./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec1_product45.cil.c --full-output -ea --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 03d7b7b3 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -ea -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec1_product45.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 9a8ef44eebf77bb9089ba7256f54c924b643d97224560b14ff4a2b7df3dcc9e0 --- Real Ultimate output --- This is Ultimate 0.2.2-dev-03d7b7b [2022-02-20 18:06:28,672 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-02-20 18:06:28,674 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-02-20 18:06:28,693 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-02-20 18:06:28,694 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-02-20 18:06:28,696 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-02-20 18:06:28,698 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-02-20 18:06:28,701 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-02-20 18:06:28,703 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-02-20 18:06:28,704 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-02-20 18:06:28,704 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-02-20 18:06:28,706 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-02-20 18:06:28,707 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-02-20 18:06:28,710 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-02-20 18:06:28,712 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-02-20 18:06:28,713 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-02-20 18:06:28,715 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-02-20 18:06:28,716 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-02-20 18:06:28,717 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-02-20 18:06:28,720 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-02-20 18:06:28,723 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-02-20 18:06:28,724 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-02-20 18:06:28,724 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-02-20 18:06:28,725 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-02-20 18:06:28,727 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-02-20 18:06:28,729 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-02-20 18:06:28,730 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-02-20 18:06:28,730 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-02-20 18:06:28,731 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-02-20 18:06:28,732 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-02-20 18:06:28,732 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-02-20 18:06:28,733 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-02-20 18:06:28,733 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-02-20 18:06:28,734 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-02-20 18:06:28,735 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-02-20 18:06:28,736 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-02-20 18:06:28,737 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-02-20 18:06:28,737 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-02-20 18:06:28,737 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-02-20 18:06:28,738 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-02-20 18:06:28,738 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-02-20 18:06:28,739 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-02-20 18:06:28,758 INFO L113 SettingsManager]: Loading preferences was successful [2022-02-20 18:06:28,761 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-02-20 18:06:28,762 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-02-20 18:06:28,762 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-02-20 18:06:28,763 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-02-20 18:06:28,763 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-02-20 18:06:28,763 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-02-20 18:06:28,763 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-02-20 18:06:28,764 INFO L138 SettingsManager]: * Use SBE=true [2022-02-20 18:06:28,764 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-02-20 18:06:28,764 INFO L138 SettingsManager]: * sizeof long=4 [2022-02-20 18:06:28,765 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-02-20 18:06:28,765 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-02-20 18:06:28,765 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-02-20 18:06:28,765 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-02-20 18:06:28,765 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-02-20 18:06:28,765 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-02-20 18:06:28,765 INFO L138 SettingsManager]: * sizeof long double=12 [2022-02-20 18:06:28,766 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-02-20 18:06:28,766 INFO L138 SettingsManager]: * Use constant arrays=true [2022-02-20 18:06:28,766 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-02-20 18:06:28,766 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-02-20 18:06:28,766 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-02-20 18:06:28,766 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-02-20 18:06:28,766 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-02-20 18:06:28,767 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-02-20 18:06:28,767 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-02-20 18:06:28,768 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-02-20 18:06:28,768 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-02-20 18:06:28,768 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-02-20 18:06:28,768 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2022-02-20 18:06:28,768 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-02-20 18:06:28,768 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-02-20 18:06:28,769 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 9a8ef44eebf77bb9089ba7256f54c924b643d97224560b14ff4a2b7df3dcc9e0 [2022-02-20 18:06:28,982 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-02-20 18:06:29,003 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-02-20 18:06:29,004 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-02-20 18:06:29,005 INFO L271 PluginConnector]: Initializing CDTParser... [2022-02-20 18:06:29,006 INFO L275 PluginConnector]: CDTParser initialized [2022-02-20 18:06:29,006 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec1_product45.cil.c [2022-02-20 18:06:29,069 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/36f082b50/a03fa1427614466d93be26e81e822db3/FLAG51cd36138 [2022-02-20 18:06:29,461 INFO L306 CDTParser]: Found 1 translation units. [2022-02-20 18:06:29,462 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec1_product45.cil.c [2022-02-20 18:06:29,474 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/36f082b50/a03fa1427614466d93be26e81e822db3/FLAG51cd36138 [2022-02-20 18:06:29,485 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/36f082b50/a03fa1427614466d93be26e81e822db3 [2022-02-20 18:06:29,486 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-02-20 18:06:29,487 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-02-20 18:06:29,488 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-02-20 18:06:29,489 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-02-20 18:06:29,515 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-02-20 18:06:29,517 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.02 06:06:29" (1/1) ... [2022-02-20 18:06:29,518 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@157c6a16 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:06:29, skipping insertion in model container [2022-02-20 18:06:29,518 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.02 06:06:29" (1/1) ... [2022-02-20 18:06:29,523 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-02-20 18:06:29,579 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-02-20 18:06:29,707 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec1_product45.cil.c[3064,3077] [2022-02-20 18:06:29,778 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-02-20 18:06:29,785 INFO L203 MainTranslator]: Completed pre-run [2022-02-20 18:06:29,821 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec1_product45.cil.c[3064,3077] [2022-02-20 18:06:29,879 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-02-20 18:06:29,900 INFO L208 MainTranslator]: Completed translation [2022-02-20 18:06:29,902 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:06:29 WrapperNode [2022-02-20 18:06:29,902 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-02-20 18:06:29,903 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-02-20 18:06:29,903 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-02-20 18:06:29,904 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-02-20 18:06:29,909 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:06:29" (1/1) ... [2022-02-20 18:06:29,922 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:06:29" (1/1) ... [2022-02-20 18:06:29,961 INFO L137 Inliner]: procedures = 54, calls = 155, calls flagged for inlining = 21, calls inlined = 18, statements flattened = 238 [2022-02-20 18:06:29,965 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-02-20 18:06:29,966 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-02-20 18:06:29,966 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-02-20 18:06:29,966 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-02-20 18:06:29,972 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:06:29" (1/1) ... [2022-02-20 18:06:29,972 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:06:29" (1/1) ... [2022-02-20 18:06:29,983 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:06:29" (1/1) ... [2022-02-20 18:06:29,987 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:06:29" (1/1) ... [2022-02-20 18:06:29,992 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:06:29" (1/1) ... [2022-02-20 18:06:30,002 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:06:29" (1/1) ... [2022-02-20 18:06:30,006 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:06:29" (1/1) ... [2022-02-20 18:06:30,010 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-02-20 18:06:30,011 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-02-20 18:06:30,011 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-02-20 18:06:30,011 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-02-20 18:06:30,012 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:06:29" (1/1) ... [2022-02-20 18:06:30,018 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-02-20 18:06:30,026 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-20 18:06:30,084 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-02-20 18:06:30,092 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-02-20 18:06:30,120 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-02-20 18:06:30,120 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-02-20 18:06:30,120 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-02-20 18:06:30,120 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-02-20 18:06:30,120 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-02-20 18:06:30,121 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-02-20 18:06:30,121 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-02-20 18:06:30,121 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-02-20 18:06:30,121 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-02-20 18:06:30,121 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-02-20 18:06:30,121 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-02-20 18:06:30,121 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2022-02-20 18:06:30,121 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2022-02-20 18:06:30,122 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2022-02-20 18:06:30,122 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2022-02-20 18:06:30,122 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-02-20 18:06:30,122 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-02-20 18:06:30,122 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-02-20 18:06:30,122 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-02-20 18:06:30,122 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-02-20 18:06:30,188 INFO L234 CfgBuilder]: Building ICFG [2022-02-20 18:06:30,189 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-02-20 18:06:30,549 INFO L275 CfgBuilder]: Performing block encoding [2022-02-20 18:06:30,555 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-02-20 18:06:30,560 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-02-20 18:06:30,562 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.02 06:06:30 BoogieIcfgContainer [2022-02-20 18:06:30,562 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-02-20 18:06:30,564 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-02-20 18:06:30,564 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-02-20 18:06:30,566 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-02-20 18:06:30,567 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 20.02 06:06:29" (1/3) ... [2022-02-20 18:06:30,567 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@27b5e76f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.02 06:06:30, skipping insertion in model container [2022-02-20 18:06:30,567 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:06:29" (2/3) ... [2022-02-20 18:06:30,568 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@27b5e76f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.02 06:06:30, skipping insertion in model container [2022-02-20 18:06:30,568 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.02 06:06:30" (3/3) ... [2022-02-20 18:06:30,569 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec1_product45.cil.c [2022-02-20 18:06:30,572 INFO L205 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-02-20 18:06:30,573 INFO L164 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-02-20 18:06:30,616 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-02-20 18:06:30,622 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2022-02-20 18:06:30,622 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-02-20 18:06:30,644 INFO L276 IsEmpty]: Start isEmpty. Operand has 93 states, 69 states have (on average 1.3768115942028984) internal successors, (95), 77 states have internal predecessors, (95), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 12 states have call predecessors, (14), 14 states have call successors, (14) [2022-02-20 18:06:30,649 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2022-02-20 18:06:30,650 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:06:30,650 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:06:30,651 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:06:30,654 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:06:30,655 INFO L85 PathProgramCache]: Analyzing trace with hash 775812870, now seen corresponding path program 1 times [2022-02-20 18:06:30,661 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:06:30,661 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [499646540] [2022-02-20 18:06:30,661 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:06:30,662 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:06:30,741 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:06:30,788 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-02-20 18:06:30,790 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:06:30,797 INFO L290 TraceCheckUtils]: 0: Hoare triple {96#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {96#true} is VALID [2022-02-20 18:06:30,797 INFO L290 TraceCheckUtils]: 1: Hoare triple {96#true} assume true; {96#true} is VALID [2022-02-20 18:06:30,798 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {96#true} {97#false} #237#return; {97#false} is VALID [2022-02-20 18:06:30,799 INFO L290 TraceCheckUtils]: 0: Hoare triple {96#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(30, 9);call #Ultimate.allocInit(9, 10);call #Ultimate.allocInit(21, 11);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(25, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {96#true} is VALID [2022-02-20 18:06:30,799 INFO L290 TraceCheckUtils]: 1: Hoare triple {96#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret11#1, main_~retValue_acc~3#1, main_~tmp~1#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~1#1;assume { :begin_inline_select_helpers } true; {96#true} is VALID [2022-02-20 18:06:30,799 INFO L290 TraceCheckUtils]: 2: Hoare triple {96#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {96#true} is VALID [2022-02-20 18:06:30,800 INFO L290 TraceCheckUtils]: 3: Hoare triple {96#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~5#1;havoc valid_product_~retValue_acc~5#1;valid_product_~retValue_acc~5#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~5#1; {96#true} is VALID [2022-02-20 18:06:30,800 INFO L290 TraceCheckUtils]: 4: Hoare triple {96#true} main_#t~ret11#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret11#1 && main_#t~ret11#1 <= 2147483647;main_~tmp~1#1 := main_#t~ret11#1;havoc main_#t~ret11#1; {96#true} is VALID [2022-02-20 18:06:30,800 INFO L290 TraceCheckUtils]: 5: Hoare triple {96#true} assume 0 != main_~tmp~1#1;assume { :begin_inline_setup } true; {96#true} is VALID [2022-02-20 18:06:30,800 INFO L290 TraceCheckUtils]: 6: Hoare triple {96#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet36#1, test_#t~nondet37#1, test_#t~nondet38#1, test_#t~nondet39#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {96#true} is VALID [2022-02-20 18:06:30,801 INFO L290 TraceCheckUtils]: 7: Hoare triple {96#true} assume !true; {97#false} is VALID [2022-02-20 18:06:30,801 INFO L272 TraceCheckUtils]: 8: Hoare triple {97#false} call cleanup(); {97#false} is VALID [2022-02-20 18:06:30,802 INFO L290 TraceCheckUtils]: 9: Hoare triple {97#false} havoc ~i~0;havoc ~__cil_tmp2~0; {97#false} is VALID [2022-02-20 18:06:30,802 INFO L272 TraceCheckUtils]: 10: Hoare triple {97#false} call timeShift(); {97#false} is VALID [2022-02-20 18:06:30,802 INFO L290 TraceCheckUtils]: 11: Hoare triple {97#false} assume !(0 != ~pumpRunning~0); {97#false} is VALID [2022-02-20 18:06:30,802 INFO L290 TraceCheckUtils]: 12: Hoare triple {97#false} assume !(0 != ~systemActive~0); {97#false} is VALID [2022-02-20 18:06:30,803 INFO L290 TraceCheckUtils]: 13: Hoare triple {97#false} assume { :begin_inline___utac_acc__Specification1_spec__1 } true;havoc __utac_acc__Specification1_spec__1_#t~ret9#1, __utac_acc__Specification1_spec__1_#t~ret10#1, __utac_acc__Specification1_spec__1_~tmp~0#1, __utac_acc__Specification1_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__1_~tmp~0#1;havoc __utac_acc__Specification1_spec__1_~tmp___0~0#1; {97#false} is VALID [2022-02-20 18:06:30,803 INFO L272 TraceCheckUtils]: 14: Hoare triple {97#false} call __utac_acc__Specification1_spec__1_#t~ret9#1 := isMethaneLevelCritical(); {96#true} is VALID [2022-02-20 18:06:30,803 INFO L290 TraceCheckUtils]: 15: Hoare triple {96#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {96#true} is VALID [2022-02-20 18:06:30,803 INFO L290 TraceCheckUtils]: 16: Hoare triple {96#true} assume true; {96#true} is VALID [2022-02-20 18:06:30,803 INFO L284 TraceCheckUtils]: 17: Hoare quadruple {96#true} {97#false} #237#return; {97#false} is VALID [2022-02-20 18:06:30,804 INFO L290 TraceCheckUtils]: 18: Hoare triple {97#false} assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret9#1 && __utac_acc__Specification1_spec__1_#t~ret9#1 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp~0#1 := __utac_acc__Specification1_spec__1_#t~ret9#1;havoc __utac_acc__Specification1_spec__1_#t~ret9#1; {97#false} is VALID [2022-02-20 18:06:30,804 INFO L290 TraceCheckUtils]: 19: Hoare triple {97#false} assume 0 != __utac_acc__Specification1_spec__1_~tmp~0#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~10#1;havoc isPumpRunning_~retValue_acc~10#1;isPumpRunning_~retValue_acc~10#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~10#1; {97#false} is VALID [2022-02-20 18:06:30,804 INFO L290 TraceCheckUtils]: 20: Hoare triple {97#false} __utac_acc__Specification1_spec__1_#t~ret10#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret10#1 && __utac_acc__Specification1_spec__1_#t~ret10#1 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp___0~0#1 := __utac_acc__Specification1_spec__1_#t~ret10#1;havoc __utac_acc__Specification1_spec__1_#t~ret10#1; {97#false} is VALID [2022-02-20 18:06:30,804 INFO L290 TraceCheckUtils]: 21: Hoare triple {97#false} assume 0 != __utac_acc__Specification1_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {97#false} is VALID [2022-02-20 18:06:30,805 INFO L290 TraceCheckUtils]: 22: Hoare triple {97#false} assume !false; {97#false} is VALID [2022-02-20 18:06:30,805 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:06:30,805 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:06:30,806 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [499646540] [2022-02-20 18:06:30,806 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [499646540] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:06:30,806 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:06:30,807 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-02-20 18:06:30,808 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1456594163] [2022-02-20 18:06:30,808 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:06:30,812 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 23 [2022-02-20 18:06:30,813 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:06:30,815 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:06:30,836 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 23 edges. 23 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:06:30,836 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-02-20 18:06:30,836 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:06:30,849 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-02-20 18:06:30,851 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-02-20 18:06:30,853 INFO L87 Difference]: Start difference. First operand has 93 states, 69 states have (on average 1.3768115942028984) internal successors, (95), 77 states have internal predecessors, (95), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 12 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:06:30,927 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:06:30,928 INFO L93 Difference]: Finished difference Result 178 states and 241 transitions. [2022-02-20 18:06:30,928 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-02-20 18:06:30,928 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 23 [2022-02-20 18:06:30,928 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:06:30,929 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:06:30,939 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 241 transitions. [2022-02-20 18:06:30,939 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:06:30,945 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 241 transitions. [2022-02-20 18:06:30,945 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states and 241 transitions. [2022-02-20 18:06:31,115 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 241 edges. 241 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:06:31,135 INFO L225 Difference]: With dead ends: 178 [2022-02-20 18:06:31,135 INFO L226 Difference]: Without dead ends: 84 [2022-02-20 18:06:31,138 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-02-20 18:06:31,142 INFO L933 BasicCegarLoop]: 117 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 117 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:06:31,143 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 117 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:06:31,155 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 84 states. [2022-02-20 18:06:31,177 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 84 to 84. [2022-02-20 18:06:31,178 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:06:31,182 INFO L82 GeneralOperation]: Start isEquivalent. First operand 84 states. Second operand has 84 states, 62 states have (on average 1.3064516129032258) internal successors, (81), 69 states have internal predecessors, (81), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 11 states have call predecessors, (13), 13 states have call successors, (13) [2022-02-20 18:06:31,185 INFO L74 IsIncluded]: Start isIncluded. First operand 84 states. Second operand has 84 states, 62 states have (on average 1.3064516129032258) internal successors, (81), 69 states have internal predecessors, (81), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 11 states have call predecessors, (13), 13 states have call successors, (13) [2022-02-20 18:06:31,186 INFO L87 Difference]: Start difference. First operand 84 states. Second operand has 84 states, 62 states have (on average 1.3064516129032258) internal successors, (81), 69 states have internal predecessors, (81), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 11 states have call predecessors, (13), 13 states have call successors, (13) [2022-02-20 18:06:31,203 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:06:31,204 INFO L93 Difference]: Finished difference Result 84 states and 108 transitions. [2022-02-20 18:06:31,204 INFO L276 IsEmpty]: Start isEmpty. Operand 84 states and 108 transitions. [2022-02-20 18:06:31,205 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:06:31,205 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:06:31,206 INFO L74 IsIncluded]: Start isIncluded. First operand has 84 states, 62 states have (on average 1.3064516129032258) internal successors, (81), 69 states have internal predecessors, (81), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 11 states have call predecessors, (13), 13 states have call successors, (13) Second operand 84 states. [2022-02-20 18:06:31,208 INFO L87 Difference]: Start difference. First operand has 84 states, 62 states have (on average 1.3064516129032258) internal successors, (81), 69 states have internal predecessors, (81), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 11 states have call predecessors, (13), 13 states have call successors, (13) Second operand 84 states. [2022-02-20 18:06:31,215 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:06:31,216 INFO L93 Difference]: Finished difference Result 84 states and 108 transitions. [2022-02-20 18:06:31,216 INFO L276 IsEmpty]: Start isEmpty. Operand 84 states and 108 transitions. [2022-02-20 18:06:31,217 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:06:31,217 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:06:31,218 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:06:31,218 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:06:31,219 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 84 states, 62 states have (on average 1.3064516129032258) internal successors, (81), 69 states have internal predecessors, (81), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 11 states have call predecessors, (13), 13 states have call successors, (13) [2022-02-20 18:06:31,222 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 84 states to 84 states and 108 transitions. [2022-02-20 18:06:31,223 INFO L78 Accepts]: Start accepts. Automaton has 84 states and 108 transitions. Word has length 23 [2022-02-20 18:06:31,224 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:06:31,234 INFO L470 AbstractCegarLoop]: Abstraction has 84 states and 108 transitions. [2022-02-20 18:06:31,234 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:06:31,235 INFO L276 IsEmpty]: Start isEmpty. Operand 84 states and 108 transitions. [2022-02-20 18:06:31,236 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2022-02-20 18:06:31,236 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:06:31,236 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:06:31,236 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-02-20 18:06:31,237 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:06:31,237 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:06:31,237 INFO L85 PathProgramCache]: Analyzing trace with hash 1120816717, now seen corresponding path program 1 times [2022-02-20 18:06:31,237 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:06:31,238 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1431526039] [2022-02-20 18:06:31,238 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:06:31,238 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:06:31,281 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:06:31,314 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-02-20 18:06:31,317 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:06:31,324 INFO L290 TraceCheckUtils]: 0: Hoare triple {649#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {649#true} is VALID [2022-02-20 18:06:31,325 INFO L290 TraceCheckUtils]: 1: Hoare triple {649#true} assume true; {649#true} is VALID [2022-02-20 18:06:31,325 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {649#true} {650#false} #237#return; {650#false} is VALID [2022-02-20 18:06:31,325 INFO L290 TraceCheckUtils]: 0: Hoare triple {649#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(30, 9);call #Ultimate.allocInit(9, 10);call #Ultimate.allocInit(21, 11);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(25, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {649#true} is VALID [2022-02-20 18:06:31,325 INFO L290 TraceCheckUtils]: 1: Hoare triple {649#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret11#1, main_~retValue_acc~3#1, main_~tmp~1#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~1#1;assume { :begin_inline_select_helpers } true; {649#true} is VALID [2022-02-20 18:06:31,326 INFO L290 TraceCheckUtils]: 2: Hoare triple {649#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {649#true} is VALID [2022-02-20 18:06:31,326 INFO L290 TraceCheckUtils]: 3: Hoare triple {649#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~5#1;havoc valid_product_~retValue_acc~5#1;valid_product_~retValue_acc~5#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~5#1; {649#true} is VALID [2022-02-20 18:06:31,326 INFO L290 TraceCheckUtils]: 4: Hoare triple {649#true} main_#t~ret11#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret11#1 && main_#t~ret11#1 <= 2147483647;main_~tmp~1#1 := main_#t~ret11#1;havoc main_#t~ret11#1; {649#true} is VALID [2022-02-20 18:06:31,326 INFO L290 TraceCheckUtils]: 5: Hoare triple {649#true} assume 0 != main_~tmp~1#1;assume { :begin_inline_setup } true; {649#true} is VALID [2022-02-20 18:06:31,327 INFO L290 TraceCheckUtils]: 6: Hoare triple {649#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet36#1, test_#t~nondet37#1, test_#t~nondet38#1, test_#t~nondet39#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {651#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} is VALID [2022-02-20 18:06:31,328 INFO L290 TraceCheckUtils]: 7: Hoare triple {651#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} assume !false; {651#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} is VALID [2022-02-20 18:06:31,328 INFO L290 TraceCheckUtils]: 8: Hoare triple {651#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} assume !(test_~splverifierCounter~0#1 < 4); {650#false} is VALID [2022-02-20 18:06:31,328 INFO L272 TraceCheckUtils]: 9: Hoare triple {650#false} call cleanup(); {650#false} is VALID [2022-02-20 18:06:31,328 INFO L290 TraceCheckUtils]: 10: Hoare triple {650#false} havoc ~i~0;havoc ~__cil_tmp2~0; {650#false} is VALID [2022-02-20 18:06:31,329 INFO L272 TraceCheckUtils]: 11: Hoare triple {650#false} call timeShift(); {650#false} is VALID [2022-02-20 18:06:31,329 INFO L290 TraceCheckUtils]: 12: Hoare triple {650#false} assume !(0 != ~pumpRunning~0); {650#false} is VALID [2022-02-20 18:06:31,329 INFO L290 TraceCheckUtils]: 13: Hoare triple {650#false} assume !(0 != ~systemActive~0); {650#false} is VALID [2022-02-20 18:06:31,329 INFO L290 TraceCheckUtils]: 14: Hoare triple {650#false} assume { :begin_inline___utac_acc__Specification1_spec__1 } true;havoc __utac_acc__Specification1_spec__1_#t~ret9#1, __utac_acc__Specification1_spec__1_#t~ret10#1, __utac_acc__Specification1_spec__1_~tmp~0#1, __utac_acc__Specification1_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__1_~tmp~0#1;havoc __utac_acc__Specification1_spec__1_~tmp___0~0#1; {650#false} is VALID [2022-02-20 18:06:31,329 INFO L272 TraceCheckUtils]: 15: Hoare triple {650#false} call __utac_acc__Specification1_spec__1_#t~ret9#1 := isMethaneLevelCritical(); {649#true} is VALID [2022-02-20 18:06:31,329 INFO L290 TraceCheckUtils]: 16: Hoare triple {649#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {649#true} is VALID [2022-02-20 18:06:31,330 INFO L290 TraceCheckUtils]: 17: Hoare triple {649#true} assume true; {649#true} is VALID [2022-02-20 18:06:31,330 INFO L284 TraceCheckUtils]: 18: Hoare quadruple {649#true} {650#false} #237#return; {650#false} is VALID [2022-02-20 18:06:31,330 INFO L290 TraceCheckUtils]: 19: Hoare triple {650#false} assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret9#1 && __utac_acc__Specification1_spec__1_#t~ret9#1 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp~0#1 := __utac_acc__Specification1_spec__1_#t~ret9#1;havoc __utac_acc__Specification1_spec__1_#t~ret9#1; {650#false} is VALID [2022-02-20 18:06:31,330 INFO L290 TraceCheckUtils]: 20: Hoare triple {650#false} assume 0 != __utac_acc__Specification1_spec__1_~tmp~0#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~10#1;havoc isPumpRunning_~retValue_acc~10#1;isPumpRunning_~retValue_acc~10#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~10#1; {650#false} is VALID [2022-02-20 18:06:31,333 INFO L290 TraceCheckUtils]: 21: Hoare triple {650#false} __utac_acc__Specification1_spec__1_#t~ret10#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret10#1 && __utac_acc__Specification1_spec__1_#t~ret10#1 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp___0~0#1 := __utac_acc__Specification1_spec__1_#t~ret10#1;havoc __utac_acc__Specification1_spec__1_#t~ret10#1; {650#false} is VALID [2022-02-20 18:06:31,333 INFO L290 TraceCheckUtils]: 22: Hoare triple {650#false} assume 0 != __utac_acc__Specification1_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {650#false} is VALID [2022-02-20 18:06:31,333 INFO L290 TraceCheckUtils]: 23: Hoare triple {650#false} assume !false; {650#false} is VALID [2022-02-20 18:06:31,334 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:06:31,335 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:06:31,335 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1431526039] [2022-02-20 18:06:31,335 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1431526039] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:06:31,336 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:06:31,336 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-02-20 18:06:31,336 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1702139590] [2022-02-20 18:06:31,336 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:06:31,337 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 24 [2022-02-20 18:06:31,339 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:06:31,339 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:06:31,356 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 24 edges. 24 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:06:31,356 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-02-20 18:06:31,356 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:06:31,357 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-02-20 18:06:31,357 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:06:31,357 INFO L87 Difference]: Start difference. First operand 84 states and 108 transitions. Second operand has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:06:31,449 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:06:31,450 INFO L93 Difference]: Finished difference Result 134 states and 172 transitions. [2022-02-20 18:06:31,450 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-02-20 18:06:31,450 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 24 [2022-02-20 18:06:31,450 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:06:31,450 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:06:31,453 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 172 transitions. [2022-02-20 18:06:31,453 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:06:31,455 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 172 transitions. [2022-02-20 18:06:31,456 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 172 transitions. [2022-02-20 18:06:31,585 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 172 edges. 172 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:06:31,587 INFO L225 Difference]: With dead ends: 134 [2022-02-20 18:06:31,587 INFO L226 Difference]: Without dead ends: 75 [2022-02-20 18:06:31,588 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:06:31,589 INFO L933 BasicCegarLoop]: 95 mSDtfsCounter, 12 mSDsluCounter, 79 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 174 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:06:31,589 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [15 Valid, 174 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:06:31,590 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 75 states. [2022-02-20 18:06:31,594 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 75 to 75. [2022-02-20 18:06:31,594 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:06:31,594 INFO L82 GeneralOperation]: Start isEquivalent. First operand 75 states. Second operand has 75 states, 56 states have (on average 1.3214285714285714) internal successors, (74), 63 states have internal predecessors, (74), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-02-20 18:06:31,595 INFO L74 IsIncluded]: Start isIncluded. First operand 75 states. Second operand has 75 states, 56 states have (on average 1.3214285714285714) internal successors, (74), 63 states have internal predecessors, (74), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-02-20 18:06:31,595 INFO L87 Difference]: Start difference. First operand 75 states. Second operand has 75 states, 56 states have (on average 1.3214285714285714) internal successors, (74), 63 states have internal predecessors, (74), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-02-20 18:06:31,597 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:06:31,597 INFO L93 Difference]: Finished difference Result 75 states and 96 transitions. [2022-02-20 18:06:31,597 INFO L276 IsEmpty]: Start isEmpty. Operand 75 states and 96 transitions. [2022-02-20 18:06:31,598 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:06:31,598 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:06:31,599 INFO L74 IsIncluded]: Start isIncluded. First operand has 75 states, 56 states have (on average 1.3214285714285714) internal successors, (74), 63 states have internal predecessors, (74), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) Second operand 75 states. [2022-02-20 18:06:31,599 INFO L87 Difference]: Start difference. First operand has 75 states, 56 states have (on average 1.3214285714285714) internal successors, (74), 63 states have internal predecessors, (74), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) Second operand 75 states. [2022-02-20 18:06:31,601 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:06:31,601 INFO L93 Difference]: Finished difference Result 75 states and 96 transitions. [2022-02-20 18:06:31,601 INFO L276 IsEmpty]: Start isEmpty. Operand 75 states and 96 transitions. [2022-02-20 18:06:31,601 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:06:31,602 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:06:31,602 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:06:31,602 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:06:31,602 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 75 states, 56 states have (on average 1.3214285714285714) internal successors, (74), 63 states have internal predecessors, (74), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-02-20 18:06:31,604 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 75 states to 75 states and 96 transitions. [2022-02-20 18:06:31,604 INFO L78 Accepts]: Start accepts. Automaton has 75 states and 96 transitions. Word has length 24 [2022-02-20 18:06:31,604 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:06:31,605 INFO L470 AbstractCegarLoop]: Abstraction has 75 states and 96 transitions. [2022-02-20 18:06:31,605 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:06:31,605 INFO L276 IsEmpty]: Start isEmpty. Operand 75 states and 96 transitions. [2022-02-20 18:06:31,606 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2022-02-20 18:06:31,606 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:06:31,606 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:06:31,606 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-02-20 18:06:31,606 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:06:31,607 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:06:31,607 INFO L85 PathProgramCache]: Analyzing trace with hash 1182721273, now seen corresponding path program 1 times [2022-02-20 18:06:31,607 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:06:31,607 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1486595882] [2022-02-20 18:06:31,607 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:06:31,608 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:06:31,630 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:06:31,654 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-02-20 18:06:31,656 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:06:31,658 INFO L290 TraceCheckUtils]: 0: Hoare triple {1107#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {1107#true} is VALID [2022-02-20 18:06:31,658 INFO L290 TraceCheckUtils]: 1: Hoare triple {1107#true} assume true; {1107#true} is VALID [2022-02-20 18:06:31,659 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1107#true} {1108#false} #237#return; {1108#false} is VALID [2022-02-20 18:06:31,660 INFO L290 TraceCheckUtils]: 0: Hoare triple {1107#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(30, 9);call #Ultimate.allocInit(9, 10);call #Ultimate.allocInit(21, 11);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(25, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {1109#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:31,661 INFO L290 TraceCheckUtils]: 1: Hoare triple {1109#(= 1 ~systemActive~0)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret11#1, main_~retValue_acc~3#1, main_~tmp~1#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~1#1;assume { :begin_inline_select_helpers } true; {1109#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:31,661 INFO L290 TraceCheckUtils]: 2: Hoare triple {1109#(= 1 ~systemActive~0)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {1109#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:31,662 INFO L290 TraceCheckUtils]: 3: Hoare triple {1109#(= 1 ~systemActive~0)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~5#1;havoc valid_product_~retValue_acc~5#1;valid_product_~retValue_acc~5#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~5#1; {1109#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:31,662 INFO L290 TraceCheckUtils]: 4: Hoare triple {1109#(= 1 ~systemActive~0)} main_#t~ret11#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret11#1 && main_#t~ret11#1 <= 2147483647;main_~tmp~1#1 := main_#t~ret11#1;havoc main_#t~ret11#1; {1109#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:31,663 INFO L290 TraceCheckUtils]: 5: Hoare triple {1109#(= 1 ~systemActive~0)} assume 0 != main_~tmp~1#1;assume { :begin_inline_setup } true; {1109#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:31,663 INFO L290 TraceCheckUtils]: 6: Hoare triple {1109#(= 1 ~systemActive~0)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet36#1, test_#t~nondet37#1, test_#t~nondet38#1, test_#t~nondet39#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {1109#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:31,663 INFO L290 TraceCheckUtils]: 7: Hoare triple {1109#(= 1 ~systemActive~0)} assume !false; {1109#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:31,664 INFO L290 TraceCheckUtils]: 8: Hoare triple {1109#(= 1 ~systemActive~0)} assume test_~splverifierCounter~0#1 < 4; {1109#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:31,664 INFO L290 TraceCheckUtils]: 9: Hoare triple {1109#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet36#1 && test_#t~nondet36#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet36#1;havoc test_#t~nondet36#1; {1109#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:31,665 INFO L290 TraceCheckUtils]: 10: Hoare triple {1109#(= 1 ~systemActive~0)} assume !(0 != test_~tmp~5#1); {1109#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:31,665 INFO L290 TraceCheckUtils]: 11: Hoare triple {1109#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet37#1 && test_#t~nondet37#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet37#1;havoc test_#t~nondet37#1; {1109#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:31,666 INFO L290 TraceCheckUtils]: 12: Hoare triple {1109#(= 1 ~systemActive~0)} assume !(0 != test_~tmp___0~1#1); {1109#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:31,666 INFO L290 TraceCheckUtils]: 13: Hoare triple {1109#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet38#1 && test_#t~nondet38#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet38#1;havoc test_#t~nondet38#1; {1109#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:31,666 INFO L290 TraceCheckUtils]: 14: Hoare triple {1109#(= 1 ~systemActive~0)} assume 0 != test_~tmp___2~0#1; {1109#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:31,667 INFO L272 TraceCheckUtils]: 15: Hoare triple {1109#(= 1 ~systemActive~0)} call timeShift(); {1109#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:31,667 INFO L290 TraceCheckUtils]: 16: Hoare triple {1109#(= 1 ~systemActive~0)} assume !(0 != ~pumpRunning~0); {1109#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:31,668 INFO L290 TraceCheckUtils]: 17: Hoare triple {1109#(= 1 ~systemActive~0)} assume !(0 != ~systemActive~0); {1108#false} is VALID [2022-02-20 18:06:31,668 INFO L290 TraceCheckUtils]: 18: Hoare triple {1108#false} assume { :begin_inline___utac_acc__Specification1_spec__1 } true;havoc __utac_acc__Specification1_spec__1_#t~ret9#1, __utac_acc__Specification1_spec__1_#t~ret10#1, __utac_acc__Specification1_spec__1_~tmp~0#1, __utac_acc__Specification1_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__1_~tmp~0#1;havoc __utac_acc__Specification1_spec__1_~tmp___0~0#1; {1108#false} is VALID [2022-02-20 18:06:31,668 INFO L272 TraceCheckUtils]: 19: Hoare triple {1108#false} call __utac_acc__Specification1_spec__1_#t~ret9#1 := isMethaneLevelCritical(); {1107#true} is VALID [2022-02-20 18:06:31,668 INFO L290 TraceCheckUtils]: 20: Hoare triple {1107#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {1107#true} is VALID [2022-02-20 18:06:31,668 INFO L290 TraceCheckUtils]: 21: Hoare triple {1107#true} assume true; {1107#true} is VALID [2022-02-20 18:06:31,669 INFO L284 TraceCheckUtils]: 22: Hoare quadruple {1107#true} {1108#false} #237#return; {1108#false} is VALID [2022-02-20 18:06:31,669 INFO L290 TraceCheckUtils]: 23: Hoare triple {1108#false} assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret9#1 && __utac_acc__Specification1_spec__1_#t~ret9#1 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp~0#1 := __utac_acc__Specification1_spec__1_#t~ret9#1;havoc __utac_acc__Specification1_spec__1_#t~ret9#1; {1108#false} is VALID [2022-02-20 18:06:31,669 INFO L290 TraceCheckUtils]: 24: Hoare triple {1108#false} assume 0 != __utac_acc__Specification1_spec__1_~tmp~0#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~10#1;havoc isPumpRunning_~retValue_acc~10#1;isPumpRunning_~retValue_acc~10#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~10#1; {1108#false} is VALID [2022-02-20 18:06:31,669 INFO L290 TraceCheckUtils]: 25: Hoare triple {1108#false} __utac_acc__Specification1_spec__1_#t~ret10#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret10#1 && __utac_acc__Specification1_spec__1_#t~ret10#1 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp___0~0#1 := __utac_acc__Specification1_spec__1_#t~ret10#1;havoc __utac_acc__Specification1_spec__1_#t~ret10#1; {1108#false} is VALID [2022-02-20 18:06:31,669 INFO L290 TraceCheckUtils]: 26: Hoare triple {1108#false} assume 0 != __utac_acc__Specification1_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {1108#false} is VALID [2022-02-20 18:06:31,669 INFO L290 TraceCheckUtils]: 27: Hoare triple {1108#false} assume !false; {1108#false} is VALID [2022-02-20 18:06:31,670 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:06:31,670 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:06:31,670 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1486595882] [2022-02-20 18:06:31,670 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1486595882] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:06:31,670 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:06:31,671 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-02-20 18:06:31,671 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [219955715] [2022-02-20 18:06:31,671 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:06:31,671 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 28 [2022-02-20 18:06:31,672 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:06:31,672 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:06:31,694 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 28 edges. 28 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:06:31,695 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-02-20 18:06:31,695 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:06:31,695 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-02-20 18:06:31,695 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:06:31,696 INFO L87 Difference]: Start difference. First operand 75 states and 96 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:06:31,776 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:06:31,776 INFO L93 Difference]: Finished difference Result 143 states and 186 transitions. [2022-02-20 18:06:31,777 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-02-20 18:06:31,777 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 28 [2022-02-20 18:06:31,777 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:06:31,777 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:06:31,779 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 186 transitions. [2022-02-20 18:06:31,780 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:06:31,782 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 186 transitions. [2022-02-20 18:06:31,782 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 186 transitions. [2022-02-20 18:06:31,914 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 186 edges. 186 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:06:31,915 INFO L225 Difference]: With dead ends: 143 [2022-02-20 18:06:31,916 INFO L226 Difference]: Without dead ends: 75 [2022-02-20 18:06:31,916 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:06:31,917 INFO L933 BasicCegarLoop]: 94 mSDtfsCounter, 78 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 78 SdHoareTripleChecker+Valid, 94 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:06:31,918 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [78 Valid, 94 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:06:31,918 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 75 states. [2022-02-20 18:06:31,922 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 75 to 75. [2022-02-20 18:06:31,922 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:06:31,922 INFO L82 GeneralOperation]: Start isEquivalent. First operand 75 states. Second operand has 75 states, 56 states have (on average 1.3035714285714286) internal successors, (73), 63 states have internal predecessors, (73), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-02-20 18:06:31,923 INFO L74 IsIncluded]: Start isIncluded. First operand 75 states. Second operand has 75 states, 56 states have (on average 1.3035714285714286) internal successors, (73), 63 states have internal predecessors, (73), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-02-20 18:06:31,923 INFO L87 Difference]: Start difference. First operand 75 states. Second operand has 75 states, 56 states have (on average 1.3035714285714286) internal successors, (73), 63 states have internal predecessors, (73), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-02-20 18:06:31,925 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:06:31,925 INFO L93 Difference]: Finished difference Result 75 states and 95 transitions. [2022-02-20 18:06:31,925 INFO L276 IsEmpty]: Start isEmpty. Operand 75 states and 95 transitions. [2022-02-20 18:06:31,926 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:06:31,926 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:06:31,926 INFO L74 IsIncluded]: Start isIncluded. First operand has 75 states, 56 states have (on average 1.3035714285714286) internal successors, (73), 63 states have internal predecessors, (73), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) Second operand 75 states. [2022-02-20 18:06:31,927 INFO L87 Difference]: Start difference. First operand has 75 states, 56 states have (on average 1.3035714285714286) internal successors, (73), 63 states have internal predecessors, (73), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) Second operand 75 states. [2022-02-20 18:06:31,928 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:06:31,929 INFO L93 Difference]: Finished difference Result 75 states and 95 transitions. [2022-02-20 18:06:31,929 INFO L276 IsEmpty]: Start isEmpty. Operand 75 states and 95 transitions. [2022-02-20 18:06:31,929 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:06:31,929 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:06:31,929 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:06:31,929 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:06:31,930 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 75 states, 56 states have (on average 1.3035714285714286) internal successors, (73), 63 states have internal predecessors, (73), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-02-20 18:06:31,932 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 75 states to 75 states and 95 transitions. [2022-02-20 18:06:31,932 INFO L78 Accepts]: Start accepts. Automaton has 75 states and 95 transitions. Word has length 28 [2022-02-20 18:06:31,932 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:06:31,932 INFO L470 AbstractCegarLoop]: Abstraction has 75 states and 95 transitions. [2022-02-20 18:06:31,932 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:06:31,932 INFO L276 IsEmpty]: Start isEmpty. Operand 75 states and 95 transitions. [2022-02-20 18:06:31,933 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-02-20 18:06:31,933 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:06:31,933 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:06:31,933 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-02-20 18:06:31,934 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:06:31,934 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:06:31,934 INFO L85 PathProgramCache]: Analyzing trace with hash 2028009394, now seen corresponding path program 1 times [2022-02-20 18:06:31,934 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:06:31,935 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [604378433] [2022-02-20 18:06:31,935 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:06:31,935 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:06:31,975 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:06:31,999 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-02-20 18:06:32,001 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:06:32,009 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-02-20 18:06:32,010 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:06:32,012 INFO L290 TraceCheckUtils]: 0: Hoare triple {1575#true} assume true; {1575#true} is VALID [2022-02-20 18:06:32,013 INFO L284 TraceCheckUtils]: 1: Hoare quadruple {1575#true} {1589#(not (= |old(~pumpRunning~0)| 0))} #255#return; {1589#(not (= |old(~pumpRunning~0)| 0))} is VALID [2022-02-20 18:06:32,013 INFO L290 TraceCheckUtils]: 0: Hoare triple {1588#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~6#1; {1588#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:06:32,014 INFO L290 TraceCheckUtils]: 1: Hoare triple {1588#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 == ~pumpRunning~0); {1589#(not (= |old(~pumpRunning~0)| 0))} is VALID [2022-02-20 18:06:32,014 INFO L272 TraceCheckUtils]: 2: Hoare triple {1589#(not (= |old(~pumpRunning~0)| 0))} call processEnvironment__wrappee__base(); {1575#true} is VALID [2022-02-20 18:06:32,014 INFO L290 TraceCheckUtils]: 3: Hoare triple {1575#true} assume true; {1575#true} is VALID [2022-02-20 18:06:32,014 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {1575#true} {1589#(not (= |old(~pumpRunning~0)| 0))} #255#return; {1589#(not (= |old(~pumpRunning~0)| 0))} is VALID [2022-02-20 18:06:32,015 INFO L290 TraceCheckUtils]: 5: Hoare triple {1589#(not (= |old(~pumpRunning~0)| 0))} assume true; {1589#(not (= |old(~pumpRunning~0)| 0))} is VALID [2022-02-20 18:06:32,015 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {1589#(not (= |old(~pumpRunning~0)| 0))} {1577#(= ~pumpRunning~0 0)} #235#return; {1576#false} is VALID [2022-02-20 18:06:32,016 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2022-02-20 18:06:32,016 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:06:32,019 INFO L290 TraceCheckUtils]: 0: Hoare triple {1575#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {1575#true} is VALID [2022-02-20 18:06:32,019 INFO L290 TraceCheckUtils]: 1: Hoare triple {1575#true} assume true; {1575#true} is VALID [2022-02-20 18:06:32,019 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1575#true} {1576#false} #237#return; {1576#false} is VALID [2022-02-20 18:06:32,019 INFO L290 TraceCheckUtils]: 0: Hoare triple {1575#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(30, 9);call #Ultimate.allocInit(9, 10);call #Ultimate.allocInit(21, 11);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(25, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {1577#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:06:32,020 INFO L290 TraceCheckUtils]: 1: Hoare triple {1577#(= ~pumpRunning~0 0)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret11#1, main_~retValue_acc~3#1, main_~tmp~1#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~1#1;assume { :begin_inline_select_helpers } true; {1577#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:06:32,020 INFO L290 TraceCheckUtils]: 2: Hoare triple {1577#(= ~pumpRunning~0 0)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {1577#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:06:32,020 INFO L290 TraceCheckUtils]: 3: Hoare triple {1577#(= ~pumpRunning~0 0)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~5#1;havoc valid_product_~retValue_acc~5#1;valid_product_~retValue_acc~5#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~5#1; {1577#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:06:32,021 INFO L290 TraceCheckUtils]: 4: Hoare triple {1577#(= ~pumpRunning~0 0)} main_#t~ret11#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret11#1 && main_#t~ret11#1 <= 2147483647;main_~tmp~1#1 := main_#t~ret11#1;havoc main_#t~ret11#1; {1577#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:06:32,021 INFO L290 TraceCheckUtils]: 5: Hoare triple {1577#(= ~pumpRunning~0 0)} assume 0 != main_~tmp~1#1;assume { :begin_inline_setup } true; {1577#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:06:32,022 INFO L290 TraceCheckUtils]: 6: Hoare triple {1577#(= ~pumpRunning~0 0)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet36#1, test_#t~nondet37#1, test_#t~nondet38#1, test_#t~nondet39#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {1577#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:06:32,024 INFO L290 TraceCheckUtils]: 7: Hoare triple {1577#(= ~pumpRunning~0 0)} assume !false; {1577#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:06:32,024 INFO L290 TraceCheckUtils]: 8: Hoare triple {1577#(= ~pumpRunning~0 0)} assume test_~splverifierCounter~0#1 < 4; {1577#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:06:32,024 INFO L290 TraceCheckUtils]: 9: Hoare triple {1577#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet36#1 && test_#t~nondet36#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet36#1;havoc test_#t~nondet36#1; {1577#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:06:32,025 INFO L290 TraceCheckUtils]: 10: Hoare triple {1577#(= ~pumpRunning~0 0)} assume !(0 != test_~tmp~5#1); {1577#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:06:32,025 INFO L290 TraceCheckUtils]: 11: Hoare triple {1577#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet37#1 && test_#t~nondet37#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet37#1;havoc test_#t~nondet37#1; {1577#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:06:32,025 INFO L290 TraceCheckUtils]: 12: Hoare triple {1577#(= ~pumpRunning~0 0)} assume !(0 != test_~tmp___0~1#1); {1577#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:06:32,026 INFO L290 TraceCheckUtils]: 13: Hoare triple {1577#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet38#1 && test_#t~nondet38#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet38#1;havoc test_#t~nondet38#1; {1577#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:06:32,026 INFO L290 TraceCheckUtils]: 14: Hoare triple {1577#(= ~pumpRunning~0 0)} assume 0 != test_~tmp___2~0#1; {1577#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:06:32,027 INFO L272 TraceCheckUtils]: 15: Hoare triple {1577#(= ~pumpRunning~0 0)} call timeShift(); {1577#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:06:32,029 INFO L290 TraceCheckUtils]: 16: Hoare triple {1577#(= ~pumpRunning~0 0)} assume !(0 != ~pumpRunning~0); {1577#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:06:32,029 INFO L290 TraceCheckUtils]: 17: Hoare triple {1577#(= ~pumpRunning~0 0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret41#1, processEnvironment_~tmp~7#1;havoc processEnvironment_~tmp~7#1; {1577#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:06:32,030 INFO L290 TraceCheckUtils]: 18: Hoare triple {1577#(= ~pumpRunning~0 0)} assume !(0 != ~pumpRunning~0); {1577#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:06:32,030 INFO L272 TraceCheckUtils]: 19: Hoare triple {1577#(= ~pumpRunning~0 0)} call processEnvironment__wrappee__methaneQuery(); {1588#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:06:32,030 INFO L290 TraceCheckUtils]: 20: Hoare triple {1588#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~6#1; {1588#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:06:32,031 INFO L290 TraceCheckUtils]: 21: Hoare triple {1588#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 == ~pumpRunning~0); {1589#(not (= |old(~pumpRunning~0)| 0))} is VALID [2022-02-20 18:06:32,031 INFO L272 TraceCheckUtils]: 22: Hoare triple {1589#(not (= |old(~pumpRunning~0)| 0))} call processEnvironment__wrappee__base(); {1575#true} is VALID [2022-02-20 18:06:32,031 INFO L290 TraceCheckUtils]: 23: Hoare triple {1575#true} assume true; {1575#true} is VALID [2022-02-20 18:06:32,031 INFO L284 TraceCheckUtils]: 24: Hoare quadruple {1575#true} {1589#(not (= |old(~pumpRunning~0)| 0))} #255#return; {1589#(not (= |old(~pumpRunning~0)| 0))} is VALID [2022-02-20 18:06:32,032 INFO L290 TraceCheckUtils]: 25: Hoare triple {1589#(not (= |old(~pumpRunning~0)| 0))} assume true; {1589#(not (= |old(~pumpRunning~0)| 0))} is VALID [2022-02-20 18:06:32,034 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {1589#(not (= |old(~pumpRunning~0)| 0))} {1577#(= ~pumpRunning~0 0)} #235#return; {1576#false} is VALID [2022-02-20 18:06:32,034 INFO L290 TraceCheckUtils]: 27: Hoare triple {1576#false} assume { :end_inline_processEnvironment } true; {1576#false} is VALID [2022-02-20 18:06:32,034 INFO L290 TraceCheckUtils]: 28: Hoare triple {1576#false} assume { :begin_inline___utac_acc__Specification1_spec__1 } true;havoc __utac_acc__Specification1_spec__1_#t~ret9#1, __utac_acc__Specification1_spec__1_#t~ret10#1, __utac_acc__Specification1_spec__1_~tmp~0#1, __utac_acc__Specification1_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__1_~tmp~0#1;havoc __utac_acc__Specification1_spec__1_~tmp___0~0#1; {1576#false} is VALID [2022-02-20 18:06:32,034 INFO L272 TraceCheckUtils]: 29: Hoare triple {1576#false} call __utac_acc__Specification1_spec__1_#t~ret9#1 := isMethaneLevelCritical(); {1575#true} is VALID [2022-02-20 18:06:32,034 INFO L290 TraceCheckUtils]: 30: Hoare triple {1575#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {1575#true} is VALID [2022-02-20 18:06:32,034 INFO L290 TraceCheckUtils]: 31: Hoare triple {1575#true} assume true; {1575#true} is VALID [2022-02-20 18:06:32,035 INFO L284 TraceCheckUtils]: 32: Hoare quadruple {1575#true} {1576#false} #237#return; {1576#false} is VALID [2022-02-20 18:06:32,035 INFO L290 TraceCheckUtils]: 33: Hoare triple {1576#false} assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret9#1 && __utac_acc__Specification1_spec__1_#t~ret9#1 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp~0#1 := __utac_acc__Specification1_spec__1_#t~ret9#1;havoc __utac_acc__Specification1_spec__1_#t~ret9#1; {1576#false} is VALID [2022-02-20 18:06:32,035 INFO L290 TraceCheckUtils]: 34: Hoare triple {1576#false} assume 0 != __utac_acc__Specification1_spec__1_~tmp~0#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~10#1;havoc isPumpRunning_~retValue_acc~10#1;isPumpRunning_~retValue_acc~10#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~10#1; {1576#false} is VALID [2022-02-20 18:06:32,046 INFO L290 TraceCheckUtils]: 35: Hoare triple {1576#false} __utac_acc__Specification1_spec__1_#t~ret10#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret10#1 && __utac_acc__Specification1_spec__1_#t~ret10#1 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp___0~0#1 := __utac_acc__Specification1_spec__1_#t~ret10#1;havoc __utac_acc__Specification1_spec__1_#t~ret10#1; {1576#false} is VALID [2022-02-20 18:06:32,046 INFO L290 TraceCheckUtils]: 36: Hoare triple {1576#false} assume 0 != __utac_acc__Specification1_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {1576#false} is VALID [2022-02-20 18:06:32,046 INFO L290 TraceCheckUtils]: 37: Hoare triple {1576#false} assume !false; {1576#false} is VALID [2022-02-20 18:06:32,047 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:06:32,047 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:06:32,047 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [604378433] [2022-02-20 18:06:32,047 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [604378433] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:06:32,047 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:06:32,047 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-02-20 18:06:32,048 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1630192651] [2022-02-20 18:06:32,048 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:06:32,048 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 38 [2022-02-20 18:06:32,049 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:06:32,049 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-02-20 18:06:32,071 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 38 edges. 38 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:06:32,073 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-02-20 18:06:32,073 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:06:32,074 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-02-20 18:06:32,074 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-02-20 18:06:32,074 INFO L87 Difference]: Start difference. First operand 75 states and 95 transitions. Second operand has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-02-20 18:06:32,510 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:06:32,510 INFO L93 Difference]: Finished difference Result 220 states and 277 transitions. [2022-02-20 18:06:32,511 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-02-20 18:06:32,511 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 38 [2022-02-20 18:06:32,511 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:06:32,511 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-02-20 18:06:32,514 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 277 transitions. [2022-02-20 18:06:32,515 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-02-20 18:06:32,518 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 277 transitions. [2022-02-20 18:06:32,518 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 277 transitions. [2022-02-20 18:06:32,706 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 277 edges. 277 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:06:32,709 INFO L225 Difference]: With dead ends: 220 [2022-02-20 18:06:32,709 INFO L226 Difference]: Without dead ends: 152 [2022-02-20 18:06:32,710 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2022-02-20 18:06:32,711 INFO L933 BasicCegarLoop]: 125 mSDtfsCounter, 169 mSDsluCounter, 154 mSDsCounter, 0 mSdLazyCounter, 109 mSolverCounterSat, 58 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 171 SdHoareTripleChecker+Valid, 279 SdHoareTripleChecker+Invalid, 167 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 58 IncrementalHoareTripleChecker+Valid, 109 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-02-20 18:06:32,711 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [171 Valid, 279 Invalid, 167 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [58 Valid, 109 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-02-20 18:06:32,712 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 152 states. [2022-02-20 18:06:32,719 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 152 to 146. [2022-02-20 18:06:32,720 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:06:32,720 INFO L82 GeneralOperation]: Start isEquivalent. First operand 152 states. Second operand has 146 states, 109 states have (on average 1.2477064220183487) internal successors, (136), 117 states have internal predecessors, (136), 18 states have call successors, (18), 15 states have call predecessors, (18), 18 states have return successors, (23), 19 states have call predecessors, (23), 18 states have call successors, (23) [2022-02-20 18:06:32,721 INFO L74 IsIncluded]: Start isIncluded. First operand 152 states. Second operand has 146 states, 109 states have (on average 1.2477064220183487) internal successors, (136), 117 states have internal predecessors, (136), 18 states have call successors, (18), 15 states have call predecessors, (18), 18 states have return successors, (23), 19 states have call predecessors, (23), 18 states have call successors, (23) [2022-02-20 18:06:32,721 INFO L87 Difference]: Start difference. First operand 152 states. Second operand has 146 states, 109 states have (on average 1.2477064220183487) internal successors, (136), 117 states have internal predecessors, (136), 18 states have call successors, (18), 15 states have call predecessors, (18), 18 states have return successors, (23), 19 states have call predecessors, (23), 18 states have call successors, (23) [2022-02-20 18:06:32,743 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:06:32,744 INFO L93 Difference]: Finished difference Result 152 states and 180 transitions. [2022-02-20 18:06:32,744 INFO L276 IsEmpty]: Start isEmpty. Operand 152 states and 180 transitions. [2022-02-20 18:06:32,745 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:06:32,745 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:06:32,745 INFO L74 IsIncluded]: Start isIncluded. First operand has 146 states, 109 states have (on average 1.2477064220183487) internal successors, (136), 117 states have internal predecessors, (136), 18 states have call successors, (18), 15 states have call predecessors, (18), 18 states have return successors, (23), 19 states have call predecessors, (23), 18 states have call successors, (23) Second operand 152 states. [2022-02-20 18:06:32,746 INFO L87 Difference]: Start difference. First operand has 146 states, 109 states have (on average 1.2477064220183487) internal successors, (136), 117 states have internal predecessors, (136), 18 states have call successors, (18), 15 states have call predecessors, (18), 18 states have return successors, (23), 19 states have call predecessors, (23), 18 states have call successors, (23) Second operand 152 states. [2022-02-20 18:06:32,750 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:06:32,750 INFO L93 Difference]: Finished difference Result 152 states and 180 transitions. [2022-02-20 18:06:32,750 INFO L276 IsEmpty]: Start isEmpty. Operand 152 states and 180 transitions. [2022-02-20 18:06:32,751 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:06:32,751 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:06:32,751 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:06:32,751 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:06:32,752 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 146 states, 109 states have (on average 1.2477064220183487) internal successors, (136), 117 states have internal predecessors, (136), 18 states have call successors, (18), 15 states have call predecessors, (18), 18 states have return successors, (23), 19 states have call predecessors, (23), 18 states have call successors, (23) [2022-02-20 18:06:32,756 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 146 states to 146 states and 177 transitions. [2022-02-20 18:06:32,756 INFO L78 Accepts]: Start accepts. Automaton has 146 states and 177 transitions. Word has length 38 [2022-02-20 18:06:32,757 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:06:32,757 INFO L470 AbstractCegarLoop]: Abstraction has 146 states and 177 transitions. [2022-02-20 18:06:32,757 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-02-20 18:06:32,757 INFO L276 IsEmpty]: Start isEmpty. Operand 146 states and 177 transitions. [2022-02-20 18:06:32,758 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2022-02-20 18:06:32,758 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:06:32,758 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:06:32,758 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-02-20 18:06:32,758 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:06:32,759 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:06:32,759 INFO L85 PathProgramCache]: Analyzing trace with hash 300684586, now seen corresponding path program 1 times [2022-02-20 18:06:32,759 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:06:32,759 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [285582541] [2022-02-20 18:06:32,760 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:06:32,760 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:06:32,782 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:06:32,819 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-02-20 18:06:32,824 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:06:32,828 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:06:32,829 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:06:32,831 INFO L290 TraceCheckUtils]: 0: Hoare triple {2416#true} assume true; {2416#true} is VALID [2022-02-20 18:06:32,831 INFO L284 TraceCheckUtils]: 1: Hoare quadruple {2416#true} {2416#true} #253#return; {2416#true} is VALID [2022-02-20 18:06:32,832 INFO L290 TraceCheckUtils]: 0: Hoare triple {2437#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~6#1; {2416#true} is VALID [2022-02-20 18:06:32,832 INFO L290 TraceCheckUtils]: 1: Hoare triple {2416#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret52#1, isHighWaterLevel_~retValue_acc~11#1, isHighWaterLevel_~tmp~9#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~11#1;havoc isHighWaterLevel_~tmp~9#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {2416#true} is VALID [2022-02-20 18:06:32,832 INFO L290 TraceCheckUtils]: 2: Hoare triple {2416#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~2#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {2416#true} is VALID [2022-02-20 18:06:32,832 INFO L290 TraceCheckUtils]: 3: Hoare triple {2416#true} isHighWaterLevel_#t~ret52#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret52#1 && isHighWaterLevel_#t~ret52#1 <= 2147483647;isHighWaterLevel_~tmp~9#1 := isHighWaterLevel_#t~ret52#1;havoc isHighWaterLevel_#t~ret52#1; {2416#true} is VALID [2022-02-20 18:06:32,833 INFO L290 TraceCheckUtils]: 4: Hoare triple {2416#true} assume 0 != isHighWaterLevel_~tmp~9#1;isHighWaterLevel_~tmp___0~2#1 := 0; {2416#true} is VALID [2022-02-20 18:06:32,833 INFO L290 TraceCheckUtils]: 5: Hoare triple {2416#true} isHighWaterLevel_~retValue_acc~11#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~11#1; {2416#true} is VALID [2022-02-20 18:06:32,833 INFO L290 TraceCheckUtils]: 6: Hoare triple {2416#true} #t~ret40#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret40#1 && #t~ret40#1 <= 2147483647;~tmp~6#1 := #t~ret40#1;havoc #t~ret40#1; {2416#true} is VALID [2022-02-20 18:06:32,833 INFO L290 TraceCheckUtils]: 7: Hoare triple {2416#true} assume !(0 != ~tmp~6#1); {2416#true} is VALID [2022-02-20 18:06:32,833 INFO L272 TraceCheckUtils]: 8: Hoare triple {2416#true} call processEnvironment__wrappee__base(); {2416#true} is VALID [2022-02-20 18:06:32,834 INFO L290 TraceCheckUtils]: 9: Hoare triple {2416#true} assume true; {2416#true} is VALID [2022-02-20 18:06:32,834 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {2416#true} {2416#true} #253#return; {2416#true} is VALID [2022-02-20 18:06:32,834 INFO L290 TraceCheckUtils]: 11: Hoare triple {2416#true} assume true; {2416#true} is VALID [2022-02-20 18:06:32,835 INFO L284 TraceCheckUtils]: 12: Hoare quadruple {2416#true} {2418#(= ~methaneLevelCritical~0 0)} #235#return; {2418#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:06:32,835 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2022-02-20 18:06:32,836 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:06:32,844 INFO L290 TraceCheckUtils]: 0: Hoare triple {2416#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {2440#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:32,844 INFO L290 TraceCheckUtils]: 1: Hoare triple {2440#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} assume true; {2440#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:32,845 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {2440#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} {2418#(= ~methaneLevelCritical~0 0)} #237#return; {2435#(= |timeShift___utac_acc__Specification1_spec__1_#t~ret9#1| 0)} is VALID [2022-02-20 18:06:32,845 INFO L290 TraceCheckUtils]: 0: Hoare triple {2416#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(30, 9);call #Ultimate.allocInit(9, 10);call #Ultimate.allocInit(21, 11);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(25, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {2418#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:06:32,846 INFO L290 TraceCheckUtils]: 1: Hoare triple {2418#(= ~methaneLevelCritical~0 0)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret11#1, main_~retValue_acc~3#1, main_~tmp~1#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~1#1;assume { :begin_inline_select_helpers } true; {2418#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:06:32,846 INFO L290 TraceCheckUtils]: 2: Hoare triple {2418#(= ~methaneLevelCritical~0 0)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {2418#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:06:32,846 INFO L290 TraceCheckUtils]: 3: Hoare triple {2418#(= ~methaneLevelCritical~0 0)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~5#1;havoc valid_product_~retValue_acc~5#1;valid_product_~retValue_acc~5#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~5#1; {2418#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:06:32,847 INFO L290 TraceCheckUtils]: 4: Hoare triple {2418#(= ~methaneLevelCritical~0 0)} main_#t~ret11#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret11#1 && main_#t~ret11#1 <= 2147483647;main_~tmp~1#1 := main_#t~ret11#1;havoc main_#t~ret11#1; {2418#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:06:32,847 INFO L290 TraceCheckUtils]: 5: Hoare triple {2418#(= ~methaneLevelCritical~0 0)} assume 0 != main_~tmp~1#1;assume { :begin_inline_setup } true; {2418#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:06:32,847 INFO L290 TraceCheckUtils]: 6: Hoare triple {2418#(= ~methaneLevelCritical~0 0)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet36#1, test_#t~nondet37#1, test_#t~nondet38#1, test_#t~nondet39#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {2418#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:06:32,848 INFO L290 TraceCheckUtils]: 7: Hoare triple {2418#(= ~methaneLevelCritical~0 0)} assume !false; {2418#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:06:32,848 INFO L290 TraceCheckUtils]: 8: Hoare triple {2418#(= ~methaneLevelCritical~0 0)} assume test_~splverifierCounter~0#1 < 4; {2418#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:06:32,849 INFO L290 TraceCheckUtils]: 9: Hoare triple {2418#(= ~methaneLevelCritical~0 0)} assume -2147483648 <= test_#t~nondet36#1 && test_#t~nondet36#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet36#1;havoc test_#t~nondet36#1; {2418#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:06:32,849 INFO L290 TraceCheckUtils]: 10: Hoare triple {2418#(= ~methaneLevelCritical~0 0)} assume !(0 != test_~tmp~5#1); {2418#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:06:32,849 INFO L290 TraceCheckUtils]: 11: Hoare triple {2418#(= ~methaneLevelCritical~0 0)} assume -2147483648 <= test_#t~nondet37#1 && test_#t~nondet37#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet37#1;havoc test_#t~nondet37#1; {2418#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:06:32,850 INFO L290 TraceCheckUtils]: 12: Hoare triple {2418#(= ~methaneLevelCritical~0 0)} assume !(0 != test_~tmp___0~1#1); {2418#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:06:32,850 INFO L290 TraceCheckUtils]: 13: Hoare triple {2418#(= ~methaneLevelCritical~0 0)} assume -2147483648 <= test_#t~nondet38#1 && test_#t~nondet38#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet38#1;havoc test_#t~nondet38#1; {2418#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:06:32,850 INFO L290 TraceCheckUtils]: 14: Hoare triple {2418#(= ~methaneLevelCritical~0 0)} assume 0 != test_~tmp___2~0#1; {2418#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:06:32,851 INFO L272 TraceCheckUtils]: 15: Hoare triple {2418#(= ~methaneLevelCritical~0 0)} call timeShift(); {2418#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:06:32,851 INFO L290 TraceCheckUtils]: 16: Hoare triple {2418#(= ~methaneLevelCritical~0 0)} assume !(0 != ~pumpRunning~0); {2418#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:06:32,851 INFO L290 TraceCheckUtils]: 17: Hoare triple {2418#(= ~methaneLevelCritical~0 0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret41#1, processEnvironment_~tmp~7#1;havoc processEnvironment_~tmp~7#1; {2418#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:06:32,852 INFO L290 TraceCheckUtils]: 18: Hoare triple {2418#(= ~methaneLevelCritical~0 0)} assume !(0 != ~pumpRunning~0); {2418#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:06:32,852 INFO L272 TraceCheckUtils]: 19: Hoare triple {2418#(= ~methaneLevelCritical~0 0)} call processEnvironment__wrappee__methaneQuery(); {2437#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:06:32,852 INFO L290 TraceCheckUtils]: 20: Hoare triple {2437#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~6#1; {2416#true} is VALID [2022-02-20 18:06:32,853 INFO L290 TraceCheckUtils]: 21: Hoare triple {2416#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret52#1, isHighWaterLevel_~retValue_acc~11#1, isHighWaterLevel_~tmp~9#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~11#1;havoc isHighWaterLevel_~tmp~9#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {2416#true} is VALID [2022-02-20 18:06:32,853 INFO L290 TraceCheckUtils]: 22: Hoare triple {2416#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~2#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {2416#true} is VALID [2022-02-20 18:06:32,853 INFO L290 TraceCheckUtils]: 23: Hoare triple {2416#true} isHighWaterLevel_#t~ret52#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret52#1 && isHighWaterLevel_#t~ret52#1 <= 2147483647;isHighWaterLevel_~tmp~9#1 := isHighWaterLevel_#t~ret52#1;havoc isHighWaterLevel_#t~ret52#1; {2416#true} is VALID [2022-02-20 18:06:32,853 INFO L290 TraceCheckUtils]: 24: Hoare triple {2416#true} assume 0 != isHighWaterLevel_~tmp~9#1;isHighWaterLevel_~tmp___0~2#1 := 0; {2416#true} is VALID [2022-02-20 18:06:32,853 INFO L290 TraceCheckUtils]: 25: Hoare triple {2416#true} isHighWaterLevel_~retValue_acc~11#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~11#1; {2416#true} is VALID [2022-02-20 18:06:32,853 INFO L290 TraceCheckUtils]: 26: Hoare triple {2416#true} #t~ret40#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret40#1 && #t~ret40#1 <= 2147483647;~tmp~6#1 := #t~ret40#1;havoc #t~ret40#1; {2416#true} is VALID [2022-02-20 18:06:32,854 INFO L290 TraceCheckUtils]: 27: Hoare triple {2416#true} assume !(0 != ~tmp~6#1); {2416#true} is VALID [2022-02-20 18:06:32,854 INFO L272 TraceCheckUtils]: 28: Hoare triple {2416#true} call processEnvironment__wrappee__base(); {2416#true} is VALID [2022-02-20 18:06:32,854 INFO L290 TraceCheckUtils]: 29: Hoare triple {2416#true} assume true; {2416#true} is VALID [2022-02-20 18:06:32,854 INFO L284 TraceCheckUtils]: 30: Hoare quadruple {2416#true} {2416#true} #253#return; {2416#true} is VALID [2022-02-20 18:06:32,854 INFO L290 TraceCheckUtils]: 31: Hoare triple {2416#true} assume true; {2416#true} is VALID [2022-02-20 18:06:32,855 INFO L284 TraceCheckUtils]: 32: Hoare quadruple {2416#true} {2418#(= ~methaneLevelCritical~0 0)} #235#return; {2418#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:06:32,855 INFO L290 TraceCheckUtils]: 33: Hoare triple {2418#(= ~methaneLevelCritical~0 0)} assume { :end_inline_processEnvironment } true; {2418#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:06:32,855 INFO L290 TraceCheckUtils]: 34: Hoare triple {2418#(= ~methaneLevelCritical~0 0)} assume { :begin_inline___utac_acc__Specification1_spec__1 } true;havoc __utac_acc__Specification1_spec__1_#t~ret9#1, __utac_acc__Specification1_spec__1_#t~ret10#1, __utac_acc__Specification1_spec__1_~tmp~0#1, __utac_acc__Specification1_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__1_~tmp~0#1;havoc __utac_acc__Specification1_spec__1_~tmp___0~0#1; {2418#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:06:32,855 INFO L272 TraceCheckUtils]: 35: Hoare triple {2418#(= ~methaneLevelCritical~0 0)} call __utac_acc__Specification1_spec__1_#t~ret9#1 := isMethaneLevelCritical(); {2416#true} is VALID [2022-02-20 18:06:32,856 INFO L290 TraceCheckUtils]: 36: Hoare triple {2416#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {2440#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:32,856 INFO L290 TraceCheckUtils]: 37: Hoare triple {2440#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} assume true; {2440#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:32,857 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {2440#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} {2418#(= ~methaneLevelCritical~0 0)} #237#return; {2435#(= |timeShift___utac_acc__Specification1_spec__1_#t~ret9#1| 0)} is VALID [2022-02-20 18:06:32,857 INFO L290 TraceCheckUtils]: 39: Hoare triple {2435#(= |timeShift___utac_acc__Specification1_spec__1_#t~ret9#1| 0)} assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret9#1 && __utac_acc__Specification1_spec__1_#t~ret9#1 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp~0#1 := __utac_acc__Specification1_spec__1_#t~ret9#1;havoc __utac_acc__Specification1_spec__1_#t~ret9#1; {2436#(= |timeShift___utac_acc__Specification1_spec__1_~tmp~0#1| 0)} is VALID [2022-02-20 18:06:32,858 INFO L290 TraceCheckUtils]: 40: Hoare triple {2436#(= |timeShift___utac_acc__Specification1_spec__1_~tmp~0#1| 0)} assume 0 != __utac_acc__Specification1_spec__1_~tmp~0#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~10#1;havoc isPumpRunning_~retValue_acc~10#1;isPumpRunning_~retValue_acc~10#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~10#1; {2417#false} is VALID [2022-02-20 18:06:32,858 INFO L290 TraceCheckUtils]: 41: Hoare triple {2417#false} __utac_acc__Specification1_spec__1_#t~ret10#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret10#1 && __utac_acc__Specification1_spec__1_#t~ret10#1 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp___0~0#1 := __utac_acc__Specification1_spec__1_#t~ret10#1;havoc __utac_acc__Specification1_spec__1_#t~ret10#1; {2417#false} is VALID [2022-02-20 18:06:32,858 INFO L290 TraceCheckUtils]: 42: Hoare triple {2417#false} assume 0 != __utac_acc__Specification1_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {2417#false} is VALID [2022-02-20 18:06:32,858 INFO L290 TraceCheckUtils]: 43: Hoare triple {2417#false} assume !false; {2417#false} is VALID [2022-02-20 18:06:32,858 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:06:32,859 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:06:32,859 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [285582541] [2022-02-20 18:06:32,859 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [285582541] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:06:32,859 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:06:32,859 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-02-20 18:06:32,859 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [272827264] [2022-02-20 18:06:32,859 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:06:32,860 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.285714285714286) internal successors, (37), 5 states have internal predecessors, (37), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) Word has length 44 [2022-02-20 18:06:32,860 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:06:32,860 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 7 states, 7 states have (on average 5.285714285714286) internal successors, (37), 5 states have internal predecessors, (37), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:06:32,888 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 44 edges. 44 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:06:32,888 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-02-20 18:06:32,888 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:06:32,889 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-02-20 18:06:32,889 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-02-20 18:06:32,889 INFO L87 Difference]: Start difference. First operand 146 states and 177 transitions. Second operand has 7 states, 7 states have (on average 5.285714285714286) internal successors, (37), 5 states have internal predecessors, (37), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:06:33,607 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:06:33,607 INFO L93 Difference]: Finished difference Result 428 states and 529 transitions. [2022-02-20 18:06:33,607 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-02-20 18:06:33,608 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.285714285714286) internal successors, (37), 5 states have internal predecessors, (37), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) Word has length 44 [2022-02-20 18:06:33,608 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:06:33,608 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 5.285714285714286) internal successors, (37), 5 states have internal predecessors, (37), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:06:33,611 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 306 transitions. [2022-02-20 18:06:33,611 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 5.285714285714286) internal successors, (37), 5 states have internal predecessors, (37), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:06:33,614 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 306 transitions. [2022-02-20 18:06:33,615 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 13 states and 306 transitions. [2022-02-20 18:06:33,831 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 306 edges. 306 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:06:33,838 INFO L225 Difference]: With dead ends: 428 [2022-02-20 18:06:33,838 INFO L226 Difference]: Without dead ends: 289 [2022-02-20 18:06:33,838 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 23 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=53, Invalid=157, Unknown=0, NotChecked=0, Total=210 [2022-02-20 18:06:33,839 INFO L933 BasicCegarLoop]: 91 mSDtfsCounter, 146 mSDsluCounter, 304 mSDsCounter, 0 mSdLazyCounter, 227 mSolverCounterSat, 55 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 155 SdHoareTripleChecker+Valid, 395 SdHoareTripleChecker+Invalid, 282 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 55 IncrementalHoareTripleChecker+Valid, 227 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-02-20 18:06:33,839 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [155 Valid, 395 Invalid, 282 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [55 Valid, 227 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-02-20 18:06:33,840 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 289 states. [2022-02-20 18:06:33,852 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 289 to 275. [2022-02-20 18:06:33,856 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:06:33,857 INFO L82 GeneralOperation]: Start isEquivalent. First operand 289 states. Second operand has 275 states, 202 states have (on average 1.2178217821782178) internal successors, (246), 217 states have internal predecessors, (246), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (48), 38 states have call predecessors, (48), 36 states have call successors, (48) [2022-02-20 18:06:33,857 INFO L74 IsIncluded]: Start isIncluded. First operand 289 states. Second operand has 275 states, 202 states have (on average 1.2178217821782178) internal successors, (246), 217 states have internal predecessors, (246), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (48), 38 states have call predecessors, (48), 36 states have call successors, (48) [2022-02-20 18:06:33,859 INFO L87 Difference]: Start difference. First operand 289 states. Second operand has 275 states, 202 states have (on average 1.2178217821782178) internal successors, (246), 217 states have internal predecessors, (246), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (48), 38 states have call predecessors, (48), 36 states have call successors, (48) [2022-02-20 18:06:33,867 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:06:33,868 INFO L93 Difference]: Finished difference Result 289 states and 345 transitions. [2022-02-20 18:06:33,868 INFO L276 IsEmpty]: Start isEmpty. Operand 289 states and 345 transitions. [2022-02-20 18:06:33,870 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:06:33,870 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:06:33,870 INFO L74 IsIncluded]: Start isIncluded. First operand has 275 states, 202 states have (on average 1.2178217821782178) internal successors, (246), 217 states have internal predecessors, (246), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (48), 38 states have call predecessors, (48), 36 states have call successors, (48) Second operand 289 states. [2022-02-20 18:06:33,871 INFO L87 Difference]: Start difference. First operand has 275 states, 202 states have (on average 1.2178217821782178) internal successors, (246), 217 states have internal predecessors, (246), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (48), 38 states have call predecessors, (48), 36 states have call successors, (48) Second operand 289 states. [2022-02-20 18:06:33,878 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:06:33,878 INFO L93 Difference]: Finished difference Result 289 states and 345 transitions. [2022-02-20 18:06:33,878 INFO L276 IsEmpty]: Start isEmpty. Operand 289 states and 345 transitions. [2022-02-20 18:06:33,879 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:06:33,879 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:06:33,879 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:06:33,879 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:06:33,880 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 275 states, 202 states have (on average 1.2178217821782178) internal successors, (246), 217 states have internal predecessors, (246), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (48), 38 states have call predecessors, (48), 36 states have call successors, (48) [2022-02-20 18:06:33,887 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 275 states to 275 states and 330 transitions. [2022-02-20 18:06:33,887 INFO L78 Accepts]: Start accepts. Automaton has 275 states and 330 transitions. Word has length 44 [2022-02-20 18:06:33,887 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:06:33,888 INFO L470 AbstractCegarLoop]: Abstraction has 275 states and 330 transitions. [2022-02-20 18:06:33,888 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.285714285714286) internal successors, (37), 5 states have internal predecessors, (37), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:06:33,888 INFO L276 IsEmpty]: Start isEmpty. Operand 275 states and 330 transitions. [2022-02-20 18:06:33,889 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2022-02-20 18:06:33,889 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:06:33,889 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:06:33,889 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-02-20 18:06:33,889 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:06:33,889 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:06:33,890 INFO L85 PathProgramCache]: Analyzing trace with hash 1931130382, now seen corresponding path program 1 times [2022-02-20 18:06:33,890 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:06:33,890 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1889170328] [2022-02-20 18:06:33,890 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:06:33,890 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:06:33,905 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:06:33,935 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-02-20 18:06:33,936 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:06:33,939 INFO L290 TraceCheckUtils]: 0: Hoare triple {4039#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {4015#true} is VALID [2022-02-20 18:06:33,939 INFO L290 TraceCheckUtils]: 1: Hoare triple {4015#true} assume true; {4015#true} is VALID [2022-02-20 18:06:33,939 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {4015#true} {4017#(= ~pumpRunning~0 0)} #245#return; {4017#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:06:33,943 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-02-20 18:06:33,946 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:06:33,951 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:06:33,952 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:06:33,954 INFO L290 TraceCheckUtils]: 0: Hoare triple {4015#true} assume true; {4015#true} is VALID [2022-02-20 18:06:33,955 INFO L284 TraceCheckUtils]: 1: Hoare quadruple {4015#true} {4017#(= ~pumpRunning~0 0)} #253#return; {4017#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:06:33,955 INFO L290 TraceCheckUtils]: 0: Hoare triple {4040#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~6#1; {4015#true} is VALID [2022-02-20 18:06:33,955 INFO L290 TraceCheckUtils]: 1: Hoare triple {4015#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret52#1, isHighWaterLevel_~retValue_acc~11#1, isHighWaterLevel_~tmp~9#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~11#1;havoc isHighWaterLevel_~tmp~9#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {4017#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:06:33,956 INFO L290 TraceCheckUtils]: 2: Hoare triple {4017#(= ~pumpRunning~0 0)} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~2#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {4017#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:06:33,956 INFO L290 TraceCheckUtils]: 3: Hoare triple {4017#(= ~pumpRunning~0 0)} isHighWaterLevel_#t~ret52#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret52#1 && isHighWaterLevel_#t~ret52#1 <= 2147483647;isHighWaterLevel_~tmp~9#1 := isHighWaterLevel_#t~ret52#1;havoc isHighWaterLevel_#t~ret52#1; {4017#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:06:33,956 INFO L290 TraceCheckUtils]: 4: Hoare triple {4017#(= ~pumpRunning~0 0)} assume 0 != isHighWaterLevel_~tmp~9#1;isHighWaterLevel_~tmp___0~2#1 := 0; {4017#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:06:33,956 INFO L290 TraceCheckUtils]: 5: Hoare triple {4017#(= ~pumpRunning~0 0)} isHighWaterLevel_~retValue_acc~11#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~11#1; {4017#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:06:33,957 INFO L290 TraceCheckUtils]: 6: Hoare triple {4017#(= ~pumpRunning~0 0)} #t~ret40#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret40#1 && #t~ret40#1 <= 2147483647;~tmp~6#1 := #t~ret40#1;havoc #t~ret40#1; {4017#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:06:33,957 INFO L290 TraceCheckUtils]: 7: Hoare triple {4017#(= ~pumpRunning~0 0)} assume !(0 != ~tmp~6#1); {4017#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:06:33,957 INFO L272 TraceCheckUtils]: 8: Hoare triple {4017#(= ~pumpRunning~0 0)} call processEnvironment__wrappee__base(); {4015#true} is VALID [2022-02-20 18:06:33,957 INFO L290 TraceCheckUtils]: 9: Hoare triple {4015#true} assume true; {4015#true} is VALID [2022-02-20 18:06:33,958 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {4015#true} {4017#(= ~pumpRunning~0 0)} #253#return; {4017#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:06:33,958 INFO L290 TraceCheckUtils]: 11: Hoare triple {4017#(= ~pumpRunning~0 0)} assume true; {4017#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:06:33,958 INFO L284 TraceCheckUtils]: 12: Hoare quadruple {4017#(= ~pumpRunning~0 0)} {4017#(= ~pumpRunning~0 0)} #235#return; {4017#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:06:33,959 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2022-02-20 18:06:33,960 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:06:33,962 INFO L290 TraceCheckUtils]: 0: Hoare triple {4015#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {4015#true} is VALID [2022-02-20 18:06:33,962 INFO L290 TraceCheckUtils]: 1: Hoare triple {4015#true} assume true; {4015#true} is VALID [2022-02-20 18:06:33,962 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {4015#true} {4017#(= ~pumpRunning~0 0)} #237#return; {4017#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:06:33,963 INFO L290 TraceCheckUtils]: 0: Hoare triple {4015#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(30, 9);call #Ultimate.allocInit(9, 10);call #Ultimate.allocInit(21, 11);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(25, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {4017#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:06:33,963 INFO L290 TraceCheckUtils]: 1: Hoare triple {4017#(= ~pumpRunning~0 0)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret11#1, main_~retValue_acc~3#1, main_~tmp~1#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~1#1;assume { :begin_inline_select_helpers } true; {4017#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:06:33,963 INFO L290 TraceCheckUtils]: 2: Hoare triple {4017#(= ~pumpRunning~0 0)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {4017#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:06:33,964 INFO L290 TraceCheckUtils]: 3: Hoare triple {4017#(= ~pumpRunning~0 0)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~5#1;havoc valid_product_~retValue_acc~5#1;valid_product_~retValue_acc~5#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~5#1; {4017#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:06:33,964 INFO L290 TraceCheckUtils]: 4: Hoare triple {4017#(= ~pumpRunning~0 0)} main_#t~ret11#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret11#1 && main_#t~ret11#1 <= 2147483647;main_~tmp~1#1 := main_#t~ret11#1;havoc main_#t~ret11#1; {4017#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:06:33,964 INFO L290 TraceCheckUtils]: 5: Hoare triple {4017#(= ~pumpRunning~0 0)} assume 0 != main_~tmp~1#1;assume { :begin_inline_setup } true; {4017#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:06:33,964 INFO L290 TraceCheckUtils]: 6: Hoare triple {4017#(= ~pumpRunning~0 0)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet36#1, test_#t~nondet37#1, test_#t~nondet38#1, test_#t~nondet39#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {4017#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:06:33,965 INFO L290 TraceCheckUtils]: 7: Hoare triple {4017#(= ~pumpRunning~0 0)} assume !false; {4017#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:06:33,965 INFO L290 TraceCheckUtils]: 8: Hoare triple {4017#(= ~pumpRunning~0 0)} assume test_~splverifierCounter~0#1 < 4; {4017#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:06:33,965 INFO L290 TraceCheckUtils]: 9: Hoare triple {4017#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet36#1 && test_#t~nondet36#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet36#1;havoc test_#t~nondet36#1; {4017#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:06:33,966 INFO L290 TraceCheckUtils]: 10: Hoare triple {4017#(= ~pumpRunning~0 0)} assume !(0 != test_~tmp~5#1); {4017#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:06:33,966 INFO L290 TraceCheckUtils]: 11: Hoare triple {4017#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet37#1 && test_#t~nondet37#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet37#1;havoc test_#t~nondet37#1; {4017#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:06:33,966 INFO L290 TraceCheckUtils]: 12: Hoare triple {4017#(= ~pumpRunning~0 0)} assume 0 != test_~tmp___0~1#1; {4017#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:06:33,967 INFO L272 TraceCheckUtils]: 13: Hoare triple {4017#(= ~pumpRunning~0 0)} call changeMethaneLevel(); {4039#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:33,967 INFO L290 TraceCheckUtils]: 14: Hoare triple {4039#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {4015#true} is VALID [2022-02-20 18:06:33,967 INFO L290 TraceCheckUtils]: 15: Hoare triple {4015#true} assume true; {4015#true} is VALID [2022-02-20 18:06:33,967 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {4015#true} {4017#(= ~pumpRunning~0 0)} #245#return; {4017#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:06:33,968 INFO L290 TraceCheckUtils]: 17: Hoare triple {4017#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet38#1 && test_#t~nondet38#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet38#1;havoc test_#t~nondet38#1; {4017#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:06:33,968 INFO L290 TraceCheckUtils]: 18: Hoare triple {4017#(= ~pumpRunning~0 0)} assume 0 != test_~tmp___2~0#1; {4017#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:06:33,968 INFO L272 TraceCheckUtils]: 19: Hoare triple {4017#(= ~pumpRunning~0 0)} call timeShift(); {4017#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:06:33,968 INFO L290 TraceCheckUtils]: 20: Hoare triple {4017#(= ~pumpRunning~0 0)} assume !(0 != ~pumpRunning~0); {4017#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:06:33,969 INFO L290 TraceCheckUtils]: 21: Hoare triple {4017#(= ~pumpRunning~0 0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret41#1, processEnvironment_~tmp~7#1;havoc processEnvironment_~tmp~7#1; {4017#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:06:33,969 INFO L290 TraceCheckUtils]: 22: Hoare triple {4017#(= ~pumpRunning~0 0)} assume !(0 != ~pumpRunning~0); {4017#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:06:33,969 INFO L272 TraceCheckUtils]: 23: Hoare triple {4017#(= ~pumpRunning~0 0)} call processEnvironment__wrappee__methaneQuery(); {4040#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:06:33,970 INFO L290 TraceCheckUtils]: 24: Hoare triple {4040#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~6#1; {4015#true} is VALID [2022-02-20 18:06:33,970 INFO L290 TraceCheckUtils]: 25: Hoare triple {4015#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret52#1, isHighWaterLevel_~retValue_acc~11#1, isHighWaterLevel_~tmp~9#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~11#1;havoc isHighWaterLevel_~tmp~9#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {4017#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:06:33,970 INFO L290 TraceCheckUtils]: 26: Hoare triple {4017#(= ~pumpRunning~0 0)} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~2#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {4017#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:06:33,971 INFO L290 TraceCheckUtils]: 27: Hoare triple {4017#(= ~pumpRunning~0 0)} isHighWaterLevel_#t~ret52#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret52#1 && isHighWaterLevel_#t~ret52#1 <= 2147483647;isHighWaterLevel_~tmp~9#1 := isHighWaterLevel_#t~ret52#1;havoc isHighWaterLevel_#t~ret52#1; {4017#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:06:33,971 INFO L290 TraceCheckUtils]: 28: Hoare triple {4017#(= ~pumpRunning~0 0)} assume 0 != isHighWaterLevel_~tmp~9#1;isHighWaterLevel_~tmp___0~2#1 := 0; {4017#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:06:33,971 INFO L290 TraceCheckUtils]: 29: Hoare triple {4017#(= ~pumpRunning~0 0)} isHighWaterLevel_~retValue_acc~11#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~11#1; {4017#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:06:33,971 INFO L290 TraceCheckUtils]: 30: Hoare triple {4017#(= ~pumpRunning~0 0)} #t~ret40#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret40#1 && #t~ret40#1 <= 2147483647;~tmp~6#1 := #t~ret40#1;havoc #t~ret40#1; {4017#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:06:33,972 INFO L290 TraceCheckUtils]: 31: Hoare triple {4017#(= ~pumpRunning~0 0)} assume !(0 != ~tmp~6#1); {4017#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:06:33,972 INFO L272 TraceCheckUtils]: 32: Hoare triple {4017#(= ~pumpRunning~0 0)} call processEnvironment__wrappee__base(); {4015#true} is VALID [2022-02-20 18:06:33,972 INFO L290 TraceCheckUtils]: 33: Hoare triple {4015#true} assume true; {4015#true} is VALID [2022-02-20 18:06:33,972 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {4015#true} {4017#(= ~pumpRunning~0 0)} #253#return; {4017#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:06:33,973 INFO L290 TraceCheckUtils]: 35: Hoare triple {4017#(= ~pumpRunning~0 0)} assume true; {4017#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:06:33,973 INFO L284 TraceCheckUtils]: 36: Hoare quadruple {4017#(= ~pumpRunning~0 0)} {4017#(= ~pumpRunning~0 0)} #235#return; {4017#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:06:33,973 INFO L290 TraceCheckUtils]: 37: Hoare triple {4017#(= ~pumpRunning~0 0)} assume { :end_inline_processEnvironment } true; {4017#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:06:33,974 INFO L290 TraceCheckUtils]: 38: Hoare triple {4017#(= ~pumpRunning~0 0)} assume { :begin_inline___utac_acc__Specification1_spec__1 } true;havoc __utac_acc__Specification1_spec__1_#t~ret9#1, __utac_acc__Specification1_spec__1_#t~ret10#1, __utac_acc__Specification1_spec__1_~tmp~0#1, __utac_acc__Specification1_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__1_~tmp~0#1;havoc __utac_acc__Specification1_spec__1_~tmp___0~0#1; {4017#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:06:33,974 INFO L272 TraceCheckUtils]: 39: Hoare triple {4017#(= ~pumpRunning~0 0)} call __utac_acc__Specification1_spec__1_#t~ret9#1 := isMethaneLevelCritical(); {4015#true} is VALID [2022-02-20 18:06:33,974 INFO L290 TraceCheckUtils]: 40: Hoare triple {4015#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {4015#true} is VALID [2022-02-20 18:06:33,974 INFO L290 TraceCheckUtils]: 41: Hoare triple {4015#true} assume true; {4015#true} is VALID [2022-02-20 18:06:33,975 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {4015#true} {4017#(= ~pumpRunning~0 0)} #237#return; {4017#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:06:33,975 INFO L290 TraceCheckUtils]: 43: Hoare triple {4017#(= ~pumpRunning~0 0)} assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret9#1 && __utac_acc__Specification1_spec__1_#t~ret9#1 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp~0#1 := __utac_acc__Specification1_spec__1_#t~ret9#1;havoc __utac_acc__Specification1_spec__1_#t~ret9#1; {4017#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:06:33,975 INFO L290 TraceCheckUtils]: 44: Hoare triple {4017#(= ~pumpRunning~0 0)} assume 0 != __utac_acc__Specification1_spec__1_~tmp~0#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~10#1;havoc isPumpRunning_~retValue_acc~10#1;isPumpRunning_~retValue_acc~10#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~10#1; {4037#(= |timeShift_isPumpRunning_#res#1| 0)} is VALID [2022-02-20 18:06:33,976 INFO L290 TraceCheckUtils]: 45: Hoare triple {4037#(= |timeShift_isPumpRunning_#res#1| 0)} __utac_acc__Specification1_spec__1_#t~ret10#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret10#1 && __utac_acc__Specification1_spec__1_#t~ret10#1 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp___0~0#1 := __utac_acc__Specification1_spec__1_#t~ret10#1;havoc __utac_acc__Specification1_spec__1_#t~ret10#1; {4038#(= |timeShift___utac_acc__Specification1_spec__1_~tmp___0~0#1| 0)} is VALID [2022-02-20 18:06:33,976 INFO L290 TraceCheckUtils]: 46: Hoare triple {4038#(= |timeShift___utac_acc__Specification1_spec__1_~tmp___0~0#1| 0)} assume 0 != __utac_acc__Specification1_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {4016#false} is VALID [2022-02-20 18:06:33,976 INFO L290 TraceCheckUtils]: 47: Hoare triple {4016#false} assume !false; {4016#false} is VALID [2022-02-20 18:06:33,976 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:06:33,977 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:06:33,977 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1889170328] [2022-02-20 18:06:33,977 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1889170328] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:06:33,977 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:06:33,977 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-02-20 18:06:33,977 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1181969436] [2022-02-20 18:06:33,977 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:06:33,978 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.571428571428571) internal successors, (39), 5 states have internal predecessors, (39), 1 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 48 [2022-02-20 18:06:33,978 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:06:33,978 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 7 states, 7 states have (on average 5.571428571428571) internal successors, (39), 5 states have internal predecessors, (39), 1 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-02-20 18:06:34,007 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 48 edges. 48 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:06:34,008 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-02-20 18:06:34,008 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:06:34,008 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-02-20 18:06:34,008 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-02-20 18:06:34,009 INFO L87 Difference]: Start difference. First operand 275 states and 330 transitions. Second operand has 7 states, 7 states have (on average 5.571428571428571) internal successors, (39), 5 states have internal predecessors, (39), 1 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-02-20 18:06:34,734 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:06:34,735 INFO L93 Difference]: Finished difference Result 291 states and 346 transitions. [2022-02-20 18:06:34,735 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-02-20 18:06:34,735 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.571428571428571) internal successors, (39), 5 states have internal predecessors, (39), 1 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 48 [2022-02-20 18:06:34,735 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:06:34,735 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 5.571428571428571) internal successors, (39), 5 states have internal predecessors, (39), 1 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-02-20 18:06:34,737 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15 states to 15 states and 191 transitions. [2022-02-20 18:06:34,738 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 5.571428571428571) internal successors, (39), 5 states have internal predecessors, (39), 1 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-02-20 18:06:34,740 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15 states to 15 states and 191 transitions. [2022-02-20 18:06:34,740 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 15 states and 191 transitions. [2022-02-20 18:06:34,878 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 191 edges. 191 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:06:34,884 INFO L225 Difference]: With dead ends: 291 [2022-02-20 18:06:34,884 INFO L226 Difference]: Without dead ends: 289 [2022-02-20 18:06:34,885 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 32 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=84, Invalid=188, Unknown=0, NotChecked=0, Total=272 [2022-02-20 18:06:34,885 INFO L933 BasicCegarLoop]: 97 mSDtfsCounter, 176 mSDsluCounter, 100 mSDsCounter, 0 mSdLazyCounter, 368 mSolverCounterSat, 70 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 178 SdHoareTripleChecker+Valid, 197 SdHoareTripleChecker+Invalid, 438 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 70 IncrementalHoareTripleChecker+Valid, 368 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-02-20 18:06:34,886 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [178 Valid, 197 Invalid, 438 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [70 Valid, 368 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-02-20 18:06:34,886 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 289 states. [2022-02-20 18:06:34,896 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 289 to 275. [2022-02-20 18:06:34,896 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:06:34,897 INFO L82 GeneralOperation]: Start isEquivalent. First operand 289 states. Second operand has 275 states, 202 states have (on average 1.2079207920792079) internal successors, (244), 217 states have internal predecessors, (244), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (48), 38 states have call predecessors, (48), 36 states have call successors, (48) [2022-02-20 18:06:34,897 INFO L74 IsIncluded]: Start isIncluded. First operand 289 states. Second operand has 275 states, 202 states have (on average 1.2079207920792079) internal successors, (244), 217 states have internal predecessors, (244), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (48), 38 states have call predecessors, (48), 36 states have call successors, (48) [2022-02-20 18:06:34,898 INFO L87 Difference]: Start difference. First operand 289 states. Second operand has 275 states, 202 states have (on average 1.2079207920792079) internal successors, (244), 217 states have internal predecessors, (244), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (48), 38 states have call predecessors, (48), 36 states have call successors, (48) [2022-02-20 18:06:34,904 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:06:34,904 INFO L93 Difference]: Finished difference Result 289 states and 343 transitions. [2022-02-20 18:06:34,904 INFO L276 IsEmpty]: Start isEmpty. Operand 289 states and 343 transitions. [2022-02-20 18:06:34,905 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:06:34,905 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:06:34,905 INFO L74 IsIncluded]: Start isIncluded. First operand has 275 states, 202 states have (on average 1.2079207920792079) internal successors, (244), 217 states have internal predecessors, (244), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (48), 38 states have call predecessors, (48), 36 states have call successors, (48) Second operand 289 states. [2022-02-20 18:06:34,906 INFO L87 Difference]: Start difference. First operand has 275 states, 202 states have (on average 1.2079207920792079) internal successors, (244), 217 states have internal predecessors, (244), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (48), 38 states have call predecessors, (48), 36 states have call successors, (48) Second operand 289 states. [2022-02-20 18:06:34,912 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:06:34,912 INFO L93 Difference]: Finished difference Result 289 states and 343 transitions. [2022-02-20 18:06:34,912 INFO L276 IsEmpty]: Start isEmpty. Operand 289 states and 343 transitions. [2022-02-20 18:06:34,912 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:06:34,913 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:06:34,913 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:06:34,913 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:06:34,913 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 275 states, 202 states have (on average 1.2079207920792079) internal successors, (244), 217 states have internal predecessors, (244), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (48), 38 states have call predecessors, (48), 36 states have call successors, (48) [2022-02-20 18:06:34,920 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 275 states to 275 states and 328 transitions. [2022-02-20 18:06:34,920 INFO L78 Accepts]: Start accepts. Automaton has 275 states and 328 transitions. Word has length 48 [2022-02-20 18:06:34,920 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:06:34,920 INFO L470 AbstractCegarLoop]: Abstraction has 275 states and 328 transitions. [2022-02-20 18:06:34,921 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.571428571428571) internal successors, (39), 5 states have internal predecessors, (39), 1 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-02-20 18:06:34,921 INFO L276 IsEmpty]: Start isEmpty. Operand 275 states and 328 transitions. [2022-02-20 18:06:34,921 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2022-02-20 18:06:34,921 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:06:34,922 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:06:34,922 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-02-20 18:06:34,922 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:06:34,922 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:06:34,922 INFO L85 PathProgramCache]: Analyzing trace with hash -420556161, now seen corresponding path program 1 times [2022-02-20 18:06:34,922 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:06:34,922 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [24279886] [2022-02-20 18:06:34,923 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:06:34,923 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:06:34,943 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:06:34,967 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-02-20 18:06:34,968 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:06:34,975 INFO L290 TraceCheckUtils]: 0: Hoare triple {5463#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {5432#true} is VALID [2022-02-20 18:06:34,975 INFO L290 TraceCheckUtils]: 1: Hoare triple {5432#true} assume true; {5432#true} is VALID [2022-02-20 18:06:34,975 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {5432#true} {5432#true} #245#return; {5432#true} is VALID [2022-02-20 18:06:34,977 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-02-20 18:06:34,986 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:06:35,003 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:06:35,005 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:06:35,007 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:06:35,008 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:06:35,009 INFO L290 TraceCheckUtils]: 0: Hoare triple {5432#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {5432#true} is VALID [2022-02-20 18:06:35,009 INFO L290 TraceCheckUtils]: 1: Hoare triple {5432#true} assume true; {5432#true} is VALID [2022-02-20 18:06:35,009 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {5432#true} {5432#true} #257#return; {5432#true} is VALID [2022-02-20 18:06:35,010 INFO L290 TraceCheckUtils]: 0: Hoare triple {5432#true} havoc ~retValue_acc~9; {5432#true} is VALID [2022-02-20 18:06:35,010 INFO L272 TraceCheckUtils]: 1: Hoare triple {5432#true} call #t~ret43 := isMethaneLevelCritical(); {5432#true} is VALID [2022-02-20 18:06:35,010 INFO L290 TraceCheckUtils]: 2: Hoare triple {5432#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {5432#true} is VALID [2022-02-20 18:06:35,010 INFO L290 TraceCheckUtils]: 3: Hoare triple {5432#true} assume true; {5432#true} is VALID [2022-02-20 18:06:35,010 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {5432#true} {5432#true} #257#return; {5432#true} is VALID [2022-02-20 18:06:35,010 INFO L290 TraceCheckUtils]: 5: Hoare triple {5432#true} assume -2147483648 <= #t~ret43 && #t~ret43 <= 2147483647;~retValue_acc~9 := #t~ret43;havoc #t~ret43;#res := ~retValue_acc~9; {5432#true} is VALID [2022-02-20 18:06:35,010 INFO L290 TraceCheckUtils]: 6: Hoare triple {5432#true} assume true; {5432#true} is VALID [2022-02-20 18:06:35,010 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {5432#true} {5433#false} #251#return; {5433#false} is VALID [2022-02-20 18:06:35,011 INFO L290 TraceCheckUtils]: 0: Hoare triple {5464#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~6#1; {5432#true} is VALID [2022-02-20 18:06:35,011 INFO L290 TraceCheckUtils]: 1: Hoare triple {5432#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret52#1, isHighWaterLevel_~retValue_acc~11#1, isHighWaterLevel_~tmp~9#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~11#1;havoc isHighWaterLevel_~tmp~9#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {5432#true} is VALID [2022-02-20 18:06:35,011 INFO L290 TraceCheckUtils]: 2: Hoare triple {5432#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~2#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {5432#true} is VALID [2022-02-20 18:06:35,011 INFO L290 TraceCheckUtils]: 3: Hoare triple {5432#true} isHighWaterLevel_#t~ret52#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret52#1 && isHighWaterLevel_#t~ret52#1 <= 2147483647;isHighWaterLevel_~tmp~9#1 := isHighWaterLevel_#t~ret52#1;havoc isHighWaterLevel_#t~ret52#1; {5432#true} is VALID [2022-02-20 18:06:35,011 INFO L290 TraceCheckUtils]: 4: Hoare triple {5432#true} assume 0 != isHighWaterLevel_~tmp~9#1;isHighWaterLevel_~tmp___0~2#1 := 0; {5465#(= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~2#1| 0)} is VALID [2022-02-20 18:06:35,012 INFO L290 TraceCheckUtils]: 5: Hoare triple {5465#(= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~2#1| 0)} isHighWaterLevel_~retValue_acc~11#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~11#1; {5466#(= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1| 0)} is VALID [2022-02-20 18:06:35,012 INFO L290 TraceCheckUtils]: 6: Hoare triple {5466#(= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1| 0)} #t~ret40#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret40#1 && #t~ret40#1 <= 2147483647;~tmp~6#1 := #t~ret40#1;havoc #t~ret40#1; {5467#(= |processEnvironment__wrappee__methaneQuery_~tmp~6#1| 0)} is VALID [2022-02-20 18:06:35,012 INFO L290 TraceCheckUtils]: 7: Hoare triple {5467#(= |processEnvironment__wrappee__methaneQuery_~tmp~6#1| 0)} assume 0 != ~tmp~6#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret42#1, activatePump_~tmp~8#1;havoc activatePump_~tmp~8#1; {5433#false} is VALID [2022-02-20 18:06:35,013 INFO L272 TraceCheckUtils]: 8: Hoare triple {5433#false} call activatePump_#t~ret42#1 := isMethaneAlarm(); {5432#true} is VALID [2022-02-20 18:06:35,013 INFO L290 TraceCheckUtils]: 9: Hoare triple {5432#true} havoc ~retValue_acc~9; {5432#true} is VALID [2022-02-20 18:06:35,013 INFO L272 TraceCheckUtils]: 10: Hoare triple {5432#true} call #t~ret43 := isMethaneLevelCritical(); {5432#true} is VALID [2022-02-20 18:06:35,013 INFO L290 TraceCheckUtils]: 11: Hoare triple {5432#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {5432#true} is VALID [2022-02-20 18:06:35,013 INFO L290 TraceCheckUtils]: 12: Hoare triple {5432#true} assume true; {5432#true} is VALID [2022-02-20 18:06:35,013 INFO L284 TraceCheckUtils]: 13: Hoare quadruple {5432#true} {5432#true} #257#return; {5432#true} is VALID [2022-02-20 18:06:35,013 INFO L290 TraceCheckUtils]: 14: Hoare triple {5432#true} assume -2147483648 <= #t~ret43 && #t~ret43 <= 2147483647;~retValue_acc~9 := #t~ret43;havoc #t~ret43;#res := ~retValue_acc~9; {5432#true} is VALID [2022-02-20 18:06:35,013 INFO L290 TraceCheckUtils]: 15: Hoare triple {5432#true} assume true; {5432#true} is VALID [2022-02-20 18:06:35,014 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {5432#true} {5433#false} #251#return; {5433#false} is VALID [2022-02-20 18:06:35,014 INFO L290 TraceCheckUtils]: 17: Hoare triple {5433#false} assume -2147483648 <= activatePump_#t~ret42#1 && activatePump_#t~ret42#1 <= 2147483647;activatePump_~tmp~8#1 := activatePump_#t~ret42#1;havoc activatePump_#t~ret42#1; {5433#false} is VALID [2022-02-20 18:06:35,014 INFO L290 TraceCheckUtils]: 18: Hoare triple {5433#false} assume !(0 != activatePump_~tmp~8#1);assume { :begin_inline_activatePump__wrappee__highWaterSensor } true;~pumpRunning~0 := 1; {5433#false} is VALID [2022-02-20 18:06:35,014 INFO L290 TraceCheckUtils]: 19: Hoare triple {5433#false} assume { :end_inline_activatePump__wrappee__highWaterSensor } true; {5433#false} is VALID [2022-02-20 18:06:35,014 INFO L290 TraceCheckUtils]: 20: Hoare triple {5433#false} assume { :end_inline_activatePump } true; {5433#false} is VALID [2022-02-20 18:06:35,014 INFO L290 TraceCheckUtils]: 21: Hoare triple {5433#false} assume true; {5433#false} is VALID [2022-02-20 18:06:35,014 INFO L284 TraceCheckUtils]: 22: Hoare quadruple {5433#false} {5432#true} #235#return; {5433#false} is VALID [2022-02-20 18:06:35,015 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2022-02-20 18:06:35,015 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:06:35,017 INFO L290 TraceCheckUtils]: 0: Hoare triple {5432#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {5432#true} is VALID [2022-02-20 18:06:35,018 INFO L290 TraceCheckUtils]: 1: Hoare triple {5432#true} assume true; {5432#true} is VALID [2022-02-20 18:06:35,018 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {5432#true} {5433#false} #237#return; {5433#false} is VALID [2022-02-20 18:06:35,018 INFO L290 TraceCheckUtils]: 0: Hoare triple {5432#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(30, 9);call #Ultimate.allocInit(9, 10);call #Ultimate.allocInit(21, 11);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(25, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {5432#true} is VALID [2022-02-20 18:06:35,018 INFO L290 TraceCheckUtils]: 1: Hoare triple {5432#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret11#1, main_~retValue_acc~3#1, main_~tmp~1#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~1#1;assume { :begin_inline_select_helpers } true; {5432#true} is VALID [2022-02-20 18:06:35,018 INFO L290 TraceCheckUtils]: 2: Hoare triple {5432#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {5432#true} is VALID [2022-02-20 18:06:35,018 INFO L290 TraceCheckUtils]: 3: Hoare triple {5432#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~5#1;havoc valid_product_~retValue_acc~5#1;valid_product_~retValue_acc~5#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~5#1; {5432#true} is VALID [2022-02-20 18:06:35,019 INFO L290 TraceCheckUtils]: 4: Hoare triple {5432#true} main_#t~ret11#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret11#1 && main_#t~ret11#1 <= 2147483647;main_~tmp~1#1 := main_#t~ret11#1;havoc main_#t~ret11#1; {5432#true} is VALID [2022-02-20 18:06:35,019 INFO L290 TraceCheckUtils]: 5: Hoare triple {5432#true} assume 0 != main_~tmp~1#1;assume { :begin_inline_setup } true; {5432#true} is VALID [2022-02-20 18:06:35,019 INFO L290 TraceCheckUtils]: 6: Hoare triple {5432#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet36#1, test_#t~nondet37#1, test_#t~nondet38#1, test_#t~nondet39#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {5432#true} is VALID [2022-02-20 18:06:35,019 INFO L290 TraceCheckUtils]: 7: Hoare triple {5432#true} assume !false; {5432#true} is VALID [2022-02-20 18:06:35,019 INFO L290 TraceCheckUtils]: 8: Hoare triple {5432#true} assume test_~splverifierCounter~0#1 < 4; {5432#true} is VALID [2022-02-20 18:06:35,019 INFO L290 TraceCheckUtils]: 9: Hoare triple {5432#true} assume -2147483648 <= test_#t~nondet36#1 && test_#t~nondet36#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet36#1;havoc test_#t~nondet36#1; {5432#true} is VALID [2022-02-20 18:06:35,020 INFO L290 TraceCheckUtils]: 10: Hoare triple {5432#true} assume !(0 != test_~tmp~5#1); {5432#true} is VALID [2022-02-20 18:06:35,020 INFO L290 TraceCheckUtils]: 11: Hoare triple {5432#true} assume -2147483648 <= test_#t~nondet37#1 && test_#t~nondet37#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet37#1;havoc test_#t~nondet37#1; {5432#true} is VALID [2022-02-20 18:06:35,020 INFO L290 TraceCheckUtils]: 12: Hoare triple {5432#true} assume 0 != test_~tmp___0~1#1; {5432#true} is VALID [2022-02-20 18:06:35,020 INFO L272 TraceCheckUtils]: 13: Hoare triple {5432#true} call changeMethaneLevel(); {5463#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:35,020 INFO L290 TraceCheckUtils]: 14: Hoare triple {5463#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {5432#true} is VALID [2022-02-20 18:06:35,021 INFO L290 TraceCheckUtils]: 15: Hoare triple {5432#true} assume true; {5432#true} is VALID [2022-02-20 18:06:35,021 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {5432#true} {5432#true} #245#return; {5432#true} is VALID [2022-02-20 18:06:35,021 INFO L290 TraceCheckUtils]: 17: Hoare triple {5432#true} assume -2147483648 <= test_#t~nondet38#1 && test_#t~nondet38#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet38#1;havoc test_#t~nondet38#1; {5432#true} is VALID [2022-02-20 18:06:35,021 INFO L290 TraceCheckUtils]: 18: Hoare triple {5432#true} assume 0 != test_~tmp___2~0#1; {5432#true} is VALID [2022-02-20 18:06:35,021 INFO L272 TraceCheckUtils]: 19: Hoare triple {5432#true} call timeShift(); {5432#true} is VALID [2022-02-20 18:06:35,021 INFO L290 TraceCheckUtils]: 20: Hoare triple {5432#true} assume !(0 != ~pumpRunning~0); {5432#true} is VALID [2022-02-20 18:06:35,021 INFO L290 TraceCheckUtils]: 21: Hoare triple {5432#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret41#1, processEnvironment_~tmp~7#1;havoc processEnvironment_~tmp~7#1; {5432#true} is VALID [2022-02-20 18:06:35,022 INFO L290 TraceCheckUtils]: 22: Hoare triple {5432#true} assume !(0 != ~pumpRunning~0); {5432#true} is VALID [2022-02-20 18:06:35,022 INFO L272 TraceCheckUtils]: 23: Hoare triple {5432#true} call processEnvironment__wrappee__methaneQuery(); {5464#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:06:35,022 INFO L290 TraceCheckUtils]: 24: Hoare triple {5464#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~6#1; {5432#true} is VALID [2022-02-20 18:06:35,022 INFO L290 TraceCheckUtils]: 25: Hoare triple {5432#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret52#1, isHighWaterLevel_~retValue_acc~11#1, isHighWaterLevel_~tmp~9#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~11#1;havoc isHighWaterLevel_~tmp~9#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {5432#true} is VALID [2022-02-20 18:06:35,022 INFO L290 TraceCheckUtils]: 26: Hoare triple {5432#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~2#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {5432#true} is VALID [2022-02-20 18:06:35,023 INFO L290 TraceCheckUtils]: 27: Hoare triple {5432#true} isHighWaterLevel_#t~ret52#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret52#1 && isHighWaterLevel_#t~ret52#1 <= 2147483647;isHighWaterLevel_~tmp~9#1 := isHighWaterLevel_#t~ret52#1;havoc isHighWaterLevel_#t~ret52#1; {5432#true} is VALID [2022-02-20 18:06:35,023 INFO L290 TraceCheckUtils]: 28: Hoare triple {5432#true} assume 0 != isHighWaterLevel_~tmp~9#1;isHighWaterLevel_~tmp___0~2#1 := 0; {5465#(= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~2#1| 0)} is VALID [2022-02-20 18:06:35,023 INFO L290 TraceCheckUtils]: 29: Hoare triple {5465#(= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~2#1| 0)} isHighWaterLevel_~retValue_acc~11#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~11#1; {5466#(= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1| 0)} is VALID [2022-02-20 18:06:35,024 INFO L290 TraceCheckUtils]: 30: Hoare triple {5466#(= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1| 0)} #t~ret40#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret40#1 && #t~ret40#1 <= 2147483647;~tmp~6#1 := #t~ret40#1;havoc #t~ret40#1; {5467#(= |processEnvironment__wrappee__methaneQuery_~tmp~6#1| 0)} is VALID [2022-02-20 18:06:35,024 INFO L290 TraceCheckUtils]: 31: Hoare triple {5467#(= |processEnvironment__wrappee__methaneQuery_~tmp~6#1| 0)} assume 0 != ~tmp~6#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret42#1, activatePump_~tmp~8#1;havoc activatePump_~tmp~8#1; {5433#false} is VALID [2022-02-20 18:06:35,024 INFO L272 TraceCheckUtils]: 32: Hoare triple {5433#false} call activatePump_#t~ret42#1 := isMethaneAlarm(); {5432#true} is VALID [2022-02-20 18:06:35,024 INFO L290 TraceCheckUtils]: 33: Hoare triple {5432#true} havoc ~retValue_acc~9; {5432#true} is VALID [2022-02-20 18:06:35,025 INFO L272 TraceCheckUtils]: 34: Hoare triple {5432#true} call #t~ret43 := isMethaneLevelCritical(); {5432#true} is VALID [2022-02-20 18:06:35,025 INFO L290 TraceCheckUtils]: 35: Hoare triple {5432#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {5432#true} is VALID [2022-02-20 18:06:35,025 INFO L290 TraceCheckUtils]: 36: Hoare triple {5432#true} assume true; {5432#true} is VALID [2022-02-20 18:06:35,025 INFO L284 TraceCheckUtils]: 37: Hoare quadruple {5432#true} {5432#true} #257#return; {5432#true} is VALID [2022-02-20 18:06:35,025 INFO L290 TraceCheckUtils]: 38: Hoare triple {5432#true} assume -2147483648 <= #t~ret43 && #t~ret43 <= 2147483647;~retValue_acc~9 := #t~ret43;havoc #t~ret43;#res := ~retValue_acc~9; {5432#true} is VALID [2022-02-20 18:06:35,025 INFO L290 TraceCheckUtils]: 39: Hoare triple {5432#true} assume true; {5432#true} is VALID [2022-02-20 18:06:35,025 INFO L284 TraceCheckUtils]: 40: Hoare quadruple {5432#true} {5433#false} #251#return; {5433#false} is VALID [2022-02-20 18:06:35,026 INFO L290 TraceCheckUtils]: 41: Hoare triple {5433#false} assume -2147483648 <= activatePump_#t~ret42#1 && activatePump_#t~ret42#1 <= 2147483647;activatePump_~tmp~8#1 := activatePump_#t~ret42#1;havoc activatePump_#t~ret42#1; {5433#false} is VALID [2022-02-20 18:06:35,026 INFO L290 TraceCheckUtils]: 42: Hoare triple {5433#false} assume !(0 != activatePump_~tmp~8#1);assume { :begin_inline_activatePump__wrappee__highWaterSensor } true;~pumpRunning~0 := 1; {5433#false} is VALID [2022-02-20 18:06:35,026 INFO L290 TraceCheckUtils]: 43: Hoare triple {5433#false} assume { :end_inline_activatePump__wrappee__highWaterSensor } true; {5433#false} is VALID [2022-02-20 18:06:35,026 INFO L290 TraceCheckUtils]: 44: Hoare triple {5433#false} assume { :end_inline_activatePump } true; {5433#false} is VALID [2022-02-20 18:06:35,026 INFO L290 TraceCheckUtils]: 45: Hoare triple {5433#false} assume true; {5433#false} is VALID [2022-02-20 18:06:35,026 INFO L284 TraceCheckUtils]: 46: Hoare quadruple {5433#false} {5432#true} #235#return; {5433#false} is VALID [2022-02-20 18:06:35,026 INFO L290 TraceCheckUtils]: 47: Hoare triple {5433#false} assume { :end_inline_processEnvironment } true; {5433#false} is VALID [2022-02-20 18:06:35,027 INFO L290 TraceCheckUtils]: 48: Hoare triple {5433#false} assume { :begin_inline___utac_acc__Specification1_spec__1 } true;havoc __utac_acc__Specification1_spec__1_#t~ret9#1, __utac_acc__Specification1_spec__1_#t~ret10#1, __utac_acc__Specification1_spec__1_~tmp~0#1, __utac_acc__Specification1_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__1_~tmp~0#1;havoc __utac_acc__Specification1_spec__1_~tmp___0~0#1; {5433#false} is VALID [2022-02-20 18:06:35,027 INFO L272 TraceCheckUtils]: 49: Hoare triple {5433#false} call __utac_acc__Specification1_spec__1_#t~ret9#1 := isMethaneLevelCritical(); {5432#true} is VALID [2022-02-20 18:06:35,027 INFO L290 TraceCheckUtils]: 50: Hoare triple {5432#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {5432#true} is VALID [2022-02-20 18:06:35,027 INFO L290 TraceCheckUtils]: 51: Hoare triple {5432#true} assume true; {5432#true} is VALID [2022-02-20 18:06:35,027 INFO L284 TraceCheckUtils]: 52: Hoare quadruple {5432#true} {5433#false} #237#return; {5433#false} is VALID [2022-02-20 18:06:35,027 INFO L290 TraceCheckUtils]: 53: Hoare triple {5433#false} assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret9#1 && __utac_acc__Specification1_spec__1_#t~ret9#1 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp~0#1 := __utac_acc__Specification1_spec__1_#t~ret9#1;havoc __utac_acc__Specification1_spec__1_#t~ret9#1; {5433#false} is VALID [2022-02-20 18:06:35,027 INFO L290 TraceCheckUtils]: 54: Hoare triple {5433#false} assume 0 != __utac_acc__Specification1_spec__1_~tmp~0#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~10#1;havoc isPumpRunning_~retValue_acc~10#1;isPumpRunning_~retValue_acc~10#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~10#1; {5433#false} is VALID [2022-02-20 18:06:35,028 INFO L290 TraceCheckUtils]: 55: Hoare triple {5433#false} __utac_acc__Specification1_spec__1_#t~ret10#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret10#1 && __utac_acc__Specification1_spec__1_#t~ret10#1 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp___0~0#1 := __utac_acc__Specification1_spec__1_#t~ret10#1;havoc __utac_acc__Specification1_spec__1_#t~ret10#1; {5433#false} is VALID [2022-02-20 18:06:35,028 INFO L290 TraceCheckUtils]: 56: Hoare triple {5433#false} assume 0 != __utac_acc__Specification1_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {5433#false} is VALID [2022-02-20 18:06:35,028 INFO L290 TraceCheckUtils]: 57: Hoare triple {5433#false} assume !false; {5433#false} is VALID [2022-02-20 18:06:35,028 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-02-20 18:06:35,028 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:06:35,028 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [24279886] [2022-02-20 18:06:35,029 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [24279886] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:06:35,029 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:06:35,029 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-02-20 18:06:35,029 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [620788270] [2022-02-20 18:06:35,029 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:06:35,030 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 58 [2022-02-20 18:06:35,030 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:06:35,030 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-02-20 18:06:35,062 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 56 edges. 56 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:06:35,062 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-02-20 18:06:35,062 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:06:35,062 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-02-20 18:06:35,063 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-02-20 18:06:35,063 INFO L87 Difference]: Start difference. First operand 275 states and 328 transitions. Second operand has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-02-20 18:06:35,633 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:06:35,633 INFO L93 Difference]: Finished difference Result 561 states and 682 transitions. [2022-02-20 18:06:35,633 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-02-20 18:06:35,634 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 58 [2022-02-20 18:06:35,634 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:06:35,634 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-02-20 18:06:35,636 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 212 transitions. [2022-02-20 18:06:35,636 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-02-20 18:06:35,638 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 212 transitions. [2022-02-20 18:06:35,638 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 9 states and 212 transitions. [2022-02-20 18:06:35,779 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 212 edges. 212 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:06:35,784 INFO L225 Difference]: With dead ends: 561 [2022-02-20 18:06:35,784 INFO L226 Difference]: Without dead ends: 293 [2022-02-20 18:06:35,785 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2022-02-20 18:06:35,785 INFO L933 BasicCegarLoop]: 85 mSDtfsCounter, 118 mSDsluCounter, 107 mSDsCounter, 0 mSdLazyCounter, 305 mSolverCounterSat, 52 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 119 SdHoareTripleChecker+Valid, 192 SdHoareTripleChecker+Invalid, 357 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 52 IncrementalHoareTripleChecker+Valid, 305 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-02-20 18:06:35,786 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [119 Valid, 192 Invalid, 357 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [52 Valid, 305 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-02-20 18:06:35,786 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 293 states. [2022-02-20 18:06:35,795 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 293 to 281. [2022-02-20 18:06:35,796 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:06:35,797 INFO L82 GeneralOperation]: Start isEquivalent. First operand 293 states. Second operand has 281 states, 208 states have (on average 1.2019230769230769) internal successors, (250), 223 states have internal predecessors, (250), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (48), 38 states have call predecessors, (48), 36 states have call successors, (48) [2022-02-20 18:06:35,798 INFO L74 IsIncluded]: Start isIncluded. First operand 293 states. Second operand has 281 states, 208 states have (on average 1.2019230769230769) internal successors, (250), 223 states have internal predecessors, (250), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (48), 38 states have call predecessors, (48), 36 states have call successors, (48) [2022-02-20 18:06:35,798 INFO L87 Difference]: Start difference. First operand 293 states. Second operand has 281 states, 208 states have (on average 1.2019230769230769) internal successors, (250), 223 states have internal predecessors, (250), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (48), 38 states have call predecessors, (48), 36 states have call successors, (48) [2022-02-20 18:06:35,804 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:06:35,804 INFO L93 Difference]: Finished difference Result 293 states and 347 transitions. [2022-02-20 18:06:35,804 INFO L276 IsEmpty]: Start isEmpty. Operand 293 states and 347 transitions. [2022-02-20 18:06:35,805 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:06:35,805 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:06:35,805 INFO L74 IsIncluded]: Start isIncluded. First operand has 281 states, 208 states have (on average 1.2019230769230769) internal successors, (250), 223 states have internal predecessors, (250), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (48), 38 states have call predecessors, (48), 36 states have call successors, (48) Second operand 293 states. [2022-02-20 18:06:35,806 INFO L87 Difference]: Start difference. First operand has 281 states, 208 states have (on average 1.2019230769230769) internal successors, (250), 223 states have internal predecessors, (250), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (48), 38 states have call predecessors, (48), 36 states have call successors, (48) Second operand 293 states. [2022-02-20 18:06:35,811 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:06:35,811 INFO L93 Difference]: Finished difference Result 293 states and 347 transitions. [2022-02-20 18:06:35,811 INFO L276 IsEmpty]: Start isEmpty. Operand 293 states and 347 transitions. [2022-02-20 18:06:35,812 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:06:35,812 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:06:35,812 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:06:35,812 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:06:35,813 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 281 states, 208 states have (on average 1.2019230769230769) internal successors, (250), 223 states have internal predecessors, (250), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (48), 38 states have call predecessors, (48), 36 states have call successors, (48) [2022-02-20 18:06:35,818 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 281 states to 281 states and 334 transitions. [2022-02-20 18:06:35,819 INFO L78 Accepts]: Start accepts. Automaton has 281 states and 334 transitions. Word has length 58 [2022-02-20 18:06:35,819 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:06:35,819 INFO L470 AbstractCegarLoop]: Abstraction has 281 states and 334 transitions. [2022-02-20 18:06:35,819 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-02-20 18:06:35,819 INFO L276 IsEmpty]: Start isEmpty. Operand 281 states and 334 transitions. [2022-02-20 18:06:35,820 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2022-02-20 18:06:35,820 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:06:35,820 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:06:35,820 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-02-20 18:06:35,820 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:06:35,821 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:06:35,821 INFO L85 PathProgramCache]: Analyzing trace with hash -397923907, now seen corresponding path program 1 times [2022-02-20 18:06:35,821 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:06:35,821 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [917855456] [2022-02-20 18:06:35,821 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:06:35,821 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:06:35,835 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:06:35,849 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-02-20 18:06:35,850 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:06:35,851 INFO L290 TraceCheckUtils]: 0: Hoare triple {7278#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {7246#true} is VALID [2022-02-20 18:06:35,851 INFO L290 TraceCheckUtils]: 1: Hoare triple {7246#true} assume true; {7246#true} is VALID [2022-02-20 18:06:35,852 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {7246#true} {7248#(= 1 ~systemActive~0)} #245#return; {7248#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:35,854 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-02-20 18:06:35,858 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:06:35,872 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:06:35,873 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:06:35,875 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:06:35,875 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:06:35,877 INFO L290 TraceCheckUtils]: 0: Hoare triple {7246#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {7246#true} is VALID [2022-02-20 18:06:35,877 INFO L290 TraceCheckUtils]: 1: Hoare triple {7246#true} assume true; {7246#true} is VALID [2022-02-20 18:06:35,877 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {7246#true} {7246#true} #257#return; {7246#true} is VALID [2022-02-20 18:06:35,877 INFO L290 TraceCheckUtils]: 0: Hoare triple {7246#true} havoc ~retValue_acc~9; {7246#true} is VALID [2022-02-20 18:06:35,877 INFO L272 TraceCheckUtils]: 1: Hoare triple {7246#true} call #t~ret43 := isMethaneLevelCritical(); {7246#true} is VALID [2022-02-20 18:06:35,877 INFO L290 TraceCheckUtils]: 2: Hoare triple {7246#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {7246#true} is VALID [2022-02-20 18:06:35,877 INFO L290 TraceCheckUtils]: 3: Hoare triple {7246#true} assume true; {7246#true} is VALID [2022-02-20 18:06:35,877 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {7246#true} {7246#true} #257#return; {7246#true} is VALID [2022-02-20 18:06:35,878 INFO L290 TraceCheckUtils]: 5: Hoare triple {7246#true} assume -2147483648 <= #t~ret43 && #t~ret43 <= 2147483647;~retValue_acc~9 := #t~ret43;havoc #t~ret43;#res := ~retValue_acc~9; {7246#true} is VALID [2022-02-20 18:06:35,878 INFO L290 TraceCheckUtils]: 6: Hoare triple {7246#true} assume true; {7246#true} is VALID [2022-02-20 18:06:35,878 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {7246#true} {7247#false} #251#return; {7247#false} is VALID [2022-02-20 18:06:35,878 INFO L290 TraceCheckUtils]: 0: Hoare triple {7279#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~6#1; {7246#true} is VALID [2022-02-20 18:06:35,878 INFO L290 TraceCheckUtils]: 1: Hoare triple {7246#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret52#1, isHighWaterLevel_~retValue_acc~11#1, isHighWaterLevel_~tmp~9#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~11#1;havoc isHighWaterLevel_~tmp~9#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {7246#true} is VALID [2022-02-20 18:06:35,879 INFO L290 TraceCheckUtils]: 2: Hoare triple {7246#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~2#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {7280#(<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1|)} is VALID [2022-02-20 18:06:35,879 INFO L290 TraceCheckUtils]: 3: Hoare triple {7280#(<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1|)} isHighWaterLevel_#t~ret52#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret52#1 && isHighWaterLevel_#t~ret52#1 <= 2147483647;isHighWaterLevel_~tmp~9#1 := isHighWaterLevel_#t~ret52#1;havoc isHighWaterLevel_#t~ret52#1; {7281#(<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp~9#1|)} is VALID [2022-02-20 18:06:35,879 INFO L290 TraceCheckUtils]: 4: Hoare triple {7281#(<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp~9#1|)} assume !(0 != isHighWaterLevel_~tmp~9#1);isHighWaterLevel_~tmp___0~2#1 := 1; {7247#false} is VALID [2022-02-20 18:06:35,879 INFO L290 TraceCheckUtils]: 5: Hoare triple {7247#false} isHighWaterLevel_~retValue_acc~11#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~11#1; {7247#false} is VALID [2022-02-20 18:06:35,880 INFO L290 TraceCheckUtils]: 6: Hoare triple {7247#false} #t~ret40#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret40#1 && #t~ret40#1 <= 2147483647;~tmp~6#1 := #t~ret40#1;havoc #t~ret40#1; {7247#false} is VALID [2022-02-20 18:06:35,880 INFO L290 TraceCheckUtils]: 7: Hoare triple {7247#false} assume 0 != ~tmp~6#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret42#1, activatePump_~tmp~8#1;havoc activatePump_~tmp~8#1; {7247#false} is VALID [2022-02-20 18:06:35,880 INFO L272 TraceCheckUtils]: 8: Hoare triple {7247#false} call activatePump_#t~ret42#1 := isMethaneAlarm(); {7246#true} is VALID [2022-02-20 18:06:35,880 INFO L290 TraceCheckUtils]: 9: Hoare triple {7246#true} havoc ~retValue_acc~9; {7246#true} is VALID [2022-02-20 18:06:35,880 INFO L272 TraceCheckUtils]: 10: Hoare triple {7246#true} call #t~ret43 := isMethaneLevelCritical(); {7246#true} is VALID [2022-02-20 18:06:35,880 INFO L290 TraceCheckUtils]: 11: Hoare triple {7246#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {7246#true} is VALID [2022-02-20 18:06:35,880 INFO L290 TraceCheckUtils]: 12: Hoare triple {7246#true} assume true; {7246#true} is VALID [2022-02-20 18:06:35,880 INFO L284 TraceCheckUtils]: 13: Hoare quadruple {7246#true} {7246#true} #257#return; {7246#true} is VALID [2022-02-20 18:06:35,881 INFO L290 TraceCheckUtils]: 14: Hoare triple {7246#true} assume -2147483648 <= #t~ret43 && #t~ret43 <= 2147483647;~retValue_acc~9 := #t~ret43;havoc #t~ret43;#res := ~retValue_acc~9; {7246#true} is VALID [2022-02-20 18:06:35,881 INFO L290 TraceCheckUtils]: 15: Hoare triple {7246#true} assume true; {7246#true} is VALID [2022-02-20 18:06:35,881 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {7246#true} {7247#false} #251#return; {7247#false} is VALID [2022-02-20 18:06:35,881 INFO L290 TraceCheckUtils]: 17: Hoare triple {7247#false} assume -2147483648 <= activatePump_#t~ret42#1 && activatePump_#t~ret42#1 <= 2147483647;activatePump_~tmp~8#1 := activatePump_#t~ret42#1;havoc activatePump_#t~ret42#1; {7247#false} is VALID [2022-02-20 18:06:35,881 INFO L290 TraceCheckUtils]: 18: Hoare triple {7247#false} assume !(0 != activatePump_~tmp~8#1);assume { :begin_inline_activatePump__wrappee__highWaterSensor } true;~pumpRunning~0 := 1; {7247#false} is VALID [2022-02-20 18:06:35,881 INFO L290 TraceCheckUtils]: 19: Hoare triple {7247#false} assume { :end_inline_activatePump__wrappee__highWaterSensor } true; {7247#false} is VALID [2022-02-20 18:06:35,881 INFO L290 TraceCheckUtils]: 20: Hoare triple {7247#false} assume { :end_inline_activatePump } true; {7247#false} is VALID [2022-02-20 18:06:35,881 INFO L290 TraceCheckUtils]: 21: Hoare triple {7247#false} assume true; {7247#false} is VALID [2022-02-20 18:06:35,882 INFO L284 TraceCheckUtils]: 22: Hoare quadruple {7247#false} {7246#true} #235#return; {7247#false} is VALID [2022-02-20 18:06:35,882 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2022-02-20 18:06:35,882 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:06:35,884 INFO L290 TraceCheckUtils]: 0: Hoare triple {7246#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {7246#true} is VALID [2022-02-20 18:06:35,884 INFO L290 TraceCheckUtils]: 1: Hoare triple {7246#true} assume true; {7246#true} is VALID [2022-02-20 18:06:35,884 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {7246#true} {7247#false} #237#return; {7247#false} is VALID [2022-02-20 18:06:35,885 INFO L290 TraceCheckUtils]: 0: Hoare triple {7246#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(30, 9);call #Ultimate.allocInit(9, 10);call #Ultimate.allocInit(21, 11);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(25, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {7248#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:35,885 INFO L290 TraceCheckUtils]: 1: Hoare triple {7248#(= 1 ~systemActive~0)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret11#1, main_~retValue_acc~3#1, main_~tmp~1#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~1#1;assume { :begin_inline_select_helpers } true; {7248#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:35,886 INFO L290 TraceCheckUtils]: 2: Hoare triple {7248#(= 1 ~systemActive~0)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {7248#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:35,886 INFO L290 TraceCheckUtils]: 3: Hoare triple {7248#(= 1 ~systemActive~0)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~5#1;havoc valid_product_~retValue_acc~5#1;valid_product_~retValue_acc~5#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~5#1; {7248#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:35,886 INFO L290 TraceCheckUtils]: 4: Hoare triple {7248#(= 1 ~systemActive~0)} main_#t~ret11#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret11#1 && main_#t~ret11#1 <= 2147483647;main_~tmp~1#1 := main_#t~ret11#1;havoc main_#t~ret11#1; {7248#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:35,887 INFO L290 TraceCheckUtils]: 5: Hoare triple {7248#(= 1 ~systemActive~0)} assume 0 != main_~tmp~1#1;assume { :begin_inline_setup } true; {7248#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:35,888 INFO L290 TraceCheckUtils]: 6: Hoare triple {7248#(= 1 ~systemActive~0)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet36#1, test_#t~nondet37#1, test_#t~nondet38#1, test_#t~nondet39#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {7248#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:35,888 INFO L290 TraceCheckUtils]: 7: Hoare triple {7248#(= 1 ~systemActive~0)} assume !false; {7248#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:35,889 INFO L290 TraceCheckUtils]: 8: Hoare triple {7248#(= 1 ~systemActive~0)} assume test_~splverifierCounter~0#1 < 4; {7248#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:35,889 INFO L290 TraceCheckUtils]: 9: Hoare triple {7248#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet36#1 && test_#t~nondet36#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet36#1;havoc test_#t~nondet36#1; {7248#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:35,889 INFO L290 TraceCheckUtils]: 10: Hoare triple {7248#(= 1 ~systemActive~0)} assume !(0 != test_~tmp~5#1); {7248#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:35,890 INFO L290 TraceCheckUtils]: 11: Hoare triple {7248#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet37#1 && test_#t~nondet37#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet37#1;havoc test_#t~nondet37#1; {7248#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:35,890 INFO L290 TraceCheckUtils]: 12: Hoare triple {7248#(= 1 ~systemActive~0)} assume 0 != test_~tmp___0~1#1; {7248#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:35,891 INFO L272 TraceCheckUtils]: 13: Hoare triple {7248#(= 1 ~systemActive~0)} call changeMethaneLevel(); {7278#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:35,891 INFO L290 TraceCheckUtils]: 14: Hoare triple {7278#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {7246#true} is VALID [2022-02-20 18:06:35,891 INFO L290 TraceCheckUtils]: 15: Hoare triple {7246#true} assume true; {7246#true} is VALID [2022-02-20 18:06:35,891 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {7246#true} {7248#(= 1 ~systemActive~0)} #245#return; {7248#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:35,892 INFO L290 TraceCheckUtils]: 17: Hoare triple {7248#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet38#1 && test_#t~nondet38#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet38#1;havoc test_#t~nondet38#1; {7248#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:35,892 INFO L290 TraceCheckUtils]: 18: Hoare triple {7248#(= 1 ~systemActive~0)} assume 0 != test_~tmp___2~0#1; {7248#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:35,892 INFO L272 TraceCheckUtils]: 19: Hoare triple {7248#(= 1 ~systemActive~0)} call timeShift(); {7248#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:35,892 INFO L290 TraceCheckUtils]: 20: Hoare triple {7248#(= 1 ~systemActive~0)} assume !(0 != ~pumpRunning~0); {7248#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:35,893 INFO L290 TraceCheckUtils]: 21: Hoare triple {7248#(= 1 ~systemActive~0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret41#1, processEnvironment_~tmp~7#1;havoc processEnvironment_~tmp~7#1; {7246#true} is VALID [2022-02-20 18:06:35,893 INFO L290 TraceCheckUtils]: 22: Hoare triple {7246#true} assume !(0 != ~pumpRunning~0); {7246#true} is VALID [2022-02-20 18:06:35,893 INFO L272 TraceCheckUtils]: 23: Hoare triple {7246#true} call processEnvironment__wrappee__methaneQuery(); {7279#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:06:35,893 INFO L290 TraceCheckUtils]: 24: Hoare triple {7279#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~6#1; {7246#true} is VALID [2022-02-20 18:06:35,893 INFO L290 TraceCheckUtils]: 25: Hoare triple {7246#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret52#1, isHighWaterLevel_~retValue_acc~11#1, isHighWaterLevel_~tmp~9#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~11#1;havoc isHighWaterLevel_~tmp~9#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {7246#true} is VALID [2022-02-20 18:06:35,894 INFO L290 TraceCheckUtils]: 26: Hoare triple {7246#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~2#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {7280#(<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1|)} is VALID [2022-02-20 18:06:35,894 INFO L290 TraceCheckUtils]: 27: Hoare triple {7280#(<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1|)} isHighWaterLevel_#t~ret52#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret52#1 && isHighWaterLevel_#t~ret52#1 <= 2147483647;isHighWaterLevel_~tmp~9#1 := isHighWaterLevel_#t~ret52#1;havoc isHighWaterLevel_#t~ret52#1; {7281#(<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp~9#1|)} is VALID [2022-02-20 18:06:35,894 INFO L290 TraceCheckUtils]: 28: Hoare triple {7281#(<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp~9#1|)} assume !(0 != isHighWaterLevel_~tmp~9#1);isHighWaterLevel_~tmp___0~2#1 := 1; {7247#false} is VALID [2022-02-20 18:06:35,894 INFO L290 TraceCheckUtils]: 29: Hoare triple {7247#false} isHighWaterLevel_~retValue_acc~11#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~11#1; {7247#false} is VALID [2022-02-20 18:06:35,894 INFO L290 TraceCheckUtils]: 30: Hoare triple {7247#false} #t~ret40#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret40#1 && #t~ret40#1 <= 2147483647;~tmp~6#1 := #t~ret40#1;havoc #t~ret40#1; {7247#false} is VALID [2022-02-20 18:06:35,895 INFO L290 TraceCheckUtils]: 31: Hoare triple {7247#false} assume 0 != ~tmp~6#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret42#1, activatePump_~tmp~8#1;havoc activatePump_~tmp~8#1; {7247#false} is VALID [2022-02-20 18:06:35,895 INFO L272 TraceCheckUtils]: 32: Hoare triple {7247#false} call activatePump_#t~ret42#1 := isMethaneAlarm(); {7246#true} is VALID [2022-02-20 18:06:35,895 INFO L290 TraceCheckUtils]: 33: Hoare triple {7246#true} havoc ~retValue_acc~9; {7246#true} is VALID [2022-02-20 18:06:35,895 INFO L272 TraceCheckUtils]: 34: Hoare triple {7246#true} call #t~ret43 := isMethaneLevelCritical(); {7246#true} is VALID [2022-02-20 18:06:35,895 INFO L290 TraceCheckUtils]: 35: Hoare triple {7246#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {7246#true} is VALID [2022-02-20 18:06:35,895 INFO L290 TraceCheckUtils]: 36: Hoare triple {7246#true} assume true; {7246#true} is VALID [2022-02-20 18:06:35,895 INFO L284 TraceCheckUtils]: 37: Hoare quadruple {7246#true} {7246#true} #257#return; {7246#true} is VALID [2022-02-20 18:06:35,896 INFO L290 TraceCheckUtils]: 38: Hoare triple {7246#true} assume -2147483648 <= #t~ret43 && #t~ret43 <= 2147483647;~retValue_acc~9 := #t~ret43;havoc #t~ret43;#res := ~retValue_acc~9; {7246#true} is VALID [2022-02-20 18:06:35,896 INFO L290 TraceCheckUtils]: 39: Hoare triple {7246#true} assume true; {7246#true} is VALID [2022-02-20 18:06:35,896 INFO L284 TraceCheckUtils]: 40: Hoare quadruple {7246#true} {7247#false} #251#return; {7247#false} is VALID [2022-02-20 18:06:35,896 INFO L290 TraceCheckUtils]: 41: Hoare triple {7247#false} assume -2147483648 <= activatePump_#t~ret42#1 && activatePump_#t~ret42#1 <= 2147483647;activatePump_~tmp~8#1 := activatePump_#t~ret42#1;havoc activatePump_#t~ret42#1; {7247#false} is VALID [2022-02-20 18:06:35,896 INFO L290 TraceCheckUtils]: 42: Hoare triple {7247#false} assume !(0 != activatePump_~tmp~8#1);assume { :begin_inline_activatePump__wrappee__highWaterSensor } true;~pumpRunning~0 := 1; {7247#false} is VALID [2022-02-20 18:06:35,896 INFO L290 TraceCheckUtils]: 43: Hoare triple {7247#false} assume { :end_inline_activatePump__wrappee__highWaterSensor } true; {7247#false} is VALID [2022-02-20 18:06:35,896 INFO L290 TraceCheckUtils]: 44: Hoare triple {7247#false} assume { :end_inline_activatePump } true; {7247#false} is VALID [2022-02-20 18:06:35,896 INFO L290 TraceCheckUtils]: 45: Hoare triple {7247#false} assume true; {7247#false} is VALID [2022-02-20 18:06:35,896 INFO L284 TraceCheckUtils]: 46: Hoare quadruple {7247#false} {7246#true} #235#return; {7247#false} is VALID [2022-02-20 18:06:35,897 INFO L290 TraceCheckUtils]: 47: Hoare triple {7247#false} assume { :end_inline_processEnvironment } true; {7247#false} is VALID [2022-02-20 18:06:35,897 INFO L290 TraceCheckUtils]: 48: Hoare triple {7247#false} assume { :begin_inline___utac_acc__Specification1_spec__1 } true;havoc __utac_acc__Specification1_spec__1_#t~ret9#1, __utac_acc__Specification1_spec__1_#t~ret10#1, __utac_acc__Specification1_spec__1_~tmp~0#1, __utac_acc__Specification1_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__1_~tmp~0#1;havoc __utac_acc__Specification1_spec__1_~tmp___0~0#1; {7247#false} is VALID [2022-02-20 18:06:35,897 INFO L272 TraceCheckUtils]: 49: Hoare triple {7247#false} call __utac_acc__Specification1_spec__1_#t~ret9#1 := isMethaneLevelCritical(); {7246#true} is VALID [2022-02-20 18:06:35,897 INFO L290 TraceCheckUtils]: 50: Hoare triple {7246#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {7246#true} is VALID [2022-02-20 18:06:35,897 INFO L290 TraceCheckUtils]: 51: Hoare triple {7246#true} assume true; {7246#true} is VALID [2022-02-20 18:06:35,897 INFO L284 TraceCheckUtils]: 52: Hoare quadruple {7246#true} {7247#false} #237#return; {7247#false} is VALID [2022-02-20 18:06:35,897 INFO L290 TraceCheckUtils]: 53: Hoare triple {7247#false} assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret9#1 && __utac_acc__Specification1_spec__1_#t~ret9#1 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp~0#1 := __utac_acc__Specification1_spec__1_#t~ret9#1;havoc __utac_acc__Specification1_spec__1_#t~ret9#1; {7247#false} is VALID [2022-02-20 18:06:35,897 INFO L290 TraceCheckUtils]: 54: Hoare triple {7247#false} assume 0 != __utac_acc__Specification1_spec__1_~tmp~0#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~10#1;havoc isPumpRunning_~retValue_acc~10#1;isPumpRunning_~retValue_acc~10#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~10#1; {7247#false} is VALID [2022-02-20 18:06:35,897 INFO L290 TraceCheckUtils]: 55: Hoare triple {7247#false} __utac_acc__Specification1_spec__1_#t~ret10#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret10#1 && __utac_acc__Specification1_spec__1_#t~ret10#1 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp___0~0#1 := __utac_acc__Specification1_spec__1_#t~ret10#1;havoc __utac_acc__Specification1_spec__1_#t~ret10#1; {7247#false} is VALID [2022-02-20 18:06:35,898 INFO L290 TraceCheckUtils]: 56: Hoare triple {7247#false} assume 0 != __utac_acc__Specification1_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {7247#false} is VALID [2022-02-20 18:06:35,898 INFO L290 TraceCheckUtils]: 57: Hoare triple {7247#false} assume !false; {7247#false} is VALID [2022-02-20 18:06:35,899 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-02-20 18:06:35,899 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:06:35,899 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [917855456] [2022-02-20 18:06:35,899 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [917855456] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:06:35,899 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:06:35,899 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-02-20 18:06:35,899 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1227582129] [2022-02-20 18:06:35,900 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:06:35,901 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 3 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) Word has length 58 [2022-02-20 18:06:35,902 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:06:35,902 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 3 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2022-02-20 18:06:35,933 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 56 edges. 56 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:06:35,934 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-02-20 18:06:35,934 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:06:35,934 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-02-20 18:06:35,935 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-02-20 18:06:35,935 INFO L87 Difference]: Start difference. First operand 281 states and 334 transitions. Second operand has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 3 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2022-02-20 18:06:36,506 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:06:36,506 INFO L93 Difference]: Finished difference Result 573 states and 694 transitions. [2022-02-20 18:06:36,507 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-02-20 18:06:36,507 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 3 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) Word has length 58 [2022-02-20 18:06:36,507 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:06:36,507 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 3 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2022-02-20 18:06:36,510 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 212 transitions. [2022-02-20 18:06:36,510 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 3 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2022-02-20 18:06:36,512 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 212 transitions. [2022-02-20 18:06:36,512 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states and 212 transitions. [2022-02-20 18:06:36,675 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 212 edges. 212 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:06:36,682 INFO L225 Difference]: With dead ends: 573 [2022-02-20 18:06:36,682 INFO L226 Difference]: Without dead ends: 299 [2022-02-20 18:06:36,682 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2022-02-20 18:06:36,683 INFO L933 BasicCegarLoop]: 84 mSDtfsCounter, 191 mSDsluCounter, 84 mSDsCounter, 0 mSdLazyCounter, 220 mSolverCounterSat, 74 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 193 SdHoareTripleChecker+Valid, 168 SdHoareTripleChecker+Invalid, 294 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 74 IncrementalHoareTripleChecker+Valid, 220 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-02-20 18:06:36,683 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [193 Valid, 168 Invalid, 294 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [74 Valid, 220 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-02-20 18:06:36,684 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 299 states. [2022-02-20 18:06:36,697 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 299 to 285. [2022-02-20 18:06:36,697 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:06:36,698 INFO L82 GeneralOperation]: Start isEquivalent. First operand 299 states. Second operand has 285 states, 212 states have (on average 1.1981132075471699) internal successors, (254), 227 states have internal predecessors, (254), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (48), 38 states have call predecessors, (48), 36 states have call successors, (48) [2022-02-20 18:06:36,698 INFO L74 IsIncluded]: Start isIncluded. First operand 299 states. Second operand has 285 states, 212 states have (on average 1.1981132075471699) internal successors, (254), 227 states have internal predecessors, (254), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (48), 38 states have call predecessors, (48), 36 states have call successors, (48) [2022-02-20 18:06:36,699 INFO L87 Difference]: Start difference. First operand 299 states. Second operand has 285 states, 212 states have (on average 1.1981132075471699) internal successors, (254), 227 states have internal predecessors, (254), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (48), 38 states have call predecessors, (48), 36 states have call successors, (48) [2022-02-20 18:06:36,704 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:06:36,704 INFO L93 Difference]: Finished difference Result 299 states and 353 transitions. [2022-02-20 18:06:36,705 INFO L276 IsEmpty]: Start isEmpty. Operand 299 states and 353 transitions. [2022-02-20 18:06:36,705 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:06:36,705 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:06:36,706 INFO L74 IsIncluded]: Start isIncluded. First operand has 285 states, 212 states have (on average 1.1981132075471699) internal successors, (254), 227 states have internal predecessors, (254), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (48), 38 states have call predecessors, (48), 36 states have call successors, (48) Second operand 299 states. [2022-02-20 18:06:36,707 INFO L87 Difference]: Start difference. First operand has 285 states, 212 states have (on average 1.1981132075471699) internal successors, (254), 227 states have internal predecessors, (254), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (48), 38 states have call predecessors, (48), 36 states have call successors, (48) Second operand 299 states. [2022-02-20 18:06:36,712 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:06:36,712 INFO L93 Difference]: Finished difference Result 299 states and 353 transitions. [2022-02-20 18:06:36,712 INFO L276 IsEmpty]: Start isEmpty. Operand 299 states and 353 transitions. [2022-02-20 18:06:36,713 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:06:36,713 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:06:36,713 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:06:36,713 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:06:36,713 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 285 states, 212 states have (on average 1.1981132075471699) internal successors, (254), 227 states have internal predecessors, (254), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (48), 38 states have call predecessors, (48), 36 states have call successors, (48) [2022-02-20 18:06:36,718 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 285 states to 285 states and 338 transitions. [2022-02-20 18:06:36,719 INFO L78 Accepts]: Start accepts. Automaton has 285 states and 338 transitions. Word has length 58 [2022-02-20 18:06:36,719 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:06:36,719 INFO L470 AbstractCegarLoop]: Abstraction has 285 states and 338 transitions. [2022-02-20 18:06:36,719 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 3 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2022-02-20 18:06:36,719 INFO L276 IsEmpty]: Start isEmpty. Operand 285 states and 338 transitions. [2022-02-20 18:06:36,720 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2022-02-20 18:06:36,720 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:06:36,720 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:06:36,720 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-02-20 18:06:36,720 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:06:36,721 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:06:36,721 INFO L85 PathProgramCache]: Analyzing trace with hash -123164293, now seen corresponding path program 1 times [2022-02-20 18:06:36,721 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:06:36,721 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1041664785] [2022-02-20 18:06:36,721 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:06:36,721 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:06:36,734 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:06:36,750 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-02-20 18:06:36,751 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:06:36,752 INFO L290 TraceCheckUtils]: 0: Hoare triple {9129#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {9097#true} is VALID [2022-02-20 18:06:36,752 INFO L290 TraceCheckUtils]: 1: Hoare triple {9097#true} assume true; {9097#true} is VALID [2022-02-20 18:06:36,753 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {9097#true} {9099#(= ~waterLevel~0 1)} #245#return; {9099#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:06:36,755 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-02-20 18:06:36,759 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:06:36,767 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:06:36,769 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:06:36,770 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:06:36,771 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:06:36,772 INFO L290 TraceCheckUtils]: 0: Hoare triple {9097#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {9097#true} is VALID [2022-02-20 18:06:36,772 INFO L290 TraceCheckUtils]: 1: Hoare triple {9097#true} assume true; {9097#true} is VALID [2022-02-20 18:06:36,772 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {9097#true} {9097#true} #257#return; {9097#true} is VALID [2022-02-20 18:06:36,772 INFO L290 TraceCheckUtils]: 0: Hoare triple {9097#true} havoc ~retValue_acc~9; {9097#true} is VALID [2022-02-20 18:06:36,772 INFO L272 TraceCheckUtils]: 1: Hoare triple {9097#true} call #t~ret43 := isMethaneLevelCritical(); {9097#true} is VALID [2022-02-20 18:06:36,773 INFO L290 TraceCheckUtils]: 2: Hoare triple {9097#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {9097#true} is VALID [2022-02-20 18:06:36,773 INFO L290 TraceCheckUtils]: 3: Hoare triple {9097#true} assume true; {9097#true} is VALID [2022-02-20 18:06:36,773 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {9097#true} {9097#true} #257#return; {9097#true} is VALID [2022-02-20 18:06:36,773 INFO L290 TraceCheckUtils]: 5: Hoare triple {9097#true} assume -2147483648 <= #t~ret43 && #t~ret43 <= 2147483647;~retValue_acc~9 := #t~ret43;havoc #t~ret43;#res := ~retValue_acc~9; {9097#true} is VALID [2022-02-20 18:06:36,773 INFO L290 TraceCheckUtils]: 6: Hoare triple {9097#true} assume true; {9097#true} is VALID [2022-02-20 18:06:36,773 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {9097#true} {9131#(<= 2 ~waterLevel~0)} #251#return; {9131#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:06:36,774 INFO L290 TraceCheckUtils]: 0: Hoare triple {9130#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~6#1; {9097#true} is VALID [2022-02-20 18:06:36,774 INFO L290 TraceCheckUtils]: 1: Hoare triple {9097#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret52#1, isHighWaterLevel_~retValue_acc~11#1, isHighWaterLevel_~tmp~9#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~11#1;havoc isHighWaterLevel_~tmp~9#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {9097#true} is VALID [2022-02-20 18:06:36,774 INFO L290 TraceCheckUtils]: 2: Hoare triple {9097#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {9131#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:06:36,774 INFO L290 TraceCheckUtils]: 3: Hoare triple {9131#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret52#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret52#1 && isHighWaterLevel_#t~ret52#1 <= 2147483647;isHighWaterLevel_~tmp~9#1 := isHighWaterLevel_#t~ret52#1;havoc isHighWaterLevel_#t~ret52#1; {9131#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:06:36,775 INFO L290 TraceCheckUtils]: 4: Hoare triple {9131#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~9#1);isHighWaterLevel_~tmp___0~2#1 := 1; {9131#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:06:36,775 INFO L290 TraceCheckUtils]: 5: Hoare triple {9131#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~11#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~11#1; {9131#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:06:36,775 INFO L290 TraceCheckUtils]: 6: Hoare triple {9131#(<= 2 ~waterLevel~0)} #t~ret40#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret40#1 && #t~ret40#1 <= 2147483647;~tmp~6#1 := #t~ret40#1;havoc #t~ret40#1; {9131#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:06:36,775 INFO L290 TraceCheckUtils]: 7: Hoare triple {9131#(<= 2 ~waterLevel~0)} assume 0 != ~tmp~6#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret42#1, activatePump_~tmp~8#1;havoc activatePump_~tmp~8#1; {9131#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:06:36,776 INFO L272 TraceCheckUtils]: 8: Hoare triple {9131#(<= 2 ~waterLevel~0)} call activatePump_#t~ret42#1 := isMethaneAlarm(); {9097#true} is VALID [2022-02-20 18:06:36,776 INFO L290 TraceCheckUtils]: 9: Hoare triple {9097#true} havoc ~retValue_acc~9; {9097#true} is VALID [2022-02-20 18:06:36,776 INFO L272 TraceCheckUtils]: 10: Hoare triple {9097#true} call #t~ret43 := isMethaneLevelCritical(); {9097#true} is VALID [2022-02-20 18:06:36,776 INFO L290 TraceCheckUtils]: 11: Hoare triple {9097#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {9097#true} is VALID [2022-02-20 18:06:36,776 INFO L290 TraceCheckUtils]: 12: Hoare triple {9097#true} assume true; {9097#true} is VALID [2022-02-20 18:06:36,776 INFO L284 TraceCheckUtils]: 13: Hoare quadruple {9097#true} {9097#true} #257#return; {9097#true} is VALID [2022-02-20 18:06:36,776 INFO L290 TraceCheckUtils]: 14: Hoare triple {9097#true} assume -2147483648 <= #t~ret43 && #t~ret43 <= 2147483647;~retValue_acc~9 := #t~ret43;havoc #t~ret43;#res := ~retValue_acc~9; {9097#true} is VALID [2022-02-20 18:06:36,776 INFO L290 TraceCheckUtils]: 15: Hoare triple {9097#true} assume true; {9097#true} is VALID [2022-02-20 18:06:36,777 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {9097#true} {9131#(<= 2 ~waterLevel~0)} #251#return; {9131#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:06:36,777 INFO L290 TraceCheckUtils]: 17: Hoare triple {9131#(<= 2 ~waterLevel~0)} assume -2147483648 <= activatePump_#t~ret42#1 && activatePump_#t~ret42#1 <= 2147483647;activatePump_~tmp~8#1 := activatePump_#t~ret42#1;havoc activatePump_#t~ret42#1; {9131#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:06:36,777 INFO L290 TraceCheckUtils]: 18: Hoare triple {9131#(<= 2 ~waterLevel~0)} assume !(0 != activatePump_~tmp~8#1);assume { :begin_inline_activatePump__wrappee__highWaterSensor } true;~pumpRunning~0 := 1; {9131#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:06:36,778 INFO L290 TraceCheckUtils]: 19: Hoare triple {9131#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump__wrappee__highWaterSensor } true; {9131#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:06:36,778 INFO L290 TraceCheckUtils]: 20: Hoare triple {9131#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump } true; {9131#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:06:36,778 INFO L290 TraceCheckUtils]: 21: Hoare triple {9131#(<= 2 ~waterLevel~0)} assume true; {9131#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:06:36,778 INFO L284 TraceCheckUtils]: 22: Hoare quadruple {9131#(<= 2 ~waterLevel~0)} {9099#(= ~waterLevel~0 1)} #235#return; {9098#false} is VALID [2022-02-20 18:06:36,779 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2022-02-20 18:06:36,779 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:06:36,780 INFO L290 TraceCheckUtils]: 0: Hoare triple {9097#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {9097#true} is VALID [2022-02-20 18:06:36,781 INFO L290 TraceCheckUtils]: 1: Hoare triple {9097#true} assume true; {9097#true} is VALID [2022-02-20 18:06:36,781 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {9097#true} {9098#false} #237#return; {9098#false} is VALID [2022-02-20 18:06:36,781 INFO L290 TraceCheckUtils]: 0: Hoare triple {9097#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(30, 9);call #Ultimate.allocInit(9, 10);call #Ultimate.allocInit(21, 11);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(25, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {9099#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:06:36,781 INFO L290 TraceCheckUtils]: 1: Hoare triple {9099#(= ~waterLevel~0 1)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret11#1, main_~retValue_acc~3#1, main_~tmp~1#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~1#1;assume { :begin_inline_select_helpers } true; {9099#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:06:36,782 INFO L290 TraceCheckUtils]: 2: Hoare triple {9099#(= ~waterLevel~0 1)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {9099#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:06:36,782 INFO L290 TraceCheckUtils]: 3: Hoare triple {9099#(= ~waterLevel~0 1)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~5#1;havoc valid_product_~retValue_acc~5#1;valid_product_~retValue_acc~5#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~5#1; {9099#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:06:36,782 INFO L290 TraceCheckUtils]: 4: Hoare triple {9099#(= ~waterLevel~0 1)} main_#t~ret11#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret11#1 && main_#t~ret11#1 <= 2147483647;main_~tmp~1#1 := main_#t~ret11#1;havoc main_#t~ret11#1; {9099#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:06:36,782 INFO L290 TraceCheckUtils]: 5: Hoare triple {9099#(= ~waterLevel~0 1)} assume 0 != main_~tmp~1#1;assume { :begin_inline_setup } true; {9099#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:06:36,783 INFO L290 TraceCheckUtils]: 6: Hoare triple {9099#(= ~waterLevel~0 1)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet36#1, test_#t~nondet37#1, test_#t~nondet38#1, test_#t~nondet39#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {9099#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:06:36,783 INFO L290 TraceCheckUtils]: 7: Hoare triple {9099#(= ~waterLevel~0 1)} assume !false; {9099#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:06:36,783 INFO L290 TraceCheckUtils]: 8: Hoare triple {9099#(= ~waterLevel~0 1)} assume test_~splverifierCounter~0#1 < 4; {9099#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:06:36,784 INFO L290 TraceCheckUtils]: 9: Hoare triple {9099#(= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet36#1 && test_#t~nondet36#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet36#1;havoc test_#t~nondet36#1; {9099#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:06:36,784 INFO L290 TraceCheckUtils]: 10: Hoare triple {9099#(= ~waterLevel~0 1)} assume !(0 != test_~tmp~5#1); {9099#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:06:36,784 INFO L290 TraceCheckUtils]: 11: Hoare triple {9099#(= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet37#1 && test_#t~nondet37#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet37#1;havoc test_#t~nondet37#1; {9099#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:06:36,784 INFO L290 TraceCheckUtils]: 12: Hoare triple {9099#(= ~waterLevel~0 1)} assume 0 != test_~tmp___0~1#1; {9099#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:06:36,785 INFO L272 TraceCheckUtils]: 13: Hoare triple {9099#(= ~waterLevel~0 1)} call changeMethaneLevel(); {9129#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:36,785 INFO L290 TraceCheckUtils]: 14: Hoare triple {9129#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {9097#true} is VALID [2022-02-20 18:06:36,785 INFO L290 TraceCheckUtils]: 15: Hoare triple {9097#true} assume true; {9097#true} is VALID [2022-02-20 18:06:36,785 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {9097#true} {9099#(= ~waterLevel~0 1)} #245#return; {9099#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:06:36,786 INFO L290 TraceCheckUtils]: 17: Hoare triple {9099#(= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet38#1 && test_#t~nondet38#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet38#1;havoc test_#t~nondet38#1; {9099#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:06:36,786 INFO L290 TraceCheckUtils]: 18: Hoare triple {9099#(= ~waterLevel~0 1)} assume 0 != test_~tmp___2~0#1; {9099#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:06:36,786 INFO L272 TraceCheckUtils]: 19: Hoare triple {9099#(= ~waterLevel~0 1)} call timeShift(); {9099#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:06:36,786 INFO L290 TraceCheckUtils]: 20: Hoare triple {9099#(= ~waterLevel~0 1)} assume !(0 != ~pumpRunning~0); {9099#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:06:36,787 INFO L290 TraceCheckUtils]: 21: Hoare triple {9099#(= ~waterLevel~0 1)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret41#1, processEnvironment_~tmp~7#1;havoc processEnvironment_~tmp~7#1; {9099#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:06:36,787 INFO L290 TraceCheckUtils]: 22: Hoare triple {9099#(= ~waterLevel~0 1)} assume !(0 != ~pumpRunning~0); {9099#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:06:36,787 INFO L272 TraceCheckUtils]: 23: Hoare triple {9099#(= ~waterLevel~0 1)} call processEnvironment__wrappee__methaneQuery(); {9130#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:06:36,787 INFO L290 TraceCheckUtils]: 24: Hoare triple {9130#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~6#1; {9097#true} is VALID [2022-02-20 18:06:36,788 INFO L290 TraceCheckUtils]: 25: Hoare triple {9097#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret52#1, isHighWaterLevel_~retValue_acc~11#1, isHighWaterLevel_~tmp~9#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~11#1;havoc isHighWaterLevel_~tmp~9#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {9097#true} is VALID [2022-02-20 18:06:36,788 INFO L290 TraceCheckUtils]: 26: Hoare triple {9097#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {9131#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:06:36,788 INFO L290 TraceCheckUtils]: 27: Hoare triple {9131#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret52#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret52#1 && isHighWaterLevel_#t~ret52#1 <= 2147483647;isHighWaterLevel_~tmp~9#1 := isHighWaterLevel_#t~ret52#1;havoc isHighWaterLevel_#t~ret52#1; {9131#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:06:36,788 INFO L290 TraceCheckUtils]: 28: Hoare triple {9131#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~9#1);isHighWaterLevel_~tmp___0~2#1 := 1; {9131#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:06:36,789 INFO L290 TraceCheckUtils]: 29: Hoare triple {9131#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~11#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~11#1; {9131#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:06:36,789 INFO L290 TraceCheckUtils]: 30: Hoare triple {9131#(<= 2 ~waterLevel~0)} #t~ret40#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret40#1 && #t~ret40#1 <= 2147483647;~tmp~6#1 := #t~ret40#1;havoc #t~ret40#1; {9131#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:06:36,789 INFO L290 TraceCheckUtils]: 31: Hoare triple {9131#(<= 2 ~waterLevel~0)} assume 0 != ~tmp~6#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret42#1, activatePump_~tmp~8#1;havoc activatePump_~tmp~8#1; {9131#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:06:36,789 INFO L272 TraceCheckUtils]: 32: Hoare triple {9131#(<= 2 ~waterLevel~0)} call activatePump_#t~ret42#1 := isMethaneAlarm(); {9097#true} is VALID [2022-02-20 18:06:36,789 INFO L290 TraceCheckUtils]: 33: Hoare triple {9097#true} havoc ~retValue_acc~9; {9097#true} is VALID [2022-02-20 18:06:36,790 INFO L272 TraceCheckUtils]: 34: Hoare triple {9097#true} call #t~ret43 := isMethaneLevelCritical(); {9097#true} is VALID [2022-02-20 18:06:36,790 INFO L290 TraceCheckUtils]: 35: Hoare triple {9097#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {9097#true} is VALID [2022-02-20 18:06:36,790 INFO L290 TraceCheckUtils]: 36: Hoare triple {9097#true} assume true; {9097#true} is VALID [2022-02-20 18:06:36,790 INFO L284 TraceCheckUtils]: 37: Hoare quadruple {9097#true} {9097#true} #257#return; {9097#true} is VALID [2022-02-20 18:06:36,790 INFO L290 TraceCheckUtils]: 38: Hoare triple {9097#true} assume -2147483648 <= #t~ret43 && #t~ret43 <= 2147483647;~retValue_acc~9 := #t~ret43;havoc #t~ret43;#res := ~retValue_acc~9; {9097#true} is VALID [2022-02-20 18:06:36,790 INFO L290 TraceCheckUtils]: 39: Hoare triple {9097#true} assume true; {9097#true} is VALID [2022-02-20 18:06:36,791 INFO L284 TraceCheckUtils]: 40: Hoare quadruple {9097#true} {9131#(<= 2 ~waterLevel~0)} #251#return; {9131#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:06:36,791 INFO L290 TraceCheckUtils]: 41: Hoare triple {9131#(<= 2 ~waterLevel~0)} assume -2147483648 <= activatePump_#t~ret42#1 && activatePump_#t~ret42#1 <= 2147483647;activatePump_~tmp~8#1 := activatePump_#t~ret42#1;havoc activatePump_#t~ret42#1; {9131#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:06:36,791 INFO L290 TraceCheckUtils]: 42: Hoare triple {9131#(<= 2 ~waterLevel~0)} assume !(0 != activatePump_~tmp~8#1);assume { :begin_inline_activatePump__wrappee__highWaterSensor } true;~pumpRunning~0 := 1; {9131#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:06:36,791 INFO L290 TraceCheckUtils]: 43: Hoare triple {9131#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump__wrappee__highWaterSensor } true; {9131#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:06:36,792 INFO L290 TraceCheckUtils]: 44: Hoare triple {9131#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump } true; {9131#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:06:36,792 INFO L290 TraceCheckUtils]: 45: Hoare triple {9131#(<= 2 ~waterLevel~0)} assume true; {9131#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:06:36,792 INFO L284 TraceCheckUtils]: 46: Hoare quadruple {9131#(<= 2 ~waterLevel~0)} {9099#(= ~waterLevel~0 1)} #235#return; {9098#false} is VALID [2022-02-20 18:06:36,792 INFO L290 TraceCheckUtils]: 47: Hoare triple {9098#false} assume { :end_inline_processEnvironment } true; {9098#false} is VALID [2022-02-20 18:06:36,793 INFO L290 TraceCheckUtils]: 48: Hoare triple {9098#false} assume { :begin_inline___utac_acc__Specification1_spec__1 } true;havoc __utac_acc__Specification1_spec__1_#t~ret9#1, __utac_acc__Specification1_spec__1_#t~ret10#1, __utac_acc__Specification1_spec__1_~tmp~0#1, __utac_acc__Specification1_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__1_~tmp~0#1;havoc __utac_acc__Specification1_spec__1_~tmp___0~0#1; {9098#false} is VALID [2022-02-20 18:06:36,793 INFO L272 TraceCheckUtils]: 49: Hoare triple {9098#false} call __utac_acc__Specification1_spec__1_#t~ret9#1 := isMethaneLevelCritical(); {9097#true} is VALID [2022-02-20 18:06:36,793 INFO L290 TraceCheckUtils]: 50: Hoare triple {9097#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {9097#true} is VALID [2022-02-20 18:06:36,793 INFO L290 TraceCheckUtils]: 51: Hoare triple {9097#true} assume true; {9097#true} is VALID [2022-02-20 18:06:36,793 INFO L284 TraceCheckUtils]: 52: Hoare quadruple {9097#true} {9098#false} #237#return; {9098#false} is VALID [2022-02-20 18:06:36,793 INFO L290 TraceCheckUtils]: 53: Hoare triple {9098#false} assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret9#1 && __utac_acc__Specification1_spec__1_#t~ret9#1 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp~0#1 := __utac_acc__Specification1_spec__1_#t~ret9#1;havoc __utac_acc__Specification1_spec__1_#t~ret9#1; {9098#false} is VALID [2022-02-20 18:06:36,793 INFO L290 TraceCheckUtils]: 54: Hoare triple {9098#false} assume 0 != __utac_acc__Specification1_spec__1_~tmp~0#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~10#1;havoc isPumpRunning_~retValue_acc~10#1;isPumpRunning_~retValue_acc~10#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~10#1; {9098#false} is VALID [2022-02-20 18:06:36,793 INFO L290 TraceCheckUtils]: 55: Hoare triple {9098#false} __utac_acc__Specification1_spec__1_#t~ret10#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret10#1 && __utac_acc__Specification1_spec__1_#t~ret10#1 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp___0~0#1 := __utac_acc__Specification1_spec__1_#t~ret10#1;havoc __utac_acc__Specification1_spec__1_#t~ret10#1; {9098#false} is VALID [2022-02-20 18:06:36,793 INFO L290 TraceCheckUtils]: 56: Hoare triple {9098#false} assume 0 != __utac_acc__Specification1_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {9098#false} is VALID [2022-02-20 18:06:36,793 INFO L290 TraceCheckUtils]: 57: Hoare triple {9098#false} assume !false; {9098#false} is VALID [2022-02-20 18:06:36,794 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-02-20 18:06:36,794 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:06:36,794 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1041664785] [2022-02-20 18:06:36,794 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1041664785] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:06:36,794 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:06:36,794 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-02-20 18:06:36,794 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2096053739] [2022-02-20 18:06:36,794 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:06:36,795 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 4 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) Word has length 58 [2022-02-20 18:06:36,795 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:06:36,795 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 4 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) [2022-02-20 18:06:36,828 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 56 edges. 56 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:06:36,828 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-02-20 18:06:36,828 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:06:36,829 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-02-20 18:06:36,829 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-02-20 18:06:36,829 INFO L87 Difference]: Start difference. First operand 285 states and 338 transitions. Second operand has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 4 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) [2022-02-20 18:06:37,590 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:06:37,590 INFO L93 Difference]: Finished difference Result 785 states and 984 transitions. [2022-02-20 18:06:37,590 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-02-20 18:06:37,590 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 4 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) Word has length 58 [2022-02-20 18:06:37,590 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:06:37,591 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 4 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) [2022-02-20 18:06:37,593 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 344 transitions. [2022-02-20 18:06:37,594 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 4 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) [2022-02-20 18:06:37,596 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 344 transitions. [2022-02-20 18:06:37,596 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 12 states and 344 transitions. [2022-02-20 18:06:37,830 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 344 edges. 344 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:06:37,843 INFO L225 Difference]: With dead ends: 785 [2022-02-20 18:06:37,843 INFO L226 Difference]: Without dead ends: 507 [2022-02-20 18:06:37,844 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 25 GetRequests, 14 SyntacticMatches, 1 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=40, Invalid=92, Unknown=0, NotChecked=0, Total=132 [2022-02-20 18:06:37,844 INFO L933 BasicCegarLoop]: 128 mSDtfsCounter, 289 mSDsluCounter, 96 mSDsCounter, 0 mSdLazyCounter, 264 mSolverCounterSat, 129 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 291 SdHoareTripleChecker+Valid, 224 SdHoareTripleChecker+Invalid, 393 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 129 IncrementalHoareTripleChecker+Valid, 264 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-02-20 18:06:37,844 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [291 Valid, 224 Invalid, 393 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [129 Valid, 264 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-02-20 18:06:37,845 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 507 states. [2022-02-20 18:06:37,902 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 507 to 505. [2022-02-20 18:06:37,902 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:06:37,903 INFO L82 GeneralOperation]: Start isEquivalent. First operand 507 states. Second operand has 505 states, 376 states have (on average 1.1941489361702127) internal successors, (449), 399 states have internal predecessors, (449), 66 states have call successors, (66), 60 states have call predecessors, (66), 62 states have return successors, (101), 66 states have call predecessors, (101), 66 states have call successors, (101) [2022-02-20 18:06:37,904 INFO L74 IsIncluded]: Start isIncluded. First operand 507 states. Second operand has 505 states, 376 states have (on average 1.1941489361702127) internal successors, (449), 399 states have internal predecessors, (449), 66 states have call successors, (66), 60 states have call predecessors, (66), 62 states have return successors, (101), 66 states have call predecessors, (101), 66 states have call successors, (101) [2022-02-20 18:06:37,904 INFO L87 Difference]: Start difference. First operand 507 states. Second operand has 505 states, 376 states have (on average 1.1941489361702127) internal successors, (449), 399 states have internal predecessors, (449), 66 states have call successors, (66), 60 states have call predecessors, (66), 62 states have return successors, (101), 66 states have call predecessors, (101), 66 states have call successors, (101) [2022-02-20 18:06:37,915 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:06:37,916 INFO L93 Difference]: Finished difference Result 507 states and 617 transitions. [2022-02-20 18:06:37,916 INFO L276 IsEmpty]: Start isEmpty. Operand 507 states and 617 transitions. [2022-02-20 18:06:37,917 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:06:37,917 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:06:37,918 INFO L74 IsIncluded]: Start isIncluded. First operand has 505 states, 376 states have (on average 1.1941489361702127) internal successors, (449), 399 states have internal predecessors, (449), 66 states have call successors, (66), 60 states have call predecessors, (66), 62 states have return successors, (101), 66 states have call predecessors, (101), 66 states have call successors, (101) Second operand 507 states. [2022-02-20 18:06:37,918 INFO L87 Difference]: Start difference. First operand has 505 states, 376 states have (on average 1.1941489361702127) internal successors, (449), 399 states have internal predecessors, (449), 66 states have call successors, (66), 60 states have call predecessors, (66), 62 states have return successors, (101), 66 states have call predecessors, (101), 66 states have call successors, (101) Second operand 507 states. [2022-02-20 18:06:37,931 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:06:37,932 INFO L93 Difference]: Finished difference Result 507 states and 617 transitions. [2022-02-20 18:06:37,932 INFO L276 IsEmpty]: Start isEmpty. Operand 507 states and 617 transitions. [2022-02-20 18:06:37,933 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:06:37,933 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:06:37,933 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:06:37,933 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:06:37,934 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 505 states, 376 states have (on average 1.1941489361702127) internal successors, (449), 399 states have internal predecessors, (449), 66 states have call successors, (66), 60 states have call predecessors, (66), 62 states have return successors, (101), 66 states have call predecessors, (101), 66 states have call successors, (101) [2022-02-20 18:06:37,948 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 505 states to 505 states and 616 transitions. [2022-02-20 18:06:37,948 INFO L78 Accepts]: Start accepts. Automaton has 505 states and 616 transitions. Word has length 58 [2022-02-20 18:06:37,948 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:06:37,948 INFO L470 AbstractCegarLoop]: Abstraction has 505 states and 616 transitions. [2022-02-20 18:06:37,949 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 4 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) [2022-02-20 18:06:37,949 INFO L276 IsEmpty]: Start isEmpty. Operand 505 states and 616 transitions. [2022-02-20 18:06:37,949 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 63 [2022-02-20 18:06:37,950 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:06:37,950 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:06:37,950 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-02-20 18:06:37,950 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:06:37,951 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:06:37,951 INFO L85 PathProgramCache]: Analyzing trace with hash -2137470559, now seen corresponding path program 1 times [2022-02-20 18:06:37,951 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:06:37,951 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [898032324] [2022-02-20 18:06:37,951 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:06:37,951 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:06:37,966 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:06:38,017 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-02-20 18:06:38,018 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:06:38,020 INFO L290 TraceCheckUtils]: 0: Hoare triple {11999#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {11962#true} is VALID [2022-02-20 18:06:38,020 INFO L290 TraceCheckUtils]: 1: Hoare triple {11962#true} assume true; {11962#true} is VALID [2022-02-20 18:06:38,021 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {11962#true} {11964#(= 1 ~systemActive~0)} #243#return; {11964#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:38,033 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-02-20 18:06:38,034 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:06:38,041 INFO L290 TraceCheckUtils]: 0: Hoare triple {12000#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {12001#(= ~methaneLevelCritical~0 1)} is VALID [2022-02-20 18:06:38,042 INFO L290 TraceCheckUtils]: 1: Hoare triple {12001#(= ~methaneLevelCritical~0 1)} assume true; {12001#(= ~methaneLevelCritical~0 1)} is VALID [2022-02-20 18:06:38,042 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {12001#(= ~methaneLevelCritical~0 1)} {11964#(= 1 ~systemActive~0)} #245#return; {11971#(= ~methaneLevelCritical~0 ~systemActive~0)} is VALID [2022-02-20 18:06:38,047 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-02-20 18:06:38,051 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:06:38,077 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:06:38,079 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:06:38,097 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:06:38,098 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:06:38,110 INFO L290 TraceCheckUtils]: 0: Hoare triple {11962#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {12019#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:38,110 INFO L290 TraceCheckUtils]: 1: Hoare triple {12019#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} assume true; {12019#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:38,111 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {12019#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} {11962#true} #257#return; {12017#(= ~methaneLevelCritical~0 |isMethaneAlarm_#t~ret43|)} is VALID [2022-02-20 18:06:38,111 INFO L290 TraceCheckUtils]: 0: Hoare triple {11962#true} havoc ~retValue_acc~9; {11962#true} is VALID [2022-02-20 18:06:38,111 INFO L272 TraceCheckUtils]: 1: Hoare triple {11962#true} call #t~ret43 := isMethaneLevelCritical(); {11962#true} is VALID [2022-02-20 18:06:38,112 INFO L290 TraceCheckUtils]: 2: Hoare triple {11962#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {12019#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:38,112 INFO L290 TraceCheckUtils]: 3: Hoare triple {12019#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} assume true; {12019#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:38,112 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {12019#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} {11962#true} #257#return; {12017#(= ~methaneLevelCritical~0 |isMethaneAlarm_#t~ret43|)} is VALID [2022-02-20 18:06:38,112 INFO L290 TraceCheckUtils]: 5: Hoare triple {12017#(= ~methaneLevelCritical~0 |isMethaneAlarm_#t~ret43|)} assume -2147483648 <= #t~ret43 && #t~ret43 <= 2147483647;~retValue_acc~9 := #t~ret43;havoc #t~ret43;#res := ~retValue_acc~9; {12018#(= |isMethaneAlarm_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:38,113 INFO L290 TraceCheckUtils]: 6: Hoare triple {12018#(= |isMethaneAlarm_#res| ~methaneLevelCritical~0)} assume true; {12018#(= |isMethaneAlarm_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:38,113 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {12018#(= |isMethaneAlarm_#res| ~methaneLevelCritical~0)} {11962#true} #251#return; {12011#(= |processEnvironment__wrappee__methaneQuery_activatePump_#t~ret42#1| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:38,113 INFO L290 TraceCheckUtils]: 0: Hoare triple {12002#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~6#1; {11962#true} is VALID [2022-02-20 18:06:38,114 INFO L290 TraceCheckUtils]: 1: Hoare triple {11962#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret52#1, isHighWaterLevel_~retValue_acc~11#1, isHighWaterLevel_~tmp~9#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~11#1;havoc isHighWaterLevel_~tmp~9#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {11962#true} is VALID [2022-02-20 18:06:38,114 INFO L290 TraceCheckUtils]: 2: Hoare triple {11962#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {11962#true} is VALID [2022-02-20 18:06:38,114 INFO L290 TraceCheckUtils]: 3: Hoare triple {11962#true} isHighWaterLevel_#t~ret52#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret52#1 && isHighWaterLevel_#t~ret52#1 <= 2147483647;isHighWaterLevel_~tmp~9#1 := isHighWaterLevel_#t~ret52#1;havoc isHighWaterLevel_#t~ret52#1; {11962#true} is VALID [2022-02-20 18:06:38,114 INFO L290 TraceCheckUtils]: 4: Hoare triple {11962#true} assume !(0 != isHighWaterLevel_~tmp~9#1);isHighWaterLevel_~tmp___0~2#1 := 1; {11962#true} is VALID [2022-02-20 18:06:38,114 INFO L290 TraceCheckUtils]: 5: Hoare triple {11962#true} isHighWaterLevel_~retValue_acc~11#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~11#1; {11962#true} is VALID [2022-02-20 18:06:38,114 INFO L290 TraceCheckUtils]: 6: Hoare triple {11962#true} #t~ret40#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret40#1 && #t~ret40#1 <= 2147483647;~tmp~6#1 := #t~ret40#1;havoc #t~ret40#1; {11962#true} is VALID [2022-02-20 18:06:38,114 INFO L290 TraceCheckUtils]: 7: Hoare triple {11962#true} assume 0 != ~tmp~6#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret42#1, activatePump_~tmp~8#1;havoc activatePump_~tmp~8#1; {11962#true} is VALID [2022-02-20 18:06:38,115 INFO L272 TraceCheckUtils]: 8: Hoare triple {11962#true} call activatePump_#t~ret42#1 := isMethaneAlarm(); {11962#true} is VALID [2022-02-20 18:06:38,115 INFO L290 TraceCheckUtils]: 9: Hoare triple {11962#true} havoc ~retValue_acc~9; {11962#true} is VALID [2022-02-20 18:06:38,115 INFO L272 TraceCheckUtils]: 10: Hoare triple {11962#true} call #t~ret43 := isMethaneLevelCritical(); {11962#true} is VALID [2022-02-20 18:06:38,115 INFO L290 TraceCheckUtils]: 11: Hoare triple {11962#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {12019#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:38,115 INFO L290 TraceCheckUtils]: 12: Hoare triple {12019#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} assume true; {12019#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:38,116 INFO L284 TraceCheckUtils]: 13: Hoare quadruple {12019#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} {11962#true} #257#return; {12017#(= ~methaneLevelCritical~0 |isMethaneAlarm_#t~ret43|)} is VALID [2022-02-20 18:06:38,117 INFO L290 TraceCheckUtils]: 14: Hoare triple {12017#(= ~methaneLevelCritical~0 |isMethaneAlarm_#t~ret43|)} assume -2147483648 <= #t~ret43 && #t~ret43 <= 2147483647;~retValue_acc~9 := #t~ret43;havoc #t~ret43;#res := ~retValue_acc~9; {12018#(= |isMethaneAlarm_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:38,117 INFO L290 TraceCheckUtils]: 15: Hoare triple {12018#(= |isMethaneAlarm_#res| ~methaneLevelCritical~0)} assume true; {12018#(= |isMethaneAlarm_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:38,118 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {12018#(= |isMethaneAlarm_#res| ~methaneLevelCritical~0)} {11962#true} #251#return; {12011#(= |processEnvironment__wrappee__methaneQuery_activatePump_#t~ret42#1| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:38,118 INFO L290 TraceCheckUtils]: 17: Hoare triple {12011#(= |processEnvironment__wrappee__methaneQuery_activatePump_#t~ret42#1| ~methaneLevelCritical~0)} assume -2147483648 <= activatePump_#t~ret42#1 && activatePump_#t~ret42#1 <= 2147483647;activatePump_~tmp~8#1 := activatePump_#t~ret42#1;havoc activatePump_#t~ret42#1; {12012#(= |processEnvironment__wrappee__methaneQuery_activatePump_~tmp~8#1| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:38,118 INFO L290 TraceCheckUtils]: 18: Hoare triple {12012#(= |processEnvironment__wrappee__methaneQuery_activatePump_~tmp~8#1| ~methaneLevelCritical~0)} assume !(0 != activatePump_~tmp~8#1);assume { :begin_inline_activatePump__wrappee__highWaterSensor } true;~pumpRunning~0 := 1; {12013#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:06:38,118 INFO L290 TraceCheckUtils]: 19: Hoare triple {12013#(= ~methaneLevelCritical~0 0)} assume { :end_inline_activatePump__wrappee__highWaterSensor } true; {12013#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:06:38,119 INFO L290 TraceCheckUtils]: 20: Hoare triple {12013#(= ~methaneLevelCritical~0 0)} assume { :end_inline_activatePump } true; {12013#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:06:38,119 INFO L290 TraceCheckUtils]: 21: Hoare triple {12013#(= ~methaneLevelCritical~0 0)} assume true; {12013#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:06:38,119 INFO L284 TraceCheckUtils]: 22: Hoare quadruple {12013#(= ~methaneLevelCritical~0 0)} {11972#(not (= ~methaneLevelCritical~0 0))} #235#return; {11963#false} is VALID [2022-02-20 18:06:38,120 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 53 [2022-02-20 18:06:38,121 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:06:38,123 INFO L290 TraceCheckUtils]: 0: Hoare triple {11962#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {11962#true} is VALID [2022-02-20 18:06:38,123 INFO L290 TraceCheckUtils]: 1: Hoare triple {11962#true} assume true; {11962#true} is VALID [2022-02-20 18:06:38,123 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {11962#true} {11963#false} #237#return; {11963#false} is VALID [2022-02-20 18:06:38,124 INFO L290 TraceCheckUtils]: 0: Hoare triple {11962#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(30, 9);call #Ultimate.allocInit(9, 10);call #Ultimate.allocInit(21, 11);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(25, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {11964#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:38,125 INFO L290 TraceCheckUtils]: 1: Hoare triple {11964#(= 1 ~systemActive~0)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret11#1, main_~retValue_acc~3#1, main_~tmp~1#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~1#1;assume { :begin_inline_select_helpers } true; {11964#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:38,125 INFO L290 TraceCheckUtils]: 2: Hoare triple {11964#(= 1 ~systemActive~0)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {11964#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:38,125 INFO L290 TraceCheckUtils]: 3: Hoare triple {11964#(= 1 ~systemActive~0)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~5#1;havoc valid_product_~retValue_acc~5#1;valid_product_~retValue_acc~5#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~5#1; {11964#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:38,126 INFO L290 TraceCheckUtils]: 4: Hoare triple {11964#(= 1 ~systemActive~0)} main_#t~ret11#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret11#1 && main_#t~ret11#1 <= 2147483647;main_~tmp~1#1 := main_#t~ret11#1;havoc main_#t~ret11#1; {11964#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:38,126 INFO L290 TraceCheckUtils]: 5: Hoare triple {11964#(= 1 ~systemActive~0)} assume 0 != main_~tmp~1#1;assume { :begin_inline_setup } true; {11964#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:38,126 INFO L290 TraceCheckUtils]: 6: Hoare triple {11964#(= 1 ~systemActive~0)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet36#1, test_#t~nondet37#1, test_#t~nondet38#1, test_#t~nondet39#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {11964#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:38,127 INFO L290 TraceCheckUtils]: 7: Hoare triple {11964#(= 1 ~systemActive~0)} assume !false; {11964#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:38,127 INFO L290 TraceCheckUtils]: 8: Hoare triple {11964#(= 1 ~systemActive~0)} assume test_~splverifierCounter~0#1 < 4; {11964#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:38,127 INFO L290 TraceCheckUtils]: 9: Hoare triple {11964#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet36#1 && test_#t~nondet36#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet36#1;havoc test_#t~nondet36#1; {11964#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:38,127 INFO L290 TraceCheckUtils]: 10: Hoare triple {11964#(= 1 ~systemActive~0)} assume 0 != test_~tmp~5#1; {11964#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:38,128 INFO L272 TraceCheckUtils]: 11: Hoare triple {11964#(= 1 ~systemActive~0)} call waterRise(); {11999#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:06:38,128 INFO L290 TraceCheckUtils]: 12: Hoare triple {11999#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {11962#true} is VALID [2022-02-20 18:06:38,128 INFO L290 TraceCheckUtils]: 13: Hoare triple {11962#true} assume true; {11962#true} is VALID [2022-02-20 18:06:38,128 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {11962#true} {11964#(= 1 ~systemActive~0)} #243#return; {11964#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:38,129 INFO L290 TraceCheckUtils]: 15: Hoare triple {11964#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet37#1 && test_#t~nondet37#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet37#1;havoc test_#t~nondet37#1; {11964#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:38,129 INFO L290 TraceCheckUtils]: 16: Hoare triple {11964#(= 1 ~systemActive~0)} assume 0 != test_~tmp___0~1#1; {11964#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:38,129 INFO L272 TraceCheckUtils]: 17: Hoare triple {11964#(= 1 ~systemActive~0)} call changeMethaneLevel(); {12000#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:38,130 INFO L290 TraceCheckUtils]: 18: Hoare triple {12000#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {12001#(= ~methaneLevelCritical~0 1)} is VALID [2022-02-20 18:06:38,130 INFO L290 TraceCheckUtils]: 19: Hoare triple {12001#(= ~methaneLevelCritical~0 1)} assume true; {12001#(= ~methaneLevelCritical~0 1)} is VALID [2022-02-20 18:06:38,131 INFO L284 TraceCheckUtils]: 20: Hoare quadruple {12001#(= ~methaneLevelCritical~0 1)} {11964#(= 1 ~systemActive~0)} #245#return; {11971#(= ~methaneLevelCritical~0 ~systemActive~0)} is VALID [2022-02-20 18:06:38,131 INFO L290 TraceCheckUtils]: 21: Hoare triple {11971#(= ~methaneLevelCritical~0 ~systemActive~0)} assume -2147483648 <= test_#t~nondet38#1 && test_#t~nondet38#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet38#1;havoc test_#t~nondet38#1; {11971#(= ~methaneLevelCritical~0 ~systemActive~0)} is VALID [2022-02-20 18:06:38,131 INFO L290 TraceCheckUtils]: 22: Hoare triple {11971#(= ~methaneLevelCritical~0 ~systemActive~0)} assume 0 != test_~tmp___2~0#1; {11971#(= ~methaneLevelCritical~0 ~systemActive~0)} is VALID [2022-02-20 18:06:38,132 INFO L272 TraceCheckUtils]: 23: Hoare triple {11971#(= ~methaneLevelCritical~0 ~systemActive~0)} call timeShift(); {11971#(= ~methaneLevelCritical~0 ~systemActive~0)} is VALID [2022-02-20 18:06:38,132 INFO L290 TraceCheckUtils]: 24: Hoare triple {11971#(= ~methaneLevelCritical~0 ~systemActive~0)} assume !(0 != ~pumpRunning~0); {11971#(= ~methaneLevelCritical~0 ~systemActive~0)} is VALID [2022-02-20 18:06:38,132 INFO L290 TraceCheckUtils]: 25: Hoare triple {11971#(= ~methaneLevelCritical~0 ~systemActive~0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret41#1, processEnvironment_~tmp~7#1;havoc processEnvironment_~tmp~7#1; {11972#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:06:38,132 INFO L290 TraceCheckUtils]: 26: Hoare triple {11972#(not (= ~methaneLevelCritical~0 0))} assume !(0 != ~pumpRunning~0); {11972#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:06:38,133 INFO L272 TraceCheckUtils]: 27: Hoare triple {11972#(not (= ~methaneLevelCritical~0 0))} call processEnvironment__wrappee__methaneQuery(); {12002#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:06:38,133 INFO L290 TraceCheckUtils]: 28: Hoare triple {12002#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~6#1; {11962#true} is VALID [2022-02-20 18:06:38,133 INFO L290 TraceCheckUtils]: 29: Hoare triple {11962#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret52#1, isHighWaterLevel_~retValue_acc~11#1, isHighWaterLevel_~tmp~9#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~11#1;havoc isHighWaterLevel_~tmp~9#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {11962#true} is VALID [2022-02-20 18:06:38,133 INFO L290 TraceCheckUtils]: 30: Hoare triple {11962#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {11962#true} is VALID [2022-02-20 18:06:38,133 INFO L290 TraceCheckUtils]: 31: Hoare triple {11962#true} isHighWaterLevel_#t~ret52#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret52#1 && isHighWaterLevel_#t~ret52#1 <= 2147483647;isHighWaterLevel_~tmp~9#1 := isHighWaterLevel_#t~ret52#1;havoc isHighWaterLevel_#t~ret52#1; {11962#true} is VALID [2022-02-20 18:06:38,133 INFO L290 TraceCheckUtils]: 32: Hoare triple {11962#true} assume !(0 != isHighWaterLevel_~tmp~9#1);isHighWaterLevel_~tmp___0~2#1 := 1; {11962#true} is VALID [2022-02-20 18:06:38,133 INFO L290 TraceCheckUtils]: 33: Hoare triple {11962#true} isHighWaterLevel_~retValue_acc~11#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~11#1; {11962#true} is VALID [2022-02-20 18:06:38,133 INFO L290 TraceCheckUtils]: 34: Hoare triple {11962#true} #t~ret40#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret40#1 && #t~ret40#1 <= 2147483647;~tmp~6#1 := #t~ret40#1;havoc #t~ret40#1; {11962#true} is VALID [2022-02-20 18:06:38,134 INFO L290 TraceCheckUtils]: 35: Hoare triple {11962#true} assume 0 != ~tmp~6#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret42#1, activatePump_~tmp~8#1;havoc activatePump_~tmp~8#1; {11962#true} is VALID [2022-02-20 18:06:38,134 INFO L272 TraceCheckUtils]: 36: Hoare triple {11962#true} call activatePump_#t~ret42#1 := isMethaneAlarm(); {11962#true} is VALID [2022-02-20 18:06:38,134 INFO L290 TraceCheckUtils]: 37: Hoare triple {11962#true} havoc ~retValue_acc~9; {11962#true} is VALID [2022-02-20 18:06:38,134 INFO L272 TraceCheckUtils]: 38: Hoare triple {11962#true} call #t~ret43 := isMethaneLevelCritical(); {11962#true} is VALID [2022-02-20 18:06:38,134 INFO L290 TraceCheckUtils]: 39: Hoare triple {11962#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {12019#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:38,134 INFO L290 TraceCheckUtils]: 40: Hoare triple {12019#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} assume true; {12019#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:38,135 INFO L284 TraceCheckUtils]: 41: Hoare quadruple {12019#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} {11962#true} #257#return; {12017#(= ~methaneLevelCritical~0 |isMethaneAlarm_#t~ret43|)} is VALID [2022-02-20 18:06:38,135 INFO L290 TraceCheckUtils]: 42: Hoare triple {12017#(= ~methaneLevelCritical~0 |isMethaneAlarm_#t~ret43|)} assume -2147483648 <= #t~ret43 && #t~ret43 <= 2147483647;~retValue_acc~9 := #t~ret43;havoc #t~ret43;#res := ~retValue_acc~9; {12018#(= |isMethaneAlarm_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:38,135 INFO L290 TraceCheckUtils]: 43: Hoare triple {12018#(= |isMethaneAlarm_#res| ~methaneLevelCritical~0)} assume true; {12018#(= |isMethaneAlarm_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:38,136 INFO L284 TraceCheckUtils]: 44: Hoare quadruple {12018#(= |isMethaneAlarm_#res| ~methaneLevelCritical~0)} {11962#true} #251#return; {12011#(= |processEnvironment__wrappee__methaneQuery_activatePump_#t~ret42#1| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:38,136 INFO L290 TraceCheckUtils]: 45: Hoare triple {12011#(= |processEnvironment__wrappee__methaneQuery_activatePump_#t~ret42#1| ~methaneLevelCritical~0)} assume -2147483648 <= activatePump_#t~ret42#1 && activatePump_#t~ret42#1 <= 2147483647;activatePump_~tmp~8#1 := activatePump_#t~ret42#1;havoc activatePump_#t~ret42#1; {12012#(= |processEnvironment__wrappee__methaneQuery_activatePump_~tmp~8#1| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:38,137 INFO L290 TraceCheckUtils]: 46: Hoare triple {12012#(= |processEnvironment__wrappee__methaneQuery_activatePump_~tmp~8#1| ~methaneLevelCritical~0)} assume !(0 != activatePump_~tmp~8#1);assume { :begin_inline_activatePump__wrappee__highWaterSensor } true;~pumpRunning~0 := 1; {12013#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:06:38,137 INFO L290 TraceCheckUtils]: 47: Hoare triple {12013#(= ~methaneLevelCritical~0 0)} assume { :end_inline_activatePump__wrappee__highWaterSensor } true; {12013#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:06:38,137 INFO L290 TraceCheckUtils]: 48: Hoare triple {12013#(= ~methaneLevelCritical~0 0)} assume { :end_inline_activatePump } true; {12013#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:06:38,137 INFO L290 TraceCheckUtils]: 49: Hoare triple {12013#(= ~methaneLevelCritical~0 0)} assume true; {12013#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:06:38,138 INFO L284 TraceCheckUtils]: 50: Hoare quadruple {12013#(= ~methaneLevelCritical~0 0)} {11972#(not (= ~methaneLevelCritical~0 0))} #235#return; {11963#false} is VALID [2022-02-20 18:06:38,138 INFO L290 TraceCheckUtils]: 51: Hoare triple {11963#false} assume { :end_inline_processEnvironment } true; {11963#false} is VALID [2022-02-20 18:06:38,138 INFO L290 TraceCheckUtils]: 52: Hoare triple {11963#false} assume { :begin_inline___utac_acc__Specification1_spec__1 } true;havoc __utac_acc__Specification1_spec__1_#t~ret9#1, __utac_acc__Specification1_spec__1_#t~ret10#1, __utac_acc__Specification1_spec__1_~tmp~0#1, __utac_acc__Specification1_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__1_~tmp~0#1;havoc __utac_acc__Specification1_spec__1_~tmp___0~0#1; {11963#false} is VALID [2022-02-20 18:06:38,138 INFO L272 TraceCheckUtils]: 53: Hoare triple {11963#false} call __utac_acc__Specification1_spec__1_#t~ret9#1 := isMethaneLevelCritical(); {11962#true} is VALID [2022-02-20 18:06:38,138 INFO L290 TraceCheckUtils]: 54: Hoare triple {11962#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {11962#true} is VALID [2022-02-20 18:06:38,138 INFO L290 TraceCheckUtils]: 55: Hoare triple {11962#true} assume true; {11962#true} is VALID [2022-02-20 18:06:38,138 INFO L284 TraceCheckUtils]: 56: Hoare quadruple {11962#true} {11963#false} #237#return; {11963#false} is VALID [2022-02-20 18:06:38,138 INFO L290 TraceCheckUtils]: 57: Hoare triple {11963#false} assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret9#1 && __utac_acc__Specification1_spec__1_#t~ret9#1 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp~0#1 := __utac_acc__Specification1_spec__1_#t~ret9#1;havoc __utac_acc__Specification1_spec__1_#t~ret9#1; {11963#false} is VALID [2022-02-20 18:06:38,138 INFO L290 TraceCheckUtils]: 58: Hoare triple {11963#false} assume 0 != __utac_acc__Specification1_spec__1_~tmp~0#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~10#1;havoc isPumpRunning_~retValue_acc~10#1;isPumpRunning_~retValue_acc~10#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~10#1; {11963#false} is VALID [2022-02-20 18:06:38,139 INFO L290 TraceCheckUtils]: 59: Hoare triple {11963#false} __utac_acc__Specification1_spec__1_#t~ret10#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret10#1 && __utac_acc__Specification1_spec__1_#t~ret10#1 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp___0~0#1 := __utac_acc__Specification1_spec__1_#t~ret10#1;havoc __utac_acc__Specification1_spec__1_#t~ret10#1; {11963#false} is VALID [2022-02-20 18:06:38,139 INFO L290 TraceCheckUtils]: 60: Hoare triple {11963#false} assume 0 != __utac_acc__Specification1_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {11963#false} is VALID [2022-02-20 18:06:38,139 INFO L290 TraceCheckUtils]: 61: Hoare triple {11963#false} assume !false; {11963#false} is VALID [2022-02-20 18:06:38,139 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-02-20 18:06:38,139 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:06:38,140 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [898032324] [2022-02-20 18:06:38,140 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [898032324] provided 0 perfect and 1 imperfect interpolant sequences [2022-02-20 18:06:38,140 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1150022530] [2022-02-20 18:06:38,140 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:06:38,140 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-02-20 18:06:38,140 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-20 18:06:38,142 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-02-20 18:06:38,165 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-02-20 18:06:38,215 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:06:38,219 INFO L263 TraceCheckSpWp]: Trace formula consists of 382 conjuncts, 9 conjunts are in the unsatisfiable core [2022-02-20 18:06:38,235 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:06:38,239 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 18:06:38,676 INFO L290 TraceCheckUtils]: 0: Hoare triple {11962#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(30, 9);call #Ultimate.allocInit(9, 10);call #Ultimate.allocInit(21, 11);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(25, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {11962#true} is VALID [2022-02-20 18:06:38,677 INFO L290 TraceCheckUtils]: 1: Hoare triple {11962#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret11#1, main_~retValue_acc~3#1, main_~tmp~1#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~1#1;assume { :begin_inline_select_helpers } true; {11962#true} is VALID [2022-02-20 18:06:38,677 INFO L290 TraceCheckUtils]: 2: Hoare triple {11962#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {11962#true} is VALID [2022-02-20 18:06:38,679 INFO L290 TraceCheckUtils]: 3: Hoare triple {11962#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~5#1;havoc valid_product_~retValue_acc~5#1;valid_product_~retValue_acc~5#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~5#1; {11962#true} is VALID [2022-02-20 18:06:38,679 INFO L290 TraceCheckUtils]: 4: Hoare triple {11962#true} main_#t~ret11#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret11#1 && main_#t~ret11#1 <= 2147483647;main_~tmp~1#1 := main_#t~ret11#1;havoc main_#t~ret11#1; {11962#true} is VALID [2022-02-20 18:06:38,679 INFO L290 TraceCheckUtils]: 5: Hoare triple {11962#true} assume 0 != main_~tmp~1#1;assume { :begin_inline_setup } true; {11962#true} is VALID [2022-02-20 18:06:38,679 INFO L290 TraceCheckUtils]: 6: Hoare triple {11962#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet36#1, test_#t~nondet37#1, test_#t~nondet38#1, test_#t~nondet39#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {11962#true} is VALID [2022-02-20 18:06:38,679 INFO L290 TraceCheckUtils]: 7: Hoare triple {11962#true} assume !false; {11962#true} is VALID [2022-02-20 18:06:38,679 INFO L290 TraceCheckUtils]: 8: Hoare triple {11962#true} assume test_~splverifierCounter~0#1 < 4; {11962#true} is VALID [2022-02-20 18:06:38,680 INFO L290 TraceCheckUtils]: 9: Hoare triple {11962#true} assume -2147483648 <= test_#t~nondet36#1 && test_#t~nondet36#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet36#1;havoc test_#t~nondet36#1; {11962#true} is VALID [2022-02-20 18:06:38,680 INFO L290 TraceCheckUtils]: 10: Hoare triple {11962#true} assume 0 != test_~tmp~5#1; {11962#true} is VALID [2022-02-20 18:06:38,680 INFO L272 TraceCheckUtils]: 11: Hoare triple {11962#true} call waterRise(); {11962#true} is VALID [2022-02-20 18:06:38,680 INFO L290 TraceCheckUtils]: 12: Hoare triple {11962#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {11962#true} is VALID [2022-02-20 18:06:38,680 INFO L290 TraceCheckUtils]: 13: Hoare triple {11962#true} assume true; {11962#true} is VALID [2022-02-20 18:06:38,680 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {11962#true} {11962#true} #243#return; {11962#true} is VALID [2022-02-20 18:06:38,680 INFO L290 TraceCheckUtils]: 15: Hoare triple {11962#true} assume -2147483648 <= test_#t~nondet37#1 && test_#t~nondet37#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet37#1;havoc test_#t~nondet37#1; {11962#true} is VALID [2022-02-20 18:06:38,680 INFO L290 TraceCheckUtils]: 16: Hoare triple {11962#true} assume 0 != test_~tmp___0~1#1; {11962#true} is VALID [2022-02-20 18:06:38,681 INFO L272 TraceCheckUtils]: 17: Hoare triple {11962#true} call changeMethaneLevel(); {11962#true} is VALID [2022-02-20 18:06:38,681 INFO L290 TraceCheckUtils]: 18: Hoare triple {11962#true} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {12077#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:38,681 INFO L290 TraceCheckUtils]: 19: Hoare triple {12077#(<= 1 ~methaneLevelCritical~0)} assume true; {12077#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:38,682 INFO L284 TraceCheckUtils]: 20: Hoare quadruple {12077#(<= 1 ~methaneLevelCritical~0)} {11962#true} #245#return; {12077#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:38,682 INFO L290 TraceCheckUtils]: 21: Hoare triple {12077#(<= 1 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet38#1 && test_#t~nondet38#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet38#1;havoc test_#t~nondet38#1; {12077#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:38,683 INFO L290 TraceCheckUtils]: 22: Hoare triple {12077#(<= 1 ~methaneLevelCritical~0)} assume 0 != test_~tmp___2~0#1; {12077#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:38,683 INFO L272 TraceCheckUtils]: 23: Hoare triple {12077#(<= 1 ~methaneLevelCritical~0)} call timeShift(); {12077#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:38,683 INFO L290 TraceCheckUtils]: 24: Hoare triple {12077#(<= 1 ~methaneLevelCritical~0)} assume !(0 != ~pumpRunning~0); {12077#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:38,684 INFO L290 TraceCheckUtils]: 25: Hoare triple {12077#(<= 1 ~methaneLevelCritical~0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret41#1, processEnvironment_~tmp~7#1;havoc processEnvironment_~tmp~7#1; {12077#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:38,684 INFO L290 TraceCheckUtils]: 26: Hoare triple {12077#(<= 1 ~methaneLevelCritical~0)} assume !(0 != ~pumpRunning~0); {12077#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:38,684 INFO L272 TraceCheckUtils]: 27: Hoare triple {12077#(<= 1 ~methaneLevelCritical~0)} call processEnvironment__wrappee__methaneQuery(); {12077#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:38,685 INFO L290 TraceCheckUtils]: 28: Hoare triple {12077#(<= 1 ~methaneLevelCritical~0)} havoc ~tmp~6#1; {12077#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:38,685 INFO L290 TraceCheckUtils]: 29: Hoare triple {12077#(<= 1 ~methaneLevelCritical~0)} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret52#1, isHighWaterLevel_~retValue_acc~11#1, isHighWaterLevel_~tmp~9#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~11#1;havoc isHighWaterLevel_~tmp~9#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {12077#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:38,685 INFO L290 TraceCheckUtils]: 30: Hoare triple {12077#(<= 1 ~methaneLevelCritical~0)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {12077#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:38,686 INFO L290 TraceCheckUtils]: 31: Hoare triple {12077#(<= 1 ~methaneLevelCritical~0)} isHighWaterLevel_#t~ret52#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret52#1 && isHighWaterLevel_#t~ret52#1 <= 2147483647;isHighWaterLevel_~tmp~9#1 := isHighWaterLevel_#t~ret52#1;havoc isHighWaterLevel_#t~ret52#1; {12077#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:38,686 INFO L290 TraceCheckUtils]: 32: Hoare triple {12077#(<= 1 ~methaneLevelCritical~0)} assume !(0 != isHighWaterLevel_~tmp~9#1);isHighWaterLevel_~tmp___0~2#1 := 1; {12077#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:38,686 INFO L290 TraceCheckUtils]: 33: Hoare triple {12077#(<= 1 ~methaneLevelCritical~0)} isHighWaterLevel_~retValue_acc~11#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~11#1; {12077#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:38,687 INFO L290 TraceCheckUtils]: 34: Hoare triple {12077#(<= 1 ~methaneLevelCritical~0)} #t~ret40#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret40#1 && #t~ret40#1 <= 2147483647;~tmp~6#1 := #t~ret40#1;havoc #t~ret40#1; {12077#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:38,687 INFO L290 TraceCheckUtils]: 35: Hoare triple {12077#(<= 1 ~methaneLevelCritical~0)} assume 0 != ~tmp~6#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret42#1, activatePump_~tmp~8#1;havoc activatePump_~tmp~8#1; {12077#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:38,687 INFO L272 TraceCheckUtils]: 36: Hoare triple {12077#(<= 1 ~methaneLevelCritical~0)} call activatePump_#t~ret42#1 := isMethaneAlarm(); {12077#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:38,688 INFO L290 TraceCheckUtils]: 37: Hoare triple {12077#(<= 1 ~methaneLevelCritical~0)} havoc ~retValue_acc~9; {12077#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:38,688 INFO L272 TraceCheckUtils]: 38: Hoare triple {12077#(<= 1 ~methaneLevelCritical~0)} call #t~ret43 := isMethaneLevelCritical(); {12077#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:38,688 INFO L290 TraceCheckUtils]: 39: Hoare triple {12077#(<= 1 ~methaneLevelCritical~0)} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {12141#(and (<= ~methaneLevelCritical~0 |isMethaneLevelCritical_#res|) (<= 1 ~methaneLevelCritical~0))} is VALID [2022-02-20 18:06:38,689 INFO L290 TraceCheckUtils]: 40: Hoare triple {12141#(and (<= ~methaneLevelCritical~0 |isMethaneLevelCritical_#res|) (<= 1 ~methaneLevelCritical~0))} assume true; {12141#(and (<= ~methaneLevelCritical~0 |isMethaneLevelCritical_#res|) (<= 1 ~methaneLevelCritical~0))} is VALID [2022-02-20 18:06:38,689 INFO L284 TraceCheckUtils]: 41: Hoare quadruple {12141#(and (<= ~methaneLevelCritical~0 |isMethaneLevelCritical_#res|) (<= 1 ~methaneLevelCritical~0))} {12077#(<= 1 ~methaneLevelCritical~0)} #257#return; {12148#(and (<= 1 ~methaneLevelCritical~0) (<= ~methaneLevelCritical~0 |isMethaneAlarm_#t~ret43|))} is VALID [2022-02-20 18:06:38,690 INFO L290 TraceCheckUtils]: 42: Hoare triple {12148#(and (<= 1 ~methaneLevelCritical~0) (<= ~methaneLevelCritical~0 |isMethaneAlarm_#t~ret43|))} assume -2147483648 <= #t~ret43 && #t~ret43 <= 2147483647;~retValue_acc~9 := #t~ret43;havoc #t~ret43;#res := ~retValue_acc~9; {12152#(and (<= 1 ~methaneLevelCritical~0) (<= ~methaneLevelCritical~0 |isMethaneAlarm_#res|))} is VALID [2022-02-20 18:06:38,690 INFO L290 TraceCheckUtils]: 43: Hoare triple {12152#(and (<= 1 ~methaneLevelCritical~0) (<= ~methaneLevelCritical~0 |isMethaneAlarm_#res|))} assume true; {12152#(and (<= 1 ~methaneLevelCritical~0) (<= ~methaneLevelCritical~0 |isMethaneAlarm_#res|))} is VALID [2022-02-20 18:06:38,691 INFO L284 TraceCheckUtils]: 44: Hoare quadruple {12152#(and (<= 1 ~methaneLevelCritical~0) (<= ~methaneLevelCritical~0 |isMethaneAlarm_#res|))} {12077#(<= 1 ~methaneLevelCritical~0)} #251#return; {12159#(and (<= 1 ~methaneLevelCritical~0) (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__methaneQuery_activatePump_#t~ret42#1|))} is VALID [2022-02-20 18:06:38,691 INFO L290 TraceCheckUtils]: 45: Hoare triple {12159#(and (<= 1 ~methaneLevelCritical~0) (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__methaneQuery_activatePump_#t~ret42#1|))} assume -2147483648 <= activatePump_#t~ret42#1 && activatePump_#t~ret42#1 <= 2147483647;activatePump_~tmp~8#1 := activatePump_#t~ret42#1;havoc activatePump_#t~ret42#1; {12163#(and (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__methaneQuery_activatePump_~tmp~8#1|) (<= 1 ~methaneLevelCritical~0))} is VALID [2022-02-20 18:06:38,692 INFO L290 TraceCheckUtils]: 46: Hoare triple {12163#(and (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__methaneQuery_activatePump_~tmp~8#1|) (<= 1 ~methaneLevelCritical~0))} assume !(0 != activatePump_~tmp~8#1);assume { :begin_inline_activatePump__wrappee__highWaterSensor } true;~pumpRunning~0 := 1; {11963#false} is VALID [2022-02-20 18:06:38,692 INFO L290 TraceCheckUtils]: 47: Hoare triple {11963#false} assume { :end_inline_activatePump__wrappee__highWaterSensor } true; {11963#false} is VALID [2022-02-20 18:06:38,692 INFO L290 TraceCheckUtils]: 48: Hoare triple {11963#false} assume { :end_inline_activatePump } true; {11963#false} is VALID [2022-02-20 18:06:38,692 INFO L290 TraceCheckUtils]: 49: Hoare triple {11963#false} assume true; {11963#false} is VALID [2022-02-20 18:06:38,692 INFO L284 TraceCheckUtils]: 50: Hoare quadruple {11963#false} {12077#(<= 1 ~methaneLevelCritical~0)} #235#return; {11963#false} is VALID [2022-02-20 18:06:38,692 INFO L290 TraceCheckUtils]: 51: Hoare triple {11963#false} assume { :end_inline_processEnvironment } true; {11963#false} is VALID [2022-02-20 18:06:38,692 INFO L290 TraceCheckUtils]: 52: Hoare triple {11963#false} assume { :begin_inline___utac_acc__Specification1_spec__1 } true;havoc __utac_acc__Specification1_spec__1_#t~ret9#1, __utac_acc__Specification1_spec__1_#t~ret10#1, __utac_acc__Specification1_spec__1_~tmp~0#1, __utac_acc__Specification1_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__1_~tmp~0#1;havoc __utac_acc__Specification1_spec__1_~tmp___0~0#1; {11963#false} is VALID [2022-02-20 18:06:38,692 INFO L272 TraceCheckUtils]: 53: Hoare triple {11963#false} call __utac_acc__Specification1_spec__1_#t~ret9#1 := isMethaneLevelCritical(); {11963#false} is VALID [2022-02-20 18:06:38,693 INFO L290 TraceCheckUtils]: 54: Hoare triple {11963#false} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {11963#false} is VALID [2022-02-20 18:06:38,693 INFO L290 TraceCheckUtils]: 55: Hoare triple {11963#false} assume true; {11963#false} is VALID [2022-02-20 18:06:38,693 INFO L284 TraceCheckUtils]: 56: Hoare quadruple {11963#false} {11963#false} #237#return; {11963#false} is VALID [2022-02-20 18:06:38,693 INFO L290 TraceCheckUtils]: 57: Hoare triple {11963#false} assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret9#1 && __utac_acc__Specification1_spec__1_#t~ret9#1 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp~0#1 := __utac_acc__Specification1_spec__1_#t~ret9#1;havoc __utac_acc__Specification1_spec__1_#t~ret9#1; {11963#false} is VALID [2022-02-20 18:06:38,693 INFO L290 TraceCheckUtils]: 58: Hoare triple {11963#false} assume 0 != __utac_acc__Specification1_spec__1_~tmp~0#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~10#1;havoc isPumpRunning_~retValue_acc~10#1;isPumpRunning_~retValue_acc~10#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~10#1; {11963#false} is VALID [2022-02-20 18:06:38,693 INFO L290 TraceCheckUtils]: 59: Hoare triple {11963#false} __utac_acc__Specification1_spec__1_#t~ret10#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret10#1 && __utac_acc__Specification1_spec__1_#t~ret10#1 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp___0~0#1 := __utac_acc__Specification1_spec__1_#t~ret10#1;havoc __utac_acc__Specification1_spec__1_#t~ret10#1; {11963#false} is VALID [2022-02-20 18:06:38,693 INFO L290 TraceCheckUtils]: 60: Hoare triple {11963#false} assume 0 != __utac_acc__Specification1_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {11963#false} is VALID [2022-02-20 18:06:38,693 INFO L290 TraceCheckUtils]: 61: Hoare triple {11963#false} assume !false; {11963#false} is VALID [2022-02-20 18:06:38,694 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:06:38,694 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-02-20 18:06:38,694 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1150022530] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:06:38,694 INFO L191 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-02-20 18:06:38,695 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [15] total 21 [2022-02-20 18:06:38,695 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [251845209] [2022-02-20 18:06:38,695 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:06:38,696 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 6.125) internal successors, (49), 6 states have internal predecessors, (49), 3 states have call successors, (7), 3 states have call predecessors, (7), 5 states have return successors, (6), 5 states have call predecessors, (6), 3 states have call successors, (6) Word has length 62 [2022-02-20 18:06:38,696 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:06:38,696 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 8 states, 8 states have (on average 6.125) internal successors, (49), 6 states have internal predecessors, (49), 3 states have call successors, (7), 3 states have call predecessors, (7), 5 states have return successors, (6), 5 states have call predecessors, (6), 3 states have call successors, (6) [2022-02-20 18:06:38,735 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 62 edges. 62 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:06:38,735 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-02-20 18:06:38,735 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:06:38,736 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-02-20 18:06:38,736 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=52, Invalid=368, Unknown=0, NotChecked=0, Total=420 [2022-02-20 18:06:38,736 INFO L87 Difference]: Start difference. First operand 505 states and 616 transitions. Second operand has 8 states, 8 states have (on average 6.125) internal successors, (49), 6 states have internal predecessors, (49), 3 states have call successors, (7), 3 states have call predecessors, (7), 5 states have return successors, (6), 5 states have call predecessors, (6), 3 states have call successors, (6) [2022-02-20 18:06:39,258 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:06:39,258 INFO L93 Difference]: Finished difference Result 982 states and 1203 transitions. [2022-02-20 18:06:39,258 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-02-20 18:06:39,259 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 6.125) internal successors, (49), 6 states have internal predecessors, (49), 3 states have call successors, (7), 3 states have call predecessors, (7), 5 states have return successors, (6), 5 states have call predecessors, (6), 3 states have call successors, (6) Word has length 62 [2022-02-20 18:06:39,259 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:06:39,259 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 6.125) internal successors, (49), 6 states have internal predecessors, (49), 3 states have call successors, (7), 3 states have call predecessors, (7), 5 states have return successors, (6), 5 states have call predecessors, (6), 3 states have call successors, (6) [2022-02-20 18:06:39,261 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 269 transitions. [2022-02-20 18:06:39,262 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 6.125) internal successors, (49), 6 states have internal predecessors, (49), 3 states have call successors, (7), 3 states have call predecessors, (7), 5 states have return successors, (6), 5 states have call predecessors, (6), 3 states have call successors, (6) [2022-02-20 18:06:39,264 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 269 transitions. [2022-02-20 18:06:39,264 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states and 269 transitions. [2022-02-20 18:06:39,428 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 269 edges. 269 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:06:39,441 INFO L225 Difference]: With dead ends: 982 [2022-02-20 18:06:39,441 INFO L226 Difference]: Without dead ends: 484 [2022-02-20 18:06:39,442 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 82 GetRequests, 63 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=52, Invalid=368, Unknown=0, NotChecked=0, Total=420 [2022-02-20 18:06:39,443 INFO L933 BasicCegarLoop]: 170 mSDtfsCounter, 61 mSDsluCounter, 375 mSDsCounter, 0 mSdLazyCounter, 144 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 65 SdHoareTripleChecker+Valid, 545 SdHoareTripleChecker+Invalid, 147 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 144 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-02-20 18:06:39,443 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [65 Valid, 545 Invalid, 147 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 144 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-02-20 18:06:39,444 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 484 states. [2022-02-20 18:06:39,526 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 484 to 482. [2022-02-20 18:06:39,527 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:06:39,527 INFO L82 GeneralOperation]: Start isEquivalent. First operand 484 states. Second operand has 482 states, 358 states have (on average 1.1787709497206704) internal successors, (422), 380 states have internal predecessors, (422), 64 states have call successors, (64), 58 states have call predecessors, (64), 59 states have return successors, (88), 63 states have call predecessors, (88), 64 states have call successors, (88) [2022-02-20 18:06:39,528 INFO L74 IsIncluded]: Start isIncluded. First operand 484 states. Second operand has 482 states, 358 states have (on average 1.1787709497206704) internal successors, (422), 380 states have internal predecessors, (422), 64 states have call successors, (64), 58 states have call predecessors, (64), 59 states have return successors, (88), 63 states have call predecessors, (88), 64 states have call successors, (88) [2022-02-20 18:06:39,529 INFO L87 Difference]: Start difference. First operand 484 states. Second operand has 482 states, 358 states have (on average 1.1787709497206704) internal successors, (422), 380 states have internal predecessors, (422), 64 states have call successors, (64), 58 states have call predecessors, (64), 59 states have return successors, (88), 63 states have call predecessors, (88), 64 states have call successors, (88) [2022-02-20 18:06:39,539 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:06:39,539 INFO L93 Difference]: Finished difference Result 484 states and 577 transitions. [2022-02-20 18:06:39,539 INFO L276 IsEmpty]: Start isEmpty. Operand 484 states and 577 transitions. [2022-02-20 18:06:39,540 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:06:39,540 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:06:39,541 INFO L74 IsIncluded]: Start isIncluded. First operand has 482 states, 358 states have (on average 1.1787709497206704) internal successors, (422), 380 states have internal predecessors, (422), 64 states have call successors, (64), 58 states have call predecessors, (64), 59 states have return successors, (88), 63 states have call predecessors, (88), 64 states have call successors, (88) Second operand 484 states. [2022-02-20 18:06:39,541 INFO L87 Difference]: Start difference. First operand has 482 states, 358 states have (on average 1.1787709497206704) internal successors, (422), 380 states have internal predecessors, (422), 64 states have call successors, (64), 58 states have call predecessors, (64), 59 states have return successors, (88), 63 states have call predecessors, (88), 64 states have call successors, (88) Second operand 484 states. [2022-02-20 18:06:39,552 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:06:39,552 INFO L93 Difference]: Finished difference Result 484 states and 577 transitions. [2022-02-20 18:06:39,552 INFO L276 IsEmpty]: Start isEmpty. Operand 484 states and 577 transitions. [2022-02-20 18:06:39,553 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:06:39,553 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:06:39,554 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:06:39,554 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:06:39,555 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 482 states, 358 states have (on average 1.1787709497206704) internal successors, (422), 380 states have internal predecessors, (422), 64 states have call successors, (64), 58 states have call predecessors, (64), 59 states have return successors, (88), 63 states have call predecessors, (88), 64 states have call successors, (88) [2022-02-20 18:06:39,567 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 482 states to 482 states and 574 transitions. [2022-02-20 18:06:39,567 INFO L78 Accepts]: Start accepts. Automaton has 482 states and 574 transitions. Word has length 62 [2022-02-20 18:06:39,567 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:06:39,568 INFO L470 AbstractCegarLoop]: Abstraction has 482 states and 574 transitions. [2022-02-20 18:06:39,568 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 6.125) internal successors, (49), 6 states have internal predecessors, (49), 3 states have call successors, (7), 3 states have call predecessors, (7), 5 states have return successors, (6), 5 states have call predecessors, (6), 3 states have call successors, (6) [2022-02-20 18:06:39,568 INFO L276 IsEmpty]: Start isEmpty. Operand 482 states and 574 transitions. [2022-02-20 18:06:39,569 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 107 [2022-02-20 18:06:39,569 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:06:39,569 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:06:39,610 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2022-02-20 18:06:39,804 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-02-20 18:06:39,804 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:06:39,805 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:06:39,805 INFO L85 PathProgramCache]: Analyzing trace with hash 1836694146, now seen corresponding path program 1 times [2022-02-20 18:06:39,805 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:06:39,805 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1073783300] [2022-02-20 18:06:39,805 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:06:39,806 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:06:39,824 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:06:39,855 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-02-20 18:06:39,857 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:06:39,859 INFO L290 TraceCheckUtils]: 0: Hoare triple {15269#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {15201#true} is VALID [2022-02-20 18:06:39,859 INFO L290 TraceCheckUtils]: 1: Hoare triple {15201#true} assume true; {15201#true} is VALID [2022-02-20 18:06:39,859 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {15201#true} {15203#(= 1 ~systemActive~0)} #243#return; {15203#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:39,865 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-02-20 18:06:39,869 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:06:39,877 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-02-20 18:06:39,880 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:06:39,883 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:06:39,884 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:06:39,886 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:06:39,886 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:06:39,887 INFO L290 TraceCheckUtils]: 0: Hoare triple {15201#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {15201#true} is VALID [2022-02-20 18:06:39,888 INFO L290 TraceCheckUtils]: 1: Hoare triple {15201#true} assume true; {15201#true} is VALID [2022-02-20 18:06:39,888 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {15201#true} {15201#true} #257#return; {15201#true} is VALID [2022-02-20 18:06:39,888 INFO L290 TraceCheckUtils]: 0: Hoare triple {15201#true} havoc ~retValue_acc~9; {15201#true} is VALID [2022-02-20 18:06:39,888 INFO L272 TraceCheckUtils]: 1: Hoare triple {15201#true} call #t~ret43 := isMethaneLevelCritical(); {15201#true} is VALID [2022-02-20 18:06:39,888 INFO L290 TraceCheckUtils]: 2: Hoare triple {15201#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {15201#true} is VALID [2022-02-20 18:06:39,888 INFO L290 TraceCheckUtils]: 3: Hoare triple {15201#true} assume true; {15201#true} is VALID [2022-02-20 18:06:39,888 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {15201#true} {15201#true} #257#return; {15201#true} is VALID [2022-02-20 18:06:39,889 INFO L290 TraceCheckUtils]: 5: Hoare triple {15201#true} assume -2147483648 <= #t~ret43 && #t~ret43 <= 2147483647;~retValue_acc~9 := #t~ret43;havoc #t~ret43;#res := ~retValue_acc~9; {15201#true} is VALID [2022-02-20 18:06:39,889 INFO L290 TraceCheckUtils]: 6: Hoare triple {15201#true} assume true; {15201#true} is VALID [2022-02-20 18:06:39,889 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {15201#true} {15201#true} #251#return; {15201#true} is VALID [2022-02-20 18:06:39,889 INFO L290 TraceCheckUtils]: 0: Hoare triple {15297#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~6#1; {15201#true} is VALID [2022-02-20 18:06:39,889 INFO L290 TraceCheckUtils]: 1: Hoare triple {15201#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret52#1, isHighWaterLevel_~retValue_acc~11#1, isHighWaterLevel_~tmp~9#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~11#1;havoc isHighWaterLevel_~tmp~9#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {15201#true} is VALID [2022-02-20 18:06:39,889 INFO L290 TraceCheckUtils]: 2: Hoare triple {15201#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {15201#true} is VALID [2022-02-20 18:06:39,889 INFO L290 TraceCheckUtils]: 3: Hoare triple {15201#true} isHighWaterLevel_#t~ret52#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret52#1 && isHighWaterLevel_#t~ret52#1 <= 2147483647;isHighWaterLevel_~tmp~9#1 := isHighWaterLevel_#t~ret52#1;havoc isHighWaterLevel_#t~ret52#1; {15201#true} is VALID [2022-02-20 18:06:39,889 INFO L290 TraceCheckUtils]: 4: Hoare triple {15201#true} assume !(0 != isHighWaterLevel_~tmp~9#1);isHighWaterLevel_~tmp___0~2#1 := 1; {15201#true} is VALID [2022-02-20 18:06:39,889 INFO L290 TraceCheckUtils]: 5: Hoare triple {15201#true} isHighWaterLevel_~retValue_acc~11#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~11#1; {15201#true} is VALID [2022-02-20 18:06:39,890 INFO L290 TraceCheckUtils]: 6: Hoare triple {15201#true} #t~ret40#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret40#1 && #t~ret40#1 <= 2147483647;~tmp~6#1 := #t~ret40#1;havoc #t~ret40#1; {15201#true} is VALID [2022-02-20 18:06:39,890 INFO L290 TraceCheckUtils]: 7: Hoare triple {15201#true} assume 0 != ~tmp~6#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret42#1, activatePump_~tmp~8#1;havoc activatePump_~tmp~8#1; {15201#true} is VALID [2022-02-20 18:06:39,890 INFO L272 TraceCheckUtils]: 8: Hoare triple {15201#true} call activatePump_#t~ret42#1 := isMethaneAlarm(); {15201#true} is VALID [2022-02-20 18:06:39,890 INFO L290 TraceCheckUtils]: 9: Hoare triple {15201#true} havoc ~retValue_acc~9; {15201#true} is VALID [2022-02-20 18:06:39,890 INFO L272 TraceCheckUtils]: 10: Hoare triple {15201#true} call #t~ret43 := isMethaneLevelCritical(); {15201#true} is VALID [2022-02-20 18:06:39,890 INFO L290 TraceCheckUtils]: 11: Hoare triple {15201#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {15201#true} is VALID [2022-02-20 18:06:39,890 INFO L290 TraceCheckUtils]: 12: Hoare triple {15201#true} assume true; {15201#true} is VALID [2022-02-20 18:06:39,890 INFO L284 TraceCheckUtils]: 13: Hoare quadruple {15201#true} {15201#true} #257#return; {15201#true} is VALID [2022-02-20 18:06:39,891 INFO L290 TraceCheckUtils]: 14: Hoare triple {15201#true} assume -2147483648 <= #t~ret43 && #t~ret43 <= 2147483647;~retValue_acc~9 := #t~ret43;havoc #t~ret43;#res := ~retValue_acc~9; {15201#true} is VALID [2022-02-20 18:06:39,891 INFO L290 TraceCheckUtils]: 15: Hoare triple {15201#true} assume true; {15201#true} is VALID [2022-02-20 18:06:39,891 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {15201#true} {15201#true} #251#return; {15201#true} is VALID [2022-02-20 18:06:39,891 INFO L290 TraceCheckUtils]: 17: Hoare triple {15201#true} assume -2147483648 <= activatePump_#t~ret42#1 && activatePump_#t~ret42#1 <= 2147483647;activatePump_~tmp~8#1 := activatePump_#t~ret42#1;havoc activatePump_#t~ret42#1; {15201#true} is VALID [2022-02-20 18:06:39,891 INFO L290 TraceCheckUtils]: 18: Hoare triple {15201#true} assume !(0 != activatePump_~tmp~8#1);assume { :begin_inline_activatePump__wrappee__highWaterSensor } true;~pumpRunning~0 := 1; {15201#true} is VALID [2022-02-20 18:06:39,891 INFO L290 TraceCheckUtils]: 19: Hoare triple {15201#true} assume { :end_inline_activatePump__wrappee__highWaterSensor } true; {15201#true} is VALID [2022-02-20 18:06:39,891 INFO L290 TraceCheckUtils]: 20: Hoare triple {15201#true} assume { :end_inline_activatePump } true; {15201#true} is VALID [2022-02-20 18:06:39,891 INFO L290 TraceCheckUtils]: 21: Hoare triple {15201#true} assume true; {15201#true} is VALID [2022-02-20 18:06:39,892 INFO L284 TraceCheckUtils]: 22: Hoare quadruple {15201#true} {15201#true} #235#return; {15201#true} is VALID [2022-02-20 18:06:39,892 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2022-02-20 18:06:39,892 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:06:39,894 INFO L290 TraceCheckUtils]: 0: Hoare triple {15201#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {15201#true} is VALID [2022-02-20 18:06:39,894 INFO L290 TraceCheckUtils]: 1: Hoare triple {15201#true} assume true; {15201#true} is VALID [2022-02-20 18:06:39,894 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {15201#true} {15201#true} #237#return; {15201#true} is VALID [2022-02-20 18:06:39,895 INFO L290 TraceCheckUtils]: 0: Hoare triple {15270#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume !(0 != ~pumpRunning~0); {15201#true} is VALID [2022-02-20 18:06:39,895 INFO L290 TraceCheckUtils]: 1: Hoare triple {15201#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret41#1, processEnvironment_~tmp~7#1;havoc processEnvironment_~tmp~7#1; {15201#true} is VALID [2022-02-20 18:06:39,895 INFO L290 TraceCheckUtils]: 2: Hoare triple {15201#true} assume !(0 != ~pumpRunning~0); {15201#true} is VALID [2022-02-20 18:06:39,895 INFO L272 TraceCheckUtils]: 3: Hoare triple {15201#true} call processEnvironment__wrappee__methaneQuery(); {15297#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:06:39,895 INFO L290 TraceCheckUtils]: 4: Hoare triple {15297#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~6#1; {15201#true} is VALID [2022-02-20 18:06:39,895 INFO L290 TraceCheckUtils]: 5: Hoare triple {15201#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret52#1, isHighWaterLevel_~retValue_acc~11#1, isHighWaterLevel_~tmp~9#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~11#1;havoc isHighWaterLevel_~tmp~9#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {15201#true} is VALID [2022-02-20 18:06:39,896 INFO L290 TraceCheckUtils]: 6: Hoare triple {15201#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {15201#true} is VALID [2022-02-20 18:06:39,896 INFO L290 TraceCheckUtils]: 7: Hoare triple {15201#true} isHighWaterLevel_#t~ret52#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret52#1 && isHighWaterLevel_#t~ret52#1 <= 2147483647;isHighWaterLevel_~tmp~9#1 := isHighWaterLevel_#t~ret52#1;havoc isHighWaterLevel_#t~ret52#1; {15201#true} is VALID [2022-02-20 18:06:39,896 INFO L290 TraceCheckUtils]: 8: Hoare triple {15201#true} assume !(0 != isHighWaterLevel_~tmp~9#1);isHighWaterLevel_~tmp___0~2#1 := 1; {15201#true} is VALID [2022-02-20 18:06:39,896 INFO L290 TraceCheckUtils]: 9: Hoare triple {15201#true} isHighWaterLevel_~retValue_acc~11#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~11#1; {15201#true} is VALID [2022-02-20 18:06:39,896 INFO L290 TraceCheckUtils]: 10: Hoare triple {15201#true} #t~ret40#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret40#1 && #t~ret40#1 <= 2147483647;~tmp~6#1 := #t~ret40#1;havoc #t~ret40#1; {15201#true} is VALID [2022-02-20 18:06:39,896 INFO L290 TraceCheckUtils]: 11: Hoare triple {15201#true} assume 0 != ~tmp~6#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret42#1, activatePump_~tmp~8#1;havoc activatePump_~tmp~8#1; {15201#true} is VALID [2022-02-20 18:06:39,897 INFO L272 TraceCheckUtils]: 12: Hoare triple {15201#true} call activatePump_#t~ret42#1 := isMethaneAlarm(); {15201#true} is VALID [2022-02-20 18:06:39,897 INFO L290 TraceCheckUtils]: 13: Hoare triple {15201#true} havoc ~retValue_acc~9; {15201#true} is VALID [2022-02-20 18:06:39,897 INFO L272 TraceCheckUtils]: 14: Hoare triple {15201#true} call #t~ret43 := isMethaneLevelCritical(); {15201#true} is VALID [2022-02-20 18:06:39,897 INFO L290 TraceCheckUtils]: 15: Hoare triple {15201#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {15201#true} is VALID [2022-02-20 18:06:39,897 INFO L290 TraceCheckUtils]: 16: Hoare triple {15201#true} assume true; {15201#true} is VALID [2022-02-20 18:06:39,897 INFO L284 TraceCheckUtils]: 17: Hoare quadruple {15201#true} {15201#true} #257#return; {15201#true} is VALID [2022-02-20 18:06:39,897 INFO L290 TraceCheckUtils]: 18: Hoare triple {15201#true} assume -2147483648 <= #t~ret43 && #t~ret43 <= 2147483647;~retValue_acc~9 := #t~ret43;havoc #t~ret43;#res := ~retValue_acc~9; {15201#true} is VALID [2022-02-20 18:06:39,898 INFO L290 TraceCheckUtils]: 19: Hoare triple {15201#true} assume true; {15201#true} is VALID [2022-02-20 18:06:39,898 INFO L284 TraceCheckUtils]: 20: Hoare quadruple {15201#true} {15201#true} #251#return; {15201#true} is VALID [2022-02-20 18:06:39,898 INFO L290 TraceCheckUtils]: 21: Hoare triple {15201#true} assume -2147483648 <= activatePump_#t~ret42#1 && activatePump_#t~ret42#1 <= 2147483647;activatePump_~tmp~8#1 := activatePump_#t~ret42#1;havoc activatePump_#t~ret42#1; {15201#true} is VALID [2022-02-20 18:06:39,898 INFO L290 TraceCheckUtils]: 22: Hoare triple {15201#true} assume !(0 != activatePump_~tmp~8#1);assume { :begin_inline_activatePump__wrappee__highWaterSensor } true;~pumpRunning~0 := 1; {15201#true} is VALID [2022-02-20 18:06:39,898 INFO L290 TraceCheckUtils]: 23: Hoare triple {15201#true} assume { :end_inline_activatePump__wrappee__highWaterSensor } true; {15201#true} is VALID [2022-02-20 18:06:39,898 INFO L290 TraceCheckUtils]: 24: Hoare triple {15201#true} assume { :end_inline_activatePump } true; {15201#true} is VALID [2022-02-20 18:06:39,898 INFO L290 TraceCheckUtils]: 25: Hoare triple {15201#true} assume true; {15201#true} is VALID [2022-02-20 18:06:39,898 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {15201#true} {15201#true} #235#return; {15201#true} is VALID [2022-02-20 18:06:39,899 INFO L290 TraceCheckUtils]: 27: Hoare triple {15201#true} assume { :end_inline_processEnvironment } true; {15201#true} is VALID [2022-02-20 18:06:39,899 INFO L290 TraceCheckUtils]: 28: Hoare triple {15201#true} assume { :begin_inline___utac_acc__Specification1_spec__1 } true;havoc __utac_acc__Specification1_spec__1_#t~ret9#1, __utac_acc__Specification1_spec__1_#t~ret10#1, __utac_acc__Specification1_spec__1_~tmp~0#1, __utac_acc__Specification1_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__1_~tmp~0#1;havoc __utac_acc__Specification1_spec__1_~tmp___0~0#1; {15201#true} is VALID [2022-02-20 18:06:39,899 INFO L272 TraceCheckUtils]: 29: Hoare triple {15201#true} call __utac_acc__Specification1_spec__1_#t~ret9#1 := isMethaneLevelCritical(); {15201#true} is VALID [2022-02-20 18:06:39,899 INFO L290 TraceCheckUtils]: 30: Hoare triple {15201#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {15201#true} is VALID [2022-02-20 18:06:39,899 INFO L290 TraceCheckUtils]: 31: Hoare triple {15201#true} assume true; {15201#true} is VALID [2022-02-20 18:06:39,899 INFO L284 TraceCheckUtils]: 32: Hoare quadruple {15201#true} {15201#true} #237#return; {15201#true} is VALID [2022-02-20 18:06:39,899 INFO L290 TraceCheckUtils]: 33: Hoare triple {15201#true} assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret9#1 && __utac_acc__Specification1_spec__1_#t~ret9#1 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp~0#1 := __utac_acc__Specification1_spec__1_#t~ret9#1;havoc __utac_acc__Specification1_spec__1_#t~ret9#1; {15201#true} is VALID [2022-02-20 18:06:39,899 INFO L290 TraceCheckUtils]: 34: Hoare triple {15201#true} assume !(0 != __utac_acc__Specification1_spec__1_~tmp~0#1); {15201#true} is VALID [2022-02-20 18:06:39,900 INFO L290 TraceCheckUtils]: 35: Hoare triple {15201#true} assume { :end_inline___utac_acc__Specification1_spec__1 } true; {15201#true} is VALID [2022-02-20 18:06:39,900 INFO L290 TraceCheckUtils]: 36: Hoare triple {15201#true} assume true; {15201#true} is VALID [2022-02-20 18:06:39,900 INFO L284 TraceCheckUtils]: 37: Hoare quadruple {15201#true} {15203#(= 1 ~systemActive~0)} #247#return; {15201#true} is VALID [2022-02-20 18:06:39,904 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2022-02-20 18:06:39,906 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:06:39,914 INFO L290 TraceCheckUtils]: 0: Hoare triple {15309#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {15310#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:39,915 INFO L290 TraceCheckUtils]: 1: Hoare triple {15310#(<= 1 ~methaneLevelCritical~0)} assume true; {15310#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:39,915 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {15310#(<= 1 ~methaneLevelCritical~0)} {15201#true} #245#return; {15248#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:06:39,915 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 76 [2022-02-20 18:06:39,917 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:06:39,950 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:06:39,951 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:06:39,960 INFO L290 TraceCheckUtils]: 0: Hoare triple {15201#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {15316#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:39,961 INFO L290 TraceCheckUtils]: 1: Hoare triple {15316#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} assume true; {15316#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:39,961 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {15316#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} {15201#true} #257#return; {15314#(or (not (= |isMethaneAlarm_#t~ret43| 0)) (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:06:39,961 INFO L290 TraceCheckUtils]: 0: Hoare triple {15201#true} havoc ~retValue_acc~9; {15201#true} is VALID [2022-02-20 18:06:39,961 INFO L272 TraceCheckUtils]: 1: Hoare triple {15201#true} call #t~ret43 := isMethaneLevelCritical(); {15201#true} is VALID [2022-02-20 18:06:39,962 INFO L290 TraceCheckUtils]: 2: Hoare triple {15201#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {15316#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:39,962 INFO L290 TraceCheckUtils]: 3: Hoare triple {15316#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} assume true; {15316#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:39,962 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {15316#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} {15201#true} #257#return; {15314#(or (not (= |isMethaneAlarm_#t~ret43| 0)) (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:06:39,963 INFO L290 TraceCheckUtils]: 5: Hoare triple {15314#(or (not (= |isMethaneAlarm_#t~ret43| 0)) (= ~methaneLevelCritical~0 0))} assume -2147483648 <= #t~ret43 && #t~ret43 <= 2147483647;~retValue_acc~9 := #t~ret43;havoc #t~ret43;#res := ~retValue_acc~9; {15315#(or (= ~methaneLevelCritical~0 0) (<= (+ |isMethaneAlarm_#res| 1) 0) (<= 1 |isMethaneAlarm_#res|))} is VALID [2022-02-20 18:06:39,963 INFO L290 TraceCheckUtils]: 6: Hoare triple {15315#(or (= ~methaneLevelCritical~0 0) (<= (+ |isMethaneAlarm_#res| 1) 0) (<= 1 |isMethaneAlarm_#res|))} assume true; {15315#(or (= ~methaneLevelCritical~0 0) (<= (+ |isMethaneAlarm_#res| 1) 0) (<= 1 |isMethaneAlarm_#res|))} is VALID [2022-02-20 18:06:39,964 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {15315#(or (= ~methaneLevelCritical~0 0) (<= (+ |isMethaneAlarm_#res| 1) 0) (<= 1 |isMethaneAlarm_#res|))} {15248#(not (= ~methaneLevelCritical~0 0))} #231#return; {15257#(not (= |timeShift_processEnvironment_#t~ret41#1| 0))} is VALID [2022-02-20 18:06:39,964 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 87 [2022-02-20 18:06:39,965 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:06:39,966 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-02-20 18:06:39,967 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:06:39,968 INFO L290 TraceCheckUtils]: 0: Hoare triple {15201#true} assume true; {15201#true} is VALID [2022-02-20 18:06:39,968 INFO L284 TraceCheckUtils]: 1: Hoare quadruple {15201#true} {15201#true} #255#return; {15201#true} is VALID [2022-02-20 18:06:39,968 INFO L290 TraceCheckUtils]: 0: Hoare triple {15297#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~6#1; {15201#true} is VALID [2022-02-20 18:06:39,968 INFO L290 TraceCheckUtils]: 1: Hoare triple {15201#true} assume !(0 == ~pumpRunning~0); {15201#true} is VALID [2022-02-20 18:06:39,968 INFO L272 TraceCheckUtils]: 2: Hoare triple {15201#true} call processEnvironment__wrappee__base(); {15201#true} is VALID [2022-02-20 18:06:39,969 INFO L290 TraceCheckUtils]: 3: Hoare triple {15201#true} assume true; {15201#true} is VALID [2022-02-20 18:06:39,969 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {15201#true} {15201#true} #255#return; {15201#true} is VALID [2022-02-20 18:06:39,969 INFO L290 TraceCheckUtils]: 5: Hoare triple {15201#true} assume true; {15201#true} is VALID [2022-02-20 18:06:39,969 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {15201#true} {15202#false} #233#return; {15202#false} is VALID [2022-02-20 18:06:39,969 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 97 [2022-02-20 18:06:39,970 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:06:39,971 INFO L290 TraceCheckUtils]: 0: Hoare triple {15201#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {15201#true} is VALID [2022-02-20 18:06:39,971 INFO L290 TraceCheckUtils]: 1: Hoare triple {15201#true} assume true; {15201#true} is VALID [2022-02-20 18:06:39,971 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {15201#true} {15202#false} #237#return; {15202#false} is VALID [2022-02-20 18:06:39,972 INFO L290 TraceCheckUtils]: 0: Hoare triple {15201#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(30, 9);call #Ultimate.allocInit(9, 10);call #Ultimate.allocInit(21, 11);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(25, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {15203#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:39,973 INFO L290 TraceCheckUtils]: 1: Hoare triple {15203#(= 1 ~systemActive~0)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret11#1, main_~retValue_acc~3#1, main_~tmp~1#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~1#1;assume { :begin_inline_select_helpers } true; {15203#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:39,973 INFO L290 TraceCheckUtils]: 2: Hoare triple {15203#(= 1 ~systemActive~0)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {15203#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:39,973 INFO L290 TraceCheckUtils]: 3: Hoare triple {15203#(= 1 ~systemActive~0)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~5#1;havoc valid_product_~retValue_acc~5#1;valid_product_~retValue_acc~5#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~5#1; {15203#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:39,974 INFO L290 TraceCheckUtils]: 4: Hoare triple {15203#(= 1 ~systemActive~0)} main_#t~ret11#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret11#1 && main_#t~ret11#1 <= 2147483647;main_~tmp~1#1 := main_#t~ret11#1;havoc main_#t~ret11#1; {15203#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:39,974 INFO L290 TraceCheckUtils]: 5: Hoare triple {15203#(= 1 ~systemActive~0)} assume 0 != main_~tmp~1#1;assume { :begin_inline_setup } true; {15203#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:39,974 INFO L290 TraceCheckUtils]: 6: Hoare triple {15203#(= 1 ~systemActive~0)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet36#1, test_#t~nondet37#1, test_#t~nondet38#1, test_#t~nondet39#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {15203#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:39,975 INFO L290 TraceCheckUtils]: 7: Hoare triple {15203#(= 1 ~systemActive~0)} assume !false; {15203#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:39,975 INFO L290 TraceCheckUtils]: 8: Hoare triple {15203#(= 1 ~systemActive~0)} assume test_~splverifierCounter~0#1 < 4; {15203#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:39,975 INFO L290 TraceCheckUtils]: 9: Hoare triple {15203#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet36#1 && test_#t~nondet36#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet36#1;havoc test_#t~nondet36#1; {15203#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:39,975 INFO L290 TraceCheckUtils]: 10: Hoare triple {15203#(= 1 ~systemActive~0)} assume 0 != test_~tmp~5#1; {15203#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:39,976 INFO L272 TraceCheckUtils]: 11: Hoare triple {15203#(= 1 ~systemActive~0)} call waterRise(); {15269#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:06:39,976 INFO L290 TraceCheckUtils]: 12: Hoare triple {15269#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {15201#true} is VALID [2022-02-20 18:06:39,976 INFO L290 TraceCheckUtils]: 13: Hoare triple {15201#true} assume true; {15201#true} is VALID [2022-02-20 18:06:39,976 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {15201#true} {15203#(= 1 ~systemActive~0)} #243#return; {15203#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:39,977 INFO L290 TraceCheckUtils]: 15: Hoare triple {15203#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet37#1 && test_#t~nondet37#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet37#1;havoc test_#t~nondet37#1; {15203#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:39,977 INFO L290 TraceCheckUtils]: 16: Hoare triple {15203#(= 1 ~systemActive~0)} assume !(0 != test_~tmp___0~1#1); {15203#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:39,977 INFO L290 TraceCheckUtils]: 17: Hoare triple {15203#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet38#1 && test_#t~nondet38#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet38#1;havoc test_#t~nondet38#1; {15203#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:39,978 INFO L290 TraceCheckUtils]: 18: Hoare triple {15203#(= 1 ~systemActive~0)} assume 0 != test_~tmp___2~0#1; {15203#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:06:39,978 INFO L272 TraceCheckUtils]: 19: Hoare triple {15203#(= 1 ~systemActive~0)} call timeShift(); {15270#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} is VALID [2022-02-20 18:06:39,978 INFO L290 TraceCheckUtils]: 20: Hoare triple {15270#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume !(0 != ~pumpRunning~0); {15201#true} is VALID [2022-02-20 18:06:39,978 INFO L290 TraceCheckUtils]: 21: Hoare triple {15201#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret41#1, processEnvironment_~tmp~7#1;havoc processEnvironment_~tmp~7#1; {15201#true} is VALID [2022-02-20 18:06:39,978 INFO L290 TraceCheckUtils]: 22: Hoare triple {15201#true} assume !(0 != ~pumpRunning~0); {15201#true} is VALID [2022-02-20 18:06:39,979 INFO L272 TraceCheckUtils]: 23: Hoare triple {15201#true} call processEnvironment__wrappee__methaneQuery(); {15297#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:06:39,979 INFO L290 TraceCheckUtils]: 24: Hoare triple {15297#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~6#1; {15201#true} is VALID [2022-02-20 18:06:39,979 INFO L290 TraceCheckUtils]: 25: Hoare triple {15201#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret52#1, isHighWaterLevel_~retValue_acc~11#1, isHighWaterLevel_~tmp~9#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~11#1;havoc isHighWaterLevel_~tmp~9#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {15201#true} is VALID [2022-02-20 18:06:39,979 INFO L290 TraceCheckUtils]: 26: Hoare triple {15201#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {15201#true} is VALID [2022-02-20 18:06:39,979 INFO L290 TraceCheckUtils]: 27: Hoare triple {15201#true} isHighWaterLevel_#t~ret52#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret52#1 && isHighWaterLevel_#t~ret52#1 <= 2147483647;isHighWaterLevel_~tmp~9#1 := isHighWaterLevel_#t~ret52#1;havoc isHighWaterLevel_#t~ret52#1; {15201#true} is VALID [2022-02-20 18:06:39,979 INFO L290 TraceCheckUtils]: 28: Hoare triple {15201#true} assume !(0 != isHighWaterLevel_~tmp~9#1);isHighWaterLevel_~tmp___0~2#1 := 1; {15201#true} is VALID [2022-02-20 18:06:39,979 INFO L290 TraceCheckUtils]: 29: Hoare triple {15201#true} isHighWaterLevel_~retValue_acc~11#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~11#1; {15201#true} is VALID [2022-02-20 18:06:39,979 INFO L290 TraceCheckUtils]: 30: Hoare triple {15201#true} #t~ret40#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret40#1 && #t~ret40#1 <= 2147483647;~tmp~6#1 := #t~ret40#1;havoc #t~ret40#1; {15201#true} is VALID [2022-02-20 18:06:39,980 INFO L290 TraceCheckUtils]: 31: Hoare triple {15201#true} assume 0 != ~tmp~6#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret42#1, activatePump_~tmp~8#1;havoc activatePump_~tmp~8#1; {15201#true} is VALID [2022-02-20 18:06:39,980 INFO L272 TraceCheckUtils]: 32: Hoare triple {15201#true} call activatePump_#t~ret42#1 := isMethaneAlarm(); {15201#true} is VALID [2022-02-20 18:06:39,980 INFO L290 TraceCheckUtils]: 33: Hoare triple {15201#true} havoc ~retValue_acc~9; {15201#true} is VALID [2022-02-20 18:06:39,980 INFO L272 TraceCheckUtils]: 34: Hoare triple {15201#true} call #t~ret43 := isMethaneLevelCritical(); {15201#true} is VALID [2022-02-20 18:06:39,980 INFO L290 TraceCheckUtils]: 35: Hoare triple {15201#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {15201#true} is VALID [2022-02-20 18:06:39,980 INFO L290 TraceCheckUtils]: 36: Hoare triple {15201#true} assume true; {15201#true} is VALID [2022-02-20 18:06:39,980 INFO L284 TraceCheckUtils]: 37: Hoare quadruple {15201#true} {15201#true} #257#return; {15201#true} is VALID [2022-02-20 18:06:39,980 INFO L290 TraceCheckUtils]: 38: Hoare triple {15201#true} assume -2147483648 <= #t~ret43 && #t~ret43 <= 2147483647;~retValue_acc~9 := #t~ret43;havoc #t~ret43;#res := ~retValue_acc~9; {15201#true} is VALID [2022-02-20 18:06:39,980 INFO L290 TraceCheckUtils]: 39: Hoare triple {15201#true} assume true; {15201#true} is VALID [2022-02-20 18:06:39,981 INFO L284 TraceCheckUtils]: 40: Hoare quadruple {15201#true} {15201#true} #251#return; {15201#true} is VALID [2022-02-20 18:06:39,981 INFO L290 TraceCheckUtils]: 41: Hoare triple {15201#true} assume -2147483648 <= activatePump_#t~ret42#1 && activatePump_#t~ret42#1 <= 2147483647;activatePump_~tmp~8#1 := activatePump_#t~ret42#1;havoc activatePump_#t~ret42#1; {15201#true} is VALID [2022-02-20 18:06:39,981 INFO L290 TraceCheckUtils]: 42: Hoare triple {15201#true} assume !(0 != activatePump_~tmp~8#1);assume { :begin_inline_activatePump__wrappee__highWaterSensor } true;~pumpRunning~0 := 1; {15201#true} is VALID [2022-02-20 18:06:39,981 INFO L290 TraceCheckUtils]: 43: Hoare triple {15201#true} assume { :end_inline_activatePump__wrappee__highWaterSensor } true; {15201#true} is VALID [2022-02-20 18:06:39,981 INFO L290 TraceCheckUtils]: 44: Hoare triple {15201#true} assume { :end_inline_activatePump } true; {15201#true} is VALID [2022-02-20 18:06:39,981 INFO L290 TraceCheckUtils]: 45: Hoare triple {15201#true} assume true; {15201#true} is VALID [2022-02-20 18:06:39,981 INFO L284 TraceCheckUtils]: 46: Hoare quadruple {15201#true} {15201#true} #235#return; {15201#true} is VALID [2022-02-20 18:06:39,981 INFO L290 TraceCheckUtils]: 47: Hoare triple {15201#true} assume { :end_inline_processEnvironment } true; {15201#true} is VALID [2022-02-20 18:06:39,981 INFO L290 TraceCheckUtils]: 48: Hoare triple {15201#true} assume { :begin_inline___utac_acc__Specification1_spec__1 } true;havoc __utac_acc__Specification1_spec__1_#t~ret9#1, __utac_acc__Specification1_spec__1_#t~ret10#1, __utac_acc__Specification1_spec__1_~tmp~0#1, __utac_acc__Specification1_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__1_~tmp~0#1;havoc __utac_acc__Specification1_spec__1_~tmp___0~0#1; {15201#true} is VALID [2022-02-20 18:06:39,981 INFO L272 TraceCheckUtils]: 49: Hoare triple {15201#true} call __utac_acc__Specification1_spec__1_#t~ret9#1 := isMethaneLevelCritical(); {15201#true} is VALID [2022-02-20 18:06:39,982 INFO L290 TraceCheckUtils]: 50: Hoare triple {15201#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {15201#true} is VALID [2022-02-20 18:06:39,982 INFO L290 TraceCheckUtils]: 51: Hoare triple {15201#true} assume true; {15201#true} is VALID [2022-02-20 18:06:39,982 INFO L284 TraceCheckUtils]: 52: Hoare quadruple {15201#true} {15201#true} #237#return; {15201#true} is VALID [2022-02-20 18:06:39,982 INFO L290 TraceCheckUtils]: 53: Hoare triple {15201#true} assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret9#1 && __utac_acc__Specification1_spec__1_#t~ret9#1 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp~0#1 := __utac_acc__Specification1_spec__1_#t~ret9#1;havoc __utac_acc__Specification1_spec__1_#t~ret9#1; {15201#true} is VALID [2022-02-20 18:06:39,982 INFO L290 TraceCheckUtils]: 54: Hoare triple {15201#true} assume !(0 != __utac_acc__Specification1_spec__1_~tmp~0#1); {15201#true} is VALID [2022-02-20 18:06:39,982 INFO L290 TraceCheckUtils]: 55: Hoare triple {15201#true} assume { :end_inline___utac_acc__Specification1_spec__1 } true; {15201#true} is VALID [2022-02-20 18:06:39,982 INFO L290 TraceCheckUtils]: 56: Hoare triple {15201#true} assume true; {15201#true} is VALID [2022-02-20 18:06:39,982 INFO L284 TraceCheckUtils]: 57: Hoare quadruple {15201#true} {15203#(= 1 ~systemActive~0)} #247#return; {15201#true} is VALID [2022-02-20 18:06:39,982 INFO L290 TraceCheckUtils]: 58: Hoare triple {15201#true} assume !false; {15201#true} is VALID [2022-02-20 18:06:39,983 INFO L290 TraceCheckUtils]: 59: Hoare triple {15201#true} assume test_~splverifierCounter~0#1 < 4; {15201#true} is VALID [2022-02-20 18:06:39,983 INFO L290 TraceCheckUtils]: 60: Hoare triple {15201#true} assume -2147483648 <= test_#t~nondet36#1 && test_#t~nondet36#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet36#1;havoc test_#t~nondet36#1; {15201#true} is VALID [2022-02-20 18:06:39,983 INFO L290 TraceCheckUtils]: 61: Hoare triple {15201#true} assume !(0 != test_~tmp~5#1); {15201#true} is VALID [2022-02-20 18:06:39,983 INFO L290 TraceCheckUtils]: 62: Hoare triple {15201#true} assume -2147483648 <= test_#t~nondet37#1 && test_#t~nondet37#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet37#1;havoc test_#t~nondet37#1; {15201#true} is VALID [2022-02-20 18:06:39,983 INFO L290 TraceCheckUtils]: 63: Hoare triple {15201#true} assume 0 != test_~tmp___0~1#1; {15201#true} is VALID [2022-02-20 18:06:39,983 INFO L272 TraceCheckUtils]: 64: Hoare triple {15201#true} call changeMethaneLevel(); {15309#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:39,984 INFO L290 TraceCheckUtils]: 65: Hoare triple {15309#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {15310#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:39,984 INFO L290 TraceCheckUtils]: 66: Hoare triple {15310#(<= 1 ~methaneLevelCritical~0)} assume true; {15310#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:39,984 INFO L284 TraceCheckUtils]: 67: Hoare quadruple {15310#(<= 1 ~methaneLevelCritical~0)} {15201#true} #245#return; {15248#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:06:39,984 INFO L290 TraceCheckUtils]: 68: Hoare triple {15248#(not (= ~methaneLevelCritical~0 0))} assume -2147483648 <= test_#t~nondet38#1 && test_#t~nondet38#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet38#1;havoc test_#t~nondet38#1; {15248#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:06:39,985 INFO L290 TraceCheckUtils]: 69: Hoare triple {15248#(not (= ~methaneLevelCritical~0 0))} assume 0 != test_~tmp___2~0#1; {15248#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:06:39,985 INFO L272 TraceCheckUtils]: 70: Hoare triple {15248#(not (= ~methaneLevelCritical~0 0))} call timeShift(); {15248#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:06:39,985 INFO L290 TraceCheckUtils]: 71: Hoare triple {15248#(not (= ~methaneLevelCritical~0 0))} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {15248#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:06:39,986 INFO L290 TraceCheckUtils]: 72: Hoare triple {15248#(not (= ~methaneLevelCritical~0 0))} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {15248#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:06:39,986 INFO L290 TraceCheckUtils]: 73: Hoare triple {15248#(not (= ~methaneLevelCritical~0 0))} assume { :end_inline_lowerWaterLevel } true; {15248#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:06:39,986 INFO L290 TraceCheckUtils]: 74: Hoare triple {15248#(not (= ~methaneLevelCritical~0 0))} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret41#1, processEnvironment_~tmp~7#1;havoc processEnvironment_~tmp~7#1; {15248#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:06:39,986 INFO L290 TraceCheckUtils]: 75: Hoare triple {15248#(not (= ~methaneLevelCritical~0 0))} assume 0 != ~pumpRunning~0; {15248#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:06:39,987 INFO L272 TraceCheckUtils]: 76: Hoare triple {15248#(not (= ~methaneLevelCritical~0 0))} call processEnvironment_#t~ret41#1 := isMethaneAlarm(); {15201#true} is VALID [2022-02-20 18:06:39,987 INFO L290 TraceCheckUtils]: 77: Hoare triple {15201#true} havoc ~retValue_acc~9; {15201#true} is VALID [2022-02-20 18:06:39,987 INFO L272 TraceCheckUtils]: 78: Hoare triple {15201#true} call #t~ret43 := isMethaneLevelCritical(); {15201#true} is VALID [2022-02-20 18:06:39,987 INFO L290 TraceCheckUtils]: 79: Hoare triple {15201#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {15316#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:39,987 INFO L290 TraceCheckUtils]: 80: Hoare triple {15316#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} assume true; {15316#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:39,988 INFO L284 TraceCheckUtils]: 81: Hoare quadruple {15316#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} {15201#true} #257#return; {15314#(or (not (= |isMethaneAlarm_#t~ret43| 0)) (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:06:39,988 INFO L290 TraceCheckUtils]: 82: Hoare triple {15314#(or (not (= |isMethaneAlarm_#t~ret43| 0)) (= ~methaneLevelCritical~0 0))} assume -2147483648 <= #t~ret43 && #t~ret43 <= 2147483647;~retValue_acc~9 := #t~ret43;havoc #t~ret43;#res := ~retValue_acc~9; {15315#(or (= ~methaneLevelCritical~0 0) (<= (+ |isMethaneAlarm_#res| 1) 0) (<= 1 |isMethaneAlarm_#res|))} is VALID [2022-02-20 18:06:39,989 INFO L290 TraceCheckUtils]: 83: Hoare triple {15315#(or (= ~methaneLevelCritical~0 0) (<= (+ |isMethaneAlarm_#res| 1) 0) (<= 1 |isMethaneAlarm_#res|))} assume true; {15315#(or (= ~methaneLevelCritical~0 0) (<= (+ |isMethaneAlarm_#res| 1) 0) (<= 1 |isMethaneAlarm_#res|))} is VALID [2022-02-20 18:06:39,989 INFO L284 TraceCheckUtils]: 84: Hoare quadruple {15315#(or (= ~methaneLevelCritical~0 0) (<= (+ |isMethaneAlarm_#res| 1) 0) (<= 1 |isMethaneAlarm_#res|))} {15248#(not (= ~methaneLevelCritical~0 0))} #231#return; {15257#(not (= |timeShift_processEnvironment_#t~ret41#1| 0))} is VALID [2022-02-20 18:06:39,989 INFO L290 TraceCheckUtils]: 85: Hoare triple {15257#(not (= |timeShift_processEnvironment_#t~ret41#1| 0))} assume -2147483648 <= processEnvironment_#t~ret41#1 && processEnvironment_#t~ret41#1 <= 2147483647;processEnvironment_~tmp~7#1 := processEnvironment_#t~ret41#1;havoc processEnvironment_#t~ret41#1; {15258#(not (= |timeShift_processEnvironment_~tmp~7#1| 0))} is VALID [2022-02-20 18:06:39,990 INFO L290 TraceCheckUtils]: 86: Hoare triple {15258#(not (= |timeShift_processEnvironment_~tmp~7#1| 0))} assume !(0 != processEnvironment_~tmp~7#1); {15202#false} is VALID [2022-02-20 18:06:39,990 INFO L272 TraceCheckUtils]: 87: Hoare triple {15202#false} call processEnvironment__wrappee__methaneQuery(); {15297#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:06:39,990 INFO L290 TraceCheckUtils]: 88: Hoare triple {15297#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~6#1; {15201#true} is VALID [2022-02-20 18:06:39,990 INFO L290 TraceCheckUtils]: 89: Hoare triple {15201#true} assume !(0 == ~pumpRunning~0); {15201#true} is VALID [2022-02-20 18:06:39,990 INFO L272 TraceCheckUtils]: 90: Hoare triple {15201#true} call processEnvironment__wrappee__base(); {15201#true} is VALID [2022-02-20 18:06:39,990 INFO L290 TraceCheckUtils]: 91: Hoare triple {15201#true} assume true; {15201#true} is VALID [2022-02-20 18:06:39,990 INFO L284 TraceCheckUtils]: 92: Hoare quadruple {15201#true} {15201#true} #255#return; {15201#true} is VALID [2022-02-20 18:06:39,990 INFO L290 TraceCheckUtils]: 93: Hoare triple {15201#true} assume true; {15201#true} is VALID [2022-02-20 18:06:39,991 INFO L284 TraceCheckUtils]: 94: Hoare quadruple {15201#true} {15202#false} #233#return; {15202#false} is VALID [2022-02-20 18:06:39,991 INFO L290 TraceCheckUtils]: 95: Hoare triple {15202#false} assume { :end_inline_processEnvironment } true; {15202#false} is VALID [2022-02-20 18:06:39,991 INFO L290 TraceCheckUtils]: 96: Hoare triple {15202#false} assume { :begin_inline___utac_acc__Specification1_spec__1 } true;havoc __utac_acc__Specification1_spec__1_#t~ret9#1, __utac_acc__Specification1_spec__1_#t~ret10#1, __utac_acc__Specification1_spec__1_~tmp~0#1, __utac_acc__Specification1_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__1_~tmp~0#1;havoc __utac_acc__Specification1_spec__1_~tmp___0~0#1; {15202#false} is VALID [2022-02-20 18:06:39,991 INFO L272 TraceCheckUtils]: 97: Hoare triple {15202#false} call __utac_acc__Specification1_spec__1_#t~ret9#1 := isMethaneLevelCritical(); {15201#true} is VALID [2022-02-20 18:06:39,991 INFO L290 TraceCheckUtils]: 98: Hoare triple {15201#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {15201#true} is VALID [2022-02-20 18:06:39,991 INFO L290 TraceCheckUtils]: 99: Hoare triple {15201#true} assume true; {15201#true} is VALID [2022-02-20 18:06:39,991 INFO L284 TraceCheckUtils]: 100: Hoare quadruple {15201#true} {15202#false} #237#return; {15202#false} is VALID [2022-02-20 18:06:39,991 INFO L290 TraceCheckUtils]: 101: Hoare triple {15202#false} assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret9#1 && __utac_acc__Specification1_spec__1_#t~ret9#1 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp~0#1 := __utac_acc__Specification1_spec__1_#t~ret9#1;havoc __utac_acc__Specification1_spec__1_#t~ret9#1; {15202#false} is VALID [2022-02-20 18:06:39,991 INFO L290 TraceCheckUtils]: 102: Hoare triple {15202#false} assume 0 != __utac_acc__Specification1_spec__1_~tmp~0#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~10#1;havoc isPumpRunning_~retValue_acc~10#1;isPumpRunning_~retValue_acc~10#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~10#1; {15202#false} is VALID [2022-02-20 18:06:39,992 INFO L290 TraceCheckUtils]: 103: Hoare triple {15202#false} __utac_acc__Specification1_spec__1_#t~ret10#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret10#1 && __utac_acc__Specification1_spec__1_#t~ret10#1 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp___0~0#1 := __utac_acc__Specification1_spec__1_#t~ret10#1;havoc __utac_acc__Specification1_spec__1_#t~ret10#1; {15202#false} is VALID [2022-02-20 18:06:39,992 INFO L290 TraceCheckUtils]: 104: Hoare triple {15202#false} assume 0 != __utac_acc__Specification1_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {15202#false} is VALID [2022-02-20 18:06:39,992 INFO L290 TraceCheckUtils]: 105: Hoare triple {15202#false} assume !false; {15202#false} is VALID [2022-02-20 18:06:39,992 INFO L134 CoverageAnalysis]: Checked inductivity of 44 backedges. 14 proven. 12 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2022-02-20 18:06:39,992 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:06:39,992 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1073783300] [2022-02-20 18:06:39,992 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1073783300] provided 0 perfect and 1 imperfect interpolant sequences [2022-02-20 18:06:39,993 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2120182716] [2022-02-20 18:06:39,993 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:06:39,993 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-02-20 18:06:39,993 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-20 18:06:39,994 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-02-20 18:06:39,995 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-02-20 18:06:40,075 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:06:40,078 INFO L263 TraceCheckSpWp]: Trace formula consists of 481 conjuncts, 9 conjunts are in the unsatisfiable core [2022-02-20 18:06:40,096 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:06:40,098 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 18:06:40,470 INFO L290 TraceCheckUtils]: 0: Hoare triple {15201#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(30, 9);call #Ultimate.allocInit(9, 10);call #Ultimate.allocInit(21, 11);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(25, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {15201#true} is VALID [2022-02-20 18:06:40,471 INFO L290 TraceCheckUtils]: 1: Hoare triple {15201#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret11#1, main_~retValue_acc~3#1, main_~tmp~1#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~1#1;assume { :begin_inline_select_helpers } true; {15201#true} is VALID [2022-02-20 18:06:40,471 INFO L290 TraceCheckUtils]: 2: Hoare triple {15201#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {15201#true} is VALID [2022-02-20 18:06:40,471 INFO L290 TraceCheckUtils]: 3: Hoare triple {15201#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~5#1;havoc valid_product_~retValue_acc~5#1;valid_product_~retValue_acc~5#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~5#1; {15201#true} is VALID [2022-02-20 18:06:40,471 INFO L290 TraceCheckUtils]: 4: Hoare triple {15201#true} main_#t~ret11#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret11#1 && main_#t~ret11#1 <= 2147483647;main_~tmp~1#1 := main_#t~ret11#1;havoc main_#t~ret11#1; {15201#true} is VALID [2022-02-20 18:06:40,471 INFO L290 TraceCheckUtils]: 5: Hoare triple {15201#true} assume 0 != main_~tmp~1#1;assume { :begin_inline_setup } true; {15201#true} is VALID [2022-02-20 18:06:40,471 INFO L290 TraceCheckUtils]: 6: Hoare triple {15201#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet36#1, test_#t~nondet37#1, test_#t~nondet38#1, test_#t~nondet39#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {15201#true} is VALID [2022-02-20 18:06:40,471 INFO L290 TraceCheckUtils]: 7: Hoare triple {15201#true} assume !false; {15201#true} is VALID [2022-02-20 18:06:40,471 INFO L290 TraceCheckUtils]: 8: Hoare triple {15201#true} assume test_~splverifierCounter~0#1 < 4; {15201#true} is VALID [2022-02-20 18:06:40,472 INFO L290 TraceCheckUtils]: 9: Hoare triple {15201#true} assume -2147483648 <= test_#t~nondet36#1 && test_#t~nondet36#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet36#1;havoc test_#t~nondet36#1; {15201#true} is VALID [2022-02-20 18:06:40,472 INFO L290 TraceCheckUtils]: 10: Hoare triple {15201#true} assume 0 != test_~tmp~5#1; {15201#true} is VALID [2022-02-20 18:06:40,472 INFO L272 TraceCheckUtils]: 11: Hoare triple {15201#true} call waterRise(); {15201#true} is VALID [2022-02-20 18:06:40,472 INFO L290 TraceCheckUtils]: 12: Hoare triple {15201#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {15201#true} is VALID [2022-02-20 18:06:40,472 INFO L290 TraceCheckUtils]: 13: Hoare triple {15201#true} assume true; {15201#true} is VALID [2022-02-20 18:06:40,472 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {15201#true} {15201#true} #243#return; {15201#true} is VALID [2022-02-20 18:06:40,472 INFO L290 TraceCheckUtils]: 15: Hoare triple {15201#true} assume -2147483648 <= test_#t~nondet37#1 && test_#t~nondet37#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet37#1;havoc test_#t~nondet37#1; {15201#true} is VALID [2022-02-20 18:06:40,472 INFO L290 TraceCheckUtils]: 16: Hoare triple {15201#true} assume !(0 != test_~tmp___0~1#1); {15201#true} is VALID [2022-02-20 18:06:40,472 INFO L290 TraceCheckUtils]: 17: Hoare triple {15201#true} assume -2147483648 <= test_#t~nondet38#1 && test_#t~nondet38#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet38#1;havoc test_#t~nondet38#1; {15201#true} is VALID [2022-02-20 18:06:40,473 INFO L290 TraceCheckUtils]: 18: Hoare triple {15201#true} assume 0 != test_~tmp___2~0#1; {15201#true} is VALID [2022-02-20 18:06:40,473 INFO L272 TraceCheckUtils]: 19: Hoare triple {15201#true} call timeShift(); {15201#true} is VALID [2022-02-20 18:06:40,473 INFO L290 TraceCheckUtils]: 20: Hoare triple {15201#true} assume !(0 != ~pumpRunning~0); {15201#true} is VALID [2022-02-20 18:06:40,473 INFO L290 TraceCheckUtils]: 21: Hoare triple {15201#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret41#1, processEnvironment_~tmp~7#1;havoc processEnvironment_~tmp~7#1; {15201#true} is VALID [2022-02-20 18:06:40,473 INFO L290 TraceCheckUtils]: 22: Hoare triple {15201#true} assume !(0 != ~pumpRunning~0); {15201#true} is VALID [2022-02-20 18:06:40,473 INFO L272 TraceCheckUtils]: 23: Hoare triple {15201#true} call processEnvironment__wrappee__methaneQuery(); {15201#true} is VALID [2022-02-20 18:06:40,473 INFO L290 TraceCheckUtils]: 24: Hoare triple {15201#true} havoc ~tmp~6#1; {15201#true} is VALID [2022-02-20 18:06:40,473 INFO L290 TraceCheckUtils]: 25: Hoare triple {15201#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret52#1, isHighWaterLevel_~retValue_acc~11#1, isHighWaterLevel_~tmp~9#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~11#1;havoc isHighWaterLevel_~tmp~9#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {15201#true} is VALID [2022-02-20 18:06:40,474 INFO L290 TraceCheckUtils]: 26: Hoare triple {15201#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {15201#true} is VALID [2022-02-20 18:06:40,474 INFO L290 TraceCheckUtils]: 27: Hoare triple {15201#true} isHighWaterLevel_#t~ret52#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret52#1 && isHighWaterLevel_#t~ret52#1 <= 2147483647;isHighWaterLevel_~tmp~9#1 := isHighWaterLevel_#t~ret52#1;havoc isHighWaterLevel_#t~ret52#1; {15201#true} is VALID [2022-02-20 18:06:40,474 INFO L290 TraceCheckUtils]: 28: Hoare triple {15201#true} assume !(0 != isHighWaterLevel_~tmp~9#1);isHighWaterLevel_~tmp___0~2#1 := 1; {15201#true} is VALID [2022-02-20 18:06:40,474 INFO L290 TraceCheckUtils]: 29: Hoare triple {15201#true} isHighWaterLevel_~retValue_acc~11#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~11#1; {15201#true} is VALID [2022-02-20 18:06:40,474 INFO L290 TraceCheckUtils]: 30: Hoare triple {15201#true} #t~ret40#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret40#1 && #t~ret40#1 <= 2147483647;~tmp~6#1 := #t~ret40#1;havoc #t~ret40#1; {15201#true} is VALID [2022-02-20 18:06:40,474 INFO L290 TraceCheckUtils]: 31: Hoare triple {15201#true} assume 0 != ~tmp~6#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret42#1, activatePump_~tmp~8#1;havoc activatePump_~tmp~8#1; {15201#true} is VALID [2022-02-20 18:06:40,474 INFO L272 TraceCheckUtils]: 32: Hoare triple {15201#true} call activatePump_#t~ret42#1 := isMethaneAlarm(); {15201#true} is VALID [2022-02-20 18:06:40,474 INFO L290 TraceCheckUtils]: 33: Hoare triple {15201#true} havoc ~retValue_acc~9; {15201#true} is VALID [2022-02-20 18:06:40,475 INFO L272 TraceCheckUtils]: 34: Hoare triple {15201#true} call #t~ret43 := isMethaneLevelCritical(); {15201#true} is VALID [2022-02-20 18:06:40,475 INFO L290 TraceCheckUtils]: 35: Hoare triple {15201#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {15201#true} is VALID [2022-02-20 18:06:40,475 INFO L290 TraceCheckUtils]: 36: Hoare triple {15201#true} assume true; {15201#true} is VALID [2022-02-20 18:06:40,475 INFO L284 TraceCheckUtils]: 37: Hoare quadruple {15201#true} {15201#true} #257#return; {15201#true} is VALID [2022-02-20 18:06:40,475 INFO L290 TraceCheckUtils]: 38: Hoare triple {15201#true} assume -2147483648 <= #t~ret43 && #t~ret43 <= 2147483647;~retValue_acc~9 := #t~ret43;havoc #t~ret43;#res := ~retValue_acc~9; {15201#true} is VALID [2022-02-20 18:06:40,475 INFO L290 TraceCheckUtils]: 39: Hoare triple {15201#true} assume true; {15201#true} is VALID [2022-02-20 18:06:40,475 INFO L284 TraceCheckUtils]: 40: Hoare quadruple {15201#true} {15201#true} #251#return; {15201#true} is VALID [2022-02-20 18:06:40,475 INFO L290 TraceCheckUtils]: 41: Hoare triple {15201#true} assume -2147483648 <= activatePump_#t~ret42#1 && activatePump_#t~ret42#1 <= 2147483647;activatePump_~tmp~8#1 := activatePump_#t~ret42#1;havoc activatePump_#t~ret42#1; {15201#true} is VALID [2022-02-20 18:06:40,475 INFO L290 TraceCheckUtils]: 42: Hoare triple {15201#true} assume !(0 != activatePump_~tmp~8#1);assume { :begin_inline_activatePump__wrappee__highWaterSensor } true;~pumpRunning~0 := 1; {15201#true} is VALID [2022-02-20 18:06:40,476 INFO L290 TraceCheckUtils]: 43: Hoare triple {15201#true} assume { :end_inline_activatePump__wrappee__highWaterSensor } true; {15201#true} is VALID [2022-02-20 18:06:40,476 INFO L290 TraceCheckUtils]: 44: Hoare triple {15201#true} assume { :end_inline_activatePump } true; {15201#true} is VALID [2022-02-20 18:06:40,476 INFO L290 TraceCheckUtils]: 45: Hoare triple {15201#true} assume true; {15201#true} is VALID [2022-02-20 18:06:40,476 INFO L284 TraceCheckUtils]: 46: Hoare quadruple {15201#true} {15201#true} #235#return; {15201#true} is VALID [2022-02-20 18:06:40,476 INFO L290 TraceCheckUtils]: 47: Hoare triple {15201#true} assume { :end_inline_processEnvironment } true; {15201#true} is VALID [2022-02-20 18:06:40,476 INFO L290 TraceCheckUtils]: 48: Hoare triple {15201#true} assume { :begin_inline___utac_acc__Specification1_spec__1 } true;havoc __utac_acc__Specification1_spec__1_#t~ret9#1, __utac_acc__Specification1_spec__1_#t~ret10#1, __utac_acc__Specification1_spec__1_~tmp~0#1, __utac_acc__Specification1_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__1_~tmp~0#1;havoc __utac_acc__Specification1_spec__1_~tmp___0~0#1; {15201#true} is VALID [2022-02-20 18:06:40,476 INFO L272 TraceCheckUtils]: 49: Hoare triple {15201#true} call __utac_acc__Specification1_spec__1_#t~ret9#1 := isMethaneLevelCritical(); {15201#true} is VALID [2022-02-20 18:06:40,476 INFO L290 TraceCheckUtils]: 50: Hoare triple {15201#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {15201#true} is VALID [2022-02-20 18:06:40,476 INFO L290 TraceCheckUtils]: 51: Hoare triple {15201#true} assume true; {15201#true} is VALID [2022-02-20 18:06:40,477 INFO L284 TraceCheckUtils]: 52: Hoare quadruple {15201#true} {15201#true} #237#return; {15201#true} is VALID [2022-02-20 18:06:40,477 INFO L290 TraceCheckUtils]: 53: Hoare triple {15201#true} assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret9#1 && __utac_acc__Specification1_spec__1_#t~ret9#1 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp~0#1 := __utac_acc__Specification1_spec__1_#t~ret9#1;havoc __utac_acc__Specification1_spec__1_#t~ret9#1; {15201#true} is VALID [2022-02-20 18:06:40,477 INFO L290 TraceCheckUtils]: 54: Hoare triple {15201#true} assume !(0 != __utac_acc__Specification1_spec__1_~tmp~0#1); {15201#true} is VALID [2022-02-20 18:06:40,477 INFO L290 TraceCheckUtils]: 55: Hoare triple {15201#true} assume { :end_inline___utac_acc__Specification1_spec__1 } true; {15201#true} is VALID [2022-02-20 18:06:40,477 INFO L290 TraceCheckUtils]: 56: Hoare triple {15201#true} assume true; {15201#true} is VALID [2022-02-20 18:06:40,477 INFO L284 TraceCheckUtils]: 57: Hoare quadruple {15201#true} {15201#true} #247#return; {15201#true} is VALID [2022-02-20 18:06:40,477 INFO L290 TraceCheckUtils]: 58: Hoare triple {15201#true} assume !false; {15201#true} is VALID [2022-02-20 18:06:40,477 INFO L290 TraceCheckUtils]: 59: Hoare triple {15201#true} assume test_~splverifierCounter~0#1 < 4; {15201#true} is VALID [2022-02-20 18:06:40,477 INFO L290 TraceCheckUtils]: 60: Hoare triple {15201#true} assume -2147483648 <= test_#t~nondet36#1 && test_#t~nondet36#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet36#1;havoc test_#t~nondet36#1; {15201#true} is VALID [2022-02-20 18:06:40,477 INFO L290 TraceCheckUtils]: 61: Hoare triple {15201#true} assume !(0 != test_~tmp~5#1); {15201#true} is VALID [2022-02-20 18:06:40,478 INFO L290 TraceCheckUtils]: 62: Hoare triple {15201#true} assume -2147483648 <= test_#t~nondet37#1 && test_#t~nondet37#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet37#1;havoc test_#t~nondet37#1; {15201#true} is VALID [2022-02-20 18:06:40,478 INFO L290 TraceCheckUtils]: 63: Hoare triple {15201#true} assume 0 != test_~tmp___0~1#1; {15201#true} is VALID [2022-02-20 18:06:40,478 INFO L272 TraceCheckUtils]: 64: Hoare triple {15201#true} call changeMethaneLevel(); {15201#true} is VALID [2022-02-20 18:06:40,478 INFO L290 TraceCheckUtils]: 65: Hoare triple {15201#true} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {15310#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:40,478 INFO L290 TraceCheckUtils]: 66: Hoare triple {15310#(<= 1 ~methaneLevelCritical~0)} assume true; {15310#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:40,479 INFO L284 TraceCheckUtils]: 67: Hoare quadruple {15310#(<= 1 ~methaneLevelCritical~0)} {15201#true} #245#return; {15310#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:40,479 INFO L290 TraceCheckUtils]: 68: Hoare triple {15310#(<= 1 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet38#1 && test_#t~nondet38#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet38#1;havoc test_#t~nondet38#1; {15310#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:40,479 INFO L290 TraceCheckUtils]: 69: Hoare triple {15310#(<= 1 ~methaneLevelCritical~0)} assume 0 != test_~tmp___2~0#1; {15310#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:40,480 INFO L272 TraceCheckUtils]: 70: Hoare triple {15310#(<= 1 ~methaneLevelCritical~0)} call timeShift(); {15310#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:40,480 INFO L290 TraceCheckUtils]: 71: Hoare triple {15310#(<= 1 ~methaneLevelCritical~0)} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {15310#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:40,480 INFO L290 TraceCheckUtils]: 72: Hoare triple {15310#(<= 1 ~methaneLevelCritical~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {15310#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:40,480 INFO L290 TraceCheckUtils]: 73: Hoare triple {15310#(<= 1 ~methaneLevelCritical~0)} assume { :end_inline_lowerWaterLevel } true; {15310#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:40,481 INFO L290 TraceCheckUtils]: 74: Hoare triple {15310#(<= 1 ~methaneLevelCritical~0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret41#1, processEnvironment_~tmp~7#1;havoc processEnvironment_~tmp~7#1; {15310#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:40,481 INFO L290 TraceCheckUtils]: 75: Hoare triple {15310#(<= 1 ~methaneLevelCritical~0)} assume 0 != ~pumpRunning~0; {15310#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:40,481 INFO L272 TraceCheckUtils]: 76: Hoare triple {15310#(<= 1 ~methaneLevelCritical~0)} call processEnvironment_#t~ret41#1 := isMethaneAlarm(); {15310#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:40,482 INFO L290 TraceCheckUtils]: 77: Hoare triple {15310#(<= 1 ~methaneLevelCritical~0)} havoc ~retValue_acc~9; {15310#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:40,482 INFO L272 TraceCheckUtils]: 78: Hoare triple {15310#(<= 1 ~methaneLevelCritical~0)} call #t~ret43 := isMethaneLevelCritical(); {15310#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:06:40,482 INFO L290 TraceCheckUtils]: 79: Hoare triple {15310#(<= 1 ~methaneLevelCritical~0)} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {15559#(and (<= ~methaneLevelCritical~0 |isMethaneLevelCritical_#res|) (<= 1 ~methaneLevelCritical~0))} is VALID [2022-02-20 18:06:40,483 INFO L290 TraceCheckUtils]: 80: Hoare triple {15559#(and (<= ~methaneLevelCritical~0 |isMethaneLevelCritical_#res|) (<= 1 ~methaneLevelCritical~0))} assume true; {15559#(and (<= ~methaneLevelCritical~0 |isMethaneLevelCritical_#res|) (<= 1 ~methaneLevelCritical~0))} is VALID [2022-02-20 18:06:40,483 INFO L284 TraceCheckUtils]: 81: Hoare quadruple {15559#(and (<= ~methaneLevelCritical~0 |isMethaneLevelCritical_#res|) (<= 1 ~methaneLevelCritical~0))} {15310#(<= 1 ~methaneLevelCritical~0)} #257#return; {15566#(and (<= 1 ~methaneLevelCritical~0) (<= ~methaneLevelCritical~0 |isMethaneAlarm_#t~ret43|))} is VALID [2022-02-20 18:06:40,483 INFO L290 TraceCheckUtils]: 82: Hoare triple {15566#(and (<= 1 ~methaneLevelCritical~0) (<= ~methaneLevelCritical~0 |isMethaneAlarm_#t~ret43|))} assume -2147483648 <= #t~ret43 && #t~ret43 <= 2147483647;~retValue_acc~9 := #t~ret43;havoc #t~ret43;#res := ~retValue_acc~9; {15570#(and (<= 1 ~methaneLevelCritical~0) (<= ~methaneLevelCritical~0 |isMethaneAlarm_#res|))} is VALID [2022-02-20 18:06:40,484 INFO L290 TraceCheckUtils]: 83: Hoare triple {15570#(and (<= 1 ~methaneLevelCritical~0) (<= ~methaneLevelCritical~0 |isMethaneAlarm_#res|))} assume true; {15570#(and (<= 1 ~methaneLevelCritical~0) (<= ~methaneLevelCritical~0 |isMethaneAlarm_#res|))} is VALID [2022-02-20 18:06:40,484 INFO L284 TraceCheckUtils]: 84: Hoare quadruple {15570#(and (<= 1 ~methaneLevelCritical~0) (<= ~methaneLevelCritical~0 |isMethaneAlarm_#res|))} {15310#(<= 1 ~methaneLevelCritical~0)} #231#return; {15577#(<= 1 |timeShift_processEnvironment_#t~ret41#1|)} is VALID [2022-02-20 18:06:40,485 INFO L290 TraceCheckUtils]: 85: Hoare triple {15577#(<= 1 |timeShift_processEnvironment_#t~ret41#1|)} assume -2147483648 <= processEnvironment_#t~ret41#1 && processEnvironment_#t~ret41#1 <= 2147483647;processEnvironment_~tmp~7#1 := processEnvironment_#t~ret41#1;havoc processEnvironment_#t~ret41#1; {15581#(<= 1 |timeShift_processEnvironment_~tmp~7#1|)} is VALID [2022-02-20 18:06:40,485 INFO L290 TraceCheckUtils]: 86: Hoare triple {15581#(<= 1 |timeShift_processEnvironment_~tmp~7#1|)} assume !(0 != processEnvironment_~tmp~7#1); {15202#false} is VALID [2022-02-20 18:06:40,485 INFO L272 TraceCheckUtils]: 87: Hoare triple {15202#false} call processEnvironment__wrappee__methaneQuery(); {15202#false} is VALID [2022-02-20 18:06:40,485 INFO L290 TraceCheckUtils]: 88: Hoare triple {15202#false} havoc ~tmp~6#1; {15202#false} is VALID [2022-02-20 18:06:40,485 INFO L290 TraceCheckUtils]: 89: Hoare triple {15202#false} assume !(0 == ~pumpRunning~0); {15202#false} is VALID [2022-02-20 18:06:40,485 INFO L272 TraceCheckUtils]: 90: Hoare triple {15202#false} call processEnvironment__wrappee__base(); {15202#false} is VALID [2022-02-20 18:06:40,486 INFO L290 TraceCheckUtils]: 91: Hoare triple {15202#false} assume true; {15202#false} is VALID [2022-02-20 18:06:40,486 INFO L284 TraceCheckUtils]: 92: Hoare quadruple {15202#false} {15202#false} #255#return; {15202#false} is VALID [2022-02-20 18:06:40,486 INFO L290 TraceCheckUtils]: 93: Hoare triple {15202#false} assume true; {15202#false} is VALID [2022-02-20 18:06:40,486 INFO L284 TraceCheckUtils]: 94: Hoare quadruple {15202#false} {15202#false} #233#return; {15202#false} is VALID [2022-02-20 18:06:40,486 INFO L290 TraceCheckUtils]: 95: Hoare triple {15202#false} assume { :end_inline_processEnvironment } true; {15202#false} is VALID [2022-02-20 18:06:40,486 INFO L290 TraceCheckUtils]: 96: Hoare triple {15202#false} assume { :begin_inline___utac_acc__Specification1_spec__1 } true;havoc __utac_acc__Specification1_spec__1_#t~ret9#1, __utac_acc__Specification1_spec__1_#t~ret10#1, __utac_acc__Specification1_spec__1_~tmp~0#1, __utac_acc__Specification1_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification1_spec__1_~tmp~0#1;havoc __utac_acc__Specification1_spec__1_~tmp___0~0#1; {15202#false} is VALID [2022-02-20 18:06:40,486 INFO L272 TraceCheckUtils]: 97: Hoare triple {15202#false} call __utac_acc__Specification1_spec__1_#t~ret9#1 := isMethaneLevelCritical(); {15202#false} is VALID [2022-02-20 18:06:40,486 INFO L290 TraceCheckUtils]: 98: Hoare triple {15202#false} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {15202#false} is VALID [2022-02-20 18:06:40,486 INFO L290 TraceCheckUtils]: 99: Hoare triple {15202#false} assume true; {15202#false} is VALID [2022-02-20 18:06:40,487 INFO L284 TraceCheckUtils]: 100: Hoare quadruple {15202#false} {15202#false} #237#return; {15202#false} is VALID [2022-02-20 18:06:40,487 INFO L290 TraceCheckUtils]: 101: Hoare triple {15202#false} assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret9#1 && __utac_acc__Specification1_spec__1_#t~ret9#1 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp~0#1 := __utac_acc__Specification1_spec__1_#t~ret9#1;havoc __utac_acc__Specification1_spec__1_#t~ret9#1; {15202#false} is VALID [2022-02-20 18:06:40,487 INFO L290 TraceCheckUtils]: 102: Hoare triple {15202#false} assume 0 != __utac_acc__Specification1_spec__1_~tmp~0#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~10#1;havoc isPumpRunning_~retValue_acc~10#1;isPumpRunning_~retValue_acc~10#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~10#1; {15202#false} is VALID [2022-02-20 18:06:40,487 INFO L290 TraceCheckUtils]: 103: Hoare triple {15202#false} __utac_acc__Specification1_spec__1_#t~ret10#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret10#1 && __utac_acc__Specification1_spec__1_#t~ret10#1 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp___0~0#1 := __utac_acc__Specification1_spec__1_#t~ret10#1;havoc __utac_acc__Specification1_spec__1_#t~ret10#1; {15202#false} is VALID [2022-02-20 18:06:40,487 INFO L290 TraceCheckUtils]: 104: Hoare triple {15202#false} assume 0 != __utac_acc__Specification1_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {15202#false} is VALID [2022-02-20 18:06:40,487 INFO L290 TraceCheckUtils]: 105: Hoare triple {15202#false} assume !false; {15202#false} is VALID [2022-02-20 18:06:40,487 INFO L134 CoverageAnalysis]: Checked inductivity of 44 backedges. 35 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-02-20 18:06:40,487 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-02-20 18:06:40,488 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2120182716] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:06:40,488 INFO L191 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-02-20 18:06:40,488 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [14] total 19 [2022-02-20 18:06:40,488 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [970138568] [2022-02-20 18:06:40,488 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:06:40,489 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 9.375) internal successors, (75), 6 states have internal predecessors, (75), 3 states have call successors, (13), 3 states have call predecessors, (13), 5 states have return successors, (12), 5 states have call predecessors, (12), 3 states have call successors, (12) Word has length 106 [2022-02-20 18:06:40,489 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:06:40,489 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 8 states, 8 states have (on average 9.375) internal successors, (75), 6 states have internal predecessors, (75), 3 states have call successors, (13), 3 states have call predecessors, (13), 5 states have return successors, (12), 5 states have call predecessors, (12), 3 states have call successors, (12) [2022-02-20 18:06:40,549 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 100 edges. 100 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:06:40,549 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-02-20 18:06:40,549 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:06:40,549 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-02-20 18:06:40,549 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=48, Invalid=294, Unknown=0, NotChecked=0, Total=342 [2022-02-20 18:06:40,550 INFO L87 Difference]: Start difference. First operand 482 states and 574 transitions. Second operand has 8 states, 8 states have (on average 9.375) internal successors, (75), 6 states have internal predecessors, (75), 3 states have call successors, (13), 3 states have call predecessors, (13), 5 states have return successors, (12), 5 states have call predecessors, (12), 3 states have call successors, (12) [2022-02-20 18:06:41,081 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:06:41,081 INFO L93 Difference]: Finished difference Result 825 states and 993 transitions. [2022-02-20 18:06:41,082 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-02-20 18:06:41,082 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 9.375) internal successors, (75), 6 states have internal predecessors, (75), 3 states have call successors, (13), 3 states have call predecessors, (13), 5 states have return successors, (12), 5 states have call predecessors, (12), 3 states have call successors, (12) Word has length 106 [2022-02-20 18:06:41,082 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:06:41,082 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 9.375) internal successors, (75), 6 states have internal predecessors, (75), 3 states have call successors, (13), 3 states have call predecessors, (13), 5 states have return successors, (12), 5 states have call predecessors, (12), 3 states have call successors, (12) [2022-02-20 18:06:41,085 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 268 transitions. [2022-02-20 18:06:41,085 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 9.375) internal successors, (75), 6 states have internal predecessors, (75), 3 states have call successors, (13), 3 states have call predecessors, (13), 5 states have return successors, (12), 5 states have call predecessors, (12), 3 states have call successors, (12) [2022-02-20 18:06:41,087 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 268 transitions. [2022-02-20 18:06:41,087 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states and 268 transitions. [2022-02-20 18:06:41,268 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 268 edges. 268 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:06:41,268 INFO L225 Difference]: With dead ends: 825 [2022-02-20 18:06:41,269 INFO L226 Difference]: Without dead ends: 0 [2022-02-20 18:06:41,270 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 140 GetRequests, 121 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 43 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=60, Invalid=360, Unknown=0, NotChecked=0, Total=420 [2022-02-20 18:06:41,271 INFO L933 BasicCegarLoop]: 171 mSDtfsCounter, 68 mSDsluCounter, 596 mSDsCounter, 0 mSdLazyCounter, 101 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 72 SdHoareTripleChecker+Valid, 767 SdHoareTripleChecker+Invalid, 105 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 101 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-02-20 18:06:41,271 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [72 Valid, 767 Invalid, 105 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 101 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-02-20 18:06:41,271 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-02-20 18:06:41,272 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-02-20 18:06:41,272 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:06:41,272 INFO L82 GeneralOperation]: Start isEquivalent. First operand 0 states. Second operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:06:41,272 INFO L74 IsIncluded]: Start isIncluded. First operand 0 states. Second operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:06:41,272 INFO L87 Difference]: Start difference. First operand 0 states. Second operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:06:41,272 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:06:41,272 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2022-02-20 18:06:41,272 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-02-20 18:06:41,273 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:06:41,273 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:06:41,273 INFO L74 IsIncluded]: Start isIncluded. First operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand 0 states. [2022-02-20 18:06:41,273 INFO L87 Difference]: Start difference. First operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand 0 states. [2022-02-20 18:06:41,273 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:06:41,273 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2022-02-20 18:06:41,273 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-02-20 18:06:41,273 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:06:41,273 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:06:41,274 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:06:41,274 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:06:41,274 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:06:41,274 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-02-20 18:06:41,274 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 106 [2022-02-20 18:06:41,274 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:06:41,274 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-02-20 18:06:41,275 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 9.375) internal successors, (75), 6 states have internal predecessors, (75), 3 states have call successors, (13), 3 states have call predecessors, (13), 5 states have return successors, (12), 5 states have call predecessors, (12), 3 states have call successors, (12) [2022-02-20 18:06:41,275 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-02-20 18:06:41,275 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:06:41,277 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-02-20 18:06:41,307 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-02-20 18:06:41,511 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-02-20 18:06:41,515 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-02-20 18:06:43,795 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 784 790) no Hoare annotation was computed. [2022-02-20 18:06:43,795 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 784 790) the Hoare annotation is: true [2022-02-20 18:06:43,795 INFO L854 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 83 94) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0))) (and (or (not (= |old(~methaneLevelCritical~0)| 0)) .cse0 .cse1) (or (not (= ~pumpRunning~0 0)) .cse0 .cse1 (not (<= 1 |old(~methaneLevelCritical~0)|))))) [2022-02-20 18:06:43,795 INFO L858 garLoopResultBuilder]: For program point L87-1(lines 83 94) no Hoare annotation was computed. [2022-02-20 18:06:43,796 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 83 94) no Hoare annotation was computed. [2022-02-20 18:06:43,796 INFO L854 garLoopResultBuilder]: At program point L832(line 832) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (<= 1 ~methaneLevelCritical~0))) (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= |old(~pumpRunning~0)| 0))) (not (= ~methaneLevelCritical~0 0))))) [2022-02-20 18:06:43,796 INFO L858 garLoopResultBuilder]: For program point L155(line 155) no Hoare annotation was computed. [2022-02-20 18:06:43,796 INFO L854 garLoopResultBuilder]: At program point L824(line 824) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= |old(~pumpRunning~0)| 0))))) (and (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse1) (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0))))) [2022-02-20 18:06:43,796 INFO L858 garLoopResultBuilder]: For program point L824-1(line 824) no Hoare annotation was computed. [2022-02-20 18:06:43,796 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 760 783) no Hoare annotation was computed. [2022-02-20 18:06:43,796 INFO L854 garLoopResultBuilder]: At program point L837(line 837) the Hoare annotation is: (let ((.cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0))) (.cse4 (not (= |old(~waterLevel~0)| 1))) (.cse5 (= ~waterLevel~0 1)) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse6 (<= 2 ~waterLevel~0)) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse7 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse2) (or .cse4 .cse0 .cse3 .cse5) (or .cse4 .cse0 .cse1 .cse5) (or .cse0 .cse6 .cse3 .cse7) (or .cse0 .cse6 .cse1 .cse7))) [2022-02-20 18:06:43,796 INFO L854 garLoopResultBuilder]: At program point L837-1(lines 818 842) the Hoare annotation is: (let ((.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse4 (= ~waterLevel~0 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (<= 2 ~waterLevel~0)) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse7 (not (<= 2 |old(~waterLevel~0)|))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (= ~pumpRunning~0 0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse2 .cse5 .cse4) (or .cse0 .cse2 .cse6 .cse3 .cse7) (or .cse8 .cse9 .cse2 .cse6 .cse5) (or .cse0 .cse2 .cse6 .cse5 .cse7) (or .cse2 (and .cse9 (<= 1 |timeShift_processEnvironment_~tmp~7#1|)) .cse3 (and .cse8 .cse9)))) [2022-02-20 18:06:43,796 INFO L858 garLoopResultBuilder]: For program point L771-1(lines 771 777) no Hoare annotation was computed. [2022-02-20 18:06:43,796 INFO L854 garLoopResultBuilder]: At program point L156(lines 151 158) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (<= 1 ~methaneLevelCritical~0))) (or .cse0 (not (= ~methaneLevelCritical~0 0))))) [2022-02-20 18:06:43,796 INFO L858 garLoopResultBuilder]: For program point L173(lines 173 179) no Hoare annotation was computed. [2022-02-20 18:06:43,796 INFO L858 garLoopResultBuilder]: For program point L169(lines 169 182) no Hoare annotation was computed. [2022-02-20 18:06:43,797 INFO L854 garLoopResultBuilder]: At program point L169-1(lines 161 185) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (= ~pumpRunning~0 0)) (.cse9 (= |timeShift___utac_acc__Specification1_spec__1_~tmp~0#1| 0)) (.cse12 (<= 2 ~waterLevel~0))) (let ((.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse4 (= ~waterLevel~0 1)) (.cse6 (and .cse9 .cse12)) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse10 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse11 (and .cse0 .cse8 (<= 1 |timeShift_processEnvironment_~tmp~7#1|))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse7 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse2 .cse5 .cse4) (or .cse0 .cse2 .cse6 .cse5 .cse7) (or .cse2 .cse6 (and .cse8 .cse9) .cse5 (and .cse10 .cse9)) (or .cse11 .cse2 .cse3 (and .cse10 .cse8)) (or .cse11 .cse2 .cse12 .cse3 .cse7)))) [2022-02-20 18:06:43,797 INFO L854 garLoopResultBuilder]: At program point L892(lines 887 895) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 .cse2 (= ~waterLevel~0 1)) (or .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 (not (<= 2 |old(~waterLevel~0)|))) (let ((.cse3 (= ~pumpRunning~0 0)) (.cse4 (= |timeShift_isPumpRunning_#res#1| 0))) (or (and .cse3 .cse4 (<= 1 |timeShift_processEnvironment_~tmp~7#1|)) .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse3 .cse4) .cse2)) (or .cse1 (not (= ~methaneLevelCritical~0 0))))) [2022-02-20 18:06:43,797 INFO L858 garLoopResultBuilder]: For program point L764-1(lines 763 782) no Hoare annotation was computed. [2022-02-20 18:06:43,797 INFO L858 garLoopResultBuilder]: For program point L826(lines 826 834) no Hoare annotation was computed. [2022-02-20 18:06:43,797 INFO L858 garLoopResultBuilder]: For program point L822(lines 822 839) no Hoare annotation was computed. [2022-02-20 18:06:43,797 INFO L858 garLoopResultBuilder]: For program point L63(lines 63 67) no Hoare annotation was computed. [2022-02-20 18:06:43,797 INFO L854 garLoopResultBuilder]: At program point L63-2(lines 59 70) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= |old(~pumpRunning~0)| 0))))) (and (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse1) (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0))))) [2022-02-20 18:06:43,797 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 760 783) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse4 (= ~waterLevel~0 1)) (.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse7 (<= 2 ~waterLevel~0)) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse8 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse2 .cse5 .cse4) (or .cse6 .cse2 .cse5) (or .cse6 .cse2 .cse3) (or .cse2 .cse7 .cse3 .cse8) (or .cse2 .cse7 .cse5 .cse8))) [2022-02-20 18:06:43,797 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 760 783) no Hoare annotation was computed. [2022-02-20 18:06:43,797 INFO L854 garLoopResultBuilder]: At program point L873(lines 868 875) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methaneLevelCritical~0 0)))) (and (or (and .cse0 .cse1 (<= 1 |timeShift_processEnvironment_~tmp~7#1|)) .cse2 (not (<= 1 ~methaneLevelCritical~0))) (or .cse0 .cse2 .cse3) (or .cse1 .cse2 .cse3))) [2022-02-20 18:06:43,797 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 155) no Hoare annotation was computed. [2022-02-20 18:06:43,797 INFO L854 garLoopResultBuilder]: At program point L167(line 167) the Hoare annotation is: (let ((.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse4 (= ~waterLevel~0 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (<= 2 ~waterLevel~0)) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse7 (not (<= 2 |old(~waterLevel~0)|))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (= ~pumpRunning~0 0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse2 .cse5 .cse4) (or .cse0 .cse2 .cse6 .cse3 .cse7) (or .cse8 .cse9 .cse2 .cse6 .cse5) (or .cse0 .cse2 .cse6 .cse5 .cse7) (or .cse2 (and .cse9 (<= 1 |timeShift_processEnvironment_~tmp~7#1|)) .cse3 (and .cse8 .cse9)))) [2022-02-20 18:06:43,797 INFO L858 garLoopResultBuilder]: For program point L167-1(line 167) no Hoare annotation was computed. [2022-02-20 18:06:43,798 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 189 218) no Hoare annotation was computed. [2022-02-20 18:06:43,798 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 189 218) the Hoare annotation is: true [2022-02-20 18:06:43,798 INFO L861 garLoopResultBuilder]: At program point L214(lines 189 218) the Hoare annotation is: true [2022-02-20 18:06:43,798 INFO L858 garLoopResultBuilder]: For program point L210(line 210) no Hoare annotation was computed. [2022-02-20 18:06:43,798 INFO L858 garLoopResultBuilder]: For program point L203(lines 203 207) no Hoare annotation was computed. [2022-02-20 18:06:43,798 INFO L861 garLoopResultBuilder]: At program point L203-1(lines 203 207) the Hoare annotation is: true [2022-02-20 18:06:43,798 INFO L858 garLoopResultBuilder]: For program point L200(line 200) no Hoare annotation was computed. [2022-02-20 18:06:43,798 INFO L861 garLoopResultBuilder]: At program point L199-2(lines 199 213) the Hoare annotation is: true [2022-02-20 18:06:43,798 INFO L861 garLoopResultBuilder]: At program point L195(line 195) the Hoare annotation is: true [2022-02-20 18:06:43,798 INFO L858 garLoopResultBuilder]: For program point L195-1(line 195) no Hoare annotation was computed. [2022-02-20 18:06:43,798 INFO L861 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 95 103) the Hoare annotation is: true [2022-02-20 18:06:43,798 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 95 103) no Hoare annotation was computed. [2022-02-20 18:06:43,798 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 95 103) no Hoare annotation was computed. [2022-02-20 18:06:43,798 INFO L858 garLoopResultBuilder]: For program point L275(lines 275 282) no Hoare annotation was computed. [2022-02-20 18:06:43,798 INFO L858 garLoopResultBuilder]: For program point L275-2(lines 275 282) no Hoare annotation was computed. [2022-02-20 18:06:43,798 INFO L854 garLoopResultBuilder]: At program point L304(lines 300 306) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-02-20 18:06:43,798 INFO L854 garLoopResultBuilder]: At program point L746(lines 699 747) the Hoare annotation is: false [2022-02-20 18:06:43,798 INFO L861 garLoopResultBuilder]: At program point L259(lines 252 261) the Hoare annotation is: true [2022-02-20 18:06:43,798 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-02-20 18:06:43,799 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-02-20 18:06:43,799 INFO L858 garLoopResultBuilder]: For program point L701(lines 700 745) no Hoare annotation was computed. [2022-02-20 18:06:43,799 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-02-20 18:06:43,799 INFO L861 garLoopResultBuilder]: At program point L284(lines 265 287) the Hoare annotation is: true [2022-02-20 18:06:43,799 INFO L858 garLoopResultBuilder]: For program point L730(lines 730 741) no Hoare annotation was computed. [2022-02-20 18:06:43,799 INFO L854 garLoopResultBuilder]: At program point L722(line 722) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~methaneLevelCritical~0 0) .cse0 .cse1) (and (= ~pumpRunning~0 0) (<= 1 ~methaneLevelCritical~0) .cse0 .cse1))) [2022-02-20 18:06:43,799 INFO L854 garLoopResultBuilder]: At program point L743(lines 700 745) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~methaneLevelCritical~0 0) .cse0 .cse1) (and (= ~pumpRunning~0 0) (<= 1 ~methaneLevelCritical~0) .cse0 .cse1))) [2022-02-20 18:06:43,799 INFO L858 garLoopResultBuilder]: For program point L710(lines 710 716) no Hoare annotation was computed. [2022-02-20 18:06:43,799 INFO L858 garLoopResultBuilder]: For program point L710-1(lines 710 716) no Hoare annotation was computed. [2022-02-20 18:06:43,799 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-02-20 18:06:43,799 INFO L858 garLoopResultBuilder]: For program point L702(lines 702 706) no Hoare annotation was computed. [2022-02-20 18:06:43,799 INFO L854 garLoopResultBuilder]: At program point L248(lines 244 250) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-02-20 18:06:43,799 INFO L858 garLoopResultBuilder]: For program point L736(lines 736 740) no Hoare annotation was computed. [2022-02-20 18:06:43,799 INFO L854 garLoopResultBuilder]: At program point L319(lines 314 322) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-02-20 18:06:43,799 INFO L854 garLoopResultBuilder]: At program point L736-2(lines 730 741) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (<= 1 ~methaneLevelCritical~0) .cse0 .cse1) (and (= ~methaneLevelCritical~0 0) .cse0 .cse1))) [2022-02-20 18:06:43,799 INFO L854 garLoopResultBuilder]: At program point L311(lines 307 313) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-02-20 18:06:43,799 INFO L858 garLoopResultBuilder]: For program point L720(lines 720 726) no Hoare annotation was computed. [2022-02-20 18:06:43,800 INFO L858 garLoopResultBuilder]: For program point L720-1(lines 720 726) no Hoare annotation was computed. [2022-02-20 18:06:43,800 INFO L861 garLoopResultBuilder]: At program point L749(lines 690 753) the Hoare annotation is: true [2022-02-20 18:06:43,800 INFO L854 garLoopResultBuilder]: At program point L712(line 712) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~methaneLevelCritical~0 0) .cse0 .cse1) (and (= ~pumpRunning~0 0) (<= 1 ~methaneLevelCritical~0) .cse0 .cse1))) [2022-02-20 18:06:43,800 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 71 82) no Hoare annotation was computed. [2022-02-20 18:06:43,800 INFO L858 garLoopResultBuilder]: For program point L75-1(lines 71 82) no Hoare annotation was computed. [2022-02-20 18:06:43,800 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 71 82) the Hoare annotation is: (let ((.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse4 (= ~waterLevel~0 1)) (.cse0 (not (= ~pumpRunning~0 0))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse6 (<= 2 ~waterLevel~0)) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse7 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse2 .cse5 .cse4) (or .cse0 .cse2 .cse6 .cse5 .cse7) (or .cse2 .cse6 .cse3 .cse7))) [2022-02-20 18:06:43,800 INFO L854 garLoopResultBuilder]: At program point L145(lines 136 149) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0))) (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse1 (= |old(~pumpRunning~0)| 0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (and (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1|) .cse5)) (.cse4 (and .cse5 (<= 2 ~waterLevel~0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse2 .cse4) (or (not .cse1) .cse0 .cse3 (not (<= 1 ~methaneLevelCritical~0)) .cse4)))) [2022-02-20 18:06:43,800 INFO L854 garLoopResultBuilder]: At program point L806(line 806) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= |processEnvironment__wrappee__methaneQuery_~tmp~6#1| 0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and .cse1 .cse2) (not (<= 1 ~methaneLevelCritical~0))) (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2) (not (= ~methaneLevelCritical~0 0))))) [2022-02-20 18:06:43,800 INFO L858 garLoopResultBuilder]: For program point L800(lines 800 808) no Hoare annotation was computed. [2022-02-20 18:06:43,801 INFO L858 garLoopResultBuilder]: For program point L796(lines 796 813) no Hoare annotation was computed. [2022-02-20 18:06:43,801 INFO L858 garLoopResultBuilder]: For program point L858(lines 858 864) no Hoare annotation was computed. [2022-02-20 18:06:43,801 INFO L854 garLoopResultBuilder]: At program point L856(line 856) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (<= 2 ~waterLevel~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 ~methaneLevelCritical~0)) (and .cse1 .cse2)) (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2) (not (= ~methaneLevelCritical~0 0))))) [2022-02-20 18:06:43,801 INFO L854 garLoopResultBuilder]: At program point L858-2(lines 851 867) the Hoare annotation is: (let ((.cse1 (= |old(~pumpRunning~0)| 0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (<= 2 ~waterLevel~0)) (.cse2 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2) (or (not .cse1) .cse0 (and (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__methaneQuery_activatePump_~tmp~8#1|) (= ~pumpRunning~0 0) .cse3) (not (<= 1 ~methaneLevelCritical~0))) (or .cse0 .cse3 .cse2))) [2022-02-20 18:06:43,801 INFO L858 garLoopResultBuilder]: For program point L856-1(line 856) no Hoare annotation was computed. [2022-02-20 18:06:43,801 INFO L854 garLoopResultBuilder]: At program point L947(lines 932 950) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (= ~pumpRunning~0 0)) (.cse5 (= 1 ~systemActive~0))) (let ((.cse0 (not .cse5)) (.cse4 (and .cse1 .cse2 .cse5 (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~2#1| 0) (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1| 0))) (.cse3 (<= 2 ~waterLevel~0))) (and (or .cse0 (and .cse1 .cse2 .cse3) (not (= ~methaneLevelCritical~0 0)) .cse4) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse4 (and .cse2 .cse3))))) [2022-02-20 18:06:43,801 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 792 816) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (= ~methaneLevelCritical~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (<= 1 ~methaneLevelCritical~0))))) [2022-02-20 18:06:43,801 INFO L854 garLoopResultBuilder]: At program point L848(lines 843 850) the Hoare annotation is: (let ((.cse1 (= |old(~pumpRunning~0)| 0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2) (or (not .cse1) .cse0 (not (<= 1 ~methaneLevelCritical~0))) (or .cse0 (<= 2 ~waterLevel~0) .cse2))) [2022-02-20 18:06:43,802 INFO L858 garLoopResultBuilder]: For program point L941(lines 941 945) no Hoare annotation was computed. [2022-02-20 18:06:43,802 INFO L858 garLoopResultBuilder]: For program point L140(lines 140 146) no Hoare annotation was computed. [2022-02-20 18:06:43,802 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 792 816) no Hoare annotation was computed. [2022-02-20 18:06:43,802 INFO L858 garLoopResultBuilder]: For program point L941-2(lines 941 945) no Hoare annotation was computed. [2022-02-20 18:06:43,802 INFO L854 garLoopResultBuilder]: At program point L811(line 811) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1) (or .cse2 .cse0 (not (<= 1 ~methaneLevelCritical~0))) (or .cse2 .cse0 .cse1))) [2022-02-20 18:06:43,802 INFO L858 garLoopResultBuilder]: For program point L811-1(lines 792 816) no Hoare annotation was computed. [2022-02-20 18:06:43,802 INFO L861 garLoopResultBuilder]: At program point L881(line 881) the Hoare annotation is: true [2022-02-20 18:06:43,802 INFO L858 garLoopResultBuilder]: For program point L881-1(line 881) no Hoare annotation was computed. [2022-02-20 18:06:43,802 INFO L861 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 876 886) the Hoare annotation is: true [2022-02-20 18:06:43,802 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 876 886) no Hoare annotation was computed. [2022-02-20 18:06:43,803 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 876 886) no Hoare annotation was computed. [2022-02-20 18:06:43,805 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:06:43,805 INFO L180 ceAbstractionStarter]: Computing trace abstraction results [2022-02-20 18:06:43,808 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__baseEXIT has no Hoare annotation [2022-02-20 18:06:43,808 WARN L170 areAnnotationChecker]: L87-1 has no Hoare annotation [2022-02-20 18:06:43,808 WARN L170 areAnnotationChecker]: L87-1 has no Hoare annotation [2022-02-20 18:06:43,808 WARN L170 areAnnotationChecker]: L63 has no Hoare annotation [2022-02-20 18:06:43,808 WARN L170 areAnnotationChecker]: L764-1 has no Hoare annotation [2022-02-20 18:06:43,808 WARN L170 areAnnotationChecker]: isMethaneLevelCriticalFINAL has no Hoare annotation [2022-02-20 18:06:43,808 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2022-02-20 18:06:43,808 WARN L170 areAnnotationChecker]: L75-1 has no Hoare annotation [2022-02-20 18:06:43,808 WARN L170 areAnnotationChecker]: L75-1 has no Hoare annotation [2022-02-20 18:06:43,808 WARN L170 areAnnotationChecker]: L796 has no Hoare annotation [2022-02-20 18:06:43,808 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__baseEXIT has no Hoare annotation [2022-02-20 18:06:43,809 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__baseEXIT has no Hoare annotation [2022-02-20 18:06:43,809 WARN L170 areAnnotationChecker]: L87-1 has no Hoare annotation [2022-02-20 18:06:43,809 WARN L170 areAnnotationChecker]: L63 has no Hoare annotation [2022-02-20 18:06:43,809 WARN L170 areAnnotationChecker]: L63 has no Hoare annotation [2022-02-20 18:06:43,809 WARN L170 areAnnotationChecker]: L764-1 has no Hoare annotation [2022-02-20 18:06:43,809 WARN L170 areAnnotationChecker]: L764-1 has no Hoare annotation [2022-02-20 18:06:43,809 WARN L170 areAnnotationChecker]: L195-1 has no Hoare annotation [2022-02-20 18:06:43,810 WARN L170 areAnnotationChecker]: isMethaneLevelCriticalFINAL has no Hoare annotation [2022-02-20 18:06:43,810 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2022-02-20 18:06:43,810 WARN L170 areAnnotationChecker]: L75-1 has no Hoare annotation [2022-02-20 18:06:43,810 WARN L170 areAnnotationChecker]: L796 has no Hoare annotation [2022-02-20 18:06:43,810 WARN L170 areAnnotationChecker]: L796 has no Hoare annotation [2022-02-20 18:06:43,810 WARN L170 areAnnotationChecker]: L881-1 has no Hoare annotation [2022-02-20 18:06:43,810 WARN L170 areAnnotationChecker]: L811-1 has no Hoare annotation [2022-02-20 18:06:43,810 WARN L170 areAnnotationChecker]: changeMethaneLevelEXIT has no Hoare annotation [2022-02-20 18:06:43,811 WARN L170 areAnnotationChecker]: L764-1 has no Hoare annotation [2022-02-20 18:06:43,811 WARN L170 areAnnotationChecker]: L822 has no Hoare annotation [2022-02-20 18:06:43,811 WARN L170 areAnnotationChecker]: L822 has no Hoare annotation [2022-02-20 18:06:43,811 WARN L170 areAnnotationChecker]: L771-1 has no Hoare annotation [2022-02-20 18:06:43,811 WARN L170 areAnnotationChecker]: L195-1 has no Hoare annotation [2022-02-20 18:06:43,811 WARN L170 areAnnotationChecker]: isMethaneLevelCriticalEXIT has no Hoare annotation [2022-02-20 18:06:43,811 WARN L170 areAnnotationChecker]: isMethaneLevelCriticalEXIT has no Hoare annotation [2022-02-20 18:06:43,811 WARN L170 areAnnotationChecker]: waterRiseEXIT has no Hoare annotation [2022-02-20 18:06:43,812 WARN L170 areAnnotationChecker]: L140 has no Hoare annotation [2022-02-20 18:06:43,812 WARN L170 areAnnotationChecker]: L140 has no Hoare annotation [2022-02-20 18:06:43,812 WARN L170 areAnnotationChecker]: L811-1 has no Hoare annotation [2022-02-20 18:06:43,812 WARN L170 areAnnotationChecker]: L881-1 has no Hoare annotation [2022-02-20 18:06:43,812 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__methaneQueryEXIT has no Hoare annotation [2022-02-20 18:06:43,812 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__methaneQueryEXIT has no Hoare annotation [2022-02-20 18:06:43,812 WARN L170 areAnnotationChecker]: L720-1 has no Hoare annotation [2022-02-20 18:06:43,812 WARN L170 areAnnotationChecker]: L824-1 has no Hoare annotation [2022-02-20 18:06:43,813 WARN L170 areAnnotationChecker]: L167-1 has no Hoare annotation [2022-02-20 18:06:43,813 WARN L170 areAnnotationChecker]: L200 has no Hoare annotation [2022-02-20 18:06:43,813 WARN L170 areAnnotationChecker]: L167-1 has no Hoare annotation [2022-02-20 18:06:43,813 WARN L170 areAnnotationChecker]: L710-1 has no Hoare annotation [2022-02-20 18:06:43,814 WARN L170 areAnnotationChecker]: L941 has no Hoare annotation [2022-02-20 18:06:43,814 WARN L170 areAnnotationChecker]: isMethaneAlarmFINAL has no Hoare annotation [2022-02-20 18:06:43,814 WARN L170 areAnnotationChecker]: L771-1 has no Hoare annotation [2022-02-20 18:06:43,814 WARN L170 areAnnotationChecker]: L730 has no Hoare annotation [2022-02-20 18:06:43,814 WARN L170 areAnnotationChecker]: L730 has no Hoare annotation [2022-02-20 18:06:43,814 WARN L170 areAnnotationChecker]: L824-1 has no Hoare annotation [2022-02-20 18:06:43,814 WARN L170 areAnnotationChecker]: cleanupEXIT has no Hoare annotation [2022-02-20 18:06:43,814 WARN L170 areAnnotationChecker]: L200 has no Hoare annotation [2022-02-20 18:06:43,814 WARN L170 areAnnotationChecker]: L169 has no Hoare annotation [2022-02-20 18:06:43,814 WARN L170 areAnnotationChecker]: L169 has no Hoare annotation [2022-02-20 18:06:43,814 WARN L170 areAnnotationChecker]: L275 has no Hoare annotation [2022-02-20 18:06:43,814 WARN L170 areAnnotationChecker]: L720 has no Hoare annotation [2022-02-20 18:06:43,814 WARN L170 areAnnotationChecker]: L720 has no Hoare annotation [2022-02-20 18:06:43,815 WARN L170 areAnnotationChecker]: L941 has no Hoare annotation [2022-02-20 18:06:43,815 WARN L170 areAnnotationChecker]: L941 has no Hoare annotation [2022-02-20 18:06:43,815 WARN L170 areAnnotationChecker]: isMethaneAlarmEXIT has no Hoare annotation [2022-02-20 18:06:43,815 WARN L170 areAnnotationChecker]: isMethaneAlarmEXIT has no Hoare annotation [2022-02-20 18:06:43,816 WARN L170 areAnnotationChecker]: L736 has no Hoare annotation [2022-02-20 18:06:43,816 WARN L170 areAnnotationChecker]: L736 has no Hoare annotation [2022-02-20 18:06:43,816 WARN L170 areAnnotationChecker]: L826 has no Hoare annotation [2022-02-20 18:06:43,816 WARN L170 areAnnotationChecker]: L826 has no Hoare annotation [2022-02-20 18:06:43,816 WARN L170 areAnnotationChecker]: cleanupEXIT has no Hoare annotation [2022-02-20 18:06:43,816 WARN L170 areAnnotationChecker]: L203 has no Hoare annotation [2022-02-20 18:06:43,816 WARN L170 areAnnotationChecker]: L203 has no Hoare annotation [2022-02-20 18:06:43,816 WARN L170 areAnnotationChecker]: L173 has no Hoare annotation [2022-02-20 18:06:43,816 WARN L170 areAnnotationChecker]: timeShiftFINAL has no Hoare annotation [2022-02-20 18:06:43,816 WARN L170 areAnnotationChecker]: L275 has no Hoare annotation [2022-02-20 18:06:43,816 WARN L170 areAnnotationChecker]: L275 has no Hoare annotation [2022-02-20 18:06:43,816 WARN L170 areAnnotationChecker]: L720-1 has no Hoare annotation [2022-02-20 18:06:43,817 WARN L170 areAnnotationChecker]: L941-2 has no Hoare annotation [2022-02-20 18:06:43,817 WARN L170 areAnnotationChecker]: L856-1 has no Hoare annotation [2022-02-20 18:06:43,818 WARN L170 areAnnotationChecker]: L701 has no Hoare annotation [2022-02-20 18:06:43,820 WARN L170 areAnnotationChecker]: L210 has no Hoare annotation [2022-02-20 18:06:43,820 WARN L170 areAnnotationChecker]: L173 has no Hoare annotation [2022-02-20 18:06:43,820 WARN L170 areAnnotationChecker]: L173 has no Hoare annotation [2022-02-20 18:06:43,820 WARN L170 areAnnotationChecker]: timeShiftFINAL has no Hoare annotation [2022-02-20 18:06:43,821 WARN L170 areAnnotationChecker]: L275-2 has no Hoare annotation [2022-02-20 18:06:43,821 WARN L170 areAnnotationChecker]: L800 has no Hoare annotation [2022-02-20 18:06:43,821 WARN L170 areAnnotationChecker]: L858 has no Hoare annotation [2022-02-20 18:06:43,821 WARN L170 areAnnotationChecker]: L858 has no Hoare annotation [2022-02-20 18:06:43,821 WARN L170 areAnnotationChecker]: L701 has no Hoare annotation [2022-02-20 18:06:43,821 WARN L170 areAnnotationChecker]: L701 has no Hoare annotation [2022-02-20 18:06:43,821 WARN L170 areAnnotationChecker]: L275-2 has no Hoare annotation [2022-02-20 18:06:43,821 WARN L170 areAnnotationChecker]: L210 has no Hoare annotation [2022-02-20 18:06:43,821 WARN L170 areAnnotationChecker]: L155 has no Hoare annotation [2022-02-20 18:06:43,822 WARN L170 areAnnotationChecker]: L155 has no Hoare annotation [2022-02-20 18:06:43,822 WARN L170 areAnnotationChecker]: timeShiftEXIT has no Hoare annotation [2022-02-20 18:06:43,822 WARN L170 areAnnotationChecker]: timeShiftEXIT has no Hoare annotation [2022-02-20 18:06:43,822 WARN L170 areAnnotationChecker]: timeShiftEXIT has no Hoare annotation [2022-02-20 18:06:43,822 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2022-02-20 18:06:43,822 WARN L170 areAnnotationChecker]: L800 has no Hoare annotation [2022-02-20 18:06:43,822 WARN L170 areAnnotationChecker]: L800 has no Hoare annotation [2022-02-20 18:06:43,822 WARN L170 areAnnotationChecker]: L811-1 has no Hoare annotation [2022-02-20 18:06:43,823 WARN L170 areAnnotationChecker]: L702 has no Hoare annotation [2022-02-20 18:06:43,824 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2022-02-20 18:06:43,824 WARN L170 areAnnotationChecker]: L856-1 has no Hoare annotation [2022-02-20 18:06:43,824 WARN L170 areAnnotationChecker]: L811-1 has no Hoare annotation [2022-02-20 18:06:43,824 WARN L170 areAnnotationChecker]: L710 has no Hoare annotation [2022-02-20 18:06:43,824 WARN L170 areAnnotationChecker]: L710 has no Hoare annotation [2022-02-20 18:06:43,824 WARN L170 areAnnotationChecker]: L710-1 has no Hoare annotation [2022-02-20 18:06:43,825 INFO L163 areAnnotationChecker]: CFG has 27 edges. 27 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. 0 times interpolants missing. [2022-02-20 18:06:43,841 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 20.02 06:06:43 BoogieIcfgContainer [2022-02-20 18:06:43,841 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-02-20 18:06:43,842 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-02-20 18:06:43,842 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-02-20 18:06:43,842 INFO L275 PluginConnector]: Witness Printer initialized [2022-02-20 18:06:43,842 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.02 06:06:30" (3/4) ... [2022-02-20 18:06:43,844 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-02-20 18:06:43,847 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-02-20 18:06:43,847 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-02-20 18:06:43,847 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-02-20 18:06:43,847 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-02-20 18:06:43,848 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-02-20 18:06:43,848 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-02-20 18:06:43,848 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2022-02-20 18:06:43,848 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2022-02-20 18:06:43,869 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 50 nodes and edges [2022-02-20 18:06:43,869 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-02-20 18:06:43,869 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-02-20 18:06:43,869 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-02-20 18:06:43,870 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-02-20 18:06:43,870 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-02-20 18:06:43,870 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-02-20 18:06:43,887 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0))) && ((!(1 == systemActive) || (pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0))) || !(methaneLevelCritical == 0)) [2022-02-20 18:06:43,888 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || waterLevel == 1) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || waterLevel == 1)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && ((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(methaneLevelCritical == 0))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && (((!(1 == systemActive) || (pumpRunning == 0 && 1 <= tmp)) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) [2022-02-20 18:06:43,889 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || waterLevel == 1) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || waterLevel == 1)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (tmp == 0 && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && ((((!(1 == systemActive) || (tmp == 0 && 2 <= waterLevel)) || (pumpRunning == 0 && tmp == 0)) || !(methaneLevelCritical == 0)) || (pumpRunning == \old(pumpRunning) && tmp == 0))) && (((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 <= tmp) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0))) && ((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 <= tmp) || !(1 == systemActive)) || 2 <= waterLevel) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel))) [2022-02-20 18:06:43,889 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 <= tmp) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((pumpRunning == 0 || !(1 == systemActive)) || !(methaneLevelCritical == 0)) [2022-02-20 18:06:43,890 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || waterLevel == 1) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((((pumpRunning == 0 && \result == 0) && 1 <= tmp) || !(1 == systemActive)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0)) || !(1 <= methaneLevelCritical))) && (!(1 == systemActive) || !(methaneLevelCritical == 0)) [2022-02-20 18:06:43,890 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((methaneLevelCritical <= tmp && pumpRunning == 0) && 2 <= waterLevel)) || !(1 <= methaneLevelCritical))) && ((!(1 == systemActive) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) [2022-02-20 18:06:43,890 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((!(1 == systemActive) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) [2022-02-20 18:06:43,890 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && (((!(1 == systemActive) || (1 <= \result && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (1 <= \result && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) [2022-02-20 18:06:43,890 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 == systemActive) && tmp___0 == 0) && \result == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 == systemActive) && tmp___0 == 0) && \result == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) [2022-02-20 18:06:43,915 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2022-02-20 18:06:43,915 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-02-20 18:06:43,916 INFO L158 Benchmark]: Toolchain (without parser) took 14428.82ms. Allocated memory was 88.1MB in the beginning and 297.8MB in the end (delta: 209.7MB). Free memory was 46.4MB in the beginning and 140.6MB in the end (delta: -94.2MB). Peak memory consumption was 117.2MB. Max. memory is 16.1GB. [2022-02-20 18:06:43,916 INFO L158 Benchmark]: CDTParser took 0.09ms. Allocated memory is still 88.1MB. Free memory is still 63.5MB. There was no memory consumed. Max. memory is 16.1GB. [2022-02-20 18:06:43,917 INFO L158 Benchmark]: CACSL2BoogieTranslator took 414.02ms. Allocated memory was 88.1MB in the beginning and 134.2MB in the end (delta: 46.1MB). Free memory was 46.1MB in the beginning and 95.0MB in the end (delta: -48.9MB). Peak memory consumption was 6.5MB. Max. memory is 16.1GB. [2022-02-20 18:06:43,917 INFO L158 Benchmark]: Boogie Procedure Inliner took 61.84ms. Allocated memory is still 134.2MB. Free memory was 95.0MB in the beginning and 92.4MB in the end (delta: 2.6MB). There was no memory consumed. Max. memory is 16.1GB. [2022-02-20 18:06:43,917 INFO L158 Benchmark]: Boogie Preprocessor took 44.52ms. Allocated memory is still 134.2MB. Free memory was 92.4MB in the beginning and 90.9MB in the end (delta: 1.5MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-02-20 18:06:43,918 INFO L158 Benchmark]: RCFGBuilder took 551.50ms. Allocated memory is still 134.2MB. Free memory was 90.9MB in the beginning and 92.7MB in the end (delta: -1.8MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-02-20 18:06:43,918 INFO L158 Benchmark]: TraceAbstraction took 13277.64ms. Allocated memory was 134.2MB in the beginning and 297.8MB in the end (delta: 163.6MB). Free memory was 92.2MB in the beginning and 145.8MB in the end (delta: -53.7MB). Peak memory consumption was 157.9MB. Max. memory is 16.1GB. [2022-02-20 18:06:43,918 INFO L158 Benchmark]: Witness Printer took 73.68ms. Allocated memory is still 297.8MB. Free memory was 145.8MB in the beginning and 140.6MB in the end (delta: 5.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-02-20 18:06:43,919 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - AssertionsEnabledResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.09ms. Allocated memory is still 88.1MB. Free memory is still 63.5MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 414.02ms. Allocated memory was 88.1MB in the beginning and 134.2MB in the end (delta: 46.1MB). Free memory was 46.1MB in the beginning and 95.0MB in the end (delta: -48.9MB). Peak memory consumption was 6.5MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 61.84ms. Allocated memory is still 134.2MB. Free memory was 95.0MB in the beginning and 92.4MB in the end (delta: 2.6MB). There was no memory consumed. Max. memory is 16.1GB. * Boogie Preprocessor took 44.52ms. Allocated memory is still 134.2MB. Free memory was 92.4MB in the beginning and 90.9MB in the end (delta: 1.5MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * RCFGBuilder took 551.50ms. Allocated memory is still 134.2MB. Free memory was 90.9MB in the beginning and 92.7MB in the end (delta: -1.8MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * TraceAbstraction took 13277.64ms. Allocated memory was 134.2MB in the beginning and 297.8MB in the end (delta: 163.6MB). Free memory was 92.2MB in the beginning and 145.8MB in the end (delta: -53.7MB). Peak memory consumption was 157.9MB. Max. memory is 16.1GB. * Witness Printer took 73.68ms. Allocated memory is still 297.8MB. Free memory was 145.8MB in the beginning and 140.6MB in the end (delta: 5.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 155]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 93 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 13.2s, OverallIterations: 11, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 7.2s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 2.3s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1337 SdHoareTripleChecker+Valid, 1.7s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1308 mSDsluCounter, 3152 SdHoareTripleChecker+Invalid, 1.7s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 1895 mSDsCounter, 445 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1740 IncrementalHoareTripleChecker+Invalid, 2185 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 445 mSolverCounterUnsat, 1257 mSDtfsCounter, 1740 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 367 GetRequests, 262 SyntacticMatches, 1 SemanticMatches, 104 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 140 ImplicationChecksByTransitivity, 0.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=505occurred in iteration=9, InterpolantAutomatonStates: 88, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.5s AutomataMinimizationTime, 11 MinimizatonAttempts, 64 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 42 LocationsWithAnnotation, 1194 PreInvPairs, 1373 NumberOfFragments, 1461 HoareAnnotationTreeSize, 1194 FomulaSimplifications, 0 FormulaSimplificationTreeSizeReduction, 0.1s HoareSimplificationTime, 42 FomulaSimplificationsInter, 6540 FormulaSimplificationTreeSizeReductionInter, 2.0s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 1.8s InterpolantComputationTime, 715 NumberOfCodeBlocks, 715 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 702 ConstructedInterpolants, 0 QuantifiedInterpolants, 1381 SizeOfPredicates, 6 NumberOfNonLiveVariables, 863 ConjunctsInSsa, 18 ConjunctsInUnsatCore, 13 InterpolantComputations, 11 PerfectInterpolantSequences, 89/103 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 252]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 699]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && (((!(1 == systemActive) || (1 <= \result && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (1 <= \result && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) - InvariantResult [Line: 851]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((methaneLevelCritical <= tmp && pumpRunning == 0) && 2 <= waterLevel)) || !(1 <= methaneLevelCritical))) && ((!(1 == systemActive) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 690]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 868]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 <= tmp) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((pumpRunning == 0 || !(1 == systemActive)) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 189]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 932]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 == systemActive) && tmp___0 == 0) && \result == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 == systemActive) && tmp___0 == 0) && \result == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) - InvariantResult [Line: 700]: Loop Invariant Derived loop invariant: ((methaneLevelCritical == 0 && 1 == systemActive) && splverifierCounter == 0) || (((pumpRunning == 0 && 1 <= methaneLevelCritical) && 1 == systemActive) && splverifierCounter == 0) - InvariantResult [Line: 818]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || waterLevel == 1) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || waterLevel == 1)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && ((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(methaneLevelCritical == 0))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && (((!(1 == systemActive) || (pumpRunning == 0 && 1 <= tmp)) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) - InvariantResult [Line: 151]: Loop Invariant Derived loop invariant: (!(1 == systemActive) || !(1 <= methaneLevelCritical)) && (!(1 == systemActive) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 265]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 300]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 59]: Loop Invariant Derived loop invariant: ((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0))) && ((!(1 == systemActive) || (pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0))) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 244]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 887]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || waterLevel == 1) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((((pumpRunning == 0 && \result == 0) && 1 <= tmp) || !(1 == systemActive)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0)) || !(1 <= methaneLevelCritical))) && (!(1 == systemActive) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 843]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((!(1 == systemActive) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 199]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 307]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 161]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || waterLevel == 1) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || waterLevel == 1)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (tmp == 0 && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && ((((!(1 == systemActive) || (tmp == 0 && 2 <= waterLevel)) || (pumpRunning == 0 && tmp == 0)) || !(methaneLevelCritical == 0)) || (pumpRunning == \old(pumpRunning) && tmp == 0))) && (((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 <= tmp) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0))) && ((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 <= tmp) || !(1 == systemActive)) || 2 <= waterLevel) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 314]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 RESULT: Ultimate proved your program to be correct! [2022-02-20 18:06:43,982 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE