel_~retValue_acc~7, isLowWaterLevel_~tmp~5, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~7;havoc isLowWaterLevel_~tmp~5;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~3;havoc isLowWaterSensorDry_~retValue_acc~3;isLowWaterSensorDry_~retValue_acc~3 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~3; {21464#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:07:20,211 INFO L280 TraceCheckUtils]: 74: Hoare triple {21464#(<= ~waterLevel~0 0)} isLowWaterLevel_#t~ret35 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret35 && isLowWaterLevel_#t~ret35 <= 2147483647;isLowWaterLevel_~tmp~5 := isLowWaterLevel_#t~ret35;havoc isLowWaterLevel_#t~ret35; {21464#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:07:20,211 INFO L280 TraceCheckUtils]: 75: Hoare triple {21464#(<= ~waterLevel~0 0)} assume !(0 != isLowWaterLevel_~tmp~5);isLowWaterLevel_~tmp___0~2 := 1; {21464#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:07:20,213 INFO L280 TraceCheckUtils]: 76: Hoare triple {21464#(<= ~waterLevel~0 0)} isLowWaterLevel_~retValue_acc~7 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~7; {21464#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:07:20,214 INFO L280 TraceCheckUtils]: 77: Hoare triple {21464#(<= ~waterLevel~0 0)} processEnvironment_#t~ret15 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret15 && processEnvironment_#t~ret15 <= 2147483647;processEnvironment_~tmp~2 := processEnvironment_#t~ret15;havoc processEnvironment_#t~ret15; {21464#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:07:20,215 INFO L280 TraceCheckUtils]: 78: Hoare triple {21464#(<= ~waterLevel~0 0)} assume 0 != processEnvironment_~tmp~2;~pumpRunning~0 := 0; {21464#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:07:20,215 INFO L280 TraceCheckUtils]: 79: Hoare triple {21464#(<= ~waterLevel~0 0)} havoc __utac_acc__Specification5_spec__3_#t~ret72, __utac_acc__Specification5_spec__3_#t~ret73, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {21464#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:07:20,216 INFO L280 TraceCheckUtils]: 80: Hoare triple {21464#(<= ~waterLevel~0 0)} __utac_acc__Specification5_spec__3_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret72 && __utac_acc__Specification5_spec__3_#t~ret72 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret72;havoc __utac_acc__Specification5_spec__3_#t~ret72; {21464#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:07:20,216 INFO L280 TraceCheckUtils]: 81: Hoare triple {21464#(<= ~waterLevel~0 0)} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {21464#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:07:20,217 INFO L280 TraceCheckUtils]: 82: Hoare triple {21464#(<= ~waterLevel~0 0)} __utac_acc__Specification5_spec__3_#t~ret73 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret73 && __utac_acc__Specification5_spec__3_#t~ret73 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret73;havoc __utac_acc__Specification5_spec__3_#t~ret73; {21464#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:07:20,217 INFO L280 TraceCheckUtils]: 83: Hoare triple {21464#(<= ~waterLevel~0 0)} assume !(0 != __utac_acc__Specification5_spec__3_~tmp___0~3); {21464#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:07:20,217 INFO L280 TraceCheckUtils]: 84: Hoare triple {21464#(<= ~waterLevel~0 0)} assume !false; {21464#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:07:20,218 INFO L280 TraceCheckUtils]: 85: Hoare triple {21464#(<= ~waterLevel~0 0)} assume test_~splverifierCounter~0 < 4; {21464#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:07:20,218 INFO L280 TraceCheckUtils]: 86: Hoare triple {21464#(<= ~waterLevel~0 0)} assume -2147483648 <= test_#t~nondet10 && test_#t~nondet10 <= 2147483647;test_~tmp~0 := test_#t~nondet10;havoc test_#t~nondet10; {21464#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:07:20,218 INFO L280 TraceCheckUtils]: 87: Hoare triple {21464#(<= ~waterLevel~0 0)} assume 0 != test_~tmp~0; {21464#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:07:20,219 INFO L280 TraceCheckUtils]: 88: Hoare triple {21464#(<= ~waterLevel~0 0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:20,219 INFO L280 TraceCheckUtils]: 89: Hoare triple {21463#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp___0~0 := test_#t~nondet11;havoc test_#t~nondet11; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:20,220 INFO L280 TraceCheckUtils]: 90: Hoare triple {21463#(<= ~waterLevel~0 1)} assume !(0 != test_~tmp___0~0); {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:20,220 INFO L280 TraceCheckUtils]: 91: Hoare triple {21463#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___2~0 := test_#t~nondet12;havoc test_#t~nondet12; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:20,221 INFO L280 TraceCheckUtils]: 92: Hoare triple {21463#(<= ~waterLevel~0 1)} assume 0 != test_~tmp___2~0; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:20,221 INFO L280 TraceCheckUtils]: 93: Hoare triple {21463#(<= ~waterLevel~0 1)} havoc __utac_acc__Specification5_spec__2_#t~ret71;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:20,227 INFO L280 TraceCheckUtils]: 94: Hoare triple {21463#(<= ~waterLevel~0 1)} __utac_acc__Specification5_spec__2_#t~ret71 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret71 && __utac_acc__Specification5_spec__2_#t~ret71 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret71;havoc __utac_acc__Specification5_spec__2_#t~ret71; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:20,228 INFO L280 TraceCheckUtils]: 95: Hoare triple {21463#(<= ~waterLevel~0 1)} assume !(0 != ~pumpRunning~0); {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:20,229 INFO L280 TraceCheckUtils]: 96: Hoare triple {21463#(<= ~waterLevel~0 1)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:20,229 INFO L280 TraceCheckUtils]: 97: Hoare triple {21463#(<= ~waterLevel~0 1)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:20,230 INFO L280 TraceCheckUtils]: 98: Hoare triple {21463#(<= ~waterLevel~0 1)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret34, isHighWaterLevel_~retValue_acc~6, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~6;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {21463#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:07:20,231 INFO L280 TraceCheckUtils]: 99: Hoare triple {21463#(<= ~waterLevel~0 1)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {21460#false} is VALID [2020-07-28 19:07:20,231 INFO L280 TraceCheckUtils]: 100: Hoare triple {21460#false} isHighWaterLevel_#t~ret34 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret34 && isHighWaterLevel_#t~ret34 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret34;havoc isHighWaterLevel_#t~ret34; {21460#false} is VALID [2020-07-28 19:07:20,231 INFO L280 TraceCheckUtils]: 101: Hoare triple {21460#false} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {21460#false} is VALID [2020-07-28 19:07:20,231 INFO L280 TraceCheckUtils]: 102: Hoare triple {21460#false} isHighWaterLevel_~retValue_acc~6 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~6; {21460#false} is VALID [2020-07-28 19:07:20,231 INFO L280 TraceCheckUtils]: 103: Hoare triple {21460#false} processEnvironment__wrappee__highWaterSensor_#t~ret14 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret14 && processEnvironment__wrappee__highWaterSensor_#t~ret14 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~1 := processEnvironment__wrappee__highWaterSensor_#t~ret14;havoc processEnvironment__wrappee__highWaterSensor_#t~ret14; {21460#false} is VALID [2020-07-28 19:07:20,231 INFO L280 TraceCheckUtils]: 104: Hoare triple {21460#false} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc activatePump_#t~ret16, activatePump_~tmp~3;havoc activatePump_~tmp~3;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret17, isMethaneAlarm_~retValue_acc~4;havoc isMethaneAlarm_~retValue_acc~4;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {21460#false} is VALID [2020-07-28 19:07:20,232 INFO L280 TraceCheckUtils]: 105: Hoare triple {21460#false} isMethaneAlarm_#t~ret17 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret17 && isMethaneAlarm_#t~ret17 <= 2147483647;isMethaneAlarm_~retValue_acc~4 := isMethaneAlarm_#t~ret17;havoc isMethaneAlarm_#t~ret17;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~4; {21460#false} is VALID [2020-07-28 19:07:20,232 INFO L280 TraceCheckUtils]: 106: Hoare triple {21460#false} activatePump_#t~ret16 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret16 && activatePump_#t~ret16 <= 2147483647;activatePump_~tmp~3 := activatePump_#t~ret16;havoc activatePump_#t~ret16; {21460#false} is VALID [2020-07-28 19:07:20,232 INFO L280 TraceCheckUtils]: 107: Hoare triple {21460#false} assume !(0 != activatePump_~tmp~3);~pumpRunning~0 := 1; {21460#false} is VALID [2020-07-28 19:07:20,232 INFO L280 TraceCheckUtils]: 108: Hoare triple {21460#false} havoc __utac_acc__Specification5_spec__3_#t~ret72, __utac_acc__Specification5_spec__3_#t~ret73, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {21460#false} is VALID [2020-07-28 19:07:20,233 INFO L280 TraceCheckUtils]: 109: Hoare triple {21460#false} __utac_acc__Specification5_spec__3_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret72 && __utac_acc__Specification5_spec__3_#t~ret72 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret72;havoc __utac_acc__Specification5_spec__3_#t~ret72; {21460#false} is VALID [2020-07-28 19:07:20,233 INFO L280 TraceCheckUtils]: 110: Hoare triple {21460#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {21460#false} is VALID [2020-07-28 19:07:20,233 INFO L280 TraceCheckUtils]: 111: Hoare triple {21460#false} __utac_acc__Specification5_spec__3_#t~ret73 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret73 && __utac_acc__Specification5_spec__3_#t~ret73 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret73;havoc __utac_acc__Specification5_spec__3_#t~ret73; {21460#false} is VALID [2020-07-28 19:07:20,233 INFO L280 TraceCheckUtils]: 112: Hoare triple {21460#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3; {21460#false} is VALID [2020-07-28 19:07:20,233 INFO L280 TraceCheckUtils]: 113: Hoare triple {21460#false} assume 0 == ~switchedOnBeforeTS~0; {21460#false} is VALID [2020-07-28 19:07:20,233 INFO L280 TraceCheckUtils]: 114: Hoare triple {21460#false} assume !false; {21460#false} is VALID [2020-07-28 19:07:20,245 INFO L134 CoverageAnalysis]: Checked inductivity of 120 backedges. 94 proven. 6 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2020-07-28 19:07:20,245 INFO L220 FreeRefinementEngine]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2020-07-28 19:07:20,245 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 4] total 5 [2020-07-28 19:07:20,248 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [818195974] [2020-07-28 19:07:20,249 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 115 [2020-07-28 19:07:20,249 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:07:20,250 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states. [2020-07-28 19:07:20,377 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 111 edges. 111 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:07:20,377 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2020-07-28 19:07:20,377 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:07:20,378 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2020-07-28 19:07:20,378 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=16, Unknown=0, NotChecked=0, Total=30 [2020-07-28 19:07:20,378 INFO L87 Difference]: Start difference. First operand 320 states and 402 transitions. Second operand 6 states. [2020-07-28 19:07:22,411 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:07:22,411 INFO L93 Difference]: Finished difference Result 658 states and 833 transitions. [2020-07-28 19:07:22,411 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2020-07-28 19:07:22,411 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 115 [2020-07-28 19:07:22,412 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:07:22,412 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 19:07:22,413 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 263 transitions. [2020-07-28 19:07:22,413 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 19:07:22,414 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 263 transitions. [2020-07-28 19:07:22,414 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states and 263 transitions. [2020-07-28 19:07:22,732 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 263 edges. 263 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:07:22,753 INFO L225 Difference]: With dead ends: 658 [2020-07-28 19:07:22,753 INFO L226 Difference]: Without dead ends: 499 [2020-07-28 19:07:22,754 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 120 GetRequests, 116 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=14, Invalid=16, Unknown=0, NotChecked=0, Total=30 [2020-07-28 19:07:22,755 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 499 states. [2020-07-28 19:07:24,412 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 499 to 441. [2020-07-28 19:07:24,413 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:07:24,413 INFO L82 GeneralOperation]: Start isEquivalent. First operand 499 states. Second operand 441 states. [2020-07-28 19:07:24,413 INFO L74 IsIncluded]: Start isIncluded. First operand 499 states. Second operand 441 states. [2020-07-28 19:07:24,413 INFO L87 Difference]: Start difference. First operand 499 states. Second operand 441 states. [2020-07-28 19:07:24,426 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:07:24,426 INFO L93 Difference]: Finished difference Result 499 states and 626 transitions. [2020-07-28 19:07:24,426 INFO L276 IsEmpty]: Start isEmpty. Operand 499 states and 626 transitions. [2020-07-28 19:07:24,427 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:07:24,427 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:07:24,427 INFO L74 IsIncluded]: Start isIncluded. First operand 441 states. Second operand 499 states. [2020-07-28 19:07:24,428 INFO L87 Difference]: Start difference. First operand 441 states. Second operand 499 states. [2020-07-28 19:07:24,441 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:07:24,441 INFO L93 Difference]: Finished difference Result 499 states and 626 transitions. [2020-07-28 19:07:24,441 INFO L276 IsEmpty]: Start isEmpty. Operand 499 states and 626 transitions. [2020-07-28 19:07:24,441 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:07:24,441 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:07:24,442 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:07:24,442 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:07:24,442 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 441 states. [2020-07-28 19:07:24,451 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 441 states to 441 states and 557 transitions. [2020-07-28 19:07:24,451 INFO L78 Accepts]: Start accepts. Automaton has 441 states and 557 transitions. Word has length 115 [2020-07-28 19:07:24,451 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:07:24,451 INFO L479 AbstractCegarLoop]: Abstraction has 441 states and 557 transitions. [2020-07-28 19:07:24,451 INFO L480 AbstractCegarLoop]: Interpolant automaton has 6 states. [2020-07-28 19:07:24,451 INFO L276 IsEmpty]: Start isEmpty. Operand 441 states and 557 transitions. [2020-07-28 19:07:24,452 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 135 [2020-07-28 19:07:24,453 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:07:24,453 INFO L422 BasicCegarLoop]: trace histogram [5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 4, 4, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:07:24,667 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable13 [2020-07-28 19:07:24,668 INFO L427 AbstractCegarLoop]: === Iteration 15 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:07:24,669 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:07:24,669 INFO L82 PathProgramCache]: Analyzing trace with hash 1009732925, now seen corresponding path program 1 times [2020-07-28 19:07:24,670 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:07:24,670 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [665143740] [2020-07-28 19:07:24,671 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:07:24,704 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:07:24,809 INFO L280 TraceCheckUtils]: 0: Hoare triple {24389#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(13);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string21.base, #t~string21.offset, 1);call write~init~int(110, #t~string21.base, 1 + #t~string21.offset, 1);call write~init~int(0, #t~string21.base, 2 + #t~string21.offset, 1);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string23.base, #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 1 + #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 2 + #t~string23.offset, 1);call write~init~int(0, #t~string23.base, 3 + #t~string23.offset, 1);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string25.base, #t~string25.offset, 1);call write~init~int(80, #t~string25.base, 1 + #t~string25.offset, 1);call write~init~int(117, #t~string25.base, 2 + #t~string25.offset, 1);call write~init~int(109, #t~string25.base, 3 + #t~string25.offset, 1);call write~init~int(112, #t~string25.base, 4 + #t~string25.offset, 1);call write~init~int(58, #t~string25.base, 5 + #t~string25.offset, 1);call write~init~int(0, #t~string25.base, 6 + #t~string25.offset, 1);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string27.base, #t~string27.offset, 1);call write~init~int(110, #t~string27.base, 1 + #t~string27.offset, 1);call write~init~int(0, #t~string27.base, 2 + #t~string27.offset, 1);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string29.base, #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 1 + #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 2 + #t~string29.offset, 1);call write~init~int(0, #t~string29.base, 3 + #t~string29.offset, 1);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string31.base, #t~string31.offset, 1);call write~init~int(32, #t~string31.base, 1 + #t~string31.offset, 1);call write~init~int(0, #t~string31.base, 2 + #t~string31.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string33.base, #t~string33.offset, 1);call write~init~int(0, #t~string33.base, 1 + #t~string33.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(21);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(30);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(9);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(25);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4; {24389#true} is VALID [2020-07-28 19:07:24,809 INFO L280 TraceCheckUtils]: 1: Hoare triple {24389#true} havoc main_#res;havoc main_#t~ret74, main_~retValue_acc~11, main_~tmp~10;havoc main_~retValue_acc~11;havoc main_~tmp~10; {24389#true} is VALID [2020-07-28 19:07:24,809 INFO L280 TraceCheckUtils]: 2: Hoare triple {24389#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~13;havoc valid_product_~retValue_acc~13;valid_product_~retValue_acc~13 := 1;valid_product_#res := valid_product_~retValue_acc~13; {24389#true} is VALID [2020-07-28 19:07:24,809 INFO L280 TraceCheckUtils]: 3: Hoare triple {24389#true} main_#t~ret74 := valid_product_#res;assume -2147483648 <= main_#t~ret74 && main_#t~ret74 <= 2147483647;main_~tmp~10 := main_#t~ret74;havoc main_#t~ret74; {24389#true} is VALID [2020-07-28 19:07:24,810 INFO L280 TraceCheckUtils]: 4: Hoare triple {24389#true} assume 0 != main_~tmp~10; {24389#true} is VALID [2020-07-28 19:07:24,810 INFO L280 TraceCheckUtils]: 5: Hoare triple {24389#true} ~switchedOnBeforeTS~0 := 0; {24389#true} is VALID [2020-07-28 19:07:24,810 INFO L280 TraceCheckUtils]: 6: Hoare triple {24389#true} havoc test_#t~nondet10, test_#t~nondet11, test_#t~nondet12, test_#t~nondet13, test_~splverifierCounter~0, test_~tmp~0, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~0;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {24389#true} is VALID [2020-07-28 19:07:24,810 INFO L280 TraceCheckUtils]: 7: Hoare triple {24389#true} assume !false; {24389#true} is VALID [2020-07-28 19:07:24,810 INFO L280 TraceCheckUtils]: 8: Hoare triple {24389#true} assume test_~splverifierCounter~0 < 4; {24389#true} is VALID [2020-07-28 19:07:24,810 INFO L280 TraceCheckUtils]: 9: Hoare triple {24389#true} assume -2147483648 <= test_#t~nondet10 && test_#t~nondet10 <= 2147483647;test_~tmp~0 := test_#t~nondet10;havoc test_#t~nondet10; {24389#true} is VALID [2020-07-28 19:07:24,811 INFO L280 TraceCheckUtils]: 10: Hoare triple {24389#true} assume 0 != test_~tmp~0; {24389#true} is VALID [2020-07-28 19:07:24,811 INFO L280 TraceCheckUtils]: 11: Hoare triple {24389#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {24389#true} is VALID [2020-07-28 19:07:24,811 INFO L280 TraceCheckUtils]: 12: Hoare triple {24389#true} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp___0~0 := test_#t~nondet11;havoc test_#t~nondet11; {24389#true} is VALID [2020-07-28 19:07:24,811 INFO L280 TraceCheckUtils]: 13: Hoare triple {24389#true} assume !(0 != test_~tmp___0~0); {24389#true} is VALID [2020-07-28 19:07:24,812 INFO L280 TraceCheckUtils]: 14: Hoare triple {24389#true} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___2~0 := test_#t~nondet12;havoc test_#t~nondet12; {24389#true} is VALID [2020-07-28 19:07:24,812 INFO L280 TraceCheckUtils]: 15: Hoare triple {24389#true} assume 0 != test_~tmp___2~0; {24389#true} is VALID [2020-07-28 19:07:24,812 INFO L280 TraceCheckUtils]: 16: Hoare triple {24389#true} havoc __utac_acc__Specification5_spec__2_#t~ret71;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {24389#true} is VALID [2020-07-28 19:07:24,813 INFO L280 TraceCheckUtils]: 17: Hoare triple {24389#true} __utac_acc__Specification5_spec__2_#t~ret71 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret71 && __utac_acc__Specification5_spec__2_#t~ret71 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret71;havoc __utac_acc__Specification5_spec__2_#t~ret71; {24389#true} is VALID [2020-07-28 19:07:24,813 INFO L280 TraceCheckUtils]: 18: Hoare triple {24389#true} assume !(0 != ~pumpRunning~0); {24389#true} is VALID [2020-07-28 19:07:24,813 INFO L280 TraceCheckUtils]: 19: Hoare triple {24389#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {24389#true} is VALID [2020-07-28 19:07:24,813 INFO L280 TraceCheckUtils]: 20: Hoare triple {24389#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {24389#true} is VALID [2020-07-28 19:07:24,813 INFO L280 TraceCheckUtils]: 21: Hoare triple {24389#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret34, isHighWaterLevel_~retValue_acc~6, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~6;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {24389#true} is VALID [2020-07-28 19:07:24,813 INFO L280 TraceCheckUtils]: 22: Hoare triple {24389#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {24389#true} is VALID [2020-07-28 19:07:24,814 INFO L280 TraceCheckUtils]: 23: Hoare triple {24389#true} isHighWaterLevel_#t~ret34 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret34 && isHighWaterLevel_#t~ret34 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret34;havoc isHighWaterLevel_#t~ret34; {24389#true} is VALID [2020-07-28 19:07:24,814 INFO L280 TraceCheckUtils]: 24: Hoare triple {24389#true} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {24389#true} is VALID [2020-07-28 19:07:24,814 INFO L280 TraceCheckUtils]: 25: Hoare triple {24389#true} isHighWaterLevel_~retValue_acc~6 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~6; {24389#true} is VALID [2020-07-28 19:07:24,814 INFO L280 TraceCheckUtils]: 26: Hoare triple {24389#true} processEnvironment__wrappee__highWaterSensor_#t~ret14 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret14 && processEnvironment__wrappee__highWaterSensor_#t~ret14 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~1 := processEnvironment__wrappee__highWaterSensor_#t~ret14;havoc processEnvironment__wrappee__highWaterSensor_#t~ret14; {24389#true} is VALID [2020-07-28 19:07:24,814 INFO L280 TraceCheckUtils]: 27: Hoare triple {24389#true} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc activatePump_#t~ret16, activatePump_~tmp~3;havoc activatePump_~tmp~3;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret17, isMethaneAlarm_~retValue_acc~4;havoc isMethaneAlarm_~retValue_acc~4;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {24389#true} is VALID [2020-07-28 19:07:24,815 INFO L280 TraceCheckUtils]: 28: Hoare triple {24389#true} isMethaneAlarm_#t~ret17 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret17 && isMethaneAlarm_#t~ret17 <= 2147483647;isMethaneAlarm_~retValue_acc~4 := isMethaneAlarm_#t~ret17;havoc isMethaneAlarm_#t~ret17;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~4; {24389#true} is VALID [2020-07-28 19:07:24,815 INFO L280 TraceCheckUtils]: 29: Hoare triple {24389#true} activatePump_#t~ret16 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret16 && activatePump_#t~ret16 <= 2147483647;activatePump_~tmp~3 := activatePump_#t~ret16;havoc activatePump_#t~ret16; {24389#true} is VALID [2020-07-28 19:07:24,815 INFO L280 TraceCheckUtils]: 30: Hoare triple {24389#true} assume !(0 != activatePump_~tmp~3);~pumpRunning~0 := 1; {24389#true} is VALID [2020-07-28 19:07:24,815 INFO L280 TraceCheckUtils]: 31: Hoare triple {24389#true} havoc __utac_acc__Specification5_spec__3_#t~ret72, __utac_acc__Specification5_spec__3_#t~ret73, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {24389#true} is VALID [2020-07-28 19:07:24,816 INFO L280 TraceCheckUtils]: 32: Hoare triple {24389#true} __utac_acc__Specification5_spec__3_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret72 && __utac_acc__Specification5_spec__3_#t~ret72 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret72;havoc __utac_acc__Specification5_spec__3_#t~ret72; {24389#true} is VALID [2020-07-28 19:07:24,816 INFO L280 TraceCheckUtils]: 33: Hoare triple {24389#true} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~9); {24389#true} is VALID [2020-07-28 19:07:24,817 INFO L280 TraceCheckUtils]: 34: Hoare triple {24389#true} assume !false; {24389#true} is VALID [2020-07-28 19:07:24,817 INFO L280 TraceCheckUtils]: 35: Hoare triple {24389#true} assume test_~splverifierCounter~0 < 4; {24389#true} is VALID [2020-07-28 19:07:24,817 INFO L280 TraceCheckUtils]: 36: Hoare triple {24389#true} assume -2147483648 <= test_#t~nondet10 && test_#t~nondet10 <= 2147483647;test_~tmp~0 := test_#t~nondet10;havoc test_#t~nondet10; {24389#true} is VALID [2020-07-28 19:07:24,817 INFO L280 TraceCheckUtils]: 37: Hoare triple {24389#true} assume !(0 != test_~tmp~0); {24389#true} is VALID [2020-07-28 19:07:24,818 INFO L280 TraceCheckUtils]: 38: Hoare triple {24389#true} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp___0~0 := test_#t~nondet11;havoc test_#t~nondet11; {24389#true} is VALID [2020-07-28 19:07:24,818 INFO L280 TraceCheckUtils]: 39: Hoare triple {24389#true} assume !(0 != test_~tmp___0~0); {24389#true} is VALID [2020-07-28 19:07:24,818 INFO L280 TraceCheckUtils]: 40: Hoare triple {24389#true} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___2~0 := test_#t~nondet12;havoc test_#t~nondet12; {24389#true} is VALID [2020-07-28 19:07:24,818 INFO L280 TraceCheckUtils]: 41: Hoare triple {24389#true} assume 0 != test_~tmp___2~0; {24389#true} is VALID [2020-07-28 19:07:24,819 INFO L280 TraceCheckUtils]: 42: Hoare triple {24389#true} havoc __utac_acc__Specification5_spec__2_#t~ret71;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {24389#true} is VALID [2020-07-28 19:07:24,819 INFO L280 TraceCheckUtils]: 43: Hoare triple {24389#true} __utac_acc__Specification5_spec__2_#t~ret71 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret71 && __utac_acc__Specification5_spec__2_#t~ret71 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret71;havoc __utac_acc__Specification5_spec__2_#t~ret71; {24389#true} is VALID [2020-07-28 19:07:24,819 INFO L280 TraceCheckUtils]: 44: Hoare triple {24389#true} assume 0 != ~pumpRunning~0; {24389#true} is VALID [2020-07-28 19:07:24,819 INFO L280 TraceCheckUtils]: 45: Hoare triple {24389#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {24389#true} is VALID [2020-07-28 19:07:24,820 INFO L280 TraceCheckUtils]: 46: Hoare triple {24389#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {24389#true} is VALID [2020-07-28 19:07:24,820 INFO L280 TraceCheckUtils]: 47: Hoare triple {24389#true} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret35, isLowWaterLevel_~retValue_acc~7, isLowWaterLevel_~tmp~5, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~7;havoc isLowWaterLevel_~tmp~5;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~3;havoc isLowWaterSensorDry_~retValue_acc~3;isLowWaterSensorDry_~retValue_acc~3 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~3; {24389#true} is VALID [2020-07-28 19:07:24,820 INFO L280 TraceCheckUtils]: 48: Hoare triple {24389#true} isLowWaterLevel_#t~ret35 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret35 && isLowWaterLevel_#t~ret35 <= 2147483647;isLowWaterLevel_~tmp~5 := isLowWaterLevel_#t~ret35;havoc isLowWaterLevel_#t~ret35; {24389#true} is VALID [2020-07-28 19:07:24,820 INFO L280 TraceCheckUtils]: 49: Hoare triple {24389#true} assume 0 != isLowWaterLevel_~tmp~5;isLowWaterLevel_~tmp___0~2 := 0; {24389#true} is VALID [2020-07-28 19:07:24,821 INFO L280 TraceCheckUtils]: 50: Hoare triple {24389#true} isLowWaterLevel_~retValue_acc~7 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~7; {24389#true} is VALID [2020-07-28 19:07:24,821 INFO L280 TraceCheckUtils]: 51: Hoare triple {24389#true} processEnvironment_#t~ret15 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret15 && processEnvironment_#t~ret15 <= 2147483647;processEnvironment_~tmp~2 := processEnvironment_#t~ret15;havoc processEnvironment_#t~ret15; {24389#true} is VALID [2020-07-28 19:07:24,821 INFO L280 TraceCheckUtils]: 52: Hoare triple {24389#true} assume !(0 != processEnvironment_~tmp~2);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {24389#true} is VALID [2020-07-28 19:07:24,821 INFO L280 TraceCheckUtils]: 53: Hoare triple {24389#true} assume !(0 == ~pumpRunning~0); {24389#true} is VALID [2020-07-28 19:07:24,822 INFO L280 TraceCheckUtils]: 54: Hoare triple {24389#true} havoc __utac_acc__Specification5_spec__3_#t~ret72, __utac_acc__Specification5_spec__3_#t~ret73, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {24389#true} is VALID [2020-07-28 19:07:24,822 INFO L280 TraceCheckUtils]: 55: Hoare triple {24389#true} __utac_acc__Specification5_spec__3_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret72 && __utac_acc__Specification5_spec__3_#t~ret72 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret72;havoc __utac_acc__Specification5_spec__3_#t~ret72; {24389#true} is VALID [2020-07-28 19:07:24,822 INFO L280 TraceCheckUtils]: 56: Hoare triple {24389#true} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {24389#true} is VALID [2020-07-28 19:07:24,822 INFO L280 TraceCheckUtils]: 57: Hoare triple {24389#true} __utac_acc__Specification5_spec__3_#t~ret73 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret73 && __utac_acc__Specification5_spec__3_#t~ret73 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret73;havoc __utac_acc__Specification5_spec__3_#t~ret73; {24389#true} is VALID [2020-07-28 19:07:24,823 INFO L280 TraceCheckUtils]: 58: Hoare triple {24389#true} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3; {24389#true} is VALID [2020-07-28 19:07:24,823 INFO L280 TraceCheckUtils]: 59: Hoare triple {24389#true} assume !(0 == ~switchedOnBeforeTS~0); {24389#true} is VALID [2020-07-28 19:07:24,823 INFO L280 TraceCheckUtils]: 60: Hoare triple {24389#true} assume !false; {24389#true} is VALID [2020-07-28 19:07:24,823 INFO L280 TraceCheckUtils]: 61: Hoare triple {24389#true} assume test_~splverifierCounter~0 < 4; {24389#true} is VALID [2020-07-28 19:07:24,824 INFO L280 TraceCheckUtils]: 62: Hoare triple {24389#true} assume -2147483648 <= test_#t~nondet10 && test_#t~nondet10 <= 2147483647;test_~tmp~0 := test_#t~nondet10;havoc test_#t~nondet10; {24389#true} is VALID [2020-07-28 19:07:24,824 INFO L280 TraceCheckUtils]: 63: Hoare triple {24389#true} assume !(0 != test_~tmp~0); {24389#true} is VALID [2020-07-28 19:07:24,824 INFO L280 TraceCheckUtils]: 64: Hoare triple {24389#true} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp___0~0 := test_#t~nondet11;havoc test_#t~nondet11; {24389#true} is VALID [2020-07-28 19:07:24,824 INFO L280 TraceCheckUtils]: 65: Hoare triple {24389#true} assume !(0 != test_~tmp___0~0); {24389#true} is VALID [2020-07-28 19:07:24,825 INFO L280 TraceCheckUtils]: 66: Hoare triple {24389#true} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___2~0 := test_#t~nondet12;havoc test_#t~nondet12; {24389#true} is VALID [2020-07-28 19:07:24,825 INFO L280 TraceCheckUtils]: 67: Hoare triple {24389#true} assume 0 != test_~tmp___2~0; {24389#true} is VALID [2020-07-28 19:07:24,825 INFO L280 TraceCheckUtils]: 68: Hoare triple {24389#true} havoc __utac_acc__Specification5_spec__2_#t~ret71;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {24389#true} is VALID [2020-07-28 19:07:24,825 INFO L280 TraceCheckUtils]: 69: Hoare triple {24389#true} __utac_acc__Specification5_spec__2_#t~ret71 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret71 && __utac_acc__Specification5_spec__2_#t~ret71 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret71;havoc __utac_acc__Specification5_spec__2_#t~ret71; {24389#true} is VALID [2020-07-28 19:07:24,826 INFO L280 TraceCheckUtils]: 70: Hoare triple {24389#true} assume 0 != ~pumpRunning~0; {24389#true} is VALID [2020-07-28 19:07:24,826 INFO L280 TraceCheckUtils]: 71: Hoare triple {24389#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {24389#true} is VALID [2020-07-28 19:07:24,826 INFO L280 TraceCheckUtils]: 72: Hoare triple {24389#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {24389#true} is VALID [2020-07-28 19:07:24,826 INFO L280 TraceCheckUtils]: 73: Hoare triple {24389#true} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret35, isLowWaterLevel_~retValue_acc~7, isLowWaterLevel_~tmp~5, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~7;havoc isLowWaterLevel_~tmp~5;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~3;havoc isLowWaterSensorDry_~retValue_acc~3;isLowWaterSensorDry_~retValue_acc~3 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~3; {24389#true} is VALID [2020-07-28 19:07:24,827 INFO L280 TraceCheckUtils]: 74: Hoare triple {24389#true} isLowWaterLevel_#t~ret35 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret35 && isLowWaterLevel_#t~ret35 <= 2147483647;isLowWaterLevel_~tmp~5 := isLowWaterLevel_#t~ret35;havoc isLowWaterLevel_#t~ret35; {24389#true} is VALID [2020-07-28 19:07:24,827 INFO L280 TraceCheckUtils]: 75: Hoare triple {24389#true} assume !(0 != isLowWaterLevel_~tmp~5);isLowWaterLevel_~tmp___0~2 := 1; {24389#true} is VALID [2020-07-28 19:07:24,827 INFO L280 TraceCheckUtils]: 76: Hoare triple {24389#true} isLowWaterLevel_~retValue_acc~7 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~7; {24389#true} is VALID [2020-07-28 19:07:24,827 INFO L280 TraceCheckUtils]: 77: Hoare triple {24389#true} processEnvironment_#t~ret15 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret15 && processEnvironment_#t~ret15 <= 2147483647;processEnvironment_~tmp~2 := processEnvironment_#t~ret15;havoc processEnvironment_#t~ret15; {24389#true} is VALID [2020-07-28 19:07:24,828 INFO L280 TraceCheckUtils]: 78: Hoare triple {24389#true} assume 0 != processEnvironment_~tmp~2;~pumpRunning~0 := 0; {24389#true} is VALID [2020-07-28 19:07:24,828 INFO L280 TraceCheckUtils]: 79: Hoare triple {24389#true} havoc __utac_acc__Specification5_spec__3_#t~ret72, __utac_acc__Specification5_spec__3_#t~ret73, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {24389#true} is VALID [2020-07-28 19:07:24,828 INFO L280 TraceCheckUtils]: 80: Hoare triple {24389#true} __utac_acc__Specification5_spec__3_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret72 && __utac_acc__Specification5_spec__3_#t~ret72 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret72;havoc __utac_acc__Specification5_spec__3_#t~ret72; {24389#true} is VALID [2020-07-28 19:07:24,828 INFO L280 TraceCheckUtils]: 81: Hoare triple {24389#true} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {24389#true} is VALID [2020-07-28 19:07:24,829 INFO L280 TraceCheckUtils]: 82: Hoare triple {24389#true} __utac_acc__Specification5_spec__3_#t~ret73 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret73 && __utac_acc__Specification5_spec__3_#t~ret73 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret73;havoc __utac_acc__Specification5_spec__3_#t~ret73; {24389#true} is VALID [2020-07-28 19:07:24,829 INFO L280 TraceCheckUtils]: 83: Hoare triple {24389#true} assume !(0 != __utac_acc__Specification5_spec__3_~tmp___0~3); {24389#true} is VALID [2020-07-28 19:07:24,829 INFO L280 TraceCheckUtils]: 84: Hoare triple {24389#true} assume !false; {24389#true} is VALID [2020-07-28 19:07:24,830 INFO L280 TraceCheckUtils]: 85: Hoare triple {24389#true} assume test_~splverifierCounter~0 < 4; {24389#true} is VALID [2020-07-28 19:07:24,830 INFO L280 TraceCheckUtils]: 86: Hoare triple {24389#true} assume -2147483648 <= test_#t~nondet10 && test_#t~nondet10 <= 2147483647;test_~tmp~0 := test_#t~nondet10;havoc test_#t~nondet10; {24389#true} is VALID [2020-07-28 19:07:24,830 INFO L280 TraceCheckUtils]: 87: Hoare triple {24389#true} assume 0 != test_~tmp~0; {24389#true} is VALID [2020-07-28 19:07:24,830 INFO L280 TraceCheckUtils]: 88: Hoare triple {24389#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {24389#true} is VALID [2020-07-28 19:07:24,830 INFO L280 TraceCheckUtils]: 89: Hoare triple {24389#true} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp___0~0 := test_#t~nondet11;havoc test_#t~nondet11; {24389#true} is VALID [2020-07-28 19:07:24,831 INFO L280 TraceCheckUtils]: 90: Hoare triple {24389#true} assume !(0 != test_~tmp___0~0); {24389#true} is VALID [2020-07-28 19:07:24,831 INFO L280 TraceCheckUtils]: 91: Hoare triple {24389#true} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___2~0 := test_#t~nondet12;havoc test_#t~nondet12; {24389#true} is VALID [2020-07-28 19:07:24,831 INFO L280 TraceCheckUtils]: 92: Hoare triple {24389#true} assume !(0 != test_~tmp___2~0);assume -2147483648 <= test_#t~nondet13 && test_#t~nondet13 <= 2147483647;test_~tmp___1~0 := test_#t~nondet13;havoc test_#t~nondet13; {24389#true} is VALID [2020-07-28 19:07:24,831 INFO L280 TraceCheckUtils]: 93: Hoare triple {24389#true} assume 0 != test_~tmp___1~0; {24389#true} is VALID [2020-07-28 19:07:24,832 INFO L280 TraceCheckUtils]: 94: Hoare triple {24389#true} assume !(0 != ~pumpRunning~0); {24389#true} is VALID [2020-07-28 19:07:24,832 INFO L280 TraceCheckUtils]: 95: Hoare triple {24389#true} ~systemActive~0 := 0; {24389#true} is VALID [2020-07-28 19:07:24,832 INFO L280 TraceCheckUtils]: 96: Hoare triple {24389#true} havoc __utac_acc__Specification5_spec__2_#t~ret71;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {24389#true} is VALID [2020-07-28 19:07:24,832 INFO L280 TraceCheckUtils]: 97: Hoare triple {24389#true} __utac_acc__Specification5_spec__2_#t~ret71 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret71 && __utac_acc__Specification5_spec__2_#t~ret71 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret71;havoc __utac_acc__Specification5_spec__2_#t~ret71; {24389#true} is VALID [2020-07-28 19:07:24,833 INFO L280 TraceCheckUtils]: 98: Hoare triple {24389#true} assume !(0 != ~pumpRunning~0); {24389#true} is VALID [2020-07-28 19:07:24,833 INFO L280 TraceCheckUtils]: 99: Hoare triple {24389#true} assume !(0 != ~systemActive~0); {24389#true} is VALID [2020-07-28 19:07:24,837 INFO L280 TraceCheckUtils]: 100: Hoare triple {24389#true} havoc __utac_acc__Specification5_spec__3_#t~ret72, __utac_acc__Specification5_spec__3_#t~ret73, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {24391#(= |ULTIMATE.start_getWaterLevel_#res| ~waterLevel~0)} is VALID [2020-07-28 19:07:24,838 INFO L280 TraceCheckUtils]: 101: Hoare triple {24391#(= |ULTIMATE.start_getWaterLevel_#res| ~waterLevel~0)} __utac_acc__Specification5_spec__3_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret72 && __utac_acc__Specification5_spec__3_#t~ret72 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret72;havoc __utac_acc__Specification5_spec__3_#t~ret72; {24392#(or (<= 2 ~waterLevel~0) (not (= 2 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9)))} is VALID [2020-07-28 19:07:24,838 INFO L280 TraceCheckUtils]: 102: Hoare triple {24392#(or (<= 2 ~waterLevel~0) (not (= 2 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9)))} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~9); {24393#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:07:24,839 INFO L280 TraceCheckUtils]: 103: Hoare triple {24393#(<= 2 ~waterLevel~0)} assume !false; {24393#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:07:24,839 INFO L280 TraceCheckUtils]: 104: Hoare triple {24393#(<= 2 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {24393#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:07:24,840 INFO L280 TraceCheckUtils]: 105: Hoare triple {24393#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet10 && test_#t~nondet10 <= 2147483647;test_~tmp~0 := test_#t~nondet10;havoc test_#t~nondet10; {24393#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:07:24,840 INFO L280 TraceCheckUtils]: 106: Hoare triple {24393#(<= 2 ~waterLevel~0)} assume 0 != test_~tmp~0; {24393#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:07:24,841 INFO L280 TraceCheckUtils]: 107: Hoare triple {24393#(<= 2 ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {24390#false} is VALID [2020-07-28 19:07:24,841 INFO L280 TraceCheckUtils]: 108: Hoare triple {24390#false} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp___0~0 := test_#t~nondet11;havoc test_#t~nondet11; {24390#false} is VALID [2020-07-28 19:07:24,841 INFO L280 TraceCheckUtils]: 109: Hoare triple {24390#false} assume !(0 != test_~tmp___0~0); {24390#false} is VALID [2020-07-28 19:07:24,842 INFO L280 TraceCheckUtils]: 110: Hoare triple {24390#false} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___2~0 := test_#t~nondet12;havoc test_#t~nondet12; {24390#false} is VALID [2020-07-28 19:07:24,842 INFO L280 TraceCheckUtils]: 111: Hoare triple {24390#false} assume 0 != test_~tmp___2~0; {24390#false} is VALID [2020-07-28 19:07:24,842 INFO L280 TraceCheckUtils]: 112: Hoare triple {24390#false} havoc __utac_acc__Specification5_spec__2_#t~ret71;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {24390#false} is VALID [2020-07-28 19:07:24,842 INFO L280 TraceCheckUtils]: 113: Hoare triple {24390#false} __utac_acc__Specification5_spec__2_#t~ret71 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret71 && __utac_acc__Specification5_spec__2_#t~ret71 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret71;havoc __utac_acc__Specification5_spec__2_#t~ret71; {24390#false} is VALID [2020-07-28 19:07:24,842 INFO L280 TraceCheckUtils]: 114: Hoare triple {24390#false} assume !(0 != ~pumpRunning~0); {24390#false} is VALID [2020-07-28 19:07:24,842 INFO L280 TraceCheckUtils]: 115: Hoare triple {24390#false} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {24390#false} is VALID [2020-07-28 19:07:24,842 INFO L280 TraceCheckUtils]: 116: Hoare triple {24390#false} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {24390#false} is VALID [2020-07-28 19:07:24,843 INFO L280 TraceCheckUtils]: 117: Hoare triple {24390#false} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret34, isHighWaterLevel_~retValue_acc~6, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~6;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {24390#false} is VALID [2020-07-28 19:07:24,843 INFO L280 TraceCheckUtils]: 118: Hoare triple {24390#false} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {24390#false} is VALID [2020-07-28 19:07:24,843 INFO L280 TraceCheckUtils]: 119: Hoare triple {24390#false} isHighWaterLevel_#t~ret34 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret34 && isHighWaterLevel_#t~ret34 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret34;havoc isHighWaterLevel_#t~ret34; {24390#false} is VALID [2020-07-28 19:07:24,843 INFO L280 TraceCheckUtils]: 120: Hoare triple {24390#false} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {24390#false} is VALID [2020-07-28 19:07:24,844 INFO L280 TraceCheckUtils]: 121: Hoare triple {24390#false} isHighWaterLevel_~retValue_acc~6 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~6; {24390#false} is VALID [2020-07-28 19:07:24,844 INFO L280 TraceCheckUtils]: 122: Hoare triple {24390#false} processEnvironment__wrappee__highWaterSensor_#t~ret14 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret14 && processEnvironment__wrappee__highWaterSensor_#t~ret14 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~1 := processEnvironment__wrappee__highWaterSensor_#t~ret14;havoc processEnvironment__wrappee__highWaterSensor_#t~ret14; {24390#false} is VALID [2020-07-28 19:07:24,844 INFO L280 TraceCheckUtils]: 123: Hoare triple {24390#false} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc activatePump_#t~ret16, activatePump_~tmp~3;havoc activatePump_~tmp~3;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret17, isMethaneAlarm_~retValue_acc~4;havoc isMethaneAlarm_~retValue_acc~4;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {24390#false} is VALID [2020-07-28 19:07:24,844 INFO L280 TraceCheckUtils]: 124: Hoare triple {24390#false} isMethaneAlarm_#t~ret17 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret17 && isMethaneAlarm_#t~ret17 <= 2147483647;isMethaneAlarm_~retValue_acc~4 := isMethaneAlarm_#t~ret17;havoc isMethaneAlarm_#t~ret17;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~4; {24390#false} is VALID [2020-07-28 19:07:24,844 INFO L280 TraceCheckUtils]: 125: Hoare triple {24390#false} activatePump_#t~ret16 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret16 && activatePump_#t~ret16 <= 2147483647;activatePump_~tmp~3 := activatePump_#t~ret16;havoc activatePump_#t~ret16; {24390#false} is VALID [2020-07-28 19:07:24,845 INFO L280 TraceCheckUtils]: 126: Hoare triple {24390#false} assume !(0 != activatePump_~tmp~3);~pumpRunning~0 := 1; {24390#false} is VALID [2020-07-28 19:07:24,845 INFO L280 TraceCheckUtils]: 127: Hoare triple {24390#false} havoc __utac_acc__Specification5_spec__3_#t~ret72, __utac_acc__Specification5_spec__3_#t~ret73, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {24390#false} is VALID [2020-07-28 19:07:24,845 INFO L280 TraceCheckUtils]: 128: Hoare triple {24390#false} __utac_acc__Specification5_spec__3_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret72 && __utac_acc__Specification5_spec__3_#t~ret72 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret72;havoc __utac_acc__Specification5_spec__3_#t~ret72; {24390#false} is VALID [2020-07-28 19:07:24,845 INFO L280 TraceCheckUtils]: 129: Hoare triple {24390#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {24390#false} is VALID [2020-07-28 19:07:24,846 INFO L280 TraceCheckUtils]: 130: Hoare triple {24390#false} __utac_acc__Specification5_spec__3_#t~ret73 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret73 && __utac_acc__Specification5_spec__3_#t~ret73 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret73;havoc __utac_acc__Specification5_spec__3_#t~ret73; {24390#false} is VALID [2020-07-28 19:07:24,846 INFO L280 TraceCheckUtils]: 131: Hoare triple {24390#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3; {24390#false} is VALID [2020-07-28 19:07:24,846 INFO L280 TraceCheckUtils]: 132: Hoare triple {24390#false} assume 0 == ~switchedOnBeforeTS~0; {24390#false} is VALID [2020-07-28 19:07:24,846 INFO L280 TraceCheckUtils]: 133: Hoare triple {24390#false} assume !false; {24390#false} is VALID [2020-07-28 19:07:24,855 INFO L134 CoverageAnalysis]: Checked inductivity of 182 backedges. 86 proven. 0 refuted. 0 times theorem prover too weak. 96 trivial. 0 not checked. [2020-07-28 19:07:24,856 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [665143740] [2020-07-28 19:07:24,856 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:07:24,856 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:07:24,857 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1266447783] [2020-07-28 19:07:24,857 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 134 [2020-07-28 19:07:24,858 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:07:24,858 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:07:24,979 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 90 edges. 90 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:07:24,979 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:07:24,980 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:07:24,980 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:07:24,980 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:07:24,980 INFO L87 Difference]: Start difference. First operand 441 states and 557 transitions. Second operand 5 states. [2020-07-28 19:07:28,580 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:07:28,580 INFO L93 Difference]: Finished difference Result 981 states and 1247 transitions. [2020-07-28 19:07:28,580 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2020-07-28 19:07:28,580 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 134 [2020-07-28 19:07:28,581 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:07:28,581 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:07:28,582 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 270 transitions. [2020-07-28 19:07:28,582 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:07:28,583 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 270 transitions. [2020-07-28 19:07:28,583 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 270 transitions. [2020-07-28 19:07:28,919 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 270 edges. 270 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:07:28,944 INFO L225 Difference]: With dead ends: 981 [2020-07-28 19:07:28,944 INFO L226 Difference]: Without dead ends: 676 [2020-07-28 19:07:28,945 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 5 SyntacticMatches, 1 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=18, Invalid=24, Unknown=0, NotChecked=0, Total=42 [2020-07-28 19:07:28,946 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 676 states. [2020-07-28 19:07:30,812 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 676 to 453. [2020-07-28 19:07:30,812 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:07:30,812 INFO L82 GeneralOperation]: Start isEquivalent. First operand 676 states. Second operand 453 states. [2020-07-28 19:07:30,812 INFO L74 IsIncluded]: Start isIncluded. First operand 676 states. Second operand 453 states. [2020-07-28 19:07:30,812 INFO L87 Difference]: Start difference. First operand 676 states. Second operand 453 states. [2020-07-28 19:07:30,831 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:07:30,831 INFO L93 Difference]: Finished difference Result 676 states and 850 transitions. [2020-07-28 19:07:30,831 INFO L276 IsEmpty]: Start isEmpty. Operand 676 states and 850 transitions. [2020-07-28 19:07:30,832 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:07:30,832 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:07:30,832 INFO L74 IsIncluded]: Start isIncluded. First operand 453 states. Second operand 676 states. [2020-07-28 19:07:30,832 INFO L87 Difference]: Start difference. First operand 453 states. Second operand 676 states. [2020-07-28 19:07:30,855 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:07:30,856 INFO L93 Difference]: Finished difference Result 676 states and 850 transitions. [2020-07-28 19:07:30,856 INFO L276 IsEmpty]: Start isEmpty. Operand 676 states and 850 transitions. [2020-07-28 19:07:30,857 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:07:30,857 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:07:30,857 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:07:30,857 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:07:30,858 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 453 states. [2020-07-28 19:07:30,869 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 453 states to 453 states and 567 transitions. [2020-07-28 19:07:30,869 INFO L78 Accepts]: Start accepts. Automaton has 453 states and 567 transitions. Word has length 134 [2020-07-28 19:07:30,869 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:07:30,869 INFO L479 AbstractCegarLoop]: Abstraction has 453 states and 567 transitions. [2020-07-28 19:07:30,869 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:07:30,870 INFO L276 IsEmpty]: Start isEmpty. Operand 453 states and 567 transitions. [2020-07-28 19:07:30,870 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 137 [2020-07-28 19:07:30,871 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:07:30,871 INFO L422 BasicCegarLoop]: trace histogram [5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:07:30,871 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable14 [2020-07-28 19:07:30,872 INFO L427 AbstractCegarLoop]: === Iteration 16 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:07:30,872 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:07:30,872 INFO L82 PathProgramCache]: Analyzing trace with hash -1110194110, now seen corresponding path program 2 times [2020-07-28 19:07:30,873 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:07:30,873 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [99503831] [2020-07-28 19:07:30,873 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:07:30,905 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:07:30,943 INFO L280 TraceCheckUtils]: 0: Hoare triple {27839#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(13);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string21.base, #t~string21.offset, 1);call write~init~int(110, #t~string21.base, 1 + #t~string21.offset, 1);call write~init~int(0, #t~string21.base, 2 + #t~string21.offset, 1);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string23.base, #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 1 + #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 2 + #t~string23.offset, 1);call write~init~int(0, #t~string23.base, 3 + #t~string23.offset, 1);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string25.base, #t~string25.offset, 1);call write~init~int(80, #t~string25.base, 1 + #t~string25.offset, 1);call write~init~int(117, #t~string25.base, 2 + #t~string25.offset, 1);call write~init~int(109, #t~string25.base, 3 + #t~string25.offset, 1);call write~init~int(112, #t~string25.base, 4 + #t~string25.offset, 1);call write~init~int(58, #t~string25.base, 5 + #t~string25.offset, 1);call write~init~int(0, #t~string25.base, 6 + #t~string25.offset, 1);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string27.base, #t~string27.offset, 1);call write~init~int(110, #t~string27.base, 1 + #t~string27.offset, 1);call write~init~int(0, #t~string27.base, 2 + #t~string27.offset, 1);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string29.base, #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 1 + #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 2 + #t~string29.offset, 1);call write~init~int(0, #t~string29.base, 3 + #t~string29.offset, 1);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string31.base, #t~string31.offset, 1);call write~init~int(32, #t~string31.base, 1 + #t~string31.offset, 1);call write~init~int(0, #t~string31.base, 2 + #t~string31.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string33.base, #t~string33.offset, 1);call write~init~int(0, #t~string33.base, 1 + #t~string33.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(21);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(30);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(9);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(25);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4; {27839#true} is VALID [2020-07-28 19:07:30,943 INFO L280 TraceCheckUtils]: 1: Hoare triple {27839#true} havoc main_#res;havoc main_#t~ret74, main_~retValue_acc~11, main_~tmp~10;havoc main_~retValue_acc~11;havoc main_~tmp~10; {27839#true} is VALID [2020-07-28 19:07:30,943 INFO L280 TraceCheckUtils]: 2: Hoare triple {27839#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~13;havoc valid_product_~retValue_acc~13;valid_product_~retValue_acc~13 := 1;valid_product_#res := valid_product_~retValue_acc~13; {27839#true} is VALID [2020-07-28 19:07:30,944 INFO L280 TraceCheckUtils]: 3: Hoare triple {27839#true} main_#t~ret74 := valid_product_#res;assume -2147483648 <= main_#t~ret74 && main_#t~ret74 <= 2147483647;main_~tmp~10 := main_#t~ret74;havoc main_#t~ret74; {27839#true} is VALID [2020-07-28 19:07:30,944 INFO L280 TraceCheckUtils]: 4: Hoare triple {27839#true} assume 0 != main_~tmp~10; {27839#true} is VALID [2020-07-28 19:07:30,944 INFO L280 TraceCheckUtils]: 5: Hoare triple {27839#true} ~switchedOnBeforeTS~0 := 0; {27839#true} is VALID [2020-07-28 19:07:30,944 INFO L280 TraceCheckUtils]: 6: Hoare triple {27839#true} havoc test_#t~nondet10, test_#t~nondet11, test_#t~nondet12, test_#t~nondet13, test_~splverifierCounter~0, test_~tmp~0, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~0;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {27839#true} is VALID [2020-07-28 19:07:30,945 INFO L280 TraceCheckUtils]: 7: Hoare triple {27839#true} assume !false; {27839#true} is VALID [2020-07-28 19:07:30,945 INFO L280 TraceCheckUtils]: 8: Hoare triple {27839#true} assume test_~splverifierCounter~0 < 4; {27839#true} is VALID [2020-07-28 19:07:30,945 INFO L280 TraceCheckUtils]: 9: Hoare triple {27839#true} assume -2147483648 <= test_#t~nondet10 && test_#t~nondet10 <= 2147483647;test_~tmp~0 := test_#t~nondet10;havoc test_#t~nondet10; {27839#true} is VALID [2020-07-28 19:07:30,945 INFO L280 TraceCheckUtils]: 10: Hoare triple {27839#true} assume 0 != test_~tmp~0; {27839#true} is VALID [2020-07-28 19:07:30,945 INFO L280 TraceCheckUtils]: 11: Hoare triple {27839#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {27839#true} is VALID [2020-07-28 19:07:30,945 INFO L280 TraceCheckUtils]: 12: Hoare triple {27839#true} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp___0~0 := test_#t~nondet11;havoc test_#t~nondet11; {27839#true} is VALID [2020-07-28 19:07:30,946 INFO L280 TraceCheckUtils]: 13: Hoare triple {27839#true} assume !(0 != test_~tmp___0~0); {27839#true} is VALID [2020-07-28 19:07:30,946 INFO L280 TraceCheckUtils]: 14: Hoare triple {27839#true} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___2~0 := test_#t~nondet12;havoc test_#t~nondet12; {27839#true} is VALID [2020-07-28 19:07:30,946 INFO L280 TraceCheckUtils]: 15: Hoare triple {27839#true} assume 0 != test_~tmp___2~0; {27839#true} is VALID [2020-07-28 19:07:30,947 INFO L280 TraceCheckUtils]: 16: Hoare triple {27839#true} havoc __utac_acc__Specification5_spec__2_#t~ret71;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {27839#true} is VALID [2020-07-28 19:07:30,947 INFO L280 TraceCheckUtils]: 17: Hoare triple {27839#true} __utac_acc__Specification5_spec__2_#t~ret71 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret71 && __utac_acc__Specification5_spec__2_#t~ret71 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret71;havoc __utac_acc__Specification5_spec__2_#t~ret71; {27839#true} is VALID [2020-07-28 19:07:30,947 INFO L280 TraceCheckUtils]: 18: Hoare triple {27839#true} assume !(0 != ~pumpRunning~0); {27839#true} is VALID [2020-07-28 19:07:30,947 INFO L280 TraceCheckUtils]: 19: Hoare triple {27839#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {27839#true} is VALID [2020-07-28 19:07:30,947 INFO L280 TraceCheckUtils]: 20: Hoare triple {27839#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {27839#true} is VALID [2020-07-28 19:07:30,947 INFO L280 TraceCheckUtils]: 21: Hoare triple {27839#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret34, isHighWaterLevel_~retValue_acc~6, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~6;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {27839#true} is VALID [2020-07-28 19:07:30,947 INFO L280 TraceCheckUtils]: 22: Hoare triple {27839#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {27839#true} is VALID [2020-07-28 19:07:30,948 INFO L280 TraceCheckUtils]: 23: Hoare triple {27839#true} isHighWaterLevel_#t~ret34 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret34 && isHighWaterLevel_#t~ret34 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret34;havoc isHighWaterLevel_#t~ret34; {27839#true} is VALID [2020-07-28 19:07:30,948 INFO L280 TraceCheckUtils]: 24: Hoare triple {27839#true} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {27839#true} is VALID [2020-07-28 19:07:30,948 INFO L280 TraceCheckUtils]: 25: Hoare triple {27839#true} isHighWaterLevel_~retValue_acc~6 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~6; {27839#true} is VALID [2020-07-28 19:07:30,948 INFO L280 TraceCheckUtils]: 26: Hoare triple {27839#true} processEnvironment__wrappee__highWaterSensor_#t~ret14 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret14 && processEnvironment__wrappee__highWaterSensor_#t~ret14 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~1 := processEnvironment__wrappee__highWaterSensor_#t~ret14;havoc processEnvironment__wrappee__highWaterSensor_#t~ret14; {27839#true} is VALID [2020-07-28 19:07:30,948 INFO L280 TraceCheckUtils]: 27: Hoare triple {27839#true} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc activatePump_#t~ret16, activatePump_~tmp~3;havoc activatePump_~tmp~3;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret17, isMethaneAlarm_~retValue_acc~4;havoc isMethaneAlarm_~retValue_acc~4;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {27839#true} is VALID [2020-07-28 19:07:30,948 INFO L280 TraceCheckUtils]: 28: Hoare triple {27839#true} isMethaneAlarm_#t~ret17 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret17 && isMethaneAlarm_#t~ret17 <= 2147483647;isMethaneAlarm_~retValue_acc~4 := isMethaneAlarm_#t~ret17;havoc isMethaneAlarm_#t~ret17;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~4; {27839#true} is VALID [2020-07-28 19:07:30,949 INFO L280 TraceCheckUtils]: 29: Hoare triple {27839#true} activatePump_#t~ret16 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret16 && activatePump_#t~ret16 <= 2147483647;activatePump_~tmp~3 := activatePump_#t~ret16;havoc activatePump_#t~ret16; {27839#true} is VALID [2020-07-28 19:07:30,949 INFO L280 TraceCheckUtils]: 30: Hoare triple {27839#true} assume !(0 != activatePump_~tmp~3);~pumpRunning~0 := 1; {27839#true} is VALID [2020-07-28 19:07:30,949 INFO L280 TraceCheckUtils]: 31: Hoare triple {27839#true} havoc __utac_acc__Specification5_spec__3_#t~ret72, __utac_acc__Specification5_spec__3_#t~ret73, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {27839#true} is VALID [2020-07-28 19:07:30,949 INFO L280 TraceCheckUtils]: 32: Hoare triple {27839#true} __utac_acc__Specification5_spec__3_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret72 && __utac_acc__Specification5_spec__3_#t~ret72 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret72;havoc __utac_acc__Specification5_spec__3_#t~ret72; {27839#true} is VALID [2020-07-28 19:07:30,950 INFO L280 TraceCheckUtils]: 33: Hoare triple {27839#true} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~9); {27839#true} is VALID [2020-07-28 19:07:30,950 INFO L280 TraceCheckUtils]: 34: Hoare triple {27839#true} assume !false; {27839#true} is VALID [2020-07-28 19:07:30,950 INFO L280 TraceCheckUtils]: 35: Hoare triple {27839#true} assume test_~splverifierCounter~0 < 4; {27839#true} is VALID [2020-07-28 19:07:30,951 INFO L280 TraceCheckUtils]: 36: Hoare triple {27839#true} assume -2147483648 <= test_#t~nondet10 && test_#t~nondet10 <= 2147483647;test_~tmp~0 := test_#t~nondet10;havoc test_#t~nondet10; {27839#true} is VALID [2020-07-28 19:07:30,951 INFO L280 TraceCheckUtils]: 37: Hoare triple {27839#true} assume !(0 != test_~tmp~0); {27839#true} is VALID [2020-07-28 19:07:30,951 INFO L280 TraceCheckUtils]: 38: Hoare triple {27839#true} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp___0~0 := test_#t~nondet11;havoc test_#t~nondet11; {27839#true} is VALID [2020-07-28 19:07:30,951 INFO L280 TraceCheckUtils]: 39: Hoare triple {27839#true} assume !(0 != test_~tmp___0~0); {27839#true} is VALID [2020-07-28 19:07:30,952 INFO L280 TraceCheckUtils]: 40: Hoare triple {27839#true} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___2~0 := test_#t~nondet12;havoc test_#t~nondet12; {27839#true} is VALID [2020-07-28 19:07:30,952 INFO L280 TraceCheckUtils]: 41: Hoare triple {27839#true} assume 0 != test_~tmp___2~0; {27839#true} is VALID [2020-07-28 19:07:30,952 INFO L280 TraceCheckUtils]: 42: Hoare triple {27839#true} havoc __utac_acc__Specification5_spec__2_#t~ret71;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {27839#true} is VALID [2020-07-28 19:07:30,952 INFO L280 TraceCheckUtils]: 43: Hoare triple {27839#true} __utac_acc__Specification5_spec__2_#t~ret71 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret71 && __utac_acc__Specification5_spec__2_#t~ret71 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret71;havoc __utac_acc__Specification5_spec__2_#t~ret71; {27839#true} is VALID [2020-07-28 19:07:30,953 INFO L280 TraceCheckUtils]: 44: Hoare triple {27839#true} assume 0 != ~pumpRunning~0; {27839#true} is VALID [2020-07-28 19:07:30,953 INFO L280 TraceCheckUtils]: 45: Hoare triple {27839#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {27839#true} is VALID [2020-07-28 19:07:30,953 INFO L280 TraceCheckUtils]: 46: Hoare triple {27839#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {27839#true} is VALID [2020-07-28 19:07:30,953 INFO L280 TraceCheckUtils]: 47: Hoare triple {27839#true} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret35, isLowWaterLevel_~retValue_acc~7, isLowWaterLevel_~tmp~5, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~7;havoc isLowWaterLevel_~tmp~5;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~3;havoc isLowWaterSensorDry_~retValue_acc~3;isLowWaterSensorDry_~retValue_acc~3 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~3; {27839#true} is VALID [2020-07-28 19:07:30,954 INFO L280 TraceCheckUtils]: 48: Hoare triple {27839#true} isLowWaterLevel_#t~ret35 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret35 && isLowWaterLevel_#t~ret35 <= 2147483647;isLowWaterLevel_~tmp~5 := isLowWaterLevel_#t~ret35;havoc isLowWaterLevel_#t~ret35; {27839#true} is VALID [2020-07-28 19:07:30,954 INFO L280 TraceCheckUtils]: 49: Hoare triple {27839#true} assume 0 != isLowWaterLevel_~tmp~5;isLowWaterLevel_~tmp___0~2 := 0; {27839#true} is VALID [2020-07-28 19:07:30,954 INFO L280 TraceCheckUtils]: 50: Hoare triple {27839#true} isLowWaterLevel_~retValue_acc~7 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~7; {27839#true} is VALID [2020-07-28 19:07:30,954 INFO L280 TraceCheckUtils]: 51: Hoare triple {27839#true} processEnvironment_#t~ret15 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret15 && processEnvironment_#t~ret15 <= 2147483647;processEnvironment_~tmp~2 := processEnvironment_#t~ret15;havoc processEnvironment_#t~ret15; {27839#true} is VALID [2020-07-28 19:07:30,955 INFO L280 TraceCheckUtils]: 52: Hoare triple {27839#true} assume !(0 != processEnvironment_~tmp~2);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {27839#true} is VALID [2020-07-28 19:07:30,955 INFO L280 TraceCheckUtils]: 53: Hoare triple {27839#true} assume !(0 == ~pumpRunning~0); {27839#true} is VALID [2020-07-28 19:07:30,955 INFO L280 TraceCheckUtils]: 54: Hoare triple {27839#true} havoc __utac_acc__Specification5_spec__3_#t~ret72, __utac_acc__Specification5_spec__3_#t~ret73, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {27839#true} is VALID [2020-07-28 19:07:30,955 INFO L280 TraceCheckUtils]: 55: Hoare triple {27839#true} __utac_acc__Specification5_spec__3_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret72 && __utac_acc__Specification5_spec__3_#t~ret72 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret72;havoc __utac_acc__Specification5_spec__3_#t~ret72; {27839#true} is VALID [2020-07-28 19:07:30,956 INFO L280 TraceCheckUtils]: 56: Hoare triple {27839#true} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {27839#true} is VALID [2020-07-28 19:07:30,956 INFO L280 TraceCheckUtils]: 57: Hoare triple {27839#true} __utac_acc__Specification5_spec__3_#t~ret73 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret73 && __utac_acc__Specification5_spec__3_#t~ret73 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret73;havoc __utac_acc__Specification5_spec__3_#t~ret73; {27839#true} is VALID [2020-07-28 19:07:30,956 INFO L280 TraceCheckUtils]: 58: Hoare triple {27839#true} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3; {27839#true} is VALID [2020-07-28 19:07:30,956 INFO L280 TraceCheckUtils]: 59: Hoare triple {27839#true} assume !(0 == ~switchedOnBeforeTS~0); {27839#true} is VALID [2020-07-28 19:07:30,957 INFO L280 TraceCheckUtils]: 60: Hoare triple {27839#true} assume !false; {27839#true} is VALID [2020-07-28 19:07:30,957 INFO L280 TraceCheckUtils]: 61: Hoare triple {27839#true} assume test_~splverifierCounter~0 < 4; {27839#true} is VALID [2020-07-28 19:07:30,957 INFO L280 TraceCheckUtils]: 62: Hoare triple {27839#true} assume -2147483648 <= test_#t~nondet10 && test_#t~nondet10 <= 2147483647;test_~tmp~0 := test_#t~nondet10;havoc test_#t~nondet10; {27839#true} is VALID [2020-07-28 19:07:30,957 INFO L280 TraceCheckUtils]: 63: Hoare triple {27839#true} assume !(0 != test_~tmp~0); {27839#true} is VALID [2020-07-28 19:07:30,958 INFO L280 TraceCheckUtils]: 64: Hoare triple {27839#true} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp___0~0 := test_#t~nondet11;havoc test_#t~nondet11; {27839#true} is VALID [2020-07-28 19:07:30,958 INFO L280 TraceCheckUtils]: 65: Hoare triple {27839#true} assume !(0 != test_~tmp___0~0); {27839#true} is VALID [2020-07-28 19:07:30,958 INFO L280 TraceCheckUtils]: 66: Hoare triple {27839#true} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___2~0 := test_#t~nondet12;havoc test_#t~nondet12; {27839#true} is VALID [2020-07-28 19:07:30,958 INFO L280 TraceCheckUtils]: 67: Hoare triple {27839#true} assume 0 != test_~tmp___2~0; {27839#true} is VALID [2020-07-28 19:07:30,959 INFO L280 TraceCheckUtils]: 68: Hoare triple {27839#true} havoc __utac_acc__Specification5_spec__2_#t~ret71;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {27839#true} is VALID [2020-07-28 19:07:30,959 INFO L280 TraceCheckUtils]: 69: Hoare triple {27839#true} __utac_acc__Specification5_spec__2_#t~ret71 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret71 && __utac_acc__Specification5_spec__2_#t~ret71 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret71;havoc __utac_acc__Specification5_spec__2_#t~ret71; {27839#true} is VALID [2020-07-28 19:07:30,959 INFO L280 TraceCheckUtils]: 70: Hoare triple {27839#true} assume 0 != ~pumpRunning~0; {27839#true} is VALID [2020-07-28 19:07:30,959 INFO L280 TraceCheckUtils]: 71: Hoare triple {27839#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {27839#true} is VALID [2020-07-28 19:07:30,960 INFO L280 TraceCheckUtils]: 72: Hoare triple {27839#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {27839#true} is VALID [2020-07-28 19:07:30,960 INFO L280 TraceCheckUtils]: 73: Hoare triple {27839#true} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret35, isLowWaterLevel_~retValue_acc~7, isLowWaterLevel_~tmp~5, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~7;havoc isLowWaterLevel_~tmp~5;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~3;havoc isLowWaterSensorDry_~retValue_acc~3;isLowWaterSensorDry_~retValue_acc~3 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~3; {27839#true} is VALID [2020-07-28 19:07:30,960 INFO L280 TraceCheckUtils]: 74: Hoare triple {27839#true} isLowWaterLevel_#t~ret35 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret35 && isLowWaterLevel_#t~ret35 <= 2147483647;isLowWaterLevel_~tmp~5 := isLowWaterLevel_#t~ret35;havoc isLowWaterLevel_#t~ret35; {27839#true} is VALID [2020-07-28 19:07:30,960 INFO L280 TraceCheckUtils]: 75: Hoare triple {27839#true} assume !(0 != isLowWaterLevel_~tmp~5);isLowWaterLevel_~tmp___0~2 := 1; {27839#true} is VALID [2020-07-28 19:07:30,961 INFO L280 TraceCheckUtils]: 76: Hoare triple {27839#true} isLowWaterLevel_~retValue_acc~7 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~7; {27839#true} is VALID [2020-07-28 19:07:30,961 INFO L280 TraceCheckUtils]: 77: Hoare triple {27839#true} processEnvironment_#t~ret15 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret15 && processEnvironment_#t~ret15 <= 2147483647;processEnvironment_~tmp~2 := processEnvironment_#t~ret15;havoc processEnvironment_#t~ret15; {27839#true} is VALID [2020-07-28 19:07:30,961 INFO L280 TraceCheckUtils]: 78: Hoare triple {27839#true} assume 0 != processEnvironment_~tmp~2;~pumpRunning~0 := 0; {27839#true} is VALID [2020-07-28 19:07:30,961 INFO L280 TraceCheckUtils]: 79: Hoare triple {27839#true} havoc __utac_acc__Specification5_spec__3_#t~ret72, __utac_acc__Specification5_spec__3_#t~ret73, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {27839#true} is VALID [2020-07-28 19:07:30,962 INFO L280 TraceCheckUtils]: 80: Hoare triple {27839#true} __utac_acc__Specification5_spec__3_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret72 && __utac_acc__Specification5_spec__3_#t~ret72 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret72;havoc __utac_acc__Specification5_spec__3_#t~ret72; {27839#true} is VALID [2020-07-28 19:07:30,962 INFO L280 TraceCheckUtils]: 81: Hoare triple {27839#true} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {27839#true} is VALID [2020-07-28 19:07:30,962 INFO L280 TraceCheckUtils]: 82: Hoare triple {27839#true} __utac_acc__Specification5_spec__3_#t~ret73 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret73 && __utac_acc__Specification5_spec__3_#t~ret73 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret73;havoc __utac_acc__Specification5_spec__3_#t~ret73; {27839#true} is VALID [2020-07-28 19:07:30,962 INFO L280 TraceCheckUtils]: 83: Hoare triple {27839#true} assume !(0 != __utac_acc__Specification5_spec__3_~tmp___0~3); {27839#true} is VALID [2020-07-28 19:07:30,963 INFO L280 TraceCheckUtils]: 84: Hoare triple {27839#true} assume !false; {27839#true} is VALID [2020-07-28 19:07:30,963 INFO L280 TraceCheckUtils]: 85: Hoare triple {27839#true} assume test_~splverifierCounter~0 < 4; {27839#true} is VALID [2020-07-28 19:07:30,963 INFO L280 TraceCheckUtils]: 86: Hoare triple {27839#true} assume -2147483648 <= test_#t~nondet10 && test_#t~nondet10 <= 2147483647;test_~tmp~0 := test_#t~nondet10;havoc test_#t~nondet10; {27839#true} is VALID [2020-07-28 19:07:30,963 INFO L280 TraceCheckUtils]: 87: Hoare triple {27839#true} assume 0 != test_~tmp~0; {27839#true} is VALID [2020-07-28 19:07:30,964 INFO L280 TraceCheckUtils]: 88: Hoare triple {27839#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {27839#true} is VALID [2020-07-28 19:07:30,964 INFO L280 TraceCheckUtils]: 89: Hoare triple {27839#true} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp___0~0 := test_#t~nondet11;havoc test_#t~nondet11; {27839#true} is VALID [2020-07-28 19:07:30,964 INFO L280 TraceCheckUtils]: 90: Hoare triple {27839#true} assume !(0 != test_~tmp___0~0); {27839#true} is VALID [2020-07-28 19:07:30,964 INFO L280 TraceCheckUtils]: 91: Hoare triple {27839#true} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___2~0 := test_#t~nondet12;havoc test_#t~nondet12; {27839#true} is VALID [2020-07-28 19:07:30,965 INFO L280 TraceCheckUtils]: 92: Hoare triple {27839#true} assume !(0 != test_~tmp___2~0);assume -2147483648 <= test_#t~nondet13 && test_#t~nondet13 <= 2147483647;test_~tmp___1~0 := test_#t~nondet13;havoc test_#t~nondet13; {27839#true} is VALID [2020-07-28 19:07:30,965 INFO L280 TraceCheckUtils]: 93: Hoare triple {27839#true} assume 0 != test_~tmp___1~0; {27839#true} is VALID [2020-07-28 19:07:30,965 INFO L280 TraceCheckUtils]: 94: Hoare triple {27839#true} assume !(0 != ~pumpRunning~0); {27839#true} is VALID [2020-07-28 19:07:30,968 INFO L280 TraceCheckUtils]: 95: Hoare triple {27839#true} ~systemActive~0 := 0; {27841#(= 0 ~systemActive~0)} is VALID [2020-07-28 19:07:30,969 INFO L280 TraceCheckUtils]: 96: Hoare triple {27841#(= 0 ~systemActive~0)} havoc __utac_acc__Specification5_spec__2_#t~ret71;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {27841#(= 0 ~systemActive~0)} is VALID [2020-07-28 19:07:30,970 INFO L280 TraceCheckUtils]: 97: Hoare triple {27841#(= 0 ~systemActive~0)} __utac_acc__Specification5_spec__2_#t~ret71 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret71 && __utac_acc__Specification5_spec__2_#t~ret71 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret71;havoc __utac_acc__Specification5_spec__2_#t~ret71; {27841#(= 0 ~systemActive~0)} is VALID [2020-07-28 19:07:30,970 INFO L280 TraceCheckUtils]: 98: Hoare triple {27841#(= 0 ~systemActive~0)} assume !(0 != ~pumpRunning~0); {27841#(= 0 ~systemActive~0)} is VALID [2020-07-28 19:07:30,971 INFO L280 TraceCheckUtils]: 99: Hoare triple {27841#(= 0 ~systemActive~0)} assume !(0 != ~systemActive~0); {27841#(= 0 ~systemActive~0)} is VALID [2020-07-28 19:07:30,971 INFO L280 TraceCheckUtils]: 100: Hoare triple {27841#(= 0 ~systemActive~0)} havoc __utac_acc__Specification5_spec__3_#t~ret72, __utac_acc__Specification5_spec__3_#t~ret73, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {27841#(= 0 ~systemActive~0)} is VALID [2020-07-28 19:07:30,972 INFO L280 TraceCheckUtils]: 101: Hoare triple {27841#(= 0 ~systemActive~0)} __utac_acc__Specification5_spec__3_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret72 && __utac_acc__Specification5_spec__3_#t~ret72 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret72;havoc __utac_acc__Specification5_spec__3_#t~ret72; {27841#(= 0 ~systemActive~0)} is VALID [2020-07-28 19:07:30,973 INFO L280 TraceCheckUtils]: 102: Hoare triple {27841#(= 0 ~systemActive~0)} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {27841#(= 0 ~systemActive~0)} is VALID [2020-07-28 19:07:30,973 INFO L280 TraceCheckUtils]: 103: Hoare triple {27841#(= 0 ~systemActive~0)} __utac_acc__Specification5_spec__3_#t~ret73 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret73 && __utac_acc__Specification5_spec__3_#t~ret73 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret73;havoc __utac_acc__Specification5_spec__3_#t~ret73; {27841#(= 0 ~systemActive~0)} is VALID [2020-07-28 19:07:30,974 INFO L280 TraceCheckUtils]: 104: Hoare triple {27841#(= 0 ~systemActive~0)} assume !(0 != __utac_acc__Specification5_spec__3_~tmp___0~3); {27841#(= 0 ~systemActive~0)} is VALID [2020-07-28 19:07:30,974 INFO L280 TraceCheckUtils]: 105: Hoare triple {27841#(= 0 ~systemActive~0)} assume !false; {27841#(= 0 ~systemActive~0)} is VALID [2020-07-28 19:07:30,975 INFO L280 TraceCheckUtils]: 106: Hoare triple {27841#(= 0 ~systemActive~0)} assume test_~splverifierCounter~0 < 4; {27841#(= 0 ~systemActive~0)} is VALID [2020-07-28 19:07:30,976 INFO L280 TraceCheckUtils]: 107: Hoare triple {27841#(= 0 ~systemActive~0)} assume -2147483648 <= test_#t~nondet10 && test_#t~nondet10 <= 2147483647;test_~tmp~0 := test_#t~nondet10;havoc test_#t~nondet10; {27841#(= 0 ~systemActive~0)} is VALID [2020-07-28 19:07:30,977 INFO L280 TraceCheckUtils]: 108: Hoare triple {27841#(= 0 ~systemActive~0)} assume 0 != test_~tmp~0; {27841#(= 0 ~systemActive~0)} is VALID [2020-07-28 19:07:30,977 INFO L280 TraceCheckUtils]: 109: Hoare triple {27841#(= 0 ~systemActive~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {27841#(= 0 ~systemActive~0)} is VALID [2020-07-28 19:07:30,978 INFO L280 TraceCheckUtils]: 110: Hoare triple {27841#(= 0 ~systemActive~0)} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp___0~0 := test_#t~nondet11;havoc test_#t~nondet11; {27841#(= 0 ~systemActive~0)} is VALID [2020-07-28 19:07:30,978 INFO L280 TraceCheckUtils]: 111: Hoare triple {27841#(= 0 ~systemActive~0)} assume !(0 != test_~tmp___0~0); {27841#(= 0 ~systemActive~0)} is VALID [2020-07-28 19:07:30,979 INFO L280 TraceCheckUtils]: 112: Hoare triple {27841#(= 0 ~systemActive~0)} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___2~0 := test_#t~nondet12;havoc test_#t~nondet12; {27841#(= 0 ~systemActive~0)} is VALID [2020-07-28 19:07:30,980 INFO L280 TraceCheckUtils]: 113: Hoare triple {27841#(= 0 ~systemActive~0)} assume 0 != test_~tmp___2~0; {27841#(= 0 ~systemActive~0)} is VALID [2020-07-28 19:07:30,980 INFO L280 TraceCheckUtils]: 114: Hoare triple {27841#(= 0 ~systemActive~0)} havoc __utac_acc__Specification5_spec__2_#t~ret71;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {27841#(= 0 ~systemActive~0)} is VALID [2020-07-28 19:07:30,981 INFO L280 TraceCheckUtils]: 115: Hoare triple {27841#(= 0 ~systemActive~0)} __utac_acc__Specification5_spec__2_#t~ret71 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret71 && __utac_acc__Specification5_spec__2_#t~ret71 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret71;havoc __utac_acc__Specification5_spec__2_#t~ret71; {27841#(= 0 ~systemActive~0)} is VALID [2020-07-28 19:07:30,981 INFO L280 TraceCheckUtils]: 116: Hoare triple {27841#(= 0 ~systemActive~0)} assume !(0 != ~pumpRunning~0); {27841#(= 0 ~systemActive~0)} is VALID [2020-07-28 19:07:30,982 INFO L280 TraceCheckUtils]: 117: Hoare triple {27841#(= 0 ~systemActive~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {27840#false} is VALID [2020-07-28 19:07:30,982 INFO L280 TraceCheckUtils]: 118: Hoare triple {27840#false} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {27840#false} is VALID [2020-07-28 19:07:30,982 INFO L280 TraceCheckUtils]: 119: Hoare triple {27840#false} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret34, isHighWaterLevel_~retValue_acc~6, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~6;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {27840#false} is VALID [2020-07-28 19:07:30,982 INFO L280 TraceCheckUtils]: 120: Hoare triple {27840#false} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {27840#false} is VALID [2020-07-28 19:07:30,983 INFO L280 TraceCheckUtils]: 121: Hoare triple {27840#false} isHighWaterLevel_#t~ret34 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret34 && isHighWaterLevel_#t~ret34 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret34;havoc isHighWaterLevel_#t~ret34; {27840#false} is VALID [2020-07-28 19:07:30,983 INFO L280 TraceCheckUtils]: 122: Hoare triple {27840#false} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {27840#false} is VALID [2020-07-28 19:07:30,983 INFO L280 TraceCheckUtils]: 123: Hoare triple {27840#false} isHighWaterLevel_~retValue_acc~6 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~6; {27840#false} is VALID [2020-07-28 19:07:30,983 INFO L280 TraceCheckUtils]: 124: Hoare triple {27840#false} processEnvironment__wrappee__highWaterSensor_#t~ret14 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret14 && processEnvironment__wrappee__highWaterSensor_#t~ret14 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~1 := processEnvironment__wrappee__highWaterSensor_#t~ret14;havoc processEnvironment__wrappee__highWaterSensor_#t~ret14; {27840#false} is VALID [2020-07-28 19:07:30,983 INFO L280 TraceCheckUtils]: 125: Hoare triple {27840#false} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc activatePump_#t~ret16, activatePump_~tmp~3;havoc activatePump_~tmp~3;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret17, isMethaneAlarm_~retValue_acc~4;havoc isMethaneAlarm_~retValue_acc~4;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {27840#false} is VALID [2020-07-28 19:07:30,984 INFO L280 TraceCheckUtils]: 126: Hoare triple {27840#false} isMethaneAlarm_#t~ret17 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret17 && isMethaneAlarm_#t~ret17 <= 2147483647;isMethaneAlarm_~retValue_acc~4 := isMethaneAlarm_#t~ret17;havoc isMethaneAlarm_#t~ret17;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~4; {27840#false} is VALID [2020-07-28 19:07:30,984 INFO L280 TraceCheckUtils]: 127: Hoare triple {27840#false} activatePump_#t~ret16 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret16 && activatePump_#t~ret16 <= 2147483647;activatePump_~tmp~3 := activatePump_#t~ret16;havoc activatePump_#t~ret16; {27840#false} is VALID [2020-07-28 19:07:30,984 INFO L280 TraceCheckUtils]: 128: Hoare triple {27840#false} assume !(0 != activatePump_~tmp~3);~pumpRunning~0 := 1; {27840#false} is VALID [2020-07-28 19:07:30,984 INFO L280 TraceCheckUtils]: 129: Hoare triple {27840#false} havoc __utac_acc__Specification5_spec__3_#t~ret72, __utac_acc__Specification5_spec__3_#t~ret73, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {27840#false} is VALID [2020-07-28 19:07:30,984 INFO L280 TraceCheckUtils]: 130: Hoare triple {27840#false} __utac_acc__Specification5_spec__3_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret72 && __utac_acc__Specification5_spec__3_#t~ret72 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret72;havoc __utac_acc__Specification5_spec__3_#t~ret72; {27840#false} is VALID [2020-07-28 19:07:30,984 INFO L280 TraceCheckUtils]: 131: Hoare triple {27840#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {27840#false} is VALID [2020-07-28 19:07:30,985 INFO L280 TraceCheckUtils]: 132: Hoare triple {27840#false} __utac_acc__Specification5_spec__3_#t~ret73 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret73 && __utac_acc__Specification5_spec__3_#t~ret73 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret73;havoc __utac_acc__Specification5_spec__3_#t~ret73; {27840#false} is VALID [2020-07-28 19:07:30,985 INFO L280 TraceCheckUtils]: 133: Hoare triple {27840#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3; {27840#false} is VALID [2020-07-28 19:07:30,985 INFO L280 TraceCheckUtils]: 134: Hoare triple {27840#false} assume 0 == ~switchedOnBeforeTS~0; {27840#false} is VALID [2020-07-28 19:07:30,985 INFO L280 TraceCheckUtils]: 135: Hoare triple {27840#false} assume !false; {27840#false} is VALID [2020-07-28 19:07:30,995 INFO L134 CoverageAnalysis]: Checked inductivity of 188 backedges. 103 proven. 0 refuted. 0 times theorem prover too weak. 85 trivial. 0 not checked. [2020-07-28 19:07:30,995 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [99503831] [2020-07-28 19:07:30,996 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:07:30,996 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2020-07-28 19:07:30,996 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1387237637] [2020-07-28 19:07:30,997 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 136 [2020-07-28 19:07:30,997 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:07:30,997 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 19:07:31,111 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 92 edges. 92 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:07:31,111 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 19:07:31,111 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:07:31,112 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 19:07:31,112 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:07:31,112 INFO L87 Difference]: Start difference. First operand 453 states and 567 transitions. Second operand 3 states. [2020-07-28 19:07:33,267 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:07:33,267 INFO L93 Difference]: Finished difference Result 911 states and 1139 transitions. [2020-07-28 19:07:33,267 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 19:07:33,267 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 136 [2020-07-28 19:07:33,267 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:07:33,268 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:07:33,268 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 160 transitions. [2020-07-28 19:07:33,268 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:07:33,269 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 160 transitions. [2020-07-28 19:07:33,269 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 160 transitions. [2020-07-28 19:07:33,446 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 160 edges. 160 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:07:33,453 INFO L225 Difference]: With dead ends: 911 [2020-07-28 19:07:33,453 INFO L226 Difference]: Without dead ends: 317 [2020-07-28 19:07:33,454 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:07:33,455 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 317 states. [2020-07-28 19:07:34,594 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 317 to 317. [2020-07-28 19:07:34,595 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:07:34,595 INFO L82 GeneralOperation]: Start isEquivalent. First operand 317 states. Second operand 317 states. [2020-07-28 19:07:34,595 INFO L74 IsIncluded]: Start isIncluded. First operand 317 states. Second operand 317 states. [2020-07-28 19:07:34,595 INFO L87 Difference]: Start difference. First operand 317 states. Second operand 317 states. [2020-07-28 19:07:34,600 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:07:34,600 INFO L93 Difference]: Finished difference Result 317 states and 380 transitions. [2020-07-28 19:07:34,600 INFO L276 IsEmpty]: Start isEmpty. Operand 317 states and 380 transitions. [2020-07-28 19:07:34,601 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:07:34,601 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:07:34,601 INFO L74 IsIncluded]: Start isIncluded. First operand 317 states. Second operand 317 states. [2020-07-28 19:07:34,601 INFO L87 Difference]: Start difference. First operand 317 states. Second operand 317 states. [2020-07-28 19:07:34,606 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:07:34,606 INFO L93 Difference]: Finished difference Result 317 states and 380 transitions. [2020-07-28 19:07:34,606 INFO L276 IsEmpty]: Start isEmpty. Operand 317 states and 380 transitions. [2020-07-28 19:07:34,607 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:07:34,607 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:07:34,607 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:07:34,607 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:07:34,607 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 317 states. [2020-07-28 19:07:34,612 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 317 states to 317 states and 380 transitions. [2020-07-28 19:07:34,613 INFO L78 Accepts]: Start accepts. Automaton has 317 states and 380 transitions. Word has length 136 [2020-07-28 19:07:34,613 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:07:34,613 INFO L479 AbstractCegarLoop]: Abstraction has 317 states and 380 transitions. [2020-07-28 19:07:34,613 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 19:07:34,613 INFO L276 IsEmpty]: Start isEmpty. Operand 317 states and 380 transitions. [2020-07-28 19:07:34,614 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 142 [2020-07-28 19:07:34,614 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:07:34,614 INFO L422 BasicCegarLoop]: trace histogram [5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:07:34,614 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable15 [2020-07-28 19:07:34,614 INFO L427 AbstractCegarLoop]: === Iteration 17 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:07:34,614 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:07:34,614 INFO L82 PathProgramCache]: Analyzing trace with hash -1508258628, now seen corresponding path program 1 times [2020-07-28 19:07:34,615 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:07:34,615 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [348065256] [2020-07-28 19:07:34,615 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:07:34,660 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:07:34,788 INFO L280 TraceCheckUtils]: 0: Hoare triple {30246#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(13);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string21.base, #t~string21.offset, 1);call write~init~int(110, #t~string21.base, 1 + #t~string21.offset, 1);call write~init~int(0, #t~string21.base, 2 + #t~string21.offset, 1);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string23.base, #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 1 + #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 2 + #t~string23.offset, 1);call write~init~int(0, #t~string23.base, 3 + #t~string23.offset, 1);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string25.base, #t~string25.offset, 1);call write~init~int(80, #t~string25.base, 1 + #t~string25.offset, 1);call write~init~int(117, #t~string25.base, 2 + #t~string25.offset, 1);call write~init~int(109, #t~string25.base, 3 + #t~string25.offset, 1);call write~init~int(112, #t~string25.base, 4 + #t~string25.offset, 1);call write~init~int(58, #t~string25.base, 5 + #t~string25.offset, 1);call write~init~int(0, #t~string25.base, 6 + #t~string25.offset, 1);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string27.base, #t~string27.offset, 1);call write~init~int(110, #t~string27.base, 1 + #t~string27.offset, 1);call write~init~int(0, #t~string27.base, 2 + #t~string27.offset, 1);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string29.base, #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 1 + #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 2 + #t~string29.offset, 1);call write~init~int(0, #t~string29.base, 3 + #t~string29.offset, 1);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string31.base, #t~string31.offset, 1);call write~init~int(32, #t~string31.base, 1 + #t~string31.offset, 1);call write~init~int(0, #t~string31.base, 2 + #t~string31.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string33.base, #t~string33.offset, 1);call write~init~int(0, #t~string33.base, 1 + #t~string33.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(21);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(30);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(9);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(25);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4; {30248#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:07:34,789 INFO L280 TraceCheckUtils]: 1: Hoare triple {30248#(= 1 ~waterLevel~0)} havoc main_#res;havoc main_#t~ret74, main_~retValue_acc~11, main_~tmp~10;havoc main_~retValue_acc~11;havoc main_~tmp~10; {30248#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:07:34,790 INFO L280 TraceCheckUtils]: 2: Hoare triple {30248#(= 1 ~waterLevel~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~13;havoc valid_product_~retValue_acc~13;valid_product_~retValue_acc~13 := 1;valid_product_#res := valid_product_~retValue_acc~13; {30248#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:07:34,790 INFO L280 TraceCheckUtils]: 3: Hoare triple {30248#(= 1 ~waterLevel~0)} main_#t~ret74 := valid_product_#res;assume -2147483648 <= main_#t~ret74 && main_#t~ret74 <= 2147483647;main_~tmp~10 := main_#t~ret74;havoc main_#t~ret74; {30248#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:07:34,791 INFO L280 TraceCheckUtils]: 4: Hoare triple {30248#(= 1 ~waterLevel~0)} assume 0 != main_~tmp~10; {30248#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:07:34,791 INFO L280 TraceCheckUtils]: 5: Hoare triple {30248#(= 1 ~waterLevel~0)} ~switchedOnBeforeTS~0 := 0; {30248#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:07:34,792 INFO L280 TraceCheckUtils]: 6: Hoare triple {30248#(= 1 ~waterLevel~0)} havoc test_#t~nondet10, test_#t~nondet11, test_#t~nondet12, test_#t~nondet13, test_~splverifierCounter~0, test_~tmp~0, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~0;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {30248#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:07:34,793 INFO L280 TraceCheckUtils]: 7: Hoare triple {30248#(= 1 ~waterLevel~0)} assume !false; {30248#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:07:34,793 INFO L280 TraceCheckUtils]: 8: Hoare triple {30248#(= 1 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {30248#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:07:34,794 INFO L280 TraceCheckUtils]: 9: Hoare triple {30248#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet10 && test_#t~nondet10 <= 2147483647;test_~tmp~0 := test_#t~nondet10;havoc test_#t~nondet10; {30248#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:07:34,794 INFO L280 TraceCheckUtils]: 10: Hoare triple {30248#(= 1 ~waterLevel~0)} assume 0 != test_~tmp~0; {30248#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:07:34,795 INFO L280 TraceCheckUtils]: 11: Hoare triple {30248#(= 1 ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:07:34,796 INFO L280 TraceCheckUtils]: 12: Hoare triple {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp___0~0 := test_#t~nondet11;havoc test_#t~nondet11; {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:07:34,797 INFO L280 TraceCheckUtils]: 13: Hoare triple {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(0 != test_~tmp___0~0); {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:07:34,797 INFO L280 TraceCheckUtils]: 14: Hoare triple {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___2~0 := test_#t~nondet12;havoc test_#t~nondet12; {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:07:34,798 INFO L280 TraceCheckUtils]: 15: Hoare triple {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume 0 != test_~tmp___2~0; {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:07:34,799 INFO L280 TraceCheckUtils]: 16: Hoare triple {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} havoc __utac_acc__Specification5_spec__2_#t~ret71;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:07:34,800 INFO L280 TraceCheckUtils]: 17: Hoare triple {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} __utac_acc__Specification5_spec__2_#t~ret71 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret71 && __utac_acc__Specification5_spec__2_#t~ret71 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret71;havoc __utac_acc__Specification5_spec__2_#t~ret71; {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:07:34,800 INFO L280 TraceCheckUtils]: 18: Hoare triple {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(0 != ~pumpRunning~0); {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:07:34,801 INFO L280 TraceCheckUtils]: 19: Hoare triple {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:07:34,802 INFO L280 TraceCheckUtils]: 20: Hoare triple {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:07:34,802 INFO L280 TraceCheckUtils]: 21: Hoare triple {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret34, isHighWaterLevel_~retValue_acc~6, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~6;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:07:34,803 INFO L280 TraceCheckUtils]: 22: Hoare triple {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:07:34,804 INFO L280 TraceCheckUtils]: 23: Hoare triple {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} isHighWaterLevel_#t~ret34 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret34 && isHighWaterLevel_#t~ret34 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret34;havoc isHighWaterLevel_#t~ret34; {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:07:34,805 INFO L280 TraceCheckUtils]: 24: Hoare triple {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:07:34,805 INFO L280 TraceCheckUtils]: 25: Hoare triple {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} isHighWaterLevel_~retValue_acc~6 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~6; {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:07:34,806 INFO L280 TraceCheckUtils]: 26: Hoare triple {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} processEnvironment__wrappee__highWaterSensor_#t~ret14 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret14 && processEnvironment__wrappee__highWaterSensor_#t~ret14 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~1 := processEnvironment__wrappee__highWaterSensor_#t~ret14;havoc processEnvironment__wrappee__highWaterSensor_#t~ret14; {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:07:34,807 INFO L280 TraceCheckUtils]: 27: Hoare triple {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc activatePump_#t~ret16, activatePump_~tmp~3;havoc activatePump_~tmp~3;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret17, isMethaneAlarm_~retValue_acc~4;havoc isMethaneAlarm_~retValue_acc~4;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:07:34,808 INFO L280 TraceCheckUtils]: 28: Hoare triple {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} isMethaneAlarm_#t~ret17 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret17 && isMethaneAlarm_#t~ret17 <= 2147483647;isMethaneAlarm_~retValue_acc~4 := isMethaneAlarm_#t~ret17;havoc isMethaneAlarm_#t~ret17;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~4; {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:07:34,808 INFO L280 TraceCheckUtils]: 29: Hoare triple {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} activatePump_#t~ret16 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret16 && activatePump_#t~ret16 <= 2147483647;activatePump_~tmp~3 := activatePump_#t~ret16;havoc activatePump_#t~ret16; {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:07:34,809 INFO L280 TraceCheckUtils]: 30: Hoare triple {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(0 != activatePump_~tmp~3);~pumpRunning~0 := 1; {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:07:34,810 INFO L280 TraceCheckUtils]: 31: Hoare triple {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} havoc __utac_acc__Specification5_spec__3_#t~ret72, __utac_acc__Specification5_spec__3_#t~ret73, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:07:34,811 INFO L280 TraceCheckUtils]: 32: Hoare triple {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} __utac_acc__Specification5_spec__3_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret72 && __utac_acc__Specification5_spec__3_#t~ret72 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret72;havoc __utac_acc__Specification5_spec__3_#t~ret72; {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:07:34,811 INFO L280 TraceCheckUtils]: 33: Hoare triple {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~9); {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:07:34,812 INFO L280 TraceCheckUtils]: 34: Hoare triple {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !false; {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:07:34,813 INFO L280 TraceCheckUtils]: 35: Hoare triple {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume test_~splverifierCounter~0 < 4; {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:07:34,813 INFO L280 TraceCheckUtils]: 36: Hoare triple {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume -2147483648 <= test_#t~nondet10 && test_#t~nondet10 <= 2147483647;test_~tmp~0 := test_#t~nondet10;havoc test_#t~nondet10; {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:07:34,814 INFO L280 TraceCheckUtils]: 37: Hoare triple {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(0 != test_~tmp~0); {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:07:34,815 INFO L280 TraceCheckUtils]: 38: Hoare triple {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp___0~0 := test_#t~nondet11;havoc test_#t~nondet11; {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:07:34,815 INFO L280 TraceCheckUtils]: 39: Hoare triple {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(0 != test_~tmp___0~0); {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:07:34,816 INFO L280 TraceCheckUtils]: 40: Hoare triple {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___2~0 := test_#t~nondet12;havoc test_#t~nondet12; {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:07:34,817 INFO L280 TraceCheckUtils]: 41: Hoare triple {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume 0 != test_~tmp___2~0; {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:07:34,818 INFO L280 TraceCheckUtils]: 42: Hoare triple {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} havoc __utac_acc__Specification5_spec__2_#t~ret71;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:07:34,818 INFO L280 TraceCheckUtils]: 43: Hoare triple {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} __utac_acc__Specification5_spec__2_#t~ret71 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret71 && __utac_acc__Specification5_spec__2_#t~ret71 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret71;havoc __utac_acc__Specification5_spec__2_#t~ret71; {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:07:34,819 INFO L280 TraceCheckUtils]: 44: Hoare triple {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume 0 != ~pumpRunning~0; {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:07:34,820 INFO L280 TraceCheckUtils]: 45: Hoare triple {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {30248#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:07:34,821 INFO L280 TraceCheckUtils]: 46: Hoare triple {30248#(= 1 ~waterLevel~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {30248#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:07:34,821 INFO L280 TraceCheckUtils]: 47: Hoare triple {30248#(= 1 ~waterLevel~0)} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret35, isLowWaterLevel_~retValue_acc~7, isLowWaterLevel_~tmp~5, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~7;havoc isLowWaterLevel_~tmp~5;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~3;havoc isLowWaterSensorDry_~retValue_acc~3;isLowWaterSensorDry_~retValue_acc~3 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~3; {30248#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:07:34,822 INFO L280 TraceCheckUtils]: 48: Hoare triple {30248#(= 1 ~waterLevel~0)} isLowWaterLevel_#t~ret35 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret35 && isLowWaterLevel_#t~ret35 <= 2147483647;isLowWaterLevel_~tmp~5 := isLowWaterLevel_#t~ret35;havoc isLowWaterLevel_#t~ret35; {30248#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:07:34,823 INFO L280 TraceCheckUtils]: 49: Hoare triple {30248#(= 1 ~waterLevel~0)} assume 0 != isLowWaterLevel_~tmp~5;isLowWaterLevel_~tmp___0~2 := 0; {30248#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:07:34,823 INFO L280 TraceCheckUtils]: 50: Hoare triple {30248#(= 1 ~waterLevel~0)} isLowWaterLevel_~retValue_acc~7 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~7; {30248#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:07:34,824 INFO L280 TraceCheckUtils]: 51: Hoare triple {30248#(= 1 ~waterLevel~0)} processEnvironment_#t~ret15 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret15 && processEnvironment_#t~ret15 <= 2147483647;processEnvironment_~tmp~2 := processEnvironment_#t~ret15;havoc processEnvironment_#t~ret15; {30248#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:07:34,824 INFO L280 TraceCheckUtils]: 52: Hoare triple {30248#(= 1 ~waterLevel~0)} assume !(0 != processEnvironment_~tmp~2);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {30248#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:07:34,825 INFO L280 TraceCheckUtils]: 53: Hoare triple {30248#(= 1 ~waterLevel~0)} assume !(0 == ~pumpRunning~0); {30248#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:07:34,826 INFO L280 TraceCheckUtils]: 54: Hoare triple {30248#(= 1 ~waterLevel~0)} havoc __utac_acc__Specification5_spec__3_#t~ret72, __utac_acc__Specification5_spec__3_#t~ret73, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {30248#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:07:34,826 INFO L280 TraceCheckUtils]: 55: Hoare triple {30248#(= 1 ~waterLevel~0)} __utac_acc__Specification5_spec__3_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret72 && __utac_acc__Specification5_spec__3_#t~ret72 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret72;havoc __utac_acc__Specification5_spec__3_#t~ret72; {30248#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:07:34,827 INFO L280 TraceCheckUtils]: 56: Hoare triple {30248#(= 1 ~waterLevel~0)} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {30248#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:07:34,827 INFO L280 TraceCheckUtils]: 57: Hoare triple {30248#(= 1 ~waterLevel~0)} __utac_acc__Specification5_spec__3_#t~ret73 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret73 && __utac_acc__Specification5_spec__3_#t~ret73 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret73;havoc __utac_acc__Specification5_spec__3_#t~ret73; {30248#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:07:34,828 INFO L280 TraceCheckUtils]: 58: Hoare triple {30248#(= 1 ~waterLevel~0)} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3; {30248#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:07:34,829 INFO L280 TraceCheckUtils]: 59: Hoare triple {30248#(= 1 ~waterLevel~0)} assume !(0 == ~switchedOnBeforeTS~0); {30248#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:07:34,829 INFO L280 TraceCheckUtils]: 60: Hoare triple {30248#(= 1 ~waterLevel~0)} assume !false; {30248#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:07:34,830 INFO L280 TraceCheckUtils]: 61: Hoare triple {30248#(= 1 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {30248#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:07:34,830 INFO L280 TraceCheckUtils]: 62: Hoare triple {30248#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet10 && test_#t~nondet10 <= 2147483647;test_~tmp~0 := test_#t~nondet10;havoc test_#t~nondet10; {30248#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:07:34,831 INFO L280 TraceCheckUtils]: 63: Hoare triple {30248#(= 1 ~waterLevel~0)} assume !(0 != test_~tmp~0); {30248#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:07:34,832 INFO L280 TraceCheckUtils]: 64: Hoare triple {30248#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp___0~0 := test_#t~nondet11;havoc test_#t~nondet11; {30248#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:07:34,832 INFO L280 TraceCheckUtils]: 65: Hoare triple {30248#(= 1 ~waterLevel~0)} assume !(0 != test_~tmp___0~0); {30248#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:07:34,832 INFO L280 TraceCheckUtils]: 66: Hoare triple {30248#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___2~0 := test_#t~nondet12;havoc test_#t~nondet12; {30248#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:07:34,833 INFO L280 TraceCheckUtils]: 67: Hoare triple {30248#(= 1 ~waterLevel~0)} assume 0 != test_~tmp___2~0; {30248#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:07:34,833 INFO L280 TraceCheckUtils]: 68: Hoare triple {30248#(= 1 ~waterLevel~0)} havoc __utac_acc__Specification5_spec__2_#t~ret71;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {30248#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:07:34,834 INFO L280 TraceCheckUtils]: 69: Hoare triple {30248#(= 1 ~waterLevel~0)} __utac_acc__Specification5_spec__2_#t~ret71 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret71 && __utac_acc__Specification5_spec__2_#t~ret71 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret71;havoc __utac_acc__Specification5_spec__2_#t~ret71; {30248#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:07:34,834 INFO L280 TraceCheckUtils]: 70: Hoare triple {30248#(= 1 ~waterLevel~0)} assume 0 != ~pumpRunning~0; {30248#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:07:34,835 INFO L280 TraceCheckUtils]: 71: Hoare triple {30248#(= 1 ~waterLevel~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {30250#(and (<= 0 ~waterLevel~0) (<= ~waterLevel~0 0))} is VALID [2020-07-28 19:07:34,835 INFO L280 TraceCheckUtils]: 72: Hoare triple {30250#(and (<= 0 ~waterLevel~0) (<= ~waterLevel~0 0))} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {30250#(and (<= 0 ~waterLevel~0) (<= ~waterLevel~0 0))} is VALID [2020-07-28 19:07:34,836 INFO L280 TraceCheckUtils]: 73: Hoare triple {30250#(and (<= 0 ~waterLevel~0) (<= ~waterLevel~0 0))} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret35, isLowWaterLevel_~retValue_acc~7, isLowWaterLevel_~tmp~5, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~7;havoc isLowWaterLevel_~tmp~5;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~3;havoc isLowWaterSensorDry_~retValue_acc~3;isLowWaterSensorDry_~retValue_acc~3 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~3; {30251#(not (= 0 |ULTIMATE.start_isLowWaterSensorDry_#res|))} is VALID [2020-07-28 19:07:34,836 INFO L280 TraceCheckUtils]: 74: Hoare triple {30251#(not (= 0 |ULTIMATE.start_isLowWaterSensorDry_#res|))} isLowWaterLevel_#t~ret35 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret35 && isLowWaterLevel_#t~ret35 <= 2147483647;isLowWaterLevel_~tmp~5 := isLowWaterLevel_#t~ret35;havoc isLowWaterLevel_#t~ret35; {30252#(not (= 0 ULTIMATE.start_isLowWaterLevel_~tmp~5))} is VALID [2020-07-28 19:07:34,837 INFO L280 TraceCheckUtils]: 75: Hoare triple {30252#(not (= 0 ULTIMATE.start_isLowWaterLevel_~tmp~5))} assume !(0 != isLowWaterLevel_~tmp~5);isLowWaterLevel_~tmp___0~2 := 1; {30247#false} is VALID [2020-07-28 19:07:34,837 INFO L280 TraceCheckUtils]: 76: Hoare triple {30247#false} isLowWaterLevel_~retValue_acc~7 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~7; {30247#false} is VALID [2020-07-28 19:07:34,837 INFO L280 TraceCheckUtils]: 77: Hoare triple {30247#false} processEnvironment_#t~ret15 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret15 && processEnvironment_#t~ret15 <= 2147483647;processEnvironment_~tmp~2 := processEnvironment_#t~ret15;havoc processEnvironment_#t~ret15; {30247#false} is VALID [2020-07-28 19:07:34,837 INFO L280 TraceCheckUtils]: 78: Hoare triple {30247#false} assume 0 != processEnvironment_~tmp~2;~pumpRunning~0 := 0; {30247#false} is VALID [2020-07-28 19:07:34,837 INFO L280 TraceCheckUtils]: 79: Hoare triple {30247#false} havoc __utac_acc__Specification5_spec__3_#t~ret72, __utac_acc__Specification5_spec__3_#t~ret73, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {30247#false} is VALID [2020-07-28 19:07:34,837 INFO L280 TraceCheckUtils]: 80: Hoare triple {30247#false} __utac_acc__Specification5_spec__3_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret72 && __utac_acc__Specification5_spec__3_#t~ret72 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret72;havoc __utac_acc__Specification5_spec__3_#t~ret72; {30247#false} is VALID [2020-07-28 19:07:34,838 INFO L280 TraceCheckUtils]: 81: Hoare triple {30247#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {30247#false} is VALID [2020-07-28 19:07:34,838 INFO L280 TraceCheckUtils]: 82: Hoare triple {30247#false} __utac_acc__Specification5_spec__3_#t~ret73 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret73 && __utac_acc__Specification5_spec__3_#t~ret73 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret73;havoc __utac_acc__Specification5_spec__3_#t~ret73; {30247#false} is VALID [2020-07-28 19:07:34,838 INFO L280 TraceCheckUtils]: 83: Hoare triple {30247#false} assume !(0 != __utac_acc__Specification5_spec__3_~tmp___0~3); {30247#false} is VALID [2020-07-28 19:07:34,838 INFO L280 TraceCheckUtils]: 84: Hoare triple {30247#false} assume !false; {30247#false} is VALID [2020-07-28 19:07:34,838 INFO L280 TraceCheckUtils]: 85: Hoare triple {30247#false} assume test_~splverifierCounter~0 < 4; {30247#false} is VALID [2020-07-28 19:07:34,838 INFO L280 TraceCheckUtils]: 86: Hoare triple {30247#false} assume -2147483648 <= test_#t~nondet10 && test_#t~nondet10 <= 2147483647;test_~tmp~0 := test_#t~nondet10;havoc test_#t~nondet10; {30247#false} is VALID [2020-07-28 19:07:34,838 INFO L280 TraceCheckUtils]: 87: Hoare triple {30247#false} assume 0 != test_~tmp~0; {30247#false} is VALID [2020-07-28 19:07:34,838 INFO L280 TraceCheckUtils]: 88: Hoare triple {30247#false} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {30247#false} is VALID [2020-07-28 19:07:34,839 INFO L280 TraceCheckUtils]: 89: Hoare triple {30247#false} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp___0~0 := test_#t~nondet11;havoc test_#t~nondet11; {30247#false} is VALID [2020-07-28 19:07:34,839 INFO L280 TraceCheckUtils]: 90: Hoare triple {30247#false} assume !(0 != test_~tmp___0~0); {30247#false} is VALID [2020-07-28 19:07:34,839 INFO L280 TraceCheckUtils]: 91: Hoare triple {30247#false} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___2~0 := test_#t~nondet12;havoc test_#t~nondet12; {30247#false} is VALID [2020-07-28 19:07:34,839 INFO L280 TraceCheckUtils]: 92: Hoare triple {30247#false} assume 0 != test_~tmp___2~0; {30247#false} is VALID [2020-07-28 19:07:34,839 INFO L280 TraceCheckUtils]: 93: Hoare triple {30247#false} havoc __utac_acc__Specification5_spec__2_#t~ret71;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {30247#false} is VALID [2020-07-28 19:07:34,839 INFO L280 TraceCheckUtils]: 94: Hoare triple {30247#false} __utac_acc__Specification5_spec__2_#t~ret71 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret71 && __utac_acc__Specification5_spec__2_#t~ret71 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret71;havoc __utac_acc__Specification5_spec__2_#t~ret71; {30247#false} is VALID [2020-07-28 19:07:34,839 INFO L280 TraceCheckUtils]: 95: Hoare triple {30247#false} assume !(0 != ~pumpRunning~0); {30247#false} is VALID [2020-07-28 19:07:34,840 INFO L280 TraceCheckUtils]: 96: Hoare triple {30247#false} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {30247#false} is VALID [2020-07-28 19:07:34,840 INFO L280 TraceCheckUtils]: 97: Hoare triple {30247#false} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {30247#false} is VALID [2020-07-28 19:07:34,840 INFO L280 TraceCheckUtils]: 98: Hoare triple {30247#false} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret34, isHighWaterLevel_~retValue_acc~6, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~6;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {30247#false} is VALID [2020-07-28 19:07:34,840 INFO L280 TraceCheckUtils]: 99: Hoare triple {30247#false} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~2 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {30247#false} is VALID [2020-07-28 19:07:34,840 INFO L280 TraceCheckUtils]: 100: Hoare triple {30247#false} isHighWaterLevel_#t~ret34 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret34 && isHighWaterLevel_#t~ret34 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret34;havoc isHighWaterLevel_#t~ret34; {30247#false} is VALID [2020-07-28 19:07:34,840 INFO L280 TraceCheckUtils]: 101: Hoare triple {30247#false} assume 0 != isHighWaterLevel_~tmp~4;isHighWaterLevel_~tmp___0~1 := 0; {30247#false} is VALID [2020-07-28 19:07:34,840 INFO L280 TraceCheckUtils]: 102: Hoare triple {30247#false} isHighWaterLevel_~retValue_acc~6 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~6; {30247#false} is VALID [2020-07-28 19:07:34,841 INFO L280 TraceCheckUtils]: 103: Hoare triple {30247#false} processEnvironment__wrappee__highWaterSensor_#t~ret14 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret14 && processEnvironment__wrappee__highWaterSensor_#t~ret14 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~1 := processEnvironment__wrappee__highWaterSensor_#t~ret14;havoc processEnvironment__wrappee__highWaterSensor_#t~ret14; {30247#false} is VALID [2020-07-28 19:07:34,841 INFO L280 TraceCheckUtils]: 104: Hoare triple {30247#false} assume !(0 != processEnvironment__wrappee__highWaterSensor_~tmp~1); {30247#false} is VALID [2020-07-28 19:07:34,841 INFO L280 TraceCheckUtils]: 105: Hoare triple {30247#false} havoc __utac_acc__Specification5_spec__3_#t~ret72, __utac_acc__Specification5_spec__3_#t~ret73, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {30247#false} is VALID [2020-07-28 19:07:34,841 INFO L280 TraceCheckUtils]: 106: Hoare triple {30247#false} __utac_acc__Specification5_spec__3_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret72 && __utac_acc__Specification5_spec__3_#t~ret72 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret72;havoc __utac_acc__Specification5_spec__3_#t~ret72; {30247#false} is VALID [2020-07-28 19:07:34,841 INFO L280 TraceCheckUtils]: 107: Hoare triple {30247#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {30247#false} is VALID [2020-07-28 19:07:34,841 INFO L280 TraceCheckUtils]: 108: Hoare triple {30247#false} __utac_acc__Specification5_spec__3_#t~ret73 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret73 && __utac_acc__Specification5_spec__3_#t~ret73 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret73;havoc __utac_acc__Specification5_spec__3_#t~ret73; {30247#false} is VALID [2020-07-28 19:07:34,841 INFO L280 TraceCheckUtils]: 109: Hoare triple {30247#false} assume !(0 != __utac_acc__Specification5_spec__3_~tmp___0~3); {30247#false} is VALID [2020-07-28 19:07:34,842 INFO L280 TraceCheckUtils]: 110: Hoare triple {30247#false} assume !false; {30247#false} is VALID [2020-07-28 19:07:34,842 INFO L280 TraceCheckUtils]: 111: Hoare triple {30247#false} assume test_~splverifierCounter~0 < 4; {30247#false} is VALID [2020-07-28 19:07:34,842 INFO L280 TraceCheckUtils]: 112: Hoare triple {30247#false} assume -2147483648 <= test_#t~nondet10 && test_#t~nondet10 <= 2147483647;test_~tmp~0 := test_#t~nondet10;havoc test_#t~nondet10; {30247#false} is VALID [2020-07-28 19:07:34,842 INFO L280 TraceCheckUtils]: 113: Hoare triple {30247#false} assume 0 != test_~tmp~0; {30247#false} is VALID [2020-07-28 19:07:34,842 INFO L280 TraceCheckUtils]: 114: Hoare triple {30247#false} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {30247#false} is VALID [2020-07-28 19:07:34,842 INFO L280 TraceCheckUtils]: 115: Hoare triple {30247#false} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp___0~0 := test_#t~nondet11;havoc test_#t~nondet11; {30247#false} is VALID [2020-07-28 19:07:34,842 INFO L280 TraceCheckUtils]: 116: Hoare triple {30247#false} assume !(0 != test_~tmp___0~0); {30247#false} is VALID [2020-07-28 19:07:34,842 INFO L280 TraceCheckUtils]: 117: Hoare triple {30247#false} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___2~0 := test_#t~nondet12;havoc test_#t~nondet12; {30247#false} is VALID [2020-07-28 19:07:34,843 INFO L280 TraceCheckUtils]: 118: Hoare triple {30247#false} assume 0 != test_~tmp___2~0; {30247#false} is VALID [2020-07-28 19:07:34,843 INFO L280 TraceCheckUtils]: 119: Hoare triple {30247#false} havoc __utac_acc__Specification5_spec__2_#t~ret71;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {30247#false} is VALID [2020-07-28 19:07:34,843 INFO L280 TraceCheckUtils]: 120: Hoare triple {30247#false} __utac_acc__Specification5_spec__2_#t~ret71 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret71 && __utac_acc__Specification5_spec__2_#t~ret71 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret71;havoc __utac_acc__Specification5_spec__2_#t~ret71; {30247#false} is VALID [2020-07-28 19:07:34,843 INFO L280 TraceCheckUtils]: 121: Hoare triple {30247#false} assume !(0 != ~pumpRunning~0); {30247#false} is VALID [2020-07-28 19:07:34,844 INFO L280 TraceCheckUtils]: 122: Hoare triple {30247#false} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {30247#false} is VALID [2020-07-28 19:07:34,845 INFO L280 TraceCheckUtils]: 123: Hoare triple {30247#false} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {30247#false} is VALID [2020-07-28 19:07:34,845 INFO L280 TraceCheckUtils]: 124: Hoare triple {30247#false} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret34, isHighWaterLevel_~retValue_acc~6, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~6;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {30247#false} is VALID [2020-07-28 19:07:34,845 INFO L280 TraceCheckUtils]: 125: Hoare triple {30247#false} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {30247#false} is VALID [2020-07-28 19:07:34,845 INFO L280 TraceCheckUtils]: 126: Hoare triple {30247#false} isHighWaterLevel_#t~ret34 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret34 && isHighWaterLevel_#t~ret34 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret34;havoc isHighWaterLevel_#t~ret34; {30247#false} is VALID [2020-07-28 19:07:34,846 INFO L280 TraceCheckUtils]: 127: Hoare triple {30247#false} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {30247#false} is VALID [2020-07-28 19:07:34,846 INFO L280 TraceCheckUtils]: 128: Hoare triple {30247#false} isHighWaterLevel_~retValue_acc~6 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~6; {30247#false} is VALID [2020-07-28 19:07:34,846 INFO L280 TraceCheckUtils]: 129: Hoare triple {30247#false} processEnvironment__wrappee__highWaterSensor_#t~ret14 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret14 && processEnvironment__wrappee__highWaterSensor_#t~ret14 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~1 := processEnvironment__wrappee__highWaterSensor_#t~ret14;havoc processEnvironment__wrappee__highWaterSensor_#t~ret14; {30247#false} is VALID [2020-07-28 19:07:34,846 INFO L280 TraceCheckUtils]: 130: Hoare triple {30247#false} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc activatePump_#t~ret16, activatePump_~tmp~3;havoc activatePump_~tmp~3;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret17, isMethaneAlarm_~retValue_acc~4;havoc isMethaneAlarm_~retValue_acc~4;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {30247#false} is VALID [2020-07-28 19:07:34,847 INFO L280 TraceCheckUtils]: 131: Hoare triple {30247#false} isMethaneAlarm_#t~ret17 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret17 && isMethaneAlarm_#t~ret17 <= 2147483647;isMethaneAlarm_~retValue_acc~4 := isMethaneAlarm_#t~ret17;havoc isMethaneAlarm_#t~ret17;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~4; {30247#false} is VALID [2020-07-28 19:07:34,847 INFO L280 TraceCheckUtils]: 132: Hoare triple {30247#false} activatePump_#t~ret16 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret16 && activatePump_#t~ret16 <= 2147483647;activatePump_~tmp~3 := activatePump_#t~ret16;havoc activatePump_#t~ret16; {30247#false} is VALID [2020-07-28 19:07:34,847 INFO L280 TraceCheckUtils]: 133: Hoare triple {30247#false} assume !(0 != activatePump_~tmp~3);~pumpRunning~0 := 1; {30247#false} is VALID [2020-07-28 19:07:34,847 INFO L280 TraceCheckUtils]: 134: Hoare triple {30247#false} havoc __utac_acc__Specification5_spec__3_#t~ret72, __utac_acc__Specification5_spec__3_#t~ret73, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {30247#false} is VALID [2020-07-28 19:07:34,848 INFO L280 TraceCheckUtils]: 135: Hoare triple {30247#false} __utac_acc__Specification5_spec__3_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret72 && __utac_acc__Specification5_spec__3_#t~ret72 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret72;havoc __utac_acc__Specification5_spec__3_#t~ret72; {30247#false} is VALID [2020-07-28 19:07:34,848 INFO L280 TraceCheckUtils]: 136: Hoare triple {30247#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {30247#false} is VALID [2020-07-28 19:07:34,848 INFO L280 TraceCheckUtils]: 137: Hoare triple {30247#false} __utac_acc__Specification5_spec__3_#t~ret73 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret73 && __utac_acc__Specification5_spec__3_#t~ret73 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret73;havoc __utac_acc__Specification5_spec__3_#t~ret73; {30247#false} is VALID [2020-07-28 19:07:34,848 INFO L280 TraceCheckUtils]: 138: Hoare triple {30247#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3; {30247#false} is VALID [2020-07-28 19:07:34,849 INFO L280 TraceCheckUtils]: 139: Hoare triple {30247#false} assume 0 == ~switchedOnBeforeTS~0; {30247#false} is VALID [2020-07-28 19:07:34,849 INFO L280 TraceCheckUtils]: 140: Hoare triple {30247#false} assume !false; {30247#false} is VALID [2020-07-28 19:07:34,867 INFO L134 CoverageAnalysis]: Checked inductivity of 206 backedges. 125 proven. 34 refuted. 0 times theorem prover too weak. 47 trivial. 0 not checked. [2020-07-28 19:07:34,867 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [348065256] [2020-07-28 19:07:34,868 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1271338881] [2020-07-28 19:07:34,868 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 5 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 5 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2020-07-28 19:07:35,004 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:07:35,007 INFO L263 TraceCheckSpWp]: Trace formula consists of 684 conjuncts, 12 conjunts are in the unsatisfiable core [2020-07-28 19:07:35,060 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:07:35,068 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2020-07-28 19:07:35,281 INFO L280 TraceCheckUtils]: 0: Hoare triple {30246#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(13);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string21.base, #t~string21.offset, 1);call write~init~int(110, #t~string21.base, 1 + #t~string21.offset, 1);call write~init~int(0, #t~string21.base, 2 + #t~string21.offset, 1);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string23.base, #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 1 + #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 2 + #t~string23.offset, 1);call write~init~int(0, #t~string23.base, 3 + #t~string23.offset, 1);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string25.base, #t~string25.offset, 1);call write~init~int(80, #t~string25.base, 1 + #t~string25.offset, 1);call write~init~int(117, #t~string25.base, 2 + #t~string25.offset, 1);call write~init~int(109, #t~string25.base, 3 + #t~string25.offset, 1);call write~init~int(112, #t~string25.base, 4 + #t~string25.offset, 1);call write~init~int(58, #t~string25.base, 5 + #t~string25.offset, 1);call write~init~int(0, #t~string25.base, 6 + #t~string25.offset, 1);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string27.base, #t~string27.offset, 1);call write~init~int(110, #t~string27.base, 1 + #t~string27.offset, 1);call write~init~int(0, #t~string27.base, 2 + #t~string27.offset, 1);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string29.base, #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 1 + #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 2 + #t~string29.offset, 1);call write~init~int(0, #t~string29.base, 3 + #t~string29.offset, 1);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string31.base, #t~string31.offset, 1);call write~init~int(32, #t~string31.base, 1 + #t~string31.offset, 1);call write~init~int(0, #t~string31.base, 2 + #t~string31.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string33.base, #t~string33.offset, 1);call write~init~int(0, #t~string33.base, 1 + #t~string33.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(21);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(30);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(9);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(25);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4; {30246#true} is VALID [2020-07-28 19:07:35,282 INFO L280 TraceCheckUtils]: 1: Hoare triple {30246#true} havoc main_#res;havoc main_#t~ret74, main_~retValue_acc~11, main_~tmp~10;havoc main_~retValue_acc~11;havoc main_~tmp~10; {30246#true} is VALID [2020-07-28 19:07:35,282 INFO L280 TraceCheckUtils]: 2: Hoare triple {30246#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~13;havoc valid_product_~retValue_acc~13;valid_product_~retValue_acc~13 := 1;valid_product_#res := valid_product_~retValue_acc~13; {30246#true} is VALID [2020-07-28 19:07:35,282 INFO L280 TraceCheckUtils]: 3: Hoare triple {30246#true} main_#t~ret74 := valid_product_#res;assume -2147483648 <= main_#t~ret74 && main_#t~ret74 <= 2147483647;main_~tmp~10 := main_#t~ret74;havoc main_#t~ret74; {30246#true} is VALID [2020-07-28 19:07:35,282 INFO L280 TraceCheckUtils]: 4: Hoare triple {30246#true} assume 0 != main_~tmp~10; {30246#true} is VALID [2020-07-28 19:07:35,283 INFO L280 TraceCheckUtils]: 5: Hoare triple {30246#true} ~switchedOnBeforeTS~0 := 0; {30246#true} is VALID [2020-07-28 19:07:35,283 INFO L280 TraceCheckUtils]: 6: Hoare triple {30246#true} havoc test_#t~nondet10, test_#t~nondet11, test_#t~nondet12, test_#t~nondet13, test_~splverifierCounter~0, test_~tmp~0, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~0;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {30246#true} is VALID [2020-07-28 19:07:35,283 INFO L280 TraceCheckUtils]: 7: Hoare triple {30246#true} assume !false; {30246#true} is VALID [2020-07-28 19:07:35,284 INFO L280 TraceCheckUtils]: 8: Hoare triple {30246#true} assume test_~splverifierCounter~0 < 4; {30246#true} is VALID [2020-07-28 19:07:35,284 INFO L280 TraceCheckUtils]: 9: Hoare triple {30246#true} assume -2147483648 <= test_#t~nondet10 && test_#t~nondet10 <= 2147483647;test_~tmp~0 := test_#t~nondet10;havoc test_#t~nondet10; {30246#true} is VALID [2020-07-28 19:07:35,284 INFO L280 TraceCheckUtils]: 10: Hoare triple {30246#true} assume 0 != test_~tmp~0; {30246#true} is VALID [2020-07-28 19:07:35,284 INFO L280 TraceCheckUtils]: 11: Hoare triple {30246#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {30246#true} is VALID [2020-07-28 19:07:35,284 INFO L280 TraceCheckUtils]: 12: Hoare triple {30246#true} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp___0~0 := test_#t~nondet11;havoc test_#t~nondet11; {30246#true} is VALID [2020-07-28 19:07:35,285 INFO L280 TraceCheckUtils]: 13: Hoare triple {30246#true} assume !(0 != test_~tmp___0~0); {30246#true} is VALID [2020-07-28 19:07:35,285 INFO L280 TraceCheckUtils]: 14: Hoare triple {30246#true} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___2~0 := test_#t~nondet12;havoc test_#t~nondet12; {30246#true} is VALID [2020-07-28 19:07:35,285 INFO L280 TraceCheckUtils]: 15: Hoare triple {30246#true} assume 0 != test_~tmp___2~0; {30246#true} is VALID [2020-07-28 19:07:35,285 INFO L280 TraceCheckUtils]: 16: Hoare triple {30246#true} havoc __utac_acc__Specification5_spec__2_#t~ret71;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {30246#true} is VALID [2020-07-28 19:07:35,286 INFO L280 TraceCheckUtils]: 17: Hoare triple {30246#true} __utac_acc__Specification5_spec__2_#t~ret71 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret71 && __utac_acc__Specification5_spec__2_#t~ret71 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret71;havoc __utac_acc__Specification5_spec__2_#t~ret71; {30246#true} is VALID [2020-07-28 19:07:35,286 INFO L280 TraceCheckUtils]: 18: Hoare triple {30246#true} assume !(0 != ~pumpRunning~0); {30246#true} is VALID [2020-07-28 19:07:35,286 INFO L280 TraceCheckUtils]: 19: Hoare triple {30246#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {30246#true} is VALID [2020-07-28 19:07:35,286 INFO L280 TraceCheckUtils]: 20: Hoare triple {30246#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {30246#true} is VALID [2020-07-28 19:07:35,286 INFO L280 TraceCheckUtils]: 21: Hoare triple {30246#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret34, isHighWaterLevel_~retValue_acc~6, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~6;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {30246#true} is VALID [2020-07-28 19:07:35,286 INFO L280 TraceCheckUtils]: 22: Hoare triple {30246#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {30246#true} is VALID [2020-07-28 19:07:35,286 INFO L280 TraceCheckUtils]: 23: Hoare triple {30246#true} isHighWaterLevel_#t~ret34 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret34 && isHighWaterLevel_#t~ret34 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret34;havoc isHighWaterLevel_#t~ret34; {30246#true} is VALID [2020-07-28 19:07:35,287 INFO L280 TraceCheckUtils]: 24: Hoare triple {30246#true} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {30246#true} is VALID [2020-07-28 19:07:35,287 INFO L280 TraceCheckUtils]: 25: Hoare triple {30246#true} isHighWaterLevel_~retValue_acc~6 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~6; {30246#true} is VALID [2020-07-28 19:07:35,287 INFO L280 TraceCheckUtils]: 26: Hoare triple {30246#true} processEnvironment__wrappee__highWaterSensor_#t~ret14 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret14 && processEnvironment__wrappee__highWaterSensor_#t~ret14 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~1 := processEnvironment__wrappee__highWaterSensor_#t~ret14;havoc processEnvironment__wrappee__highWaterSensor_#t~ret14; {30246#true} is VALID [2020-07-28 19:07:35,287 INFO L280 TraceCheckUtils]: 27: Hoare triple {30246#true} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc activatePump_#t~ret16, activatePump_~tmp~3;havoc activatePump_~tmp~3;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret17, isMethaneAlarm_~retValue_acc~4;havoc isMethaneAlarm_~retValue_acc~4;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {30246#true} is VALID [2020-07-28 19:07:35,287 INFO L280 TraceCheckUtils]: 28: Hoare triple {30246#true} isMethaneAlarm_#t~ret17 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret17 && isMethaneAlarm_#t~ret17 <= 2147483647;isMethaneAlarm_~retValue_acc~4 := isMethaneAlarm_#t~ret17;havoc isMethaneAlarm_#t~ret17;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~4; {30246#true} is VALID [2020-07-28 19:07:35,287 INFO L280 TraceCheckUtils]: 29: Hoare triple {30246#true} activatePump_#t~ret16 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret16 && activatePump_#t~ret16 <= 2147483647;activatePump_~tmp~3 := activatePump_#t~ret16;havoc activatePump_#t~ret16; {30246#true} is VALID [2020-07-28 19:07:35,288 INFO L280 TraceCheckUtils]: 30: Hoare triple {30246#true} assume !(0 != activatePump_~tmp~3);~pumpRunning~0 := 1; {30246#true} is VALID [2020-07-28 19:07:35,288 INFO L280 TraceCheckUtils]: 31: Hoare triple {30246#true} havoc __utac_acc__Specification5_spec__3_#t~ret72, __utac_acc__Specification5_spec__3_#t~ret73, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {30246#true} is VALID [2020-07-28 19:07:35,288 INFO L280 TraceCheckUtils]: 32: Hoare triple {30246#true} __utac_acc__Specification5_spec__3_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret72 && __utac_acc__Specification5_spec__3_#t~ret72 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret72;havoc __utac_acc__Specification5_spec__3_#t~ret72; {30246#true} is VALID [2020-07-28 19:07:35,288 INFO L280 TraceCheckUtils]: 33: Hoare triple {30246#true} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~9); {30246#true} is VALID [2020-07-28 19:07:35,289 INFO L280 TraceCheckUtils]: 34: Hoare triple {30246#true} assume !false; {30246#true} is VALID [2020-07-28 19:07:35,289 INFO L280 TraceCheckUtils]: 35: Hoare triple {30246#true} assume test_~splverifierCounter~0 < 4; {30246#true} is VALID [2020-07-28 19:07:35,289 INFO L280 TraceCheckUtils]: 36: Hoare triple {30246#true} assume -2147483648 <= test_#t~nondet10 && test_#t~nondet10 <= 2147483647;test_~tmp~0 := test_#t~nondet10;havoc test_#t~nondet10; {30246#true} is VALID [2020-07-28 19:07:35,290 INFO L280 TraceCheckUtils]: 37: Hoare triple {30246#true} assume !(0 != test_~tmp~0); {30246#true} is VALID [2020-07-28 19:07:35,290 INFO L280 TraceCheckUtils]: 38: Hoare triple {30246#true} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp___0~0 := test_#t~nondet11;havoc test_#t~nondet11; {30246#true} is VALID [2020-07-28 19:07:35,290 INFO L280 TraceCheckUtils]: 39: Hoare triple {30246#true} assume !(0 != test_~tmp___0~0); {30246#true} is VALID [2020-07-28 19:07:35,290 INFO L280 TraceCheckUtils]: 40: Hoare triple {30246#true} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___2~0 := test_#t~nondet12;havoc test_#t~nondet12; {30246#true} is VALID [2020-07-28 19:07:35,291 INFO L280 TraceCheckUtils]: 41: Hoare triple {30246#true} assume 0 != test_~tmp___2~0; {30246#true} is VALID [2020-07-28 19:07:35,291 INFO L280 TraceCheckUtils]: 42: Hoare triple {30246#true} havoc __utac_acc__Specification5_spec__2_#t~ret71;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {30246#true} is VALID [2020-07-28 19:07:35,291 INFO L280 TraceCheckUtils]: 43: Hoare triple {30246#true} __utac_acc__Specification5_spec__2_#t~ret71 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret71 && __utac_acc__Specification5_spec__2_#t~ret71 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret71;havoc __utac_acc__Specification5_spec__2_#t~ret71; {30246#true} is VALID [2020-07-28 19:07:35,291 INFO L280 TraceCheckUtils]: 44: Hoare triple {30246#true} assume 0 != ~pumpRunning~0; {30246#true} is VALID [2020-07-28 19:07:35,292 INFO L280 TraceCheckUtils]: 45: Hoare triple {30246#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {30246#true} is VALID [2020-07-28 19:07:35,292 INFO L280 TraceCheckUtils]: 46: Hoare triple {30246#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {30246#true} is VALID [2020-07-28 19:07:35,292 INFO L280 TraceCheckUtils]: 47: Hoare triple {30246#true} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret35, isLowWaterLevel_~retValue_acc~7, isLowWaterLevel_~tmp~5, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~7;havoc isLowWaterLevel_~tmp~5;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~3;havoc isLowWaterSensorDry_~retValue_acc~3;isLowWaterSensorDry_~retValue_acc~3 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~3; {30246#true} is VALID [2020-07-28 19:07:35,292 INFO L280 TraceCheckUtils]: 48: Hoare triple {30246#true} isLowWaterLevel_#t~ret35 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret35 && isLowWaterLevel_#t~ret35 <= 2147483647;isLowWaterLevel_~tmp~5 := isLowWaterLevel_#t~ret35;havoc isLowWaterLevel_#t~ret35; {30246#true} is VALID [2020-07-28 19:07:35,293 INFO L280 TraceCheckUtils]: 49: Hoare triple {30246#true} assume 0 != isLowWaterLevel_~tmp~5;isLowWaterLevel_~tmp___0~2 := 0; {30246#true} is VALID [2020-07-28 19:07:35,293 INFO L280 TraceCheckUtils]: 50: Hoare triple {30246#true} isLowWaterLevel_~retValue_acc~7 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~7; {30246#true} is VALID [2020-07-28 19:07:35,293 INFO L280 TraceCheckUtils]: 51: Hoare triple {30246#true} processEnvironment_#t~ret15 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret15 && processEnvironment_#t~ret15 <= 2147483647;processEnvironment_~tmp~2 := processEnvironment_#t~ret15;havoc processEnvironment_#t~ret15; {30246#true} is VALID [2020-07-28 19:07:35,293 INFO L280 TraceCheckUtils]: 52: Hoare triple {30246#true} assume !(0 != processEnvironment_~tmp~2);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {30246#true} is VALID [2020-07-28 19:07:35,293 INFO L280 TraceCheckUtils]: 53: Hoare triple {30246#true} assume !(0 == ~pumpRunning~0); {30246#true} is VALID [2020-07-28 19:07:35,294 INFO L280 TraceCheckUtils]: 54: Hoare triple {30246#true} havoc __utac_acc__Specification5_spec__3_#t~ret72, __utac_acc__Specification5_spec__3_#t~ret73, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {30246#true} is VALID [2020-07-28 19:07:35,294 INFO L280 TraceCheckUtils]: 55: Hoare triple {30246#true} __utac_acc__Specification5_spec__3_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret72 && __utac_acc__Specification5_spec__3_#t~ret72 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret72;havoc __utac_acc__Specification5_spec__3_#t~ret72; {30246#true} is VALID [2020-07-28 19:07:35,294 INFO L280 TraceCheckUtils]: 56: Hoare triple {30246#true} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {30246#true} is VALID [2020-07-28 19:07:35,294 INFO L280 TraceCheckUtils]: 57: Hoare triple {30246#true} __utac_acc__Specification5_spec__3_#t~ret73 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret73 && __utac_acc__Specification5_spec__3_#t~ret73 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret73;havoc __utac_acc__Specification5_spec__3_#t~ret73; {30246#true} is VALID [2020-07-28 19:07:35,295 INFO L280 TraceCheckUtils]: 58: Hoare triple {30246#true} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3; {30246#true} is VALID [2020-07-28 19:07:35,295 INFO L280 TraceCheckUtils]: 59: Hoare triple {30246#true} assume !(0 == ~switchedOnBeforeTS~0); {30246#true} is VALID [2020-07-28 19:07:35,295 INFO L280 TraceCheckUtils]: 60: Hoare triple {30246#true} assume !false; {30246#true} is VALID [2020-07-28 19:07:35,295 INFO L280 TraceCheckUtils]: 61: Hoare triple {30246#true} assume test_~splverifierCounter~0 < 4; {30246#true} is VALID [2020-07-28 19:07:35,296 INFO L280 TraceCheckUtils]: 62: Hoare triple {30246#true} assume -2147483648 <= test_#t~nondet10 && test_#t~nondet10 <= 2147483647;test_~tmp~0 := test_#t~nondet10;havoc test_#t~nondet10; {30246#true} is VALID [2020-07-28 19:07:35,296 INFO L280 TraceCheckUtils]: 63: Hoare triple {30246#true} assume !(0 != test_~tmp~0); {30246#true} is VALID [2020-07-28 19:07:35,296 INFO L280 TraceCheckUtils]: 64: Hoare triple {30246#true} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp___0~0 := test_#t~nondet11;havoc test_#t~nondet11; {30246#true} is VALID [2020-07-28 19:07:35,296 INFO L280 TraceCheckUtils]: 65: Hoare triple {30246#true} assume !(0 != test_~tmp___0~0); {30246#true} is VALID [2020-07-28 19:07:35,296 INFO L280 TraceCheckUtils]: 66: Hoare triple {30246#true} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___2~0 := test_#t~nondet12;havoc test_#t~nondet12; {30246#true} is VALID [2020-07-28 19:07:35,297 INFO L280 TraceCheckUtils]: 67: Hoare triple {30246#true} assume 0 != test_~tmp___2~0; {30246#true} is VALID [2020-07-28 19:07:35,297 INFO L280 TraceCheckUtils]: 68: Hoare triple {30246#true} havoc __utac_acc__Specification5_spec__2_#t~ret71;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {30246#true} is VALID [2020-07-28 19:07:35,297 INFO L280 TraceCheckUtils]: 69: Hoare triple {30246#true} __utac_acc__Specification5_spec__2_#t~ret71 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret71 && __utac_acc__Specification5_spec__2_#t~ret71 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret71;havoc __utac_acc__Specification5_spec__2_#t~ret71; {30246#true} is VALID [2020-07-28 19:07:35,297 INFO L280 TraceCheckUtils]: 70: Hoare triple {30246#true} assume 0 != ~pumpRunning~0; {30246#true} is VALID [2020-07-28 19:07:35,298 INFO L280 TraceCheckUtils]: 71: Hoare triple {30246#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {30246#true} is VALID [2020-07-28 19:07:35,298 INFO L280 TraceCheckUtils]: 72: Hoare triple {30246#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {30246#true} is VALID [2020-07-28 19:07:35,298 INFO L280 TraceCheckUtils]: 73: Hoare triple {30246#true} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret35, isLowWaterLevel_~retValue_acc~7, isLowWaterLevel_~tmp~5, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~7;havoc isLowWaterLevel_~tmp~5;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~3;havoc isLowWaterSensorDry_~retValue_acc~3;isLowWaterSensorDry_~retValue_acc~3 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~3; {30246#true} is VALID [2020-07-28 19:07:35,298 INFO L280 TraceCheckUtils]: 74: Hoare triple {30246#true} isLowWaterLevel_#t~ret35 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret35 && isLowWaterLevel_#t~ret35 <= 2147483647;isLowWaterLevel_~tmp~5 := isLowWaterLevel_#t~ret35;havoc isLowWaterLevel_#t~ret35; {30246#true} is VALID [2020-07-28 19:07:35,299 INFO L280 TraceCheckUtils]: 75: Hoare triple {30246#true} assume !(0 != isLowWaterLevel_~tmp~5);isLowWaterLevel_~tmp___0~2 := 1; {30246#true} is VALID [2020-07-28 19:07:35,299 INFO L280 TraceCheckUtils]: 76: Hoare triple {30246#true} isLowWaterLevel_~retValue_acc~7 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~7; {30246#true} is VALID [2020-07-28 19:07:35,299 INFO L280 TraceCheckUtils]: 77: Hoare triple {30246#true} processEnvironment_#t~ret15 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret15 && processEnvironment_#t~ret15 <= 2147483647;processEnvironment_~tmp~2 := processEnvironment_#t~ret15;havoc processEnvironment_#t~ret15; {30246#true} is VALID [2020-07-28 19:07:35,299 INFO L280 TraceCheckUtils]: 78: Hoare triple {30246#true} assume 0 != processEnvironment_~tmp~2;~pumpRunning~0 := 0; {30246#true} is VALID [2020-07-28 19:07:35,299 INFO L280 TraceCheckUtils]: 79: Hoare triple {30246#true} havoc __utac_acc__Specification5_spec__3_#t~ret72, __utac_acc__Specification5_spec__3_#t~ret73, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {30246#true} is VALID [2020-07-28 19:07:35,300 INFO L280 TraceCheckUtils]: 80: Hoare triple {30246#true} __utac_acc__Specification5_spec__3_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret72 && __utac_acc__Specification5_spec__3_#t~ret72 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret72;havoc __utac_acc__Specification5_spec__3_#t~ret72; {30246#true} is VALID [2020-07-28 19:07:35,300 INFO L280 TraceCheckUtils]: 81: Hoare triple {30246#true} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {30246#true} is VALID [2020-07-28 19:07:35,300 INFO L280 TraceCheckUtils]: 82: Hoare triple {30246#true} __utac_acc__Specification5_spec__3_#t~ret73 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret73 && __utac_acc__Specification5_spec__3_#t~ret73 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret73;havoc __utac_acc__Specification5_spec__3_#t~ret73; {30246#true} is VALID [2020-07-28 19:07:35,300 INFO L280 TraceCheckUtils]: 83: Hoare triple {30246#true} assume !(0 != __utac_acc__Specification5_spec__3_~tmp___0~3); {30246#true} is VALID [2020-07-28 19:07:35,301 INFO L280 TraceCheckUtils]: 84: Hoare triple {30246#true} assume !false; {30246#true} is VALID [2020-07-28 19:07:35,301 INFO L280 TraceCheckUtils]: 85: Hoare triple {30246#true} assume test_~splverifierCounter~0 < 4; {30246#true} is VALID [2020-07-28 19:07:35,301 INFO L280 TraceCheckUtils]: 86: Hoare triple {30246#true} assume -2147483648 <= test_#t~nondet10 && test_#t~nondet10 <= 2147483647;test_~tmp~0 := test_#t~nondet10;havoc test_#t~nondet10; {30246#true} is VALID [2020-07-28 19:07:35,301 INFO L280 TraceCheckUtils]: 87: Hoare triple {30246#true} assume 0 != test_~tmp~0; {30246#true} is VALID [2020-07-28 19:07:35,302 INFO L280 TraceCheckUtils]: 88: Hoare triple {30246#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {30246#true} is VALID [2020-07-28 19:07:35,302 INFO L280 TraceCheckUtils]: 89: Hoare triple {30246#true} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp___0~0 := test_#t~nondet11;havoc test_#t~nondet11; {30246#true} is VALID [2020-07-28 19:07:35,302 INFO L280 TraceCheckUtils]: 90: Hoare triple {30246#true} assume !(0 != test_~tmp___0~0); {30246#true} is VALID [2020-07-28 19:07:35,302 INFO L280 TraceCheckUtils]: 91: Hoare triple {30246#true} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___2~0 := test_#t~nondet12;havoc test_#t~nondet12; {30246#true} is VALID [2020-07-28 19:07:35,302 INFO L280 TraceCheckUtils]: 92: Hoare triple {30246#true} assume 0 != test_~tmp___2~0; {30246#true} is VALID [2020-07-28 19:07:35,303 INFO L280 TraceCheckUtils]: 93: Hoare triple {30246#true} havoc __utac_acc__Specification5_spec__2_#t~ret71;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {30246#true} is VALID [2020-07-28 19:07:35,303 INFO L280 TraceCheckUtils]: 94: Hoare triple {30246#true} __utac_acc__Specification5_spec__2_#t~ret71 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret71 && __utac_acc__Specification5_spec__2_#t~ret71 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret71;havoc __utac_acc__Specification5_spec__2_#t~ret71; {30246#true} is VALID [2020-07-28 19:07:35,303 INFO L280 TraceCheckUtils]: 95: Hoare triple {30246#true} assume !(0 != ~pumpRunning~0); {30246#true} is VALID [2020-07-28 19:07:35,303 INFO L280 TraceCheckUtils]: 96: Hoare triple {30246#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {30246#true} is VALID [2020-07-28 19:07:35,304 INFO L280 TraceCheckUtils]: 97: Hoare triple {30246#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {30246#true} is VALID [2020-07-28 19:07:35,304 INFO L280 TraceCheckUtils]: 98: Hoare triple {30246#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret34, isHighWaterLevel_~retValue_acc~6, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~6;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {30246#true} is VALID [2020-07-28 19:07:35,306 INFO L280 TraceCheckUtils]: 99: Hoare triple {30246#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~2 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {30553#(< ~waterLevel~0 2)} is VALID [2020-07-28 19:07:35,306 INFO L280 TraceCheckUtils]: 100: Hoare triple {30553#(< ~waterLevel~0 2)} isHighWaterLevel_#t~ret34 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret34 && isHighWaterLevel_#t~ret34 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret34;havoc isHighWaterLevel_#t~ret34; {30553#(< ~waterLevel~0 2)} is VALID [2020-07-28 19:07:35,307 INFO L280 TraceCheckUtils]: 101: Hoare triple {30553#(< ~waterLevel~0 2)} assume 0 != isHighWaterLevel_~tmp~4;isHighWaterLevel_~tmp___0~1 := 0; {30553#(< ~waterLevel~0 2)} is VALID [2020-07-28 19:07:35,307 INFO L280 TraceCheckUtils]: 102: Hoare triple {30553#(< ~waterLevel~0 2)} isHighWaterLevel_~retValue_acc~6 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~6; {30553#(< ~waterLevel~0 2)} is VALID [2020-07-28 19:07:35,308 INFO L280 TraceCheckUtils]: 103: Hoare triple {30553#(< ~waterLevel~0 2)} processEnvironment__wrappee__highWaterSensor_#t~ret14 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret14 && processEnvironment__wrappee__highWaterSensor_#t~ret14 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~1 := processEnvironment__wrappee__highWaterSensor_#t~ret14;havoc processEnvironment__wrappee__highWaterSensor_#t~ret14; {30553#(< ~waterLevel~0 2)} is VALID [2020-07-28 19:07:35,308 INFO L280 TraceCheckUtils]: 104: Hoare triple {30553#(< ~waterLevel~0 2)} assume !(0 != processEnvironment__wrappee__highWaterSensor_~tmp~1); {30553#(< ~waterLevel~0 2)} is VALID [2020-07-28 19:07:35,308 INFO L280 TraceCheckUtils]: 105: Hoare triple {30553#(< ~waterLevel~0 2)} havoc __utac_acc__Specification5_spec__3_#t~ret72, __utac_acc__Specification5_spec__3_#t~ret73, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {30553#(< ~waterLevel~0 2)} is VALID [2020-07-28 19:07:35,309 INFO L280 TraceCheckUtils]: 106: Hoare triple {30553#(< ~waterLevel~0 2)} __utac_acc__Specification5_spec__3_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret72 && __utac_acc__Specification5_spec__3_#t~ret72 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret72;havoc __utac_acc__Specification5_spec__3_#t~ret72; {30553#(< ~waterLevel~0 2)} is VALID [2020-07-28 19:07:35,309 INFO L280 TraceCheckUtils]: 107: Hoare triple {30553#(< ~waterLevel~0 2)} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {30553#(< ~waterLevel~0 2)} is VALID [2020-07-28 19:07:35,310 INFO L280 TraceCheckUtils]: 108: Hoare triple {30553#(< ~waterLevel~0 2)} __utac_acc__Specification5_spec__3_#t~ret73 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret73 && __utac_acc__Specification5_spec__3_#t~ret73 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret73;havoc __utac_acc__Specification5_spec__3_#t~ret73; {30553#(< ~waterLevel~0 2)} is VALID [2020-07-28 19:07:35,310 INFO L280 TraceCheckUtils]: 109: Hoare triple {30553#(< ~waterLevel~0 2)} assume !(0 != __utac_acc__Specification5_spec__3_~tmp___0~3); {30553#(< ~waterLevel~0 2)} is VALID [2020-07-28 19:07:35,310 INFO L280 TraceCheckUtils]: 110: Hoare triple {30553#(< ~waterLevel~0 2)} assume !false; {30553#(< ~waterLevel~0 2)} is VALID [2020-07-28 19:07:35,311 INFO L280 TraceCheckUtils]: 111: Hoare triple {30553#(< ~waterLevel~0 2)} assume test_~splverifierCounter~0 < 4; {30553#(< ~waterLevel~0 2)} is VALID [2020-07-28 19:07:35,311 INFO L280 TraceCheckUtils]: 112: Hoare triple {30553#(< ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet10 && test_#t~nondet10 <= 2147483647;test_~tmp~0 := test_#t~nondet10;havoc test_#t~nondet10; {30553#(< ~waterLevel~0 2)} is VALID [2020-07-28 19:07:35,312 INFO L280 TraceCheckUtils]: 113: Hoare triple {30553#(< ~waterLevel~0 2)} assume 0 != test_~tmp~0; {30553#(< ~waterLevel~0 2)} is VALID [2020-07-28 19:07:35,312 INFO L280 TraceCheckUtils]: 114: Hoare triple {30553#(< ~waterLevel~0 2)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {30599#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:35,313 INFO L280 TraceCheckUtils]: 115: Hoare triple {30599#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp___0~0 := test_#t~nondet11;havoc test_#t~nondet11; {30599#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:35,317 INFO L280 TraceCheckUtils]: 116: Hoare triple {30599#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___0~0); {30599#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:35,318 INFO L280 TraceCheckUtils]: 117: Hoare triple {30599#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___2~0 := test_#t~nondet12;havoc test_#t~nondet12; {30599#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:35,318 INFO L280 TraceCheckUtils]: 118: Hoare triple {30599#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0; {30599#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:35,319 INFO L280 TraceCheckUtils]: 119: Hoare triple {30599#(<= ~waterLevel~0 2)} havoc __utac_acc__Specification5_spec__2_#t~ret71;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {30599#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:35,320 INFO L280 TraceCheckUtils]: 120: Hoare triple {30599#(<= ~waterLevel~0 2)} __utac_acc__Specification5_spec__2_#t~ret71 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret71 && __utac_acc__Specification5_spec__2_#t~ret71 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret71;havoc __utac_acc__Specification5_spec__2_#t~ret71; {30599#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:35,320 INFO L280 TraceCheckUtils]: 121: Hoare triple {30599#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0); {30599#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:35,321 INFO L280 TraceCheckUtils]: 122: Hoare triple {30599#(<= ~waterLevel~0 2)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {30599#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:35,321 INFO L280 TraceCheckUtils]: 123: Hoare triple {30599#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret14, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {30599#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:35,322 INFO L280 TraceCheckUtils]: 124: Hoare triple {30599#(<= ~waterLevel~0 2)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret34, isHighWaterLevel_~retValue_acc~6, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~6;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {30599#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:07:35,322 INFO L280 TraceCheckUtils]: 125: Hoare triple {30599#(<= ~waterLevel~0 2)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:07:35,323 INFO L280 TraceCheckUtils]: 126: Hoare triple {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} isHighWaterLevel_#t~ret34 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret34 && isHighWaterLevel_#t~ret34 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret34;havoc isHighWaterLevel_#t~ret34; {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:07:35,324 INFO L280 TraceCheckUtils]: 127: Hoare triple {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:07:35,325 INFO L280 TraceCheckUtils]: 128: Hoare triple {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} isHighWaterLevel_~retValue_acc~6 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~6; {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:07:35,325 INFO L280 TraceCheckUtils]: 129: Hoare triple {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} processEnvironment__wrappee__highWaterSensor_#t~ret14 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret14 && processEnvironment__wrappee__highWaterSensor_#t~ret14 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~1 := processEnvironment__wrappee__highWaterSensor_#t~ret14;havoc processEnvironment__wrappee__highWaterSensor_#t~ret14; {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:07:35,326 INFO L280 TraceCheckUtils]: 130: Hoare triple {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc activatePump_#t~ret16, activatePump_~tmp~3;havoc activatePump_~tmp~3;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret17, isMethaneAlarm_~retValue_acc~4;havoc isMethaneAlarm_~retValue_acc~4;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:07:35,327 INFO L280 TraceCheckUtils]: 131: Hoare triple {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} isMethaneAlarm_#t~ret17 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret17 && isMethaneAlarm_#t~ret17 <= 2147483647;isMethaneAlarm_~retValue_acc~4 := isMethaneAlarm_#t~ret17;havoc isMethaneAlarm_#t~ret17;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~4; {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:07:35,327 INFO L280 TraceCheckUtils]: 132: Hoare triple {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} activatePump_#t~ret16 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret16 && activatePump_#t~ret16 <= 2147483647;activatePump_~tmp~3 := activatePump_#t~ret16;havoc activatePump_#t~ret16; {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:07:35,328 INFO L280 TraceCheckUtils]: 133: Hoare triple {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(0 != activatePump_~tmp~3);~pumpRunning~0 := 1; {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:07:35,329 INFO L280 TraceCheckUtils]: 134: Hoare triple {30249#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} havoc __utac_acc__Specification5_spec__3_#t~ret72, __utac_acc__Specification5_spec__3_#t~ret73, __utac_acc__Specification5_spec__3_~tmp~9, __utac_acc__Specification5_spec__3_~tmp___0~3;havoc __utac_acc__Specification5_spec__3_~tmp~9;havoc __utac_acc__Specification5_spec__3_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {30660#(and (<= |ULTIMATE.start_getWaterLevel_#res| 2) (<= 2 |ULTIMATE.start_getWaterLevel_#res|))} is VALID [2020-07-28 19:07:35,329 INFO L280 TraceCheckUtils]: 135: Hoare triple {30660#(and (<= |ULTIMATE.start_getWaterLevel_#res| 2) (<= 2 |ULTIMATE.start_getWaterLevel_#res|))} __utac_acc__Specification5_spec__3_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret72 && __utac_acc__Specification5_spec__3_#t~ret72 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~9 := __utac_acc__Specification5_spec__3_#t~ret72;havoc __utac_acc__Specification5_spec__3_#t~ret72; {30664#(and (<= 2 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9) (<= ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9 2))} is VALID [2020-07-28 19:07:35,330 INFO L280 TraceCheckUtils]: 136: Hoare triple {30664#(and (<= 2 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9) (<= ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9 2))} assume 2 != __utac_acc__Specification5_spec__3_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {30247#false} is VALID [2020-07-28 19:07:35,330 INFO L280 TraceCheckUtils]: 137: Hoare triple {30247#false} __utac_acc__Specification5_spec__3_#t~ret73 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret73 && __utac_acc__Specification5_spec__3_#t~ret73 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~3 := __utac_acc__Specification5_spec__3_#t~ret73;havoc __utac_acc__Specification5_spec__3_#t~ret73; {30247#false} is VALID [2020-07-28 19:07:35,331 INFO L280 TraceCheckUtils]: 138: Hoare triple {30247#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~3; {30247#false} is VALID [2020-07-28 19:07:35,331 INFO L280 TraceCheckUtils]: 139: Hoare triple {30247#false} assume 0 == ~switchedOnBeforeTS~0; {30247#false} is VALID [2020-07-28 19:07:35,331 INFO L280 TraceCheckUtils]: 140: Hoare triple {30247#false} assume !false; {30247#false} is VALID [2020-07-28 19:07:35,344 INFO L134 CoverageAnalysis]: Checked inductivity of 206 backedges. 100 proven. 8 refuted. 0 times theorem prover too weak. 98 trivial. 0 not checked. [2020-07-28 19:07:35,347 INFO L220 FreeRefinementEngine]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2020-07-28 19:07:35,347 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 7] total 11 [2020-07-28 19:07:35,347 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1499559477] [2020-07-28 19:07:35,348 INFO L78 Accepts]: Start accepts. Automaton has 11 states. Word has length 141 [2020-07-28 19:07:35,349 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:07:35,349 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 11 states. [2020-07-28 19:07:35,565 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 186 edges. 186 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:07:35,565 INFO L459 AbstractCegarLoop]: Interpolant automaton has 11 states [2020-07-28 19:07:35,566 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:07:35,566 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2020-07-28 19:07:35,566 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=25, Invalid=85, Unknown=0, NotChecked=0, Total=110 [2020-07-28 19:07:35,566 INFO L87 Difference]: Start difference. First operand 317 states and 380 transitions. Second operand 11 states. [2020-07-28 19:07:38,411 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:07:38,411 INFO L93 Difference]: Finished difference Result 445 states and 535 transitions. [2020-07-28 19:07:38,411 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2020-07-28 19:07:38,411 INFO L78 Accepts]: Start accepts. Automaton has 11 states. Word has length 141 [2020-07-28 19:07:38,411 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:07:38,411 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 11 states. [2020-07-28 19:07:38,413 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15 states to 15 states and 289 transitions. [2020-07-28 19:07:38,413 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 11 states. [2020-07-28 19:07:38,414 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15 states to 15 states and 289 transitions. [2020-07-28 19:07:38,414 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 15 states and 289 transitions. [2020-07-28 19:07:38,806 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 289 edges. 289 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:07:38,806 INFO L225 Difference]: With dead ends: 445 [2020-07-28 19:07:38,806 INFO L226 Difference]: Without dead ends: 0 [2020-07-28 19:07:38,808 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 162 GetRequests, 142 SyntacticMatches, 1 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 44 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=94, Invalid=326, Unknown=0, NotChecked=0, Total=420 [2020-07-28 19:07:38,808 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2020-07-28 19:07:38,808 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2020-07-28 19:07:38,808 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:07:38,809 INFO L82 GeneralOperation]: Start isEquivalent. First operand 0 states. Second operand 0 states. [2020-07-28 19:07:38,809 INFO L74 IsIncluded]: Start isIncluded. First operand 0 states. Second operand 0 states. [2020-07-28 19:07:38,809 INFO L87 Difference]: Start difference. First operand 0 states. Second operand 0 states. [2020-07-28 19:07:38,809 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:07:38,809 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2020-07-28 19:07:38,809 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2020-07-28 19:07:38,825 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:07:38,825 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:07:38,826 INFO L74 IsIncluded]: Start isIncluded. First operand 0 states. Second operand 0 states. [2020-07-28 19:07:38,826 INFO L87 Difference]: Start difference. First operand 0 states. Second operand 0 states. [2020-07-28 19:07:38,826 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:07:38,826 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2020-07-28 19:07:38,826 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2020-07-28 19:07:38,826 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:07:38,826 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:07:38,826 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:07:38,826 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:07:38,827 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 0 states. [2020-07-28 19:07:38,827 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2020-07-28 19:07:38,827 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 141 [2020-07-28 19:07:38,827 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:07:38,827 INFO L479 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2020-07-28 19:07:38,828 INFO L480 AbstractCegarLoop]: Interpolant automaton has 11 states. [2020-07-28 19:07:38,828 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2020-07-28 19:07:38,828 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:07:39,028 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable16,5 z3 -smt2 -in SMTLIB2_COMPLIANT=true [2020-07-28 19:07:39,032 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2020-07-28 19:07:39,506 WARN L193 SmtUtils]: Spent 356.00 ms on a formula simplification. DAG size of input: 237 DAG size of output: 220 [2020-07-28 19:07:39,959 WARN L193 SmtUtils]: Spent 343.00 ms on a formula simplification. DAG size of input: 270 DAG size of output: 250 [2020-07-28 19:07:40,416 WARN L193 SmtUtils]: Spent 257.00 ms on a formula simplification. DAG size of input: 255 DAG size of output: 240 [2020-07-28 19:07:40,563 WARN L193 SmtUtils]: Spent 105.00 ms on a formula simplification. DAG size of input: 156 DAG size of output: 150 [2020-07-28 19:07:40,920 WARN L193 SmtUtils]: Spent 346.00 ms on a formula simplification. DAG size of input: 281 DAG size of output: 253 [2020-07-28 19:07:41,103 WARN L193 SmtUtils]: Spent 173.00 ms on a formula simplification. DAG size of input: 162 DAG size of output: 137 [2020-07-28 19:07:41,348 WARN L193 SmtUtils]: Spent 234.00 ms on a formula simplification. DAG size of input: 264 DAG size of output: 246 [2020-07-28 19:07:41,554 WARN L193 SmtUtils]: Spent 197.00 ms on a formula simplification. DAG size of input: 245 DAG size of output: 222 [2020-07-28 19:07:41,842 WARN L193 SmtUtils]: Spent 172.00 ms on a formula simplification. DAG size of input: 255 DAG size of output: 240 [2020-07-28 19:07:42,001 WARN L193 SmtUtils]: Spent 149.00 ms on a formula simplification. DAG size of input: 65 DAG size of output: 19 [2020-07-28 19:07:42,261 WARN L193 SmtUtils]: Spent 248.00 ms on a formula simplification. DAG size of input: 75 DAG size of output: 33 [2020-07-28 19:07:43,686 WARN L193 SmtUtils]: Spent 1.37 s on a formula simplification. DAG size of input: 217 DAG size of output: 50 [2020-07-28 19:07:44,201 WARN L193 SmtUtils]: Spent 479.00 ms on a formula simplification. DAG size of input: 110 DAG size of output: 30 [2020-07-28 19:07:46,035 WARN L193 SmtUtils]: Spent 1.83 s on a formula simplification. DAG size of input: 247 DAG size of output: 63 [2020-07-28 19:07:46,693 WARN L193 SmtUtils]: Spent 643.00 ms on a formula simplification. DAG size of input: 127 DAG size of output: 53 [2020-07-28 19:07:47,025 WARN L193 SmtUtils]: Spent 310.00 ms on a formula simplification. DAG size of input: 88 DAG size of output: 26 [2020-07-28 19:07:47,343 WARN L193 SmtUtils]: Spent 294.00 ms on a formula simplification. DAG size of input: 85 DAG size of output: 41 [2020-07-28 19:07:49,066 WARN L193 SmtUtils]: Spent 1.69 s on a formula simplification. DAG size of input: 236 DAG size of output: 65 [2020-07-28 19:07:49,220 WARN L193 SmtUtils]: Spent 149.00 ms on a formula simplification. DAG size of input: 65 DAG size of output: 19 [2020-07-28 19:07:49,893 WARN L193 SmtUtils]: Spent 660.00 ms on a formula simplification. DAG size of input: 149 DAG size of output: 52 [2020-07-28 19:07:51,863 WARN L193 SmtUtils]: Spent 1.95 s on a formula simplification. DAG size of input: 248 DAG size of output: 63 [2020-07-28 19:07:52,597 WARN L193 SmtUtils]: Spent 717.00 ms on a formula simplification. DAG size of input: 137 DAG size of output: 25 [2020-07-28 19:07:54,460 WARN L193 SmtUtils]: Spent 1.85 s on a formula simplification. DAG size of input: 244 DAG size of output: 61 [2020-07-28 19:07:56,034 WARN L193 SmtUtils]: Spent 1.56 s on a formula simplification. DAG size of input: 219 DAG size of output: 64 [2020-07-28 19:07:57,098 WARN L193 SmtUtils]: Spent 1.05 s on a formula simplification. DAG size of input: 178 DAG size of output: 61 [2020-07-28 19:07:58,828 WARN L193 SmtUtils]: Spent 1.72 s on a formula simplification. DAG size of input: 236 DAG size of output: 65 [2020-07-28 19:07:58,841 INFO L268 CegarLoopResult]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 830) no Hoare annotation was computed. [2020-07-28 19:07:58,842 INFO L264 CegarLoopResult]: At program point L366(lines 361 369) the Hoare annotation is: (let ((.cse11 (= 0 ~systemActive~0))) (let ((.cse12 (= 0 |ULTIMATE.start_isPumpRunning_#res|)) (.cse13 (= 0 ~pumpRunning~0)) (.cse15 (= 2 ~waterLevel~0)) (.cse2 (= |ULTIMATE.start_getWaterLevel_#res| ~waterLevel~0)) (.cse0 (= 1 ULTIMATE.start_main_~tmp~10)) (.cse1 (not (= 0 ULTIMATE.start_isLowWaterLevel_~tmp~5))) (.cse3 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse4 (not (= 0 |ULTIMATE.start_isLowWaterSensorDry_#res|))) (.cse5 (= 1 |ULTIMATE.start_valid_product_#res|)) (.cse6 (not .cse11)) (.cse7 (<= ~waterLevel~0 2)) (.cse8 (or (<= 2 ~waterLevel~0) (not (= 2 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9)))) (.cse9 (= 1 |ULTIMATE.start_isPumpRunning_#res|)) (.cse14 (= 1 ~waterLevel~0)) (.cse10 (= 1 ~pumpRunning~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 (<= 0 ~waterLevel~0) .cse7 .cse8 .cse9 .cse10) (and .cse0 .cse3 .cse5 .cse11 .cse7 .cse12 .cse8 .cse13) (and .cse0 .cse3 .cse5 .cse12 .cse13 .cse14) (and .cse0 .cse3 .cse5 .cse6 .cse9 .cse15 .cse10) (and .cse0 .cse3 .cse5 .cse6 .cse12 .cse13 .cse15) (and (= 0 ULTIMATE.start_processEnvironment_~tmp~2) .cse0 .cse2 (<= ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9 1) .cse3 .cse5 .cse6 .cse9 (<= 1 ~switchedOnBeforeTS~0) .cse14 (= 1 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp___0~3) .cse10) (and .cse0 .cse1 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse14 .cse10)))) [2020-07-28 19:07:58,842 INFO L264 CegarLoopResult]: At program point L366-1(lines 361 369) the Hoare annotation is: (let ((.cse11 (= 0 ~systemActive~0))) (let ((.cse0 (= 0 ULTIMATE.start_processEnvironment_~tmp~2)) (.cse8 (<= 1 ~switchedOnBeforeTS~0)) (.cse7 (= 1 |ULTIMATE.start_isPumpRunning_#res|)) (.cse10 (= 1 ~pumpRunning~0)) (.cse1 (= 1 ULTIMATE.start_main_~tmp~10)) (.cse4 (= |ULTIMATE.start_getWaterLevel_#res| ~waterLevel~0)) (.cse2 (<= ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9 1)) (.cse3 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse5 (= 1 |ULTIMATE.start_valid_product_#res|)) (.cse6 (not .cse11)) (.cse12 (= 0 |ULTIMATE.start_isPumpRunning_#res|)) (.cse13 (= 0 ~pumpRunning~0)) (.cse9 (= 1 ~waterLevel~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) (and .cse0 .cse1 .cse5 .cse6 .cse8 (<= |ULTIMATE.start_getWaterLevel_#res| 1) (not (= 0 ULTIMATE.start_isLowWaterLevel_~tmp~5)) .cse4 .cse2 .cse3 (not (= 0 |ULTIMATE.start_isLowWaterSensorDry_#res|)) (<= 0 ~waterLevel~0) .cse7 .cse10) (and .cse1 .cse3 .cse4 .cse5 .cse11 (<= ~waterLevel~0 2) .cse12 .cse13 (not (= 2 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9))) (and .cse1 .cse4 .cse2 .cse3 .cse5 .cse6 .cse12 .cse13 .cse9)))) [2020-07-28 19:07:58,842 INFO L264 CegarLoopResult]: At program point L366-2(lines 361 369) the Hoare annotation is: false [2020-07-28 19:07:58,842 INFO L264 CegarLoopResult]: At program point L366-3(lines 361 369) the Hoare annotation is: false [2020-07-28 19:07:58,842 INFO L264 CegarLoopResult]: At program point L366-4(lines 361 369) the Hoare annotation is: false [2020-07-28 19:07:58,842 INFO L264 CegarLoopResult]: At program point L366-5(lines 361 369) the Hoare annotation is: false [2020-07-28 19:07:58,842 INFO L268 CegarLoopResult]: For program point L862(lines 862 879) no Hoare annotation was computed. [2020-07-28 19:07:58,843 INFO L264 CegarLoopResult]: At program point L862-1(lines 1 1017) the Hoare annotation is: (let ((.cse4 (= 0 ~systemActive~0))) (let ((.cse6 (= 0 ~pumpRunning~0)) (.cse14 (= 2 ~waterLevel~0)) (.cse5 (= 2 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9)) (.cse15 (= 2 |ULTIMATE.start_getWaterLevel_#res|)) (.cse9 (= 0 ULTIMATE.start_processEnvironment_~tmp~2)) (.cse0 (= 1 ULTIMATE.start_main_~tmp~10)) (.cse1 (= |ULTIMATE.start_getWaterLevel_#res| ~waterLevel~0)) (.cse10 (<= ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9 1)) (.cse2 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse3 (= 1 |ULTIMATE.start_valid_product_#res|)) (.cse7 (not .cse4)) (.cse11 (= 1 |ULTIMATE.start_isPumpRunning_#res|)) (.cse8 (= 1 ~waterLevel~0)) (.cse12 (= 1 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp___0~3)) (.cse13 (= 1 ~pumpRunning~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= ~waterLevel~0 2) (= 0 |ULTIMATE.start_isPumpRunning_#res|) (or (<= 2 ~waterLevel~0) (not .cse5)) .cse6) (and .cse0 .cse2 .cse3 .cse7 .cse6 .cse8) (and .cse9 .cse0 .cse3 .cse7 (not (= 0 ULTIMATE.start_isLowWaterLevel_~tmp~5)) .cse1 .cse2 .cse10 (not (= 0 |ULTIMATE.start_isLowWaterSensorDry_#res|)) (<= 0 ~waterLevel~0) .cse11 (<= ~waterLevel~0 0) .cse12 .cse13) (and .cse0 .cse2 .cse3 .cse7 .cse14 .cse5 .cse15 .cse13) (and .cse0 .cse2 .cse3 .cse7 .cse6 .cse14 .cse5 .cse15) (and .cse9 .cse0 .cse1 .cse10 .cse2 .cse3 .cse7 .cse11 (<= 1 ~switchedOnBeforeTS~0) .cse8 .cse12 .cse13)))) [2020-07-28 19:07:58,843 INFO L264 CegarLoopResult]: At program point L895-2(lines 895 909) the Hoare annotation is: false [2020-07-28 19:07:58,843 INFO L268 CegarLoopResult]: For program point L862-2(lines 862 879) no Hoare annotation was computed. [2020-07-28 19:07:58,843 INFO L264 CegarLoopResult]: At program point L862-3(lines 1 1017) the Hoare annotation is: false [2020-07-28 19:07:58,843 INFO L268 CegarLoopResult]: For program point L862-4(lines 862 879) no Hoare annotation was computed. [2020-07-28 19:07:58,844 INFO L264 CegarLoopResult]: At program point L862-5(lines 1 1017) the Hoare annotation is: false [2020-07-28 19:07:58,844 INFO L264 CegarLoopResult]: At program point L136(lines 127 140) the Hoare annotation is: false [2020-07-28 19:07:58,844 INFO L264 CegarLoopResult]: At program point L136-1(lines 127 140) the Hoare annotation is: (let ((.cse0 (= 1 ULTIMATE.start_main_~tmp~10)) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse2 (= 1 |ULTIMATE.start_valid_product_#res|)) (.cse3 (not (= 0 ~systemActive~0))) (.cse4 (= 0 ~pumpRunning~0))) (or (and .cse0 .cse1 .cse2 .cse3 (= 2 ~waterLevel~0) .cse4) (and .cse0 .cse1 .cse2 .cse3 .cse4 (= 1 ~waterLevel~0) (not (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|))))) [2020-07-28 19:07:58,844 INFO L264 CegarLoopResult]: At program point L136-2(lines 127 140) the Hoare annotation is: false [2020-07-28 19:07:58,845 INFO L264 CegarLoopResult]: At program point L136-3(lines 127 140) the Hoare annotation is: false [2020-07-28 19:07:58,845 INFO L264 CegarLoopResult]: At program point L136-4(lines 127 140) the Hoare annotation is: false [2020-07-28 19:07:58,845 INFO L264 CegarLoopResult]: At program point L136-5(lines 127 140) the Hoare annotation is: false [2020-07-28 19:07:58,845 INFO L268 CegarLoopResult]: For program point L896(line 896) no Hoare annotation was computed. [2020-07-28 19:07:58,845 INFO L268 CegarLoopResult]: For program point L830(line 830) no Hoare annotation was computed. [2020-07-28 19:07:58,845 INFO L268 CegarLoopResult]: For program point L830-1(line 830) no Hoare annotation was computed. [2020-07-28 19:07:58,846 INFO L268 CegarLoopResult]: For program point L830-2(line 830) no Hoare annotation was computed. [2020-07-28 19:07:58,846 INFO L268 CegarLoopResult]: For program point L434(lines 434 438) no Hoare annotation was computed. [2020-07-28 19:07:58,846 INFO L268 CegarLoopResult]: For program point L434-2(lines 434 438) no Hoare annotation was computed. [2020-07-28 19:07:58,846 INFO L268 CegarLoopResult]: For program point L434-3(lines 434 438) no Hoare annotation was computed. [2020-07-28 19:07:58,846 INFO L268 CegarLoopResult]: For program point L269(lines 269 286) no Hoare annotation was computed. [2020-07-28 19:07:58,847 INFO L268 CegarLoopResult]: For program point L434-5(lines 434 438) no Hoare annotation was computed. [2020-07-28 19:07:58,847 INFO L268 CegarLoopResult]: For program point L269-1(lines 269 286) no Hoare annotation was computed. [2020-07-28 19:07:58,847 INFO L268 CegarLoopResult]: For program point L434-6(lines 434 438) no Hoare annotation was computed. [2020-07-28 19:07:58,847 INFO L268 CegarLoopResult]: For program point L269-2(lines 269 286) no Hoare annotation was computed. [2020-07-28 19:07:58,847 INFO L268 CegarLoopResult]: For program point L269-3(lines 269 286) no Hoare annotation was computed. [2020-07-28 19:07:58,847 INFO L268 CegarLoopResult]: For program point L434-8(lines 434 438) no Hoare annotation was computed. [2020-07-28 19:07:58,848 INFO L268 CegarLoopResult]: For program point L269-4(lines 269 286) no Hoare annotation was computed. [2020-07-28 19:07:58,848 INFO L268 CegarLoopResult]: For program point L269-5(lines 269 286) no Hoare annotation was computed. [2020-07-28 19:07:58,848 INFO L264 CegarLoopResult]: At program point L237(lines 233 255) the Hoare annotation is: (let ((.cse8 (= 0 ~systemActive~0))) (let ((.cse4 (= 1 |ULTIMATE.start_isPumpRunning_#res|)) (.cse5 (<= 1 ~switchedOnBeforeTS~0)) (.cse6 (= 1 ~pumpRunning~0)) (.cse9 (= 0 |ULTIMATE.start_isPumpRunning_#res|)) (.cse0 (= 1 ULTIMATE.start_main_~tmp~10)) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse3 (not .cse8)) (.cse2 (= 1 |ULTIMATE.start_valid_product_#res|)) (.cse10 (= 0 ~pumpRunning~0)) (.cse7 (= 1 ~waterLevel~0))) (or (and .cse0 .cse1 .cse2 .cse3 (<= 0 ~waterLevel~0) .cse4 (<= ~waterLevel~0 0) .cse5 .cse6) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse7 .cse6) (and .cse0 .cse1 .cse2 .cse8 (<= ~waterLevel~0 2) .cse9 (or (<= 2 ~waterLevel~0) (not (= 2 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9))) .cse10) (and .cse0 .cse1 .cse2 .cse9 .cse10 .cse7) (and .cse0 .cse1 .cse3 .cse2 (= 2 ~waterLevel~0) .cse10) (and .cse0 .cse1 .cse3 .cse2 .cse10 .cse7)))) [2020-07-28 19:07:58,848 INFO L264 CegarLoopResult]: At program point L237-1(lines 233 255) the Hoare annotation is: false [2020-07-28 19:07:58,848 INFO L264 CegarLoopResult]: At program point L237-2(lines 233 255) the Hoare annotation is: false [2020-07-28 19:07:58,849 INFO L268 CegarLoopResult]: For program point L899(lines 899 903) no Hoare annotation was computed. [2020-07-28 19:07:58,849 INFO L268 CegarLoopResult]: For program point L866(lines 866 876) no Hoare annotation was computed. [2020-07-28 19:07:58,849 INFO L268 CegarLoopResult]: For program point L899-1(lines 899 903) no Hoare annotation was computed. [2020-07-28 19:07:58,849 INFO L268 CegarLoopResult]: For program point L866-2(lines 866 876) no Hoare annotation was computed. [2020-07-28 19:07:58,849 INFO L268 CegarLoopResult]: For program point L866-4(lines 866 876) no Hoare annotation was computed. [2020-07-28 19:07:58,850 INFO L268 CegarLoopResult]: For program point L867(lines 867 873) no Hoare annotation was computed. [2020-07-28 19:07:58,850 INFO L268 CegarLoopResult]: For program point L867-2(lines 867 873) no Hoare annotation was computed. [2020-07-28 19:07:58,850 INFO L268 CegarLoopResult]: For program point L867-4(lines 867 873) no Hoare annotation was computed. [2020-07-28 19:07:58,850 INFO L268 CegarLoopResult]: For program point L273(lines 273 281) no Hoare annotation was computed. [2020-07-28 19:07:58,850 INFO L268 CegarLoopResult]: For program point L273-1(lines 273 281) no Hoare annotation was computed. [2020-07-28 19:07:58,851 INFO L268 CegarLoopResult]: For program point L273-2(lines 273 281) no Hoare annotation was computed. [2020-07-28 19:07:58,851 INFO L268 CegarLoopResult]: For program point L174(lines 174 180) no Hoare annotation was computed. [2020-07-28 19:07:58,851 INFO L268 CegarLoopResult]: For program point L273-3(lines 273 281) no Hoare annotation was computed. [2020-07-28 19:07:58,851 INFO L264 CegarLoopResult]: At program point L174-1(lines 174 180) the Hoare annotation is: (let ((.cse13 (= 0 ~systemActive~0))) (let ((.cse7 (not (= 0 ULTIMATE.start_isLowWaterLevel_~tmp~5))) (.cse10 (not (= 0 |ULTIMATE.start_isLowWaterSensorDry_#res|))) (.cse14 (or (<= 2 ~waterLevel~0) (not (= 2 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9)))) (.cse15 (= 0 ~pumpRunning~0)) (.cse4 (= 2 ~waterLevel~0)) (.cse6 (= 0 ULTIMATE.start_processEnvironment_~tmp~2)) (.cse0 (= 1 ULTIMATE.start_main_~tmp~10)) (.cse8 (= |ULTIMATE.start_getWaterLevel_#res| ~waterLevel~0)) (.cse9 (<= ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9 1)) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse2 (= 1 |ULTIMATE.start_valid_product_#res|)) (.cse3 (not .cse13)) (.cse11 (= 1 |ULTIMATE.start_isPumpRunning_#res|)) (.cse16 (= 1 ~waterLevel~0)) (.cse12 (= 1 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp___0~3)) (.cse5 (= 1 ~pumpRunning~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse0 .cse2 .cse3 (<= |ULTIMATE.start_getWaterLevel_#res| 1) .cse7 .cse8 .cse1 .cse9 .cse10 (<= 0 ~waterLevel~0) .cse11 .cse12 .cse5) (and .cse0 .cse1 .cse2 .cse13 (<= ~waterLevel~0 2) .cse14 (= 0 |ULTIMATE.start_isPumpRunning_#res|) .cse15) (and .cse0 .cse1 .cse2 .cse3 .cse15 .cse16) (and .cse0 .cse7 .cse1 .cse10 .cse2 .cse3 .cse14 .cse16 .cse5) (and .cse0 .cse1 .cse2 .cse3 .cse15 .cse4) (and .cse6 .cse0 .cse8 .cse9 .cse1 .cse2 .cse3 .cse11 (<= 1 ~switchedOnBeforeTS~0) .cse16 .cse12 .cse5)))) [2020-07-28 19:07:58,852 INFO L268 CegarLoopResult]: For program point L273-4(lines 273 281) no Hoare annotation was computed. [2020-07-28 19:07:58,852 INFO L268 CegarLoopResult]: For program point L273-5(lines 273 281) no Hoare annotation was computed. [2020-07-28 19:07:58,852 INFO L268 CegarLoopResult]: For program point ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION(line 830) no Hoare annotation was computed. [2020-07-28 19:07:58,852 INFO L264 CegarLoopResult]: At program point L440(lines 425 443) the Hoare annotation is: (let ((.cse0 (= 1 ULTIMATE.start_main_~tmp~10)) (.cse2 (= 1 |ULTIMATE.start_valid_product_#res|)) (.cse3 (not (= 0 ~systemActive~0))) (.cse5 (<= 1 ~switchedOnBeforeTS~0)) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse4 (= 1 |ULTIMATE.start_isPumpRunning_#res|)) (.cse6 (= 1 ~pumpRunning~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (= 1 ~waterLevel~0) .cse6) (and .cse0 (= 0 ULTIMATE.start_isLowWaterLevel_~tmp___0~2) .cse2 .cse3 (= 0 |ULTIMATE.start_isLowWaterLevel_#res|) .cse5 (not (= 0 ULTIMATE.start_isLowWaterLevel_~tmp~5)) .cse1 (not (= 0 |ULTIMATE.start_isLowWaterSensorDry_#res|)) (<= 0 ~waterLevel~0) .cse4 (<= ~waterLevel~0 0) .cse6))) [2020-07-28 19:07:58,853 INFO L264 CegarLoopResult]: At program point L440-1(lines 425 443) the Hoare annotation is: false [2020-07-28 19:07:58,853 INFO L264 CegarLoopResult]: At program point L440-2(lines 425 443) the Hoare annotation is: false [2020-07-28 19:07:58,853 INFO L268 CegarLoopResult]: For program point L78(lines 78 82) no Hoare annotation was computed. [2020-07-28 19:07:58,853 INFO L268 CegarLoopResult]: For program point L970(lines 970 977) no Hoare annotation was computed. [2020-07-28 19:07:58,853 INFO L271 CegarLoopResult]: At program point L970-1(lines 970 977) the Hoare annotation is: true [2020-07-28 19:07:58,854 INFO L264 CegarLoopResult]: At program point L244(lines 244 250) the Hoare annotation is: (let ((.cse6 (= 0 ~systemActive~0))) (let ((.cse4 (= 2 ~waterLevel~0)) (.cse7 (= 0 |ULTIMATE.start_isPumpRunning_#res|)) (.cse8 (= 0 ~pumpRunning~0)) (.cse10 (= 0 ULTIMATE.start_processEnvironment_~tmp~2)) (.cse0 (= 1 ULTIMATE.start_main_~tmp~10)) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse2 (= 1 |ULTIMATE.start_valid_product_#res|)) (.cse3 (not .cse6)) (.cse11 (= 1 |ULTIMATE.start_isPumpRunning_#res|)) (.cse12 (<= 1 ~switchedOnBeforeTS~0)) (.cse9 (= 1 ~waterLevel~0)) (.cse5 (= 1 ~pumpRunning~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 (<= ~waterLevel~0 2) .cse7 (or (<= 2 ~waterLevel~0) (not (= 2 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9))) .cse8) (and .cse0 .cse1 .cse3 .cse2 .cse4 .cse8) (and .cse0 .cse1 .cse2 .cse7 .cse8 .cse9) (and .cse10 .cse0 (not (= 0 ULTIMATE.start_isLowWaterLevel_~tmp~5)) .cse1 (not (= 0 |ULTIMATE.start_isLowWaterSensorDry_#res|)) .cse2 .cse3 (<= 0 ~waterLevel~0) .cse11 .cse12 (<= ~waterLevel~0 1) .cse5) (and .cse0 .cse1 .cse3 .cse2 .cse8 .cse9) (and .cse10 .cse0 .cse1 .cse2 .cse3 .cse11 .cse12 .cse9 .cse5)))) [2020-07-28 19:07:58,854 INFO L264 CegarLoopResult]: At program point L244-1(lines 244 250) the Hoare annotation is: false [2020-07-28 19:07:58,854 INFO L264 CegarLoopResult]: At program point L244-2(lines 244 250) the Hoare annotation is: false [2020-07-28 19:07:58,854 INFO L264 CegarLoopResult]: At program point L212(lines 163 213) the Hoare annotation is: false [2020-07-28 19:07:58,855 INFO L264 CegarLoopResult]: At program point L146(lines 141 149) the Hoare annotation is: (let ((.cse0 (= 1 ULTIMATE.start_main_~tmp~10)) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse2 (= 1 |ULTIMATE.start_valid_product_#res|)) (.cse3 (not (= 0 ~systemActive~0))) (.cse4 (= 1 |ULTIMATE.start_isPumpRunning_#res|)) (.cse5 (<= 1 ~switchedOnBeforeTS~0)) (.cse6 (= 1 ~pumpRunning~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (= 1 ~waterLevel~0) .cse6) (and .cse0 .cse1 (not (= 0 |ULTIMATE.start_isLowWaterSensorDry_#res|)) .cse2 .cse3 (<= 0 ~waterLevel~0) .cse4 (<= ~waterLevel~0 0) .cse5 .cse6))) [2020-07-28 19:07:58,855 INFO L264 CegarLoopResult]: At program point L146-1(lines 141 149) the Hoare annotation is: false [2020-07-28 19:07:58,855 INFO L264 CegarLoopResult]: At program point L146-2(lines 141 149) the Hoare annotation is: false [2020-07-28 19:07:58,855 INFO L264 CegarLoopResult]: At program point L1006(lines 1 1017) the Hoare annotation is: (and (= 0 ~pumpRunning~0) (= 1 ~waterLevel~0) (= 1 ~systemActive~0)) [2020-07-28 19:07:58,856 INFO L264 CegarLoopResult]: At program point L841(lines 836 843) the Hoare annotation is: (and (= 0 ~pumpRunning~0) (= |ULTIMATE.start_valid_product_#res| ~systemActive~0) (= 1 ~waterLevel~0) (= ULTIMATE.start_main_~tmp~10 ~systemActive~0) (= 1 ~systemActive~0)) [2020-07-28 19:07:58,856 INFO L264 CegarLoopResult]: At program point L943(lines 939 945) the Hoare annotation is: (and (= 0 ~pumpRunning~0) (= |ULTIMATE.start_valid_product_#res| ~systemActive~0) (= 1 ~waterLevel~0) (= ULTIMATE.start_main_~tmp~10 ~systemActive~0) (= 1 ~systemActive~0)) [2020-07-28 19:07:58,856 INFO L268 CegarLoopResult]: For program point L448(lines 448 454) no Hoare annotation was computed. [2020-07-28 19:07:58,856 INFO L264 CegarLoopResult]: At program point L448-1(lines 448 454) the Hoare annotation is: (let ((.cse0 (= 1 ULTIMATE.start_main_~tmp~10)) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse2 (= 1 |ULTIMATE.start_valid_product_#res|)) (.cse3 (= 0 ~pumpRunning~0))) (or (and .cse0 .cse1 .cse2 .cse3 (= 1 ~waterLevel~0)) (and .cse0 .cse1 .cse2 (<= ~waterLevel~0 2) (or (<= 2 ~waterLevel~0) (not (= 2 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9))) .cse3))) [2020-07-28 19:07:58,857 INFO L268 CegarLoopResult]: For program point L415(lines 415 419) no Hoare annotation was computed. [2020-07-28 19:07:58,857 INFO L268 CegarLoopResult]: For program point L415-2(lines 415 419) no Hoare annotation was computed. [2020-07-28 19:07:58,857 INFO L268 CegarLoopResult]: For program point L415-3(lines 415 419) no Hoare annotation was computed. [2020-07-28 19:07:58,857 INFO L268 CegarLoopResult]: For program point L415-5(lines 415 419) no Hoare annotation was computed. [2020-07-28 19:07:58,857 INFO L268 CegarLoopResult]: For program point L415-6(lines 415 419) no Hoare annotation was computed. [2020-07-28 19:07:58,858 INFO L268 CegarLoopResult]: For program point L184(lines 184 190) no Hoare annotation was computed. [2020-07-28 19:07:58,858 INFO L264 CegarLoopResult]: At program point L184-1(lines 184 190) the Hoare annotation is: (let ((.cse13 (= 0 ~systemActive~0))) (let ((.cse7 (not (= 0 ULTIMATE.start_isLowWaterLevel_~tmp~5))) (.cse10 (not (= 0 |ULTIMATE.start_isLowWaterSensorDry_#res|))) (.cse14 (or (<= 2 ~waterLevel~0) (not (= 2 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9)))) (.cse15 (= 0 ~pumpRunning~0)) (.cse4 (= 2 ~waterLevel~0)) (.cse6 (= 0 ULTIMATE.start_processEnvironment_~tmp~2)) (.cse0 (= 1 ULTIMATE.start_main_~tmp~10)) (.cse8 (= |ULTIMATE.start_getWaterLevel_#res| ~waterLevel~0)) (.cse9 (<= ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9 1)) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse2 (= 1 |ULTIMATE.start_valid_product_#res|)) (.cse3 (not .cse13)) (.cse11 (= 1 |ULTIMATE.start_isPumpRunning_#res|)) (.cse16 (= 1 ~waterLevel~0)) (.cse12 (= 1 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp___0~3)) (.cse5 (= 1 ~pumpRunning~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse0 .cse2 .cse3 (<= |ULTIMATE.start_getWaterLevel_#res| 1) .cse7 .cse8 .cse1 .cse9 .cse10 (<= 0 ~waterLevel~0) .cse11 .cse12 .cse5) (and .cse0 .cse1 .cse2 .cse13 (<= ~waterLevel~0 2) .cse14 (= 0 |ULTIMATE.start_isPumpRunning_#res|) .cse15) (and .cse0 .cse1 .cse2 .cse3 .cse15 .cse16) (and .cse0 .cse7 .cse1 .cse10 .cse2 .cse3 .cse14 .cse16 .cse5) (and .cse0 .cse1 .cse2 .cse3 .cse15 .cse4) (and .cse6 .cse0 .cse8 .cse9 .cse1 .cse2 .cse3 .cse11 (<= 1 ~switchedOnBeforeTS~0) .cse16 .cse12 .cse5)))) [2020-07-28 19:07:58,858 INFO L268 CegarLoopResult]: For program point L415-8(lines 415 419) no Hoare annotation was computed. [2020-07-28 19:07:58,858 INFO L268 CegarLoopResult]: For program point L415-9(lines 415 419) no Hoare annotation was computed. [2020-07-28 19:07:58,859 INFO L268 CegarLoopResult]: For program point L415-11(lines 415 419) no Hoare annotation was computed. [2020-07-28 19:07:58,859 INFO L268 CegarLoopResult]: For program point L415-12(lines 415 419) no Hoare annotation was computed. [2020-07-28 19:07:58,859 INFO L268 CegarLoopResult]: For program point L415-14(lines 415 419) no Hoare annotation was computed. [2020-07-28 19:07:58,859 INFO L268 CegarLoopResult]: For program point L415-15(lines 415 419) no Hoare annotation was computed. [2020-07-28 19:07:58,859 INFO L268 CegarLoopResult]: For program point L415-17(lines 415 419) no Hoare annotation was computed. [2020-07-28 19:07:58,860 INFO L268 CegarLoopResult]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2020-07-28 19:07:58,860 INFO L268 CegarLoopResult]: For program point L54(lines 54 58) no Hoare annotation was computed. [2020-07-28 19:07:58,860 INFO L268 CegarLoopResult]: For program point L54-3(lines 54 58) no Hoare annotation was computed. [2020-07-28 19:07:58,860 INFO L271 CegarLoopResult]: At program point L979(lines 960 982) the Hoare annotation is: true [2020-07-28 19:07:58,860 INFO L268 CegarLoopResult]: For program point L54-6(lines 54 58) no Hoare annotation was computed. [2020-07-28 19:07:58,860 INFO L264 CegarLoopResult]: At program point L1014(lines 1009 1017) the Hoare annotation is: (and (= 0 ~pumpRunning~0) (= |ULTIMATE.start_valid_product_#res| ~systemActive~0) (= 1 ~waterLevel~0) (= 1 ~systemActive~0)) [2020-07-28 19:07:58,861 INFO L264 CegarLoopResult]: At program point L123(lines 118 126) the Hoare annotation is: (let ((.cse13 (= 0 ~systemActive~0))) (let ((.cse11 (= 2 |ULTIMATE.start_getWaterLevel_#res|)) (.cse10 (= 0 ~pumpRunning~0)) (.cse0 (= 0 ULTIMATE.start_processEnvironment_~tmp~2)) (.cse1 (= 1 ULTIMATE.start_main_~tmp~10)) (.cse6 (= |ULTIMATE.start_getWaterLevel_#res| ~waterLevel~0)) (.cse7 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse2 (not .cse13)) (.cse3 (= 1 |ULTIMATE.start_valid_product_#res|)) (.cse8 (= 1 |ULTIMATE.start_isPumpRunning_#res|)) (.cse4 (<= 1 ~switchedOnBeforeTS~0)) (.cse12 (= 1 ~waterLevel~0)) (.cse9 (= 1 ~pumpRunning~0)) (.cse5 (<= |ULTIMATE.start_getWaterLevel_#res| 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (not (= 0 ULTIMATE.start_isLowWaterLevel_~tmp~5)) .cse6 .cse7 (not (= 0 |ULTIMATE.start_isLowWaterSensorDry_#res|)) (<= 0 ~waterLevel~0) .cse8 .cse9) (and .cse1 .cse7 .cse6 .cse3 .cse2 .cse10 .cse11) (and .cse1 .cse7 .cse2 .cse3 (= 2 ~waterLevel~0) .cse11 .cse9) (and .cse1 .cse7 .cse6 .cse3 .cse2 .cse10 .cse12) (and .cse1 .cse7 .cse6 .cse3 .cse13 (<= ~waterLevel~0 2) (= 0 |ULTIMATE.start_isPumpRunning_#res|) .cse10) (and .cse0 .cse1 .cse6 .cse7 .cse2 .cse3 .cse8 .cse4 .cse12 .cse9 .cse5)))) [2020-07-28 19:07:58,861 INFO L264 CegarLoopResult]: At program point L123-1(lines 118 126) the Hoare annotation is: false [2020-07-28 19:07:58,861 INFO L264 CegarLoopResult]: At program point L123-2(lines 118 126) the Hoare annotation is: false [2020-07-28 19:07:58,861 INFO L264 CegarLoopResult]: At program point L421(lines 406 424) the Hoare annotation is: false [2020-07-28 19:07:58,861 INFO L264 CegarLoopResult]: At program point L421-1(lines 406 424) the Hoare annotation is: (let ((.cse0 (= 1 ULTIMATE.start_main_~tmp~10)) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse2 (= 1 |ULTIMATE.start_valid_product_#res|)) (.cse3 (not (= 0 ~systemActive~0))) (.cse4 (= 0 ~pumpRunning~0))) (or (and .cse0 (not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~4)) (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1) .cse1 .cse2 .cse3 (= 0 |ULTIMATE.start_isHighWaterLevel_#res|) .cse4 (= 1 ~waterLevel~0)) (and .cse0 .cse1 .cse2 .cse3 (= 2 ~waterLevel~0) .cse4))) [2020-07-28 19:07:58,861 INFO L264 CegarLoopResult]: At program point L421-2(lines 406 424) the Hoare annotation is: false [2020-07-28 19:07:58,861 INFO L264 CegarLoopResult]: At program point L421-3(lines 406 424) the Hoare annotation is: false [2020-07-28 19:07:58,862 INFO L264 CegarLoopResult]: At program point L421-4(lines 406 424) the Hoare annotation is: false [2020-07-28 19:07:58,862 INFO L268 CegarLoopResult]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2020-07-28 19:07:58,862 INFO L264 CegarLoopResult]: At program point L421-5(lines 406 424) the Hoare annotation is: false [2020-07-28 19:07:58,862 INFO L264 CegarLoopResult]: At program point L91(lines 86 94) the Hoare annotation is: false [2020-07-28 19:07:58,862 INFO L264 CegarLoopResult]: At program point L91-1(lines 86 94) the Hoare annotation is: (and (= 1 ULTIMATE.start_main_~tmp~10) (= 0 ULTIMATE.start_test_~splverifierCounter~0) (= 1 |ULTIMATE.start_valid_product_#res|) (not (= 0 ~systemActive~0)) (= 2 ~waterLevel~0) (= 0 ~pumpRunning~0)) [2020-07-28 19:07:58,862 INFO L264 CegarLoopResult]: At program point L91-2(lines 86 94) the Hoare annotation is: false [2020-07-28 19:07:58,862 INFO L264 CegarLoopResult]: At program point L91-3(lines 86 94) the Hoare annotation is: false [2020-07-28 19:07:58,862 INFO L264 CegarLoopResult]: At program point L91-4(lines 86 94) the Hoare annotation is: false [2020-07-28 19:07:58,862 INFO L264 CegarLoopResult]: At program point L91-5(lines 86 94) the Hoare annotation is: false [2020-07-28 19:07:58,863 INFO L264 CegarLoopResult]: At program point L851(lines 237 243) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0))) (let ((.cse11 (not (= 0 ULTIMATE.start_isLowWaterLevel_~tmp~5))) (.cse13 (not (= 0 |ULTIMATE.start_isLowWaterSensorDry_#res|))) (.cse4 (<= ~waterLevel~0 2)) (.cse6 (or (<= 2 ~waterLevel~0) (not (= 2 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9)))) (.cse5 (= 0 |ULTIMATE.start_isPumpRunning_#res|)) (.cse7 (= 0 ~pumpRunning~0)) (.cse16 (= 2 ~waterLevel~0)) (.cse0 (= 1 ULTIMATE.start_main_~tmp~10)) (.cse12 (= |ULTIMATE.start_getWaterLevel_#res| ~waterLevel~0)) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse2 (= 1 |ULTIMATE.start_valid_product_#res|)) (.cse9 (not .cse3)) (.cse14 (= 1 |ULTIMATE.start_isPumpRunning_#res|)) (.cse10 (<= 1 ~switchedOnBeforeTS~0)) (.cse8 (= 1 ~waterLevel~0)) (.cse15 (= 1 ~pumpRunning~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7) (and .cse0 .cse1 .cse2 .cse5 .cse7 .cse8) (and .cse0 .cse2 .cse9 .cse6 .cse10 .cse11 .cse12 .cse1 .cse13 (<= 0 ~waterLevel~0) .cse4 .cse14 .cse15) (and .cse0 .cse11 .cse1 .cse13 .cse2 .cse9 .cse4 .cse14 .cse6 .cse10 .cse8 .cse15) (and .cse0 .cse1 .cse2 .cse9 .cse14 .cse16 .cse10 .cse15) (and .cse0 .cse1 .cse2 .cse9 .cse5 .cse7 .cse16) (and (= 0 ULTIMATE.start_processEnvironment_~tmp~2) .cse0 .cse12 (<= ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9 1) .cse1 .cse2 .cse9 .cse14 .cse10 .cse8 (= 1 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp___0~3) .cse15)))) [2020-07-28 19:07:58,863 INFO L264 CegarLoopResult]: At program point L851-1(lines 237 243) the Hoare annotation is: false [2020-07-28 19:07:58,863 INFO L264 CegarLoopResult]: At program point L851-2(lines 237 243) the Hoare annotation is: false [2020-07-28 19:07:58,863 INFO L264 CegarLoopResult]: At program point L357(lines 350 360) the Hoare annotation is: false [2020-07-28 19:07:58,863 INFO L264 CegarLoopResult]: At program point L357-1(lines 350 360) the Hoare annotation is: (and (= 1 ULTIMATE.start_main_~tmp~10) (= 0 ULTIMATE.start_test_~splverifierCounter~0) (= 1 |ULTIMATE.start_valid_product_#res|) (not (= 0 ~systemActive~0)) (= 2 ~waterLevel~0) (= 0 ~pumpRunning~0)) [2020-07-28 19:07:58,863 INFO L264 CegarLoopResult]: At program point L357-2(lines 350 360) the Hoare annotation is: false [2020-07-28 19:07:58,863 INFO L264 CegarLoopResult]: At program point L357-3(lines 350 360) the Hoare annotation is: false [2020-07-28 19:07:58,864 INFO L264 CegarLoopResult]: At program point L357-4(lines 350 360) the Hoare annotation is: false [2020-07-28 19:07:58,864 INFO L264 CegarLoopResult]: At program point L357-5(lines 350 360) the Hoare annotation is: false [2020-07-28 19:07:58,864 INFO L268 CegarLoopResult]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2020-07-28 19:07:58,864 INFO L268 CegarLoopResult]: For program point L194(lines 194 207) no Hoare annotation was computed. [2020-07-28 19:07:58,864 INFO L268 CegarLoopResult]: For program point L295(lines 295 312) no Hoare annotation was computed. [2020-07-28 19:07:58,864 INFO L268 CegarLoopResult]: For program point L295-1(lines 295 312) no Hoare annotation was computed. [2020-07-28 19:07:58,864 INFO L268 CegarLoopResult]: For program point L295-2(lines 295 312) no Hoare annotation was computed. [2020-07-28 19:07:58,864 INFO L268 CegarLoopResult]: For program point L131(lines 131 137) no Hoare annotation was computed. [2020-07-28 19:07:58,864 INFO L268 CegarLoopResult]: For program point L131-1(lines 131 137) no Hoare annotation was computed. [2020-07-28 19:07:58,865 INFO L268 CegarLoopResult]: For program point L131-2(lines 131 137) no Hoare annotation was computed. [2020-07-28 19:07:58,865 INFO L268 CegarLoopResult]: For program point L131-3(lines 131 137) no Hoare annotation was computed. [2020-07-28 19:07:58,865 INFO L268 CegarLoopResult]: For program point L-1(line -1) no Hoare annotation was computed. [2020-07-28 19:07:58,865 INFO L268 CegarLoopResult]: For program point L131-4(lines 131 137) no Hoare annotation was computed. [2020-07-28 19:07:58,865 INFO L268 CegarLoopResult]: For program point L131-5(lines 131 137) no Hoare annotation was computed. [2020-07-28 19:07:58,865 INFO L268 CegarLoopResult]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 830) no Hoare annotation was computed. [2020-07-28 19:07:58,865 INFO L268 CegarLoopResult]: For program point L165(lines 164 211) no Hoare annotation was computed. [2020-07-28 19:07:58,865 INFO L268 CegarLoopResult]: For program point L66(lines 66 70) no Hoare annotation was computed. [2020-07-28 19:07:58,865 INFO L268 CegarLoopResult]: For program point L166(lines 166 170) no Hoare annotation was computed. [2020-07-28 19:07:58,866 INFO L268 CegarLoopResult]: For program point L332(lines 332 338) no Hoare annotation was computed. [2020-07-28 19:07:58,866 INFO L268 CegarLoopResult]: For program point L299(lines 299 307) no Hoare annotation was computed. [2020-07-28 19:07:58,866 INFO L268 CegarLoopResult]: For program point L332-2(lines 332 338) no Hoare annotation was computed. [2020-07-28 19:07:58,866 INFO L268 CegarLoopResult]: For program point L299-1(lines 299 307) no Hoare annotation was computed. [2020-07-28 19:07:58,866 INFO L268 CegarLoopResult]: For program point L299-2(lines 299 307) no Hoare annotation was computed. [2020-07-28 19:07:58,866 INFO L268 CegarLoopResult]: For program point L200(lines 200 206) no Hoare annotation was computed. [2020-07-28 19:07:58,866 INFO L268 CegarLoopResult]: For program point L332-4(lines 332 338) no Hoare annotation was computed. [2020-07-28 19:07:58,866 INFO L264 CegarLoopResult]: At program point L200-1(lines 200 206) the Hoare annotation is: (let ((.cse12 (= 0 ~systemActive~0))) (let ((.cse10 (= 2 ~waterLevel~0)) (.cse11 (= 0 ~pumpRunning~0)) (.cse8 (= 1 ~waterLevel~0)) (.cse0 (= 1 ULTIMATE.start_main_~tmp~10)) (.cse2 (not (= 0 ULTIMATE.start_isLowWaterLevel_~tmp~5))) (.cse13 (= |ULTIMATE.start_getWaterLevel_#res| ~waterLevel~0)) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse3 (not (= 0 |ULTIMATE.start_isLowWaterSensorDry_#res|))) (.cse4 (= 1 |ULTIMATE.start_valid_product_#res|)) (.cse5 (not .cse12)) (.cse6 (<= ~waterLevel~0 2)) (.cse7 (or (<= 2 ~waterLevel~0) (not (= 2 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9)))) (.cse9 (= 1 ~pumpRunning~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9) (and .cse0 .cse1 .cse4 .cse5 .cse10 .cse9) (and .cse0 .cse1 .cse4 .cse11 .cse8) (and .cse0 .cse1 .cse4 .cse5 .cse11 .cse10) (and .cse0 .cse1 .cse4 .cse12 .cse6 .cse7 .cse11) (and (= 0 ULTIMATE.start_processEnvironment_~tmp~2) .cse0 .cse13 (<= ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9 1) .cse1 .cse4 .cse5 (= 1 |ULTIMATE.start_isPumpRunning_#res|) (<= 1 ~switchedOnBeforeTS~0) .cse8 (= 1 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp___0~3) .cse9) (and .cse0 .cse2 .cse13 .cse1 .cse3 .cse4 .cse5 (<= 0 ~waterLevel~0) .cse6 .cse7 .cse9)))) [2020-07-28 19:07:58,867 INFO L268 CegarLoopResult]: For program point L332-6(lines 332 338) no Hoare annotation was computed. [2020-07-28 19:07:58,867 INFO L268 CegarLoopResult]: For program point L332-8(lines 332 338) no Hoare annotation was computed. [2020-07-28 19:07:58,867 INFO L268 CegarLoopResult]: For program point L332-10(lines 332 338) no Hoare annotation was computed. [2020-07-28 19:07:58,871 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2020-07-28 19:07:58,871 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2020-07-28 19:07:58,876 WARN L170 areAnnotationChecker]: L970 has no Hoare annotation [2020-07-28 19:07:58,877 WARN L170 areAnnotationChecker]: L970 has no Hoare annotation [2020-07-28 19:07:58,877 WARN L170 areAnnotationChecker]: L970 has no Hoare annotation [2020-07-28 19:07:58,879 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2020-07-28 19:07:58,880 WARN L170 areAnnotationChecker]: L165 has no Hoare annotation [2020-07-28 19:07:58,880 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2020-07-28 19:07:58,880 WARN L170 areAnnotationChecker]: L165 has no Hoare annotation [2020-07-28 19:07:58,880 WARN L170 areAnnotationChecker]: L165 has no Hoare annotation [2020-07-28 19:07:58,880 WARN L170 areAnnotationChecker]: L166 has no Hoare annotation [2020-07-28 19:07:58,880 WARN L170 areAnnotationChecker]: L54-3 has no Hoare annotation [2020-07-28 19:07:58,880 WARN L170 areAnnotationChecker]: L174 has no Hoare annotation [2020-07-28 19:07:58,881 WARN L170 areAnnotationChecker]: L174 has no Hoare annotation [2020-07-28 19:07:58,881 WARN L170 areAnnotationChecker]: L54-3 has no Hoare annotation [2020-07-28 19:07:58,881 WARN L170 areAnnotationChecker]: L54-3 has no Hoare annotation [2020-07-28 19:07:58,881 WARN L170 areAnnotationChecker]: L295-1 has no Hoare annotation [2020-07-28 19:07:58,881 WARN L170 areAnnotationChecker]: L66 has no Hoare annotation [2020-07-28 19:07:58,881 WARN L170 areAnnotationChecker]: L66 has no Hoare annotation [2020-07-28 19:07:58,881 WARN L170 areAnnotationChecker]: L184 has no Hoare annotation [2020-07-28 19:07:58,881 WARN L170 areAnnotationChecker]: L295-1 has no Hoare annotation [2020-07-28 19:07:58,881 WARN L170 areAnnotationChecker]: L295-1 has no Hoare annotation [2020-07-28 19:07:58,882 WARN L170 areAnnotationChecker]: L184 has no Hoare annotation [2020-07-28 19:07:58,882 WARN L170 areAnnotationChecker]: L184 has no Hoare annotation [2020-07-28 19:07:58,882 WARN L170 areAnnotationChecker]: L434-3 has no Hoare annotation [2020-07-28 19:07:58,882 WARN L170 areAnnotationChecker]: L269-3 has no Hoare annotation [2020-07-28 19:07:58,882 WARN L170 areAnnotationChecker]: L269-3 has no Hoare annotation [2020-07-28 19:07:58,882 WARN L170 areAnnotationChecker]: L862-2 has no Hoare annotation [2020-07-28 19:07:58,882 WARN L170 areAnnotationChecker]: L78 has no Hoare annotation [2020-07-28 19:07:58,882 WARN L170 areAnnotationChecker]: L78 has no Hoare annotation [2020-07-28 19:07:58,882 WARN L170 areAnnotationChecker]: L194 has no Hoare annotation [2020-07-28 19:07:58,883 WARN L170 areAnnotationChecker]: L434-3 has no Hoare annotation [2020-07-28 19:07:58,883 WARN L170 areAnnotationChecker]: L434-3 has no Hoare annotation [2020-07-28 19:07:58,883 WARN L170 areAnnotationChecker]: L131-3 has no Hoare annotation [2020-07-28 19:07:58,883 WARN L170 areAnnotationChecker]: L131-3 has no Hoare annotation [2020-07-28 19:07:58,883 WARN L170 areAnnotationChecker]: L862-2 has no Hoare annotation [2020-07-28 19:07:58,883 WARN L170 areAnnotationChecker]: L862-2 has no Hoare annotation [2020-07-28 19:07:58,883 WARN L170 areAnnotationChecker]: L194 has no Hoare annotation [2020-07-28 19:07:58,883 WARN L170 areAnnotationChecker]: L194 has no Hoare annotation [2020-07-28 19:07:58,884 WARN L170 areAnnotationChecker]: L434-5 has no Hoare annotation [2020-07-28 19:07:58,884 WARN L170 areAnnotationChecker]: L415-9 has no Hoare annotation [2020-07-28 19:07:58,884 WARN L170 areAnnotationChecker]: L866-2 has no Hoare annotation [2020-07-28 19:07:58,886 WARN L170 areAnnotationChecker]: L200 has no Hoare annotation [2020-07-28 19:07:58,886 WARN L170 areAnnotationChecker]: L200 has no Hoare annotation [2020-07-28 19:07:58,886 WARN L170 areAnnotationChecker]: L299-1 has no Hoare annotation [2020-07-28 19:07:58,886 WARN L170 areAnnotationChecker]: L415-9 has no Hoare annotation [2020-07-28 19:07:58,887 WARN L170 areAnnotationChecker]: L415-9 has no Hoare annotation [2020-07-28 19:07:58,887 WARN L170 areAnnotationChecker]: L866-2 has no Hoare annotation [2020-07-28 19:07:58,887 WARN L170 areAnnotationChecker]: L866-2 has no Hoare annotation [2020-07-28 19:07:58,887 WARN L170 areAnnotationChecker]: L896 has no Hoare annotation [2020-07-28 19:07:58,889 WARN L170 areAnnotationChecker]: L448 has no Hoare annotation [2020-07-28 19:07:58,889 WARN L170 areAnnotationChecker]: L448 has no Hoare annotation [2020-07-28 19:07:58,889 WARN L170 areAnnotationChecker]: L299-1 has no Hoare annotation [2020-07-28 19:07:58,889 WARN L170 areAnnotationChecker]: L299-1 has no Hoare annotation [2020-07-28 19:07:58,889 WARN L170 areAnnotationChecker]: L415-11 has no Hoare annotation [2020-07-28 19:07:58,889 WARN L170 areAnnotationChecker]: L867-2 has no Hoare annotation [2020-07-28 19:07:58,889 WARN L170 areAnnotationChecker]: L867-2 has no Hoare annotation [2020-07-28 19:07:58,890 WARN L170 areAnnotationChecker]: L896 has no Hoare annotation [2020-07-28 19:07:58,890 WARN L170 areAnnotationChecker]: L54 has no Hoare annotation [2020-07-28 19:07:58,892 WARN L170 areAnnotationChecker]: L269-2 has no Hoare annotation [2020-07-28 19:07:58,892 WARN L170 areAnnotationChecker]: L269-2 has no Hoare annotation [2020-07-28 19:07:58,892 WARN L170 areAnnotationChecker]: L273-3 has no Hoare annotation [2020-07-28 19:07:58,892 WARN L170 areAnnotationChecker]: L830-1 has no Hoare annotation [2020-07-28 19:07:58,892 WARN L170 areAnnotationChecker]: L830-1 has no Hoare annotation [2020-07-28 19:07:58,892 WARN L170 areAnnotationChecker]: L899 has no Hoare annotation [2020-07-28 19:07:58,892 WARN L170 areAnnotationChecker]: L899 has no Hoare annotation [2020-07-28 19:07:58,892 WARN L170 areAnnotationChecker]: L54 has no Hoare annotation [2020-07-28 19:07:58,893 WARN L170 areAnnotationChecker]: L54 has no Hoare annotation [2020-07-28 19:07:58,893 WARN L170 areAnnotationChecker]: L295 has no Hoare annotation [2020-07-28 19:07:58,894 WARN L170 areAnnotationChecker]: L131-2 has no Hoare annotation [2020-07-28 19:07:58,894 WARN L170 areAnnotationChecker]: L131-2 has no Hoare annotation [2020-07-28 19:07:58,894 WARN L170 areAnnotationChecker]: L273-3 has no Hoare annotation [2020-07-28 19:07:58,894 WARN L170 areAnnotationChecker]: L273-3 has no Hoare annotation [2020-07-28 19:07:58,894 WARN L170 areAnnotationChecker]: L899-1 has no Hoare annotation [2020-07-28 19:07:58,894 WARN L170 areAnnotationChecker]: L295 has no Hoare annotation [2020-07-28 19:07:58,894 WARN L170 areAnnotationChecker]: L295 has no Hoare annotation [2020-07-28 19:07:58,907 WARN L170 areAnnotationChecker]: L415-6 has no Hoare annotation [2020-07-28 19:07:58,907 WARN L170 areAnnotationChecker]: L434 has no Hoare annotation [2020-07-28 19:07:58,907 WARN L170 areAnnotationChecker]: L269-1 has no Hoare annotation [2020-07-28 19:07:58,907 WARN L170 areAnnotationChecker]: L269-1 has no Hoare annotation [2020-07-28 19:07:58,907 WARN L170 areAnnotationChecker]: L862 has no Hoare annotation [2020-07-28 19:07:58,908 WARN L170 areAnnotationChecker]: L415-6 has no Hoare annotation [2020-07-28 19:07:58,908 WARN L170 areAnnotationChecker]: L415-6 has no Hoare annotation [2020-07-28 19:07:58,908 WARN L170 areAnnotationChecker]: L332-6 has no Hoare annotation [2020-07-28 19:07:58,908 WARN L170 areAnnotationChecker]: L54-6 has no Hoare annotation [2020-07-28 19:07:58,908 WARN L170 areAnnotationChecker]: L434 has no Hoare annotation [2020-07-28 19:07:58,908 WARN L170 areAnnotationChecker]: L434 has no Hoare annotation [2020-07-28 19:07:58,908 WARN L170 areAnnotationChecker]: L131-1 has no Hoare annotation [2020-07-28 19:07:58,908 WARN L170 areAnnotationChecker]: L131-1 has no Hoare annotation [2020-07-28 19:07:58,908 WARN L170 areAnnotationChecker]: L862 has no Hoare annotation [2020-07-28 19:07:58,908 WARN L170 areAnnotationChecker]: L862 has no Hoare annotation [2020-07-28 19:07:58,908 WARN L170 areAnnotationChecker]: L415-8 has no Hoare annotation [2020-07-28 19:07:58,908 WARN L170 areAnnotationChecker]: L332-6 has no Hoare annotation [2020-07-28 19:07:58,909 WARN L170 areAnnotationChecker]: L332-6 has no Hoare annotation [2020-07-28 19:07:58,909 WARN L170 areAnnotationChecker]: L54-6 has no Hoare annotation [2020-07-28 19:07:58,909 WARN L170 areAnnotationChecker]: L54-6 has no Hoare annotation [2020-07-28 19:07:58,909 WARN L170 areAnnotationChecker]: L295-2 has no Hoare annotation [2020-07-28 19:07:58,909 WARN L170 areAnnotationChecker]: L434-2 has no Hoare annotation [2020-07-28 19:07:58,909 WARN L170 areAnnotationChecker]: L415-3 has no Hoare annotation [2020-07-28 19:07:58,909 WARN L170 areAnnotationChecker]: L866 has no Hoare annotation [2020-07-28 19:07:58,909 WARN L170 areAnnotationChecker]: L273-2 has no Hoare annotation [2020-07-28 19:07:58,909 WARN L170 areAnnotationChecker]: L295-2 has no Hoare annotation [2020-07-28 19:07:58,909 WARN L170 areAnnotationChecker]: L295-2 has no Hoare annotation [2020-07-28 19:07:58,909 WARN L170 areAnnotationChecker]: L299 has no Hoare annotation [2020-07-28 19:07:58,909 WARN L170 areAnnotationChecker]: L415-3 has no Hoare annotation [2020-07-28 19:07:58,910 WARN L170 areAnnotationChecker]: L415-3 has no Hoare annotation [2020-07-28 19:07:58,910 WARN L170 areAnnotationChecker]: L866 has no Hoare annotation [2020-07-28 19:07:58,910 WARN L170 areAnnotationChecker]: L866 has no Hoare annotation [2020-07-28 19:07:58,910 WARN L170 areAnnotationChecker]: L273-2 has no Hoare annotation [2020-07-28 19:07:58,910 WARN L170 areAnnotationChecker]: L273-2 has no Hoare annotation [2020-07-28 19:07:58,910 WARN L170 areAnnotationChecker]: L434-6 has no Hoare annotation [2020-07-28 19:07:58,910 WARN L170 areAnnotationChecker]: L269-5 has no Hoare annotation [2020-07-28 19:07:58,910 WARN L170 areAnnotationChecker]: L269-5 has no Hoare annotation [2020-07-28 19:07:58,910 WARN L170 areAnnotationChecker]: L862-4 has no Hoare annotation [2020-07-28 19:07:58,910 WARN L170 areAnnotationChecker]: L299 has no Hoare annotation [2020-07-28 19:07:58,910 WARN L170 areAnnotationChecker]: L299 has no Hoare annotation [2020-07-28 19:07:58,910 WARN L170 areAnnotationChecker]: L415-5 has no Hoare annotation [2020-07-28 19:07:58,910 WARN L170 areAnnotationChecker]: L867 has no Hoare annotation [2020-07-28 19:07:58,911 WARN L170 areAnnotationChecker]: L867 has no Hoare annotation [2020-07-28 19:07:58,911 WARN L170 areAnnotationChecker]: L434-6 has no Hoare annotation [2020-07-28 19:07:58,911 WARN L170 areAnnotationChecker]: L434-6 has no Hoare annotation [2020-07-28 19:07:58,911 WARN L170 areAnnotationChecker]: L131-5 has no Hoare annotation [2020-07-28 19:07:58,911 WARN L170 areAnnotationChecker]: L131-5 has no Hoare annotation [2020-07-28 19:07:58,911 WARN L170 areAnnotationChecker]: L862-4 has no Hoare annotation [2020-07-28 19:07:58,911 WARN L170 areAnnotationChecker]: L862-4 has no Hoare annotation [2020-07-28 19:07:58,911 WARN L170 areAnnotationChecker]: L269 has no Hoare annotation [2020-07-28 19:07:58,911 WARN L170 areAnnotationChecker]: L269 has no Hoare annotation [2020-07-28 19:07:58,911 WARN L170 areAnnotationChecker]: L273-1 has no Hoare annotation [2020-07-28 19:07:58,911 WARN L170 areAnnotationChecker]: L830 has no Hoare annotation [2020-07-28 19:07:58,911 WARN L170 areAnnotationChecker]: L830 has no Hoare annotation [2020-07-28 19:07:58,912 WARN L170 areAnnotationChecker]: L332-4 has no Hoare annotation [2020-07-28 19:07:58,912 WARN L170 areAnnotationChecker]: L434-8 has no Hoare annotation [2020-07-28 19:07:58,912 WARN L170 areAnnotationChecker]: L415-15 has no Hoare annotation [2020-07-28 19:07:58,912 WARN L170 areAnnotationChecker]: L866-4 has no Hoare annotation [2020-07-28 19:07:58,912 WARN L170 areAnnotationChecker]: L131 has no Hoare annotation [2020-07-28 19:07:58,912 WARN L170 areAnnotationChecker]: L131 has no Hoare annotation [2020-07-28 19:07:58,912 WARN L170 areAnnotationChecker]: L273-1 has no Hoare annotation [2020-07-28 19:07:58,912 WARN L170 areAnnotationChecker]: L273-1 has no Hoare annotation [2020-07-28 19:07:58,912 WARN L170 areAnnotationChecker]: L332-4 has no Hoare annotation [2020-07-28 19:07:58,912 WARN L170 areAnnotationChecker]: L332-4 has no Hoare annotation [2020-07-28 19:07:58,912 WARN L170 areAnnotationChecker]: L299-2 has no Hoare annotation [2020-07-28 19:07:58,912 WARN L170 areAnnotationChecker]: L415-15 has no Hoare annotation [2020-07-28 19:07:58,913 WARN L170 areAnnotationChecker]: L415-15 has no Hoare annotation [2020-07-28 19:07:58,913 WARN L170 areAnnotationChecker]: L866-4 has no Hoare annotation [2020-07-28 19:07:58,913 WARN L170 areAnnotationChecker]: L866-4 has no Hoare annotation [2020-07-28 19:07:58,913 WARN L170 areAnnotationChecker]: L415 has no Hoare annotation [2020-07-28 19:07:58,914 WARN L170 areAnnotationChecker]: L299-2 has no Hoare annotation [2020-07-28 19:07:58,914 WARN L170 areAnnotationChecker]: L299-2 has no Hoare annotation [2020-07-28 19:07:58,914 WARN L170 areAnnotationChecker]: L415-17 has no Hoare annotation [2020-07-28 19:07:58,914 WARN L170 areAnnotationChecker]: L867-4 has no Hoare annotation [2020-07-28 19:07:58,914 WARN L170 areAnnotationChecker]: L867-4 has no Hoare annotation [2020-07-28 19:07:58,914 WARN L170 areAnnotationChecker]: L415 has no Hoare annotation [2020-07-28 19:07:58,914 WARN L170 areAnnotationChecker]: L415 has no Hoare annotation [2020-07-28 19:07:58,914 WARN L170 areAnnotationChecker]: L332-2 has no Hoare annotation [2020-07-28 19:07:58,914 WARN L170 areAnnotationChecker]: L269-4 has no Hoare annotation [2020-07-28 19:07:58,914 WARN L170 areAnnotationChecker]: L269-4 has no Hoare annotation [2020-07-28 19:07:58,914 WARN L170 areAnnotationChecker]: L273-5 has no Hoare annotation [2020-07-28 19:07:58,914 WARN L170 areAnnotationChecker]: L830-2 has no Hoare annotation [2020-07-28 19:07:58,915 WARN L170 areAnnotationChecker]: L830-2 has no Hoare annotation [2020-07-28 19:07:58,915 WARN L170 areAnnotationChecker]: L415-2 has no Hoare annotation [2020-07-28 19:07:58,915 WARN L170 areAnnotationChecker]: L332-2 has no Hoare annotation [2020-07-28 19:07:58,915 WARN L170 areAnnotationChecker]: L332-2 has no Hoare annotation [2020-07-28 19:07:58,915 WARN L170 areAnnotationChecker]: L131-4 has no Hoare annotation [2020-07-28 19:07:58,915 WARN L170 areAnnotationChecker]: L131-4 has no Hoare annotation [2020-07-28 19:07:58,915 WARN L170 areAnnotationChecker]: L273-5 has no Hoare annotation [2020-07-28 19:07:58,915 WARN L170 areAnnotationChecker]: L273-5 has no Hoare annotation [2020-07-28 19:07:58,915 WARN L170 areAnnotationChecker]: L273 has no Hoare annotation [2020-07-28 19:07:58,915 WARN L170 areAnnotationChecker]: L415-12 has no Hoare annotation [2020-07-28 19:07:58,915 WARN L170 areAnnotationChecker]: L273 has no Hoare annotation [2020-07-28 19:07:58,915 WARN L170 areAnnotationChecker]: L273 has no Hoare annotation [2020-07-28 19:07:58,916 WARN L170 areAnnotationChecker]: L415-12 has no Hoare annotation [2020-07-28 19:07:58,916 WARN L170 areAnnotationChecker]: L415-12 has no Hoare annotation [2020-07-28 19:07:58,916 WARN L170 areAnnotationChecker]: L332-10 has no Hoare annotation [2020-07-28 19:07:58,916 WARN L170 areAnnotationChecker]: L415-14 has no Hoare annotation [2020-07-28 19:07:58,916 WARN L170 areAnnotationChecker]: L332-10 has no Hoare annotation [2020-07-28 19:07:58,916 WARN L170 areAnnotationChecker]: L332-10 has no Hoare annotation [2020-07-28 19:07:58,916 WARN L170 areAnnotationChecker]: L332 has no Hoare annotation [2020-07-28 19:07:58,916 WARN L170 areAnnotationChecker]: L273-4 has no Hoare annotation [2020-07-28 19:07:58,916 WARN L170 areAnnotationChecker]: L332 has no Hoare annotation [2020-07-28 19:07:58,916 WARN L170 areAnnotationChecker]: L332 has no Hoare annotation [2020-07-28 19:07:58,916 WARN L170 areAnnotationChecker]: L273-4 has no Hoare annotation [2020-07-28 19:07:58,916 WARN L170 areAnnotationChecker]: L273-4 has no Hoare annotation [2020-07-28 19:07:58,917 WARN L170 areAnnotationChecker]: L332-8 has no Hoare annotation [2020-07-28 19:07:58,917 WARN L170 areAnnotationChecker]: L332-8 has no Hoare annotation [2020-07-28 19:07:58,917 WARN L170 areAnnotationChecker]: L332-8 has no Hoare annotation [2020-07-28 19:07:58,917 INFO L163 areAnnotationChecker]: CFG has 31 edges. 31 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. 0 times interpolants missing. [2020-07-28 19:07:58,965 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 28.07 07:07:58 BoogieIcfgContainer [2020-07-28 19:07:58,965 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2020-07-28 19:07:58,966 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2020-07-28 19:07:58,966 INFO L271 PluginConnector]: Initializing Witness Printer... [2020-07-28 19:07:58,966 INFO L275 PluginConnector]: Witness Printer initialized [2020-07-28 19:07:58,967 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.07 07:06:45" (3/4) ... [2020-07-28 19:07:58,970 INFO L137 WitnessPrinter]: Generating witness for correct program [2020-07-28 19:07:58,994 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 38 nodes and edges [2020-07-28 19:07:58,997 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 20 nodes and edges [2020-07-28 19:07:58,999 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 9 nodes and edges [2020-07-28 19:07:59,001 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2020-07-28 19:07:59,003 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2020-07-28 19:07:59,004 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2020-07-28 19:07:59,005 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2020-07-28 19:07:59,046 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((0 == pumpRunning && \result == systemActive) && 1 == waterLevel) && 1 == systemActive [2020-07-28 19:07:59,046 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((0 == pumpRunning && \result == systemActive) && 1 == waterLevel) && tmp == systemActive) && 1 == systemActive [2020-07-28 19:07:59,047 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((0 == pumpRunning && \result == systemActive) && 1 == waterLevel) && tmp == systemActive) && 1 == systemActive [2020-07-28 19:07:59,047 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((1 == tmp && \result == waterLevel) && 0 == splverifierCounter) && 1 == \result) && 0 == systemActive) && waterLevel <= 2) && 0 == \result) && (2 <= waterLevel || !(2 == tmp))) && 0 == pumpRunning) || (((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && 1 == waterLevel)) || (((((((((((((0 == tmp && 1 == tmp) && 1 == \result) && !(0 == systemActive)) && !(0 == tmp)) && \result == waterLevel) && 0 == splverifierCounter) && tmp <= 1) && !(0 == \result)) && 0 <= waterLevel) && 1 == \result) && waterLevel <= 0) && 1 == tmp___0) && 1 == pumpRunning)) || (((((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 2 == waterLevel) && 2 == tmp) && 2 == \result) && 1 == pumpRunning)) || (((((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && 2 == waterLevel) && 2 == tmp) && 2 == \result)) || (((((((((((0 == tmp && 1 == tmp) && \result == waterLevel) && tmp <= 1) && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 1 == \result) && 1 <= switchedOnBeforeTS) && 1 == waterLevel) && 1 == tmp___0) && 1 == pumpRunning) [2020-07-28 19:07:59,048 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 2 == waterLevel) && 1 == pumpRunning) || (((((((((((((0 == tmp && 1 == tmp) && 1 == \result) && !(0 == systemActive)) && \result <= 1) && !(0 == tmp)) && \result == waterLevel) && 0 == splverifierCounter) && tmp <= 1) && !(0 == \result)) && 0 <= waterLevel) && 1 == \result) && 1 == tmp___0) && 1 == pumpRunning)) || (((((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && 0 == systemActive) && waterLevel <= 2) && (2 <= waterLevel || !(2 == tmp))) && 0 == \result) && 0 == pumpRunning)) || (((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && 1 == waterLevel)) || ((((((((1 == tmp && !(0 == tmp)) && 0 == splverifierCounter) && !(0 == \result)) && 1 == \result) && !(0 == systemActive)) && (2 <= waterLevel || !(2 == tmp))) && 1 == waterLevel) && 1 == pumpRunning)) || (((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && 2 == waterLevel)) || (((((((((((0 == tmp && 1 == tmp) && \result == waterLevel) && tmp <= 1) && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 1 == \result) && 1 <= switchedOnBeforeTS) && 1 == waterLevel) && 1 == tmp___0) && 1 == pumpRunning) [2020-07-28 19:07:59,049 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 2 == waterLevel) && 1 == pumpRunning) || (((((((((((((0 == tmp && 1 == tmp) && 1 == \result) && !(0 == systemActive)) && \result <= 1) && !(0 == tmp)) && \result == waterLevel) && 0 == splverifierCounter) && tmp <= 1) && !(0 == \result)) && 0 <= waterLevel) && 1 == \result) && 1 == tmp___0) && 1 == pumpRunning)) || (((((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && 0 == systemActive) && waterLevel <= 2) && (2 <= waterLevel || !(2 == tmp))) && 0 == \result) && 0 == pumpRunning)) || (((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && 1 == waterLevel)) || ((((((((1 == tmp && !(0 == tmp)) && 0 == splverifierCounter) && !(0 == \result)) && 1 == \result) && !(0 == systemActive)) && (2 <= waterLevel || !(2 == tmp))) && 1 == waterLevel) && 1 == pumpRunning)) || (((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && 2 == waterLevel)) || (((((((((((0 == tmp && 1 == tmp) && \result == waterLevel) && tmp <= 1) && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 1 == \result) && 1 <= switchedOnBeforeTS) && 1 == waterLevel) && 1 == tmp___0) && 1 == pumpRunning) [2020-07-28 19:07:59,049 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((1 == tmp && 0 == splverifierCounter) && !(0 == tmp)) && !(0 == \result)) && 1 == \result) && !(0 == systemActive)) && waterLevel <= 2) && (2 <= waterLevel || !(2 == tmp))) && 1 == waterLevel) && 1 == pumpRunning) || (((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 2 == waterLevel) && 1 == pumpRunning)) || ((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && 0 == pumpRunning) && 1 == waterLevel)) || (((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && 2 == waterLevel)) || ((((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && 0 == systemActive) && waterLevel <= 2) && (2 <= waterLevel || !(2 == tmp))) && 0 == pumpRunning)) || (((((((((((0 == tmp && 1 == tmp) && \result == waterLevel) && tmp <= 1) && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 1 == \result) && 1 <= switchedOnBeforeTS) && 1 == waterLevel) && 1 == tmp___0) && 1 == pumpRunning)) || ((((((((((1 == tmp && !(0 == tmp)) && \result == waterLevel) && 0 == splverifierCounter) && !(0 == \result)) && 1 == \result) && !(0 == systemActive)) && 0 <= waterLevel) && waterLevel <= 2) && (2 <= waterLevel || !(2 == tmp))) && 1 == pumpRunning) [2020-07-28 19:07:59,050 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && 0 == pumpRunning) && 1 == waterLevel) || (((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && waterLevel <= 2) && (2 <= waterLevel || !(2 == tmp))) && 0 == pumpRunning) [2020-07-28 19:07:59,051 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((1 == tmp && !(0 == tmp)) && \result == waterLevel) && 0 == splverifierCounter) && !(0 == \result)) && 1 == \result) && !(0 == systemActive)) && 0 <= waterLevel) && waterLevel <= 2) && (2 <= waterLevel || !(2 == tmp))) && 1 == \result) && 1 == pumpRunning) || (((((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && 0 == systemActive) && waterLevel <= 2) && 0 == \result) && (2 <= waterLevel || !(2 == tmp))) && 0 == pumpRunning)) || (((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && 0 == \result) && 0 == pumpRunning) && 1 == waterLevel)) || ((((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 1 == \result) && 2 == waterLevel) && 1 == pumpRunning)) || ((((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == \result) && 0 == pumpRunning) && 2 == waterLevel)) || (((((((((((0 == tmp && 1 == tmp) && \result == waterLevel) && tmp <= 1) && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 1 == \result) && 1 <= switchedOnBeforeTS) && 1 == waterLevel) && 1 == tmp___0) && 1 == pumpRunning)) || ((((((((((1 == tmp && !(0 == tmp)) && 0 == splverifierCounter) && !(0 == \result)) && 1 == \result) && !(0 == systemActive)) && waterLevel <= 2) && (2 <= waterLevel || !(2 == tmp))) && 1 == \result) && 1 == waterLevel) && 1 == pumpRunning) [2020-07-28 19:07:59,051 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && 0 == systemActive) && waterLevel <= 2) && 0 == \result) && (2 <= waterLevel || !(2 == tmp))) && 0 == pumpRunning) || (((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && 0 == \result) && 0 == pumpRunning) && 1 == waterLevel)) || ((((((((((((1 == tmp && 1 == \result) && !(0 == systemActive)) && (2 <= waterLevel || !(2 == tmp))) && 1 <= switchedOnBeforeTS) && !(0 == tmp)) && \result == waterLevel) && 0 == splverifierCounter) && !(0 == \result)) && 0 <= waterLevel) && waterLevel <= 2) && 1 == \result) && 1 == pumpRunning)) || (((((((((((1 == tmp && !(0 == tmp)) && 0 == splverifierCounter) && !(0 == \result)) && 1 == \result) && !(0 == systemActive)) && waterLevel <= 2) && 1 == \result) && (2 <= waterLevel || !(2 == tmp))) && 1 <= switchedOnBeforeTS) && 1 == waterLevel) && 1 == pumpRunning)) || (((((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 1 == \result) && 2 == waterLevel) && 1 <= switchedOnBeforeTS) && 1 == pumpRunning)) || ((((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == \result) && 0 == pumpRunning) && 2 == waterLevel)) || (((((((((((0 == tmp && 1 == tmp) && \result == waterLevel) && tmp <= 1) && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 1 == \result) && 1 <= switchedOnBeforeTS) && 1 == waterLevel) && 1 == tmp___0) && 1 == pumpRunning) [2020-07-28 19:07:59,052 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 <= waterLevel) && 1 == \result) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 1 == pumpRunning) || (((((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 1 == \result) && 1 <= switchedOnBeforeTS) && 1 == waterLevel) && 1 == pumpRunning)) || (((((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && 0 == systemActive) && waterLevel <= 2) && 0 == \result) && (2 <= waterLevel || !(2 == tmp))) && 0 == pumpRunning)) || (((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && 0 == \result) && 0 == pumpRunning) && 1 == waterLevel)) || (((((1 == tmp && 0 == splverifierCounter) && !(0 == systemActive)) && 1 == \result) && 2 == waterLevel) && 0 == pumpRunning)) || (((((1 == tmp && 0 == splverifierCounter) && !(0 == systemActive)) && 1 == \result) && 0 == pumpRunning) && 1 == waterLevel) [2020-07-28 19:07:59,052 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 2 == waterLevel) && 1 == pumpRunning) || (((((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && 0 == systemActive) && waterLevel <= 2) && 0 == \result) && (2 <= waterLevel || !(2 == tmp))) && 0 == pumpRunning)) || (((((1 == tmp && 0 == splverifierCounter) && !(0 == systemActive)) && 1 == \result) && 2 == waterLevel) && 0 == pumpRunning)) || (((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && 0 == \result) && 0 == pumpRunning) && 1 == waterLevel)) || (((((((((((0 == tmp && 1 == tmp) && !(0 == tmp)) && 0 == splverifierCounter) && !(0 == \result)) && 1 == \result) && !(0 == systemActive)) && 0 <= waterLevel) && 1 == \result) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && 1 == pumpRunning)) || (((((1 == tmp && 0 == splverifierCounter) && !(0 == systemActive)) && 1 == \result) && 0 == pumpRunning) && 1 == waterLevel)) || ((((((((0 == tmp && 1 == tmp) && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 1 == \result) && 1 <= switchedOnBeforeTS) && 1 == waterLevel) && 1 == pumpRunning) [2020-07-28 19:07:59,054 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((0 == tmp && 1 == tmp) && !(0 == systemActive)) && 1 == \result) && 1 <= switchedOnBeforeTS) && \result <= 1) && !(0 == tmp)) && \result == waterLevel) && 0 == splverifierCounter) && !(0 == \result)) && 0 <= waterLevel) && 1 == \result) && 1 == pumpRunning) || ((((((1 == tmp && 0 == splverifierCounter) && \result == waterLevel) && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && 2 == \result)) || ((((((1 == tmp && 0 == splverifierCounter) && !(0 == systemActive)) && 1 == \result) && 2 == waterLevel) && 2 == \result) && 1 == pumpRunning)) || ((((((1 == tmp && 0 == splverifierCounter) && \result == waterLevel) && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && 1 == waterLevel)) || (((((((1 == tmp && 0 == splverifierCounter) && \result == waterLevel) && 1 == \result) && 0 == systemActive) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning)) || ((((((((((0 == tmp && 1 == tmp) && \result == waterLevel) && 0 == splverifierCounter) && !(0 == systemActive)) && 1 == \result) && 1 == \result) && 1 <= switchedOnBeforeTS) && 1 == waterLevel) && 1 == pumpRunning) && \result <= 1) [2020-07-28 19:07:59,055 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 1 == \result) && 1 <= switchedOnBeforeTS) && 1 == waterLevel) && 1 == pumpRunning) || (((((((((1 == tmp && 0 == splverifierCounter) && !(0 == \result)) && 1 == \result) && !(0 == systemActive)) && 0 <= waterLevel) && 1 == \result) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 1 == pumpRunning) [2020-07-28 19:07:59,060 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 2 == waterLevel) && 0 == pumpRunning) || ((((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && 1 == waterLevel) && !(0 == \result)) [2020-07-28 19:07:59,063 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((0 == tmp && 1 == tmp) && tmp <= 1) && 0 == splverifierCounter) && \result == waterLevel) && 1 == \result) && !(0 == systemActive)) && 1 == \result) && 1 <= switchedOnBeforeTS) && 1 == waterLevel) && 1 == pumpRunning) || (((((((((((((0 == tmp && 1 == tmp) && 1 == \result) && !(0 == systemActive)) && 1 <= switchedOnBeforeTS) && \result <= 1) && !(0 == tmp)) && \result == waterLevel) && tmp <= 1) && 0 == splverifierCounter) && !(0 == \result)) && 0 <= waterLevel) && 1 == \result) && 1 == pumpRunning)) || ((((((((1 == tmp && 0 == splverifierCounter) && \result == waterLevel) && 1 == \result) && 0 == systemActive) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && !(2 == tmp))) || ((((((((1 == tmp && \result == waterLevel) && tmp <= 1) && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == \result) && 0 == pumpRunning) && 1 == waterLevel) [2020-07-28 19:07:59,064 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 1 == \result) && 1 <= switchedOnBeforeTS) && 1 == waterLevel) && 1 == pumpRunning) || ((((((((((((1 == tmp && 0 == tmp___0) && 1 == \result) && !(0 == systemActive)) && 0 == \result) && 1 <= switchedOnBeforeTS) && !(0 == tmp)) && 0 == splverifierCounter) && !(0 == \result)) && 0 <= waterLevel) && 1 == \result) && waterLevel <= 0) && 1 == pumpRunning) [2020-07-28 19:07:59,065 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1 == tmp && !(0 == tmp)) && 0 == tmp___0) && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == \result) && 0 == pumpRunning) && 1 == waterLevel) || (((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 2 == waterLevel) && 0 == pumpRunning) [2020-07-28 19:07:59,069 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 2 == waterLevel) && 0 == pumpRunning [2020-07-28 19:07:59,070 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 2 == waterLevel) && 0 == pumpRunning [2020-07-28 19:07:59,160 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2020-07-28 19:07:59,160 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2020-07-28 19:07:59,162 INFO L168 Benchmark]: Toolchain (without parser) took 76202.52 ms. Allocated memory was 1.0 GB in the beginning and 1.9 GB in the end (delta: 874.5 MB). Free memory was 950.8 MB in the beginning and 1.8 GB in the end (delta: -881.6 MB). There was no memory consumed. Max. memory is 11.5 GB. [2020-07-28 19:07:59,163 INFO L168 Benchmark]: CDTParser took 0.23 ms. Allocated memory is still 1.0 GB. Free memory is still 981.7 MB. There was no memory consumed. Max. memory is 11.5 GB. [2020-07-28 19:07:59,163 INFO L168 Benchmark]: CACSL2BoogieTranslator took 694.17 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 151.5 MB). Free memory was 945.5 MB in the beginning and 1.1 GB in the end (delta: -182.3 MB). Peak memory consumption was 26.6 MB. Max. memory is 11.5 GB. [2020-07-28 19:07:59,164 INFO L168 Benchmark]: Boogie Procedure Inliner took 96.29 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.5 MB). Peak memory consumption was 6.5 MB. Max. memory is 11.5 GB. [2020-07-28 19:07:59,164 INFO L168 Benchmark]: Boogie Preprocessor took 77.06 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.5 MB). Peak memory consumption was 6.5 MB. Max. memory is 11.5 GB. [2020-07-28 19:07:59,164 INFO L168 Benchmark]: RCFGBuilder took 1937.56 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 913.1 MB in the end (delta: 201.5 MB). Peak memory consumption was 201.5 MB. Max. memory is 11.5 GB. [2020-07-28 19:07:59,165 INFO L168 Benchmark]: TraceAbstraction took 73195.84 ms. Allocated memory was 1.2 GB in the beginning and 1.9 GB in the end (delta: 723.0 MB). Free memory was 913.1 MB in the beginning and 1.9 GB in the end (delta: -939.9 MB). There was no memory consumed. Max. memory is 11.5 GB. [2020-07-28 19:07:59,165 INFO L168 Benchmark]: Witness Printer took 194.63 ms. Allocated memory is still 1.9 GB. Free memory was 1.9 GB in the beginning and 1.8 GB in the end (delta: 20.7 MB). Peak memory consumption was 20.7 MB. Max. memory is 11.5 GB. [2020-07-28 19:07:59,169 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - AssertionsEnabledResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.23 ms. Allocated memory is still 1.0 GB. Free memory is still 981.7 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 694.17 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 151.5 MB). Free memory was 945.5 MB in the beginning and 1.1 GB in the end (delta: -182.3 MB). Peak memory consumption was 26.6 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 96.29 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.5 MB). Peak memory consumption was 6.5 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 77.06 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.5 MB). Peak memory consumption was 6.5 MB. Max. memory is 11.5 GB. * RCFGBuilder took 1937.56 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 913.1 MB in the end (delta: 201.5 MB). Peak memory consumption was 201.5 MB. Max. memory is 11.5 GB. * TraceAbstraction took 73195.84 ms. Allocated memory was 1.2 GB in the beginning and 1.9 GB in the end (delta: 723.0 MB). Free memory was 913.1 MB in the beginning and 1.9 GB in the end (delta: -939.9 MB). There was no memory consumed. Max. memory is 11.5 GB. * Witness Printer took 194.63 ms. Allocated memory is still 1.9 GB. Free memory was 1.9 GB in the beginning and 1.8 GB in the end (delta: 20.7 MB). Peak memory consumption was 20.7 MB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - PositiveResult [Line: 830]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 830]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 830]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - AllSpecificationsHoldResult: All specifications hold 3 specifications checked. All of them hold - InvariantResult [Line: 86]: Loop Invariant Derived loop invariant: ((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 2 == waterLevel) && 0 == pumpRunning - InvariantResult [Line: 141]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 86]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 141]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 141]: Loop Invariant Derived loop invariant: (((((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 1 == \result) && 1 <= switchedOnBeforeTS) && 1 == waterLevel) && 1 == pumpRunning) || (((((((((1 == tmp && 0 == splverifierCounter) && !(0 == \result)) && 1 == \result) && !(0 == systemActive)) && 0 <= waterLevel) && 1 == \result) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 1 == pumpRunning) - InvariantResult [Line: 163]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 836]: Loop Invariant Derived loop invariant: (((0 == pumpRunning && \result == systemActive) && 1 == waterLevel) && tmp == systemActive) && 1 == systemActive - InvariantResult [Line: 361]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 233]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 86]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 233]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 86]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 233]: Loop Invariant Derived loop invariant: ((((((((((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 <= waterLevel) && 1 == \result) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 1 == pumpRunning) || (((((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 1 == \result) && 1 <= switchedOnBeforeTS) && 1 == waterLevel) && 1 == pumpRunning)) || (((((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && 0 == systemActive) && waterLevel <= 2) && 0 == \result) && (2 <= waterLevel || !(2 == tmp))) && 0 == pumpRunning)) || (((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && 0 == \result) && 0 == pumpRunning) && 1 == waterLevel)) || (((((1 == tmp && 0 == splverifierCounter) && !(0 == systemActive)) && 1 == \result) && 2 == waterLevel) && 0 == pumpRunning)) || (((((1 == tmp && 0 == splverifierCounter) && !(0 == systemActive)) && 1 == \result) && 0 == pumpRunning) && 1 == waterLevel) - InvariantResult [Line: 86]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 86]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 939]: Loop Invariant Derived loop invariant: (((0 == pumpRunning && \result == systemActive) && 1 == waterLevel) && tmp == systemActive) && 1 == systemActive - InvariantResult [Line: 406]: Loop Invariant Derived loop invariant: ((((((((1 == tmp && !(0 == tmp)) && 0 == tmp___0) && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == \result) && 0 == pumpRunning) && 1 == waterLevel) || (((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 2 == waterLevel) && 0 == pumpRunning) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (0 == pumpRunning && 1 == waterLevel) && 1 == systemActive - InvariantResult [Line: 127]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 361]: Loop Invariant Derived loop invariant: ((((((((((((((((1 == tmp && !(0 == tmp)) && \result == waterLevel) && 0 == splverifierCounter) && !(0 == \result)) && 1 == \result) && !(0 == systemActive)) && 0 <= waterLevel) && waterLevel <= 2) && (2 <= waterLevel || !(2 == tmp))) && 1 == \result) && 1 == pumpRunning) || (((((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && 0 == systemActive) && waterLevel <= 2) && 0 == \result) && (2 <= waterLevel || !(2 == tmp))) && 0 == pumpRunning)) || (((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && 0 == \result) && 0 == pumpRunning) && 1 == waterLevel)) || ((((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 1 == \result) && 2 == waterLevel) && 1 == pumpRunning)) || ((((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == \result) && 0 == pumpRunning) && 2 == waterLevel)) || (((((((((((0 == tmp && 1 == tmp) && \result == waterLevel) && tmp <= 1) && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 1 == \result) && 1 <= switchedOnBeforeTS) && 1 == waterLevel) && 1 == tmp___0) && 1 == pumpRunning)) || ((((((((((1 == tmp && !(0 == tmp)) && 0 == splverifierCounter) && !(0 == \result)) && 1 == \result) && !(0 == systemActive)) && waterLevel <= 2) && (2 <= waterLevel || !(2 == tmp))) && 1 == \result) && 1 == waterLevel) && 1 == pumpRunning) - InvariantResult [Line: 406]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 127]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 361]: Loop Invariant Derived loop invariant: ((((((((((((0 == tmp && 1 == tmp) && tmp <= 1) && 0 == splverifierCounter) && \result == waterLevel) && 1 == \result) && !(0 == systemActive)) && 1 == \result) && 1 <= switchedOnBeforeTS) && 1 == waterLevel) && 1 == pumpRunning) || (((((((((((((0 == tmp && 1 == tmp) && 1 == \result) && !(0 == systemActive)) && 1 <= switchedOnBeforeTS) && \result <= 1) && !(0 == tmp)) && \result == waterLevel) && tmp <= 1) && 0 == splverifierCounter) && !(0 == \result)) && 0 <= waterLevel) && 1 == \result) && 1 == pumpRunning)) || ((((((((1 == tmp && 0 == splverifierCounter) && \result == waterLevel) && 1 == \result) && 0 == systemActive) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && !(2 == tmp))) || ((((((((1 == tmp && \result == waterLevel) && tmp <= 1) && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == \result) && 0 == pumpRunning) && 1 == waterLevel) - InvariantResult [Line: 406]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 361]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 127]: Loop Invariant Derived loop invariant: (((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 2 == waterLevel) && 0 == pumpRunning) || ((((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && 1 == waterLevel) && !(0 == \result)) - InvariantResult [Line: 406]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 361]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 127]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 406]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 361]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 970]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 127]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 406]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 127]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 425]: Loop Invariant Derived loop invariant: (((((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 1 == \result) && 1 <= switchedOnBeforeTS) && 1 == waterLevel) && 1 == pumpRunning) || ((((((((((((1 == tmp && 0 == tmp___0) && 1 == \result) && !(0 == systemActive)) && 0 == \result) && 1 <= switchedOnBeforeTS) && !(0 == tmp)) && 0 == splverifierCounter) && !(0 == \result)) && 0 <= waterLevel) && 1 == \result) && waterLevel <= 0) && 1 == pumpRunning) - InvariantResult [Line: 425]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 425]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1009]: Loop Invariant Derived loop invariant: ((0 == pumpRunning && \result == systemActive) && 1 == waterLevel) && 1 == systemActive - InvariantResult [Line: 184]: Loop Invariant Derived loop invariant: ((((((((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 2 == waterLevel) && 1 == pumpRunning) || (((((((((((((0 == tmp && 1 == tmp) && 1 == \result) && !(0 == systemActive)) && \result <= 1) && !(0 == tmp)) && \result == waterLevel) && 0 == splverifierCounter) && tmp <= 1) && !(0 == \result)) && 0 <= waterLevel) && 1 == \result) && 1 == tmp___0) && 1 == pumpRunning)) || (((((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && 0 == systemActive) && waterLevel <= 2) && (2 <= waterLevel || !(2 == tmp))) && 0 == \result) && 0 == pumpRunning)) || (((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && 1 == waterLevel)) || ((((((((1 == tmp && !(0 == tmp)) && 0 == splverifierCounter) && !(0 == \result)) && 1 == \result) && !(0 == systemActive)) && (2 <= waterLevel || !(2 == tmp))) && 1 == waterLevel) && 1 == pumpRunning)) || (((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && 2 == waterLevel)) || (((((((((((0 == tmp && 1 == tmp) && \result == waterLevel) && tmp <= 1) && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 1 == \result) && 1 <= switchedOnBeforeTS) && 1 == waterLevel) && 1 == tmp___0) && 1 == pumpRunning) - InvariantResult [Line: 350]: Loop Invariant Derived loop invariant: ((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 2 == waterLevel) && 0 == pumpRunning - InvariantResult [Line: 118]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 350]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 118]: Loop Invariant Derived loop invariant: ((((((((((((((((0 == tmp && 1 == tmp) && !(0 == systemActive)) && 1 == \result) && 1 <= switchedOnBeforeTS) && \result <= 1) && !(0 == tmp)) && \result == waterLevel) && 0 == splverifierCounter) && !(0 == \result)) && 0 <= waterLevel) && 1 == \result) && 1 == pumpRunning) || ((((((1 == tmp && 0 == splverifierCounter) && \result == waterLevel) && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && 2 == \result)) || ((((((1 == tmp && 0 == splverifierCounter) && !(0 == systemActive)) && 1 == \result) && 2 == waterLevel) && 2 == \result) && 1 == pumpRunning)) || ((((((1 == tmp && 0 == splverifierCounter) && \result == waterLevel) && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && 1 == waterLevel)) || (((((((1 == tmp && 0 == splverifierCounter) && \result == waterLevel) && 1 == \result) && 0 == systemActive) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning)) || ((((((((((0 == tmp && 1 == tmp) && \result == waterLevel) && 0 == splverifierCounter) && !(0 == systemActive)) && 1 == \result) && 1 == \result) && 1 <= switchedOnBeforeTS) && 1 == waterLevel) && 1 == pumpRunning) && \result <= 1) - InvariantResult [Line: 350]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 200]: Loop Invariant Derived loop invariant: ((((((((((((((1 == tmp && 0 == splverifierCounter) && !(0 == tmp)) && !(0 == \result)) && 1 == \result) && !(0 == systemActive)) && waterLevel <= 2) && (2 <= waterLevel || !(2 == tmp))) && 1 == waterLevel) && 1 == pumpRunning) || (((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 2 == waterLevel) && 1 == pumpRunning)) || ((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && 0 == pumpRunning) && 1 == waterLevel)) || (((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && 2 == waterLevel)) || ((((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && 0 == systemActive) && waterLevel <= 2) && (2 <= waterLevel || !(2 == tmp))) && 0 == pumpRunning)) || (((((((((((0 == tmp && 1 == tmp) && \result == waterLevel) && tmp <= 1) && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 1 == \result) && 1 <= switchedOnBeforeTS) && 1 == waterLevel) && 1 == tmp___0) && 1 == pumpRunning)) || ((((((((((1 == tmp && !(0 == tmp)) && \result == waterLevel) && 0 == splverifierCounter) && !(0 == \result)) && 1 == \result) && !(0 == systemActive)) && 0 <= waterLevel) && waterLevel <= 2) && (2 <= waterLevel || !(2 == tmp))) && 1 == pumpRunning) - InvariantResult [Line: 244]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 350]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 244]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 350]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 448]: Loop Invariant Derived loop invariant: ((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && 0 == pumpRunning) && 1 == waterLevel) || (((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && waterLevel <= 2) && (2 <= waterLevel || !(2 == tmp))) && 0 == pumpRunning) - InvariantResult [Line: 244]: Loop Invariant Derived loop invariant: ((((((((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 2 == waterLevel) && 1 == pumpRunning) || (((((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && 0 == systemActive) && waterLevel <= 2) && 0 == \result) && (2 <= waterLevel || !(2 == tmp))) && 0 == pumpRunning)) || (((((1 == tmp && 0 == splverifierCounter) && !(0 == systemActive)) && 1 == \result) && 2 == waterLevel) && 0 == pumpRunning)) || (((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && 0 == \result) && 0 == pumpRunning) && 1 == waterLevel)) || (((((((((((0 == tmp && 1 == tmp) && !(0 == tmp)) && 0 == splverifierCounter) && !(0 == \result)) && 1 == \result) && !(0 == systemActive)) && 0 <= waterLevel) && 1 == \result) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && 1 == pumpRunning)) || (((((1 == tmp && 0 == splverifierCounter) && !(0 == systemActive)) && 1 == \result) && 0 == pumpRunning) && 1 == waterLevel)) || ((((((((0 == tmp && 1 == tmp) && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 1 == \result) && 1 <= switchedOnBeforeTS) && 1 == waterLevel) && 1 == pumpRunning) - InvariantResult [Line: 960]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 237]: Loop Invariant Derived loop invariant: ((((((((((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && 0 == systemActive) && waterLevel <= 2) && 0 == \result) && (2 <= waterLevel || !(2 == tmp))) && 0 == pumpRunning) || (((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && 0 == \result) && 0 == pumpRunning) && 1 == waterLevel)) || ((((((((((((1 == tmp && 1 == \result) && !(0 == systemActive)) && (2 <= waterLevel || !(2 == tmp))) && 1 <= switchedOnBeforeTS) && !(0 == tmp)) && \result == waterLevel) && 0 == splverifierCounter) && !(0 == \result)) && 0 <= waterLevel) && waterLevel <= 2) && 1 == \result) && 1 == pumpRunning)) || (((((((((((1 == tmp && !(0 == tmp)) && 0 == splverifierCounter) && !(0 == \result)) && 1 == \result) && !(0 == systemActive)) && waterLevel <= 2) && 1 == \result) && (2 <= waterLevel || !(2 == tmp))) && 1 <= switchedOnBeforeTS) && 1 == waterLevel) && 1 == pumpRunning)) || (((((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 1 == \result) && 2 == waterLevel) && 1 <= switchedOnBeforeTS) && 1 == pumpRunning)) || ((((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == \result) && 0 == pumpRunning) && 2 == waterLevel)) || (((((((((((0 == tmp && 1 == tmp) && \result == waterLevel) && tmp <= 1) && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 1 == \result) && 1 <= switchedOnBeforeTS) && 1 == waterLevel) && 1 == tmp___0) && 1 == pumpRunning) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((((((((1 == tmp && \result == waterLevel) && 0 == splverifierCounter) && 1 == \result) && 0 == systemActive) && waterLevel <= 2) && 0 == \result) && (2 <= waterLevel || !(2 == tmp))) && 0 == pumpRunning) || (((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && 1 == waterLevel)) || (((((((((((((0 == tmp && 1 == tmp) && 1 == \result) && !(0 == systemActive)) && !(0 == tmp)) && \result == waterLevel) && 0 == splverifierCounter) && tmp <= 1) && !(0 == \result)) && 0 <= waterLevel) && 1 == \result) && waterLevel <= 0) && 1 == tmp___0) && 1 == pumpRunning)) || (((((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 2 == waterLevel) && 2 == tmp) && 2 == \result) && 1 == pumpRunning)) || (((((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && 2 == waterLevel) && 2 == tmp) && 2 == \result)) || (((((((((((0 == tmp && 1 == tmp) && \result == waterLevel) && tmp <= 1) && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 1 == \result) && 1 <= switchedOnBeforeTS) && 1 == waterLevel) && 1 == tmp___0) && 1 == pumpRunning) - InvariantResult [Line: 895]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 237]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 237]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 174]: Loop Invariant Derived loop invariant: ((((((((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 2 == waterLevel) && 1 == pumpRunning) || (((((((((((((0 == tmp && 1 == tmp) && 1 == \result) && !(0 == systemActive)) && \result <= 1) && !(0 == tmp)) && \result == waterLevel) && 0 == splverifierCounter) && tmp <= 1) && !(0 == \result)) && 0 <= waterLevel) && 1 == \result) && 1 == tmp___0) && 1 == pumpRunning)) || (((((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && 0 == systemActive) && waterLevel <= 2) && (2 <= waterLevel || !(2 == tmp))) && 0 == \result) && 0 == pumpRunning)) || (((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && 1 == waterLevel)) || ((((((((1 == tmp && !(0 == tmp)) && 0 == splverifierCounter) && !(0 == \result)) && 1 == \result) && !(0 == systemActive)) && (2 <= waterLevel || !(2 == tmp))) && 1 == waterLevel) && 1 == pumpRunning)) || (((((1 == tmp && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && 2 == waterLevel)) || (((((((((((0 == tmp && 1 == tmp) && \result == waterLevel) && tmp <= 1) && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 1 == \result) && 1 <= switchedOnBeforeTS) && 1 == waterLevel) && 1 == tmp___0) && 1 == pumpRunning) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 350]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 118]: Loop Invariant Derived loop invariant: 0 - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 146 locations, 3 error locations. Started 1 CEGAR loops. VerificationResult: SAFE, OverallTime: 53.1s, OverallIterations: 17, TraceHistogramMax: 5, AutomataDifference: 35.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 19.8s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 2054 SDtfs, 3789 SDslu, 4307 SDs, 0 SdLazy, 687 SolverSat, 166 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 1.4s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 580 GetRequests, 466 SyntacticMatches, 2 SemanticMatches, 112 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 158 ImplicationChecksByTransitivity, 1.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=453occurred in iteration=15, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 10.6s AutomataMinimizationTime, 17 MinimizatonAttempts, 2125 StatesRemovedByMinimization, 12 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 63 LocationsWithAnnotation, 63 PreInvPairs, 253 NumberOfFragments, 2307 HoareAnnotationTreeSize, 63 FomulaSimplifications, 8408410 FormulaSimplificationTreeSizeReduction, 2.8s HoareSimplificationTime, 63 FomulaSimplificationsInter, 4229075 FormulaSimplificationTreeSizeReductionInter, 16.8s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.9s SatisfiabilityAnalysisTime, 3.2s InterpolantComputationTime, 1622 NumberOfCodeBlocks, 1622 NumberOfCodeBlocksAsserted, 21 NumberOfCheckSat, 1601 ConstructedInterpolants, 0 QuantifiedInterpolants, 326342 SizeOfPredicates, 13 NumberOfNonLiveVariables, 2314 ConjunctsInSsa, 30 ConjunctsInUnsatCore, 21 InterpolantComputations, 13 PerfectInterpolantSequences, 1437/1517 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be correct! Received shutdown request...