./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec1_productSimulator.cil.c --full-output -ea --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 03d7b7b3 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -ea -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec1_productSimulator.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash e237a09aaa1bc75b51620084d47086dcaad161f8c8500bd0b8b901d1a9d4bb0a --- Real Ultimate output --- This is Ultimate 0.2.2-dev-03d7b7b [2022-02-20 18:07:04,596 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-02-20 18:07:04,600 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-02-20 18:07:04,632 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-02-20 18:07:04,632 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-02-20 18:07:04,635 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-02-20 18:07:04,636 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-02-20 18:07:04,640 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-02-20 18:07:04,641 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-02-20 18:07:04,645 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-02-20 18:07:04,645 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-02-20 18:07:04,646 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-02-20 18:07:04,646 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-02-20 18:07:04,648 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-02-20 18:07:04,649 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-02-20 18:07:04,651 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-02-20 18:07:04,652 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-02-20 18:07:04,653 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-02-20 18:07:04,654 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-02-20 18:07:04,657 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-02-20 18:07:04,658 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-02-20 18:07:04,659 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-02-20 18:07:04,660 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-02-20 18:07:04,661 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-02-20 18:07:04,666 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-02-20 18:07:04,667 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-02-20 18:07:04,667 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-02-20 18:07:04,668 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-02-20 18:07:04,669 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-02-20 18:07:04,669 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-02-20 18:07:04,670 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-02-20 18:07:04,670 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-02-20 18:07:04,671 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-02-20 18:07:04,672 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-02-20 18:07:04,673 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-02-20 18:07:04,673 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-02-20 18:07:04,674 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-02-20 18:07:04,674 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-02-20 18:07:04,674 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-02-20 18:07:04,675 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-02-20 18:07:04,675 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-02-20 18:07:04,677 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-02-20 18:07:04,699 INFO L113 SettingsManager]: Loading preferences was successful [2022-02-20 18:07:04,700 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-02-20 18:07:04,700 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-02-20 18:07:04,700 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-02-20 18:07:04,701 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-02-20 18:07:04,701 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-02-20 18:07:04,701 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-02-20 18:07:04,702 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-02-20 18:07:04,702 INFO L138 SettingsManager]: * Use SBE=true [2022-02-20 18:07:04,702 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-02-20 18:07:04,703 INFO L138 SettingsManager]: * sizeof long=4 [2022-02-20 18:07:04,703 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-02-20 18:07:04,703 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-02-20 18:07:04,703 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-02-20 18:07:04,703 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-02-20 18:07:04,703 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-02-20 18:07:04,704 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-02-20 18:07:04,704 INFO L138 SettingsManager]: * sizeof long double=12 [2022-02-20 18:07:04,704 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-02-20 18:07:04,704 INFO L138 SettingsManager]: * Use constant arrays=true [2022-02-20 18:07:04,704 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-02-20 18:07:04,704 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-02-20 18:07:04,705 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-02-20 18:07:04,705 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-02-20 18:07:04,705 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-02-20 18:07:04,705 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-02-20 18:07:04,705 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-02-20 18:07:04,706 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-02-20 18:07:04,706 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-02-20 18:07:04,706 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-02-20 18:07:04,707 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2022-02-20 18:07:04,707 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-02-20 18:07:04,707 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-02-20 18:07:04,707 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> e237a09aaa1bc75b51620084d47086dcaad161f8c8500bd0b8b901d1a9d4bb0a [2022-02-20 18:07:04,911 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-02-20 18:07:04,927 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-02-20 18:07:04,929 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-02-20 18:07:04,929 INFO L271 PluginConnector]: Initializing CDTParser... [2022-02-20 18:07:04,930 INFO L275 PluginConnector]: CDTParser initialized [2022-02-20 18:07:04,931 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec1_productSimulator.cil.c [2022-02-20 18:07:04,978 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/22f87c18f/3588f826a96f46598e81fd7100435e5e/FLAGb32c9277a [2022-02-20 18:07:05,406 INFO L306 CDTParser]: Found 1 translation units. [2022-02-20 18:07:05,413 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec1_productSimulator.cil.c [2022-02-20 18:07:05,427 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/22f87c18f/3588f826a96f46598e81fd7100435e5e/FLAGb32c9277a [2022-02-20 18:07:05,438 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/22f87c18f/3588f826a96f46598e81fd7100435e5e [2022-02-20 18:07:05,440 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-02-20 18:07:05,441 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-02-20 18:07:05,444 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-02-20 18:07:05,444 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-02-20 18:07:05,446 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-02-20 18:07:05,447 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.02 06:07:05" (1/1) ... [2022-02-20 18:07:05,448 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@59c45ac3 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:07:05, skipping insertion in model container [2022-02-20 18:07:05,448 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.02 06:07:05" (1/1) ... [2022-02-20 18:07:05,452 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-02-20 18:07:05,497 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-02-20 18:07:05,758 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec1_productSimulator.cil.c[20217,20230] [2022-02-20 18:07:05,764 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-02-20 18:07:05,770 INFO L203 MainTranslator]: Completed pre-run [2022-02-20 18:07:05,812 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec1_productSimulator.cil.c[20217,20230] [2022-02-20 18:07:05,814 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-02-20 18:07:05,826 INFO L208 MainTranslator]: Completed translation [2022-02-20 18:07:05,827 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:07:05 WrapperNode [2022-02-20 18:07:05,827 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-02-20 18:07:05,828 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-02-20 18:07:05,828 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-02-20 18:07:05,828 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-02-20 18:07:05,833 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:07:05" (1/1) ... [2022-02-20 18:07:05,842 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:07:05" (1/1) ... [2022-02-20 18:07:05,864 INFO L137 Inliner]: procedures = 63, calls = 177, calls flagged for inlining = 27, calls inlined = 24, statements flattened = 330 [2022-02-20 18:07:05,864 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-02-20 18:07:05,865 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-02-20 18:07:05,865 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-02-20 18:07:05,865 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-02-20 18:07:05,870 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:07:05" (1/1) ... [2022-02-20 18:07:05,871 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:07:05" (1/1) ... [2022-02-20 18:07:05,879 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:07:05" (1/1) ... [2022-02-20 18:07:05,880 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:07:05" (1/1) ... [2022-02-20 18:07:05,884 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:07:05" (1/1) ... [2022-02-20 18:07:05,887 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:07:05" (1/1) ... [2022-02-20 18:07:05,889 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:07:05" (1/1) ... [2022-02-20 18:07:05,891 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-02-20 18:07:05,891 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-02-20 18:07:05,891 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-02-20 18:07:05,891 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-02-20 18:07:05,892 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:07:05" (1/1) ... [2022-02-20 18:07:05,896 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-02-20 18:07:05,905 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-20 18:07:05,973 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-02-20 18:07:06,009 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-02-20 18:07:06,026 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-02-20 18:07:06,026 INFO L130 BoogieDeclarations]: Found specification of procedure activatePump__before__methaneQuery [2022-02-20 18:07:06,026 INFO L138 BoogieDeclarations]: Found implementation of procedure activatePump__before__methaneQuery [2022-02-20 18:07:06,026 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-02-20 18:07:06,027 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-02-20 18:07:06,027 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-02-20 18:07:06,027 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-02-20 18:07:06,027 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-02-20 18:07:06,027 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-02-20 18:07:06,027 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__before__highWaterSensor [2022-02-20 18:07:06,028 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__before__highWaterSensor [2022-02-20 18:07:06,028 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-02-20 18:07:06,028 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-02-20 18:07:06,028 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__before__methaneAlarm [2022-02-20 18:07:06,028 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__before__methaneAlarm [2022-02-20 18:07:06,028 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__before__lowWaterSensor [2022-02-20 18:07:06,029 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__before__lowWaterSensor [2022-02-20 18:07:06,029 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2022-02-20 18:07:06,029 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2022-02-20 18:07:06,029 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-02-20 18:07:06,029 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-02-20 18:07:06,029 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-02-20 18:07:06,030 INFO L130 BoogieDeclarations]: Found specification of procedure select_one [2022-02-20 18:07:06,030 INFO L138 BoogieDeclarations]: Found implementation of procedure select_one [2022-02-20 18:07:06,030 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-02-20 18:07:06,030 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-02-20 18:07:06,030 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-02-20 18:07:06,031 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-02-20 18:07:06,098 INFO L234 CfgBuilder]: Building ICFG [2022-02-20 18:07:06,100 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-02-20 18:07:06,472 INFO L275 CfgBuilder]: Performing block encoding [2022-02-20 18:07:06,481 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-02-20 18:07:06,482 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-02-20 18:07:06,483 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.02 06:07:06 BoogieIcfgContainer [2022-02-20 18:07:06,484 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-02-20 18:07:06,485 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-02-20 18:07:06,485 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-02-20 18:07:06,487 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-02-20 18:07:06,488 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 20.02 06:07:05" (1/3) ... [2022-02-20 18:07:06,488 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3b377c8b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.02 06:07:06, skipping insertion in model container [2022-02-20 18:07:06,488 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:07:05" (2/3) ... [2022-02-20 18:07:06,488 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3b377c8b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.02 06:07:06, skipping insertion in model container [2022-02-20 18:07:06,489 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.02 06:07:06" (3/3) ... [2022-02-20 18:07:06,490 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec1_productSimulator.cil.c [2022-02-20 18:07:06,494 INFO L205 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-02-20 18:07:06,495 INFO L164 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-02-20 18:07:06,539 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-02-20 18:07:06,545 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2022-02-20 18:07:06,545 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-02-20 18:07:06,587 INFO L276 IsEmpty]: Start isEmpty. Operand has 143 states, 99 states have (on average 1.3636363636363635) internal successors, (135), 115 states have internal predecessors, (135), 30 states have call successors, (30), 12 states have call predecessors, (30), 12 states have return successors, (30), 25 states have call predecessors, (30), 30 states have call successors, (30) [2022-02-20 18:07:06,596 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-02-20 18:07:06,596 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:07:06,597 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:07:06,598 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:07:06,601 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:07:06,602 INFO L85 PathProgramCache]: Analyzing trace with hash 735996178, now seen corresponding path program 1 times [2022-02-20 18:07:06,608 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:07:06,608 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [887850998] [2022-02-20 18:07:06,609 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:07:06,609 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:07:06,772 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:06,848 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-02-20 18:07:06,854 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:06,870 INFO L290 TraceCheckUtils]: 0: Hoare triple {146#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {146#true} is VALID [2022-02-20 18:07:06,870 INFO L290 TraceCheckUtils]: 1: Hoare triple {146#true} assume true; {146#true} is VALID [2022-02-20 18:07:06,871 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {146#true} {146#true} #355#return; {146#true} is VALID [2022-02-20 18:07:06,872 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:07:06,876 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:06,884 INFO L290 TraceCheckUtils]: 0: Hoare triple {146#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {146#true} is VALID [2022-02-20 18:07:06,884 INFO L290 TraceCheckUtils]: 1: Hoare triple {146#true} assume true; {146#true} is VALID [2022-02-20 18:07:06,885 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {146#true} {146#true} #357#return; {146#true} is VALID [2022-02-20 18:07:06,885 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-02-20 18:07:06,890 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:06,895 INFO L290 TraceCheckUtils]: 0: Hoare triple {146#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {146#true} is VALID [2022-02-20 18:07:06,895 INFO L290 TraceCheckUtils]: 1: Hoare triple {146#true} assume true; {146#true} is VALID [2022-02-20 18:07:06,895 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {146#true} {146#true} #359#return; {146#true} is VALID [2022-02-20 18:07:06,895 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:07:06,903 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:06,910 INFO L290 TraceCheckUtils]: 0: Hoare triple {146#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {146#true} is VALID [2022-02-20 18:07:06,911 INFO L290 TraceCheckUtils]: 1: Hoare triple {146#true} assume true; {146#true} is VALID [2022-02-20 18:07:06,911 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {146#true} {146#true} #361#return; {146#true} is VALID [2022-02-20 18:07:06,911 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-02-20 18:07:06,914 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:06,918 INFO L290 TraceCheckUtils]: 0: Hoare triple {146#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {146#true} is VALID [2022-02-20 18:07:06,919 INFO L290 TraceCheckUtils]: 1: Hoare triple {146#true} assume true; {146#true} is VALID [2022-02-20 18:07:06,919 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {146#true} {146#true} #363#return; {146#true} is VALID [2022-02-20 18:07:06,919 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-02-20 18:07:06,924 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:06,929 INFO L290 TraceCheckUtils]: 0: Hoare triple {146#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {146#true} is VALID [2022-02-20 18:07:06,929 INFO L290 TraceCheckUtils]: 1: Hoare triple {146#true} assume true; {146#true} is VALID [2022-02-20 18:07:06,929 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {146#true} {146#true} #365#return; {146#true} is VALID [2022-02-20 18:07:06,930 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-02-20 18:07:06,932 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:06,934 INFO L290 TraceCheckUtils]: 0: Hoare triple {146#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~methaneLevelCritical~0;#res := ~retValue_acc~9; {146#true} is VALID [2022-02-20 18:07:06,934 INFO L290 TraceCheckUtils]: 1: Hoare triple {146#true} assume true; {146#true} is VALID [2022-02-20 18:07:06,935 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {146#true} {147#false} #353#return; {147#false} is VALID [2022-02-20 18:07:06,935 INFO L290 TraceCheckUtils]: 0: Hoare triple {146#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(38, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(21, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(30, 21);call #Ultimate.allocInit(9, 22);call #Ultimate.allocInit(25, 23);call #Ultimate.allocInit(13, 24);call #Ultimate.allocInit(7, 25);call write~init~int(44, 25, 0, 1);call write~init~int(77, 25, 1, 1);call write~init~int(101, 25, 2, 1);call write~init~int(116, 25, 3, 1);call write~init~int(104, 25, 4, 1);call write~init~int(58, 25, 5, 1);call write~init~int(0, 25, 6, 1);call #Ultimate.allocInit(5, 26);call write~init~int(67, 26, 0, 1);call write~init~int(82, 26, 1, 1);call write~init~int(73, 26, 2, 1);call write~init~int(84, 26, 3, 1);call write~init~int(0, 26, 4, 1);call #Ultimate.allocInit(3, 27);call write~init~int(79, 27, 0, 1);call write~init~int(75, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(41, 28, 0, 1);call write~init~int(0, 28, 1, 1);~__SELECTED_FEATURE_base~0 := 0;~__SELECTED_FEATURE_highWaterSensor~0 := 0;~__SELECTED_FEATURE_lowWaterSensor~0 := 0;~__SELECTED_FEATURE_methaneQuery~0 := 0;~__SELECTED_FEATURE_methaneAlarm~0 := 0;~__SELECTED_FEATURE_stopCommand~0 := 0;~__SELECTED_FEATURE_startCommand~0 := 0;~__GUIDSL_ROOT_PRODUCTION~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4; {146#true} is VALID [2022-02-20 18:07:06,935 INFO L290 TraceCheckUtils]: 1: Hoare triple {146#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret60#1, main_~retValue_acc~13#1, main_~tmp~11#1;havoc main_~retValue_acc~13#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1; {146#true} is VALID [2022-02-20 18:07:06,936 INFO L290 TraceCheckUtils]: 2: Hoare triple {146#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret47#1, select_features_#t~ret48#1, select_features_#t~ret49#1, select_features_#t~ret50#1, select_features_#t~ret51#1, select_features_#t~ret52#1;~__SELECTED_FEATURE_base~0 := 1; {146#true} is VALID [2022-02-20 18:07:06,936 INFO L272 TraceCheckUtils]: 3: Hoare triple {146#true} call select_features_#t~ret47#1 := select_one(); {146#true} is VALID [2022-02-20 18:07:06,936 INFO L290 TraceCheckUtils]: 4: Hoare triple {146#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {146#true} is VALID [2022-02-20 18:07:06,936 INFO L290 TraceCheckUtils]: 5: Hoare triple {146#true} assume true; {146#true} is VALID [2022-02-20 18:07:06,938 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {146#true} {146#true} #355#return; {146#true} is VALID [2022-02-20 18:07:06,938 INFO L290 TraceCheckUtils]: 7: Hoare triple {146#true} assume -2147483648 <= select_features_#t~ret47#1 && select_features_#t~ret47#1 <= 2147483647;~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret47#1;havoc select_features_#t~ret47#1; {146#true} is VALID [2022-02-20 18:07:06,939 INFO L272 TraceCheckUtils]: 8: Hoare triple {146#true} call select_features_#t~ret48#1 := select_one(); {146#true} is VALID [2022-02-20 18:07:06,939 INFO L290 TraceCheckUtils]: 9: Hoare triple {146#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {146#true} is VALID [2022-02-20 18:07:06,939 INFO L290 TraceCheckUtils]: 10: Hoare triple {146#true} assume true; {146#true} is VALID [2022-02-20 18:07:06,939 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {146#true} {146#true} #357#return; {146#true} is VALID [2022-02-20 18:07:06,939 INFO L290 TraceCheckUtils]: 12: Hoare triple {146#true} assume -2147483648 <= select_features_#t~ret48#1 && select_features_#t~ret48#1 <= 2147483647;~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret48#1;havoc select_features_#t~ret48#1; {146#true} is VALID [2022-02-20 18:07:06,940 INFO L272 TraceCheckUtils]: 13: Hoare triple {146#true} call select_features_#t~ret49#1 := select_one(); {146#true} is VALID [2022-02-20 18:07:06,940 INFO L290 TraceCheckUtils]: 14: Hoare triple {146#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {146#true} is VALID [2022-02-20 18:07:06,940 INFO L290 TraceCheckUtils]: 15: Hoare triple {146#true} assume true; {146#true} is VALID [2022-02-20 18:07:06,941 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {146#true} {146#true} #359#return; {146#true} is VALID [2022-02-20 18:07:06,941 INFO L290 TraceCheckUtils]: 17: Hoare triple {146#true} assume -2147483648 <= select_features_#t~ret49#1 && select_features_#t~ret49#1 <= 2147483647;~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret49#1;havoc select_features_#t~ret49#1; {146#true} is VALID [2022-02-20 18:07:06,941 INFO L272 TraceCheckUtils]: 18: Hoare triple {146#true} call select_features_#t~ret50#1 := select_one(); {146#true} is VALID [2022-02-20 18:07:06,942 INFO L290 TraceCheckUtils]: 19: Hoare triple {146#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {146#true} is VALID [2022-02-20 18:07:06,942 INFO L290 TraceCheckUtils]: 20: Hoare triple {146#true} assume true; {146#true} is VALID [2022-02-20 18:07:06,943 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {146#true} {146#true} #361#return; {146#true} is VALID [2022-02-20 18:07:06,943 INFO L290 TraceCheckUtils]: 22: Hoare triple {146#true} assume -2147483648 <= select_features_#t~ret50#1 && select_features_#t~ret50#1 <= 2147483647;~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret50#1;havoc select_features_#t~ret50#1; {146#true} is VALID [2022-02-20 18:07:06,943 INFO L272 TraceCheckUtils]: 23: Hoare triple {146#true} call select_features_#t~ret51#1 := select_one(); {146#true} is VALID [2022-02-20 18:07:06,943 INFO L290 TraceCheckUtils]: 24: Hoare triple {146#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {146#true} is VALID [2022-02-20 18:07:06,944 INFO L290 TraceCheckUtils]: 25: Hoare triple {146#true} assume true; {146#true} is VALID [2022-02-20 18:07:06,944 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {146#true} {146#true} #363#return; {146#true} is VALID [2022-02-20 18:07:06,944 INFO L290 TraceCheckUtils]: 27: Hoare triple {146#true} assume -2147483648 <= select_features_#t~ret51#1 && select_features_#t~ret51#1 <= 2147483647;~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret51#1;havoc select_features_#t~ret51#1; {146#true} is VALID [2022-02-20 18:07:06,948 INFO L272 TraceCheckUtils]: 28: Hoare triple {146#true} call select_features_#t~ret52#1 := select_one(); {146#true} is VALID [2022-02-20 18:07:06,948 INFO L290 TraceCheckUtils]: 29: Hoare triple {146#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {146#true} is VALID [2022-02-20 18:07:06,948 INFO L290 TraceCheckUtils]: 30: Hoare triple {146#true} assume true; {146#true} is VALID [2022-02-20 18:07:06,948 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {146#true} {146#true} #365#return; {146#true} is VALID [2022-02-20 18:07:06,948 INFO L290 TraceCheckUtils]: 32: Hoare triple {146#true} assume -2147483648 <= select_features_#t~ret52#1 && select_features_#t~ret52#1 <= 2147483647;~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret52#1;havoc select_features_#t~ret52#1; {146#true} is VALID [2022-02-20 18:07:06,949 INFO L290 TraceCheckUtils]: 33: Hoare triple {146#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~8#1;havoc valid_product_~retValue_acc~8#1;valid_product_~retValue_acc~8#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~8#1; {146#true} is VALID [2022-02-20 18:07:06,949 INFO L290 TraceCheckUtils]: 34: Hoare triple {146#true} main_#t~ret60#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret60#1 && main_#t~ret60#1 <= 2147483647;main_~tmp~11#1 := main_#t~ret60#1;havoc main_#t~ret60#1; {146#true} is VALID [2022-02-20 18:07:06,949 INFO L290 TraceCheckUtils]: 35: Hoare triple {146#true} assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; {146#true} is VALID [2022-02-20 18:07:06,949 INFO L290 TraceCheckUtils]: 36: Hoare triple {146#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet4#1, test_#t~nondet5#1, test_#t~nondet6#1, test_#t~nondet7#1, test_~splverifierCounter~0#1, test_~tmp~0#1, test_~tmp___0~0#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~0#1;havoc test_~tmp___0~0#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {146#true} is VALID [2022-02-20 18:07:06,950 INFO L290 TraceCheckUtils]: 37: Hoare triple {146#true} assume !true; {147#false} is VALID [2022-02-20 18:07:06,950 INFO L272 TraceCheckUtils]: 38: Hoare triple {147#false} call cleanup(); {147#false} is VALID [2022-02-20 18:07:06,950 INFO L290 TraceCheckUtils]: 39: Hoare triple {147#false} havoc ~i~0;havoc ~__cil_tmp2~0; {147#false} is VALID [2022-02-20 18:07:06,951 INFO L272 TraceCheckUtils]: 40: Hoare triple {147#false} call timeShift(); {147#false} is VALID [2022-02-20 18:07:06,951 INFO L290 TraceCheckUtils]: 41: Hoare triple {147#false} assume !(0 != ~pumpRunning~0); {147#false} is VALID [2022-02-20 18:07:06,951 INFO L290 TraceCheckUtils]: 42: Hoare triple {147#false} assume !(0 != ~systemActive~0); {147#false} is VALID [2022-02-20 18:07:06,951 INFO L290 TraceCheckUtils]: 43: Hoare triple {147#false} assume { :begin_inline___utac_acc__Specification1_spec__1 } true;havoc __utac_acc__Specification1_spec__1_#t~ret53#1, __utac_acc__Specification1_spec__1_#t~ret54#1, __utac_acc__Specification1_spec__1_~tmp~10#1, __utac_acc__Specification1_spec__1_~tmp___0~3#1;havoc __utac_acc__Specification1_spec__1_~tmp~10#1;havoc __utac_acc__Specification1_spec__1_~tmp___0~3#1; {147#false} is VALID [2022-02-20 18:07:06,952 INFO L272 TraceCheckUtils]: 44: Hoare triple {147#false} call __utac_acc__Specification1_spec__1_#t~ret53#1 := isMethaneLevelCritical(); {146#true} is VALID [2022-02-20 18:07:06,952 INFO L290 TraceCheckUtils]: 45: Hoare triple {146#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~methaneLevelCritical~0;#res := ~retValue_acc~9; {146#true} is VALID [2022-02-20 18:07:06,953 INFO L290 TraceCheckUtils]: 46: Hoare triple {146#true} assume true; {146#true} is VALID [2022-02-20 18:07:06,953 INFO L284 TraceCheckUtils]: 47: Hoare quadruple {146#true} {147#false} #353#return; {147#false} is VALID [2022-02-20 18:07:06,953 INFO L290 TraceCheckUtils]: 48: Hoare triple {147#false} assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret53#1 && __utac_acc__Specification1_spec__1_#t~ret53#1 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp~10#1 := __utac_acc__Specification1_spec__1_#t~ret53#1;havoc __utac_acc__Specification1_spec__1_#t~ret53#1; {147#false} is VALID [2022-02-20 18:07:06,954 INFO L290 TraceCheckUtils]: 49: Hoare triple {147#false} assume 0 != __utac_acc__Specification1_spec__1_~tmp~10#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~1#1;havoc isPumpRunning_~retValue_acc~1#1;isPumpRunning_~retValue_acc~1#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~1#1; {147#false} is VALID [2022-02-20 18:07:06,954 INFO L290 TraceCheckUtils]: 50: Hoare triple {147#false} __utac_acc__Specification1_spec__1_#t~ret54#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret54#1 && __utac_acc__Specification1_spec__1_#t~ret54#1 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp___0~3#1 := __utac_acc__Specification1_spec__1_#t~ret54#1;havoc __utac_acc__Specification1_spec__1_#t~ret54#1; {147#false} is VALID [2022-02-20 18:07:06,959 INFO L290 TraceCheckUtils]: 51: Hoare triple {147#false} assume 0 != __utac_acc__Specification1_spec__1_~tmp___0~3#1;assume { :begin_inline___automaton_fail } true; {147#false} is VALID [2022-02-20 18:07:06,959 INFO L290 TraceCheckUtils]: 52: Hoare triple {147#false} assume !false; {147#false} is VALID [2022-02-20 18:07:06,960 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-02-20 18:07:06,960 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:07:06,960 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [887850998] [2022-02-20 18:07:06,961 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [887850998] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:07:06,961 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:07:06,961 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-02-20 18:07:06,962 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1710480257] [2022-02-20 18:07:06,963 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:07:06,966 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 13.5) internal successors, (27), 2 states have internal predecessors, (27), 2 states have call successors, (9), 2 states have call predecessors, (9), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 53 [2022-02-20 18:07:06,968 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:07:06,971 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 2 states, 2 states have (on average 13.5) internal successors, (27), 2 states have internal predecessors, (27), 2 states have call successors, (9), 2 states have call predecessors, (9), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:07:07,012 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 43 edges. 43 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:07,013 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-02-20 18:07:07,013 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:07:07,031 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-02-20 18:07:07,031 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-02-20 18:07:07,034 INFO L87 Difference]: Start difference. First operand has 143 states, 99 states have (on average 1.3636363636363635) internal successors, (135), 115 states have internal predecessors, (135), 30 states have call successors, (30), 12 states have call predecessors, (30), 12 states have return successors, (30), 25 states have call predecessors, (30), 30 states have call successors, (30) Second operand has 2 states, 2 states have (on average 13.5) internal successors, (27), 2 states have internal predecessors, (27), 2 states have call successors, (9), 2 states have call predecessors, (9), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:07:07,146 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:07,146 INFO L93 Difference]: Finished difference Result 263 states and 365 transitions. [2022-02-20 18:07:07,146 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-02-20 18:07:07,147 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 13.5) internal successors, (27), 2 states have internal predecessors, (27), 2 states have call successors, (9), 2 states have call predecessors, (9), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 53 [2022-02-20 18:07:07,147 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:07:07,148 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2 states, 2 states have (on average 13.5) internal successors, (27), 2 states have internal predecessors, (27), 2 states have call successors, (9), 2 states have call predecessors, (9), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:07:07,160 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 365 transitions. [2022-02-20 18:07:07,161 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2 states, 2 states have (on average 13.5) internal successors, (27), 2 states have internal predecessors, (27), 2 states have call successors, (9), 2 states have call predecessors, (9), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:07:07,167 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 365 transitions. [2022-02-20 18:07:07,168 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states and 365 transitions. [2022-02-20 18:07:07,417 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 365 edges. 365 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:07,432 INFO L225 Difference]: With dead ends: 263 [2022-02-20 18:07:07,433 INFO L226 Difference]: Without dead ends: 134 [2022-02-20 18:07:07,436 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-02-20 18:07:07,438 INFO L933 BasicCegarLoop]: 189 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 189 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:07:07,438 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 189 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:07:07,448 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 134 states. [2022-02-20 18:07:07,466 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 134 to 134. [2022-02-20 18:07:07,466 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:07:07,467 INFO L82 GeneralOperation]: Start isEquivalent. First operand 134 states. Second operand has 134 states, 92 states have (on average 1.315217391304348) internal successors, (121), 107 states have internal predecessors, (121), 30 states have call successors, (30), 12 states have call predecessors, (30), 11 states have return successors, (29), 24 states have call predecessors, (29), 29 states have call successors, (29) [2022-02-20 18:07:07,468 INFO L74 IsIncluded]: Start isIncluded. First operand 134 states. Second operand has 134 states, 92 states have (on average 1.315217391304348) internal successors, (121), 107 states have internal predecessors, (121), 30 states have call successors, (30), 12 states have call predecessors, (30), 11 states have return successors, (29), 24 states have call predecessors, (29), 29 states have call successors, (29) [2022-02-20 18:07:07,469 INFO L87 Difference]: Start difference. First operand 134 states. Second operand has 134 states, 92 states have (on average 1.315217391304348) internal successors, (121), 107 states have internal predecessors, (121), 30 states have call successors, (30), 12 states have call predecessors, (30), 11 states have return successors, (29), 24 states have call predecessors, (29), 29 states have call successors, (29) [2022-02-20 18:07:07,480 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:07,480 INFO L93 Difference]: Finished difference Result 134 states and 180 transitions. [2022-02-20 18:07:07,480 INFO L276 IsEmpty]: Start isEmpty. Operand 134 states and 180 transitions. [2022-02-20 18:07:07,482 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:07,482 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:07,483 INFO L74 IsIncluded]: Start isIncluded. First operand has 134 states, 92 states have (on average 1.315217391304348) internal successors, (121), 107 states have internal predecessors, (121), 30 states have call successors, (30), 12 states have call predecessors, (30), 11 states have return successors, (29), 24 states have call predecessors, (29), 29 states have call successors, (29) Second operand 134 states. [2022-02-20 18:07:07,484 INFO L87 Difference]: Start difference. First operand has 134 states, 92 states have (on average 1.315217391304348) internal successors, (121), 107 states have internal predecessors, (121), 30 states have call successors, (30), 12 states have call predecessors, (30), 11 states have return successors, (29), 24 states have call predecessors, (29), 29 states have call successors, (29) Second operand 134 states. [2022-02-20 18:07:07,494 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:07,494 INFO L93 Difference]: Finished difference Result 134 states and 180 transitions. [2022-02-20 18:07:07,494 INFO L276 IsEmpty]: Start isEmpty. Operand 134 states and 180 transitions. [2022-02-20 18:07:07,496 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:07,496 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:07,497 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:07:07,497 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:07:07,498 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 134 states, 92 states have (on average 1.315217391304348) internal successors, (121), 107 states have internal predecessors, (121), 30 states have call successors, (30), 12 states have call predecessors, (30), 11 states have return successors, (29), 24 states have call predecessors, (29), 29 states have call successors, (29) [2022-02-20 18:07:07,503 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 134 states to 134 states and 180 transitions. [2022-02-20 18:07:07,504 INFO L78 Accepts]: Start accepts. Automaton has 134 states and 180 transitions. Word has length 53 [2022-02-20 18:07:07,504 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:07:07,504 INFO L470 AbstractCegarLoop]: Abstraction has 134 states and 180 transitions. [2022-02-20 18:07:07,505 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 13.5) internal successors, (27), 2 states have internal predecessors, (27), 2 states have call successors, (9), 2 states have call predecessors, (9), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:07:07,505 INFO L276 IsEmpty]: Start isEmpty. Operand 134 states and 180 transitions. [2022-02-20 18:07:07,507 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2022-02-20 18:07:07,507 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:07:07,507 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:07:07,507 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-02-20 18:07:07,508 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:07:07,508 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:07:07,508 INFO L85 PathProgramCache]: Analyzing trace with hash 976031723, now seen corresponding path program 1 times [2022-02-20 18:07:07,508 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:07:07,509 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2123139090] [2022-02-20 18:07:07,509 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:07:07,509 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:07:07,563 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:07,587 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-02-20 18:07:07,589 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:07,591 INFO L290 TraceCheckUtils]: 0: Hoare triple {1023#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {1023#true} is VALID [2022-02-20 18:07:07,592 INFO L290 TraceCheckUtils]: 1: Hoare triple {1023#true} assume true; {1023#true} is VALID [2022-02-20 18:07:07,592 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1023#true} {1023#true} #355#return; {1023#true} is VALID [2022-02-20 18:07:07,592 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:07:07,594 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:07,596 INFO L290 TraceCheckUtils]: 0: Hoare triple {1023#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {1023#true} is VALID [2022-02-20 18:07:07,596 INFO L290 TraceCheckUtils]: 1: Hoare triple {1023#true} assume true; {1023#true} is VALID [2022-02-20 18:07:07,596 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1023#true} {1023#true} #357#return; {1023#true} is VALID [2022-02-20 18:07:07,597 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-02-20 18:07:07,598 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:07,600 INFO L290 TraceCheckUtils]: 0: Hoare triple {1023#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {1023#true} is VALID [2022-02-20 18:07:07,600 INFO L290 TraceCheckUtils]: 1: Hoare triple {1023#true} assume true; {1023#true} is VALID [2022-02-20 18:07:07,601 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1023#true} {1023#true} #359#return; {1023#true} is VALID [2022-02-20 18:07:07,601 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:07:07,602 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:07,604 INFO L290 TraceCheckUtils]: 0: Hoare triple {1023#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {1023#true} is VALID [2022-02-20 18:07:07,604 INFO L290 TraceCheckUtils]: 1: Hoare triple {1023#true} assume true; {1023#true} is VALID [2022-02-20 18:07:07,605 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1023#true} {1023#true} #361#return; {1023#true} is VALID [2022-02-20 18:07:07,605 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-02-20 18:07:07,606 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:07,608 INFO L290 TraceCheckUtils]: 0: Hoare triple {1023#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {1023#true} is VALID [2022-02-20 18:07:07,609 INFO L290 TraceCheckUtils]: 1: Hoare triple {1023#true} assume true; {1023#true} is VALID [2022-02-20 18:07:07,609 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1023#true} {1023#true} #363#return; {1023#true} is VALID [2022-02-20 18:07:07,609 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-02-20 18:07:07,610 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:07,613 INFO L290 TraceCheckUtils]: 0: Hoare triple {1023#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {1023#true} is VALID [2022-02-20 18:07:07,613 INFO L290 TraceCheckUtils]: 1: Hoare triple {1023#true} assume true; {1023#true} is VALID [2022-02-20 18:07:07,613 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1023#true} {1023#true} #365#return; {1023#true} is VALID [2022-02-20 18:07:07,613 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2022-02-20 18:07:07,614 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:07,616 INFO L290 TraceCheckUtils]: 0: Hoare triple {1023#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~methaneLevelCritical~0;#res := ~retValue_acc~9; {1023#true} is VALID [2022-02-20 18:07:07,616 INFO L290 TraceCheckUtils]: 1: Hoare triple {1023#true} assume true; {1023#true} is VALID [2022-02-20 18:07:07,616 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1023#true} {1024#false} #353#return; {1024#false} is VALID [2022-02-20 18:07:07,617 INFO L290 TraceCheckUtils]: 0: Hoare triple {1023#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(38, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(21, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(30, 21);call #Ultimate.allocInit(9, 22);call #Ultimate.allocInit(25, 23);call #Ultimate.allocInit(13, 24);call #Ultimate.allocInit(7, 25);call write~init~int(44, 25, 0, 1);call write~init~int(77, 25, 1, 1);call write~init~int(101, 25, 2, 1);call write~init~int(116, 25, 3, 1);call write~init~int(104, 25, 4, 1);call write~init~int(58, 25, 5, 1);call write~init~int(0, 25, 6, 1);call #Ultimate.allocInit(5, 26);call write~init~int(67, 26, 0, 1);call write~init~int(82, 26, 1, 1);call write~init~int(73, 26, 2, 1);call write~init~int(84, 26, 3, 1);call write~init~int(0, 26, 4, 1);call #Ultimate.allocInit(3, 27);call write~init~int(79, 27, 0, 1);call write~init~int(75, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(41, 28, 0, 1);call write~init~int(0, 28, 1, 1);~__SELECTED_FEATURE_base~0 := 0;~__SELECTED_FEATURE_highWaterSensor~0 := 0;~__SELECTED_FEATURE_lowWaterSensor~0 := 0;~__SELECTED_FEATURE_methaneQuery~0 := 0;~__SELECTED_FEATURE_methaneAlarm~0 := 0;~__SELECTED_FEATURE_stopCommand~0 := 0;~__SELECTED_FEATURE_startCommand~0 := 0;~__GUIDSL_ROOT_PRODUCTION~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4; {1023#true} is VALID [2022-02-20 18:07:07,617 INFO L290 TraceCheckUtils]: 1: Hoare triple {1023#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret60#1, main_~retValue_acc~13#1, main_~tmp~11#1;havoc main_~retValue_acc~13#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1; {1023#true} is VALID [2022-02-20 18:07:07,617 INFO L290 TraceCheckUtils]: 2: Hoare triple {1023#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret47#1, select_features_#t~ret48#1, select_features_#t~ret49#1, select_features_#t~ret50#1, select_features_#t~ret51#1, select_features_#t~ret52#1;~__SELECTED_FEATURE_base~0 := 1; {1023#true} is VALID [2022-02-20 18:07:07,617 INFO L272 TraceCheckUtils]: 3: Hoare triple {1023#true} call select_features_#t~ret47#1 := select_one(); {1023#true} is VALID [2022-02-20 18:07:07,617 INFO L290 TraceCheckUtils]: 4: Hoare triple {1023#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {1023#true} is VALID [2022-02-20 18:07:07,617 INFO L290 TraceCheckUtils]: 5: Hoare triple {1023#true} assume true; {1023#true} is VALID [2022-02-20 18:07:07,618 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {1023#true} {1023#true} #355#return; {1023#true} is VALID [2022-02-20 18:07:07,618 INFO L290 TraceCheckUtils]: 7: Hoare triple {1023#true} assume -2147483648 <= select_features_#t~ret47#1 && select_features_#t~ret47#1 <= 2147483647;~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret47#1;havoc select_features_#t~ret47#1; {1023#true} is VALID [2022-02-20 18:07:07,618 INFO L272 TraceCheckUtils]: 8: Hoare triple {1023#true} call select_features_#t~ret48#1 := select_one(); {1023#true} is VALID [2022-02-20 18:07:07,618 INFO L290 TraceCheckUtils]: 9: Hoare triple {1023#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {1023#true} is VALID [2022-02-20 18:07:07,618 INFO L290 TraceCheckUtils]: 10: Hoare triple {1023#true} assume true; {1023#true} is VALID [2022-02-20 18:07:07,618 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {1023#true} {1023#true} #357#return; {1023#true} is VALID [2022-02-20 18:07:07,619 INFO L290 TraceCheckUtils]: 12: Hoare triple {1023#true} assume -2147483648 <= select_features_#t~ret48#1 && select_features_#t~ret48#1 <= 2147483647;~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret48#1;havoc select_features_#t~ret48#1; {1023#true} is VALID [2022-02-20 18:07:07,619 INFO L272 TraceCheckUtils]: 13: Hoare triple {1023#true} call select_features_#t~ret49#1 := select_one(); {1023#true} is VALID [2022-02-20 18:07:07,619 INFO L290 TraceCheckUtils]: 14: Hoare triple {1023#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {1023#true} is VALID [2022-02-20 18:07:07,619 INFO L290 TraceCheckUtils]: 15: Hoare triple {1023#true} assume true; {1023#true} is VALID [2022-02-20 18:07:07,619 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {1023#true} {1023#true} #359#return; {1023#true} is VALID [2022-02-20 18:07:07,620 INFO L290 TraceCheckUtils]: 17: Hoare triple {1023#true} assume -2147483648 <= select_features_#t~ret49#1 && select_features_#t~ret49#1 <= 2147483647;~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret49#1;havoc select_features_#t~ret49#1; {1023#true} is VALID [2022-02-20 18:07:07,620 INFO L272 TraceCheckUtils]: 18: Hoare triple {1023#true} call select_features_#t~ret50#1 := select_one(); {1023#true} is VALID [2022-02-20 18:07:07,620 INFO L290 TraceCheckUtils]: 19: Hoare triple {1023#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {1023#true} is VALID [2022-02-20 18:07:07,620 INFO L290 TraceCheckUtils]: 20: Hoare triple {1023#true} assume true; {1023#true} is VALID [2022-02-20 18:07:07,620 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {1023#true} {1023#true} #361#return; {1023#true} is VALID [2022-02-20 18:07:07,620 INFO L290 TraceCheckUtils]: 22: Hoare triple {1023#true} assume -2147483648 <= select_features_#t~ret50#1 && select_features_#t~ret50#1 <= 2147483647;~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret50#1;havoc select_features_#t~ret50#1; {1023#true} is VALID [2022-02-20 18:07:07,621 INFO L272 TraceCheckUtils]: 23: Hoare triple {1023#true} call select_features_#t~ret51#1 := select_one(); {1023#true} is VALID [2022-02-20 18:07:07,621 INFO L290 TraceCheckUtils]: 24: Hoare triple {1023#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {1023#true} is VALID [2022-02-20 18:07:07,621 INFO L290 TraceCheckUtils]: 25: Hoare triple {1023#true} assume true; {1023#true} is VALID [2022-02-20 18:07:07,621 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {1023#true} {1023#true} #363#return; {1023#true} is VALID [2022-02-20 18:07:07,621 INFO L290 TraceCheckUtils]: 27: Hoare triple {1023#true} assume -2147483648 <= select_features_#t~ret51#1 && select_features_#t~ret51#1 <= 2147483647;~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret51#1;havoc select_features_#t~ret51#1; {1023#true} is VALID [2022-02-20 18:07:07,621 INFO L272 TraceCheckUtils]: 28: Hoare triple {1023#true} call select_features_#t~ret52#1 := select_one(); {1023#true} is VALID [2022-02-20 18:07:07,622 INFO L290 TraceCheckUtils]: 29: Hoare triple {1023#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {1023#true} is VALID [2022-02-20 18:07:07,622 INFO L290 TraceCheckUtils]: 30: Hoare triple {1023#true} assume true; {1023#true} is VALID [2022-02-20 18:07:07,622 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {1023#true} {1023#true} #365#return; {1023#true} is VALID [2022-02-20 18:07:07,622 INFO L290 TraceCheckUtils]: 32: Hoare triple {1023#true} assume -2147483648 <= select_features_#t~ret52#1 && select_features_#t~ret52#1 <= 2147483647;~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret52#1;havoc select_features_#t~ret52#1; {1023#true} is VALID [2022-02-20 18:07:07,622 INFO L290 TraceCheckUtils]: 33: Hoare triple {1023#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~8#1;havoc valid_product_~retValue_acc~8#1;valid_product_~retValue_acc~8#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~8#1; {1023#true} is VALID [2022-02-20 18:07:07,622 INFO L290 TraceCheckUtils]: 34: Hoare triple {1023#true} main_#t~ret60#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret60#1 && main_#t~ret60#1 <= 2147483647;main_~tmp~11#1 := main_#t~ret60#1;havoc main_#t~ret60#1; {1023#true} is VALID [2022-02-20 18:07:07,623 INFO L290 TraceCheckUtils]: 35: Hoare triple {1023#true} assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; {1023#true} is VALID [2022-02-20 18:07:07,623 INFO L290 TraceCheckUtils]: 36: Hoare triple {1023#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet4#1, test_#t~nondet5#1, test_#t~nondet6#1, test_#t~nondet7#1, test_~splverifierCounter~0#1, test_~tmp~0#1, test_~tmp___0~0#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~0#1;havoc test_~tmp___0~0#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {1043#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} is VALID [2022-02-20 18:07:07,624 INFO L290 TraceCheckUtils]: 37: Hoare triple {1043#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} assume !false; {1043#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} is VALID [2022-02-20 18:07:07,624 INFO L290 TraceCheckUtils]: 38: Hoare triple {1043#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} assume !(test_~splverifierCounter~0#1 < 4); {1024#false} is VALID [2022-02-20 18:07:07,624 INFO L272 TraceCheckUtils]: 39: Hoare triple {1024#false} call cleanup(); {1024#false} is VALID [2022-02-20 18:07:07,624 INFO L290 TraceCheckUtils]: 40: Hoare triple {1024#false} havoc ~i~0;havoc ~__cil_tmp2~0; {1024#false} is VALID [2022-02-20 18:07:07,625 INFO L272 TraceCheckUtils]: 41: Hoare triple {1024#false} call timeShift(); {1024#false} is VALID [2022-02-20 18:07:07,625 INFO L290 TraceCheckUtils]: 42: Hoare triple {1024#false} assume !(0 != ~pumpRunning~0); {1024#false} is VALID [2022-02-20 18:07:07,625 INFO L290 TraceCheckUtils]: 43: Hoare triple {1024#false} assume !(0 != ~systemActive~0); {1024#false} is VALID [2022-02-20 18:07:07,625 INFO L290 TraceCheckUtils]: 44: Hoare triple {1024#false} assume { :begin_inline___utac_acc__Specification1_spec__1 } true;havoc __utac_acc__Specification1_spec__1_#t~ret53#1, __utac_acc__Specification1_spec__1_#t~ret54#1, __utac_acc__Specification1_spec__1_~tmp~10#1, __utac_acc__Specification1_spec__1_~tmp___0~3#1;havoc __utac_acc__Specification1_spec__1_~tmp~10#1;havoc __utac_acc__Specification1_spec__1_~tmp___0~3#1; {1024#false} is VALID [2022-02-20 18:07:07,625 INFO L272 TraceCheckUtils]: 45: Hoare triple {1024#false} call __utac_acc__Specification1_spec__1_#t~ret53#1 := isMethaneLevelCritical(); {1023#true} is VALID [2022-02-20 18:07:07,625 INFO L290 TraceCheckUtils]: 46: Hoare triple {1023#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~methaneLevelCritical~0;#res := ~retValue_acc~9; {1023#true} is VALID [2022-02-20 18:07:07,626 INFO L290 TraceCheckUtils]: 47: Hoare triple {1023#true} assume true; {1023#true} is VALID [2022-02-20 18:07:07,626 INFO L284 TraceCheckUtils]: 48: Hoare quadruple {1023#true} {1024#false} #353#return; {1024#false} is VALID [2022-02-20 18:07:07,626 INFO L290 TraceCheckUtils]: 49: Hoare triple {1024#false} assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret53#1 && __utac_acc__Specification1_spec__1_#t~ret53#1 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp~10#1 := __utac_acc__Specification1_spec__1_#t~ret53#1;havoc __utac_acc__Specification1_spec__1_#t~ret53#1; {1024#false} is VALID [2022-02-20 18:07:07,626 INFO L290 TraceCheckUtils]: 50: Hoare triple {1024#false} assume 0 != __utac_acc__Specification1_spec__1_~tmp~10#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~1#1;havoc isPumpRunning_~retValue_acc~1#1;isPumpRunning_~retValue_acc~1#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~1#1; {1024#false} is VALID [2022-02-20 18:07:07,626 INFO L290 TraceCheckUtils]: 51: Hoare triple {1024#false} __utac_acc__Specification1_spec__1_#t~ret54#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret54#1 && __utac_acc__Specification1_spec__1_#t~ret54#1 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp___0~3#1 := __utac_acc__Specification1_spec__1_#t~ret54#1;havoc __utac_acc__Specification1_spec__1_#t~ret54#1; {1024#false} is VALID [2022-02-20 18:07:07,626 INFO L290 TraceCheckUtils]: 52: Hoare triple {1024#false} assume 0 != __utac_acc__Specification1_spec__1_~tmp___0~3#1;assume { :begin_inline___automaton_fail } true; {1024#false} is VALID [2022-02-20 18:07:07,627 INFO L290 TraceCheckUtils]: 53: Hoare triple {1024#false} assume !false; {1024#false} is VALID [2022-02-20 18:07:07,627 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-02-20 18:07:07,627 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:07:07,627 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2123139090] [2022-02-20 18:07:07,628 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2123139090] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:07:07,628 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:07:07,628 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-02-20 18:07:07,628 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1787337933] [2022-02-20 18:07:07,628 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:07:07,630 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (9), 2 states have call predecessors, (9), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 54 [2022-02-20 18:07:07,630 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:07:07,630 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (9), 2 states have call predecessors, (9), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:07:07,658 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 44 edges. 44 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:07,658 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-02-20 18:07:07,659 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:07:07,659 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-02-20 18:07:07,659 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:07:07,660 INFO L87 Difference]: Start difference. First operand 134 states and 180 transitions. Second operand has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (9), 2 states have call predecessors, (9), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:07:07,799 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:07,799 INFO L93 Difference]: Finished difference Result 212 states and 285 transitions. [2022-02-20 18:07:07,799 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-02-20 18:07:07,799 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (9), 2 states have call predecessors, (9), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 54 [2022-02-20 18:07:07,800 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:07:07,800 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (9), 2 states have call predecessors, (9), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:07:07,805 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 285 transitions. [2022-02-20 18:07:07,805 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (9), 2 states have call predecessors, (9), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:07:07,810 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 285 transitions. [2022-02-20 18:07:07,810 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 285 transitions. [2022-02-20 18:07:07,991 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 285 edges. 285 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:07,995 INFO L225 Difference]: With dead ends: 212 [2022-02-20 18:07:07,995 INFO L226 Difference]: Without dead ends: 125 [2022-02-20 18:07:07,996 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:07:07,997 INFO L933 BasicCegarLoop]: 167 mSDtfsCounter, 21 mSDsluCounter, 141 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 25 SdHoareTripleChecker+Valid, 308 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:07:07,998 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [25 Valid, 308 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:07:07,999 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 125 states. [2022-02-20 18:07:08,006 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 125 to 125. [2022-02-20 18:07:08,006 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:07:08,007 INFO L82 GeneralOperation]: Start isEquivalent. First operand 125 states. Second operand has 125 states, 86 states have (on average 1.3255813953488371) internal successors, (114), 101 states have internal predecessors, (114), 27 states have call successors, (27), 11 states have call predecessors, (27), 11 states have return successors, (27), 22 states have call predecessors, (27), 27 states have call successors, (27) [2022-02-20 18:07:08,008 INFO L74 IsIncluded]: Start isIncluded. First operand 125 states. Second operand has 125 states, 86 states have (on average 1.3255813953488371) internal successors, (114), 101 states have internal predecessors, (114), 27 states have call successors, (27), 11 states have call predecessors, (27), 11 states have return successors, (27), 22 states have call predecessors, (27), 27 states have call successors, (27) [2022-02-20 18:07:08,008 INFO L87 Difference]: Start difference. First operand 125 states. Second operand has 125 states, 86 states have (on average 1.3255813953488371) internal successors, (114), 101 states have internal predecessors, (114), 27 states have call successors, (27), 11 states have call predecessors, (27), 11 states have return successors, (27), 22 states have call predecessors, (27), 27 states have call successors, (27) [2022-02-20 18:07:08,012 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:08,013 INFO L93 Difference]: Finished difference Result 125 states and 168 transitions. [2022-02-20 18:07:08,013 INFO L276 IsEmpty]: Start isEmpty. Operand 125 states and 168 transitions. [2022-02-20 18:07:08,014 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:08,014 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:08,015 INFO L74 IsIncluded]: Start isIncluded. First operand has 125 states, 86 states have (on average 1.3255813953488371) internal successors, (114), 101 states have internal predecessors, (114), 27 states have call successors, (27), 11 states have call predecessors, (27), 11 states have return successors, (27), 22 states have call predecessors, (27), 27 states have call successors, (27) Second operand 125 states. [2022-02-20 18:07:08,015 INFO L87 Difference]: Start difference. First operand has 125 states, 86 states have (on average 1.3255813953488371) internal successors, (114), 101 states have internal predecessors, (114), 27 states have call successors, (27), 11 states have call predecessors, (27), 11 states have return successors, (27), 22 states have call predecessors, (27), 27 states have call successors, (27) Second operand 125 states. [2022-02-20 18:07:08,019 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:08,019 INFO L93 Difference]: Finished difference Result 125 states and 168 transitions. [2022-02-20 18:07:08,020 INFO L276 IsEmpty]: Start isEmpty. Operand 125 states and 168 transitions. [2022-02-20 18:07:08,021 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:08,021 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:08,021 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:07:08,021 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:07:08,022 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 125 states, 86 states have (on average 1.3255813953488371) internal successors, (114), 101 states have internal predecessors, (114), 27 states have call successors, (27), 11 states have call predecessors, (27), 11 states have return successors, (27), 22 states have call predecessors, (27), 27 states have call successors, (27) [2022-02-20 18:07:08,030 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 125 states to 125 states and 168 transitions. [2022-02-20 18:07:08,030 INFO L78 Accepts]: Start accepts. Automaton has 125 states and 168 transitions. Word has length 54 [2022-02-20 18:07:08,030 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:07:08,031 INFO L470 AbstractCegarLoop]: Abstraction has 125 states and 168 transitions. [2022-02-20 18:07:08,031 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (9), 2 states have call predecessors, (9), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:07:08,031 INFO L276 IsEmpty]: Start isEmpty. Operand 125 states and 168 transitions. [2022-02-20 18:07:08,032 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2022-02-20 18:07:08,033 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:07:08,033 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:07:08,033 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-02-20 18:07:08,033 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:07:08,034 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:07:08,034 INFO L85 PathProgramCache]: Analyzing trace with hash 471750439, now seen corresponding path program 1 times [2022-02-20 18:07:08,034 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:07:08,034 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [626491834] [2022-02-20 18:07:08,034 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:07:08,034 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:07:08,060 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:08,100 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-02-20 18:07:08,103 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:08,105 INFO L290 TraceCheckUtils]: 0: Hoare triple {1795#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {1795#true} is VALID [2022-02-20 18:07:08,106 INFO L290 TraceCheckUtils]: 1: Hoare triple {1795#true} assume true; {1795#true} is VALID [2022-02-20 18:07:08,106 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1795#true} {1798#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} #355#return; {1798#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} is VALID [2022-02-20 18:07:08,106 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:07:08,108 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:08,111 INFO L290 TraceCheckUtils]: 0: Hoare triple {1795#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {1795#true} is VALID [2022-02-20 18:07:08,111 INFO L290 TraceCheckUtils]: 1: Hoare triple {1795#true} assume true; {1795#true} is VALID [2022-02-20 18:07:08,111 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1795#true} {1798#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} #357#return; {1798#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} is VALID [2022-02-20 18:07:08,112 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-02-20 18:07:08,113 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:08,116 INFO L290 TraceCheckUtils]: 0: Hoare triple {1795#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {1795#true} is VALID [2022-02-20 18:07:08,116 INFO L290 TraceCheckUtils]: 1: Hoare triple {1795#true} assume true; {1795#true} is VALID [2022-02-20 18:07:08,117 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1795#true} {1798#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} #359#return; {1798#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} is VALID [2022-02-20 18:07:08,117 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:07:08,119 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:08,121 INFO L290 TraceCheckUtils]: 0: Hoare triple {1795#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {1795#true} is VALID [2022-02-20 18:07:08,121 INFO L290 TraceCheckUtils]: 1: Hoare triple {1795#true} assume true; {1795#true} is VALID [2022-02-20 18:07:08,122 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1795#true} {1798#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} #361#return; {1798#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} is VALID [2022-02-20 18:07:08,122 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-02-20 18:07:08,124 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:08,126 INFO L290 TraceCheckUtils]: 0: Hoare triple {1795#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {1795#true} is VALID [2022-02-20 18:07:08,126 INFO L290 TraceCheckUtils]: 1: Hoare triple {1795#true} assume true; {1795#true} is VALID [2022-02-20 18:07:08,127 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1795#true} {1798#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} #363#return; {1798#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} is VALID [2022-02-20 18:07:08,127 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-02-20 18:07:08,129 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:08,131 INFO L290 TraceCheckUtils]: 0: Hoare triple {1795#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {1795#true} is VALID [2022-02-20 18:07:08,131 INFO L290 TraceCheckUtils]: 1: Hoare triple {1795#true} assume true; {1795#true} is VALID [2022-02-20 18:07:08,132 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1795#true} {1798#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} #365#return; {1798#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} is VALID [2022-02-20 18:07:08,132 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-02-20 18:07:08,133 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:08,134 INFO L290 TraceCheckUtils]: 0: Hoare triple {1795#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~methaneLevelCritical~0;#res := ~retValue_acc~9; {1795#true} is VALID [2022-02-20 18:07:08,135 INFO L290 TraceCheckUtils]: 1: Hoare triple {1795#true} assume true; {1795#true} is VALID [2022-02-20 18:07:08,135 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1795#true} {1796#false} #353#return; {1796#false} is VALID [2022-02-20 18:07:08,137 INFO L290 TraceCheckUtils]: 0: Hoare triple {1795#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(38, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(21, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(30, 21);call #Ultimate.allocInit(9, 22);call #Ultimate.allocInit(25, 23);call #Ultimate.allocInit(13, 24);call #Ultimate.allocInit(7, 25);call write~init~int(44, 25, 0, 1);call write~init~int(77, 25, 1, 1);call write~init~int(101, 25, 2, 1);call write~init~int(116, 25, 3, 1);call write~init~int(104, 25, 4, 1);call write~init~int(58, 25, 5, 1);call write~init~int(0, 25, 6, 1);call #Ultimate.allocInit(5, 26);call write~init~int(67, 26, 0, 1);call write~init~int(82, 26, 1, 1);call write~init~int(73, 26, 2, 1);call write~init~int(84, 26, 3, 1);call write~init~int(0, 26, 4, 1);call #Ultimate.allocInit(3, 27);call write~init~int(79, 27, 0, 1);call write~init~int(75, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(41, 28, 0, 1);call write~init~int(0, 28, 1, 1);~__SELECTED_FEATURE_base~0 := 0;~__SELECTED_FEATURE_highWaterSensor~0 := 0;~__SELECTED_FEATURE_lowWaterSensor~0 := 0;~__SELECTED_FEATURE_methaneQuery~0 := 0;~__SELECTED_FEATURE_methaneAlarm~0 := 0;~__SELECTED_FEATURE_stopCommand~0 := 0;~__SELECTED_FEATURE_startCommand~0 := 0;~__GUIDSL_ROOT_PRODUCTION~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4; {1797#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:08,137 INFO L290 TraceCheckUtils]: 1: Hoare triple {1797#(= 1 ~systemActive~0)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret60#1, main_~retValue_acc~13#1, main_~tmp~11#1;havoc main_~retValue_acc~13#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1; {1797#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:08,137 INFO L290 TraceCheckUtils]: 2: Hoare triple {1797#(= 1 ~systemActive~0)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret47#1, select_features_#t~ret48#1, select_features_#t~ret49#1, select_features_#t~ret50#1, select_features_#t~ret51#1, select_features_#t~ret52#1;~__SELECTED_FEATURE_base~0 := 1; {1798#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} is VALID [2022-02-20 18:07:08,138 INFO L272 TraceCheckUtils]: 3: Hoare triple {1798#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} call select_features_#t~ret47#1 := select_one(); {1795#true} is VALID [2022-02-20 18:07:08,138 INFO L290 TraceCheckUtils]: 4: Hoare triple {1795#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {1795#true} is VALID [2022-02-20 18:07:08,138 INFO L290 TraceCheckUtils]: 5: Hoare triple {1795#true} assume true; {1795#true} is VALID [2022-02-20 18:07:08,138 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {1795#true} {1798#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} #355#return; {1798#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} is VALID [2022-02-20 18:07:08,139 INFO L290 TraceCheckUtils]: 7: Hoare triple {1798#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} assume -2147483648 <= select_features_#t~ret47#1 && select_features_#t~ret47#1 <= 2147483647;~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret47#1;havoc select_features_#t~ret47#1; {1798#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} is VALID [2022-02-20 18:07:08,139 INFO L272 TraceCheckUtils]: 8: Hoare triple {1798#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} call select_features_#t~ret48#1 := select_one(); {1795#true} is VALID [2022-02-20 18:07:08,139 INFO L290 TraceCheckUtils]: 9: Hoare triple {1795#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {1795#true} is VALID [2022-02-20 18:07:08,139 INFO L290 TraceCheckUtils]: 10: Hoare triple {1795#true} assume true; {1795#true} is VALID [2022-02-20 18:07:08,140 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {1795#true} {1798#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} #357#return; {1798#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} is VALID [2022-02-20 18:07:08,140 INFO L290 TraceCheckUtils]: 12: Hoare triple {1798#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} assume -2147483648 <= select_features_#t~ret48#1 && select_features_#t~ret48#1 <= 2147483647;~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret48#1;havoc select_features_#t~ret48#1; {1798#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} is VALID [2022-02-20 18:07:08,140 INFO L272 TraceCheckUtils]: 13: Hoare triple {1798#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} call select_features_#t~ret49#1 := select_one(); {1795#true} is VALID [2022-02-20 18:07:08,140 INFO L290 TraceCheckUtils]: 14: Hoare triple {1795#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {1795#true} is VALID [2022-02-20 18:07:08,141 INFO L290 TraceCheckUtils]: 15: Hoare triple {1795#true} assume true; {1795#true} is VALID [2022-02-20 18:07:08,141 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {1795#true} {1798#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} #359#return; {1798#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} is VALID [2022-02-20 18:07:08,141 INFO L290 TraceCheckUtils]: 17: Hoare triple {1798#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} assume -2147483648 <= select_features_#t~ret49#1 && select_features_#t~ret49#1 <= 2147483647;~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret49#1;havoc select_features_#t~ret49#1; {1798#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} is VALID [2022-02-20 18:07:08,142 INFO L272 TraceCheckUtils]: 18: Hoare triple {1798#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} call select_features_#t~ret50#1 := select_one(); {1795#true} is VALID [2022-02-20 18:07:08,142 INFO L290 TraceCheckUtils]: 19: Hoare triple {1795#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {1795#true} is VALID [2022-02-20 18:07:08,142 INFO L290 TraceCheckUtils]: 20: Hoare triple {1795#true} assume true; {1795#true} is VALID [2022-02-20 18:07:08,143 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {1795#true} {1798#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} #361#return; {1798#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} is VALID [2022-02-20 18:07:08,143 INFO L290 TraceCheckUtils]: 22: Hoare triple {1798#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} assume -2147483648 <= select_features_#t~ret50#1 && select_features_#t~ret50#1 <= 2147483647;~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret50#1;havoc select_features_#t~ret50#1; {1798#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} is VALID [2022-02-20 18:07:08,143 INFO L272 TraceCheckUtils]: 23: Hoare triple {1798#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} call select_features_#t~ret51#1 := select_one(); {1795#true} is VALID [2022-02-20 18:07:08,143 INFO L290 TraceCheckUtils]: 24: Hoare triple {1795#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {1795#true} is VALID [2022-02-20 18:07:08,143 INFO L290 TraceCheckUtils]: 25: Hoare triple {1795#true} assume true; {1795#true} is VALID [2022-02-20 18:07:08,144 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {1795#true} {1798#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} #363#return; {1798#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} is VALID [2022-02-20 18:07:08,144 INFO L290 TraceCheckUtils]: 27: Hoare triple {1798#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} assume -2147483648 <= select_features_#t~ret51#1 && select_features_#t~ret51#1 <= 2147483647;~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret51#1;havoc select_features_#t~ret51#1; {1798#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} is VALID [2022-02-20 18:07:08,144 INFO L272 TraceCheckUtils]: 28: Hoare triple {1798#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} call select_features_#t~ret52#1 := select_one(); {1795#true} is VALID [2022-02-20 18:07:08,145 INFO L290 TraceCheckUtils]: 29: Hoare triple {1795#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {1795#true} is VALID [2022-02-20 18:07:08,145 INFO L290 TraceCheckUtils]: 30: Hoare triple {1795#true} assume true; {1795#true} is VALID [2022-02-20 18:07:08,145 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {1795#true} {1798#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} #365#return; {1798#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} is VALID [2022-02-20 18:07:08,146 INFO L290 TraceCheckUtils]: 32: Hoare triple {1798#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} assume -2147483648 <= select_features_#t~ret52#1 && select_features_#t~ret52#1 <= 2147483647;~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret52#1;havoc select_features_#t~ret52#1; {1798#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} is VALID [2022-02-20 18:07:08,146 INFO L290 TraceCheckUtils]: 33: Hoare triple {1798#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~8#1;havoc valid_product_~retValue_acc~8#1;valid_product_~retValue_acc~8#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~8#1; {1817#(= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)} is VALID [2022-02-20 18:07:08,146 INFO L290 TraceCheckUtils]: 34: Hoare triple {1817#(= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)} main_#t~ret60#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret60#1 && main_#t~ret60#1 <= 2147483647;main_~tmp~11#1 := main_#t~ret60#1;havoc main_#t~ret60#1; {1818#(= |ULTIMATE.start_main_~tmp~11#1| ~systemActive~0)} is VALID [2022-02-20 18:07:08,147 INFO L290 TraceCheckUtils]: 35: Hoare triple {1818#(= |ULTIMATE.start_main_~tmp~11#1| ~systemActive~0)} assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; {1819#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:07:08,147 INFO L290 TraceCheckUtils]: 36: Hoare triple {1819#(not (= 0 ~systemActive~0))} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet4#1, test_#t~nondet5#1, test_#t~nondet6#1, test_#t~nondet7#1, test_~splverifierCounter~0#1, test_~tmp~0#1, test_~tmp___0~0#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~0#1;havoc test_~tmp___0~0#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {1819#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:07:08,148 INFO L290 TraceCheckUtils]: 37: Hoare triple {1819#(not (= 0 ~systemActive~0))} assume !false; {1819#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:07:08,148 INFO L290 TraceCheckUtils]: 38: Hoare triple {1819#(not (= 0 ~systemActive~0))} assume test_~splverifierCounter~0#1 < 4; {1819#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:07:08,148 INFO L290 TraceCheckUtils]: 39: Hoare triple {1819#(not (= 0 ~systemActive~0))} assume -2147483648 <= test_#t~nondet4#1 && test_#t~nondet4#1 <= 2147483647;test_~tmp~0#1 := test_#t~nondet4#1;havoc test_#t~nondet4#1; {1819#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:07:08,149 INFO L290 TraceCheckUtils]: 40: Hoare triple {1819#(not (= 0 ~systemActive~0))} assume !(0 != test_~tmp~0#1); {1819#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:07:08,149 INFO L290 TraceCheckUtils]: 41: Hoare triple {1819#(not (= 0 ~systemActive~0))} assume -2147483648 <= test_#t~nondet5#1 && test_#t~nondet5#1 <= 2147483647;test_~tmp___0~0#1 := test_#t~nondet5#1;havoc test_#t~nondet5#1; {1819#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:07:08,149 INFO L290 TraceCheckUtils]: 42: Hoare triple {1819#(not (= 0 ~systemActive~0))} assume !(0 != test_~tmp___0~0#1); {1819#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:07:08,150 INFO L290 TraceCheckUtils]: 43: Hoare triple {1819#(not (= 0 ~systemActive~0))} assume -2147483648 <= test_#t~nondet6#1 && test_#t~nondet6#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet6#1;havoc test_#t~nondet6#1; {1819#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:07:08,150 INFO L290 TraceCheckUtils]: 44: Hoare triple {1819#(not (= 0 ~systemActive~0))} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet7#1 && test_#t~nondet7#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet7#1;havoc test_#t~nondet7#1; {1819#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:07:08,151 INFO L290 TraceCheckUtils]: 45: Hoare triple {1819#(not (= 0 ~systemActive~0))} assume !(0 != test_~tmp___1~0#1); {1819#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:07:08,151 INFO L272 TraceCheckUtils]: 46: Hoare triple {1819#(not (= 0 ~systemActive~0))} call timeShift(); {1819#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:07:08,151 INFO L290 TraceCheckUtils]: 47: Hoare triple {1819#(not (= 0 ~systemActive~0))} assume !(0 != ~pumpRunning~0); {1819#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:07:08,152 INFO L290 TraceCheckUtils]: 48: Hoare triple {1819#(not (= 0 ~systemActive~0))} assume !(0 != ~systemActive~0); {1796#false} is VALID [2022-02-20 18:07:08,152 INFO L290 TraceCheckUtils]: 49: Hoare triple {1796#false} assume { :begin_inline___utac_acc__Specification1_spec__1 } true;havoc __utac_acc__Specification1_spec__1_#t~ret53#1, __utac_acc__Specification1_spec__1_#t~ret54#1, __utac_acc__Specification1_spec__1_~tmp~10#1, __utac_acc__Specification1_spec__1_~tmp___0~3#1;havoc __utac_acc__Specification1_spec__1_~tmp~10#1;havoc __utac_acc__Specification1_spec__1_~tmp___0~3#1; {1796#false} is VALID [2022-02-20 18:07:08,152 INFO L272 TraceCheckUtils]: 50: Hoare triple {1796#false} call __utac_acc__Specification1_spec__1_#t~ret53#1 := isMethaneLevelCritical(); {1795#true} is VALID [2022-02-20 18:07:08,152 INFO L290 TraceCheckUtils]: 51: Hoare triple {1795#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~methaneLevelCritical~0;#res := ~retValue_acc~9; {1795#true} is VALID [2022-02-20 18:07:08,152 INFO L290 TraceCheckUtils]: 52: Hoare triple {1795#true} assume true; {1795#true} is VALID [2022-02-20 18:07:08,152 INFO L284 TraceCheckUtils]: 53: Hoare quadruple {1795#true} {1796#false} #353#return; {1796#false} is VALID [2022-02-20 18:07:08,153 INFO L290 TraceCheckUtils]: 54: Hoare triple {1796#false} assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret53#1 && __utac_acc__Specification1_spec__1_#t~ret53#1 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp~10#1 := __utac_acc__Specification1_spec__1_#t~ret53#1;havoc __utac_acc__Specification1_spec__1_#t~ret53#1; {1796#false} is VALID [2022-02-20 18:07:08,153 INFO L290 TraceCheckUtils]: 55: Hoare triple {1796#false} assume 0 != __utac_acc__Specification1_spec__1_~tmp~10#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~1#1;havoc isPumpRunning_~retValue_acc~1#1;isPumpRunning_~retValue_acc~1#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~1#1; {1796#false} is VALID [2022-02-20 18:07:08,153 INFO L290 TraceCheckUtils]: 56: Hoare triple {1796#false} __utac_acc__Specification1_spec__1_#t~ret54#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret54#1 && __utac_acc__Specification1_spec__1_#t~ret54#1 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp___0~3#1 := __utac_acc__Specification1_spec__1_#t~ret54#1;havoc __utac_acc__Specification1_spec__1_#t~ret54#1; {1796#false} is VALID [2022-02-20 18:07:08,153 INFO L290 TraceCheckUtils]: 57: Hoare triple {1796#false} assume 0 != __utac_acc__Specification1_spec__1_~tmp___0~3#1;assume { :begin_inline___automaton_fail } true; {1796#false} is VALID [2022-02-20 18:07:08,153 INFO L290 TraceCheckUtils]: 58: Hoare triple {1796#false} assume !false; {1796#false} is VALID [2022-02-20 18:07:08,154 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-02-20 18:07:08,154 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:07:08,154 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [626491834] [2022-02-20 18:07:08,163 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [626491834] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:07:08,163 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:07:08,163 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-02-20 18:07:08,164 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2096581454] [2022-02-20 18:07:08,164 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:07:08,164 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 4.857142857142857) internal successors, (34), 7 states have internal predecessors, (34), 3 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 59 [2022-02-20 18:07:08,165 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:07:08,165 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 7 states, 7 states have (on average 4.857142857142857) internal successors, (34), 7 states have internal predecessors, (34), 3 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:07:08,196 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 49 edges. 49 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:08,196 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-02-20 18:07:08,197 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:07:08,197 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-02-20 18:07:08,197 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=30, Unknown=0, NotChecked=0, Total=42 [2022-02-20 18:07:08,198 INFO L87 Difference]: Start difference. First operand 125 states and 168 transitions. Second operand has 7 states, 7 states have (on average 4.857142857142857) internal successors, (34), 7 states have internal predecessors, (34), 3 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:07:09,299 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:09,299 INFO L93 Difference]: Finished difference Result 475 states and 649 transitions. [2022-02-20 18:07:09,299 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-02-20 18:07:09,299 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 4.857142857142857) internal successors, (34), 7 states have internal predecessors, (34), 3 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 59 [2022-02-20 18:07:09,315 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:07:09,316 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 4.857142857142857) internal successors, (34), 7 states have internal predecessors, (34), 3 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:07:09,337 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 649 transitions. [2022-02-20 18:07:09,337 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 4.857142857142857) internal successors, (34), 7 states have internal predecessors, (34), 3 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:07:09,346 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 649 transitions. [2022-02-20 18:07:09,346 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 649 transitions. [2022-02-20 18:07:09,659 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 649 edges. 649 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:09,671 INFO L225 Difference]: With dead ends: 475 [2022-02-20 18:07:09,684 INFO L226 Difference]: Without dead ends: 372 [2022-02-20 18:07:09,685 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=33, Invalid=57, Unknown=0, NotChecked=0, Total=90 [2022-02-20 18:07:09,686 INFO L933 BasicCegarLoop]: 219 mSDtfsCounter, 515 mSDsluCounter, 747 mSDsCounter, 0 mSdLazyCounter, 351 mSolverCounterSat, 117 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 515 SdHoareTripleChecker+Valid, 966 SdHoareTripleChecker+Invalid, 468 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 117 IncrementalHoareTripleChecker+Valid, 351 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-02-20 18:07:09,686 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [515 Valid, 966 Invalid, 468 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [117 Valid, 351 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-02-20 18:07:09,687 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 372 states. [2022-02-20 18:07:09,703 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 372 to 264. [2022-02-20 18:07:09,704 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:07:09,705 INFO L82 GeneralOperation]: Start isEquivalent. First operand 372 states. Second operand has 264 states, 184 states have (on average 1.3695652173913044) internal successors, (252), 216 states have internal predecessors, (252), 53 states have call successors, (53), 26 states have call predecessors, (53), 26 states have return successors, (54), 41 states have call predecessors, (54), 53 states have call successors, (54) [2022-02-20 18:07:09,705 INFO L74 IsIncluded]: Start isIncluded. First operand 372 states. Second operand has 264 states, 184 states have (on average 1.3695652173913044) internal successors, (252), 216 states have internal predecessors, (252), 53 states have call successors, (53), 26 states have call predecessors, (53), 26 states have return successors, (54), 41 states have call predecessors, (54), 53 states have call successors, (54) [2022-02-20 18:07:09,706 INFO L87 Difference]: Start difference. First operand 372 states. Second operand has 264 states, 184 states have (on average 1.3695652173913044) internal successors, (252), 216 states have internal predecessors, (252), 53 states have call successors, (53), 26 states have call predecessors, (53), 26 states have return successors, (54), 41 states have call predecessors, (54), 53 states have call successors, (54) [2022-02-20 18:07:09,718 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:09,719 INFO L93 Difference]: Finished difference Result 372 states and 502 transitions. [2022-02-20 18:07:09,719 INFO L276 IsEmpty]: Start isEmpty. Operand 372 states and 502 transitions. [2022-02-20 18:07:09,720 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:09,720 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:09,721 INFO L74 IsIncluded]: Start isIncluded. First operand has 264 states, 184 states have (on average 1.3695652173913044) internal successors, (252), 216 states have internal predecessors, (252), 53 states have call successors, (53), 26 states have call predecessors, (53), 26 states have return successors, (54), 41 states have call predecessors, (54), 53 states have call successors, (54) Second operand 372 states. [2022-02-20 18:07:09,722 INFO L87 Difference]: Start difference. First operand has 264 states, 184 states have (on average 1.3695652173913044) internal successors, (252), 216 states have internal predecessors, (252), 53 states have call successors, (53), 26 states have call predecessors, (53), 26 states have return successors, (54), 41 states have call predecessors, (54), 53 states have call successors, (54) Second operand 372 states. [2022-02-20 18:07:09,734 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:09,735 INFO L93 Difference]: Finished difference Result 372 states and 502 transitions. [2022-02-20 18:07:09,735 INFO L276 IsEmpty]: Start isEmpty. Operand 372 states and 502 transitions. [2022-02-20 18:07:09,736 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:09,736 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:09,736 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:07:09,736 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:07:09,737 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 264 states, 184 states have (on average 1.3695652173913044) internal successors, (252), 216 states have internal predecessors, (252), 53 states have call successors, (53), 26 states have call predecessors, (53), 26 states have return successors, (54), 41 states have call predecessors, (54), 53 states have call successors, (54) [2022-02-20 18:07:09,745 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 264 states to 264 states and 359 transitions. [2022-02-20 18:07:09,745 INFO L78 Accepts]: Start accepts. Automaton has 264 states and 359 transitions. Word has length 59 [2022-02-20 18:07:09,745 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:07:09,745 INFO L470 AbstractCegarLoop]: Abstraction has 264 states and 359 transitions. [2022-02-20 18:07:09,745 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 4.857142857142857) internal successors, (34), 7 states have internal predecessors, (34), 3 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:07:09,746 INFO L276 IsEmpty]: Start isEmpty. Operand 264 states and 359 transitions. [2022-02-20 18:07:09,747 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2022-02-20 18:07:09,747 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:07:09,747 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:07:09,747 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-02-20 18:07:09,747 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:07:09,748 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:07:09,748 INFO L85 PathProgramCache]: Analyzing trace with hash 391619185, now seen corresponding path program 1 times [2022-02-20 18:07:09,748 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:07:09,748 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1377488747] [2022-02-20 18:07:09,748 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:07:09,748 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:07:09,772 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:09,804 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-02-20 18:07:09,806 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:09,808 INFO L290 TraceCheckUtils]: 0: Hoare triple {3642#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {3642#true} is VALID [2022-02-20 18:07:09,809 INFO L290 TraceCheckUtils]: 1: Hoare triple {3642#true} assume true; {3642#true} is VALID [2022-02-20 18:07:09,809 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {3642#true} {3644#(= ~pumpRunning~0 0)} #355#return; {3644#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:09,809 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:07:09,811 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:09,813 INFO L290 TraceCheckUtils]: 0: Hoare triple {3642#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {3642#true} is VALID [2022-02-20 18:07:09,813 INFO L290 TraceCheckUtils]: 1: Hoare triple {3642#true} assume true; {3642#true} is VALID [2022-02-20 18:07:09,814 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {3642#true} {3644#(= ~pumpRunning~0 0)} #357#return; {3644#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:09,814 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-02-20 18:07:09,815 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:09,818 INFO L290 TraceCheckUtils]: 0: Hoare triple {3642#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {3642#true} is VALID [2022-02-20 18:07:09,818 INFO L290 TraceCheckUtils]: 1: Hoare triple {3642#true} assume true; {3642#true} is VALID [2022-02-20 18:07:09,818 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {3642#true} {3644#(= ~pumpRunning~0 0)} #359#return; {3644#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:09,818 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:07:09,820 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:09,822 INFO L290 TraceCheckUtils]: 0: Hoare triple {3642#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {3642#true} is VALID [2022-02-20 18:07:09,822 INFO L290 TraceCheckUtils]: 1: Hoare triple {3642#true} assume true; {3642#true} is VALID [2022-02-20 18:07:09,823 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {3642#true} {3644#(= ~pumpRunning~0 0)} #361#return; {3644#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:09,823 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-02-20 18:07:09,825 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:09,826 INFO L290 TraceCheckUtils]: 0: Hoare triple {3642#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {3642#true} is VALID [2022-02-20 18:07:09,827 INFO L290 TraceCheckUtils]: 1: Hoare triple {3642#true} assume true; {3642#true} is VALID [2022-02-20 18:07:09,827 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {3642#true} {3644#(= ~pumpRunning~0 0)} #363#return; {3644#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:09,827 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-02-20 18:07:09,829 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:09,831 INFO L290 TraceCheckUtils]: 0: Hoare triple {3642#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {3642#true} is VALID [2022-02-20 18:07:09,831 INFO L290 TraceCheckUtils]: 1: Hoare triple {3642#true} assume true; {3642#true} is VALID [2022-02-20 18:07:09,832 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {3642#true} {3644#(= ~pumpRunning~0 0)} #365#return; {3644#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:09,832 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2022-02-20 18:07:09,832 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:09,834 INFO L290 TraceCheckUtils]: 0: Hoare triple {3642#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~methaneLevelCritical~0;#res := ~retValue_acc~9; {3642#true} is VALID [2022-02-20 18:07:09,834 INFO L290 TraceCheckUtils]: 1: Hoare triple {3642#true} assume true; {3642#true} is VALID [2022-02-20 18:07:09,835 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {3642#true} {3644#(= ~pumpRunning~0 0)} #353#return; {3644#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:09,835 INFO L290 TraceCheckUtils]: 0: Hoare triple {3642#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(38, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(21, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(30, 21);call #Ultimate.allocInit(9, 22);call #Ultimate.allocInit(25, 23);call #Ultimate.allocInit(13, 24);call #Ultimate.allocInit(7, 25);call write~init~int(44, 25, 0, 1);call write~init~int(77, 25, 1, 1);call write~init~int(101, 25, 2, 1);call write~init~int(116, 25, 3, 1);call write~init~int(104, 25, 4, 1);call write~init~int(58, 25, 5, 1);call write~init~int(0, 25, 6, 1);call #Ultimate.allocInit(5, 26);call write~init~int(67, 26, 0, 1);call write~init~int(82, 26, 1, 1);call write~init~int(73, 26, 2, 1);call write~init~int(84, 26, 3, 1);call write~init~int(0, 26, 4, 1);call #Ultimate.allocInit(3, 27);call write~init~int(79, 27, 0, 1);call write~init~int(75, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(41, 28, 0, 1);call write~init~int(0, 28, 1, 1);~__SELECTED_FEATURE_base~0 := 0;~__SELECTED_FEATURE_highWaterSensor~0 := 0;~__SELECTED_FEATURE_lowWaterSensor~0 := 0;~__SELECTED_FEATURE_methaneQuery~0 := 0;~__SELECTED_FEATURE_methaneAlarm~0 := 0;~__SELECTED_FEATURE_stopCommand~0 := 0;~__SELECTED_FEATURE_startCommand~0 := 0;~__GUIDSL_ROOT_PRODUCTION~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4; {3644#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:09,836 INFO L290 TraceCheckUtils]: 1: Hoare triple {3644#(= ~pumpRunning~0 0)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret60#1, main_~retValue_acc~13#1, main_~tmp~11#1;havoc main_~retValue_acc~13#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1; {3644#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:09,836 INFO L290 TraceCheckUtils]: 2: Hoare triple {3644#(= ~pumpRunning~0 0)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret47#1, select_features_#t~ret48#1, select_features_#t~ret49#1, select_features_#t~ret50#1, select_features_#t~ret51#1, select_features_#t~ret52#1;~__SELECTED_FEATURE_base~0 := 1; {3644#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:09,836 INFO L272 TraceCheckUtils]: 3: Hoare triple {3644#(= ~pumpRunning~0 0)} call select_features_#t~ret47#1 := select_one(); {3642#true} is VALID [2022-02-20 18:07:09,836 INFO L290 TraceCheckUtils]: 4: Hoare triple {3642#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {3642#true} is VALID [2022-02-20 18:07:09,836 INFO L290 TraceCheckUtils]: 5: Hoare triple {3642#true} assume true; {3642#true} is VALID [2022-02-20 18:07:09,837 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {3642#true} {3644#(= ~pumpRunning~0 0)} #355#return; {3644#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:09,837 INFO L290 TraceCheckUtils]: 7: Hoare triple {3644#(= ~pumpRunning~0 0)} assume -2147483648 <= select_features_#t~ret47#1 && select_features_#t~ret47#1 <= 2147483647;~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret47#1;havoc select_features_#t~ret47#1; {3644#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:09,837 INFO L272 TraceCheckUtils]: 8: Hoare triple {3644#(= ~pumpRunning~0 0)} call select_features_#t~ret48#1 := select_one(); {3642#true} is VALID [2022-02-20 18:07:09,837 INFO L290 TraceCheckUtils]: 9: Hoare triple {3642#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {3642#true} is VALID [2022-02-20 18:07:09,837 INFO L290 TraceCheckUtils]: 10: Hoare triple {3642#true} assume true; {3642#true} is VALID [2022-02-20 18:07:09,838 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {3642#true} {3644#(= ~pumpRunning~0 0)} #357#return; {3644#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:09,838 INFO L290 TraceCheckUtils]: 12: Hoare triple {3644#(= ~pumpRunning~0 0)} assume -2147483648 <= select_features_#t~ret48#1 && select_features_#t~ret48#1 <= 2147483647;~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret48#1;havoc select_features_#t~ret48#1; {3644#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:09,838 INFO L272 TraceCheckUtils]: 13: Hoare triple {3644#(= ~pumpRunning~0 0)} call select_features_#t~ret49#1 := select_one(); {3642#true} is VALID [2022-02-20 18:07:09,838 INFO L290 TraceCheckUtils]: 14: Hoare triple {3642#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {3642#true} is VALID [2022-02-20 18:07:09,839 INFO L290 TraceCheckUtils]: 15: Hoare triple {3642#true} assume true; {3642#true} is VALID [2022-02-20 18:07:09,839 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {3642#true} {3644#(= ~pumpRunning~0 0)} #359#return; {3644#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:09,839 INFO L290 TraceCheckUtils]: 17: Hoare triple {3644#(= ~pumpRunning~0 0)} assume -2147483648 <= select_features_#t~ret49#1 && select_features_#t~ret49#1 <= 2147483647;~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret49#1;havoc select_features_#t~ret49#1; {3644#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:09,839 INFO L272 TraceCheckUtils]: 18: Hoare triple {3644#(= ~pumpRunning~0 0)} call select_features_#t~ret50#1 := select_one(); {3642#true} is VALID [2022-02-20 18:07:09,840 INFO L290 TraceCheckUtils]: 19: Hoare triple {3642#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {3642#true} is VALID [2022-02-20 18:07:09,840 INFO L290 TraceCheckUtils]: 20: Hoare triple {3642#true} assume true; {3642#true} is VALID [2022-02-20 18:07:09,840 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {3642#true} {3644#(= ~pumpRunning~0 0)} #361#return; {3644#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:09,840 INFO L290 TraceCheckUtils]: 22: Hoare triple {3644#(= ~pumpRunning~0 0)} assume -2147483648 <= select_features_#t~ret50#1 && select_features_#t~ret50#1 <= 2147483647;~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret50#1;havoc select_features_#t~ret50#1; {3644#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:09,841 INFO L272 TraceCheckUtils]: 23: Hoare triple {3644#(= ~pumpRunning~0 0)} call select_features_#t~ret51#1 := select_one(); {3642#true} is VALID [2022-02-20 18:07:09,841 INFO L290 TraceCheckUtils]: 24: Hoare triple {3642#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {3642#true} is VALID [2022-02-20 18:07:09,841 INFO L290 TraceCheckUtils]: 25: Hoare triple {3642#true} assume true; {3642#true} is VALID [2022-02-20 18:07:09,841 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {3642#true} {3644#(= ~pumpRunning~0 0)} #363#return; {3644#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:09,842 INFO L290 TraceCheckUtils]: 27: Hoare triple {3644#(= ~pumpRunning~0 0)} assume -2147483648 <= select_features_#t~ret51#1 && select_features_#t~ret51#1 <= 2147483647;~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret51#1;havoc select_features_#t~ret51#1; {3644#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:09,842 INFO L272 TraceCheckUtils]: 28: Hoare triple {3644#(= ~pumpRunning~0 0)} call select_features_#t~ret52#1 := select_one(); {3642#true} is VALID [2022-02-20 18:07:09,842 INFO L290 TraceCheckUtils]: 29: Hoare triple {3642#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {3642#true} is VALID [2022-02-20 18:07:09,842 INFO L290 TraceCheckUtils]: 30: Hoare triple {3642#true} assume true; {3642#true} is VALID [2022-02-20 18:07:09,842 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {3642#true} {3644#(= ~pumpRunning~0 0)} #365#return; {3644#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:09,843 INFO L290 TraceCheckUtils]: 32: Hoare triple {3644#(= ~pumpRunning~0 0)} assume -2147483648 <= select_features_#t~ret52#1 && select_features_#t~ret52#1 <= 2147483647;~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret52#1;havoc select_features_#t~ret52#1; {3644#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:09,843 INFO L290 TraceCheckUtils]: 33: Hoare triple {3644#(= ~pumpRunning~0 0)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~8#1;havoc valid_product_~retValue_acc~8#1;valid_product_~retValue_acc~8#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~8#1; {3644#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:09,843 INFO L290 TraceCheckUtils]: 34: Hoare triple {3644#(= ~pumpRunning~0 0)} main_#t~ret60#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret60#1 && main_#t~ret60#1 <= 2147483647;main_~tmp~11#1 := main_#t~ret60#1;havoc main_#t~ret60#1; {3644#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:09,844 INFO L290 TraceCheckUtils]: 35: Hoare triple {3644#(= ~pumpRunning~0 0)} assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; {3644#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:09,844 INFO L290 TraceCheckUtils]: 36: Hoare triple {3644#(= ~pumpRunning~0 0)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet4#1, test_#t~nondet5#1, test_#t~nondet6#1, test_#t~nondet7#1, test_~splverifierCounter~0#1, test_~tmp~0#1, test_~tmp___0~0#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~0#1;havoc test_~tmp___0~0#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {3644#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:09,844 INFO L290 TraceCheckUtils]: 37: Hoare triple {3644#(= ~pumpRunning~0 0)} assume !false; {3644#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:09,844 INFO L290 TraceCheckUtils]: 38: Hoare triple {3644#(= ~pumpRunning~0 0)} assume test_~splverifierCounter~0#1 < 4; {3644#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:09,845 INFO L290 TraceCheckUtils]: 39: Hoare triple {3644#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet4#1 && test_#t~nondet4#1 <= 2147483647;test_~tmp~0#1 := test_#t~nondet4#1;havoc test_#t~nondet4#1; {3644#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:09,845 INFO L290 TraceCheckUtils]: 40: Hoare triple {3644#(= ~pumpRunning~0 0)} assume !(0 != test_~tmp~0#1); {3644#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:09,845 INFO L290 TraceCheckUtils]: 41: Hoare triple {3644#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet5#1 && test_#t~nondet5#1 <= 2147483647;test_~tmp___0~0#1 := test_#t~nondet5#1;havoc test_#t~nondet5#1; {3644#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:09,846 INFO L290 TraceCheckUtils]: 42: Hoare triple {3644#(= ~pumpRunning~0 0)} assume !(0 != test_~tmp___0~0#1); {3644#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:09,846 INFO L290 TraceCheckUtils]: 43: Hoare triple {3644#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet6#1 && test_#t~nondet6#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet6#1;havoc test_#t~nondet6#1; {3644#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:09,846 INFO L290 TraceCheckUtils]: 44: Hoare triple {3644#(= ~pumpRunning~0 0)} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet7#1 && test_#t~nondet7#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet7#1;havoc test_#t~nondet7#1; {3644#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:09,847 INFO L290 TraceCheckUtils]: 45: Hoare triple {3644#(= ~pumpRunning~0 0)} assume 0 != test_~tmp___1~0#1; {3644#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:09,847 INFO L290 TraceCheckUtils]: 46: Hoare triple {3644#(= ~pumpRunning~0 0)} assume 0 != ~__SELECTED_FEATURE_stopCommand~0;assume { :begin_inline_stopSystem } true; {3644#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:09,847 INFO L290 TraceCheckUtils]: 47: Hoare triple {3644#(= ~pumpRunning~0 0)} assume !(0 != ~pumpRunning~0); {3644#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:09,847 INFO L290 TraceCheckUtils]: 48: Hoare triple {3644#(= ~pumpRunning~0 0)} ~systemActive~0 := 0; {3644#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:09,848 INFO L290 TraceCheckUtils]: 49: Hoare triple {3644#(= ~pumpRunning~0 0)} assume { :end_inline_stopSystem } true; {3644#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:09,848 INFO L272 TraceCheckUtils]: 50: Hoare triple {3644#(= ~pumpRunning~0 0)} call timeShift(); {3644#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:09,848 INFO L290 TraceCheckUtils]: 51: Hoare triple {3644#(= ~pumpRunning~0 0)} assume !(0 != ~pumpRunning~0); {3644#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:09,849 INFO L290 TraceCheckUtils]: 52: Hoare triple {3644#(= ~pumpRunning~0 0)} assume !(0 != ~systemActive~0); {3644#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:09,849 INFO L290 TraceCheckUtils]: 53: Hoare triple {3644#(= ~pumpRunning~0 0)} assume { :begin_inline___utac_acc__Specification1_spec__1 } true;havoc __utac_acc__Specification1_spec__1_#t~ret53#1, __utac_acc__Specification1_spec__1_#t~ret54#1, __utac_acc__Specification1_spec__1_~tmp~10#1, __utac_acc__Specification1_spec__1_~tmp___0~3#1;havoc __utac_acc__Specification1_spec__1_~tmp~10#1;havoc __utac_acc__Specification1_spec__1_~tmp___0~3#1; {3644#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:09,849 INFO L272 TraceCheckUtils]: 54: Hoare triple {3644#(= ~pumpRunning~0 0)} call __utac_acc__Specification1_spec__1_#t~ret53#1 := isMethaneLevelCritical(); {3642#true} is VALID [2022-02-20 18:07:09,849 INFO L290 TraceCheckUtils]: 55: Hoare triple {3642#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~methaneLevelCritical~0;#res := ~retValue_acc~9; {3642#true} is VALID [2022-02-20 18:07:09,849 INFO L290 TraceCheckUtils]: 56: Hoare triple {3642#true} assume true; {3642#true} is VALID [2022-02-20 18:07:09,850 INFO L284 TraceCheckUtils]: 57: Hoare quadruple {3642#true} {3644#(= ~pumpRunning~0 0)} #353#return; {3644#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:09,850 INFO L290 TraceCheckUtils]: 58: Hoare triple {3644#(= ~pumpRunning~0 0)} assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret53#1 && __utac_acc__Specification1_spec__1_#t~ret53#1 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp~10#1 := __utac_acc__Specification1_spec__1_#t~ret53#1;havoc __utac_acc__Specification1_spec__1_#t~ret53#1; {3644#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:09,851 INFO L290 TraceCheckUtils]: 59: Hoare triple {3644#(= ~pumpRunning~0 0)} assume 0 != __utac_acc__Specification1_spec__1_~tmp~10#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~1#1;havoc isPumpRunning_~retValue_acc~1#1;isPumpRunning_~retValue_acc~1#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~1#1; {3666#(= |timeShift_isPumpRunning_#res#1| 0)} is VALID [2022-02-20 18:07:09,851 INFO L290 TraceCheckUtils]: 60: Hoare triple {3666#(= |timeShift_isPumpRunning_#res#1| 0)} __utac_acc__Specification1_spec__1_#t~ret54#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret54#1 && __utac_acc__Specification1_spec__1_#t~ret54#1 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp___0~3#1 := __utac_acc__Specification1_spec__1_#t~ret54#1;havoc __utac_acc__Specification1_spec__1_#t~ret54#1; {3667#(= |timeShift___utac_acc__Specification1_spec__1_~tmp___0~3#1| 0)} is VALID [2022-02-20 18:07:09,851 INFO L290 TraceCheckUtils]: 61: Hoare triple {3667#(= |timeShift___utac_acc__Specification1_spec__1_~tmp___0~3#1| 0)} assume 0 != __utac_acc__Specification1_spec__1_~tmp___0~3#1;assume { :begin_inline___automaton_fail } true; {3643#false} is VALID [2022-02-20 18:07:09,852 INFO L290 TraceCheckUtils]: 62: Hoare triple {3643#false} assume !false; {3643#false} is VALID [2022-02-20 18:07:09,852 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-02-20 18:07:09,852 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:07:09,852 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1377488747] [2022-02-20 18:07:09,852 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1377488747] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:07:09,852 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:07:09,853 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-02-20 18:07:09,853 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1000825736] [2022-02-20 18:07:09,853 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:07:09,853 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.6) internal successors, (38), 5 states have internal predecessors, (38), 1 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (7), 1 states have call predecessors, (7), 1 states have call successors, (7) Word has length 63 [2022-02-20 18:07:09,854 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:07:09,854 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 5 states, 5 states have (on average 7.6) internal successors, (38), 5 states have internal predecessors, (38), 1 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (7), 1 states have call predecessors, (7), 1 states have call successors, (7) [2022-02-20 18:07:09,886 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 53 edges. 53 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:09,886 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-02-20 18:07:09,886 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:07:09,886 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-02-20 18:07:09,887 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-02-20 18:07:09,887 INFO L87 Difference]: Start difference. First operand 264 states and 359 transitions. Second operand has 5 states, 5 states have (on average 7.6) internal successors, (38), 5 states have internal predecessors, (38), 1 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (7), 1 states have call predecessors, (7), 1 states have call successors, (7) [2022-02-20 18:07:10,241 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:10,241 INFO L93 Difference]: Finished difference Result 638 states and 903 transitions. [2022-02-20 18:07:10,241 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-02-20 18:07:10,242 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.6) internal successors, (38), 5 states have internal predecessors, (38), 1 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (7), 1 states have call predecessors, (7), 1 states have call successors, (7) Word has length 63 [2022-02-20 18:07:10,242 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:07:10,242 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 7.6) internal successors, (38), 5 states have internal predecessors, (38), 1 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (7), 1 states have call predecessors, (7), 1 states have call successors, (7) [2022-02-20 18:07:10,247 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 415 transitions. [2022-02-20 18:07:10,248 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 7.6) internal successors, (38), 5 states have internal predecessors, (38), 1 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (7), 1 states have call predecessors, (7), 1 states have call successors, (7) [2022-02-20 18:07:10,252 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 415 transitions. [2022-02-20 18:07:10,252 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states and 415 transitions. [2022-02-20 18:07:10,508 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 415 edges. 415 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:10,520 INFO L225 Difference]: With dead ends: 638 [2022-02-20 18:07:10,520 INFO L226 Difference]: Without dead ends: 396 [2022-02-20 18:07:10,521 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-02-20 18:07:10,522 INFO L933 BasicCegarLoop]: 177 mSDtfsCounter, 108 mSDsluCounter, 457 mSDsCounter, 0 mSdLazyCounter, 31 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 108 SdHoareTripleChecker+Valid, 634 SdHoareTripleChecker+Invalid, 43 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 31 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:07:10,522 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [108 Valid, 634 Invalid, 43 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 31 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:07:10,523 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 396 states. [2022-02-20 18:07:10,540 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 396 to 379. [2022-02-20 18:07:10,540 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:07:10,541 INFO L82 GeneralOperation]: Start isEquivalent. First operand 396 states. Second operand has 379 states, 269 states have (on average 1.3271375464684014) internal successors, (357), 304 states have internal predecessors, (357), 68 states have call successors, (68), 41 states have call predecessors, (68), 41 states have return successors, (90), 63 states have call predecessors, (90), 68 states have call successors, (90) [2022-02-20 18:07:10,542 INFO L74 IsIncluded]: Start isIncluded. First operand 396 states. Second operand has 379 states, 269 states have (on average 1.3271375464684014) internal successors, (357), 304 states have internal predecessors, (357), 68 states have call successors, (68), 41 states have call predecessors, (68), 41 states have return successors, (90), 63 states have call predecessors, (90), 68 states have call successors, (90) [2022-02-20 18:07:10,543 INFO L87 Difference]: Start difference. First operand 396 states. Second operand has 379 states, 269 states have (on average 1.3271375464684014) internal successors, (357), 304 states have internal predecessors, (357), 68 states have call successors, (68), 41 states have call predecessors, (68), 41 states have return successors, (90), 63 states have call predecessors, (90), 68 states have call successors, (90) [2022-02-20 18:07:10,554 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:10,554 INFO L93 Difference]: Finished difference Result 396 states and 538 transitions. [2022-02-20 18:07:10,555 INFO L276 IsEmpty]: Start isEmpty. Operand 396 states and 538 transitions. [2022-02-20 18:07:10,556 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:10,556 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:10,557 INFO L74 IsIncluded]: Start isIncluded. First operand has 379 states, 269 states have (on average 1.3271375464684014) internal successors, (357), 304 states have internal predecessors, (357), 68 states have call successors, (68), 41 states have call predecessors, (68), 41 states have return successors, (90), 63 states have call predecessors, (90), 68 states have call successors, (90) Second operand 396 states. [2022-02-20 18:07:10,558 INFO L87 Difference]: Start difference. First operand has 379 states, 269 states have (on average 1.3271375464684014) internal successors, (357), 304 states have internal predecessors, (357), 68 states have call successors, (68), 41 states have call predecessors, (68), 41 states have return successors, (90), 63 states have call predecessors, (90), 68 states have call successors, (90) Second operand 396 states. [2022-02-20 18:07:10,570 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:10,571 INFO L93 Difference]: Finished difference Result 396 states and 538 transitions. [2022-02-20 18:07:10,571 INFO L276 IsEmpty]: Start isEmpty. Operand 396 states and 538 transitions. [2022-02-20 18:07:10,572 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:10,572 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:10,572 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:07:10,572 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:07:10,573 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 379 states, 269 states have (on average 1.3271375464684014) internal successors, (357), 304 states have internal predecessors, (357), 68 states have call successors, (68), 41 states have call predecessors, (68), 41 states have return successors, (90), 63 states have call predecessors, (90), 68 states have call successors, (90) [2022-02-20 18:07:10,585 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 379 states to 379 states and 515 transitions. [2022-02-20 18:07:10,585 INFO L78 Accepts]: Start accepts. Automaton has 379 states and 515 transitions. Word has length 63 [2022-02-20 18:07:10,585 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:07:10,586 INFO L470 AbstractCegarLoop]: Abstraction has 379 states and 515 transitions. [2022-02-20 18:07:10,586 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.6) internal successors, (38), 5 states have internal predecessors, (38), 1 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (7), 1 states have call predecessors, (7), 1 states have call successors, (7) [2022-02-20 18:07:10,586 INFO L276 IsEmpty]: Start isEmpty. Operand 379 states and 515 transitions. [2022-02-20 18:07:10,587 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 84 [2022-02-20 18:07:10,587 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:07:10,587 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:07:10,587 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-02-20 18:07:10,588 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:07:10,588 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:07:10,588 INFO L85 PathProgramCache]: Analyzing trace with hash 1809735489, now seen corresponding path program 1 times [2022-02-20 18:07:10,588 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:07:10,588 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1073190417] [2022-02-20 18:07:10,589 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:07:10,589 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:07:10,614 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:10,629 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-02-20 18:07:10,631 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:10,633 INFO L290 TraceCheckUtils]: 0: Hoare triple {5924#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {5924#true} is VALID [2022-02-20 18:07:10,633 INFO L290 TraceCheckUtils]: 1: Hoare triple {5924#true} assume true; {5924#true} is VALID [2022-02-20 18:07:10,633 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {5924#true} {5924#true} #355#return; {5924#true} is VALID [2022-02-20 18:07:10,634 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:07:10,635 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:10,637 INFO L290 TraceCheckUtils]: 0: Hoare triple {5924#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {5924#true} is VALID [2022-02-20 18:07:10,638 INFO L290 TraceCheckUtils]: 1: Hoare triple {5924#true} assume true; {5924#true} is VALID [2022-02-20 18:07:10,638 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {5924#true} {5924#true} #357#return; {5924#true} is VALID [2022-02-20 18:07:10,638 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-02-20 18:07:10,652 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:10,654 INFO L290 TraceCheckUtils]: 0: Hoare triple {5924#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {5924#true} is VALID [2022-02-20 18:07:10,654 INFO L290 TraceCheckUtils]: 1: Hoare triple {5924#true} assume true; {5924#true} is VALID [2022-02-20 18:07:10,654 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {5924#true} {5924#true} #359#return; {5924#true} is VALID [2022-02-20 18:07:10,654 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:07:10,655 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:10,657 INFO L290 TraceCheckUtils]: 0: Hoare triple {5924#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {5924#true} is VALID [2022-02-20 18:07:10,657 INFO L290 TraceCheckUtils]: 1: Hoare triple {5924#true} assume true; {5924#true} is VALID [2022-02-20 18:07:10,657 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {5924#true} {5924#true} #361#return; {5924#true} is VALID [2022-02-20 18:07:10,658 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-02-20 18:07:10,659 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:10,661 INFO L290 TraceCheckUtils]: 0: Hoare triple {5924#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {5924#true} is VALID [2022-02-20 18:07:10,661 INFO L290 TraceCheckUtils]: 1: Hoare triple {5924#true} assume true; {5924#true} is VALID [2022-02-20 18:07:10,661 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {5924#true} {5924#true} #363#return; {5924#true} is VALID [2022-02-20 18:07:10,662 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-02-20 18:07:10,663 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:10,665 INFO L290 TraceCheckUtils]: 0: Hoare triple {5924#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {5924#true} is VALID [2022-02-20 18:07:10,665 INFO L290 TraceCheckUtils]: 1: Hoare triple {5924#true} assume true; {5924#true} is VALID [2022-02-20 18:07:10,665 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {5924#true} {5924#true} #365#return; {5924#true} is VALID [2022-02-20 18:07:10,667 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-02-20 18:07:10,670 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:10,676 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:07:10,679 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:10,695 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-02-20 18:07:10,696 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:10,698 INFO L290 TraceCheckUtils]: 0: Hoare triple {5968#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {5924#true} is VALID [2022-02-20 18:07:10,698 INFO L290 TraceCheckUtils]: 1: Hoare triple {5924#true} assume true; {5924#true} is VALID [2022-02-20 18:07:10,698 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {5924#true} {5925#false} #331#return; {5925#false} is VALID [2022-02-20 18:07:10,698 INFO L290 TraceCheckUtils]: 0: Hoare triple {5968#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret8#1, processEnvironment__role__highWaterSensor_~tmp~1#1;havoc processEnvironment__role__highWaterSensor_~tmp~1#1; {5924#true} is VALID [2022-02-20 18:07:10,698 INFO L290 TraceCheckUtils]: 1: Hoare triple {5924#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret21#1, isHighWaterLevel_~retValue_acc~2#1, isHighWaterLevel_~tmp~5#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~2#1;havoc isHighWaterLevel_~tmp~5#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {5924#true} is VALID [2022-02-20 18:07:10,698 INFO L290 TraceCheckUtils]: 2: Hoare triple {5924#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~11#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {5924#true} is VALID [2022-02-20 18:07:10,699 INFO L290 TraceCheckUtils]: 3: Hoare triple {5924#true} isHighWaterLevel_#t~ret21#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret21#1 && isHighWaterLevel_#t~ret21#1 <= 2147483647;isHighWaterLevel_~tmp~5#1 := isHighWaterLevel_#t~ret21#1;havoc isHighWaterLevel_#t~ret21#1; {5924#true} is VALID [2022-02-20 18:07:10,699 INFO L290 TraceCheckUtils]: 4: Hoare triple {5924#true} assume 0 != isHighWaterLevel_~tmp~5#1;isHighWaterLevel_~tmp___0~1#1 := 0; {5986#(= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0)} is VALID [2022-02-20 18:07:10,699 INFO L290 TraceCheckUtils]: 5: Hoare triple {5986#(= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0)} isHighWaterLevel_~retValue_acc~2#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~2#1; {5987#(= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_#res#1| 0)} is VALID [2022-02-20 18:07:10,700 INFO L290 TraceCheckUtils]: 6: Hoare triple {5987#(= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_#res#1| 0)} processEnvironment__role__highWaterSensor_#t~ret8#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret8#1 && processEnvironment__role__highWaterSensor_#t~ret8#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~1#1 := processEnvironment__role__highWaterSensor_#t~ret8#1;havoc processEnvironment__role__highWaterSensor_#t~ret8#1; {5988#(= |processEnvironment__before__lowWaterSensor_processEnvironment__role__highWaterSensor_~tmp~1#1| 0)} is VALID [2022-02-20 18:07:10,700 INFO L290 TraceCheckUtils]: 7: Hoare triple {5988#(= |processEnvironment__before__lowWaterSensor_processEnvironment__role__highWaterSensor_~tmp~1#1| 0)} assume 0 != processEnvironment__role__highWaterSensor_~tmp~1#1;assume { :begin_inline_activatePump } true; {5925#false} is VALID [2022-02-20 18:07:10,700 INFO L290 TraceCheckUtils]: 8: Hoare triple {5925#false} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {5925#false} is VALID [2022-02-20 18:07:10,701 INFO L272 TraceCheckUtils]: 9: Hoare triple {5925#false} call activatePump__before__methaneQuery(); {5968#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:07:10,701 INFO L290 TraceCheckUtils]: 10: Hoare triple {5968#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {5924#true} is VALID [2022-02-20 18:07:10,701 INFO L290 TraceCheckUtils]: 11: Hoare triple {5924#true} assume true; {5924#true} is VALID [2022-02-20 18:07:10,701 INFO L284 TraceCheckUtils]: 12: Hoare quadruple {5924#true} {5925#false} #331#return; {5925#false} is VALID [2022-02-20 18:07:10,701 INFO L290 TraceCheckUtils]: 13: Hoare triple {5925#false} assume { :end_inline_activatePump } true; {5925#false} is VALID [2022-02-20 18:07:10,701 INFO L290 TraceCheckUtils]: 14: Hoare triple {5925#false} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {5925#false} is VALID [2022-02-20 18:07:10,701 INFO L290 TraceCheckUtils]: 15: Hoare triple {5925#false} assume true; {5925#false} is VALID [2022-02-20 18:07:10,702 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {5925#false} {5924#true} #383#return; {5925#false} is VALID [2022-02-20 18:07:10,702 INFO L290 TraceCheckUtils]: 0: Hoare triple {5968#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {5924#true} is VALID [2022-02-20 18:07:10,702 INFO L272 TraceCheckUtils]: 1: Hoare triple {5924#true} call processEnvironment__before__lowWaterSensor(); {5968#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:07:10,702 INFO L290 TraceCheckUtils]: 2: Hoare triple {5968#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret8#1, processEnvironment__role__highWaterSensor_~tmp~1#1;havoc processEnvironment__role__highWaterSensor_~tmp~1#1; {5924#true} is VALID [2022-02-20 18:07:10,703 INFO L290 TraceCheckUtils]: 3: Hoare triple {5924#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret21#1, isHighWaterLevel_~retValue_acc~2#1, isHighWaterLevel_~tmp~5#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~2#1;havoc isHighWaterLevel_~tmp~5#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {5924#true} is VALID [2022-02-20 18:07:10,703 INFO L290 TraceCheckUtils]: 4: Hoare triple {5924#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~11#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {5924#true} is VALID [2022-02-20 18:07:10,703 INFO L290 TraceCheckUtils]: 5: Hoare triple {5924#true} isHighWaterLevel_#t~ret21#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret21#1 && isHighWaterLevel_#t~ret21#1 <= 2147483647;isHighWaterLevel_~tmp~5#1 := isHighWaterLevel_#t~ret21#1;havoc isHighWaterLevel_#t~ret21#1; {5924#true} is VALID [2022-02-20 18:07:10,703 INFO L290 TraceCheckUtils]: 6: Hoare triple {5924#true} assume 0 != isHighWaterLevel_~tmp~5#1;isHighWaterLevel_~tmp___0~1#1 := 0; {5986#(= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0)} is VALID [2022-02-20 18:07:10,704 INFO L290 TraceCheckUtils]: 7: Hoare triple {5986#(= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0)} isHighWaterLevel_~retValue_acc~2#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~2#1; {5987#(= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_#res#1| 0)} is VALID [2022-02-20 18:07:10,704 INFO L290 TraceCheckUtils]: 8: Hoare triple {5987#(= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_#res#1| 0)} processEnvironment__role__highWaterSensor_#t~ret8#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret8#1 && processEnvironment__role__highWaterSensor_#t~ret8#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~1#1 := processEnvironment__role__highWaterSensor_#t~ret8#1;havoc processEnvironment__role__highWaterSensor_#t~ret8#1; {5988#(= |processEnvironment__before__lowWaterSensor_processEnvironment__role__highWaterSensor_~tmp~1#1| 0)} is VALID [2022-02-20 18:07:10,704 INFO L290 TraceCheckUtils]: 9: Hoare triple {5988#(= |processEnvironment__before__lowWaterSensor_processEnvironment__role__highWaterSensor_~tmp~1#1| 0)} assume 0 != processEnvironment__role__highWaterSensor_~tmp~1#1;assume { :begin_inline_activatePump } true; {5925#false} is VALID [2022-02-20 18:07:10,704 INFO L290 TraceCheckUtils]: 10: Hoare triple {5925#false} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {5925#false} is VALID [2022-02-20 18:07:10,705 INFO L272 TraceCheckUtils]: 11: Hoare triple {5925#false} call activatePump__before__methaneQuery(); {5968#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:07:10,705 INFO L290 TraceCheckUtils]: 12: Hoare triple {5968#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {5924#true} is VALID [2022-02-20 18:07:10,705 INFO L290 TraceCheckUtils]: 13: Hoare triple {5924#true} assume true; {5924#true} is VALID [2022-02-20 18:07:10,705 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {5924#true} {5925#false} #331#return; {5925#false} is VALID [2022-02-20 18:07:10,705 INFO L290 TraceCheckUtils]: 15: Hoare triple {5925#false} assume { :end_inline_activatePump } true; {5925#false} is VALID [2022-02-20 18:07:10,705 INFO L290 TraceCheckUtils]: 16: Hoare triple {5925#false} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {5925#false} is VALID [2022-02-20 18:07:10,705 INFO L290 TraceCheckUtils]: 17: Hoare triple {5925#false} assume true; {5925#false} is VALID [2022-02-20 18:07:10,706 INFO L284 TraceCheckUtils]: 18: Hoare quadruple {5925#false} {5924#true} #383#return; {5925#false} is VALID [2022-02-20 18:07:10,706 INFO L290 TraceCheckUtils]: 19: Hoare triple {5925#false} assume true; {5925#false} is VALID [2022-02-20 18:07:10,706 INFO L284 TraceCheckUtils]: 20: Hoare quadruple {5925#false} {5924#true} #351#return; {5925#false} is VALID [2022-02-20 18:07:10,706 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 74 [2022-02-20 18:07:10,707 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:10,709 INFO L290 TraceCheckUtils]: 0: Hoare triple {5924#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~methaneLevelCritical~0;#res := ~retValue_acc~9; {5924#true} is VALID [2022-02-20 18:07:10,709 INFO L290 TraceCheckUtils]: 1: Hoare triple {5924#true} assume true; {5924#true} is VALID [2022-02-20 18:07:10,709 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {5924#true} {5925#false} #353#return; {5925#false} is VALID [2022-02-20 18:07:10,709 INFO L290 TraceCheckUtils]: 0: Hoare triple {5924#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(38, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(21, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(30, 21);call #Ultimate.allocInit(9, 22);call #Ultimate.allocInit(25, 23);call #Ultimate.allocInit(13, 24);call #Ultimate.allocInit(7, 25);call write~init~int(44, 25, 0, 1);call write~init~int(77, 25, 1, 1);call write~init~int(101, 25, 2, 1);call write~init~int(116, 25, 3, 1);call write~init~int(104, 25, 4, 1);call write~init~int(58, 25, 5, 1);call write~init~int(0, 25, 6, 1);call #Ultimate.allocInit(5, 26);call write~init~int(67, 26, 0, 1);call write~init~int(82, 26, 1, 1);call write~init~int(73, 26, 2, 1);call write~init~int(84, 26, 3, 1);call write~init~int(0, 26, 4, 1);call #Ultimate.allocInit(3, 27);call write~init~int(79, 27, 0, 1);call write~init~int(75, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(41, 28, 0, 1);call write~init~int(0, 28, 1, 1);~__SELECTED_FEATURE_base~0 := 0;~__SELECTED_FEATURE_highWaterSensor~0 := 0;~__SELECTED_FEATURE_lowWaterSensor~0 := 0;~__SELECTED_FEATURE_methaneQuery~0 := 0;~__SELECTED_FEATURE_methaneAlarm~0 := 0;~__SELECTED_FEATURE_stopCommand~0 := 0;~__SELECTED_FEATURE_startCommand~0 := 0;~__GUIDSL_ROOT_PRODUCTION~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4; {5924#true} is VALID [2022-02-20 18:07:10,709 INFO L290 TraceCheckUtils]: 1: Hoare triple {5924#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret60#1, main_~retValue_acc~13#1, main_~tmp~11#1;havoc main_~retValue_acc~13#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1; {5924#true} is VALID [2022-02-20 18:07:10,709 INFO L290 TraceCheckUtils]: 2: Hoare triple {5924#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret47#1, select_features_#t~ret48#1, select_features_#t~ret49#1, select_features_#t~ret50#1, select_features_#t~ret51#1, select_features_#t~ret52#1;~__SELECTED_FEATURE_base~0 := 1; {5924#true} is VALID [2022-02-20 18:07:10,709 INFO L272 TraceCheckUtils]: 3: Hoare triple {5924#true} call select_features_#t~ret47#1 := select_one(); {5924#true} is VALID [2022-02-20 18:07:10,710 INFO L290 TraceCheckUtils]: 4: Hoare triple {5924#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {5924#true} is VALID [2022-02-20 18:07:10,710 INFO L290 TraceCheckUtils]: 5: Hoare triple {5924#true} assume true; {5924#true} is VALID [2022-02-20 18:07:10,710 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {5924#true} {5924#true} #355#return; {5924#true} is VALID [2022-02-20 18:07:10,710 INFO L290 TraceCheckUtils]: 7: Hoare triple {5924#true} assume -2147483648 <= select_features_#t~ret47#1 && select_features_#t~ret47#1 <= 2147483647;~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret47#1;havoc select_features_#t~ret47#1; {5924#true} is VALID [2022-02-20 18:07:10,711 INFO L272 TraceCheckUtils]: 8: Hoare triple {5924#true} call select_features_#t~ret48#1 := select_one(); {5924#true} is VALID [2022-02-20 18:07:10,711 INFO L290 TraceCheckUtils]: 9: Hoare triple {5924#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {5924#true} is VALID [2022-02-20 18:07:10,711 INFO L290 TraceCheckUtils]: 10: Hoare triple {5924#true} assume true; {5924#true} is VALID [2022-02-20 18:07:10,711 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {5924#true} {5924#true} #357#return; {5924#true} is VALID [2022-02-20 18:07:10,711 INFO L290 TraceCheckUtils]: 12: Hoare triple {5924#true} assume -2147483648 <= select_features_#t~ret48#1 && select_features_#t~ret48#1 <= 2147483647;~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret48#1;havoc select_features_#t~ret48#1; {5924#true} is VALID [2022-02-20 18:07:10,711 INFO L272 TraceCheckUtils]: 13: Hoare triple {5924#true} call select_features_#t~ret49#1 := select_one(); {5924#true} is VALID [2022-02-20 18:07:10,711 INFO L290 TraceCheckUtils]: 14: Hoare triple {5924#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {5924#true} is VALID [2022-02-20 18:07:10,711 INFO L290 TraceCheckUtils]: 15: Hoare triple {5924#true} assume true; {5924#true} is VALID [2022-02-20 18:07:10,712 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {5924#true} {5924#true} #359#return; {5924#true} is VALID [2022-02-20 18:07:10,712 INFO L290 TraceCheckUtils]: 17: Hoare triple {5924#true} assume -2147483648 <= select_features_#t~ret49#1 && select_features_#t~ret49#1 <= 2147483647;~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret49#1;havoc select_features_#t~ret49#1; {5924#true} is VALID [2022-02-20 18:07:10,712 INFO L272 TraceCheckUtils]: 18: Hoare triple {5924#true} call select_features_#t~ret50#1 := select_one(); {5924#true} is VALID [2022-02-20 18:07:10,712 INFO L290 TraceCheckUtils]: 19: Hoare triple {5924#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {5924#true} is VALID [2022-02-20 18:07:10,712 INFO L290 TraceCheckUtils]: 20: Hoare triple {5924#true} assume true; {5924#true} is VALID [2022-02-20 18:07:10,712 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {5924#true} {5924#true} #361#return; {5924#true} is VALID [2022-02-20 18:07:10,712 INFO L290 TraceCheckUtils]: 22: Hoare triple {5924#true} assume -2147483648 <= select_features_#t~ret50#1 && select_features_#t~ret50#1 <= 2147483647;~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret50#1;havoc select_features_#t~ret50#1; {5924#true} is VALID [2022-02-20 18:07:10,713 INFO L272 TraceCheckUtils]: 23: Hoare triple {5924#true} call select_features_#t~ret51#1 := select_one(); {5924#true} is VALID [2022-02-20 18:07:10,713 INFO L290 TraceCheckUtils]: 24: Hoare triple {5924#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {5924#true} is VALID [2022-02-20 18:07:10,713 INFO L290 TraceCheckUtils]: 25: Hoare triple {5924#true} assume true; {5924#true} is VALID [2022-02-20 18:07:10,713 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {5924#true} {5924#true} #363#return; {5924#true} is VALID [2022-02-20 18:07:10,713 INFO L290 TraceCheckUtils]: 27: Hoare triple {5924#true} assume -2147483648 <= select_features_#t~ret51#1 && select_features_#t~ret51#1 <= 2147483647;~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret51#1;havoc select_features_#t~ret51#1; {5924#true} is VALID [2022-02-20 18:07:10,713 INFO L272 TraceCheckUtils]: 28: Hoare triple {5924#true} call select_features_#t~ret52#1 := select_one(); {5924#true} is VALID [2022-02-20 18:07:10,714 INFO L290 TraceCheckUtils]: 29: Hoare triple {5924#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {5924#true} is VALID [2022-02-20 18:07:10,714 INFO L290 TraceCheckUtils]: 30: Hoare triple {5924#true} assume true; {5924#true} is VALID [2022-02-20 18:07:10,714 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {5924#true} {5924#true} #365#return; {5924#true} is VALID [2022-02-20 18:07:10,714 INFO L290 TraceCheckUtils]: 32: Hoare triple {5924#true} assume -2147483648 <= select_features_#t~ret52#1 && select_features_#t~ret52#1 <= 2147483647;~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret52#1;havoc select_features_#t~ret52#1; {5924#true} is VALID [2022-02-20 18:07:10,714 INFO L290 TraceCheckUtils]: 33: Hoare triple {5924#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~8#1;havoc valid_product_~retValue_acc~8#1;valid_product_~retValue_acc~8#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~8#1; {5924#true} is VALID [2022-02-20 18:07:10,714 INFO L290 TraceCheckUtils]: 34: Hoare triple {5924#true} main_#t~ret60#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret60#1 && main_#t~ret60#1 <= 2147483647;main_~tmp~11#1 := main_#t~ret60#1;havoc main_#t~ret60#1; {5924#true} is VALID [2022-02-20 18:07:10,714 INFO L290 TraceCheckUtils]: 35: Hoare triple {5924#true} assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; {5924#true} is VALID [2022-02-20 18:07:10,714 INFO L290 TraceCheckUtils]: 36: Hoare triple {5924#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet4#1, test_#t~nondet5#1, test_#t~nondet6#1, test_#t~nondet7#1, test_~splverifierCounter~0#1, test_~tmp~0#1, test_~tmp___0~0#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~0#1;havoc test_~tmp___0~0#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {5924#true} is VALID [2022-02-20 18:07:10,715 INFO L290 TraceCheckUtils]: 37: Hoare triple {5924#true} assume !false; {5924#true} is VALID [2022-02-20 18:07:10,715 INFO L290 TraceCheckUtils]: 38: Hoare triple {5924#true} assume test_~splverifierCounter~0#1 < 4; {5924#true} is VALID [2022-02-20 18:07:10,715 INFO L290 TraceCheckUtils]: 39: Hoare triple {5924#true} assume -2147483648 <= test_#t~nondet4#1 && test_#t~nondet4#1 <= 2147483647;test_~tmp~0#1 := test_#t~nondet4#1;havoc test_#t~nondet4#1; {5924#true} is VALID [2022-02-20 18:07:10,715 INFO L290 TraceCheckUtils]: 40: Hoare triple {5924#true} assume !(0 != test_~tmp~0#1); {5924#true} is VALID [2022-02-20 18:07:10,715 INFO L290 TraceCheckUtils]: 41: Hoare triple {5924#true} assume -2147483648 <= test_#t~nondet5#1 && test_#t~nondet5#1 <= 2147483647;test_~tmp___0~0#1 := test_#t~nondet5#1;havoc test_#t~nondet5#1; {5924#true} is VALID [2022-02-20 18:07:10,715 INFO L290 TraceCheckUtils]: 42: Hoare triple {5924#true} assume !(0 != test_~tmp___0~0#1); {5924#true} is VALID [2022-02-20 18:07:10,715 INFO L290 TraceCheckUtils]: 43: Hoare triple {5924#true} assume -2147483648 <= test_#t~nondet6#1 && test_#t~nondet6#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet6#1;havoc test_#t~nondet6#1; {5924#true} is VALID [2022-02-20 18:07:10,715 INFO L290 TraceCheckUtils]: 44: Hoare triple {5924#true} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet7#1 && test_#t~nondet7#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet7#1;havoc test_#t~nondet7#1; {5924#true} is VALID [2022-02-20 18:07:10,716 INFO L290 TraceCheckUtils]: 45: Hoare triple {5924#true} assume !(0 != test_~tmp___1~0#1); {5924#true} is VALID [2022-02-20 18:07:10,716 INFO L272 TraceCheckUtils]: 46: Hoare triple {5924#true} call timeShift(); {5924#true} is VALID [2022-02-20 18:07:10,716 INFO L290 TraceCheckUtils]: 47: Hoare triple {5924#true} assume !(0 != ~pumpRunning~0); {5924#true} is VALID [2022-02-20 18:07:10,716 INFO L290 TraceCheckUtils]: 48: Hoare triple {5924#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {5924#true} is VALID [2022-02-20 18:07:10,716 INFO L290 TraceCheckUtils]: 49: Hoare triple {5924#true} assume !(0 != ~__SELECTED_FEATURE_methaneAlarm~0); {5924#true} is VALID [2022-02-20 18:07:10,717 INFO L272 TraceCheckUtils]: 50: Hoare triple {5924#true} call processEnvironment__before__methaneAlarm(); {5968#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:07:10,717 INFO L290 TraceCheckUtils]: 51: Hoare triple {5968#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {5924#true} is VALID [2022-02-20 18:07:10,717 INFO L272 TraceCheckUtils]: 52: Hoare triple {5924#true} call processEnvironment__before__lowWaterSensor(); {5968#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:07:10,717 INFO L290 TraceCheckUtils]: 53: Hoare triple {5968#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret8#1, processEnvironment__role__highWaterSensor_~tmp~1#1;havoc processEnvironment__role__highWaterSensor_~tmp~1#1; {5924#true} is VALID [2022-02-20 18:07:10,717 INFO L290 TraceCheckUtils]: 54: Hoare triple {5924#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret21#1, isHighWaterLevel_~retValue_acc~2#1, isHighWaterLevel_~tmp~5#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~2#1;havoc isHighWaterLevel_~tmp~5#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {5924#true} is VALID [2022-02-20 18:07:10,718 INFO L290 TraceCheckUtils]: 55: Hoare triple {5924#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~11#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {5924#true} is VALID [2022-02-20 18:07:10,718 INFO L290 TraceCheckUtils]: 56: Hoare triple {5924#true} isHighWaterLevel_#t~ret21#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret21#1 && isHighWaterLevel_#t~ret21#1 <= 2147483647;isHighWaterLevel_~tmp~5#1 := isHighWaterLevel_#t~ret21#1;havoc isHighWaterLevel_#t~ret21#1; {5924#true} is VALID [2022-02-20 18:07:10,718 INFO L290 TraceCheckUtils]: 57: Hoare triple {5924#true} assume 0 != isHighWaterLevel_~tmp~5#1;isHighWaterLevel_~tmp___0~1#1 := 0; {5986#(= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0)} is VALID [2022-02-20 18:07:10,718 INFO L290 TraceCheckUtils]: 58: Hoare triple {5986#(= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0)} isHighWaterLevel_~retValue_acc~2#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~2#1; {5987#(= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_#res#1| 0)} is VALID [2022-02-20 18:07:10,719 INFO L290 TraceCheckUtils]: 59: Hoare triple {5987#(= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_#res#1| 0)} processEnvironment__role__highWaterSensor_#t~ret8#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret8#1 && processEnvironment__role__highWaterSensor_#t~ret8#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~1#1 := processEnvironment__role__highWaterSensor_#t~ret8#1;havoc processEnvironment__role__highWaterSensor_#t~ret8#1; {5988#(= |processEnvironment__before__lowWaterSensor_processEnvironment__role__highWaterSensor_~tmp~1#1| 0)} is VALID [2022-02-20 18:07:10,719 INFO L290 TraceCheckUtils]: 60: Hoare triple {5988#(= |processEnvironment__before__lowWaterSensor_processEnvironment__role__highWaterSensor_~tmp~1#1| 0)} assume 0 != processEnvironment__role__highWaterSensor_~tmp~1#1;assume { :begin_inline_activatePump } true; {5925#false} is VALID [2022-02-20 18:07:10,719 INFO L290 TraceCheckUtils]: 61: Hoare triple {5925#false} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {5925#false} is VALID [2022-02-20 18:07:10,719 INFO L272 TraceCheckUtils]: 62: Hoare triple {5925#false} call activatePump__before__methaneQuery(); {5968#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:07:10,719 INFO L290 TraceCheckUtils]: 63: Hoare triple {5968#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {5924#true} is VALID [2022-02-20 18:07:10,720 INFO L290 TraceCheckUtils]: 64: Hoare triple {5924#true} assume true; {5924#true} is VALID [2022-02-20 18:07:10,720 INFO L284 TraceCheckUtils]: 65: Hoare quadruple {5924#true} {5925#false} #331#return; {5925#false} is VALID [2022-02-20 18:07:10,720 INFO L290 TraceCheckUtils]: 66: Hoare triple {5925#false} assume { :end_inline_activatePump } true; {5925#false} is VALID [2022-02-20 18:07:10,720 INFO L290 TraceCheckUtils]: 67: Hoare triple {5925#false} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {5925#false} is VALID [2022-02-20 18:07:10,720 INFO L290 TraceCheckUtils]: 68: Hoare triple {5925#false} assume true; {5925#false} is VALID [2022-02-20 18:07:10,720 INFO L284 TraceCheckUtils]: 69: Hoare quadruple {5925#false} {5924#true} #383#return; {5925#false} is VALID [2022-02-20 18:07:10,720 INFO L290 TraceCheckUtils]: 70: Hoare triple {5925#false} assume true; {5925#false} is VALID [2022-02-20 18:07:10,720 INFO L284 TraceCheckUtils]: 71: Hoare quadruple {5925#false} {5924#true} #351#return; {5925#false} is VALID [2022-02-20 18:07:10,721 INFO L290 TraceCheckUtils]: 72: Hoare triple {5925#false} assume { :end_inline_processEnvironment } true; {5925#false} is VALID [2022-02-20 18:07:10,721 INFO L290 TraceCheckUtils]: 73: Hoare triple {5925#false} assume { :begin_inline___utac_acc__Specification1_spec__1 } true;havoc __utac_acc__Specification1_spec__1_#t~ret53#1, __utac_acc__Specification1_spec__1_#t~ret54#1, __utac_acc__Specification1_spec__1_~tmp~10#1, __utac_acc__Specification1_spec__1_~tmp___0~3#1;havoc __utac_acc__Specification1_spec__1_~tmp~10#1;havoc __utac_acc__Specification1_spec__1_~tmp___0~3#1; {5925#false} is VALID [2022-02-20 18:07:10,721 INFO L272 TraceCheckUtils]: 74: Hoare triple {5925#false} call __utac_acc__Specification1_spec__1_#t~ret53#1 := isMethaneLevelCritical(); {5924#true} is VALID [2022-02-20 18:07:10,721 INFO L290 TraceCheckUtils]: 75: Hoare triple {5924#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~methaneLevelCritical~0;#res := ~retValue_acc~9; {5924#true} is VALID [2022-02-20 18:07:10,721 INFO L290 TraceCheckUtils]: 76: Hoare triple {5924#true} assume true; {5924#true} is VALID [2022-02-20 18:07:10,721 INFO L284 TraceCheckUtils]: 77: Hoare quadruple {5924#true} {5925#false} #353#return; {5925#false} is VALID [2022-02-20 18:07:10,721 INFO L290 TraceCheckUtils]: 78: Hoare triple {5925#false} assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret53#1 && __utac_acc__Specification1_spec__1_#t~ret53#1 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp~10#1 := __utac_acc__Specification1_spec__1_#t~ret53#1;havoc __utac_acc__Specification1_spec__1_#t~ret53#1; {5925#false} is VALID [2022-02-20 18:07:10,721 INFO L290 TraceCheckUtils]: 79: Hoare triple {5925#false} assume 0 != __utac_acc__Specification1_spec__1_~tmp~10#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~1#1;havoc isPumpRunning_~retValue_acc~1#1;isPumpRunning_~retValue_acc~1#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~1#1; {5925#false} is VALID [2022-02-20 18:07:10,722 INFO L290 TraceCheckUtils]: 80: Hoare triple {5925#false} __utac_acc__Specification1_spec__1_#t~ret54#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret54#1 && __utac_acc__Specification1_spec__1_#t~ret54#1 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp___0~3#1 := __utac_acc__Specification1_spec__1_#t~ret54#1;havoc __utac_acc__Specification1_spec__1_#t~ret54#1; {5925#false} is VALID [2022-02-20 18:07:10,722 INFO L290 TraceCheckUtils]: 81: Hoare triple {5925#false} assume 0 != __utac_acc__Specification1_spec__1_~tmp___0~3#1;assume { :begin_inline___automaton_fail } true; {5925#false} is VALID [2022-02-20 18:07:10,722 INFO L290 TraceCheckUtils]: 82: Hoare triple {5925#false} assume !false; {5925#false} is VALID [2022-02-20 18:07:10,722 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-02-20 18:07:10,722 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:07:10,722 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1073190417] [2022-02-20 18:07:10,723 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1073190417] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:07:10,723 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:07:10,723 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-02-20 18:07:10,723 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1133706130] [2022-02-20 18:07:10,723 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:07:10,724 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.666666666666666) internal successors, (52), 5 states have internal predecessors, (52), 2 states have call successors, (11), 2 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) Word has length 83 [2022-02-20 18:07:10,724 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:07:10,724 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 8.666666666666666) internal successors, (52), 5 states have internal predecessors, (52), 2 states have call successors, (11), 2 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-02-20 18:07:10,767 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 73 edges. 73 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:10,767 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-02-20 18:07:10,767 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:07:10,768 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-02-20 18:07:10,768 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-02-20 18:07:10,768 INFO L87 Difference]: Start difference. First operand 379 states and 515 transitions. Second operand has 6 states, 6 states have (on average 8.666666666666666) internal successors, (52), 5 states have internal predecessors, (52), 2 states have call successors, (11), 2 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-02-20 18:07:11,363 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:11,364 INFO L93 Difference]: Finished difference Result 820 states and 1160 transitions. [2022-02-20 18:07:11,364 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-02-20 18:07:11,364 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.666666666666666) internal successors, (52), 5 states have internal predecessors, (52), 2 states have call successors, (11), 2 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) Word has length 83 [2022-02-20 18:07:11,364 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:07:11,365 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 8.666666666666666) internal successors, (52), 5 states have internal predecessors, (52), 2 states have call successors, (11), 2 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-02-20 18:07:11,368 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 359 transitions. [2022-02-20 18:07:11,369 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 8.666666666666666) internal successors, (52), 5 states have internal predecessors, (52), 2 states have call successors, (11), 2 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-02-20 18:07:11,372 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 359 transitions. [2022-02-20 18:07:11,372 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 359 transitions. [2022-02-20 18:07:11,606 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 359 edges. 359 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:11,620 INFO L225 Difference]: With dead ends: 820 [2022-02-20 18:07:11,620 INFO L226 Difference]: Without dead ends: 463 [2022-02-20 18:07:11,621 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 31 GetRequests, 23 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-02-20 18:07:11,622 INFO L933 BasicCegarLoop]: 150 mSDtfsCounter, 92 mSDsluCounter, 427 mSDsCounter, 0 mSdLazyCounter, 209 mSolverCounterSat, 40 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 98 SdHoareTripleChecker+Valid, 577 SdHoareTripleChecker+Invalid, 249 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 40 IncrementalHoareTripleChecker+Valid, 209 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-02-20 18:07:11,622 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [98 Valid, 577 Invalid, 249 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [40 Valid, 209 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-02-20 18:07:11,623 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 463 states. [2022-02-20 18:07:11,640 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 463 to 447. [2022-02-20 18:07:11,640 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:07:11,641 INFO L82 GeneralOperation]: Start isEquivalent. First operand 463 states. Second operand has 447 states, 323 states have (on average 1.2910216718266254) internal successors, (417), 358 states have internal predecessors, (417), 72 states have call successors, (72), 41 states have call predecessors, (72), 51 states have return successors, (110), 81 states have call predecessors, (110), 72 states have call successors, (110) [2022-02-20 18:07:11,642 INFO L74 IsIncluded]: Start isIncluded. First operand 463 states. Second operand has 447 states, 323 states have (on average 1.2910216718266254) internal successors, (417), 358 states have internal predecessors, (417), 72 states have call successors, (72), 41 states have call predecessors, (72), 51 states have return successors, (110), 81 states have call predecessors, (110), 72 states have call successors, (110) [2022-02-20 18:07:11,643 INFO L87 Difference]: Start difference. First operand 463 states. Second operand has 447 states, 323 states have (on average 1.2910216718266254) internal successors, (417), 358 states have internal predecessors, (417), 72 states have call successors, (72), 41 states have call predecessors, (72), 51 states have return successors, (110), 81 states have call predecessors, (110), 72 states have call successors, (110) [2022-02-20 18:07:11,656 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:11,656 INFO L93 Difference]: Finished difference Result 463 states and 628 transitions. [2022-02-20 18:07:11,656 INFO L276 IsEmpty]: Start isEmpty. Operand 463 states and 628 transitions. [2022-02-20 18:07:11,658 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:11,658 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:11,659 INFO L74 IsIncluded]: Start isIncluded. First operand has 447 states, 323 states have (on average 1.2910216718266254) internal successors, (417), 358 states have internal predecessors, (417), 72 states have call successors, (72), 41 states have call predecessors, (72), 51 states have return successors, (110), 81 states have call predecessors, (110), 72 states have call successors, (110) Second operand 463 states. [2022-02-20 18:07:11,659 INFO L87 Difference]: Start difference. First operand has 447 states, 323 states have (on average 1.2910216718266254) internal successors, (417), 358 states have internal predecessors, (417), 72 states have call successors, (72), 41 states have call predecessors, (72), 51 states have return successors, (110), 81 states have call predecessors, (110), 72 states have call successors, (110) Second operand 463 states. [2022-02-20 18:07:11,672 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:11,672 INFO L93 Difference]: Finished difference Result 463 states and 628 transitions. [2022-02-20 18:07:11,672 INFO L276 IsEmpty]: Start isEmpty. Operand 463 states and 628 transitions. [2022-02-20 18:07:11,674 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:11,674 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:11,674 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:07:11,674 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:07:11,675 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 447 states, 323 states have (on average 1.2910216718266254) internal successors, (417), 358 states have internal predecessors, (417), 72 states have call successors, (72), 41 states have call predecessors, (72), 51 states have return successors, (110), 81 states have call predecessors, (110), 72 states have call successors, (110) [2022-02-20 18:07:11,688 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 447 states to 447 states and 599 transitions. [2022-02-20 18:07:11,689 INFO L78 Accepts]: Start accepts. Automaton has 447 states and 599 transitions. Word has length 83 [2022-02-20 18:07:11,689 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:07:11,689 INFO L470 AbstractCegarLoop]: Abstraction has 447 states and 599 transitions. [2022-02-20 18:07:11,689 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.666666666666666) internal successors, (52), 5 states have internal predecessors, (52), 2 states have call successors, (11), 2 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-02-20 18:07:11,690 INFO L276 IsEmpty]: Start isEmpty. Operand 447 states and 599 transitions. [2022-02-20 18:07:11,690 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 84 [2022-02-20 18:07:11,691 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:07:11,691 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:07:11,691 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-02-20 18:07:11,691 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:07:11,692 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:07:11,692 INFO L85 PathProgramCache]: Analyzing trace with hash 1871775103, now seen corresponding path program 1 times [2022-02-20 18:07:11,692 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:07:11,692 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1216910202] [2022-02-20 18:07:11,692 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:07:11,692 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:07:11,717 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:11,742 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-02-20 18:07:11,744 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:11,746 INFO L290 TraceCheckUtils]: 0: Hoare triple {8741#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {8741#true} is VALID [2022-02-20 18:07:11,746 INFO L290 TraceCheckUtils]: 1: Hoare triple {8741#true} assume true; {8741#true} is VALID [2022-02-20 18:07:11,746 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {8741#true} {8743#(= ~__SELECTED_FEATURE_base~0 1)} #355#return; {8743#(= ~__SELECTED_FEATURE_base~0 1)} is VALID [2022-02-20 18:07:11,747 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:07:11,748 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:11,750 INFO L290 TraceCheckUtils]: 0: Hoare triple {8741#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {8741#true} is VALID [2022-02-20 18:07:11,751 INFO L290 TraceCheckUtils]: 1: Hoare triple {8741#true} assume true; {8741#true} is VALID [2022-02-20 18:07:11,751 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {8741#true} {8743#(= ~__SELECTED_FEATURE_base~0 1)} #357#return; {8743#(= ~__SELECTED_FEATURE_base~0 1)} is VALID [2022-02-20 18:07:11,751 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-02-20 18:07:11,755 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:11,757 INFO L290 TraceCheckUtils]: 0: Hoare triple {8741#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {8741#true} is VALID [2022-02-20 18:07:11,757 INFO L290 TraceCheckUtils]: 1: Hoare triple {8741#true} assume true; {8741#true} is VALID [2022-02-20 18:07:11,757 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {8741#true} {8743#(= ~__SELECTED_FEATURE_base~0 1)} #359#return; {8743#(= ~__SELECTED_FEATURE_base~0 1)} is VALID [2022-02-20 18:07:11,757 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:07:11,759 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:11,761 INFO L290 TraceCheckUtils]: 0: Hoare triple {8741#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {8741#true} is VALID [2022-02-20 18:07:11,761 INFO L290 TraceCheckUtils]: 1: Hoare triple {8741#true} assume true; {8741#true} is VALID [2022-02-20 18:07:11,761 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {8741#true} {8743#(= ~__SELECTED_FEATURE_base~0 1)} #361#return; {8743#(= ~__SELECTED_FEATURE_base~0 1)} is VALID [2022-02-20 18:07:11,761 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-02-20 18:07:11,763 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:11,765 INFO L290 TraceCheckUtils]: 0: Hoare triple {8741#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {8741#true} is VALID [2022-02-20 18:07:11,765 INFO L290 TraceCheckUtils]: 1: Hoare triple {8741#true} assume true; {8741#true} is VALID [2022-02-20 18:07:11,765 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {8741#true} {8743#(= ~__SELECTED_FEATURE_base~0 1)} #363#return; {8743#(= ~__SELECTED_FEATURE_base~0 1)} is VALID [2022-02-20 18:07:11,766 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-02-20 18:07:11,767 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:11,769 INFO L290 TraceCheckUtils]: 0: Hoare triple {8741#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {8741#true} is VALID [2022-02-20 18:07:11,769 INFO L290 TraceCheckUtils]: 1: Hoare triple {8741#true} assume true; {8741#true} is VALID [2022-02-20 18:07:11,770 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {8741#true} {8743#(= ~__SELECTED_FEATURE_base~0 1)} #365#return; {8743#(= ~__SELECTED_FEATURE_base~0 1)} is VALID [2022-02-20 18:07:11,773 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-02-20 18:07:11,776 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:11,781 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:07:11,784 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:11,799 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-02-20 18:07:11,800 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:11,802 INFO L290 TraceCheckUtils]: 0: Hoare triple {8788#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {8741#true} is VALID [2022-02-20 18:07:11,802 INFO L290 TraceCheckUtils]: 1: Hoare triple {8741#true} assume true; {8741#true} is VALID [2022-02-20 18:07:11,802 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {8741#true} {8742#false} #331#return; {8742#false} is VALID [2022-02-20 18:07:11,802 INFO L290 TraceCheckUtils]: 0: Hoare triple {8788#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret8#1, processEnvironment__role__highWaterSensor_~tmp~1#1;havoc processEnvironment__role__highWaterSensor_~tmp~1#1; {8741#true} is VALID [2022-02-20 18:07:11,802 INFO L290 TraceCheckUtils]: 1: Hoare triple {8741#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret21#1, isHighWaterLevel_~retValue_acc~2#1, isHighWaterLevel_~tmp~5#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~2#1;havoc isHighWaterLevel_~tmp~5#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {8741#true} is VALID [2022-02-20 18:07:11,803 INFO L290 TraceCheckUtils]: 2: Hoare triple {8741#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~11#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {8806#(<= 1 |processEnvironment__before__lowWaterSensor_isHighWaterSensorDry_#res#1|)} is VALID [2022-02-20 18:07:11,803 INFO L290 TraceCheckUtils]: 3: Hoare triple {8806#(<= 1 |processEnvironment__before__lowWaterSensor_isHighWaterSensorDry_#res#1|)} isHighWaterLevel_#t~ret21#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret21#1 && isHighWaterLevel_#t~ret21#1 <= 2147483647;isHighWaterLevel_~tmp~5#1 := isHighWaterLevel_#t~ret21#1;havoc isHighWaterLevel_#t~ret21#1; {8807#(<= 1 |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp~5#1|)} is VALID [2022-02-20 18:07:11,804 INFO L290 TraceCheckUtils]: 4: Hoare triple {8807#(<= 1 |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp~5#1|)} assume !(0 != isHighWaterLevel_~tmp~5#1);isHighWaterLevel_~tmp___0~1#1 := 1; {8742#false} is VALID [2022-02-20 18:07:11,804 INFO L290 TraceCheckUtils]: 5: Hoare triple {8742#false} isHighWaterLevel_~retValue_acc~2#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~2#1; {8742#false} is VALID [2022-02-20 18:07:11,804 INFO L290 TraceCheckUtils]: 6: Hoare triple {8742#false} processEnvironment__role__highWaterSensor_#t~ret8#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret8#1 && processEnvironment__role__highWaterSensor_#t~ret8#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~1#1 := processEnvironment__role__highWaterSensor_#t~ret8#1;havoc processEnvironment__role__highWaterSensor_#t~ret8#1; {8742#false} is VALID [2022-02-20 18:07:11,804 INFO L290 TraceCheckUtils]: 7: Hoare triple {8742#false} assume 0 != processEnvironment__role__highWaterSensor_~tmp~1#1;assume { :begin_inline_activatePump } true; {8742#false} is VALID [2022-02-20 18:07:11,804 INFO L290 TraceCheckUtils]: 8: Hoare triple {8742#false} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {8742#false} is VALID [2022-02-20 18:07:11,804 INFO L272 TraceCheckUtils]: 9: Hoare triple {8742#false} call activatePump__before__methaneQuery(); {8788#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:07:11,804 INFO L290 TraceCheckUtils]: 10: Hoare triple {8788#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {8741#true} is VALID [2022-02-20 18:07:11,804 INFO L290 TraceCheckUtils]: 11: Hoare triple {8741#true} assume true; {8741#true} is VALID [2022-02-20 18:07:11,805 INFO L284 TraceCheckUtils]: 12: Hoare quadruple {8741#true} {8742#false} #331#return; {8742#false} is VALID [2022-02-20 18:07:11,805 INFO L290 TraceCheckUtils]: 13: Hoare triple {8742#false} assume { :end_inline_activatePump } true; {8742#false} is VALID [2022-02-20 18:07:11,805 INFO L290 TraceCheckUtils]: 14: Hoare triple {8742#false} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {8742#false} is VALID [2022-02-20 18:07:11,805 INFO L290 TraceCheckUtils]: 15: Hoare triple {8742#false} assume true; {8742#false} is VALID [2022-02-20 18:07:11,805 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {8742#false} {8741#true} #383#return; {8742#false} is VALID [2022-02-20 18:07:11,805 INFO L290 TraceCheckUtils]: 0: Hoare triple {8788#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {8741#true} is VALID [2022-02-20 18:07:11,806 INFO L272 TraceCheckUtils]: 1: Hoare triple {8741#true} call processEnvironment__before__lowWaterSensor(); {8788#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:07:11,806 INFO L290 TraceCheckUtils]: 2: Hoare triple {8788#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret8#1, processEnvironment__role__highWaterSensor_~tmp~1#1;havoc processEnvironment__role__highWaterSensor_~tmp~1#1; {8741#true} is VALID [2022-02-20 18:07:11,806 INFO L290 TraceCheckUtils]: 3: Hoare triple {8741#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret21#1, isHighWaterLevel_~retValue_acc~2#1, isHighWaterLevel_~tmp~5#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~2#1;havoc isHighWaterLevel_~tmp~5#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {8741#true} is VALID [2022-02-20 18:07:11,806 INFO L290 TraceCheckUtils]: 4: Hoare triple {8741#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~11#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {8806#(<= 1 |processEnvironment__before__lowWaterSensor_isHighWaterSensorDry_#res#1|)} is VALID [2022-02-20 18:07:11,807 INFO L290 TraceCheckUtils]: 5: Hoare triple {8806#(<= 1 |processEnvironment__before__lowWaterSensor_isHighWaterSensorDry_#res#1|)} isHighWaterLevel_#t~ret21#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret21#1 && isHighWaterLevel_#t~ret21#1 <= 2147483647;isHighWaterLevel_~tmp~5#1 := isHighWaterLevel_#t~ret21#1;havoc isHighWaterLevel_#t~ret21#1; {8807#(<= 1 |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp~5#1|)} is VALID [2022-02-20 18:07:11,807 INFO L290 TraceCheckUtils]: 6: Hoare triple {8807#(<= 1 |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp~5#1|)} assume !(0 != isHighWaterLevel_~tmp~5#1);isHighWaterLevel_~tmp___0~1#1 := 1; {8742#false} is VALID [2022-02-20 18:07:11,807 INFO L290 TraceCheckUtils]: 7: Hoare triple {8742#false} isHighWaterLevel_~retValue_acc~2#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~2#1; {8742#false} is VALID [2022-02-20 18:07:11,807 INFO L290 TraceCheckUtils]: 8: Hoare triple {8742#false} processEnvironment__role__highWaterSensor_#t~ret8#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret8#1 && processEnvironment__role__highWaterSensor_#t~ret8#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~1#1 := processEnvironment__role__highWaterSensor_#t~ret8#1;havoc processEnvironment__role__highWaterSensor_#t~ret8#1; {8742#false} is VALID [2022-02-20 18:07:11,807 INFO L290 TraceCheckUtils]: 9: Hoare triple {8742#false} assume 0 != processEnvironment__role__highWaterSensor_~tmp~1#1;assume { :begin_inline_activatePump } true; {8742#false} is VALID [2022-02-20 18:07:11,808 INFO L290 TraceCheckUtils]: 10: Hoare triple {8742#false} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {8742#false} is VALID [2022-02-20 18:07:11,808 INFO L272 TraceCheckUtils]: 11: Hoare triple {8742#false} call activatePump__before__methaneQuery(); {8788#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:07:11,808 INFO L290 TraceCheckUtils]: 12: Hoare triple {8788#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {8741#true} is VALID [2022-02-20 18:07:11,808 INFO L290 TraceCheckUtils]: 13: Hoare triple {8741#true} assume true; {8741#true} is VALID [2022-02-20 18:07:11,808 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {8741#true} {8742#false} #331#return; {8742#false} is VALID [2022-02-20 18:07:11,808 INFO L290 TraceCheckUtils]: 15: Hoare triple {8742#false} assume { :end_inline_activatePump } true; {8742#false} is VALID [2022-02-20 18:07:11,808 INFO L290 TraceCheckUtils]: 16: Hoare triple {8742#false} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {8742#false} is VALID [2022-02-20 18:07:11,809 INFO L290 TraceCheckUtils]: 17: Hoare triple {8742#false} assume true; {8742#false} is VALID [2022-02-20 18:07:11,809 INFO L284 TraceCheckUtils]: 18: Hoare quadruple {8742#false} {8741#true} #383#return; {8742#false} is VALID [2022-02-20 18:07:11,809 INFO L290 TraceCheckUtils]: 19: Hoare triple {8742#false} assume true; {8742#false} is VALID [2022-02-20 18:07:11,809 INFO L284 TraceCheckUtils]: 20: Hoare quadruple {8742#false} {8741#true} #351#return; {8742#false} is VALID [2022-02-20 18:07:11,809 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 74 [2022-02-20 18:07:11,810 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:11,812 INFO L290 TraceCheckUtils]: 0: Hoare triple {8741#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~methaneLevelCritical~0;#res := ~retValue_acc~9; {8741#true} is VALID [2022-02-20 18:07:11,812 INFO L290 TraceCheckUtils]: 1: Hoare triple {8741#true} assume true; {8741#true} is VALID [2022-02-20 18:07:11,812 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {8741#true} {8742#false} #353#return; {8742#false} is VALID [2022-02-20 18:07:11,812 INFO L290 TraceCheckUtils]: 0: Hoare triple {8741#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(38, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(21, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(30, 21);call #Ultimate.allocInit(9, 22);call #Ultimate.allocInit(25, 23);call #Ultimate.allocInit(13, 24);call #Ultimate.allocInit(7, 25);call write~init~int(44, 25, 0, 1);call write~init~int(77, 25, 1, 1);call write~init~int(101, 25, 2, 1);call write~init~int(116, 25, 3, 1);call write~init~int(104, 25, 4, 1);call write~init~int(58, 25, 5, 1);call write~init~int(0, 25, 6, 1);call #Ultimate.allocInit(5, 26);call write~init~int(67, 26, 0, 1);call write~init~int(82, 26, 1, 1);call write~init~int(73, 26, 2, 1);call write~init~int(84, 26, 3, 1);call write~init~int(0, 26, 4, 1);call #Ultimate.allocInit(3, 27);call write~init~int(79, 27, 0, 1);call write~init~int(75, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(41, 28, 0, 1);call write~init~int(0, 28, 1, 1);~__SELECTED_FEATURE_base~0 := 0;~__SELECTED_FEATURE_highWaterSensor~0 := 0;~__SELECTED_FEATURE_lowWaterSensor~0 := 0;~__SELECTED_FEATURE_methaneQuery~0 := 0;~__SELECTED_FEATURE_methaneAlarm~0 := 0;~__SELECTED_FEATURE_stopCommand~0 := 0;~__SELECTED_FEATURE_startCommand~0 := 0;~__GUIDSL_ROOT_PRODUCTION~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4; {8741#true} is VALID [2022-02-20 18:07:11,812 INFO L290 TraceCheckUtils]: 1: Hoare triple {8741#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret60#1, main_~retValue_acc~13#1, main_~tmp~11#1;havoc main_~retValue_acc~13#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1; {8741#true} is VALID [2022-02-20 18:07:11,813 INFO L290 TraceCheckUtils]: 2: Hoare triple {8741#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret47#1, select_features_#t~ret48#1, select_features_#t~ret49#1, select_features_#t~ret50#1, select_features_#t~ret51#1, select_features_#t~ret52#1;~__SELECTED_FEATURE_base~0 := 1; {8743#(= ~__SELECTED_FEATURE_base~0 1)} is VALID [2022-02-20 18:07:11,813 INFO L272 TraceCheckUtils]: 3: Hoare triple {8743#(= ~__SELECTED_FEATURE_base~0 1)} call select_features_#t~ret47#1 := select_one(); {8741#true} is VALID [2022-02-20 18:07:11,813 INFO L290 TraceCheckUtils]: 4: Hoare triple {8741#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {8741#true} is VALID [2022-02-20 18:07:11,813 INFO L290 TraceCheckUtils]: 5: Hoare triple {8741#true} assume true; {8741#true} is VALID [2022-02-20 18:07:11,813 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {8741#true} {8743#(= ~__SELECTED_FEATURE_base~0 1)} #355#return; {8743#(= ~__SELECTED_FEATURE_base~0 1)} is VALID [2022-02-20 18:07:11,814 INFO L290 TraceCheckUtils]: 7: Hoare triple {8743#(= ~__SELECTED_FEATURE_base~0 1)} assume -2147483648 <= select_features_#t~ret47#1 && select_features_#t~ret47#1 <= 2147483647;~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret47#1;havoc select_features_#t~ret47#1; {8743#(= ~__SELECTED_FEATURE_base~0 1)} is VALID [2022-02-20 18:07:11,814 INFO L272 TraceCheckUtils]: 8: Hoare triple {8743#(= ~__SELECTED_FEATURE_base~0 1)} call select_features_#t~ret48#1 := select_one(); {8741#true} is VALID [2022-02-20 18:07:11,814 INFO L290 TraceCheckUtils]: 9: Hoare triple {8741#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {8741#true} is VALID [2022-02-20 18:07:11,814 INFO L290 TraceCheckUtils]: 10: Hoare triple {8741#true} assume true; {8741#true} is VALID [2022-02-20 18:07:11,814 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {8741#true} {8743#(= ~__SELECTED_FEATURE_base~0 1)} #357#return; {8743#(= ~__SELECTED_FEATURE_base~0 1)} is VALID [2022-02-20 18:07:11,815 INFO L290 TraceCheckUtils]: 12: Hoare triple {8743#(= ~__SELECTED_FEATURE_base~0 1)} assume -2147483648 <= select_features_#t~ret48#1 && select_features_#t~ret48#1 <= 2147483647;~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret48#1;havoc select_features_#t~ret48#1; {8743#(= ~__SELECTED_FEATURE_base~0 1)} is VALID [2022-02-20 18:07:11,815 INFO L272 TraceCheckUtils]: 13: Hoare triple {8743#(= ~__SELECTED_FEATURE_base~0 1)} call select_features_#t~ret49#1 := select_one(); {8741#true} is VALID [2022-02-20 18:07:11,815 INFO L290 TraceCheckUtils]: 14: Hoare triple {8741#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {8741#true} is VALID [2022-02-20 18:07:11,815 INFO L290 TraceCheckUtils]: 15: Hoare triple {8741#true} assume true; {8741#true} is VALID [2022-02-20 18:07:11,815 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {8741#true} {8743#(= ~__SELECTED_FEATURE_base~0 1)} #359#return; {8743#(= ~__SELECTED_FEATURE_base~0 1)} is VALID [2022-02-20 18:07:11,816 INFO L290 TraceCheckUtils]: 17: Hoare triple {8743#(= ~__SELECTED_FEATURE_base~0 1)} assume -2147483648 <= select_features_#t~ret49#1 && select_features_#t~ret49#1 <= 2147483647;~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret49#1;havoc select_features_#t~ret49#1; {8743#(= ~__SELECTED_FEATURE_base~0 1)} is VALID [2022-02-20 18:07:11,816 INFO L272 TraceCheckUtils]: 18: Hoare triple {8743#(= ~__SELECTED_FEATURE_base~0 1)} call select_features_#t~ret50#1 := select_one(); {8741#true} is VALID [2022-02-20 18:07:11,816 INFO L290 TraceCheckUtils]: 19: Hoare triple {8741#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {8741#true} is VALID [2022-02-20 18:07:11,816 INFO L290 TraceCheckUtils]: 20: Hoare triple {8741#true} assume true; {8741#true} is VALID [2022-02-20 18:07:11,816 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {8741#true} {8743#(= ~__SELECTED_FEATURE_base~0 1)} #361#return; {8743#(= ~__SELECTED_FEATURE_base~0 1)} is VALID [2022-02-20 18:07:11,817 INFO L290 TraceCheckUtils]: 22: Hoare triple {8743#(= ~__SELECTED_FEATURE_base~0 1)} assume -2147483648 <= select_features_#t~ret50#1 && select_features_#t~ret50#1 <= 2147483647;~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret50#1;havoc select_features_#t~ret50#1; {8743#(= ~__SELECTED_FEATURE_base~0 1)} is VALID [2022-02-20 18:07:11,817 INFO L272 TraceCheckUtils]: 23: Hoare triple {8743#(= ~__SELECTED_FEATURE_base~0 1)} call select_features_#t~ret51#1 := select_one(); {8741#true} is VALID [2022-02-20 18:07:11,817 INFO L290 TraceCheckUtils]: 24: Hoare triple {8741#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {8741#true} is VALID [2022-02-20 18:07:11,817 INFO L290 TraceCheckUtils]: 25: Hoare triple {8741#true} assume true; {8741#true} is VALID [2022-02-20 18:07:11,818 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {8741#true} {8743#(= ~__SELECTED_FEATURE_base~0 1)} #363#return; {8743#(= ~__SELECTED_FEATURE_base~0 1)} is VALID [2022-02-20 18:07:11,818 INFO L290 TraceCheckUtils]: 27: Hoare triple {8743#(= ~__SELECTED_FEATURE_base~0 1)} assume -2147483648 <= select_features_#t~ret51#1 && select_features_#t~ret51#1 <= 2147483647;~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret51#1;havoc select_features_#t~ret51#1; {8743#(= ~__SELECTED_FEATURE_base~0 1)} is VALID [2022-02-20 18:07:11,818 INFO L272 TraceCheckUtils]: 28: Hoare triple {8743#(= ~__SELECTED_FEATURE_base~0 1)} call select_features_#t~ret52#1 := select_one(); {8741#true} is VALID [2022-02-20 18:07:11,818 INFO L290 TraceCheckUtils]: 29: Hoare triple {8741#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {8741#true} is VALID [2022-02-20 18:07:11,818 INFO L290 TraceCheckUtils]: 30: Hoare triple {8741#true} assume true; {8741#true} is VALID [2022-02-20 18:07:11,819 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {8741#true} {8743#(= ~__SELECTED_FEATURE_base~0 1)} #365#return; {8743#(= ~__SELECTED_FEATURE_base~0 1)} is VALID [2022-02-20 18:07:11,819 INFO L290 TraceCheckUtils]: 32: Hoare triple {8743#(= ~__SELECTED_FEATURE_base~0 1)} assume -2147483648 <= select_features_#t~ret52#1 && select_features_#t~ret52#1 <= 2147483647;~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret52#1;havoc select_features_#t~ret52#1; {8743#(= ~__SELECTED_FEATURE_base~0 1)} is VALID [2022-02-20 18:07:11,819 INFO L290 TraceCheckUtils]: 33: Hoare triple {8743#(= ~__SELECTED_FEATURE_base~0 1)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~8#1;havoc valid_product_~retValue_acc~8#1;valid_product_~retValue_acc~8#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~8#1; {8762#(= |ULTIMATE.start_valid_product_#res#1| 1)} is VALID [2022-02-20 18:07:11,820 INFO L290 TraceCheckUtils]: 34: Hoare triple {8762#(= |ULTIMATE.start_valid_product_#res#1| 1)} main_#t~ret60#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret60#1 && main_#t~ret60#1 <= 2147483647;main_~tmp~11#1 := main_#t~ret60#1;havoc main_#t~ret60#1; {8763#(= |ULTIMATE.start_main_~tmp~11#1| 1)} is VALID [2022-02-20 18:07:11,820 INFO L290 TraceCheckUtils]: 35: Hoare triple {8763#(= |ULTIMATE.start_main_~tmp~11#1| 1)} assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; {8741#true} is VALID [2022-02-20 18:07:11,820 INFO L290 TraceCheckUtils]: 36: Hoare triple {8741#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet4#1, test_#t~nondet5#1, test_#t~nondet6#1, test_#t~nondet7#1, test_~splverifierCounter~0#1, test_~tmp~0#1, test_~tmp___0~0#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~0#1;havoc test_~tmp___0~0#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {8741#true} is VALID [2022-02-20 18:07:11,820 INFO L290 TraceCheckUtils]: 37: Hoare triple {8741#true} assume !false; {8741#true} is VALID [2022-02-20 18:07:11,820 INFO L290 TraceCheckUtils]: 38: Hoare triple {8741#true} assume test_~splverifierCounter~0#1 < 4; {8741#true} is VALID [2022-02-20 18:07:11,820 INFO L290 TraceCheckUtils]: 39: Hoare triple {8741#true} assume -2147483648 <= test_#t~nondet4#1 && test_#t~nondet4#1 <= 2147483647;test_~tmp~0#1 := test_#t~nondet4#1;havoc test_#t~nondet4#1; {8741#true} is VALID [2022-02-20 18:07:11,820 INFO L290 TraceCheckUtils]: 40: Hoare triple {8741#true} assume !(0 != test_~tmp~0#1); {8741#true} is VALID [2022-02-20 18:07:11,820 INFO L290 TraceCheckUtils]: 41: Hoare triple {8741#true} assume -2147483648 <= test_#t~nondet5#1 && test_#t~nondet5#1 <= 2147483647;test_~tmp___0~0#1 := test_#t~nondet5#1;havoc test_#t~nondet5#1; {8741#true} is VALID [2022-02-20 18:07:11,821 INFO L290 TraceCheckUtils]: 42: Hoare triple {8741#true} assume !(0 != test_~tmp___0~0#1); {8741#true} is VALID [2022-02-20 18:07:11,821 INFO L290 TraceCheckUtils]: 43: Hoare triple {8741#true} assume -2147483648 <= test_#t~nondet6#1 && test_#t~nondet6#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet6#1;havoc test_#t~nondet6#1; {8741#true} is VALID [2022-02-20 18:07:11,821 INFO L290 TraceCheckUtils]: 44: Hoare triple {8741#true} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet7#1 && test_#t~nondet7#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet7#1;havoc test_#t~nondet7#1; {8741#true} is VALID [2022-02-20 18:07:11,821 INFO L290 TraceCheckUtils]: 45: Hoare triple {8741#true} assume !(0 != test_~tmp___1~0#1); {8741#true} is VALID [2022-02-20 18:07:11,821 INFO L272 TraceCheckUtils]: 46: Hoare triple {8741#true} call timeShift(); {8741#true} is VALID [2022-02-20 18:07:11,821 INFO L290 TraceCheckUtils]: 47: Hoare triple {8741#true} assume !(0 != ~pumpRunning~0); {8741#true} is VALID [2022-02-20 18:07:11,821 INFO L290 TraceCheckUtils]: 48: Hoare triple {8741#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {8741#true} is VALID [2022-02-20 18:07:11,821 INFO L290 TraceCheckUtils]: 49: Hoare triple {8741#true} assume !(0 != ~__SELECTED_FEATURE_methaneAlarm~0); {8741#true} is VALID [2022-02-20 18:07:11,822 INFO L272 TraceCheckUtils]: 50: Hoare triple {8741#true} call processEnvironment__before__methaneAlarm(); {8788#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:07:11,822 INFO L290 TraceCheckUtils]: 51: Hoare triple {8788#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {8741#true} is VALID [2022-02-20 18:07:11,822 INFO L272 TraceCheckUtils]: 52: Hoare triple {8741#true} call processEnvironment__before__lowWaterSensor(); {8788#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:07:11,822 INFO L290 TraceCheckUtils]: 53: Hoare triple {8788#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret8#1, processEnvironment__role__highWaterSensor_~tmp~1#1;havoc processEnvironment__role__highWaterSensor_~tmp~1#1; {8741#true} is VALID [2022-02-20 18:07:11,822 INFO L290 TraceCheckUtils]: 54: Hoare triple {8741#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret21#1, isHighWaterLevel_~retValue_acc~2#1, isHighWaterLevel_~tmp~5#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~2#1;havoc isHighWaterLevel_~tmp~5#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {8741#true} is VALID [2022-02-20 18:07:11,823 INFO L290 TraceCheckUtils]: 55: Hoare triple {8741#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~11#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {8806#(<= 1 |processEnvironment__before__lowWaterSensor_isHighWaterSensorDry_#res#1|)} is VALID [2022-02-20 18:07:11,823 INFO L290 TraceCheckUtils]: 56: Hoare triple {8806#(<= 1 |processEnvironment__before__lowWaterSensor_isHighWaterSensorDry_#res#1|)} isHighWaterLevel_#t~ret21#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret21#1 && isHighWaterLevel_#t~ret21#1 <= 2147483647;isHighWaterLevel_~tmp~5#1 := isHighWaterLevel_#t~ret21#1;havoc isHighWaterLevel_#t~ret21#1; {8807#(<= 1 |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp~5#1|)} is VALID [2022-02-20 18:07:11,824 INFO L290 TraceCheckUtils]: 57: Hoare triple {8807#(<= 1 |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp~5#1|)} assume !(0 != isHighWaterLevel_~tmp~5#1);isHighWaterLevel_~tmp___0~1#1 := 1; {8742#false} is VALID [2022-02-20 18:07:11,824 INFO L290 TraceCheckUtils]: 58: Hoare triple {8742#false} isHighWaterLevel_~retValue_acc~2#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~2#1; {8742#false} is VALID [2022-02-20 18:07:11,824 INFO L290 TraceCheckUtils]: 59: Hoare triple {8742#false} processEnvironment__role__highWaterSensor_#t~ret8#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret8#1 && processEnvironment__role__highWaterSensor_#t~ret8#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~1#1 := processEnvironment__role__highWaterSensor_#t~ret8#1;havoc processEnvironment__role__highWaterSensor_#t~ret8#1; {8742#false} is VALID [2022-02-20 18:07:11,824 INFO L290 TraceCheckUtils]: 60: Hoare triple {8742#false} assume 0 != processEnvironment__role__highWaterSensor_~tmp~1#1;assume { :begin_inline_activatePump } true; {8742#false} is VALID [2022-02-20 18:07:11,824 INFO L290 TraceCheckUtils]: 61: Hoare triple {8742#false} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {8742#false} is VALID [2022-02-20 18:07:11,824 INFO L272 TraceCheckUtils]: 62: Hoare triple {8742#false} call activatePump__before__methaneQuery(); {8788#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:07:11,824 INFO L290 TraceCheckUtils]: 63: Hoare triple {8788#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {8741#true} is VALID [2022-02-20 18:07:11,824 INFO L290 TraceCheckUtils]: 64: Hoare triple {8741#true} assume true; {8741#true} is VALID [2022-02-20 18:07:11,825 INFO L284 TraceCheckUtils]: 65: Hoare quadruple {8741#true} {8742#false} #331#return; {8742#false} is VALID [2022-02-20 18:07:11,825 INFO L290 TraceCheckUtils]: 66: Hoare triple {8742#false} assume { :end_inline_activatePump } true; {8742#false} is VALID [2022-02-20 18:07:11,825 INFO L290 TraceCheckUtils]: 67: Hoare triple {8742#false} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {8742#false} is VALID [2022-02-20 18:07:11,825 INFO L290 TraceCheckUtils]: 68: Hoare triple {8742#false} assume true; {8742#false} is VALID [2022-02-20 18:07:11,825 INFO L284 TraceCheckUtils]: 69: Hoare quadruple {8742#false} {8741#true} #383#return; {8742#false} is VALID [2022-02-20 18:07:11,825 INFO L290 TraceCheckUtils]: 70: Hoare triple {8742#false} assume true; {8742#false} is VALID [2022-02-20 18:07:11,825 INFO L284 TraceCheckUtils]: 71: Hoare quadruple {8742#false} {8741#true} #351#return; {8742#false} is VALID [2022-02-20 18:07:11,825 INFO L290 TraceCheckUtils]: 72: Hoare triple {8742#false} assume { :end_inline_processEnvironment } true; {8742#false} is VALID [2022-02-20 18:07:11,826 INFO L290 TraceCheckUtils]: 73: Hoare triple {8742#false} assume { :begin_inline___utac_acc__Specification1_spec__1 } true;havoc __utac_acc__Specification1_spec__1_#t~ret53#1, __utac_acc__Specification1_spec__1_#t~ret54#1, __utac_acc__Specification1_spec__1_~tmp~10#1, __utac_acc__Specification1_spec__1_~tmp___0~3#1;havoc __utac_acc__Specification1_spec__1_~tmp~10#1;havoc __utac_acc__Specification1_spec__1_~tmp___0~3#1; {8742#false} is VALID [2022-02-20 18:07:11,826 INFO L272 TraceCheckUtils]: 74: Hoare triple {8742#false} call __utac_acc__Specification1_spec__1_#t~ret53#1 := isMethaneLevelCritical(); {8741#true} is VALID [2022-02-20 18:07:11,826 INFO L290 TraceCheckUtils]: 75: Hoare triple {8741#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~methaneLevelCritical~0;#res := ~retValue_acc~9; {8741#true} is VALID [2022-02-20 18:07:11,826 INFO L290 TraceCheckUtils]: 76: Hoare triple {8741#true} assume true; {8741#true} is VALID [2022-02-20 18:07:11,826 INFO L284 TraceCheckUtils]: 77: Hoare quadruple {8741#true} {8742#false} #353#return; {8742#false} is VALID [2022-02-20 18:07:11,826 INFO L290 TraceCheckUtils]: 78: Hoare triple {8742#false} assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret53#1 && __utac_acc__Specification1_spec__1_#t~ret53#1 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp~10#1 := __utac_acc__Specification1_spec__1_#t~ret53#1;havoc __utac_acc__Specification1_spec__1_#t~ret53#1; {8742#false} is VALID [2022-02-20 18:07:11,826 INFO L290 TraceCheckUtils]: 79: Hoare triple {8742#false} assume 0 != __utac_acc__Specification1_spec__1_~tmp~10#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~1#1;havoc isPumpRunning_~retValue_acc~1#1;isPumpRunning_~retValue_acc~1#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~1#1; {8742#false} is VALID [2022-02-20 18:07:11,826 INFO L290 TraceCheckUtils]: 80: Hoare triple {8742#false} __utac_acc__Specification1_spec__1_#t~ret54#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret54#1 && __utac_acc__Specification1_spec__1_#t~ret54#1 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp___0~3#1 := __utac_acc__Specification1_spec__1_#t~ret54#1;havoc __utac_acc__Specification1_spec__1_#t~ret54#1; {8742#false} is VALID [2022-02-20 18:07:11,826 INFO L290 TraceCheckUtils]: 81: Hoare triple {8742#false} assume 0 != __utac_acc__Specification1_spec__1_~tmp___0~3#1;assume { :begin_inline___automaton_fail } true; {8742#false} is VALID [2022-02-20 18:07:11,827 INFO L290 TraceCheckUtils]: 82: Hoare triple {8742#false} assume !false; {8742#false} is VALID [2022-02-20 18:07:11,827 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-02-20 18:07:11,827 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:07:11,827 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1216910202] [2022-02-20 18:07:11,827 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1216910202] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:07:11,827 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:07:11,828 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-02-20 18:07:11,828 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [509382351] [2022-02-20 18:07:11,828 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:07:11,828 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 6.5) internal successors, (52), 7 states have internal predecessors, (52), 3 states have call successors, (11), 2 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 3 states have call successors, (10) Word has length 83 [2022-02-20 18:07:11,829 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:07:11,829 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 8 states, 8 states have (on average 6.5) internal successors, (52), 7 states have internal predecessors, (52), 3 states have call successors, (11), 2 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 3 states have call successors, (10) [2022-02-20 18:07:11,867 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 73 edges. 73 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:11,868 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-02-20 18:07:11,868 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:07:11,868 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-02-20 18:07:11,868 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2022-02-20 18:07:11,869 INFO L87 Difference]: Start difference. First operand 447 states and 599 transitions. Second operand has 8 states, 8 states have (on average 6.5) internal successors, (52), 7 states have internal predecessors, (52), 3 states have call successors, (11), 2 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 3 states have call successors, (10) [2022-02-20 18:07:12,746 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:12,746 INFO L93 Difference]: Finished difference Result 892 states and 1242 transitions. [2022-02-20 18:07:12,746 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-02-20 18:07:12,746 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 6.5) internal successors, (52), 7 states have internal predecessors, (52), 3 states have call successors, (11), 2 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 3 states have call successors, (10) Word has length 83 [2022-02-20 18:07:12,747 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:07:12,747 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 6.5) internal successors, (52), 7 states have internal predecessors, (52), 3 states have call successors, (11), 2 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 3 states have call successors, (10) [2022-02-20 18:07:12,750 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 356 transitions. [2022-02-20 18:07:12,751 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 6.5) internal successors, (52), 7 states have internal predecessors, (52), 3 states have call successors, (11), 2 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 3 states have call successors, (10) [2022-02-20 18:07:12,754 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 356 transitions. [2022-02-20 18:07:12,754 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states and 356 transitions. [2022-02-20 18:07:12,980 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 356 edges. 356 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:12,995 INFO L225 Difference]: With dead ends: 892 [2022-02-20 18:07:12,995 INFO L226 Difference]: Without dead ends: 467 [2022-02-20 18:07:12,997 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 37 GetRequests, 26 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=41, Invalid=115, Unknown=0, NotChecked=0, Total=156 [2022-02-20 18:07:12,997 INFO L933 BasicCegarLoop]: 140 mSDtfsCounter, 285 mSDsluCounter, 468 mSDsCounter, 0 mSdLazyCounter, 301 mSolverCounterSat, 92 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 286 SdHoareTripleChecker+Valid, 608 SdHoareTripleChecker+Invalid, 393 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 92 IncrementalHoareTripleChecker+Valid, 301 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-02-20 18:07:12,998 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [286 Valid, 608 Invalid, 393 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [92 Valid, 301 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-02-20 18:07:12,998 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 467 states. [2022-02-20 18:07:13,022 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 467 to 451. [2022-02-20 18:07:13,022 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:07:13,023 INFO L82 GeneralOperation]: Start isEquivalent. First operand 467 states. Second operand has 451 states, 327 states have (on average 1.2874617737003058) internal successors, (421), 362 states have internal predecessors, (421), 72 states have call successors, (72), 41 states have call predecessors, (72), 51 states have return successors, (110), 81 states have call predecessors, (110), 72 states have call successors, (110) [2022-02-20 18:07:13,024 INFO L74 IsIncluded]: Start isIncluded. First operand 467 states. Second operand has 451 states, 327 states have (on average 1.2874617737003058) internal successors, (421), 362 states have internal predecessors, (421), 72 states have call successors, (72), 41 states have call predecessors, (72), 51 states have return successors, (110), 81 states have call predecessors, (110), 72 states have call successors, (110) [2022-02-20 18:07:13,024 INFO L87 Difference]: Start difference. First operand 467 states. Second operand has 451 states, 327 states have (on average 1.2874617737003058) internal successors, (421), 362 states have internal predecessors, (421), 72 states have call successors, (72), 41 states have call predecessors, (72), 51 states have return successors, (110), 81 states have call predecessors, (110), 72 states have call successors, (110) [2022-02-20 18:07:13,036 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:13,036 INFO L93 Difference]: Finished difference Result 467 states and 626 transitions. [2022-02-20 18:07:13,036 INFO L276 IsEmpty]: Start isEmpty. Operand 467 states and 626 transitions. [2022-02-20 18:07:13,038 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:13,038 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:13,039 INFO L74 IsIncluded]: Start isIncluded. First operand has 451 states, 327 states have (on average 1.2874617737003058) internal successors, (421), 362 states have internal predecessors, (421), 72 states have call successors, (72), 41 states have call predecessors, (72), 51 states have return successors, (110), 81 states have call predecessors, (110), 72 states have call successors, (110) Second operand 467 states. [2022-02-20 18:07:13,039 INFO L87 Difference]: Start difference. First operand has 451 states, 327 states have (on average 1.2874617737003058) internal successors, (421), 362 states have internal predecessors, (421), 72 states have call successors, (72), 41 states have call predecessors, (72), 51 states have return successors, (110), 81 states have call predecessors, (110), 72 states have call successors, (110) Second operand 467 states. [2022-02-20 18:07:13,052 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:13,052 INFO L93 Difference]: Finished difference Result 467 states and 626 transitions. [2022-02-20 18:07:13,052 INFO L276 IsEmpty]: Start isEmpty. Operand 467 states and 626 transitions. [2022-02-20 18:07:13,053 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:13,053 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:13,054 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:07:13,054 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:07:13,055 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 451 states, 327 states have (on average 1.2874617737003058) internal successors, (421), 362 states have internal predecessors, (421), 72 states have call successors, (72), 41 states have call predecessors, (72), 51 states have return successors, (110), 81 states have call predecessors, (110), 72 states have call successors, (110) [2022-02-20 18:07:13,074 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 451 states to 451 states and 603 transitions. [2022-02-20 18:07:13,074 INFO L78 Accepts]: Start accepts. Automaton has 451 states and 603 transitions. Word has length 83 [2022-02-20 18:07:13,074 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:07:13,074 INFO L470 AbstractCegarLoop]: Abstraction has 451 states and 603 transitions. [2022-02-20 18:07:13,075 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 6.5) internal successors, (52), 7 states have internal predecessors, (52), 3 states have call successors, (11), 2 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 3 states have call successors, (10) [2022-02-20 18:07:13,075 INFO L276 IsEmpty]: Start isEmpty. Operand 451 states and 603 transitions. [2022-02-20 18:07:13,076 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 84 [2022-02-20 18:07:13,076 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:07:13,076 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:07:13,076 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-02-20 18:07:13,076 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:07:13,076 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:07:13,076 INFO L85 PathProgramCache]: Analyzing trace with hash 1362302013, now seen corresponding path program 1 times [2022-02-20 18:07:13,076 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:07:13,076 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1199621677] [2022-02-20 18:07:13,077 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:07:13,077 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:07:13,098 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:13,117 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-02-20 18:07:13,119 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:13,121 INFO L290 TraceCheckUtils]: 0: Hoare triple {11680#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {11680#true} is VALID [2022-02-20 18:07:13,121 INFO L290 TraceCheckUtils]: 1: Hoare triple {11680#true} assume true; {11680#true} is VALID [2022-02-20 18:07:13,121 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {11680#true} {11682#(= ~waterLevel~0 1)} #355#return; {11682#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:13,121 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:07:13,123 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:13,124 INFO L290 TraceCheckUtils]: 0: Hoare triple {11680#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {11680#true} is VALID [2022-02-20 18:07:13,125 INFO L290 TraceCheckUtils]: 1: Hoare triple {11680#true} assume true; {11680#true} is VALID [2022-02-20 18:07:13,125 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {11680#true} {11682#(= ~waterLevel~0 1)} #357#return; {11682#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:13,125 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-02-20 18:07:13,126 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:13,128 INFO L290 TraceCheckUtils]: 0: Hoare triple {11680#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {11680#true} is VALID [2022-02-20 18:07:13,128 INFO L290 TraceCheckUtils]: 1: Hoare triple {11680#true} assume true; {11680#true} is VALID [2022-02-20 18:07:13,128 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {11680#true} {11682#(= ~waterLevel~0 1)} #359#return; {11682#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:13,128 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:07:13,130 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:13,131 INFO L290 TraceCheckUtils]: 0: Hoare triple {11680#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {11680#true} is VALID [2022-02-20 18:07:13,131 INFO L290 TraceCheckUtils]: 1: Hoare triple {11680#true} assume true; {11680#true} is VALID [2022-02-20 18:07:13,132 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {11680#true} {11682#(= ~waterLevel~0 1)} #361#return; {11682#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:13,132 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-02-20 18:07:13,133 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:13,134 INFO L290 TraceCheckUtils]: 0: Hoare triple {11680#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {11680#true} is VALID [2022-02-20 18:07:13,135 INFO L290 TraceCheckUtils]: 1: Hoare triple {11680#true} assume true; {11680#true} is VALID [2022-02-20 18:07:13,135 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {11680#true} {11682#(= ~waterLevel~0 1)} #363#return; {11682#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:13,135 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-02-20 18:07:13,136 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:13,138 INFO L290 TraceCheckUtils]: 0: Hoare triple {11680#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {11680#true} is VALID [2022-02-20 18:07:13,138 INFO L290 TraceCheckUtils]: 1: Hoare triple {11680#true} assume true; {11680#true} is VALID [2022-02-20 18:07:13,138 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {11680#true} {11682#(= ~waterLevel~0 1)} #365#return; {11682#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:13,140 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-02-20 18:07:13,143 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:13,150 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:07:13,152 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:13,159 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-02-20 18:07:13,159 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:13,161 INFO L290 TraceCheckUtils]: 0: Hoare triple {11725#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {11680#true} is VALID [2022-02-20 18:07:13,161 INFO L290 TraceCheckUtils]: 1: Hoare triple {11680#true} assume true; {11680#true} is VALID [2022-02-20 18:07:13,161 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {11680#true} {11743#(<= 2 ~waterLevel~0)} #331#return; {11743#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:13,161 INFO L290 TraceCheckUtils]: 0: Hoare triple {11725#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret8#1, processEnvironment__role__highWaterSensor_~tmp~1#1;havoc processEnvironment__role__highWaterSensor_~tmp~1#1; {11680#true} is VALID [2022-02-20 18:07:13,161 INFO L290 TraceCheckUtils]: 1: Hoare triple {11680#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret21#1, isHighWaterLevel_~retValue_acc~2#1, isHighWaterLevel_~tmp~5#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~2#1;havoc isHighWaterLevel_~tmp~5#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {11680#true} is VALID [2022-02-20 18:07:13,162 INFO L290 TraceCheckUtils]: 2: Hoare triple {11680#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~11#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {11743#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:13,162 INFO L290 TraceCheckUtils]: 3: Hoare triple {11743#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret21#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret21#1 && isHighWaterLevel_#t~ret21#1 <= 2147483647;isHighWaterLevel_~tmp~5#1 := isHighWaterLevel_#t~ret21#1;havoc isHighWaterLevel_#t~ret21#1; {11743#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:13,162 INFO L290 TraceCheckUtils]: 4: Hoare triple {11743#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~5#1);isHighWaterLevel_~tmp___0~1#1 := 1; {11743#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:13,163 INFO L290 TraceCheckUtils]: 5: Hoare triple {11743#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~2#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~2#1; {11743#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:13,163 INFO L290 TraceCheckUtils]: 6: Hoare triple {11743#(<= 2 ~waterLevel~0)} processEnvironment__role__highWaterSensor_#t~ret8#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret8#1 && processEnvironment__role__highWaterSensor_#t~ret8#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~1#1 := processEnvironment__role__highWaterSensor_#t~ret8#1;havoc processEnvironment__role__highWaterSensor_#t~ret8#1; {11743#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:13,163 INFO L290 TraceCheckUtils]: 7: Hoare triple {11743#(<= 2 ~waterLevel~0)} assume 0 != processEnvironment__role__highWaterSensor_~tmp~1#1;assume { :begin_inline_activatePump } true; {11743#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:13,163 INFO L290 TraceCheckUtils]: 8: Hoare triple {11743#(<= 2 ~waterLevel~0)} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {11743#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:13,164 INFO L272 TraceCheckUtils]: 9: Hoare triple {11743#(<= 2 ~waterLevel~0)} call activatePump__before__methaneQuery(); {11725#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:07:13,164 INFO L290 TraceCheckUtils]: 10: Hoare triple {11725#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {11680#true} is VALID [2022-02-20 18:07:13,164 INFO L290 TraceCheckUtils]: 11: Hoare triple {11680#true} assume true; {11680#true} is VALID [2022-02-20 18:07:13,164 INFO L284 TraceCheckUtils]: 12: Hoare quadruple {11680#true} {11743#(<= 2 ~waterLevel~0)} #331#return; {11743#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:13,165 INFO L290 TraceCheckUtils]: 13: Hoare triple {11743#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump } true; {11743#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:13,165 INFO L290 TraceCheckUtils]: 14: Hoare triple {11743#(<= 2 ~waterLevel~0)} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {11743#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:13,166 INFO L290 TraceCheckUtils]: 15: Hoare triple {11743#(<= 2 ~waterLevel~0)} assume true; {11743#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:13,166 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {11743#(<= 2 ~waterLevel~0)} {11680#true} #383#return; {11743#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:13,166 INFO L290 TraceCheckUtils]: 0: Hoare triple {11725#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {11680#true} is VALID [2022-02-20 18:07:13,166 INFO L272 TraceCheckUtils]: 1: Hoare triple {11680#true} call processEnvironment__before__lowWaterSensor(); {11725#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:07:13,166 INFO L290 TraceCheckUtils]: 2: Hoare triple {11725#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret8#1, processEnvironment__role__highWaterSensor_~tmp~1#1;havoc processEnvironment__role__highWaterSensor_~tmp~1#1; {11680#true} is VALID [2022-02-20 18:07:13,166 INFO L290 TraceCheckUtils]: 3: Hoare triple {11680#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret21#1, isHighWaterLevel_~retValue_acc~2#1, isHighWaterLevel_~tmp~5#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~2#1;havoc isHighWaterLevel_~tmp~5#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {11680#true} is VALID [2022-02-20 18:07:13,167 INFO L290 TraceCheckUtils]: 4: Hoare triple {11680#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~11#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {11743#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:13,174 INFO L290 TraceCheckUtils]: 5: Hoare triple {11743#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret21#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret21#1 && isHighWaterLevel_#t~ret21#1 <= 2147483647;isHighWaterLevel_~tmp~5#1 := isHighWaterLevel_#t~ret21#1;havoc isHighWaterLevel_#t~ret21#1; {11743#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:13,175 INFO L290 TraceCheckUtils]: 6: Hoare triple {11743#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~5#1);isHighWaterLevel_~tmp___0~1#1 := 1; {11743#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:13,175 INFO L290 TraceCheckUtils]: 7: Hoare triple {11743#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~2#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~2#1; {11743#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:13,175 INFO L290 TraceCheckUtils]: 8: Hoare triple {11743#(<= 2 ~waterLevel~0)} processEnvironment__role__highWaterSensor_#t~ret8#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret8#1 && processEnvironment__role__highWaterSensor_#t~ret8#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~1#1 := processEnvironment__role__highWaterSensor_#t~ret8#1;havoc processEnvironment__role__highWaterSensor_#t~ret8#1; {11743#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:13,175 INFO L290 TraceCheckUtils]: 9: Hoare triple {11743#(<= 2 ~waterLevel~0)} assume 0 != processEnvironment__role__highWaterSensor_~tmp~1#1;assume { :begin_inline_activatePump } true; {11743#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:13,176 INFO L290 TraceCheckUtils]: 10: Hoare triple {11743#(<= 2 ~waterLevel~0)} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {11743#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:13,176 INFO L272 TraceCheckUtils]: 11: Hoare triple {11743#(<= 2 ~waterLevel~0)} call activatePump__before__methaneQuery(); {11725#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:07:13,176 INFO L290 TraceCheckUtils]: 12: Hoare triple {11725#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {11680#true} is VALID [2022-02-20 18:07:13,176 INFO L290 TraceCheckUtils]: 13: Hoare triple {11680#true} assume true; {11680#true} is VALID [2022-02-20 18:07:13,176 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {11680#true} {11743#(<= 2 ~waterLevel~0)} #331#return; {11743#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:13,177 INFO L290 TraceCheckUtils]: 15: Hoare triple {11743#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump } true; {11743#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:13,177 INFO L290 TraceCheckUtils]: 16: Hoare triple {11743#(<= 2 ~waterLevel~0)} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {11743#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:13,177 INFO L290 TraceCheckUtils]: 17: Hoare triple {11743#(<= 2 ~waterLevel~0)} assume true; {11743#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:13,178 INFO L284 TraceCheckUtils]: 18: Hoare quadruple {11743#(<= 2 ~waterLevel~0)} {11680#true} #383#return; {11743#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:13,178 INFO L290 TraceCheckUtils]: 19: Hoare triple {11743#(<= 2 ~waterLevel~0)} assume true; {11743#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:13,178 INFO L284 TraceCheckUtils]: 20: Hoare quadruple {11743#(<= 2 ~waterLevel~0)} {11682#(= ~waterLevel~0 1)} #351#return; {11681#false} is VALID [2022-02-20 18:07:13,178 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 74 [2022-02-20 18:07:13,179 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:13,183 INFO L290 TraceCheckUtils]: 0: Hoare triple {11680#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~methaneLevelCritical~0;#res := ~retValue_acc~9; {11680#true} is VALID [2022-02-20 18:07:13,183 INFO L290 TraceCheckUtils]: 1: Hoare triple {11680#true} assume true; {11680#true} is VALID [2022-02-20 18:07:13,183 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {11680#true} {11681#false} #353#return; {11681#false} is VALID [2022-02-20 18:07:13,183 INFO L290 TraceCheckUtils]: 0: Hoare triple {11680#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(38, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(21, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(30, 21);call #Ultimate.allocInit(9, 22);call #Ultimate.allocInit(25, 23);call #Ultimate.allocInit(13, 24);call #Ultimate.allocInit(7, 25);call write~init~int(44, 25, 0, 1);call write~init~int(77, 25, 1, 1);call write~init~int(101, 25, 2, 1);call write~init~int(116, 25, 3, 1);call write~init~int(104, 25, 4, 1);call write~init~int(58, 25, 5, 1);call write~init~int(0, 25, 6, 1);call #Ultimate.allocInit(5, 26);call write~init~int(67, 26, 0, 1);call write~init~int(82, 26, 1, 1);call write~init~int(73, 26, 2, 1);call write~init~int(84, 26, 3, 1);call write~init~int(0, 26, 4, 1);call #Ultimate.allocInit(3, 27);call write~init~int(79, 27, 0, 1);call write~init~int(75, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(41, 28, 0, 1);call write~init~int(0, 28, 1, 1);~__SELECTED_FEATURE_base~0 := 0;~__SELECTED_FEATURE_highWaterSensor~0 := 0;~__SELECTED_FEATURE_lowWaterSensor~0 := 0;~__SELECTED_FEATURE_methaneQuery~0 := 0;~__SELECTED_FEATURE_methaneAlarm~0 := 0;~__SELECTED_FEATURE_stopCommand~0 := 0;~__SELECTED_FEATURE_startCommand~0 := 0;~__GUIDSL_ROOT_PRODUCTION~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4; {11682#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:13,184 INFO L290 TraceCheckUtils]: 1: Hoare triple {11682#(= ~waterLevel~0 1)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret60#1, main_~retValue_acc~13#1, main_~tmp~11#1;havoc main_~retValue_acc~13#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1; {11682#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:13,195 INFO L290 TraceCheckUtils]: 2: Hoare triple {11682#(= ~waterLevel~0 1)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret47#1, select_features_#t~ret48#1, select_features_#t~ret49#1, select_features_#t~ret50#1, select_features_#t~ret51#1, select_features_#t~ret52#1;~__SELECTED_FEATURE_base~0 := 1; {11682#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:13,195 INFO L272 TraceCheckUtils]: 3: Hoare triple {11682#(= ~waterLevel~0 1)} call select_features_#t~ret47#1 := select_one(); {11680#true} is VALID [2022-02-20 18:07:13,195 INFO L290 TraceCheckUtils]: 4: Hoare triple {11680#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {11680#true} is VALID [2022-02-20 18:07:13,195 INFO L290 TraceCheckUtils]: 5: Hoare triple {11680#true} assume true; {11680#true} is VALID [2022-02-20 18:07:13,196 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {11680#true} {11682#(= ~waterLevel~0 1)} #355#return; {11682#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:13,196 INFO L290 TraceCheckUtils]: 7: Hoare triple {11682#(= ~waterLevel~0 1)} assume -2147483648 <= select_features_#t~ret47#1 && select_features_#t~ret47#1 <= 2147483647;~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret47#1;havoc select_features_#t~ret47#1; {11682#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:13,196 INFO L272 TraceCheckUtils]: 8: Hoare triple {11682#(= ~waterLevel~0 1)} call select_features_#t~ret48#1 := select_one(); {11680#true} is VALID [2022-02-20 18:07:13,196 INFO L290 TraceCheckUtils]: 9: Hoare triple {11680#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {11680#true} is VALID [2022-02-20 18:07:13,196 INFO L290 TraceCheckUtils]: 10: Hoare triple {11680#true} assume true; {11680#true} is VALID [2022-02-20 18:07:13,197 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {11680#true} {11682#(= ~waterLevel~0 1)} #357#return; {11682#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:13,197 INFO L290 TraceCheckUtils]: 12: Hoare triple {11682#(= ~waterLevel~0 1)} assume -2147483648 <= select_features_#t~ret48#1 && select_features_#t~ret48#1 <= 2147483647;~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret48#1;havoc select_features_#t~ret48#1; {11682#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:13,197 INFO L272 TraceCheckUtils]: 13: Hoare triple {11682#(= ~waterLevel~0 1)} call select_features_#t~ret49#1 := select_one(); {11680#true} is VALID [2022-02-20 18:07:13,197 INFO L290 TraceCheckUtils]: 14: Hoare triple {11680#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {11680#true} is VALID [2022-02-20 18:07:13,197 INFO L290 TraceCheckUtils]: 15: Hoare triple {11680#true} assume true; {11680#true} is VALID [2022-02-20 18:07:13,198 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {11680#true} {11682#(= ~waterLevel~0 1)} #359#return; {11682#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:13,198 INFO L290 TraceCheckUtils]: 17: Hoare triple {11682#(= ~waterLevel~0 1)} assume -2147483648 <= select_features_#t~ret49#1 && select_features_#t~ret49#1 <= 2147483647;~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret49#1;havoc select_features_#t~ret49#1; {11682#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:13,198 INFO L272 TraceCheckUtils]: 18: Hoare triple {11682#(= ~waterLevel~0 1)} call select_features_#t~ret50#1 := select_one(); {11680#true} is VALID [2022-02-20 18:07:13,198 INFO L290 TraceCheckUtils]: 19: Hoare triple {11680#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {11680#true} is VALID [2022-02-20 18:07:13,198 INFO L290 TraceCheckUtils]: 20: Hoare triple {11680#true} assume true; {11680#true} is VALID [2022-02-20 18:07:13,198 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {11680#true} {11682#(= ~waterLevel~0 1)} #361#return; {11682#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:13,199 INFO L290 TraceCheckUtils]: 22: Hoare triple {11682#(= ~waterLevel~0 1)} assume -2147483648 <= select_features_#t~ret50#1 && select_features_#t~ret50#1 <= 2147483647;~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret50#1;havoc select_features_#t~ret50#1; {11682#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:13,199 INFO L272 TraceCheckUtils]: 23: Hoare triple {11682#(= ~waterLevel~0 1)} call select_features_#t~ret51#1 := select_one(); {11680#true} is VALID [2022-02-20 18:07:13,199 INFO L290 TraceCheckUtils]: 24: Hoare triple {11680#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {11680#true} is VALID [2022-02-20 18:07:13,199 INFO L290 TraceCheckUtils]: 25: Hoare triple {11680#true} assume true; {11680#true} is VALID [2022-02-20 18:07:13,199 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {11680#true} {11682#(= ~waterLevel~0 1)} #363#return; {11682#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:13,200 INFO L290 TraceCheckUtils]: 27: Hoare triple {11682#(= ~waterLevel~0 1)} assume -2147483648 <= select_features_#t~ret51#1 && select_features_#t~ret51#1 <= 2147483647;~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret51#1;havoc select_features_#t~ret51#1; {11682#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:13,200 INFO L272 TraceCheckUtils]: 28: Hoare triple {11682#(= ~waterLevel~0 1)} call select_features_#t~ret52#1 := select_one(); {11680#true} is VALID [2022-02-20 18:07:13,200 INFO L290 TraceCheckUtils]: 29: Hoare triple {11680#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {11680#true} is VALID [2022-02-20 18:07:13,200 INFO L290 TraceCheckUtils]: 30: Hoare triple {11680#true} assume true; {11680#true} is VALID [2022-02-20 18:07:13,200 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {11680#true} {11682#(= ~waterLevel~0 1)} #365#return; {11682#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:13,200 INFO L290 TraceCheckUtils]: 32: Hoare triple {11682#(= ~waterLevel~0 1)} assume -2147483648 <= select_features_#t~ret52#1 && select_features_#t~ret52#1 <= 2147483647;~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret52#1;havoc select_features_#t~ret52#1; {11682#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:13,201 INFO L290 TraceCheckUtils]: 33: Hoare triple {11682#(= ~waterLevel~0 1)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~8#1;havoc valid_product_~retValue_acc~8#1;valid_product_~retValue_acc~8#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~8#1; {11682#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:13,201 INFO L290 TraceCheckUtils]: 34: Hoare triple {11682#(= ~waterLevel~0 1)} main_#t~ret60#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret60#1 && main_#t~ret60#1 <= 2147483647;main_~tmp~11#1 := main_#t~ret60#1;havoc main_#t~ret60#1; {11682#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:13,201 INFO L290 TraceCheckUtils]: 35: Hoare triple {11682#(= ~waterLevel~0 1)} assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; {11682#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:13,202 INFO L290 TraceCheckUtils]: 36: Hoare triple {11682#(= ~waterLevel~0 1)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet4#1, test_#t~nondet5#1, test_#t~nondet6#1, test_#t~nondet7#1, test_~splverifierCounter~0#1, test_~tmp~0#1, test_~tmp___0~0#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~0#1;havoc test_~tmp___0~0#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {11682#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:13,202 INFO L290 TraceCheckUtils]: 37: Hoare triple {11682#(= ~waterLevel~0 1)} assume !false; {11682#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:13,202 INFO L290 TraceCheckUtils]: 38: Hoare triple {11682#(= ~waterLevel~0 1)} assume test_~splverifierCounter~0#1 < 4; {11682#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:13,202 INFO L290 TraceCheckUtils]: 39: Hoare triple {11682#(= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet4#1 && test_#t~nondet4#1 <= 2147483647;test_~tmp~0#1 := test_#t~nondet4#1;havoc test_#t~nondet4#1; {11682#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:13,203 INFO L290 TraceCheckUtils]: 40: Hoare triple {11682#(= ~waterLevel~0 1)} assume !(0 != test_~tmp~0#1); {11682#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:13,203 INFO L290 TraceCheckUtils]: 41: Hoare triple {11682#(= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet5#1 && test_#t~nondet5#1 <= 2147483647;test_~tmp___0~0#1 := test_#t~nondet5#1;havoc test_#t~nondet5#1; {11682#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:13,203 INFO L290 TraceCheckUtils]: 42: Hoare triple {11682#(= ~waterLevel~0 1)} assume !(0 != test_~tmp___0~0#1); {11682#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:13,203 INFO L290 TraceCheckUtils]: 43: Hoare triple {11682#(= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet6#1 && test_#t~nondet6#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet6#1;havoc test_#t~nondet6#1; {11682#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:13,204 INFO L290 TraceCheckUtils]: 44: Hoare triple {11682#(= ~waterLevel~0 1)} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet7#1 && test_#t~nondet7#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet7#1;havoc test_#t~nondet7#1; {11682#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:13,204 INFO L290 TraceCheckUtils]: 45: Hoare triple {11682#(= ~waterLevel~0 1)} assume !(0 != test_~tmp___1~0#1); {11682#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:13,204 INFO L272 TraceCheckUtils]: 46: Hoare triple {11682#(= ~waterLevel~0 1)} call timeShift(); {11682#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:13,205 INFO L290 TraceCheckUtils]: 47: Hoare triple {11682#(= ~waterLevel~0 1)} assume !(0 != ~pumpRunning~0); {11682#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:13,205 INFO L290 TraceCheckUtils]: 48: Hoare triple {11682#(= ~waterLevel~0 1)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {11682#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:13,205 INFO L290 TraceCheckUtils]: 49: Hoare triple {11682#(= ~waterLevel~0 1)} assume !(0 != ~__SELECTED_FEATURE_methaneAlarm~0); {11682#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:13,206 INFO L272 TraceCheckUtils]: 50: Hoare triple {11682#(= ~waterLevel~0 1)} call processEnvironment__before__methaneAlarm(); {11725#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:07:13,206 INFO L290 TraceCheckUtils]: 51: Hoare triple {11725#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {11680#true} is VALID [2022-02-20 18:07:13,206 INFO L272 TraceCheckUtils]: 52: Hoare triple {11680#true} call processEnvironment__before__lowWaterSensor(); {11725#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:07:13,206 INFO L290 TraceCheckUtils]: 53: Hoare triple {11725#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret8#1, processEnvironment__role__highWaterSensor_~tmp~1#1;havoc processEnvironment__role__highWaterSensor_~tmp~1#1; {11680#true} is VALID [2022-02-20 18:07:13,206 INFO L290 TraceCheckUtils]: 54: Hoare triple {11680#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret21#1, isHighWaterLevel_~retValue_acc~2#1, isHighWaterLevel_~tmp~5#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~2#1;havoc isHighWaterLevel_~tmp~5#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {11680#true} is VALID [2022-02-20 18:07:13,206 INFO L290 TraceCheckUtils]: 55: Hoare triple {11680#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~11#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {11743#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:13,207 INFO L290 TraceCheckUtils]: 56: Hoare triple {11743#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret21#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret21#1 && isHighWaterLevel_#t~ret21#1 <= 2147483647;isHighWaterLevel_~tmp~5#1 := isHighWaterLevel_#t~ret21#1;havoc isHighWaterLevel_#t~ret21#1; {11743#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:13,207 INFO L290 TraceCheckUtils]: 57: Hoare triple {11743#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~5#1);isHighWaterLevel_~tmp___0~1#1 := 1; {11743#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:13,207 INFO L290 TraceCheckUtils]: 58: Hoare triple {11743#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~2#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~2#1; {11743#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:13,207 INFO L290 TraceCheckUtils]: 59: Hoare triple {11743#(<= 2 ~waterLevel~0)} processEnvironment__role__highWaterSensor_#t~ret8#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret8#1 && processEnvironment__role__highWaterSensor_#t~ret8#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~1#1 := processEnvironment__role__highWaterSensor_#t~ret8#1;havoc processEnvironment__role__highWaterSensor_#t~ret8#1; {11743#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:13,208 INFO L290 TraceCheckUtils]: 60: Hoare triple {11743#(<= 2 ~waterLevel~0)} assume 0 != processEnvironment__role__highWaterSensor_~tmp~1#1;assume { :begin_inline_activatePump } true; {11743#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:13,208 INFO L290 TraceCheckUtils]: 61: Hoare triple {11743#(<= 2 ~waterLevel~0)} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {11743#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:13,208 INFO L272 TraceCheckUtils]: 62: Hoare triple {11743#(<= 2 ~waterLevel~0)} call activatePump__before__methaneQuery(); {11725#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:07:13,208 INFO L290 TraceCheckUtils]: 63: Hoare triple {11725#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {11680#true} is VALID [2022-02-20 18:07:13,208 INFO L290 TraceCheckUtils]: 64: Hoare triple {11680#true} assume true; {11680#true} is VALID [2022-02-20 18:07:13,209 INFO L284 TraceCheckUtils]: 65: Hoare quadruple {11680#true} {11743#(<= 2 ~waterLevel~0)} #331#return; {11743#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:13,209 INFO L290 TraceCheckUtils]: 66: Hoare triple {11743#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump } true; {11743#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:13,209 INFO L290 TraceCheckUtils]: 67: Hoare triple {11743#(<= 2 ~waterLevel~0)} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {11743#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:13,209 INFO L290 TraceCheckUtils]: 68: Hoare triple {11743#(<= 2 ~waterLevel~0)} assume true; {11743#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:13,219 INFO L284 TraceCheckUtils]: 69: Hoare quadruple {11743#(<= 2 ~waterLevel~0)} {11680#true} #383#return; {11743#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:13,219 INFO L290 TraceCheckUtils]: 70: Hoare triple {11743#(<= 2 ~waterLevel~0)} assume true; {11743#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:13,220 INFO L284 TraceCheckUtils]: 71: Hoare quadruple {11743#(<= 2 ~waterLevel~0)} {11682#(= ~waterLevel~0 1)} #351#return; {11681#false} is VALID [2022-02-20 18:07:13,220 INFO L290 TraceCheckUtils]: 72: Hoare triple {11681#false} assume { :end_inline_processEnvironment } true; {11681#false} is VALID [2022-02-20 18:07:13,220 INFO L290 TraceCheckUtils]: 73: Hoare triple {11681#false} assume { :begin_inline___utac_acc__Specification1_spec__1 } true;havoc __utac_acc__Specification1_spec__1_#t~ret53#1, __utac_acc__Specification1_spec__1_#t~ret54#1, __utac_acc__Specification1_spec__1_~tmp~10#1, __utac_acc__Specification1_spec__1_~tmp___0~3#1;havoc __utac_acc__Specification1_spec__1_~tmp~10#1;havoc __utac_acc__Specification1_spec__1_~tmp___0~3#1; {11681#false} is VALID [2022-02-20 18:07:13,220 INFO L272 TraceCheckUtils]: 74: Hoare triple {11681#false} call __utac_acc__Specification1_spec__1_#t~ret53#1 := isMethaneLevelCritical(); {11680#true} is VALID [2022-02-20 18:07:13,220 INFO L290 TraceCheckUtils]: 75: Hoare triple {11680#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~methaneLevelCritical~0;#res := ~retValue_acc~9; {11680#true} is VALID [2022-02-20 18:07:13,220 INFO L290 TraceCheckUtils]: 76: Hoare triple {11680#true} assume true; {11680#true} is VALID [2022-02-20 18:07:13,220 INFO L284 TraceCheckUtils]: 77: Hoare quadruple {11680#true} {11681#false} #353#return; {11681#false} is VALID [2022-02-20 18:07:13,220 INFO L290 TraceCheckUtils]: 78: Hoare triple {11681#false} assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret53#1 && __utac_acc__Specification1_spec__1_#t~ret53#1 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp~10#1 := __utac_acc__Specification1_spec__1_#t~ret53#1;havoc __utac_acc__Specification1_spec__1_#t~ret53#1; {11681#false} is VALID [2022-02-20 18:07:13,220 INFO L290 TraceCheckUtils]: 79: Hoare triple {11681#false} assume 0 != __utac_acc__Specification1_spec__1_~tmp~10#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~1#1;havoc isPumpRunning_~retValue_acc~1#1;isPumpRunning_~retValue_acc~1#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~1#1; {11681#false} is VALID [2022-02-20 18:07:13,221 INFO L290 TraceCheckUtils]: 80: Hoare triple {11681#false} __utac_acc__Specification1_spec__1_#t~ret54#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret54#1 && __utac_acc__Specification1_spec__1_#t~ret54#1 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp___0~3#1 := __utac_acc__Specification1_spec__1_#t~ret54#1;havoc __utac_acc__Specification1_spec__1_#t~ret54#1; {11681#false} is VALID [2022-02-20 18:07:13,221 INFO L290 TraceCheckUtils]: 81: Hoare triple {11681#false} assume 0 != __utac_acc__Specification1_spec__1_~tmp___0~3#1;assume { :begin_inline___automaton_fail } true; {11681#false} is VALID [2022-02-20 18:07:13,221 INFO L290 TraceCheckUtils]: 82: Hoare triple {11681#false} assume !false; {11681#false} is VALID [2022-02-20 18:07:13,221 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-02-20 18:07:13,221 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:07:13,221 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1199621677] [2022-02-20 18:07:13,221 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1199621677] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:07:13,221 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:07:13,221 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-02-20 18:07:13,221 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1625830886] [2022-02-20 18:07:13,221 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:07:13,222 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 10.4) internal successors, (52), 4 states have internal predecessors, (52), 4 states have call successors, (11), 3 states have call predecessors, (11), 2 states have return successors, (10), 3 states have call predecessors, (10), 4 states have call successors, (10) Word has length 83 [2022-02-20 18:07:13,222 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:07:13,222 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 5 states, 5 states have (on average 10.4) internal successors, (52), 4 states have internal predecessors, (52), 4 states have call successors, (11), 3 states have call predecessors, (11), 2 states have return successors, (10), 3 states have call predecessors, (10), 4 states have call successors, (10) [2022-02-20 18:07:13,277 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 73 edges. 73 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:13,278 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-02-20 18:07:13,278 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:07:13,278 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-02-20 18:07:13,278 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-02-20 18:07:13,278 INFO L87 Difference]: Start difference. First operand 451 states and 603 transitions. Second operand has 5 states, 5 states have (on average 10.4) internal successors, (52), 4 states have internal predecessors, (52), 4 states have call successors, (11), 3 states have call predecessors, (11), 2 states have return successors, (10), 3 states have call predecessors, (10), 4 states have call successors, (10) [2022-02-20 18:07:14,159 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:14,160 INFO L93 Difference]: Finished difference Result 1257 states and 1760 transitions. [2022-02-20 18:07:14,160 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-02-20 18:07:14,160 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 10.4) internal successors, (52), 4 states have internal predecessors, (52), 4 states have call successors, (11), 3 states have call predecessors, (11), 2 states have return successors, (10), 3 states have call predecessors, (10), 4 states have call successors, (10) Word has length 83 [2022-02-20 18:07:14,160 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:07:14,160 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 10.4) internal successors, (52), 4 states have internal predecessors, (52), 4 states have call successors, (11), 3 states have call predecessors, (11), 2 states have return successors, (10), 3 states have call predecessors, (10), 4 states have call successors, (10) [2022-02-20 18:07:14,165 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 558 transitions. [2022-02-20 18:07:14,165 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 10.4) internal successors, (52), 4 states have internal predecessors, (52), 4 states have call successors, (11), 3 states have call predecessors, (11), 2 states have return successors, (10), 3 states have call predecessors, (10), 4 states have call successors, (10) [2022-02-20 18:07:14,170 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 558 transitions. [2022-02-20 18:07:14,170 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 558 transitions. [2022-02-20 18:07:14,519 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 558 edges. 558 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:14,555 INFO L225 Difference]: With dead ends: 1257 [2022-02-20 18:07:14,555 INFO L226 Difference]: Without dead ends: 828 [2022-02-20 18:07:14,557 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 29 GetRequests, 22 SyntacticMatches, 2 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-02-20 18:07:14,560 INFO L933 BasicCegarLoop]: 217 mSDtfsCounter, 312 mSDsluCounter, 249 mSDsCounter, 0 mSdLazyCounter, 250 mSolverCounterSat, 121 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 321 SdHoareTripleChecker+Valid, 466 SdHoareTripleChecker+Invalid, 371 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 121 IncrementalHoareTripleChecker+Valid, 250 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-02-20 18:07:14,561 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [321 Valid, 466 Invalid, 371 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [121 Valid, 250 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-02-20 18:07:14,562 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 828 states. [2022-02-20 18:07:14,660 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 828 to 821. [2022-02-20 18:07:14,660 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:07:14,662 INFO L82 GeneralOperation]: Start isEquivalent. First operand 828 states. Second operand has 821 states, 602 states have (on average 1.287375415282392) internal successors, (775), 661 states have internal predecessors, (775), 127 states have call successors, (127), 86 states have call predecessors, (127), 91 states have return successors, (212), 133 states have call predecessors, (212), 127 states have call successors, (212) [2022-02-20 18:07:14,663 INFO L74 IsIncluded]: Start isIncluded. First operand 828 states. Second operand has 821 states, 602 states have (on average 1.287375415282392) internal successors, (775), 661 states have internal predecessors, (775), 127 states have call successors, (127), 86 states have call predecessors, (127), 91 states have return successors, (212), 133 states have call predecessors, (212), 127 states have call successors, (212) [2022-02-20 18:07:14,664 INFO L87 Difference]: Start difference. First operand 828 states. Second operand has 821 states, 602 states have (on average 1.287375415282392) internal successors, (775), 661 states have internal predecessors, (775), 127 states have call successors, (127), 86 states have call predecessors, (127), 91 states have return successors, (212), 133 states have call predecessors, (212), 127 states have call successors, (212) [2022-02-20 18:07:14,693 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:14,693 INFO L93 Difference]: Finished difference Result 828 states and 1121 transitions. [2022-02-20 18:07:14,694 INFO L276 IsEmpty]: Start isEmpty. Operand 828 states and 1121 transitions. [2022-02-20 18:07:14,696 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:14,696 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:14,698 INFO L74 IsIncluded]: Start isIncluded. First operand has 821 states, 602 states have (on average 1.287375415282392) internal successors, (775), 661 states have internal predecessors, (775), 127 states have call successors, (127), 86 states have call predecessors, (127), 91 states have return successors, (212), 133 states have call predecessors, (212), 127 states have call successors, (212) Second operand 828 states. [2022-02-20 18:07:14,699 INFO L87 Difference]: Start difference. First operand has 821 states, 602 states have (on average 1.287375415282392) internal successors, (775), 661 states have internal predecessors, (775), 127 states have call successors, (127), 86 states have call predecessors, (127), 91 states have return successors, (212), 133 states have call predecessors, (212), 127 states have call successors, (212) Second operand 828 states. [2022-02-20 18:07:14,727 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:14,727 INFO L93 Difference]: Finished difference Result 828 states and 1121 transitions. [2022-02-20 18:07:14,727 INFO L276 IsEmpty]: Start isEmpty. Operand 828 states and 1121 transitions. [2022-02-20 18:07:14,730 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:14,730 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:14,730 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:07:14,730 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:07:14,733 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 821 states, 602 states have (on average 1.287375415282392) internal successors, (775), 661 states have internal predecessors, (775), 127 states have call successors, (127), 86 states have call predecessors, (127), 91 states have return successors, (212), 133 states have call predecessors, (212), 127 states have call successors, (212) [2022-02-20 18:07:14,772 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 821 states to 821 states and 1114 transitions. [2022-02-20 18:07:14,773 INFO L78 Accepts]: Start accepts. Automaton has 821 states and 1114 transitions. Word has length 83 [2022-02-20 18:07:14,773 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:07:14,773 INFO L470 AbstractCegarLoop]: Abstraction has 821 states and 1114 transitions. [2022-02-20 18:07:14,774 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 10.4) internal successors, (52), 4 states have internal predecessors, (52), 4 states have call successors, (11), 3 states have call predecessors, (11), 2 states have return successors, (10), 3 states have call predecessors, (10), 4 states have call successors, (10) [2022-02-20 18:07:14,774 INFO L276 IsEmpty]: Start isEmpty. Operand 821 states and 1114 transitions. [2022-02-20 18:07:14,777 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 88 [2022-02-20 18:07:14,777 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:07:14,778 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:07:14,778 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-02-20 18:07:14,778 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:07:14,779 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:07:14,779 INFO L85 PathProgramCache]: Analyzing trace with hash -1813354601, now seen corresponding path program 1 times [2022-02-20 18:07:14,779 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:07:14,779 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [420461299] [2022-02-20 18:07:14,779 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:07:14,779 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:07:14,811 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:14,876 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-02-20 18:07:14,878 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:14,880 INFO L290 TraceCheckUtils]: 0: Hoare triple {16359#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {16359#true} is VALID [2022-02-20 18:07:14,880 INFO L290 TraceCheckUtils]: 1: Hoare triple {16359#true} assume true; {16359#true} is VALID [2022-02-20 18:07:14,881 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {16359#true} {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} #355#return; {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2022-02-20 18:07:14,881 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:07:14,882 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:14,885 INFO L290 TraceCheckUtils]: 0: Hoare triple {16359#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {16359#true} is VALID [2022-02-20 18:07:14,885 INFO L290 TraceCheckUtils]: 1: Hoare triple {16359#true} assume true; {16359#true} is VALID [2022-02-20 18:07:14,885 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {16359#true} {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} #357#return; {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2022-02-20 18:07:14,885 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-02-20 18:07:14,887 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:14,888 INFO L290 TraceCheckUtils]: 0: Hoare triple {16359#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {16359#true} is VALID [2022-02-20 18:07:14,889 INFO L290 TraceCheckUtils]: 1: Hoare triple {16359#true} assume true; {16359#true} is VALID [2022-02-20 18:07:14,889 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {16359#true} {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} #359#return; {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2022-02-20 18:07:14,889 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:07:14,890 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:14,892 INFO L290 TraceCheckUtils]: 0: Hoare triple {16359#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {16359#true} is VALID [2022-02-20 18:07:14,892 INFO L290 TraceCheckUtils]: 1: Hoare triple {16359#true} assume true; {16359#true} is VALID [2022-02-20 18:07:14,893 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {16359#true} {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} #361#return; {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2022-02-20 18:07:14,893 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-02-20 18:07:14,897 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:14,900 INFO L290 TraceCheckUtils]: 0: Hoare triple {16359#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {16359#true} is VALID [2022-02-20 18:07:14,900 INFO L290 TraceCheckUtils]: 1: Hoare triple {16359#true} assume true; {16359#true} is VALID [2022-02-20 18:07:14,901 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {16359#true} {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} #363#return; {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2022-02-20 18:07:14,901 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-02-20 18:07:14,903 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:14,906 INFO L290 TraceCheckUtils]: 0: Hoare triple {16359#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {16359#true} is VALID [2022-02-20 18:07:14,906 INFO L290 TraceCheckUtils]: 1: Hoare triple {16359#true} assume true; {16359#true} is VALID [2022-02-20 18:07:14,906 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {16359#true} {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} #365#return; {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2022-02-20 18:07:14,910 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2022-02-20 18:07:14,911 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:14,913 INFO L290 TraceCheckUtils]: 0: Hoare triple {16409#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {16359#true} is VALID [2022-02-20 18:07:14,913 INFO L290 TraceCheckUtils]: 1: Hoare triple {16359#true} assume true; {16359#true} is VALID [2022-02-20 18:07:14,913 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {16359#true} {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} #367#return; {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2022-02-20 18:07:14,917 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2022-02-20 18:07:14,922 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:14,925 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:07:14,928 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:14,930 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-02-20 18:07:14,931 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:14,932 INFO L290 TraceCheckUtils]: 0: Hoare triple {16410#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {16359#true} is VALID [2022-02-20 18:07:14,932 INFO L290 TraceCheckUtils]: 1: Hoare triple {16359#true} assume true; {16359#true} is VALID [2022-02-20 18:07:14,933 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {16359#true} {16359#true} #331#return; {16359#true} is VALID [2022-02-20 18:07:14,933 INFO L290 TraceCheckUtils]: 0: Hoare triple {16410#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret8#1, processEnvironment__role__highWaterSensor_~tmp~1#1;havoc processEnvironment__role__highWaterSensor_~tmp~1#1; {16359#true} is VALID [2022-02-20 18:07:14,933 INFO L290 TraceCheckUtils]: 1: Hoare triple {16359#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret21#1, isHighWaterLevel_~retValue_acc~2#1, isHighWaterLevel_~tmp~5#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~2#1;havoc isHighWaterLevel_~tmp~5#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {16359#true} is VALID [2022-02-20 18:07:14,933 INFO L290 TraceCheckUtils]: 2: Hoare triple {16359#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~11#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {16359#true} is VALID [2022-02-20 18:07:14,933 INFO L290 TraceCheckUtils]: 3: Hoare triple {16359#true} isHighWaterLevel_#t~ret21#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret21#1 && isHighWaterLevel_#t~ret21#1 <= 2147483647;isHighWaterLevel_~tmp~5#1 := isHighWaterLevel_#t~ret21#1;havoc isHighWaterLevel_#t~ret21#1; {16359#true} is VALID [2022-02-20 18:07:14,933 INFO L290 TraceCheckUtils]: 4: Hoare triple {16359#true} assume !(0 != isHighWaterLevel_~tmp~5#1);isHighWaterLevel_~tmp___0~1#1 := 1; {16359#true} is VALID [2022-02-20 18:07:14,933 INFO L290 TraceCheckUtils]: 5: Hoare triple {16359#true} isHighWaterLevel_~retValue_acc~2#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~2#1; {16359#true} is VALID [2022-02-20 18:07:14,934 INFO L290 TraceCheckUtils]: 6: Hoare triple {16359#true} processEnvironment__role__highWaterSensor_#t~ret8#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret8#1 && processEnvironment__role__highWaterSensor_#t~ret8#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~1#1 := processEnvironment__role__highWaterSensor_#t~ret8#1;havoc processEnvironment__role__highWaterSensor_#t~ret8#1; {16359#true} is VALID [2022-02-20 18:07:14,934 INFO L290 TraceCheckUtils]: 7: Hoare triple {16359#true} assume 0 != processEnvironment__role__highWaterSensor_~tmp~1#1;assume { :begin_inline_activatePump } true; {16359#true} is VALID [2022-02-20 18:07:14,934 INFO L290 TraceCheckUtils]: 8: Hoare triple {16359#true} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {16359#true} is VALID [2022-02-20 18:07:14,934 INFO L272 TraceCheckUtils]: 9: Hoare triple {16359#true} call activatePump__before__methaneQuery(); {16410#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:07:14,934 INFO L290 TraceCheckUtils]: 10: Hoare triple {16410#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {16359#true} is VALID [2022-02-20 18:07:14,934 INFO L290 TraceCheckUtils]: 11: Hoare triple {16359#true} assume true; {16359#true} is VALID [2022-02-20 18:07:14,935 INFO L284 TraceCheckUtils]: 12: Hoare quadruple {16359#true} {16359#true} #331#return; {16359#true} is VALID [2022-02-20 18:07:14,935 INFO L290 TraceCheckUtils]: 13: Hoare triple {16359#true} assume { :end_inline_activatePump } true; {16359#true} is VALID [2022-02-20 18:07:14,935 INFO L290 TraceCheckUtils]: 14: Hoare triple {16359#true} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {16359#true} is VALID [2022-02-20 18:07:14,935 INFO L290 TraceCheckUtils]: 15: Hoare triple {16359#true} assume true; {16359#true} is VALID [2022-02-20 18:07:14,935 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {16359#true} {16359#true} #383#return; {16359#true} is VALID [2022-02-20 18:07:14,935 INFO L290 TraceCheckUtils]: 0: Hoare triple {16410#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {16359#true} is VALID [2022-02-20 18:07:14,936 INFO L272 TraceCheckUtils]: 1: Hoare triple {16359#true} call processEnvironment__before__lowWaterSensor(); {16410#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:07:14,936 INFO L290 TraceCheckUtils]: 2: Hoare triple {16410#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret8#1, processEnvironment__role__highWaterSensor_~tmp~1#1;havoc processEnvironment__role__highWaterSensor_~tmp~1#1; {16359#true} is VALID [2022-02-20 18:07:14,936 INFO L290 TraceCheckUtils]: 3: Hoare triple {16359#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret21#1, isHighWaterLevel_~retValue_acc~2#1, isHighWaterLevel_~tmp~5#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~2#1;havoc isHighWaterLevel_~tmp~5#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {16359#true} is VALID [2022-02-20 18:07:14,936 INFO L290 TraceCheckUtils]: 4: Hoare triple {16359#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~11#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {16359#true} is VALID [2022-02-20 18:07:14,936 INFO L290 TraceCheckUtils]: 5: Hoare triple {16359#true} isHighWaterLevel_#t~ret21#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret21#1 && isHighWaterLevel_#t~ret21#1 <= 2147483647;isHighWaterLevel_~tmp~5#1 := isHighWaterLevel_#t~ret21#1;havoc isHighWaterLevel_#t~ret21#1; {16359#true} is VALID [2022-02-20 18:07:14,936 INFO L290 TraceCheckUtils]: 6: Hoare triple {16359#true} assume !(0 != isHighWaterLevel_~tmp~5#1);isHighWaterLevel_~tmp___0~1#1 := 1; {16359#true} is VALID [2022-02-20 18:07:14,936 INFO L290 TraceCheckUtils]: 7: Hoare triple {16359#true} isHighWaterLevel_~retValue_acc~2#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~2#1; {16359#true} is VALID [2022-02-20 18:07:14,936 INFO L290 TraceCheckUtils]: 8: Hoare triple {16359#true} processEnvironment__role__highWaterSensor_#t~ret8#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret8#1 && processEnvironment__role__highWaterSensor_#t~ret8#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~1#1 := processEnvironment__role__highWaterSensor_#t~ret8#1;havoc processEnvironment__role__highWaterSensor_#t~ret8#1; {16359#true} is VALID [2022-02-20 18:07:14,937 INFO L290 TraceCheckUtils]: 9: Hoare triple {16359#true} assume 0 != processEnvironment__role__highWaterSensor_~tmp~1#1;assume { :begin_inline_activatePump } true; {16359#true} is VALID [2022-02-20 18:07:14,937 INFO L290 TraceCheckUtils]: 10: Hoare triple {16359#true} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {16359#true} is VALID [2022-02-20 18:07:14,937 INFO L272 TraceCheckUtils]: 11: Hoare triple {16359#true} call activatePump__before__methaneQuery(); {16410#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:07:14,937 INFO L290 TraceCheckUtils]: 12: Hoare triple {16410#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {16359#true} is VALID [2022-02-20 18:07:14,937 INFO L290 TraceCheckUtils]: 13: Hoare triple {16359#true} assume true; {16359#true} is VALID [2022-02-20 18:07:14,937 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {16359#true} {16359#true} #331#return; {16359#true} is VALID [2022-02-20 18:07:14,938 INFO L290 TraceCheckUtils]: 15: Hoare triple {16359#true} assume { :end_inline_activatePump } true; {16359#true} is VALID [2022-02-20 18:07:14,938 INFO L290 TraceCheckUtils]: 16: Hoare triple {16359#true} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {16359#true} is VALID [2022-02-20 18:07:14,938 INFO L290 TraceCheckUtils]: 17: Hoare triple {16359#true} assume true; {16359#true} is VALID [2022-02-20 18:07:14,938 INFO L284 TraceCheckUtils]: 18: Hoare quadruple {16359#true} {16359#true} #383#return; {16359#true} is VALID [2022-02-20 18:07:14,938 INFO L290 TraceCheckUtils]: 19: Hoare triple {16359#true} assume true; {16359#true} is VALID [2022-02-20 18:07:14,938 INFO L284 TraceCheckUtils]: 20: Hoare quadruple {16359#true} {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} #351#return; {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2022-02-20 18:07:14,939 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2022-02-20 18:07:14,941 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:14,956 INFO L290 TraceCheckUtils]: 0: Hoare triple {16359#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~methaneLevelCritical~0;#res := ~retValue_acc~9; {16431#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:14,957 INFO L290 TraceCheckUtils]: 1: Hoare triple {16431#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} assume true; {16431#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:14,957 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {16431#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} #353#return; {16407#(and (<= 0 |timeShift___utac_acc__Specification1_spec__1_#t~ret53#1|) (<= |timeShift___utac_acc__Specification1_spec__1_#t~ret53#1| 0))} is VALID [2022-02-20 18:07:14,959 INFO L290 TraceCheckUtils]: 0: Hoare triple {16359#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(38, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(21, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(30, 21);call #Ultimate.allocInit(9, 22);call #Ultimate.allocInit(25, 23);call #Ultimate.allocInit(13, 24);call #Ultimate.allocInit(7, 25);call write~init~int(44, 25, 0, 1);call write~init~int(77, 25, 1, 1);call write~init~int(101, 25, 2, 1);call write~init~int(116, 25, 3, 1);call write~init~int(104, 25, 4, 1);call write~init~int(58, 25, 5, 1);call write~init~int(0, 25, 6, 1);call #Ultimate.allocInit(5, 26);call write~init~int(67, 26, 0, 1);call write~init~int(82, 26, 1, 1);call write~init~int(73, 26, 2, 1);call write~init~int(84, 26, 3, 1);call write~init~int(0, 26, 4, 1);call #Ultimate.allocInit(3, 27);call write~init~int(79, 27, 0, 1);call write~init~int(75, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(41, 28, 0, 1);call write~init~int(0, 28, 1, 1);~__SELECTED_FEATURE_base~0 := 0;~__SELECTED_FEATURE_highWaterSensor~0 := 0;~__SELECTED_FEATURE_lowWaterSensor~0 := 0;~__SELECTED_FEATURE_methaneQuery~0 := 0;~__SELECTED_FEATURE_methaneAlarm~0 := 0;~__SELECTED_FEATURE_stopCommand~0 := 0;~__SELECTED_FEATURE_startCommand~0 := 0;~__GUIDSL_ROOT_PRODUCTION~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4; {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2022-02-20 18:07:14,960 INFO L290 TraceCheckUtils]: 1: Hoare triple {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret60#1, main_~retValue_acc~13#1, main_~tmp~11#1;havoc main_~retValue_acc~13#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1; {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2022-02-20 18:07:14,960 INFO L290 TraceCheckUtils]: 2: Hoare triple {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret47#1, select_features_#t~ret48#1, select_features_#t~ret49#1, select_features_#t~ret50#1, select_features_#t~ret51#1, select_features_#t~ret52#1;~__SELECTED_FEATURE_base~0 := 1; {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2022-02-20 18:07:14,960 INFO L272 TraceCheckUtils]: 3: Hoare triple {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} call select_features_#t~ret47#1 := select_one(); {16359#true} is VALID [2022-02-20 18:07:14,960 INFO L290 TraceCheckUtils]: 4: Hoare triple {16359#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {16359#true} is VALID [2022-02-20 18:07:14,960 INFO L290 TraceCheckUtils]: 5: Hoare triple {16359#true} assume true; {16359#true} is VALID [2022-02-20 18:07:14,961 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {16359#true} {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} #355#return; {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2022-02-20 18:07:14,961 INFO L290 TraceCheckUtils]: 7: Hoare triple {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} assume -2147483648 <= select_features_#t~ret47#1 && select_features_#t~ret47#1 <= 2147483647;~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret47#1;havoc select_features_#t~ret47#1; {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2022-02-20 18:07:14,961 INFO L272 TraceCheckUtils]: 8: Hoare triple {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} call select_features_#t~ret48#1 := select_one(); {16359#true} is VALID [2022-02-20 18:07:14,961 INFO L290 TraceCheckUtils]: 9: Hoare triple {16359#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {16359#true} is VALID [2022-02-20 18:07:14,961 INFO L290 TraceCheckUtils]: 10: Hoare triple {16359#true} assume true; {16359#true} is VALID [2022-02-20 18:07:14,962 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {16359#true} {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} #357#return; {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2022-02-20 18:07:14,962 INFO L290 TraceCheckUtils]: 12: Hoare triple {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} assume -2147483648 <= select_features_#t~ret48#1 && select_features_#t~ret48#1 <= 2147483647;~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret48#1;havoc select_features_#t~ret48#1; {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2022-02-20 18:07:14,962 INFO L272 TraceCheckUtils]: 13: Hoare triple {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} call select_features_#t~ret49#1 := select_one(); {16359#true} is VALID [2022-02-20 18:07:14,963 INFO L290 TraceCheckUtils]: 14: Hoare triple {16359#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {16359#true} is VALID [2022-02-20 18:07:14,963 INFO L290 TraceCheckUtils]: 15: Hoare triple {16359#true} assume true; {16359#true} is VALID [2022-02-20 18:07:14,963 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {16359#true} {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} #359#return; {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2022-02-20 18:07:14,963 INFO L290 TraceCheckUtils]: 17: Hoare triple {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} assume -2147483648 <= select_features_#t~ret49#1 && select_features_#t~ret49#1 <= 2147483647;~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret49#1;havoc select_features_#t~ret49#1; {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2022-02-20 18:07:14,964 INFO L272 TraceCheckUtils]: 18: Hoare triple {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} call select_features_#t~ret50#1 := select_one(); {16359#true} is VALID [2022-02-20 18:07:14,964 INFO L290 TraceCheckUtils]: 19: Hoare triple {16359#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {16359#true} is VALID [2022-02-20 18:07:14,964 INFO L290 TraceCheckUtils]: 20: Hoare triple {16359#true} assume true; {16359#true} is VALID [2022-02-20 18:07:14,964 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {16359#true} {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} #361#return; {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2022-02-20 18:07:14,965 INFO L290 TraceCheckUtils]: 22: Hoare triple {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} assume -2147483648 <= select_features_#t~ret50#1 && select_features_#t~ret50#1 <= 2147483647;~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret50#1;havoc select_features_#t~ret50#1; {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2022-02-20 18:07:14,965 INFO L272 TraceCheckUtils]: 23: Hoare triple {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} call select_features_#t~ret51#1 := select_one(); {16359#true} is VALID [2022-02-20 18:07:14,965 INFO L290 TraceCheckUtils]: 24: Hoare triple {16359#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {16359#true} is VALID [2022-02-20 18:07:14,965 INFO L290 TraceCheckUtils]: 25: Hoare triple {16359#true} assume true; {16359#true} is VALID [2022-02-20 18:07:14,965 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {16359#true} {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} #363#return; {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2022-02-20 18:07:14,966 INFO L290 TraceCheckUtils]: 27: Hoare triple {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} assume -2147483648 <= select_features_#t~ret51#1 && select_features_#t~ret51#1 <= 2147483647;~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret51#1;havoc select_features_#t~ret51#1; {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2022-02-20 18:07:14,966 INFO L272 TraceCheckUtils]: 28: Hoare triple {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} call select_features_#t~ret52#1 := select_one(); {16359#true} is VALID [2022-02-20 18:07:14,966 INFO L290 TraceCheckUtils]: 29: Hoare triple {16359#true} havoc ~retValue_acc~7;assume -2147483648 <= #t~nondet46 && #t~nondet46 <= 2147483647;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {16359#true} is VALID [2022-02-20 18:07:14,966 INFO L290 TraceCheckUtils]: 30: Hoare triple {16359#true} assume true; {16359#true} is VALID [2022-02-20 18:07:14,967 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {16359#true} {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} #365#return; {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2022-02-20 18:07:14,967 INFO L290 TraceCheckUtils]: 32: Hoare triple {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} assume -2147483648 <= select_features_#t~ret52#1 && select_features_#t~ret52#1 <= 2147483647;~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret52#1;havoc select_features_#t~ret52#1; {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2022-02-20 18:07:14,967 INFO L290 TraceCheckUtils]: 33: Hoare triple {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~8#1;havoc valid_product_~retValue_acc~8#1;valid_product_~retValue_acc~8#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~8#1; {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2022-02-20 18:07:14,968 INFO L290 TraceCheckUtils]: 34: Hoare triple {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} main_#t~ret60#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret60#1 && main_#t~ret60#1 <= 2147483647;main_~tmp~11#1 := main_#t~ret60#1;havoc main_#t~ret60#1; {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2022-02-20 18:07:14,968 INFO L290 TraceCheckUtils]: 35: Hoare triple {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2022-02-20 18:07:14,968 INFO L290 TraceCheckUtils]: 36: Hoare triple {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet4#1, test_#t~nondet5#1, test_#t~nondet6#1, test_#t~nondet7#1, test_~splverifierCounter~0#1, test_~tmp~0#1, test_~tmp___0~0#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~0#1;havoc test_~tmp___0~0#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2022-02-20 18:07:14,969 INFO L290 TraceCheckUtils]: 37: Hoare triple {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} assume !false; {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2022-02-20 18:07:14,969 INFO L290 TraceCheckUtils]: 38: Hoare triple {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} assume test_~splverifierCounter~0#1 < 4; {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2022-02-20 18:07:14,970 INFO L290 TraceCheckUtils]: 39: Hoare triple {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} assume -2147483648 <= test_#t~nondet4#1 && test_#t~nondet4#1 <= 2147483647;test_~tmp~0#1 := test_#t~nondet4#1;havoc test_#t~nondet4#1; {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2022-02-20 18:07:14,970 INFO L290 TraceCheckUtils]: 40: Hoare triple {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} assume 0 != test_~tmp~0#1; {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2022-02-20 18:07:14,970 INFO L272 TraceCheckUtils]: 41: Hoare triple {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} call waterRise(); {16409#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:07:14,971 INFO L290 TraceCheckUtils]: 42: Hoare triple {16409#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {16359#true} is VALID [2022-02-20 18:07:14,971 INFO L290 TraceCheckUtils]: 43: Hoare triple {16359#true} assume true; {16359#true} is VALID [2022-02-20 18:07:14,971 INFO L284 TraceCheckUtils]: 44: Hoare quadruple {16359#true} {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} #367#return; {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2022-02-20 18:07:14,971 INFO L290 TraceCheckUtils]: 45: Hoare triple {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} assume -2147483648 <= test_#t~nondet5#1 && test_#t~nondet5#1 <= 2147483647;test_~tmp___0~0#1 := test_#t~nondet5#1;havoc test_#t~nondet5#1; {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2022-02-20 18:07:14,972 INFO L290 TraceCheckUtils]: 46: Hoare triple {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} assume !(0 != test_~tmp___0~0#1); {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2022-02-20 18:07:14,972 INFO L290 TraceCheckUtils]: 47: Hoare triple {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} assume -2147483648 <= test_#t~nondet6#1 && test_#t~nondet6#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet6#1;havoc test_#t~nondet6#1; {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2022-02-20 18:07:14,972 INFO L290 TraceCheckUtils]: 48: Hoare triple {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet7#1 && test_#t~nondet7#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet7#1;havoc test_#t~nondet7#1; {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2022-02-20 18:07:14,973 INFO L290 TraceCheckUtils]: 49: Hoare triple {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} assume !(0 != test_~tmp___1~0#1); {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2022-02-20 18:07:14,973 INFO L272 TraceCheckUtils]: 50: Hoare triple {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} call timeShift(); {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2022-02-20 18:07:14,974 INFO L290 TraceCheckUtils]: 51: Hoare triple {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} assume !(0 != ~pumpRunning~0); {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2022-02-20 18:07:14,974 INFO L290 TraceCheckUtils]: 52: Hoare triple {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2022-02-20 18:07:14,974 INFO L290 TraceCheckUtils]: 53: Hoare triple {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} assume !(0 != ~__SELECTED_FEATURE_methaneAlarm~0); {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2022-02-20 18:07:14,975 INFO L272 TraceCheckUtils]: 54: Hoare triple {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} call processEnvironment__before__methaneAlarm(); {16410#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:07:14,975 INFO L290 TraceCheckUtils]: 55: Hoare triple {16410#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {16359#true} is VALID [2022-02-20 18:07:14,975 INFO L272 TraceCheckUtils]: 56: Hoare triple {16359#true} call processEnvironment__before__lowWaterSensor(); {16410#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:07:14,975 INFO L290 TraceCheckUtils]: 57: Hoare triple {16410#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret8#1, processEnvironment__role__highWaterSensor_~tmp~1#1;havoc processEnvironment__role__highWaterSensor_~tmp~1#1; {16359#true} is VALID [2022-02-20 18:07:14,975 INFO L290 TraceCheckUtils]: 58: Hoare triple {16359#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret21#1, isHighWaterLevel_~retValue_acc~2#1, isHighWaterLevel_~tmp~5#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~2#1;havoc isHighWaterLevel_~tmp~5#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {16359#true} is VALID [2022-02-20 18:07:14,976 INFO L290 TraceCheckUtils]: 59: Hoare triple {16359#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~11#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {16359#true} is VALID [2022-02-20 18:07:14,976 INFO L290 TraceCheckUtils]: 60: Hoare triple {16359#true} isHighWaterLevel_#t~ret21#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret21#1 && isHighWaterLevel_#t~ret21#1 <= 2147483647;isHighWaterLevel_~tmp~5#1 := isHighWaterLevel_#t~ret21#1;havoc isHighWaterLevel_#t~ret21#1; {16359#true} is VALID [2022-02-20 18:07:14,976 INFO L290 TraceCheckUtils]: 61: Hoare triple {16359#true} assume !(0 != isHighWaterLevel_~tmp~5#1);isHighWaterLevel_~tmp___0~1#1 := 1; {16359#true} is VALID [2022-02-20 18:07:14,976 INFO L290 TraceCheckUtils]: 62: Hoare triple {16359#true} isHighWaterLevel_~retValue_acc~2#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~2#1; {16359#true} is VALID [2022-02-20 18:07:14,976 INFO L290 TraceCheckUtils]: 63: Hoare triple {16359#true} processEnvironment__role__highWaterSensor_#t~ret8#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret8#1 && processEnvironment__role__highWaterSensor_#t~ret8#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~1#1 := processEnvironment__role__highWaterSensor_#t~ret8#1;havoc processEnvironment__role__highWaterSensor_#t~ret8#1; {16359#true} is VALID [2022-02-20 18:07:14,976 INFO L290 TraceCheckUtils]: 64: Hoare triple {16359#true} assume 0 != processEnvironment__role__highWaterSensor_~tmp~1#1;assume { :begin_inline_activatePump } true; {16359#true} is VALID [2022-02-20 18:07:14,976 INFO L290 TraceCheckUtils]: 65: Hoare triple {16359#true} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {16359#true} is VALID [2022-02-20 18:07:14,977 INFO L272 TraceCheckUtils]: 66: Hoare triple {16359#true} call activatePump__before__methaneQuery(); {16410#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:07:14,977 INFO L290 TraceCheckUtils]: 67: Hoare triple {16410#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {16359#true} is VALID [2022-02-20 18:07:14,977 INFO L290 TraceCheckUtils]: 68: Hoare triple {16359#true} assume true; {16359#true} is VALID [2022-02-20 18:07:14,977 INFO L284 TraceCheckUtils]: 69: Hoare quadruple {16359#true} {16359#true} #331#return; {16359#true} is VALID [2022-02-20 18:07:14,977 INFO L290 TraceCheckUtils]: 70: Hoare triple {16359#true} assume { :end_inline_activatePump } true; {16359#true} is VALID [2022-02-20 18:07:14,977 INFO L290 TraceCheckUtils]: 71: Hoare triple {16359#true} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {16359#true} is VALID [2022-02-20 18:07:14,977 INFO L290 TraceCheckUtils]: 72: Hoare triple {16359#true} assume true; {16359#true} is VALID [2022-02-20 18:07:14,977 INFO L284 TraceCheckUtils]: 73: Hoare quadruple {16359#true} {16359#true} #383#return; {16359#true} is VALID [2022-02-20 18:07:14,978 INFO L290 TraceCheckUtils]: 74: Hoare triple {16359#true} assume true; {16359#true} is VALID [2022-02-20 18:07:14,978 INFO L284 TraceCheckUtils]: 75: Hoare quadruple {16359#true} {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} #351#return; {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2022-02-20 18:07:14,978 INFO L290 TraceCheckUtils]: 76: Hoare triple {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} assume { :end_inline_processEnvironment } true; {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2022-02-20 18:07:14,979 INFO L290 TraceCheckUtils]: 77: Hoare triple {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} assume { :begin_inline___utac_acc__Specification1_spec__1 } true;havoc __utac_acc__Specification1_spec__1_#t~ret53#1, __utac_acc__Specification1_spec__1_#t~ret54#1, __utac_acc__Specification1_spec__1_~tmp~10#1, __utac_acc__Specification1_spec__1_~tmp___0~3#1;havoc __utac_acc__Specification1_spec__1_~tmp~10#1;havoc __utac_acc__Specification1_spec__1_~tmp___0~3#1; {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2022-02-20 18:07:14,979 INFO L272 TraceCheckUtils]: 78: Hoare triple {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} call __utac_acc__Specification1_spec__1_#t~ret53#1 := isMethaneLevelCritical(); {16359#true} is VALID [2022-02-20 18:07:14,979 INFO L290 TraceCheckUtils]: 79: Hoare triple {16359#true} havoc ~retValue_acc~9;~retValue_acc~9 := ~methaneLevelCritical~0;#res := ~retValue_acc~9; {16431#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:14,979 INFO L290 TraceCheckUtils]: 80: Hoare triple {16431#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} assume true; {16431#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:14,980 INFO L284 TraceCheckUtils]: 81: Hoare quadruple {16431#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} {16361#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} #353#return; {16407#(and (<= 0 |timeShift___utac_acc__Specification1_spec__1_#t~ret53#1|) (<= |timeShift___utac_acc__Specification1_spec__1_#t~ret53#1| 0))} is VALID [2022-02-20 18:07:14,980 INFO L290 TraceCheckUtils]: 82: Hoare triple {16407#(and (<= 0 |timeShift___utac_acc__Specification1_spec__1_#t~ret53#1|) (<= |timeShift___utac_acc__Specification1_spec__1_#t~ret53#1| 0))} assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret53#1 && __utac_acc__Specification1_spec__1_#t~ret53#1 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp~10#1 := __utac_acc__Specification1_spec__1_#t~ret53#1;havoc __utac_acc__Specification1_spec__1_#t~ret53#1; {16408#(and (<= |timeShift___utac_acc__Specification1_spec__1_~tmp~10#1| 0) (< 0 (+ |timeShift___utac_acc__Specification1_spec__1_~tmp~10#1| 1)))} is VALID [2022-02-20 18:07:14,981 INFO L290 TraceCheckUtils]: 83: Hoare triple {16408#(and (<= |timeShift___utac_acc__Specification1_spec__1_~tmp~10#1| 0) (< 0 (+ |timeShift___utac_acc__Specification1_spec__1_~tmp~10#1| 1)))} assume 0 != __utac_acc__Specification1_spec__1_~tmp~10#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~1#1;havoc isPumpRunning_~retValue_acc~1#1;isPumpRunning_~retValue_acc~1#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~1#1; {16360#false} is VALID [2022-02-20 18:07:14,981 INFO L290 TraceCheckUtils]: 84: Hoare triple {16360#false} __utac_acc__Specification1_spec__1_#t~ret54#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret54#1 && __utac_acc__Specification1_spec__1_#t~ret54#1 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp___0~3#1 := __utac_acc__Specification1_spec__1_#t~ret54#1;havoc __utac_acc__Specification1_spec__1_#t~ret54#1; {16360#false} is VALID [2022-02-20 18:07:14,981 INFO L290 TraceCheckUtils]: 85: Hoare triple {16360#false} assume 0 != __utac_acc__Specification1_spec__1_~tmp___0~3#1;assume { :begin_inline___automaton_fail } true; {16360#false} is VALID [2022-02-20 18:07:14,981 INFO L290 TraceCheckUtils]: 86: Hoare triple {16360#false} assume !false; {16360#false} is VALID [2022-02-20 18:07:14,982 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-02-20 18:07:14,982 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:07:14,982 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [420461299] [2022-02-20 18:07:14,982 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [420461299] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:07:14,982 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:07:14,982 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-02-20 18:07:14,983 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [402117559] [2022-02-20 18:07:14,983 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:07:14,983 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 6.75) internal successors, (54), 5 states have internal predecessors, (54), 2 states have call successors, (12), 4 states have call predecessors, (12), 2 states have return successors, (11), 3 states have call predecessors, (11), 2 states have call successors, (11) Word has length 87 [2022-02-20 18:07:14,983 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:07:14,984 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 8 states, 8 states have (on average 6.75) internal successors, (54), 5 states have internal predecessors, (54), 2 states have call successors, (12), 4 states have call predecessors, (12), 2 states have return successors, (11), 3 states have call predecessors, (11), 2 states have call successors, (11) [2022-02-20 18:07:15,062 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 77 edges. 77 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:15,063 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-02-20 18:07:15,063 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:07:15,064 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-02-20 18:07:15,064 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2022-02-20 18:07:15,064 INFO L87 Difference]: Start difference. First operand 821 states and 1114 transitions. Second operand has 8 states, 8 states have (on average 6.75) internal successors, (54), 5 states have internal predecessors, (54), 2 states have call successors, (12), 4 states have call predecessors, (12), 2 states have return successors, (11), 3 states have call predecessors, (11), 2 states have call successors, (11) [2022-02-20 18:07:18,337 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:18,337 INFO L93 Difference]: Finished difference Result 2724 states and 3802 transitions. [2022-02-20 18:07:18,337 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 23 states. [2022-02-20 18:07:18,337 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 6.75) internal successors, (54), 5 states have internal predecessors, (54), 2 states have call successors, (12), 4 states have call predecessors, (12), 2 states have return successors, (11), 3 states have call predecessors, (11), 2 states have call successors, (11) Word has length 87 [2022-02-20 18:07:18,338 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:07:18,338 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 6.75) internal successors, (54), 5 states have internal predecessors, (54), 2 states have call successors, (12), 4 states have call predecessors, (12), 2 states have return successors, (11), 3 states have call predecessors, (11), 2 states have call successors, (11) [2022-02-20 18:07:18,343 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 23 states to 23 states and 611 transitions. [2022-02-20 18:07:18,344 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 6.75) internal successors, (54), 5 states have internal predecessors, (54), 2 states have call successors, (12), 4 states have call predecessors, (12), 2 states have return successors, (11), 3 states have call predecessors, (11), 2 states have call successors, (11) [2022-02-20 18:07:18,349 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 23 states to 23 states and 611 transitions. [2022-02-20 18:07:18,349 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 23 states and 611 transitions. [2022-02-20 18:07:18,787 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 611 edges. 611 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:18,973 INFO L225 Difference]: With dead ends: 2724 [2022-02-20 18:07:18,973 INFO L226 Difference]: Without dead ends: 1925 [2022-02-20 18:07:18,976 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 47 GetRequests, 24 SyntacticMatches, 0 SemanticMatches, 23 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 130 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=133, Invalid=467, Unknown=0, NotChecked=0, Total=600 [2022-02-20 18:07:18,976 INFO L933 BasicCegarLoop]: 156 mSDtfsCounter, 459 mSDsluCounter, 374 mSDsCounter, 0 mSdLazyCounter, 714 mSolverCounterSat, 263 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 468 SdHoareTripleChecker+Valid, 530 SdHoareTripleChecker+Invalid, 977 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 263 IncrementalHoareTripleChecker+Valid, 714 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2022-02-20 18:07:18,977 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [468 Valid, 530 Invalid, 977 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [263 Valid, 714 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2022-02-20 18:07:18,978 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1925 states. [2022-02-20 18:07:19,611 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1925 to 1804. [2022-02-20 18:07:19,612 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:07:19,615 INFO L82 GeneralOperation]: Start isEquivalent. First operand 1925 states. Second operand has 1804 states, 1316 states have (on average 1.256838905775076) internal successors, (1654), 1455 states have internal predecessors, (1654), 284 states have call successors, (284), 171 states have call predecessors, (284), 203 states have return successors, (527), 312 states have call predecessors, (527), 284 states have call successors, (527) [2022-02-20 18:07:19,618 INFO L74 IsIncluded]: Start isIncluded. First operand 1925 states. Second operand has 1804 states, 1316 states have (on average 1.256838905775076) internal successors, (1654), 1455 states have internal predecessors, (1654), 284 states have call successors, (284), 171 states have call predecessors, (284), 203 states have return successors, (527), 312 states have call predecessors, (527), 284 states have call successors, (527) [2022-02-20 18:07:19,621 INFO L87 Difference]: Start difference. First operand 1925 states. Second operand has 1804 states, 1316 states have (on average 1.256838905775076) internal successors, (1654), 1455 states have internal predecessors, (1654), 284 states have call successors, (284), 171 states have call predecessors, (284), 203 states have return successors, (527), 312 states have call predecessors, (527), 284 states have call successors, (527) [2022-02-20 18:07:19,750 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:19,751 INFO L93 Difference]: Finished difference Result 1925 states and 2623 transitions. [2022-02-20 18:07:19,751 INFO L276 IsEmpty]: Start isEmpty. Operand 1925 states and 2623 transitions. [2022-02-20 18:07:19,756 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:19,756 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:19,759 INFO L74 IsIncluded]: Start isIncluded. First operand has 1804 states, 1316 states have (on average 1.256838905775076) internal successors, (1654), 1455 states have internal predecessors, (1654), 284 states have call successors, (284), 171 states have call predecessors, (284), 203 states have return successors, (527), 312 states have call predecessors, (527), 284 states have call successors, (527) Second operand 1925 states. [2022-02-20 18:07:19,762 INFO L87 Difference]: Start difference. First operand has 1804 states, 1316 states have (on average 1.256838905775076) internal successors, (1654), 1455 states have internal predecessors, (1654), 284 states have call successors, (284), 171 states have call predecessors, (284), 203 states have return successors, (527), 312 states have call predecessors, (527), 284 states have call successors, (527) Second operand 1925 states. [2022-02-20 18:07:19,894 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:19,894 INFO L93 Difference]: Finished difference Result 1925 states and 2623 transitions. [2022-02-20 18:07:19,894 INFO L276 IsEmpty]: Start isEmpty. Operand 1925 states and 2623 transitions. [2022-02-20 18:07:19,899 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:19,899 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:19,899 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:07:19,899 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:07:19,902 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1804 states, 1316 states have (on average 1.256838905775076) internal successors, (1654), 1455 states have internal predecessors, (1654), 284 states have call successors, (284), 171 states have call predecessors, (284), 203 states have return successors, (527), 312 states have call predecessors, (527), 284 states have call successors, (527) [2022-02-20 18:07:20,062 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1804 states to 1804 states and 2465 transitions. [2022-02-20 18:07:20,062 INFO L78 Accepts]: Start accepts. Automaton has 1804 states and 2465 transitions. Word has length 87 [2022-02-20 18:07:20,062 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:07:20,064 INFO L470 AbstractCegarLoop]: Abstraction has 1804 states and 2465 transitions. [2022-02-20 18:07:20,064 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 6.75) internal successors, (54), 5 states have internal predecessors, (54), 2 states have call successors, (12), 4 states have call predecessors, (12), 2 states have return successors, (11), 3 states have call predecessors, (11), 2 states have call successors, (11) [2022-02-20 18:07:20,065 INFO L276 IsEmpty]: Start isEmpty. Operand 1804 states and 2465 transitions. [2022-02-20 18:07:20,082 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 92 [2022-02-20 18:07:20,083 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:07:20,083 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:07:20,083 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-02-20 18:07:20,083 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:07:20,084 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:07:20,084 INFO L85 PathProgramCache]: Analyzing trace with hash -1958821133, now seen corresponding path program 1 times [2022-02-20 18:07:20,084 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:07:20,084 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [353411542] [2022-02-20 18:07:20,084 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:07:20,084 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:07:20,128 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-02-20 18:07:20,129 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-02-20 18:07:20,141 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-02-20 18:07:20,180 INFO L138 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-02-20 18:07:20,180 INFO L628 BasicCegarLoop]: Counterexample is feasible [2022-02-20 18:07:20,181 INFO L764 garLoopResultBuilder]: Registering result UNSAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-02-20 18:07:20,182 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-02-20 18:07:20,184 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:07:20,187 INFO L180 ceAbstractionStarter]: Computing trace abstraction results [2022-02-20 18:07:20,245 FATAL L489 DefaultTranslator]: Callstack has procedure call flag but succeeding procedure is empty at [CALL] call #t~ret47 := select_one(); [2022-02-20 18:07:20,247 FATAL L? ?]: The Plugin de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction has thrown an exception: java.lang.AssertionError: callstack broken after backtranslation by InlinerBacktranslator at de.uni_freiburg.informatik.ultimate.boogie.procedureinliner.backtranslation.InlinerBacktranslator.translateProgramExecution(InlinerBacktranslator.java:230) at de.uni_freiburg.informatik.ultimate.core.coreplugin.services.ModelTranslationContainer.translateProgramExecution(ModelTranslationContainer.java:216) at de.uni_freiburg.informatik.ultimate.core.coreplugin.services.ModelTranslationContainer.translateProgramExecution(ModelTranslationContainer.java:225) at de.uni_freiburg.informatik.ultimate.core.coreplugin.services.ModelTranslationContainer.translateProgramExecution(ModelTranslationContainer.java:225) at de.uni_freiburg.informatik.ultimate.core.coreplugin.services.ModelTranslationContainer.translateProgramExecution(ModelTranslationContainer.java:206) at de.uni_freiburg.informatik.ultimate.core.lib.results.CounterExampleResult.getProgramExecutionAsString(CounterExampleResult.java:155) at de.uni_freiburg.informatik.ultimate.core.lib.results.CounterExampleResult.getLongDescription(CounterExampleResult.java:134) at de.uni_freiburg.informatik.ultimate.core.coreplugin.services.ResultService.reportResult(ResultService.java:86) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.CegarLoopResultReporter.reportResult(CegarLoopResultReporter.java:141) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionStarter.reportLocationResults(TraceAbstractionStarter.java:607) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionStarter.runCegarLoops(TraceAbstractionStarter.java:182) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionStarter.(TraceAbstractionStarter.java:156) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver.finish(TraceAbstractionObserver.java:123) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.runObserver(PluginConnector.java:168) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.runTool(PluginConnector.java:151) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.run(PluginConnector.java:128) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.executePluginConnector(ToolchainWalker.java:232) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.processPlugin(ToolchainWalker.java:226) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.walkUnprotected(ToolchainWalker.java:142) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.walk(ToolchainWalker.java:104) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainManager$Toolchain.processToolchain(ToolchainManager.java:320) at de.uni_freiburg.informatik.ultimate.core.coreplugin.toolchain.DefaultToolchainJob.run(DefaultToolchainJob.java:145) at org.eclipse.core.internal.jobs.Worker.run(Worker.java:63) [2022-02-20 18:07:20,250 INFO L158 Benchmark]: Toolchain (without parser) took 14808.59ms. Allocated memory was 107.0MB in the beginning and 299.9MB in the end (delta: 192.9MB). Free memory was 72.3MB in the beginning and 241.8MB in the end (delta: -169.5MB). Peak memory consumption was 23.4MB. Max. memory is 16.1GB. [2022-02-20 18:07:20,250 INFO L158 Benchmark]: CDTParser took 0.15ms. Allocated memory is still 75.5MB. Free memory was 46.9MB in the beginning and 46.9MB in the end (delta: 29.0kB). There was no memory consumed. Max. memory is 16.1GB. [2022-02-20 18:07:20,250 INFO L158 Benchmark]: CACSL2BoogieTranslator took 383.67ms. Allocated memory is still 107.0MB. Free memory was 72.0MB in the beginning and 70.2MB in the end (delta: 1.8MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2022-02-20 18:07:20,250 INFO L158 Benchmark]: Boogie Procedure Inliner took 36.17ms. Allocated memory is still 107.0MB. Free memory was 70.2MB in the beginning and 67.0MB in the end (delta: 3.2MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-02-20 18:07:20,251 INFO L158 Benchmark]: Boogie Preprocessor took 26.01ms. Allocated memory is still 107.0MB. Free memory was 67.0MB in the beginning and 65.5MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-02-20 18:07:20,251 INFO L158 Benchmark]: RCFGBuilder took 592.94ms. Allocated memory is still 107.0MB. Free memory was 64.9MB in the beginning and 39.8MB in the end (delta: 25.2MB). Peak memory consumption was 25.2MB. Max. memory is 16.1GB. [2022-02-20 18:07:20,251 INFO L158 Benchmark]: TraceAbstraction took 13763.76ms. Allocated memory was 107.0MB in the beginning and 299.9MB in the end (delta: 192.9MB). Free memory was 39.3MB in the beginning and 241.8MB in the end (delta: -202.5MB). There was no memory consumed. Max. memory is 16.1GB. [2022-02-20 18:07:20,256 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - AssertionsEnabledResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.15ms. Allocated memory is still 75.5MB. Free memory was 46.9MB in the beginning and 46.9MB in the end (delta: 29.0kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 383.67ms. Allocated memory is still 107.0MB. Free memory was 72.0MB in the beginning and 70.2MB in the end (delta: 1.8MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 36.17ms. Allocated memory is still 107.0MB. Free memory was 70.2MB in the beginning and 67.0MB in the end (delta: 3.2MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 26.01ms. Allocated memory is still 107.0MB. Free memory was 67.0MB in the beginning and 65.5MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 592.94ms. Allocated memory is still 107.0MB. Free memory was 64.9MB in the beginning and 39.8MB in the end (delta: 25.2MB). Peak memory consumption was 25.2MB. Max. memory is 16.1GB. * TraceAbstraction took 13763.76ms. Allocated memory was 107.0MB in the beginning and 299.9MB in the end (delta: 192.9MB). Free memory was 39.3MB in the beginning and 241.8MB in the end (delta: -202.5MB). There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - ExceptionOrErrorResult: AssertionError: callstack broken after backtranslation by InlinerBacktranslator de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: AssertionError: callstack broken after backtranslation by InlinerBacktranslator: de.uni_freiburg.informatik.ultimate.boogie.procedureinliner.backtranslation.InlinerBacktranslator.translateProgramExecution(InlinerBacktranslator.java:230) RESULT: Ultimate could not prove your program: Toolchain returned no result. [2022-02-20 18:07:20,281 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis ### Bit-precise run ### Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -ea -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec1_productSimulator.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash e237a09aaa1bc75b51620084d47086dcaad161f8c8500bd0b8b901d1a9d4bb0a --- Real Ultimate output --- This is Ultimate 0.2.2-dev-03d7b7b [2022-02-20 18:07:22,107 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-02-20 18:07:22,109 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-02-20 18:07:22,157 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-02-20 18:07:22,157 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-02-20 18:07:22,169 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-02-20 18:07:22,170 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-02-20 18:07:22,173 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-02-20 18:07:22,175 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-02-20 18:07:22,178 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-02-20 18:07:22,178 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-02-20 18:07:22,179 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-02-20 18:07:22,180 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-02-20 18:07:22,181 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-02-20 18:07:22,183 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-02-20 18:07:22,186 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-02-20 18:07:22,187 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-02-20 18:07:22,187 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-02-20 18:07:22,196 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-02-20 18:07:22,200 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-02-20 18:07:22,201 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-02-20 18:07:22,202 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-02-20 18:07:22,203 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-02-20 18:07:22,204 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-02-20 18:07:22,206 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-02-20 18:07:22,207 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-02-20 18:07:22,207 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-02-20 18:07:22,208 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-02-20 18:07:22,208 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-02-20 18:07:22,217 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-02-20 18:07:22,217 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-02-20 18:07:22,218 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-02-20 18:07:22,219 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-02-20 18:07:22,219 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-02-20 18:07:22,220 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-02-20 18:07:22,220 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-02-20 18:07:22,221 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-02-20 18:07:22,221 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-02-20 18:07:22,221 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-02-20 18:07:22,222 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-02-20 18:07:22,222 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-02-20 18:07:22,225 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Bitvector.epf [2022-02-20 18:07:22,267 INFO L113 SettingsManager]: Loading preferences was successful [2022-02-20 18:07:22,267 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-02-20 18:07:22,268 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-02-20 18:07:22,268 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-02-20 18:07:22,269 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-02-20 18:07:22,269 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-02-20 18:07:22,270 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-02-20 18:07:22,270 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-02-20 18:07:22,271 INFO L138 SettingsManager]: * Use SBE=true [2022-02-20 18:07:22,271 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-02-20 18:07:22,271 INFO L138 SettingsManager]: * sizeof long=4 [2022-02-20 18:07:22,271 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-02-20 18:07:22,272 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-02-20 18:07:22,272 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-02-20 18:07:22,272 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-02-20 18:07:22,272 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-02-20 18:07:22,272 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-02-20 18:07:22,272 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2022-02-20 18:07:22,272 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2022-02-20 18:07:22,273 INFO L138 SettingsManager]: * sizeof long double=12 [2022-02-20 18:07:22,273 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-02-20 18:07:22,273 INFO L138 SettingsManager]: * Use constant arrays=true [2022-02-20 18:07:22,273 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-02-20 18:07:22,273 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-02-20 18:07:22,273 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-02-20 18:07:22,273 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-02-20 18:07:22,274 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-02-20 18:07:22,283 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-02-20 18:07:22,283 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-02-20 18:07:22,283 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-02-20 18:07:22,283 INFO L138 SettingsManager]: * Trace refinement strategy=WOLF [2022-02-20 18:07:22,284 INFO L138 SettingsManager]: * Command for external solver=cvc4 --incremental --print-success --lang smt [2022-02-20 18:07:22,284 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2022-02-20 18:07:22,284 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-02-20 18:07:22,284 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-02-20 18:07:22,284 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-02-20 18:07:22,284 INFO L138 SettingsManager]: * Logic for external solver=AUFBV WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> e237a09aaa1bc75b51620084d47086dcaad161f8c8500bd0b8b901d1a9d4bb0a [2022-02-20 18:07:22,585 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-02-20 18:07:22,607 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-02-20 18:07:22,608 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-02-20 18:07:22,609 INFO L271 PluginConnector]: Initializing CDTParser... [2022-02-20 18:07:22,609 INFO L275 PluginConnector]: CDTParser initialized [2022-02-20 18:07:22,611 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec1_productSimulator.cil.c [2022-02-20 18:07:22,682 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/0a35d6cff/44cf3719e5d84894bc3c33171148403e/FLAG96908705d [2022-02-20 18:07:23,044 INFO L306 CDTParser]: Found 1 translation units. [2022-02-20 18:07:23,046 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec1_productSimulator.cil.c [2022-02-20 18:07:23,059 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/0a35d6cff/44cf3719e5d84894bc3c33171148403e/FLAG96908705d [2022-02-20 18:07:23,414 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/0a35d6cff/44cf3719e5d84894bc3c33171148403e [2022-02-20 18:07:23,416 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-02-20 18:07:23,418 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-02-20 18:07:23,423 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-02-20 18:07:23,423 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-02-20 18:07:23,426 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-02-20 18:07:23,427 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.02 06:07:23" (1/1) ... [2022-02-20 18:07:23,429 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3c1e6e66 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:07:23, skipping insertion in model container [2022-02-20 18:07:23,429 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.02 06:07:23" (1/1) ... [2022-02-20 18:07:23,434 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-02-20 18:07:23,521 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-02-20 18:07:23,886 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec1_productSimulator.cil.c[20217,20230] [2022-02-20 18:07:23,896 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-02-20 18:07:23,914 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2022-02-20 18:07:23,924 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-02-20 18:07:23,982 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec1_productSimulator.cil.c[20217,20230] [2022-02-20 18:07:23,984 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-02-20 18:07:23,989 INFO L203 MainTranslator]: Completed pre-run [2022-02-20 18:07:24,072 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec1_productSimulator.cil.c[20217,20230] [2022-02-20 18:07:24,074 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-02-20 18:07:24,095 INFO L208 MainTranslator]: Completed translation [2022-02-20 18:07:24,096 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:07:24 WrapperNode [2022-02-20 18:07:24,096 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-02-20 18:07:24,096 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-02-20 18:07:24,096 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-02-20 18:07:24,097 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-02-20 18:07:24,102 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:07:24" (1/1) ... [2022-02-20 18:07:24,127 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:07:24" (1/1) ... [2022-02-20 18:07:24,162 INFO L137 Inliner]: procedures = 65, calls = 177, calls flagged for inlining = 27, calls inlined = 24, statements flattened = 311 [2022-02-20 18:07:24,163 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-02-20 18:07:24,163 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-02-20 18:07:24,163 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-02-20 18:07:24,163 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-02-20 18:07:24,172 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:07:24" (1/1) ... [2022-02-20 18:07:24,172 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:07:24" (1/1) ... [2022-02-20 18:07:24,179 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:07:24" (1/1) ... [2022-02-20 18:07:24,179 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:07:24" (1/1) ... [2022-02-20 18:07:24,185 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:07:24" (1/1) ... [2022-02-20 18:07:24,188 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:07:24" (1/1) ... [2022-02-20 18:07:24,189 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:07:24" (1/1) ... [2022-02-20 18:07:24,201 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-02-20 18:07:24,203 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-02-20 18:07:24,203 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-02-20 18:07:24,203 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-02-20 18:07:24,203 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:07:24" (1/1) ... [2022-02-20 18:07:24,208 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-02-20 18:07:24,214 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-20 18:07:24,236 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-02-20 18:07:24,254 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-02-20 18:07:24,263 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-02-20 18:07:24,264 INFO L130 BoogieDeclarations]: Found specification of procedure activatePump__before__methaneQuery [2022-02-20 18:07:24,264 INFO L138 BoogieDeclarations]: Found implementation of procedure activatePump__before__methaneQuery [2022-02-20 18:07:24,264 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-02-20 18:07:24,264 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-02-20 18:07:24,264 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-02-20 18:07:24,264 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-02-20 18:07:24,264 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-02-20 18:07:24,264 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-02-20 18:07:24,264 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__before__highWaterSensor [2022-02-20 18:07:24,264 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__before__highWaterSensor [2022-02-20 18:07:24,265 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-02-20 18:07:24,265 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-02-20 18:07:24,265 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__before__methaneAlarm [2022-02-20 18:07:24,265 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__before__methaneAlarm [2022-02-20 18:07:24,265 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2022-02-20 18:07:24,265 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__before__lowWaterSensor [2022-02-20 18:07:24,265 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__before__lowWaterSensor [2022-02-20 18:07:24,265 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2022-02-20 18:07:24,265 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2022-02-20 18:07:24,265 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-02-20 18:07:24,265 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-02-20 18:07:24,265 INFO L130 BoogieDeclarations]: Found specification of procedure select_one [2022-02-20 18:07:24,266 INFO L138 BoogieDeclarations]: Found implementation of procedure select_one [2022-02-20 18:07:24,266 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-02-20 18:07:24,266 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-02-20 18:07:24,266 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-02-20 18:07:24,266 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-02-20 18:07:24,370 INFO L234 CfgBuilder]: Building ICFG [2022-02-20 18:07:24,372 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-02-20 18:07:24,637 INFO L275 CfgBuilder]: Performing block encoding [2022-02-20 18:07:24,643 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-02-20 18:07:24,643 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-02-20 18:07:24,644 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.02 06:07:24 BoogieIcfgContainer [2022-02-20 18:07:24,644 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-02-20 18:07:24,645 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-02-20 18:07:24,645 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-02-20 18:07:24,647 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-02-20 18:07:24,647 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 20.02 06:07:23" (1/3) ... [2022-02-20 18:07:24,648 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@e0110a0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.02 06:07:24, skipping insertion in model container [2022-02-20 18:07:24,648 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:07:24" (2/3) ... [2022-02-20 18:07:24,648 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@e0110a0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.02 06:07:24, skipping insertion in model container [2022-02-20 18:07:24,648 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.02 06:07:24" (3/3) ... [2022-02-20 18:07:24,649 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec1_productSimulator.cil.c [2022-02-20 18:07:24,652 INFO L205 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-02-20 18:07:24,652 INFO L164 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-02-20 18:07:24,682 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-02-20 18:07:24,688 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2022-02-20 18:07:24,688 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-02-20 18:07:24,705 INFO L276 IsEmpty]: Start isEmpty. Operand has 143 states, 99 states have (on average 1.3636363636363635) internal successors, (135), 115 states have internal predecessors, (135), 30 states have call successors, (30), 12 states have call predecessors, (30), 12 states have return successors, (30), 25 states have call predecessors, (30), 30 states have call successors, (30) [2022-02-20 18:07:24,711 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-02-20 18:07:24,711 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:07:24,712 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:07:24,712 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:07:24,715 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:07:24,716 INFO L85 PathProgramCache]: Analyzing trace with hash 735996178, now seen corresponding path program 1 times [2022-02-20 18:07:24,724 INFO L126 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-02-20 18:07:24,724 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1150938994] [2022-02-20 18:07:24,724 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:07:24,725 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-02-20 18:07:24,725 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-02-20 18:07:24,727 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-02-20 18:07:24,732 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (2)] Waiting until timeout for monitored process [2022-02-20 18:07:24,839 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:24,843 INFO L263 TraceCheckSpWp]: Trace formula consists of 212 conjuncts, 1 conjunts are in the unsatisfiable core [2022-02-20 18:07:24,875 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:24,879 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 18:07:25,087 INFO L290 TraceCheckUtils]: 0: Hoare triple {146#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0bv32, 0bv32;assume 0bv1 == #valid[0bv32];assume ~bvult32(0bv32, #StackHeapBarrier);call #Ultimate.allocInit(2bv32, 1bv32);call write~init~intINTTYPE1(48bv8, 1bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 1bv32, 1bv32, 1bv32);call #Ultimate.allocInit(38bv32, 2bv32);call #Ultimate.allocInit(12bv32, 3bv32);call #Ultimate.allocInit(13bv32, 4bv32);call #Ultimate.allocInit(3bv32, 5bv32);call write~init~intINTTYPE1(79bv8, 5bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(110bv8, 5bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 5bv32, 2bv32, 1bv32);call #Ultimate.allocInit(4bv32, 6bv32);call write~init~intINTTYPE1(79bv8, 6bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 6bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 6bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 6bv32, 3bv32, 1bv32);call #Ultimate.allocInit(7bv32, 7bv32);call write~init~intINTTYPE1(44bv8, 7bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(80bv8, 7bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(117bv8, 7bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(109bv8, 7bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(112bv8, 7bv32, 4bv32, 1bv32);call write~init~intINTTYPE1(58bv8, 7bv32, 5bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 7bv32, 6bv32, 1bv32);call #Ultimate.allocInit(3bv32, 8bv32);call write~init~intINTTYPE1(79bv8, 8bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(110bv8, 8bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 8bv32, 2bv32, 1bv32);call #Ultimate.allocInit(4bv32, 9bv32);call write~init~intINTTYPE1(79bv8, 9bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 9bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 9bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 9bv32, 3bv32, 1bv32);call #Ultimate.allocInit(3bv32, 10bv32);call write~init~intINTTYPE1(41bv8, 10bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(32bv8, 10bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 10bv32, 2bv32, 1bv32);call #Ultimate.allocInit(2bv32, 11bv32);call write~init~intINTTYPE1(10bv8, 11bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 11bv32, 1bv32, 1bv32);call #Ultimate.allocInit(30bv32, 12bv32);call #Ultimate.allocInit(9bv32, 13bv32);call #Ultimate.allocInit(21bv32, 14bv32);call #Ultimate.allocInit(30bv32, 15bv32);call #Ultimate.allocInit(9bv32, 16bv32);call #Ultimate.allocInit(21bv32, 17bv32);call #Ultimate.allocInit(30bv32, 18bv32);call #Ultimate.allocInit(9bv32, 19bv32);call #Ultimate.allocInit(25bv32, 20bv32);call #Ultimate.allocInit(30bv32, 21bv32);call #Ultimate.allocInit(9bv32, 22bv32);call #Ultimate.allocInit(25bv32, 23bv32);call #Ultimate.allocInit(13bv32, 24bv32);call #Ultimate.allocInit(7bv32, 25bv32);call write~init~intINTTYPE1(44bv8, 25bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(77bv8, 25bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(101bv8, 25bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(116bv8, 25bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(104bv8, 25bv32, 4bv32, 1bv32);call write~init~intINTTYPE1(58bv8, 25bv32, 5bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 25bv32, 6bv32, 1bv32);call #Ultimate.allocInit(5bv32, 26bv32);call write~init~intINTTYPE1(67bv8, 26bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(82bv8, 26bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(73bv8, 26bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(84bv8, 26bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 26bv32, 4bv32, 1bv32);call #Ultimate.allocInit(3bv32, 27bv32);call write~init~intINTTYPE1(79bv8, 27bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(75bv8, 27bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 27bv32, 2bv32, 1bv32);call #Ultimate.allocInit(2bv32, 28bv32);call write~init~intINTTYPE1(41bv8, 28bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 28bv32, 1bv32, 1bv32);~__SELECTED_FEATURE_base~0 := 0bv32;~__SELECTED_FEATURE_highWaterSensor~0 := 0bv32;~__SELECTED_FEATURE_lowWaterSensor~0 := 0bv32;~__SELECTED_FEATURE_methaneQuery~0 := 0bv32;~__SELECTED_FEATURE_methaneAlarm~0 := 0bv32;~__SELECTED_FEATURE_stopCommand~0 := 0bv32;~__SELECTED_FEATURE_startCommand~0 := 0bv32;~__GUIDSL_ROOT_PRODUCTION~0 := 0bv32;~pumpRunning~0 := 0bv32;~systemActive~0 := 1bv32;~head~0.base, ~head~0.offset := 0bv32, 0bv32;~waterLevel~0 := 1bv32;~methaneLevelCritical~0 := 0bv32;~cleanupTimeShifts~0 := 4bv32; {146#true} is VALID [2022-02-20 18:07:25,098 INFO L290 TraceCheckUtils]: 1: Hoare triple {146#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret60#1, main_~retValue_acc~13#1, main_~tmp~11#1;havoc main_~retValue_acc~13#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1bv32; {146#true} is VALID [2022-02-20 18:07:25,098 INFO L290 TraceCheckUtils]: 2: Hoare triple {146#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret47#1, select_features_#t~ret48#1, select_features_#t~ret49#1, select_features_#t~ret50#1, select_features_#t~ret51#1, select_features_#t~ret52#1;~__SELECTED_FEATURE_base~0 := 1bv32; {146#true} is VALID [2022-02-20 18:07:25,098 INFO L272 TraceCheckUtils]: 3: Hoare triple {146#true} call select_features_#t~ret47#1 := select_one(); {146#true} is VALID [2022-02-20 18:07:25,099 INFO L290 TraceCheckUtils]: 4: Hoare triple {146#true} havoc ~retValue_acc~7;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {146#true} is VALID [2022-02-20 18:07:25,099 INFO L290 TraceCheckUtils]: 5: Hoare triple {146#true} assume true; {146#true} is VALID [2022-02-20 18:07:25,099 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {146#true} {146#true} #355#return; {146#true} is VALID [2022-02-20 18:07:25,099 INFO L290 TraceCheckUtils]: 7: Hoare triple {146#true} ~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret47#1;havoc select_features_#t~ret47#1; {146#true} is VALID [2022-02-20 18:07:25,099 INFO L272 TraceCheckUtils]: 8: Hoare triple {146#true} call select_features_#t~ret48#1 := select_one(); {146#true} is VALID [2022-02-20 18:07:25,100 INFO L290 TraceCheckUtils]: 9: Hoare triple {146#true} havoc ~retValue_acc~7;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {146#true} is VALID [2022-02-20 18:07:25,100 INFO L290 TraceCheckUtils]: 10: Hoare triple {146#true} assume true; {146#true} is VALID [2022-02-20 18:07:25,100 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {146#true} {146#true} #357#return; {146#true} is VALID [2022-02-20 18:07:25,100 INFO L290 TraceCheckUtils]: 12: Hoare triple {146#true} ~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret48#1;havoc select_features_#t~ret48#1; {146#true} is VALID [2022-02-20 18:07:25,100 INFO L272 TraceCheckUtils]: 13: Hoare triple {146#true} call select_features_#t~ret49#1 := select_one(); {146#true} is VALID [2022-02-20 18:07:25,101 INFO L290 TraceCheckUtils]: 14: Hoare triple {146#true} havoc ~retValue_acc~7;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {146#true} is VALID [2022-02-20 18:07:25,101 INFO L290 TraceCheckUtils]: 15: Hoare triple {146#true} assume true; {146#true} is VALID [2022-02-20 18:07:25,101 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {146#true} {146#true} #359#return; {146#true} is VALID [2022-02-20 18:07:25,101 INFO L290 TraceCheckUtils]: 17: Hoare triple {146#true} ~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret49#1;havoc select_features_#t~ret49#1; {146#true} is VALID [2022-02-20 18:07:25,101 INFO L272 TraceCheckUtils]: 18: Hoare triple {146#true} call select_features_#t~ret50#1 := select_one(); {146#true} is VALID [2022-02-20 18:07:25,102 INFO L290 TraceCheckUtils]: 19: Hoare triple {146#true} havoc ~retValue_acc~7;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {146#true} is VALID [2022-02-20 18:07:25,102 INFO L290 TraceCheckUtils]: 20: Hoare triple {146#true} assume true; {146#true} is VALID [2022-02-20 18:07:25,102 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {146#true} {146#true} #361#return; {146#true} is VALID [2022-02-20 18:07:25,102 INFO L290 TraceCheckUtils]: 22: Hoare triple {146#true} ~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret50#1;havoc select_features_#t~ret50#1; {146#true} is VALID [2022-02-20 18:07:25,102 INFO L272 TraceCheckUtils]: 23: Hoare triple {146#true} call select_features_#t~ret51#1 := select_one(); {146#true} is VALID [2022-02-20 18:07:25,103 INFO L290 TraceCheckUtils]: 24: Hoare triple {146#true} havoc ~retValue_acc~7;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {146#true} is VALID [2022-02-20 18:07:25,103 INFO L290 TraceCheckUtils]: 25: Hoare triple {146#true} assume true; {146#true} is VALID [2022-02-20 18:07:25,103 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {146#true} {146#true} #363#return; {146#true} is VALID [2022-02-20 18:07:25,103 INFO L290 TraceCheckUtils]: 27: Hoare triple {146#true} ~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret51#1;havoc select_features_#t~ret51#1; {146#true} is VALID [2022-02-20 18:07:25,103 INFO L272 TraceCheckUtils]: 28: Hoare triple {146#true} call select_features_#t~ret52#1 := select_one(); {146#true} is VALID [2022-02-20 18:07:25,104 INFO L290 TraceCheckUtils]: 29: Hoare triple {146#true} havoc ~retValue_acc~7;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {146#true} is VALID [2022-02-20 18:07:25,104 INFO L290 TraceCheckUtils]: 30: Hoare triple {146#true} assume true; {146#true} is VALID [2022-02-20 18:07:25,104 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {146#true} {146#true} #365#return; {146#true} is VALID [2022-02-20 18:07:25,104 INFO L290 TraceCheckUtils]: 32: Hoare triple {146#true} ~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret52#1;havoc select_features_#t~ret52#1; {146#true} is VALID [2022-02-20 18:07:25,104 INFO L290 TraceCheckUtils]: 33: Hoare triple {146#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~8#1;havoc valid_product_~retValue_acc~8#1;valid_product_~retValue_acc~8#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~8#1; {146#true} is VALID [2022-02-20 18:07:25,105 INFO L290 TraceCheckUtils]: 34: Hoare triple {146#true} main_#t~ret60#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret60#1;havoc main_#t~ret60#1; {146#true} is VALID [2022-02-20 18:07:25,105 INFO L290 TraceCheckUtils]: 35: Hoare triple {146#true} assume 0bv32 != main_~tmp~11#1;assume { :begin_inline_setup } true; {146#true} is VALID [2022-02-20 18:07:25,105 INFO L290 TraceCheckUtils]: 36: Hoare triple {146#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet4#1, test_#t~nondet5#1, test_#t~nondet6#1, test_#t~nondet7#1, test_~splverifierCounter~0#1, test_~tmp~0#1, test_~tmp___0~0#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~0#1;havoc test_~tmp___0~0#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0bv32; {146#true} is VALID [2022-02-20 18:07:25,106 INFO L290 TraceCheckUtils]: 37: Hoare triple {146#true} assume !true; {147#false} is VALID [2022-02-20 18:07:25,106 INFO L272 TraceCheckUtils]: 38: Hoare triple {147#false} call cleanup(); {147#false} is VALID [2022-02-20 18:07:25,106 INFO L290 TraceCheckUtils]: 39: Hoare triple {147#false} havoc ~i~0;havoc ~__cil_tmp2~0; {147#false} is VALID [2022-02-20 18:07:25,107 INFO L272 TraceCheckUtils]: 40: Hoare triple {147#false} call timeShift(); {147#false} is VALID [2022-02-20 18:07:25,107 INFO L290 TraceCheckUtils]: 41: Hoare triple {147#false} assume !(0bv32 != ~pumpRunning~0); {147#false} is VALID [2022-02-20 18:07:25,107 INFO L290 TraceCheckUtils]: 42: Hoare triple {147#false} assume !(0bv32 != ~systemActive~0); {147#false} is VALID [2022-02-20 18:07:25,107 INFO L290 TraceCheckUtils]: 43: Hoare triple {147#false} assume { :begin_inline___utac_acc__Specification1_spec__1 } true;havoc __utac_acc__Specification1_spec__1_#t~ret53#1, __utac_acc__Specification1_spec__1_#t~ret54#1, __utac_acc__Specification1_spec__1_~tmp~10#1, __utac_acc__Specification1_spec__1_~tmp___0~3#1;havoc __utac_acc__Specification1_spec__1_~tmp~10#1;havoc __utac_acc__Specification1_spec__1_~tmp___0~3#1; {147#false} is VALID [2022-02-20 18:07:25,107 INFO L272 TraceCheckUtils]: 44: Hoare triple {147#false} call __utac_acc__Specification1_spec__1_#t~ret53#1 := isMethaneLevelCritical(); {147#false} is VALID [2022-02-20 18:07:25,108 INFO L290 TraceCheckUtils]: 45: Hoare triple {147#false} havoc ~retValue_acc~9;~retValue_acc~9 := ~methaneLevelCritical~0;#res := ~retValue_acc~9; {147#false} is VALID [2022-02-20 18:07:25,108 INFO L290 TraceCheckUtils]: 46: Hoare triple {147#false} assume true; {147#false} is VALID [2022-02-20 18:07:25,122 INFO L284 TraceCheckUtils]: 47: Hoare quadruple {147#false} {147#false} #353#return; {147#false} is VALID [2022-02-20 18:07:25,122 INFO L290 TraceCheckUtils]: 48: Hoare triple {147#false} __utac_acc__Specification1_spec__1_~tmp~10#1 := __utac_acc__Specification1_spec__1_#t~ret53#1;havoc __utac_acc__Specification1_spec__1_#t~ret53#1; {147#false} is VALID [2022-02-20 18:07:25,123 INFO L290 TraceCheckUtils]: 49: Hoare triple {147#false} assume 0bv32 != __utac_acc__Specification1_spec__1_~tmp~10#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~1#1;havoc isPumpRunning_~retValue_acc~1#1;isPumpRunning_~retValue_acc~1#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~1#1; {147#false} is VALID [2022-02-20 18:07:25,123 INFO L290 TraceCheckUtils]: 50: Hoare triple {147#false} __utac_acc__Specification1_spec__1_#t~ret54#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;__utac_acc__Specification1_spec__1_~tmp___0~3#1 := __utac_acc__Specification1_spec__1_#t~ret54#1;havoc __utac_acc__Specification1_spec__1_#t~ret54#1; {147#false} is VALID [2022-02-20 18:07:25,123 INFO L290 TraceCheckUtils]: 51: Hoare triple {147#false} assume 0bv32 != __utac_acc__Specification1_spec__1_~tmp___0~3#1;assume { :begin_inline___automaton_fail } true; {147#false} is VALID [2022-02-20 18:07:25,123 INFO L290 TraceCheckUtils]: 52: Hoare triple {147#false} assume !false; {147#false} is VALID [2022-02-20 18:07:25,124 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-02-20 18:07:25,124 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-02-20 18:07:25,125 INFO L144 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-02-20 18:07:25,125 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1150938994] [2022-02-20 18:07:25,126 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1150938994] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:07:25,126 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:07:25,126 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-02-20 18:07:25,127 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1054066604] [2022-02-20 18:07:25,127 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:07:25,131 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 13.5) internal successors, (27), 2 states have internal predecessors, (27), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 53 [2022-02-20 18:07:25,132 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:07:25,135 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 2 states, 2 states have (on average 13.5) internal successors, (27), 2 states have internal predecessors, (27), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:07:25,212 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 43 edges. 43 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:25,213 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-02-20 18:07:25,213 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-02-20 18:07:25,237 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-02-20 18:07:25,238 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-02-20 18:07:25,241 INFO L87 Difference]: Start difference. First operand has 143 states, 99 states have (on average 1.3636363636363635) internal successors, (135), 115 states have internal predecessors, (135), 30 states have call successors, (30), 12 states have call predecessors, (30), 12 states have return successors, (30), 25 states have call predecessors, (30), 30 states have call successors, (30) Second operand has 2 states, 2 states have (on average 13.5) internal successors, (27), 2 states have internal predecessors, (27), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:07:25,407 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:25,408 INFO L93 Difference]: Finished difference Result 263 states and 365 transitions. [2022-02-20 18:07:25,408 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-02-20 18:07:25,408 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 13.5) internal successors, (27), 2 states have internal predecessors, (27), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 53 [2022-02-20 18:07:25,409 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:07:25,410 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2 states, 2 states have (on average 13.5) internal successors, (27), 2 states have internal predecessors, (27), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:07:25,441 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 365 transitions. [2022-02-20 18:07:25,441 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2 states, 2 states have (on average 13.5) internal successors, (27), 2 states have internal predecessors, (27), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:07:25,448 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 365 transitions. [2022-02-20 18:07:25,459 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states and 365 transitions. [2022-02-20 18:07:25,858 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 365 edges. 365 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:25,875 INFO L225 Difference]: With dead ends: 263 [2022-02-20 18:07:25,876 INFO L226 Difference]: Without dead ends: 134 [2022-02-20 18:07:25,879 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 52 GetRequests, 52 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-02-20 18:07:25,881 INFO L933 BasicCegarLoop]: 189 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 189 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:07:25,882 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 189 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:07:25,892 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 134 states. [2022-02-20 18:07:25,940 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 134 to 134. [2022-02-20 18:07:25,940 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:07:25,941 INFO L82 GeneralOperation]: Start isEquivalent. First operand 134 states. Second operand has 134 states, 92 states have (on average 1.315217391304348) internal successors, (121), 107 states have internal predecessors, (121), 30 states have call successors, (30), 12 states have call predecessors, (30), 11 states have return successors, (29), 24 states have call predecessors, (29), 29 states have call successors, (29) [2022-02-20 18:07:25,956 INFO L74 IsIncluded]: Start isIncluded. First operand 134 states. Second operand has 134 states, 92 states have (on average 1.315217391304348) internal successors, (121), 107 states have internal predecessors, (121), 30 states have call successors, (30), 12 states have call predecessors, (30), 11 states have return successors, (29), 24 states have call predecessors, (29), 29 states have call successors, (29) [2022-02-20 18:07:25,957 INFO L87 Difference]: Start difference. First operand 134 states. Second operand has 134 states, 92 states have (on average 1.315217391304348) internal successors, (121), 107 states have internal predecessors, (121), 30 states have call successors, (30), 12 states have call predecessors, (30), 11 states have return successors, (29), 24 states have call predecessors, (29), 29 states have call successors, (29) [2022-02-20 18:07:25,968 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:25,968 INFO L93 Difference]: Finished difference Result 134 states and 180 transitions. [2022-02-20 18:07:25,968 INFO L276 IsEmpty]: Start isEmpty. Operand 134 states and 180 transitions. [2022-02-20 18:07:25,970 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:25,970 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:25,974 INFO L74 IsIncluded]: Start isIncluded. First operand has 134 states, 92 states have (on average 1.315217391304348) internal successors, (121), 107 states have internal predecessors, (121), 30 states have call successors, (30), 12 states have call predecessors, (30), 11 states have return successors, (29), 24 states have call predecessors, (29), 29 states have call successors, (29) Second operand 134 states. [2022-02-20 18:07:25,987 INFO L87 Difference]: Start difference. First operand has 134 states, 92 states have (on average 1.315217391304348) internal successors, (121), 107 states have internal predecessors, (121), 30 states have call successors, (30), 12 states have call predecessors, (30), 11 states have return successors, (29), 24 states have call predecessors, (29), 29 states have call successors, (29) Second operand 134 states. [2022-02-20 18:07:25,994 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:25,995 INFO L93 Difference]: Finished difference Result 134 states and 180 transitions. [2022-02-20 18:07:25,995 INFO L276 IsEmpty]: Start isEmpty. Operand 134 states and 180 transitions. [2022-02-20 18:07:25,997 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:25,997 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:25,997 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:07:25,997 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:07:25,998 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 134 states, 92 states have (on average 1.315217391304348) internal successors, (121), 107 states have internal predecessors, (121), 30 states have call successors, (30), 12 states have call predecessors, (30), 11 states have return successors, (29), 24 states have call predecessors, (29), 29 states have call successors, (29) [2022-02-20 18:07:26,004 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 134 states to 134 states and 180 transitions. [2022-02-20 18:07:26,008 INFO L78 Accepts]: Start accepts. Automaton has 134 states and 180 transitions. Word has length 53 [2022-02-20 18:07:26,009 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:07:26,009 INFO L470 AbstractCegarLoop]: Abstraction has 134 states and 180 transitions. [2022-02-20 18:07:26,010 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 13.5) internal successors, (27), 2 states have internal predecessors, (27), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:07:26,023 INFO L276 IsEmpty]: Start isEmpty. Operand 134 states and 180 transitions. [2022-02-20 18:07:26,024 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2022-02-20 18:07:26,025 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:07:26,025 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:07:26,035 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (2)] Ended with exit code 0 [2022-02-20 18:07:26,232 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-02-20 18:07:26,232 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:07:26,233 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:07:26,233 INFO L85 PathProgramCache]: Analyzing trace with hash 976031723, now seen corresponding path program 1 times [2022-02-20 18:07:26,233 INFO L126 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-02-20 18:07:26,234 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2083718737] [2022-02-20 18:07:26,234 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:07:26,234 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-02-20 18:07:26,234 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-02-20 18:07:26,244 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-02-20 18:07:26,246 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (3)] Waiting until timeout for monitored process [2022-02-20 18:07:26,328 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:26,340 INFO L263 TraceCheckSpWp]: Trace formula consists of 213 conjuncts, 2 conjunts are in the unsatisfiable core [2022-02-20 18:07:26,356 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:26,357 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 18:07:26,466 INFO L290 TraceCheckUtils]: 0: Hoare triple {1158#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0bv32, 0bv32;assume 0bv1 == #valid[0bv32];assume ~bvult32(0bv32, #StackHeapBarrier);call #Ultimate.allocInit(2bv32, 1bv32);call write~init~intINTTYPE1(48bv8, 1bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 1bv32, 1bv32, 1bv32);call #Ultimate.allocInit(38bv32, 2bv32);call #Ultimate.allocInit(12bv32, 3bv32);call #Ultimate.allocInit(13bv32, 4bv32);call #Ultimate.allocInit(3bv32, 5bv32);call write~init~intINTTYPE1(79bv8, 5bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(110bv8, 5bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 5bv32, 2bv32, 1bv32);call #Ultimate.allocInit(4bv32, 6bv32);call write~init~intINTTYPE1(79bv8, 6bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 6bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 6bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 6bv32, 3bv32, 1bv32);call #Ultimate.allocInit(7bv32, 7bv32);call write~init~intINTTYPE1(44bv8, 7bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(80bv8, 7bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(117bv8, 7bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(109bv8, 7bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(112bv8, 7bv32, 4bv32, 1bv32);call write~init~intINTTYPE1(58bv8, 7bv32, 5bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 7bv32, 6bv32, 1bv32);call #Ultimate.allocInit(3bv32, 8bv32);call write~init~intINTTYPE1(79bv8, 8bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(110bv8, 8bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 8bv32, 2bv32, 1bv32);call #Ultimate.allocInit(4bv32, 9bv32);call write~init~intINTTYPE1(79bv8, 9bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 9bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 9bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 9bv32, 3bv32, 1bv32);call #Ultimate.allocInit(3bv32, 10bv32);call write~init~intINTTYPE1(41bv8, 10bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(32bv8, 10bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 10bv32, 2bv32, 1bv32);call #Ultimate.allocInit(2bv32, 11bv32);call write~init~intINTTYPE1(10bv8, 11bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 11bv32, 1bv32, 1bv32);call #Ultimate.allocInit(30bv32, 12bv32);call #Ultimate.allocInit(9bv32, 13bv32);call #Ultimate.allocInit(21bv32, 14bv32);call #Ultimate.allocInit(30bv32, 15bv32);call #Ultimate.allocInit(9bv32, 16bv32);call #Ultimate.allocInit(21bv32, 17bv32);call #Ultimate.allocInit(30bv32, 18bv32);call #Ultimate.allocInit(9bv32, 19bv32);call #Ultimate.allocInit(25bv32, 20bv32);call #Ultimate.allocInit(30bv32, 21bv32);call #Ultimate.allocInit(9bv32, 22bv32);call #Ultimate.allocInit(25bv32, 23bv32);call #Ultimate.allocInit(13bv32, 24bv32);call #Ultimate.allocInit(7bv32, 25bv32);call write~init~intINTTYPE1(44bv8, 25bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(77bv8, 25bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(101bv8, 25bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(116bv8, 25bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(104bv8, 25bv32, 4bv32, 1bv32);call write~init~intINTTYPE1(58bv8, 25bv32, 5bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 25bv32, 6bv32, 1bv32);call #Ultimate.allocInit(5bv32, 26bv32);call write~init~intINTTYPE1(67bv8, 26bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(82bv8, 26bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(73bv8, 26bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(84bv8, 26bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 26bv32, 4bv32, 1bv32);call #Ultimate.allocInit(3bv32, 27bv32);call write~init~intINTTYPE1(79bv8, 27bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(75bv8, 27bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 27bv32, 2bv32, 1bv32);call #Ultimate.allocInit(2bv32, 28bv32);call write~init~intINTTYPE1(41bv8, 28bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 28bv32, 1bv32, 1bv32);~__SELECTED_FEATURE_base~0 := 0bv32;~__SELECTED_FEATURE_highWaterSensor~0 := 0bv32;~__SELECTED_FEATURE_lowWaterSensor~0 := 0bv32;~__SELECTED_FEATURE_methaneQuery~0 := 0bv32;~__SELECTED_FEATURE_methaneAlarm~0 := 0bv32;~__SELECTED_FEATURE_stopCommand~0 := 0bv32;~__SELECTED_FEATURE_startCommand~0 := 0bv32;~__GUIDSL_ROOT_PRODUCTION~0 := 0bv32;~pumpRunning~0 := 0bv32;~systemActive~0 := 1bv32;~head~0.base, ~head~0.offset := 0bv32, 0bv32;~waterLevel~0 := 1bv32;~methaneLevelCritical~0 := 0bv32;~cleanupTimeShifts~0 := 4bv32; {1158#true} is VALID [2022-02-20 18:07:26,466 INFO L290 TraceCheckUtils]: 1: Hoare triple {1158#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret60#1, main_~retValue_acc~13#1, main_~tmp~11#1;havoc main_~retValue_acc~13#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1bv32; {1158#true} is VALID [2022-02-20 18:07:26,467 INFO L290 TraceCheckUtils]: 2: Hoare triple {1158#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret47#1, select_features_#t~ret48#1, select_features_#t~ret49#1, select_features_#t~ret50#1, select_features_#t~ret51#1, select_features_#t~ret52#1;~__SELECTED_FEATURE_base~0 := 1bv32; {1158#true} is VALID [2022-02-20 18:07:26,467 INFO L272 TraceCheckUtils]: 3: Hoare triple {1158#true} call select_features_#t~ret47#1 := select_one(); {1158#true} is VALID [2022-02-20 18:07:26,467 INFO L290 TraceCheckUtils]: 4: Hoare triple {1158#true} havoc ~retValue_acc~7;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {1158#true} is VALID [2022-02-20 18:07:26,467 INFO L290 TraceCheckUtils]: 5: Hoare triple {1158#true} assume true; {1158#true} is VALID [2022-02-20 18:07:26,467 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {1158#true} {1158#true} #355#return; {1158#true} is VALID [2022-02-20 18:07:26,468 INFO L290 TraceCheckUtils]: 7: Hoare triple {1158#true} ~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret47#1;havoc select_features_#t~ret47#1; {1158#true} is VALID [2022-02-20 18:07:26,468 INFO L272 TraceCheckUtils]: 8: Hoare triple {1158#true} call select_features_#t~ret48#1 := select_one(); {1158#true} is VALID [2022-02-20 18:07:26,468 INFO L290 TraceCheckUtils]: 9: Hoare triple {1158#true} havoc ~retValue_acc~7;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {1158#true} is VALID [2022-02-20 18:07:26,468 INFO L290 TraceCheckUtils]: 10: Hoare triple {1158#true} assume true; {1158#true} is VALID [2022-02-20 18:07:26,468 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {1158#true} {1158#true} #357#return; {1158#true} is VALID [2022-02-20 18:07:26,468 INFO L290 TraceCheckUtils]: 12: Hoare triple {1158#true} ~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret48#1;havoc select_features_#t~ret48#1; {1158#true} is VALID [2022-02-20 18:07:26,469 INFO L272 TraceCheckUtils]: 13: Hoare triple {1158#true} call select_features_#t~ret49#1 := select_one(); {1158#true} is VALID [2022-02-20 18:07:26,469 INFO L290 TraceCheckUtils]: 14: Hoare triple {1158#true} havoc ~retValue_acc~7;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {1158#true} is VALID [2022-02-20 18:07:26,469 INFO L290 TraceCheckUtils]: 15: Hoare triple {1158#true} assume true; {1158#true} is VALID [2022-02-20 18:07:26,469 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {1158#true} {1158#true} #359#return; {1158#true} is VALID [2022-02-20 18:07:26,469 INFO L290 TraceCheckUtils]: 17: Hoare triple {1158#true} ~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret49#1;havoc select_features_#t~ret49#1; {1158#true} is VALID [2022-02-20 18:07:26,470 INFO L272 TraceCheckUtils]: 18: Hoare triple {1158#true} call select_features_#t~ret50#1 := select_one(); {1158#true} is VALID [2022-02-20 18:07:26,470 INFO L290 TraceCheckUtils]: 19: Hoare triple {1158#true} havoc ~retValue_acc~7;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {1158#true} is VALID [2022-02-20 18:07:26,470 INFO L290 TraceCheckUtils]: 20: Hoare triple {1158#true} assume true; {1158#true} is VALID [2022-02-20 18:07:26,470 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {1158#true} {1158#true} #361#return; {1158#true} is VALID [2022-02-20 18:07:26,470 INFO L290 TraceCheckUtils]: 22: Hoare triple {1158#true} ~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret50#1;havoc select_features_#t~ret50#1; {1158#true} is VALID [2022-02-20 18:07:26,470 INFO L272 TraceCheckUtils]: 23: Hoare triple {1158#true} call select_features_#t~ret51#1 := select_one(); {1158#true} is VALID [2022-02-20 18:07:26,471 INFO L290 TraceCheckUtils]: 24: Hoare triple {1158#true} havoc ~retValue_acc~7;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {1158#true} is VALID [2022-02-20 18:07:26,471 INFO L290 TraceCheckUtils]: 25: Hoare triple {1158#true} assume true; {1158#true} is VALID [2022-02-20 18:07:26,471 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {1158#true} {1158#true} #363#return; {1158#true} is VALID [2022-02-20 18:07:26,471 INFO L290 TraceCheckUtils]: 27: Hoare triple {1158#true} ~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret51#1;havoc select_features_#t~ret51#1; {1158#true} is VALID [2022-02-20 18:07:26,471 INFO L272 TraceCheckUtils]: 28: Hoare triple {1158#true} call select_features_#t~ret52#1 := select_one(); {1158#true} is VALID [2022-02-20 18:07:26,472 INFO L290 TraceCheckUtils]: 29: Hoare triple {1158#true} havoc ~retValue_acc~7;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {1158#true} is VALID [2022-02-20 18:07:26,472 INFO L290 TraceCheckUtils]: 30: Hoare triple {1158#true} assume true; {1158#true} is VALID [2022-02-20 18:07:26,472 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {1158#true} {1158#true} #365#return; {1158#true} is VALID [2022-02-20 18:07:26,472 INFO L290 TraceCheckUtils]: 32: Hoare triple {1158#true} ~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret52#1;havoc select_features_#t~ret52#1; {1158#true} is VALID [2022-02-20 18:07:26,472 INFO L290 TraceCheckUtils]: 33: Hoare triple {1158#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~8#1;havoc valid_product_~retValue_acc~8#1;valid_product_~retValue_acc~8#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~8#1; {1158#true} is VALID [2022-02-20 18:07:26,472 INFO L290 TraceCheckUtils]: 34: Hoare triple {1158#true} main_#t~ret60#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret60#1;havoc main_#t~ret60#1; {1158#true} is VALID [2022-02-20 18:07:26,473 INFO L290 TraceCheckUtils]: 35: Hoare triple {1158#true} assume 0bv32 != main_~tmp~11#1;assume { :begin_inline_setup } true; {1158#true} is VALID [2022-02-20 18:07:26,473 INFO L290 TraceCheckUtils]: 36: Hoare triple {1158#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet4#1, test_#t~nondet5#1, test_#t~nondet6#1, test_#t~nondet7#1, test_~splverifierCounter~0#1, test_~tmp~0#1, test_~tmp___0~0#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~0#1;havoc test_~tmp___0~0#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0bv32; {1271#(= |ULTIMATE.start_test_~splverifierCounter~0#1| (_ bv0 32))} is VALID [2022-02-20 18:07:26,473 INFO L290 TraceCheckUtils]: 37: Hoare triple {1271#(= |ULTIMATE.start_test_~splverifierCounter~0#1| (_ bv0 32))} assume !false; {1271#(= |ULTIMATE.start_test_~splverifierCounter~0#1| (_ bv0 32))} is VALID [2022-02-20 18:07:26,474 INFO L290 TraceCheckUtils]: 38: Hoare triple {1271#(= |ULTIMATE.start_test_~splverifierCounter~0#1| (_ bv0 32))} assume !~bvslt32(test_~splverifierCounter~0#1, 4bv32); {1159#false} is VALID [2022-02-20 18:07:26,474 INFO L272 TraceCheckUtils]: 39: Hoare triple {1159#false} call cleanup(); {1159#false} is VALID [2022-02-20 18:07:26,474 INFO L290 TraceCheckUtils]: 40: Hoare triple {1159#false} havoc ~i~0;havoc ~__cil_tmp2~0; {1159#false} is VALID [2022-02-20 18:07:26,474 INFO L272 TraceCheckUtils]: 41: Hoare triple {1159#false} call timeShift(); {1159#false} is VALID [2022-02-20 18:07:26,475 INFO L290 TraceCheckUtils]: 42: Hoare triple {1159#false} assume !(0bv32 != ~pumpRunning~0); {1159#false} is VALID [2022-02-20 18:07:26,475 INFO L290 TraceCheckUtils]: 43: Hoare triple {1159#false} assume !(0bv32 != ~systemActive~0); {1159#false} is VALID [2022-02-20 18:07:26,475 INFO L290 TraceCheckUtils]: 44: Hoare triple {1159#false} assume { :begin_inline___utac_acc__Specification1_spec__1 } true;havoc __utac_acc__Specification1_spec__1_#t~ret53#1, __utac_acc__Specification1_spec__1_#t~ret54#1, __utac_acc__Specification1_spec__1_~tmp~10#1, __utac_acc__Specification1_spec__1_~tmp___0~3#1;havoc __utac_acc__Specification1_spec__1_~tmp~10#1;havoc __utac_acc__Specification1_spec__1_~tmp___0~3#1; {1159#false} is VALID [2022-02-20 18:07:26,475 INFO L272 TraceCheckUtils]: 45: Hoare triple {1159#false} call __utac_acc__Specification1_spec__1_#t~ret53#1 := isMethaneLevelCritical(); {1159#false} is VALID [2022-02-20 18:07:26,475 INFO L290 TraceCheckUtils]: 46: Hoare triple {1159#false} havoc ~retValue_acc~9;~retValue_acc~9 := ~methaneLevelCritical~0;#res := ~retValue_acc~9; {1159#false} is VALID [2022-02-20 18:07:26,476 INFO L290 TraceCheckUtils]: 47: Hoare triple {1159#false} assume true; {1159#false} is VALID [2022-02-20 18:07:26,476 INFO L284 TraceCheckUtils]: 48: Hoare quadruple {1159#false} {1159#false} #353#return; {1159#false} is VALID [2022-02-20 18:07:26,476 INFO L290 TraceCheckUtils]: 49: Hoare triple {1159#false} __utac_acc__Specification1_spec__1_~tmp~10#1 := __utac_acc__Specification1_spec__1_#t~ret53#1;havoc __utac_acc__Specification1_spec__1_#t~ret53#1; {1159#false} is VALID [2022-02-20 18:07:26,476 INFO L290 TraceCheckUtils]: 50: Hoare triple {1159#false} assume 0bv32 != __utac_acc__Specification1_spec__1_~tmp~10#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~1#1;havoc isPumpRunning_~retValue_acc~1#1;isPumpRunning_~retValue_acc~1#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~1#1; {1159#false} is VALID [2022-02-20 18:07:26,476 INFO L290 TraceCheckUtils]: 51: Hoare triple {1159#false} __utac_acc__Specification1_spec__1_#t~ret54#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;__utac_acc__Specification1_spec__1_~tmp___0~3#1 := __utac_acc__Specification1_spec__1_#t~ret54#1;havoc __utac_acc__Specification1_spec__1_#t~ret54#1; {1159#false} is VALID [2022-02-20 18:07:26,476 INFO L290 TraceCheckUtils]: 52: Hoare triple {1159#false} assume 0bv32 != __utac_acc__Specification1_spec__1_~tmp___0~3#1;assume { :begin_inline___automaton_fail } true; {1159#false} is VALID [2022-02-20 18:07:26,477 INFO L290 TraceCheckUtils]: 53: Hoare triple {1159#false} assume !false; {1159#false} is VALID [2022-02-20 18:07:26,477 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-02-20 18:07:26,477 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-02-20 18:07:26,477 INFO L144 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-02-20 18:07:26,477 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [2083718737] [2022-02-20 18:07:26,478 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleMathsat [2083718737] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:07:26,478 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:07:26,478 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-02-20 18:07:26,478 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1947333788] [2022-02-20 18:07:26,478 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:07:26,479 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 54 [2022-02-20 18:07:26,480 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:07:26,480 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:07:26,519 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 44 edges. 44 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:26,520 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-02-20 18:07:26,520 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-02-20 18:07:26,521 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-02-20 18:07:26,521 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:07:26,521 INFO L87 Difference]: Start difference. First operand 134 states and 180 transitions. Second operand has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:07:26,685 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:26,685 INFO L93 Difference]: Finished difference Result 212 states and 285 transitions. [2022-02-20 18:07:26,685 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-02-20 18:07:26,686 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 54 [2022-02-20 18:07:26,686 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:07:26,686 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:07:26,691 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 285 transitions. [2022-02-20 18:07:26,691 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:07:26,695 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 285 transitions. [2022-02-20 18:07:26,695 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 285 transitions. [2022-02-20 18:07:26,955 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 285 edges. 285 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:26,958 INFO L225 Difference]: With dead ends: 212 [2022-02-20 18:07:26,959 INFO L226 Difference]: Without dead ends: 125 [2022-02-20 18:07:26,960 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 53 GetRequests, 52 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:07:26,960 INFO L933 BasicCegarLoop]: 167 mSDtfsCounter, 21 mSDsluCounter, 141 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 25 SdHoareTripleChecker+Valid, 308 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:07:26,961 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [25 Valid, 308 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:07:26,962 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 125 states. [2022-02-20 18:07:26,968 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 125 to 125. [2022-02-20 18:07:26,978 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:07:26,978 INFO L82 GeneralOperation]: Start isEquivalent. First operand 125 states. Second operand has 125 states, 86 states have (on average 1.3255813953488371) internal successors, (114), 101 states have internal predecessors, (114), 27 states have call successors, (27), 11 states have call predecessors, (27), 11 states have return successors, (27), 22 states have call predecessors, (27), 27 states have call successors, (27) [2022-02-20 18:07:26,979 INFO L74 IsIncluded]: Start isIncluded. First operand 125 states. Second operand has 125 states, 86 states have (on average 1.3255813953488371) internal successors, (114), 101 states have internal predecessors, (114), 27 states have call successors, (27), 11 states have call predecessors, (27), 11 states have return successors, (27), 22 states have call predecessors, (27), 27 states have call successors, (27) [2022-02-20 18:07:26,979 INFO L87 Difference]: Start difference. First operand 125 states. Second operand has 125 states, 86 states have (on average 1.3255813953488371) internal successors, (114), 101 states have internal predecessors, (114), 27 states have call successors, (27), 11 states have call predecessors, (27), 11 states have return successors, (27), 22 states have call predecessors, (27), 27 states have call successors, (27) [2022-02-20 18:07:26,983 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:26,984 INFO L93 Difference]: Finished difference Result 125 states and 168 transitions. [2022-02-20 18:07:26,984 INFO L276 IsEmpty]: Start isEmpty. Operand 125 states and 168 transitions. [2022-02-20 18:07:26,984 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:26,985 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:26,985 INFO L74 IsIncluded]: Start isIncluded. First operand has 125 states, 86 states have (on average 1.3255813953488371) internal successors, (114), 101 states have internal predecessors, (114), 27 states have call successors, (27), 11 states have call predecessors, (27), 11 states have return successors, (27), 22 states have call predecessors, (27), 27 states have call successors, (27) Second operand 125 states. [2022-02-20 18:07:26,985 INFO L87 Difference]: Start difference. First operand has 125 states, 86 states have (on average 1.3255813953488371) internal successors, (114), 101 states have internal predecessors, (114), 27 states have call successors, (27), 11 states have call predecessors, (27), 11 states have return successors, (27), 22 states have call predecessors, (27), 27 states have call successors, (27) Second operand 125 states. [2022-02-20 18:07:26,990 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:26,996 INFO L93 Difference]: Finished difference Result 125 states and 168 transitions. [2022-02-20 18:07:26,997 INFO L276 IsEmpty]: Start isEmpty. Operand 125 states and 168 transitions. [2022-02-20 18:07:26,997 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:26,997 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:26,998 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:07:26,998 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:07:26,998 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 125 states, 86 states have (on average 1.3255813953488371) internal successors, (114), 101 states have internal predecessors, (114), 27 states have call successors, (27), 11 states have call predecessors, (27), 11 states have return successors, (27), 22 states have call predecessors, (27), 27 states have call successors, (27) [2022-02-20 18:07:27,012 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 125 states to 125 states and 168 transitions. [2022-02-20 18:07:27,012 INFO L78 Accepts]: Start accepts. Automaton has 125 states and 168 transitions. Word has length 54 [2022-02-20 18:07:27,012 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:07:27,012 INFO L470 AbstractCegarLoop]: Abstraction has 125 states and 168 transitions. [2022-02-20 18:07:27,013 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:07:27,013 INFO L276 IsEmpty]: Start isEmpty. Operand 125 states and 168 transitions. [2022-02-20 18:07:27,014 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2022-02-20 18:07:27,014 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:07:27,014 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:07:27,043 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (3)] Ended with exit code 0 [2022-02-20 18:07:27,221 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-02-20 18:07:27,221 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:07:27,222 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:07:27,222 INFO L85 PathProgramCache]: Analyzing trace with hash 471750439, now seen corresponding path program 1 times [2022-02-20 18:07:27,222 INFO L126 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-02-20 18:07:27,222 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [921588763] [2022-02-20 18:07:27,222 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:07:27,222 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-02-20 18:07:27,222 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-02-20 18:07:27,224 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-02-20 18:07:27,225 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (4)] Waiting until timeout for monitored process [2022-02-20 18:07:27,293 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:27,298 INFO L263 TraceCheckSpWp]: Trace formula consists of 215 conjuncts, 2 conjunts are in the unsatisfiable core [2022-02-20 18:07:27,320 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:27,322 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 18:07:27,484 INFO L290 TraceCheckUtils]: 0: Hoare triple {2068#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0bv32, 0bv32;assume 0bv1 == #valid[0bv32];assume ~bvult32(0bv32, #StackHeapBarrier);call #Ultimate.allocInit(2bv32, 1bv32);call write~init~intINTTYPE1(48bv8, 1bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 1bv32, 1bv32, 1bv32);call #Ultimate.allocInit(38bv32, 2bv32);call #Ultimate.allocInit(12bv32, 3bv32);call #Ultimate.allocInit(13bv32, 4bv32);call #Ultimate.allocInit(3bv32, 5bv32);call write~init~intINTTYPE1(79bv8, 5bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(110bv8, 5bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 5bv32, 2bv32, 1bv32);call #Ultimate.allocInit(4bv32, 6bv32);call write~init~intINTTYPE1(79bv8, 6bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 6bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 6bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 6bv32, 3bv32, 1bv32);call #Ultimate.allocInit(7bv32, 7bv32);call write~init~intINTTYPE1(44bv8, 7bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(80bv8, 7bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(117bv8, 7bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(109bv8, 7bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(112bv8, 7bv32, 4bv32, 1bv32);call write~init~intINTTYPE1(58bv8, 7bv32, 5bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 7bv32, 6bv32, 1bv32);call #Ultimate.allocInit(3bv32, 8bv32);call write~init~intINTTYPE1(79bv8, 8bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(110bv8, 8bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 8bv32, 2bv32, 1bv32);call #Ultimate.allocInit(4bv32, 9bv32);call write~init~intINTTYPE1(79bv8, 9bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 9bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 9bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 9bv32, 3bv32, 1bv32);call #Ultimate.allocInit(3bv32, 10bv32);call write~init~intINTTYPE1(41bv8, 10bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(32bv8, 10bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 10bv32, 2bv32, 1bv32);call #Ultimate.allocInit(2bv32, 11bv32);call write~init~intINTTYPE1(10bv8, 11bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 11bv32, 1bv32, 1bv32);call #Ultimate.allocInit(30bv32, 12bv32);call #Ultimate.allocInit(9bv32, 13bv32);call #Ultimate.allocInit(21bv32, 14bv32);call #Ultimate.allocInit(30bv32, 15bv32);call #Ultimate.allocInit(9bv32, 16bv32);call #Ultimate.allocInit(21bv32, 17bv32);call #Ultimate.allocInit(30bv32, 18bv32);call #Ultimate.allocInit(9bv32, 19bv32);call #Ultimate.allocInit(25bv32, 20bv32);call #Ultimate.allocInit(30bv32, 21bv32);call #Ultimate.allocInit(9bv32, 22bv32);call #Ultimate.allocInit(25bv32, 23bv32);call #Ultimate.allocInit(13bv32, 24bv32);call #Ultimate.allocInit(7bv32, 25bv32);call write~init~intINTTYPE1(44bv8, 25bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(77bv8, 25bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(101bv8, 25bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(116bv8, 25bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(104bv8, 25bv32, 4bv32, 1bv32);call write~init~intINTTYPE1(58bv8, 25bv32, 5bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 25bv32, 6bv32, 1bv32);call #Ultimate.allocInit(5bv32, 26bv32);call write~init~intINTTYPE1(67bv8, 26bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(82bv8, 26bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(73bv8, 26bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(84bv8, 26bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 26bv32, 4bv32, 1bv32);call #Ultimate.allocInit(3bv32, 27bv32);call write~init~intINTTYPE1(79bv8, 27bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(75bv8, 27bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 27bv32, 2bv32, 1bv32);call #Ultimate.allocInit(2bv32, 28bv32);call write~init~intINTTYPE1(41bv8, 28bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 28bv32, 1bv32, 1bv32);~__SELECTED_FEATURE_base~0 := 0bv32;~__SELECTED_FEATURE_highWaterSensor~0 := 0bv32;~__SELECTED_FEATURE_lowWaterSensor~0 := 0bv32;~__SELECTED_FEATURE_methaneQuery~0 := 0bv32;~__SELECTED_FEATURE_methaneAlarm~0 := 0bv32;~__SELECTED_FEATURE_stopCommand~0 := 0bv32;~__SELECTED_FEATURE_startCommand~0 := 0bv32;~__GUIDSL_ROOT_PRODUCTION~0 := 0bv32;~pumpRunning~0 := 0bv32;~systemActive~0 := 1bv32;~head~0.base, ~head~0.offset := 0bv32, 0bv32;~waterLevel~0 := 1bv32;~methaneLevelCritical~0 := 0bv32;~cleanupTimeShifts~0 := 4bv32; {2073#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:07:27,484 INFO L290 TraceCheckUtils]: 1: Hoare triple {2073#(= ~systemActive~0 (_ bv1 32))} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret60#1, main_~retValue_acc~13#1, main_~tmp~11#1;havoc main_~retValue_acc~13#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1bv32; {2073#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:07:27,485 INFO L290 TraceCheckUtils]: 2: Hoare triple {2073#(= ~systemActive~0 (_ bv1 32))} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret47#1, select_features_#t~ret48#1, select_features_#t~ret49#1, select_features_#t~ret50#1, select_features_#t~ret51#1, select_features_#t~ret52#1;~__SELECTED_FEATURE_base~0 := 1bv32; {2073#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:07:27,485 INFO L272 TraceCheckUtils]: 3: Hoare triple {2073#(= ~systemActive~0 (_ bv1 32))} call select_features_#t~ret47#1 := select_one(); {2073#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:07:27,486 INFO L290 TraceCheckUtils]: 4: Hoare triple {2073#(= ~systemActive~0 (_ bv1 32))} havoc ~retValue_acc~7;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {2073#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:07:27,486 INFO L290 TraceCheckUtils]: 5: Hoare triple {2073#(= ~systemActive~0 (_ bv1 32))} assume true; {2073#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:07:27,499 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {2073#(= ~systemActive~0 (_ bv1 32))} {2073#(= ~systemActive~0 (_ bv1 32))} #355#return; {2073#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:07:27,500 INFO L290 TraceCheckUtils]: 7: Hoare triple {2073#(= ~systemActive~0 (_ bv1 32))} ~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret47#1;havoc select_features_#t~ret47#1; {2073#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:07:27,500 INFO L272 TraceCheckUtils]: 8: Hoare triple {2073#(= ~systemActive~0 (_ bv1 32))} call select_features_#t~ret48#1 := select_one(); {2073#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:07:27,501 INFO L290 TraceCheckUtils]: 9: Hoare triple {2073#(= ~systemActive~0 (_ bv1 32))} havoc ~retValue_acc~7;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {2073#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:07:27,501 INFO L290 TraceCheckUtils]: 10: Hoare triple {2073#(= ~systemActive~0 (_ bv1 32))} assume true; {2073#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:07:27,501 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {2073#(= ~systemActive~0 (_ bv1 32))} {2073#(= ~systemActive~0 (_ bv1 32))} #357#return; {2073#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:07:27,502 INFO L290 TraceCheckUtils]: 12: Hoare triple {2073#(= ~systemActive~0 (_ bv1 32))} ~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret48#1;havoc select_features_#t~ret48#1; {2073#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:07:27,502 INFO L272 TraceCheckUtils]: 13: Hoare triple {2073#(= ~systemActive~0 (_ bv1 32))} call select_features_#t~ret49#1 := select_one(); {2073#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:07:27,502 INFO L290 TraceCheckUtils]: 14: Hoare triple {2073#(= ~systemActive~0 (_ bv1 32))} havoc ~retValue_acc~7;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {2073#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:07:27,503 INFO L290 TraceCheckUtils]: 15: Hoare triple {2073#(= ~systemActive~0 (_ bv1 32))} assume true; {2073#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:07:27,503 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {2073#(= ~systemActive~0 (_ bv1 32))} {2073#(= ~systemActive~0 (_ bv1 32))} #359#return; {2073#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:07:27,504 INFO L290 TraceCheckUtils]: 17: Hoare triple {2073#(= ~systemActive~0 (_ bv1 32))} ~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret49#1;havoc select_features_#t~ret49#1; {2073#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:07:27,504 INFO L272 TraceCheckUtils]: 18: Hoare triple {2073#(= ~systemActive~0 (_ bv1 32))} call select_features_#t~ret50#1 := select_one(); {2073#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:07:27,505 INFO L290 TraceCheckUtils]: 19: Hoare triple {2073#(= ~systemActive~0 (_ bv1 32))} havoc ~retValue_acc~7;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {2073#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:07:27,505 INFO L290 TraceCheckUtils]: 20: Hoare triple {2073#(= ~systemActive~0 (_ bv1 32))} assume true; {2073#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:07:27,506 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {2073#(= ~systemActive~0 (_ bv1 32))} {2073#(= ~systemActive~0 (_ bv1 32))} #361#return; {2073#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:07:27,506 INFO L290 TraceCheckUtils]: 22: Hoare triple {2073#(= ~systemActive~0 (_ bv1 32))} ~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret50#1;havoc select_features_#t~ret50#1; {2073#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:07:27,506 INFO L272 TraceCheckUtils]: 23: Hoare triple {2073#(= ~systemActive~0 (_ bv1 32))} call select_features_#t~ret51#1 := select_one(); {2073#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:07:27,507 INFO L290 TraceCheckUtils]: 24: Hoare triple {2073#(= ~systemActive~0 (_ bv1 32))} havoc ~retValue_acc~7;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {2073#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:07:27,507 INFO L290 TraceCheckUtils]: 25: Hoare triple {2073#(= ~systemActive~0 (_ bv1 32))} assume true; {2073#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:07:27,508 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {2073#(= ~systemActive~0 (_ bv1 32))} {2073#(= ~systemActive~0 (_ bv1 32))} #363#return; {2073#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:07:27,508 INFO L290 TraceCheckUtils]: 27: Hoare triple {2073#(= ~systemActive~0 (_ bv1 32))} ~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret51#1;havoc select_features_#t~ret51#1; {2073#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:07:27,508 INFO L272 TraceCheckUtils]: 28: Hoare triple {2073#(= ~systemActive~0 (_ bv1 32))} call select_features_#t~ret52#1 := select_one(); {2073#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:07:27,509 INFO L290 TraceCheckUtils]: 29: Hoare triple {2073#(= ~systemActive~0 (_ bv1 32))} havoc ~retValue_acc~7;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {2073#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:07:27,509 INFO L290 TraceCheckUtils]: 30: Hoare triple {2073#(= ~systemActive~0 (_ bv1 32))} assume true; {2073#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:07:27,509 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {2073#(= ~systemActive~0 (_ bv1 32))} {2073#(= ~systemActive~0 (_ bv1 32))} #365#return; {2073#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:07:27,510 INFO L290 TraceCheckUtils]: 32: Hoare triple {2073#(= ~systemActive~0 (_ bv1 32))} ~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret52#1;havoc select_features_#t~ret52#1; {2073#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:07:27,510 INFO L290 TraceCheckUtils]: 33: Hoare triple {2073#(= ~systemActive~0 (_ bv1 32))} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~8#1;havoc valid_product_~retValue_acc~8#1;valid_product_~retValue_acc~8#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~8#1; {2073#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:07:27,511 INFO L290 TraceCheckUtils]: 34: Hoare triple {2073#(= ~systemActive~0 (_ bv1 32))} main_#t~ret60#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret60#1;havoc main_#t~ret60#1; {2073#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:07:27,511 INFO L290 TraceCheckUtils]: 35: Hoare triple {2073#(= ~systemActive~0 (_ bv1 32))} assume 0bv32 != main_~tmp~11#1;assume { :begin_inline_setup } true; {2073#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:07:27,511 INFO L290 TraceCheckUtils]: 36: Hoare triple {2073#(= ~systemActive~0 (_ bv1 32))} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet4#1, test_#t~nondet5#1, test_#t~nondet6#1, test_#t~nondet7#1, test_~splverifierCounter~0#1, test_~tmp~0#1, test_~tmp___0~0#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~0#1;havoc test_~tmp___0~0#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0bv32; {2073#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:07:27,512 INFO L290 TraceCheckUtils]: 37: Hoare triple {2073#(= ~systemActive~0 (_ bv1 32))} assume !false; {2073#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:07:27,512 INFO L290 TraceCheckUtils]: 38: Hoare triple {2073#(= ~systemActive~0 (_ bv1 32))} assume ~bvslt32(test_~splverifierCounter~0#1, 4bv32); {2073#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:07:27,512 INFO L290 TraceCheckUtils]: 39: Hoare triple {2073#(= ~systemActive~0 (_ bv1 32))} test_~tmp~0#1 := test_#t~nondet4#1;havoc test_#t~nondet4#1; {2073#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:07:27,513 INFO L290 TraceCheckUtils]: 40: Hoare triple {2073#(= ~systemActive~0 (_ bv1 32))} assume !(0bv32 != test_~tmp~0#1); {2073#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:07:27,513 INFO L290 TraceCheckUtils]: 41: Hoare triple {2073#(= ~systemActive~0 (_ bv1 32))} test_~tmp___0~0#1 := test_#t~nondet5#1;havoc test_#t~nondet5#1; {2073#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:07:27,513 INFO L290 TraceCheckUtils]: 42: Hoare triple {2073#(= ~systemActive~0 (_ bv1 32))} assume !(0bv32 != test_~tmp___0~0#1); {2073#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:07:27,514 INFO L290 TraceCheckUtils]: 43: Hoare triple {2073#(= ~systemActive~0 (_ bv1 32))} test_~tmp___2~0#1 := test_#t~nondet6#1;havoc test_#t~nondet6#1; {2073#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:07:27,514 INFO L290 TraceCheckUtils]: 44: Hoare triple {2073#(= ~systemActive~0 (_ bv1 32))} assume !(0bv32 != test_~tmp___2~0#1);test_~tmp___1~0#1 := test_#t~nondet7#1;havoc test_#t~nondet7#1; {2073#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:07:27,514 INFO L290 TraceCheckUtils]: 45: Hoare triple {2073#(= ~systemActive~0 (_ bv1 32))} assume !(0bv32 != test_~tmp___1~0#1); {2073#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:07:27,515 INFO L272 TraceCheckUtils]: 46: Hoare triple {2073#(= ~systemActive~0 (_ bv1 32))} call timeShift(); {2073#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:07:27,515 INFO L290 TraceCheckUtils]: 47: Hoare triple {2073#(= ~systemActive~0 (_ bv1 32))} assume !(0bv32 != ~pumpRunning~0); {2073#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:07:27,516 INFO L290 TraceCheckUtils]: 48: Hoare triple {2073#(= ~systemActive~0 (_ bv1 32))} assume !(0bv32 != ~systemActive~0); {2069#false} is VALID [2022-02-20 18:07:27,516 INFO L290 TraceCheckUtils]: 49: Hoare triple {2069#false} assume { :begin_inline___utac_acc__Specification1_spec__1 } true;havoc __utac_acc__Specification1_spec__1_#t~ret53#1, __utac_acc__Specification1_spec__1_#t~ret54#1, __utac_acc__Specification1_spec__1_~tmp~10#1, __utac_acc__Specification1_spec__1_~tmp___0~3#1;havoc __utac_acc__Specification1_spec__1_~tmp~10#1;havoc __utac_acc__Specification1_spec__1_~tmp___0~3#1; {2069#false} is VALID [2022-02-20 18:07:27,516 INFO L272 TraceCheckUtils]: 50: Hoare triple {2069#false} call __utac_acc__Specification1_spec__1_#t~ret53#1 := isMethaneLevelCritical(); {2069#false} is VALID [2022-02-20 18:07:27,516 INFO L290 TraceCheckUtils]: 51: Hoare triple {2069#false} havoc ~retValue_acc~9;~retValue_acc~9 := ~methaneLevelCritical~0;#res := ~retValue_acc~9; {2069#false} is VALID [2022-02-20 18:07:27,516 INFO L290 TraceCheckUtils]: 52: Hoare triple {2069#false} assume true; {2069#false} is VALID [2022-02-20 18:07:27,516 INFO L284 TraceCheckUtils]: 53: Hoare quadruple {2069#false} {2069#false} #353#return; {2069#false} is VALID [2022-02-20 18:07:27,517 INFO L290 TraceCheckUtils]: 54: Hoare triple {2069#false} __utac_acc__Specification1_spec__1_~tmp~10#1 := __utac_acc__Specification1_spec__1_#t~ret53#1;havoc __utac_acc__Specification1_spec__1_#t~ret53#1; {2069#false} is VALID [2022-02-20 18:07:27,517 INFO L290 TraceCheckUtils]: 55: Hoare triple {2069#false} assume 0bv32 != __utac_acc__Specification1_spec__1_~tmp~10#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~1#1;havoc isPumpRunning_~retValue_acc~1#1;isPumpRunning_~retValue_acc~1#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~1#1; {2069#false} is VALID [2022-02-20 18:07:27,517 INFO L290 TraceCheckUtils]: 56: Hoare triple {2069#false} __utac_acc__Specification1_spec__1_#t~ret54#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;__utac_acc__Specification1_spec__1_~tmp___0~3#1 := __utac_acc__Specification1_spec__1_#t~ret54#1;havoc __utac_acc__Specification1_spec__1_#t~ret54#1; {2069#false} is VALID [2022-02-20 18:07:27,517 INFO L290 TraceCheckUtils]: 57: Hoare triple {2069#false} assume 0bv32 != __utac_acc__Specification1_spec__1_~tmp___0~3#1;assume { :begin_inline___automaton_fail } true; {2069#false} is VALID [2022-02-20 18:07:27,517 INFO L290 TraceCheckUtils]: 58: Hoare triple {2069#false} assume !false; {2069#false} is VALID [2022-02-20 18:07:27,518 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-02-20 18:07:27,518 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-02-20 18:07:27,518 INFO L144 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-02-20 18:07:27,518 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [921588763] [2022-02-20 18:07:27,518 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleMathsat [921588763] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:07:27,526 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:07:27,526 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-02-20 18:07:27,527 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1456468899] [2022-02-20 18:07:27,527 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:07:27,527 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 11.333333333333334) internal successors, (34), 2 states have internal predecessors, (34), 2 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 59 [2022-02-20 18:07:27,528 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:07:27,528 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 3 states, 3 states have (on average 11.333333333333334) internal successors, (34), 2 states have internal predecessors, (34), 2 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:07:27,587 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 49 edges. 49 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:27,587 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-02-20 18:07:27,587 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-02-20 18:07:27,588 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-02-20 18:07:27,588 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:07:27,588 INFO L87 Difference]: Start difference. First operand 125 states and 168 transitions. Second operand has 3 states, 3 states have (on average 11.333333333333334) internal successors, (34), 2 states have internal predecessors, (34), 2 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:07:27,900 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:27,900 INFO L93 Difference]: Finished difference Result 329 states and 449 transitions. [2022-02-20 18:07:27,900 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-02-20 18:07:27,900 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 11.333333333333334) internal successors, (34), 2 states have internal predecessors, (34), 2 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 59 [2022-02-20 18:07:27,901 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:07:27,901 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 11.333333333333334) internal successors, (34), 2 states have internal predecessors, (34), 2 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:07:27,906 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 449 transitions. [2022-02-20 18:07:27,906 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 11.333333333333334) internal successors, (34), 2 states have internal predecessors, (34), 2 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:07:27,911 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 449 transitions. [2022-02-20 18:07:27,915 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 449 transitions. [2022-02-20 18:07:28,369 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 449 edges. 449 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:28,374 INFO L225 Difference]: With dead ends: 329 [2022-02-20 18:07:28,374 INFO L226 Difference]: Without dead ends: 226 [2022-02-20 18:07:28,375 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 58 GetRequests, 57 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:07:28,376 INFO L933 BasicCegarLoop]: 204 mSDtfsCounter, 126 mSDsluCounter, 136 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 126 SdHoareTripleChecker+Valid, 340 SdHoareTripleChecker+Invalid, 6 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:07:28,376 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [126 Valid, 340 Invalid, 6 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:07:28,377 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 226 states. [2022-02-20 18:07:28,392 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 226 to 223. [2022-02-20 18:07:28,392 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:07:28,392 INFO L82 GeneralOperation]: Start isEquivalent. First operand 226 states. Second operand has 223 states, 153 states have (on average 1.3594771241830066) internal successors, (208), 182 states have internal predecessors, (208), 48 states have call successors, (48), 21 states have call predecessors, (48), 21 states have return successors, (48), 37 states have call predecessors, (48), 48 states have call successors, (48) [2022-02-20 18:07:28,395 INFO L74 IsIncluded]: Start isIncluded. First operand 226 states. Second operand has 223 states, 153 states have (on average 1.3594771241830066) internal successors, (208), 182 states have internal predecessors, (208), 48 states have call successors, (48), 21 states have call predecessors, (48), 21 states have return successors, (48), 37 states have call predecessors, (48), 48 states have call successors, (48) [2022-02-20 18:07:28,396 INFO L87 Difference]: Start difference. First operand 226 states. Second operand has 223 states, 153 states have (on average 1.3594771241830066) internal successors, (208), 182 states have internal predecessors, (208), 48 states have call successors, (48), 21 states have call predecessors, (48), 21 states have return successors, (48), 37 states have call predecessors, (48), 48 states have call successors, (48) [2022-02-20 18:07:28,402 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:28,415 INFO L93 Difference]: Finished difference Result 226 states and 306 transitions. [2022-02-20 18:07:28,415 INFO L276 IsEmpty]: Start isEmpty. Operand 226 states and 306 transitions. [2022-02-20 18:07:28,416 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:28,416 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:28,417 INFO L74 IsIncluded]: Start isIncluded. First operand has 223 states, 153 states have (on average 1.3594771241830066) internal successors, (208), 182 states have internal predecessors, (208), 48 states have call successors, (48), 21 states have call predecessors, (48), 21 states have return successors, (48), 37 states have call predecessors, (48), 48 states have call successors, (48) Second operand 226 states. [2022-02-20 18:07:28,418 INFO L87 Difference]: Start difference. First operand has 223 states, 153 states have (on average 1.3594771241830066) internal successors, (208), 182 states have internal predecessors, (208), 48 states have call successors, (48), 21 states have call predecessors, (48), 21 states have return successors, (48), 37 states have call predecessors, (48), 48 states have call successors, (48) Second operand 226 states. [2022-02-20 18:07:28,424 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:28,428 INFO L93 Difference]: Finished difference Result 226 states and 306 transitions. [2022-02-20 18:07:28,428 INFO L276 IsEmpty]: Start isEmpty. Operand 226 states and 306 transitions. [2022-02-20 18:07:28,429 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:28,429 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:28,429 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:07:28,430 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:07:28,430 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 223 states, 153 states have (on average 1.3594771241830066) internal successors, (208), 182 states have internal predecessors, (208), 48 states have call successors, (48), 21 states have call predecessors, (48), 21 states have return successors, (48), 37 states have call predecessors, (48), 48 states have call successors, (48) [2022-02-20 18:07:28,436 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 223 states to 223 states and 304 transitions. [2022-02-20 18:07:28,451 INFO L78 Accepts]: Start accepts. Automaton has 223 states and 304 transitions. Word has length 59 [2022-02-20 18:07:28,451 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:07:28,452 INFO L470 AbstractCegarLoop]: Abstraction has 223 states and 304 transitions. [2022-02-20 18:07:28,452 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 11.333333333333334) internal successors, (34), 2 states have internal predecessors, (34), 2 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:07:28,452 INFO L276 IsEmpty]: Start isEmpty. Operand 223 states and 304 transitions. [2022-02-20 18:07:28,453 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2022-02-20 18:07:28,453 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:07:28,454 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:07:28,465 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (4)] Forceful destruction successful, exit code 0 [2022-02-20 18:07:28,663 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-02-20 18:07:28,663 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:07:28,663 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:07:28,663 INFO L85 PathProgramCache]: Analyzing trace with hash 391619185, now seen corresponding path program 1 times [2022-02-20 18:07:28,664 INFO L126 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-02-20 18:07:28,664 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1192513394] [2022-02-20 18:07:28,664 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:07:28,664 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-02-20 18:07:28,664 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-02-20 18:07:28,668 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-02-20 18:07:28,669 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (5)] Waiting until timeout for monitored process [2022-02-20 18:07:28,764 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:28,767 INFO L263 TraceCheckSpWp]: Trace formula consists of 219 conjuncts, 6 conjunts are in the unsatisfiable core [2022-02-20 18:07:28,782 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:28,783 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 18:07:29,007 INFO L290 TraceCheckUtils]: 0: Hoare triple {3504#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0bv32, 0bv32;assume 0bv1 == #valid[0bv32];assume ~bvult32(0bv32, #StackHeapBarrier);call #Ultimate.allocInit(2bv32, 1bv32);call write~init~intINTTYPE1(48bv8, 1bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 1bv32, 1bv32, 1bv32);call #Ultimate.allocInit(38bv32, 2bv32);call #Ultimate.allocInit(12bv32, 3bv32);call #Ultimate.allocInit(13bv32, 4bv32);call #Ultimate.allocInit(3bv32, 5bv32);call write~init~intINTTYPE1(79bv8, 5bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(110bv8, 5bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 5bv32, 2bv32, 1bv32);call #Ultimate.allocInit(4bv32, 6bv32);call write~init~intINTTYPE1(79bv8, 6bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 6bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 6bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 6bv32, 3bv32, 1bv32);call #Ultimate.allocInit(7bv32, 7bv32);call write~init~intINTTYPE1(44bv8, 7bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(80bv8, 7bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(117bv8, 7bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(109bv8, 7bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(112bv8, 7bv32, 4bv32, 1bv32);call write~init~intINTTYPE1(58bv8, 7bv32, 5bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 7bv32, 6bv32, 1bv32);call #Ultimate.allocInit(3bv32, 8bv32);call write~init~intINTTYPE1(79bv8, 8bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(110bv8, 8bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 8bv32, 2bv32, 1bv32);call #Ultimate.allocInit(4bv32, 9bv32);call write~init~intINTTYPE1(79bv8, 9bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 9bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 9bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 9bv32, 3bv32, 1bv32);call #Ultimate.allocInit(3bv32, 10bv32);call write~init~intINTTYPE1(41bv8, 10bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(32bv8, 10bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 10bv32, 2bv32, 1bv32);call #Ultimate.allocInit(2bv32, 11bv32);call write~init~intINTTYPE1(10bv8, 11bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 11bv32, 1bv32, 1bv32);call #Ultimate.allocInit(30bv32, 12bv32);call #Ultimate.allocInit(9bv32, 13bv32);call #Ultimate.allocInit(21bv32, 14bv32);call #Ultimate.allocInit(30bv32, 15bv32);call #Ultimate.allocInit(9bv32, 16bv32);call #Ultimate.allocInit(21bv32, 17bv32);call #Ultimate.allocInit(30bv32, 18bv32);call #Ultimate.allocInit(9bv32, 19bv32);call #Ultimate.allocInit(25bv32, 20bv32);call #Ultimate.allocInit(30bv32, 21bv32);call #Ultimate.allocInit(9bv32, 22bv32);call #Ultimate.allocInit(25bv32, 23bv32);call #Ultimate.allocInit(13bv32, 24bv32);call #Ultimate.allocInit(7bv32, 25bv32);call write~init~intINTTYPE1(44bv8, 25bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(77bv8, 25bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(101bv8, 25bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(116bv8, 25bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(104bv8, 25bv32, 4bv32, 1bv32);call write~init~intINTTYPE1(58bv8, 25bv32, 5bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 25bv32, 6bv32, 1bv32);call #Ultimate.allocInit(5bv32, 26bv32);call write~init~intINTTYPE1(67bv8, 26bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(82bv8, 26bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(73bv8, 26bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(84bv8, 26bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 26bv32, 4bv32, 1bv32);call #Ultimate.allocInit(3bv32, 27bv32);call write~init~intINTTYPE1(79bv8, 27bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(75bv8, 27bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 27bv32, 2bv32, 1bv32);call #Ultimate.allocInit(2bv32, 28bv32);call write~init~intINTTYPE1(41bv8, 28bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 28bv32, 1bv32, 1bv32);~__SELECTED_FEATURE_base~0 := 0bv32;~__SELECTED_FEATURE_highWaterSensor~0 := 0bv32;~__SELECTED_FEATURE_lowWaterSensor~0 := 0bv32;~__SELECTED_FEATURE_methaneQuery~0 := 0bv32;~__SELECTED_FEATURE_methaneAlarm~0 := 0bv32;~__SELECTED_FEATURE_stopCommand~0 := 0bv32;~__SELECTED_FEATURE_startCommand~0 := 0bv32;~__GUIDSL_ROOT_PRODUCTION~0 := 0bv32;~pumpRunning~0 := 0bv32;~systemActive~0 := 1bv32;~head~0.base, ~head~0.offset := 0bv32, 0bv32;~waterLevel~0 := 1bv32;~methaneLevelCritical~0 := 0bv32;~cleanupTimeShifts~0 := 4bv32; {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:07:29,008 INFO L290 TraceCheckUtils]: 1: Hoare triple {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret60#1, main_~retValue_acc~13#1, main_~tmp~11#1;havoc main_~retValue_acc~13#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1bv32; {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:07:29,008 INFO L290 TraceCheckUtils]: 2: Hoare triple {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret47#1, select_features_#t~ret48#1, select_features_#t~ret49#1, select_features_#t~ret50#1, select_features_#t~ret51#1, select_features_#t~ret52#1;~__SELECTED_FEATURE_base~0 := 1bv32; {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:07:29,009 INFO L272 TraceCheckUtils]: 3: Hoare triple {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} call select_features_#t~ret47#1 := select_one(); {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:07:29,009 INFO L290 TraceCheckUtils]: 4: Hoare triple {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} havoc ~retValue_acc~7;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:07:29,009 INFO L290 TraceCheckUtils]: 5: Hoare triple {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} assume true; {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:07:29,010 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} #355#return; {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:07:29,010 INFO L290 TraceCheckUtils]: 7: Hoare triple {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} ~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret47#1;havoc select_features_#t~ret47#1; {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:07:29,011 INFO L272 TraceCheckUtils]: 8: Hoare triple {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} call select_features_#t~ret48#1 := select_one(); {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:07:29,011 INFO L290 TraceCheckUtils]: 9: Hoare triple {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} havoc ~retValue_acc~7;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:07:29,011 INFO L290 TraceCheckUtils]: 10: Hoare triple {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} assume true; {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:07:29,012 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} #357#return; {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:07:29,012 INFO L290 TraceCheckUtils]: 12: Hoare triple {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} ~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret48#1;havoc select_features_#t~ret48#1; {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:07:29,013 INFO L272 TraceCheckUtils]: 13: Hoare triple {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} call select_features_#t~ret49#1 := select_one(); {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:07:29,013 INFO L290 TraceCheckUtils]: 14: Hoare triple {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} havoc ~retValue_acc~7;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:07:29,013 INFO L290 TraceCheckUtils]: 15: Hoare triple {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} assume true; {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:07:29,014 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} #359#return; {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:07:29,014 INFO L290 TraceCheckUtils]: 17: Hoare triple {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} ~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret49#1;havoc select_features_#t~ret49#1; {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:07:29,014 INFO L272 TraceCheckUtils]: 18: Hoare triple {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} call select_features_#t~ret50#1 := select_one(); {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:07:29,015 INFO L290 TraceCheckUtils]: 19: Hoare triple {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} havoc ~retValue_acc~7;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:07:29,015 INFO L290 TraceCheckUtils]: 20: Hoare triple {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} assume true; {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:07:29,015 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} #361#return; {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:07:29,016 INFO L290 TraceCheckUtils]: 22: Hoare triple {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} ~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret50#1;havoc select_features_#t~ret50#1; {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:07:29,016 INFO L272 TraceCheckUtils]: 23: Hoare triple {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} call select_features_#t~ret51#1 := select_one(); {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:07:29,016 INFO L290 TraceCheckUtils]: 24: Hoare triple {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} havoc ~retValue_acc~7;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:07:29,017 INFO L290 TraceCheckUtils]: 25: Hoare triple {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} assume true; {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:07:29,017 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} #363#return; {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:07:29,018 INFO L290 TraceCheckUtils]: 27: Hoare triple {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} ~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret51#1;havoc select_features_#t~ret51#1; {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:07:29,018 INFO L272 TraceCheckUtils]: 28: Hoare triple {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} call select_features_#t~ret52#1 := select_one(); {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:07:29,018 INFO L290 TraceCheckUtils]: 29: Hoare triple {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} havoc ~retValue_acc~7;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:07:29,019 INFO L290 TraceCheckUtils]: 30: Hoare triple {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} assume true; {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:07:29,019 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} #365#return; {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:07:29,019 INFO L290 TraceCheckUtils]: 32: Hoare triple {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} ~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret52#1;havoc select_features_#t~ret52#1; {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:07:29,020 INFO L290 TraceCheckUtils]: 33: Hoare triple {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~8#1;havoc valid_product_~retValue_acc~8#1;valid_product_~retValue_acc~8#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~8#1; {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:07:29,020 INFO L290 TraceCheckUtils]: 34: Hoare triple {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} main_#t~ret60#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret60#1;havoc main_#t~ret60#1; {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:07:29,020 INFO L290 TraceCheckUtils]: 35: Hoare triple {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} assume 0bv32 != main_~tmp~11#1;assume { :begin_inline_setup } true; {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:07:29,021 INFO L290 TraceCheckUtils]: 36: Hoare triple {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet4#1, test_#t~nondet5#1, test_#t~nondet6#1, test_#t~nondet7#1, test_~splverifierCounter~0#1, test_~tmp~0#1, test_~tmp___0~0#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~0#1;havoc test_~tmp___0~0#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0bv32; {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:07:29,021 INFO L290 TraceCheckUtils]: 37: Hoare triple {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} assume !false; {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:07:29,021 INFO L290 TraceCheckUtils]: 38: Hoare triple {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} assume ~bvslt32(test_~splverifierCounter~0#1, 4bv32); {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:07:29,022 INFO L290 TraceCheckUtils]: 39: Hoare triple {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} test_~tmp~0#1 := test_#t~nondet4#1;havoc test_#t~nondet4#1; {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:07:29,022 INFO L290 TraceCheckUtils]: 40: Hoare triple {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} assume !(0bv32 != test_~tmp~0#1); {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:07:29,022 INFO L290 TraceCheckUtils]: 41: Hoare triple {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} test_~tmp___0~0#1 := test_#t~nondet5#1;havoc test_#t~nondet5#1; {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:07:29,023 INFO L290 TraceCheckUtils]: 42: Hoare triple {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} assume !(0bv32 != test_~tmp___0~0#1); {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:07:29,023 INFO L290 TraceCheckUtils]: 43: Hoare triple {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} test_~tmp___2~0#1 := test_#t~nondet6#1;havoc test_#t~nondet6#1; {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:07:29,023 INFO L290 TraceCheckUtils]: 44: Hoare triple {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} assume !(0bv32 != test_~tmp___2~0#1);test_~tmp___1~0#1 := test_#t~nondet7#1;havoc test_#t~nondet7#1; {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:07:29,024 INFO L290 TraceCheckUtils]: 45: Hoare triple {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} assume 0bv32 != test_~tmp___1~0#1; {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:07:29,024 INFO L290 TraceCheckUtils]: 46: Hoare triple {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} assume 0bv32 != ~__SELECTED_FEATURE_stopCommand~0;assume { :begin_inline_stopSystem } true; {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:07:29,024 INFO L290 TraceCheckUtils]: 47: Hoare triple {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} assume !(0bv32 != ~pumpRunning~0); {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:07:29,025 INFO L290 TraceCheckUtils]: 48: Hoare triple {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} ~systemActive~0 := 0bv32; {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:07:29,025 INFO L290 TraceCheckUtils]: 49: Hoare triple {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} assume { :end_inline_stopSystem } true; {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:07:29,025 INFO L272 TraceCheckUtils]: 50: Hoare triple {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} call timeShift(); {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:07:29,026 INFO L290 TraceCheckUtils]: 51: Hoare triple {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} assume !(0bv32 != ~pumpRunning~0); {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:07:29,026 INFO L290 TraceCheckUtils]: 52: Hoare triple {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} assume !(0bv32 != ~systemActive~0); {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:07:29,026 INFO L290 TraceCheckUtils]: 53: Hoare triple {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} assume { :begin_inline___utac_acc__Specification1_spec__1 } true;havoc __utac_acc__Specification1_spec__1_#t~ret53#1, __utac_acc__Specification1_spec__1_#t~ret54#1, __utac_acc__Specification1_spec__1_~tmp~10#1, __utac_acc__Specification1_spec__1_~tmp___0~3#1;havoc __utac_acc__Specification1_spec__1_~tmp~10#1;havoc __utac_acc__Specification1_spec__1_~tmp___0~3#1; {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:07:29,027 INFO L272 TraceCheckUtils]: 54: Hoare triple {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} call __utac_acc__Specification1_spec__1_#t~ret53#1 := isMethaneLevelCritical(); {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:07:29,027 INFO L290 TraceCheckUtils]: 55: Hoare triple {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} havoc ~retValue_acc~9;~retValue_acc~9 := ~methaneLevelCritical~0;#res := ~retValue_acc~9; {3675#(and (= ~methaneLevelCritical~0 (_ bv0 32)) (= ~methaneLevelCritical~0 |isMethaneLevelCritical_#res|))} is VALID [2022-02-20 18:07:29,027 INFO L290 TraceCheckUtils]: 56: Hoare triple {3675#(and (= ~methaneLevelCritical~0 (_ bv0 32)) (= ~methaneLevelCritical~0 |isMethaneLevelCritical_#res|))} assume true; {3675#(and (= ~methaneLevelCritical~0 (_ bv0 32)) (= ~methaneLevelCritical~0 |isMethaneLevelCritical_#res|))} is VALID [2022-02-20 18:07:29,028 INFO L284 TraceCheckUtils]: 57: Hoare quadruple {3675#(and (= ~methaneLevelCritical~0 (_ bv0 32)) (= ~methaneLevelCritical~0 |isMethaneLevelCritical_#res|))} {3509#(= ~methaneLevelCritical~0 (_ bv0 32))} #353#return; {3682#(= (_ bv0 32) |timeShift___utac_acc__Specification1_spec__1_#t~ret53#1|)} is VALID [2022-02-20 18:07:29,028 INFO L290 TraceCheckUtils]: 58: Hoare triple {3682#(= (_ bv0 32) |timeShift___utac_acc__Specification1_spec__1_#t~ret53#1|)} __utac_acc__Specification1_spec__1_~tmp~10#1 := __utac_acc__Specification1_spec__1_#t~ret53#1;havoc __utac_acc__Specification1_spec__1_#t~ret53#1; {3686#(= |timeShift___utac_acc__Specification1_spec__1_~tmp~10#1| (_ bv0 32))} is VALID [2022-02-20 18:07:29,029 INFO L290 TraceCheckUtils]: 59: Hoare triple {3686#(= |timeShift___utac_acc__Specification1_spec__1_~tmp~10#1| (_ bv0 32))} assume 0bv32 != __utac_acc__Specification1_spec__1_~tmp~10#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~1#1;havoc isPumpRunning_~retValue_acc~1#1;isPumpRunning_~retValue_acc~1#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~1#1; {3505#false} is VALID [2022-02-20 18:07:29,029 INFO L290 TraceCheckUtils]: 60: Hoare triple {3505#false} __utac_acc__Specification1_spec__1_#t~ret54#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;__utac_acc__Specification1_spec__1_~tmp___0~3#1 := __utac_acc__Specification1_spec__1_#t~ret54#1;havoc __utac_acc__Specification1_spec__1_#t~ret54#1; {3505#false} is VALID [2022-02-20 18:07:29,029 INFO L290 TraceCheckUtils]: 61: Hoare triple {3505#false} assume 0bv32 != __utac_acc__Specification1_spec__1_~tmp___0~3#1;assume { :begin_inline___automaton_fail } true; {3505#false} is VALID [2022-02-20 18:07:29,029 INFO L290 TraceCheckUtils]: 62: Hoare triple {3505#false} assume !false; {3505#false} is VALID [2022-02-20 18:07:29,030 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-02-20 18:07:29,030 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-02-20 18:07:29,030 INFO L144 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-02-20 18:07:29,030 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1192513394] [2022-02-20 18:07:29,030 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1192513394] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:07:29,030 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:07:29,030 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-02-20 18:07:29,031 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1310000687] [2022-02-20 18:07:29,031 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:07:29,031 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.333333333333333) internal successors, (38), 4 states have internal predecessors, (38), 1 states have call successors, (8), 1 states have call predecessors, (8), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) Word has length 63 [2022-02-20 18:07:29,031 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:07:29,032 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 6.333333333333333) internal successors, (38), 4 states have internal predecessors, (38), 1 states have call successors, (8), 1 states have call predecessors, (8), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) [2022-02-20 18:07:29,075 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 53 edges. 53 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:29,075 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-02-20 18:07:29,075 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-02-20 18:07:29,076 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-02-20 18:07:29,076 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-02-20 18:07:29,076 INFO L87 Difference]: Start difference. First operand 223 states and 304 transitions. Second operand has 6 states, 6 states have (on average 6.333333333333333) internal successors, (38), 4 states have internal predecessors, (38), 1 states have call successors, (8), 1 states have call predecessors, (8), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) [2022-02-20 18:07:29,688 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:29,697 INFO L93 Difference]: Finished difference Result 625 states and 863 transitions. [2022-02-20 18:07:29,697 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-02-20 18:07:29,698 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.333333333333333) internal successors, (38), 4 states have internal predecessors, (38), 1 states have call successors, (8), 1 states have call predecessors, (8), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) Word has length 63 [2022-02-20 18:07:29,698 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:07:29,698 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 6.333333333333333) internal successors, (38), 4 states have internal predecessors, (38), 1 states have call successors, (8), 1 states have call predecessors, (8), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) [2022-02-20 18:07:29,704 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 452 transitions. [2022-02-20 18:07:29,704 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 6.333333333333333) internal successors, (38), 4 states have internal predecessors, (38), 1 states have call successors, (8), 1 states have call predecessors, (8), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) [2022-02-20 18:07:29,709 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 452 transitions. [2022-02-20 18:07:29,717 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 452 transitions. [2022-02-20 18:07:30,155 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 452 edges. 452 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:30,166 INFO L225 Difference]: With dead ends: 625 [2022-02-20 18:07:30,175 INFO L226 Difference]: Without dead ends: 424 [2022-02-20 18:07:30,176 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 64 GetRequests, 58 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=18, Invalid=38, Unknown=0, NotChecked=0, Total=56 [2022-02-20 18:07:30,177 INFO L933 BasicCegarLoop]: 186 mSDtfsCounter, 117 mSDsluCounter, 609 mSDsCounter, 0 mSdLazyCounter, 74 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 120 SdHoareTripleChecker+Valid, 795 SdHoareTripleChecker+Invalid, 78 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 74 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-02-20 18:07:30,178 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [120 Valid, 795 Invalid, 78 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 74 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-02-20 18:07:30,179 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 424 states. [2022-02-20 18:07:30,215 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 424 to 418. [2022-02-20 18:07:30,215 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:07:30,216 INFO L82 GeneralOperation]: Start isEquivalent. First operand 424 states. Second operand has 418 states, 286 states have (on average 1.3636363636363635) internal successors, (390), 343 states have internal predecessors, (390), 90 states have call successors, (90), 41 states have call predecessors, (90), 41 states have return successors, (92), 68 states have call predecessors, (92), 90 states have call successors, (92) [2022-02-20 18:07:30,218 INFO L74 IsIncluded]: Start isIncluded. First operand 424 states. Second operand has 418 states, 286 states have (on average 1.3636363636363635) internal successors, (390), 343 states have internal predecessors, (390), 90 states have call successors, (90), 41 states have call predecessors, (90), 41 states have return successors, (92), 68 states have call predecessors, (92), 90 states have call successors, (92) [2022-02-20 18:07:30,219 INFO L87 Difference]: Start difference. First operand 424 states. Second operand has 418 states, 286 states have (on average 1.3636363636363635) internal successors, (390), 343 states have internal predecessors, (390), 90 states have call successors, (90), 41 states have call predecessors, (90), 41 states have return successors, (92), 68 states have call predecessors, (92), 90 states have call successors, (92) [2022-02-20 18:07:30,239 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:30,255 INFO L93 Difference]: Finished difference Result 424 states and 578 transitions. [2022-02-20 18:07:30,255 INFO L276 IsEmpty]: Start isEmpty. Operand 424 states and 578 transitions. [2022-02-20 18:07:30,257 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:30,257 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:30,258 INFO L74 IsIncluded]: Start isIncluded. First operand has 418 states, 286 states have (on average 1.3636363636363635) internal successors, (390), 343 states have internal predecessors, (390), 90 states have call successors, (90), 41 states have call predecessors, (90), 41 states have return successors, (92), 68 states have call predecessors, (92), 90 states have call successors, (92) Second operand 424 states. [2022-02-20 18:07:30,260 INFO L87 Difference]: Start difference. First operand has 418 states, 286 states have (on average 1.3636363636363635) internal successors, (390), 343 states have internal predecessors, (390), 90 states have call successors, (90), 41 states have call predecessors, (90), 41 states have return successors, (92), 68 states have call predecessors, (92), 90 states have call successors, (92) Second operand 424 states. [2022-02-20 18:07:30,302 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:30,303 INFO L93 Difference]: Finished difference Result 424 states and 578 transitions. [2022-02-20 18:07:30,303 INFO L276 IsEmpty]: Start isEmpty. Operand 424 states and 578 transitions. [2022-02-20 18:07:30,304 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:30,304 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:30,304 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:07:30,304 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:07:30,306 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 418 states, 286 states have (on average 1.3636363636363635) internal successors, (390), 343 states have internal predecessors, (390), 90 states have call successors, (90), 41 states have call predecessors, (90), 41 states have return successors, (92), 68 states have call predecessors, (92), 90 states have call successors, (92) [2022-02-20 18:07:30,327 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 418 states to 418 states and 572 transitions. [2022-02-20 18:07:30,328 INFO L78 Accepts]: Start accepts. Automaton has 418 states and 572 transitions. Word has length 63 [2022-02-20 18:07:30,328 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:07:30,328 INFO L470 AbstractCegarLoop]: Abstraction has 418 states and 572 transitions. [2022-02-20 18:07:30,329 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.333333333333333) internal successors, (38), 4 states have internal predecessors, (38), 1 states have call successors, (8), 1 states have call predecessors, (8), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) [2022-02-20 18:07:30,329 INFO L276 IsEmpty]: Start isEmpty. Operand 418 states and 572 transitions. [2022-02-20 18:07:30,332 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2022-02-20 18:07:30,332 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:07:30,333 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:07:30,342 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (5)] Forceful destruction successful, exit code 0 [2022-02-20 18:07:30,539 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-02-20 18:07:30,540 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:07:30,540 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:07:30,540 INFO L85 PathProgramCache]: Analyzing trace with hash -193199923, now seen corresponding path program 1 times [2022-02-20 18:07:30,541 INFO L126 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-02-20 18:07:30,541 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [699203150] [2022-02-20 18:07:30,541 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:07:30,541 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-02-20 18:07:30,541 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-02-20 18:07:30,543 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-02-20 18:07:30,544 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (6)] Waiting until timeout for monitored process [2022-02-20 18:07:30,621 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:30,624 INFO L263 TraceCheckSpWp]: Trace formula consists of 226 conjuncts, 7 conjunts are in the unsatisfiable core [2022-02-20 18:07:30,651 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:30,656 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 18:07:30,936 INFO L290 TraceCheckUtils]: 0: Hoare triple {6073#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0bv32, 0bv32;assume 0bv1 == #valid[0bv32];assume ~bvult32(0bv32, #StackHeapBarrier);call #Ultimate.allocInit(2bv32, 1bv32);call write~init~intINTTYPE1(48bv8, 1bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 1bv32, 1bv32, 1bv32);call #Ultimate.allocInit(38bv32, 2bv32);call #Ultimate.allocInit(12bv32, 3bv32);call #Ultimate.allocInit(13bv32, 4bv32);call #Ultimate.allocInit(3bv32, 5bv32);call write~init~intINTTYPE1(79bv8, 5bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(110bv8, 5bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 5bv32, 2bv32, 1bv32);call #Ultimate.allocInit(4bv32, 6bv32);call write~init~intINTTYPE1(79bv8, 6bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 6bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 6bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 6bv32, 3bv32, 1bv32);call #Ultimate.allocInit(7bv32, 7bv32);call write~init~intINTTYPE1(44bv8, 7bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(80bv8, 7bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(117bv8, 7bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(109bv8, 7bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(112bv8, 7bv32, 4bv32, 1bv32);call write~init~intINTTYPE1(58bv8, 7bv32, 5bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 7bv32, 6bv32, 1bv32);call #Ultimate.allocInit(3bv32, 8bv32);call write~init~intINTTYPE1(79bv8, 8bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(110bv8, 8bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 8bv32, 2bv32, 1bv32);call #Ultimate.allocInit(4bv32, 9bv32);call write~init~intINTTYPE1(79bv8, 9bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 9bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 9bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 9bv32, 3bv32, 1bv32);call #Ultimate.allocInit(3bv32, 10bv32);call write~init~intINTTYPE1(41bv8, 10bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(32bv8, 10bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 10bv32, 2bv32, 1bv32);call #Ultimate.allocInit(2bv32, 11bv32);call write~init~intINTTYPE1(10bv8, 11bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 11bv32, 1bv32, 1bv32);call #Ultimate.allocInit(30bv32, 12bv32);call #Ultimate.allocInit(9bv32, 13bv32);call #Ultimate.allocInit(21bv32, 14bv32);call #Ultimate.allocInit(30bv32, 15bv32);call #Ultimate.allocInit(9bv32, 16bv32);call #Ultimate.allocInit(21bv32, 17bv32);call #Ultimate.allocInit(30bv32, 18bv32);call #Ultimate.allocInit(9bv32, 19bv32);call #Ultimate.allocInit(25bv32, 20bv32);call #Ultimate.allocInit(30bv32, 21bv32);call #Ultimate.allocInit(9bv32, 22bv32);call #Ultimate.allocInit(25bv32, 23bv32);call #Ultimate.allocInit(13bv32, 24bv32);call #Ultimate.allocInit(7bv32, 25bv32);call write~init~intINTTYPE1(44bv8, 25bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(77bv8, 25bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(101bv8, 25bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(116bv8, 25bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(104bv8, 25bv32, 4bv32, 1bv32);call write~init~intINTTYPE1(58bv8, 25bv32, 5bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 25bv32, 6bv32, 1bv32);call #Ultimate.allocInit(5bv32, 26bv32);call write~init~intINTTYPE1(67bv8, 26bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(82bv8, 26bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(73bv8, 26bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(84bv8, 26bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 26bv32, 4bv32, 1bv32);call #Ultimate.allocInit(3bv32, 27bv32);call write~init~intINTTYPE1(79bv8, 27bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(75bv8, 27bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 27bv32, 2bv32, 1bv32);call #Ultimate.allocInit(2bv32, 28bv32);call write~init~intINTTYPE1(41bv8, 28bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 28bv32, 1bv32, 1bv32);~__SELECTED_FEATURE_base~0 := 0bv32;~__SELECTED_FEATURE_highWaterSensor~0 := 0bv32;~__SELECTED_FEATURE_lowWaterSensor~0 := 0bv32;~__SELECTED_FEATURE_methaneQuery~0 := 0bv32;~__SELECTED_FEATURE_methaneAlarm~0 := 0bv32;~__SELECTED_FEATURE_stopCommand~0 := 0bv32;~__SELECTED_FEATURE_startCommand~0 := 0bv32;~__GUIDSL_ROOT_PRODUCTION~0 := 0bv32;~pumpRunning~0 := 0bv32;~systemActive~0 := 1bv32;~head~0.base, ~head~0.offset := 0bv32, 0bv32;~waterLevel~0 := 1bv32;~methaneLevelCritical~0 := 0bv32;~cleanupTimeShifts~0 := 4bv32; {6078#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:07:30,941 INFO L290 TraceCheckUtils]: 1: Hoare triple {6078#(= (_ bv0 32) ~pumpRunning~0)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret60#1, main_~retValue_acc~13#1, main_~tmp~11#1;havoc main_~retValue_acc~13#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1bv32; {6078#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:07:30,941 INFO L290 TraceCheckUtils]: 2: Hoare triple {6078#(= (_ bv0 32) ~pumpRunning~0)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret47#1, select_features_#t~ret48#1, select_features_#t~ret49#1, select_features_#t~ret50#1, select_features_#t~ret51#1, select_features_#t~ret52#1;~__SELECTED_FEATURE_base~0 := 1bv32; {6078#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:07:30,942 INFO L272 TraceCheckUtils]: 3: Hoare triple {6078#(= (_ bv0 32) ~pumpRunning~0)} call select_features_#t~ret47#1 := select_one(); {6078#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:07:30,942 INFO L290 TraceCheckUtils]: 4: Hoare triple {6078#(= (_ bv0 32) ~pumpRunning~0)} havoc ~retValue_acc~7;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {6078#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:07:30,943 INFO L290 TraceCheckUtils]: 5: Hoare triple {6078#(= (_ bv0 32) ~pumpRunning~0)} assume true; {6078#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:07:30,943 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {6078#(= (_ bv0 32) ~pumpRunning~0)} {6078#(= (_ bv0 32) ~pumpRunning~0)} #355#return; {6078#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:07:30,944 INFO L290 TraceCheckUtils]: 7: Hoare triple {6078#(= (_ bv0 32) ~pumpRunning~0)} ~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret47#1;havoc select_features_#t~ret47#1; {6078#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:07:30,944 INFO L272 TraceCheckUtils]: 8: Hoare triple {6078#(= (_ bv0 32) ~pumpRunning~0)} call select_features_#t~ret48#1 := select_one(); {6078#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:07:30,944 INFO L290 TraceCheckUtils]: 9: Hoare triple {6078#(= (_ bv0 32) ~pumpRunning~0)} havoc ~retValue_acc~7;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {6078#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:07:30,945 INFO L290 TraceCheckUtils]: 10: Hoare triple {6078#(= (_ bv0 32) ~pumpRunning~0)} assume true; {6078#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:07:30,945 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {6078#(= (_ bv0 32) ~pumpRunning~0)} {6078#(= (_ bv0 32) ~pumpRunning~0)} #357#return; {6078#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:07:30,945 INFO L290 TraceCheckUtils]: 12: Hoare triple {6078#(= (_ bv0 32) ~pumpRunning~0)} ~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret48#1;havoc select_features_#t~ret48#1; {6078#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:07:30,946 INFO L272 TraceCheckUtils]: 13: Hoare triple {6078#(= (_ bv0 32) ~pumpRunning~0)} call select_features_#t~ret49#1 := select_one(); {6078#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:07:30,946 INFO L290 TraceCheckUtils]: 14: Hoare triple {6078#(= (_ bv0 32) ~pumpRunning~0)} havoc ~retValue_acc~7;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {6078#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:07:30,946 INFO L290 TraceCheckUtils]: 15: Hoare triple {6078#(= (_ bv0 32) ~pumpRunning~0)} assume true; {6078#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:07:30,947 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {6078#(= (_ bv0 32) ~pumpRunning~0)} {6078#(= (_ bv0 32) ~pumpRunning~0)} #359#return; {6078#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:07:30,948 INFO L290 TraceCheckUtils]: 17: Hoare triple {6078#(= (_ bv0 32) ~pumpRunning~0)} ~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret49#1;havoc select_features_#t~ret49#1; {6078#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:07:30,962 INFO L272 TraceCheckUtils]: 18: Hoare triple {6078#(= (_ bv0 32) ~pumpRunning~0)} call select_features_#t~ret50#1 := select_one(); {6078#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:07:30,963 INFO L290 TraceCheckUtils]: 19: Hoare triple {6078#(= (_ bv0 32) ~pumpRunning~0)} havoc ~retValue_acc~7;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {6078#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:07:30,963 INFO L290 TraceCheckUtils]: 20: Hoare triple {6078#(= (_ bv0 32) ~pumpRunning~0)} assume true; {6078#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:07:30,964 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {6078#(= (_ bv0 32) ~pumpRunning~0)} {6078#(= (_ bv0 32) ~pumpRunning~0)} #361#return; {6078#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:07:30,964 INFO L290 TraceCheckUtils]: 22: Hoare triple {6078#(= (_ bv0 32) ~pumpRunning~0)} ~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret50#1;havoc select_features_#t~ret50#1; {6078#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:07:30,964 INFO L272 TraceCheckUtils]: 23: Hoare triple {6078#(= (_ bv0 32) ~pumpRunning~0)} call select_features_#t~ret51#1 := select_one(); {6078#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:07:30,965 INFO L290 TraceCheckUtils]: 24: Hoare triple {6078#(= (_ bv0 32) ~pumpRunning~0)} havoc ~retValue_acc~7;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {6078#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:07:30,965 INFO L290 TraceCheckUtils]: 25: Hoare triple {6078#(= (_ bv0 32) ~pumpRunning~0)} assume true; {6078#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:07:30,965 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {6078#(= (_ bv0 32) ~pumpRunning~0)} {6078#(= (_ bv0 32) ~pumpRunning~0)} #363#return; {6078#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:07:30,966 INFO L290 TraceCheckUtils]: 27: Hoare triple {6078#(= (_ bv0 32) ~pumpRunning~0)} ~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret51#1;havoc select_features_#t~ret51#1; {6078#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:07:30,966 INFO L272 TraceCheckUtils]: 28: Hoare triple {6078#(= (_ bv0 32) ~pumpRunning~0)} call select_features_#t~ret52#1 := select_one(); {6078#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:07:30,966 INFO L290 TraceCheckUtils]: 29: Hoare triple {6078#(= (_ bv0 32) ~pumpRunning~0)} havoc ~retValue_acc~7;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {6078#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:07:30,967 INFO L290 TraceCheckUtils]: 30: Hoare triple {6078#(= (_ bv0 32) ~pumpRunning~0)} assume true; {6078#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:07:30,967 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {6078#(= (_ bv0 32) ~pumpRunning~0)} {6078#(= (_ bv0 32) ~pumpRunning~0)} #365#return; {6078#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:07:30,968 INFO L290 TraceCheckUtils]: 32: Hoare triple {6078#(= (_ bv0 32) ~pumpRunning~0)} ~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret52#1;havoc select_features_#t~ret52#1; {6078#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:07:30,968 INFO L290 TraceCheckUtils]: 33: Hoare triple {6078#(= (_ bv0 32) ~pumpRunning~0)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~8#1;havoc valid_product_~retValue_acc~8#1;valid_product_~retValue_acc~8#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~8#1; {6078#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:07:30,968 INFO L290 TraceCheckUtils]: 34: Hoare triple {6078#(= (_ bv0 32) ~pumpRunning~0)} main_#t~ret60#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret60#1;havoc main_#t~ret60#1; {6078#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:07:30,968 INFO L290 TraceCheckUtils]: 35: Hoare triple {6078#(= (_ bv0 32) ~pumpRunning~0)} assume 0bv32 != main_~tmp~11#1;assume { :begin_inline_setup } true; {6078#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:07:30,969 INFO L290 TraceCheckUtils]: 36: Hoare triple {6078#(= (_ bv0 32) ~pumpRunning~0)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet4#1, test_#t~nondet5#1, test_#t~nondet6#1, test_#t~nondet7#1, test_~splverifierCounter~0#1, test_~tmp~0#1, test_~tmp___0~0#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~0#1;havoc test_~tmp___0~0#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0bv32; {6078#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:07:30,969 INFO L290 TraceCheckUtils]: 37: Hoare triple {6078#(= (_ bv0 32) ~pumpRunning~0)} assume !false; {6078#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:07:30,969 INFO L290 TraceCheckUtils]: 38: Hoare triple {6078#(= (_ bv0 32) ~pumpRunning~0)} assume ~bvslt32(test_~splverifierCounter~0#1, 4bv32); {6078#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:07:30,970 INFO L290 TraceCheckUtils]: 39: Hoare triple {6078#(= (_ bv0 32) ~pumpRunning~0)} test_~tmp~0#1 := test_#t~nondet4#1;havoc test_#t~nondet4#1; {6078#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:07:30,970 INFO L290 TraceCheckUtils]: 40: Hoare triple {6078#(= (_ bv0 32) ~pumpRunning~0)} assume !(0bv32 != test_~tmp~0#1); {6078#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:07:30,970 INFO L290 TraceCheckUtils]: 41: Hoare triple {6078#(= (_ bv0 32) ~pumpRunning~0)} test_~tmp___0~0#1 := test_#t~nondet5#1;havoc test_#t~nondet5#1; {6078#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:07:30,971 INFO L290 TraceCheckUtils]: 42: Hoare triple {6078#(= (_ bv0 32) ~pumpRunning~0)} assume 0bv32 != test_~tmp___0~0#1; {6078#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:07:30,971 INFO L272 TraceCheckUtils]: 43: Hoare triple {6078#(= (_ bv0 32) ~pumpRunning~0)} call changeMethaneLevel(); {6078#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:07:30,971 INFO L290 TraceCheckUtils]: 44: Hoare triple {6078#(= (_ bv0 32) ~pumpRunning~0)} assume !(0bv32 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1bv32; {6078#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:07:30,972 INFO L290 TraceCheckUtils]: 45: Hoare triple {6078#(= (_ bv0 32) ~pumpRunning~0)} assume true; {6078#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:07:30,972 INFO L284 TraceCheckUtils]: 46: Hoare quadruple {6078#(= (_ bv0 32) ~pumpRunning~0)} {6078#(= (_ bv0 32) ~pumpRunning~0)} #369#return; {6078#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:07:30,972 INFO L290 TraceCheckUtils]: 47: Hoare triple {6078#(= (_ bv0 32) ~pumpRunning~0)} test_~tmp___2~0#1 := test_#t~nondet6#1;havoc test_#t~nondet6#1; {6078#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:07:30,973 INFO L290 TraceCheckUtils]: 48: Hoare triple {6078#(= (_ bv0 32) ~pumpRunning~0)} assume !(0bv32 != test_~tmp___2~0#1);test_~tmp___1~0#1 := test_#t~nondet7#1;havoc test_#t~nondet7#1; {6078#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:07:30,973 INFO L290 TraceCheckUtils]: 49: Hoare triple {6078#(= (_ bv0 32) ~pumpRunning~0)} assume 0bv32 != test_~tmp___1~0#1; {6078#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:07:30,973 INFO L290 TraceCheckUtils]: 50: Hoare triple {6078#(= (_ bv0 32) ~pumpRunning~0)} assume 0bv32 != ~__SELECTED_FEATURE_stopCommand~0;assume { :begin_inline_stopSystem } true; {6078#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:07:30,974 INFO L290 TraceCheckUtils]: 51: Hoare triple {6078#(= (_ bv0 32) ~pumpRunning~0)} assume !(0bv32 != ~pumpRunning~0); {6078#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:07:30,974 INFO L290 TraceCheckUtils]: 52: Hoare triple {6078#(= (_ bv0 32) ~pumpRunning~0)} ~systemActive~0 := 0bv32; {6078#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:07:30,974 INFO L290 TraceCheckUtils]: 53: Hoare triple {6078#(= (_ bv0 32) ~pumpRunning~0)} assume { :end_inline_stopSystem } true; {6078#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:07:30,975 INFO L272 TraceCheckUtils]: 54: Hoare triple {6078#(= (_ bv0 32) ~pumpRunning~0)} call timeShift(); {6078#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:07:30,975 INFO L290 TraceCheckUtils]: 55: Hoare triple {6078#(= (_ bv0 32) ~pumpRunning~0)} assume !(0bv32 != ~pumpRunning~0); {6078#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:07:30,975 INFO L290 TraceCheckUtils]: 56: Hoare triple {6078#(= (_ bv0 32) ~pumpRunning~0)} assume !(0bv32 != ~systemActive~0); {6078#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:07:30,976 INFO L290 TraceCheckUtils]: 57: Hoare triple {6078#(= (_ bv0 32) ~pumpRunning~0)} assume { :begin_inline___utac_acc__Specification1_spec__1 } true;havoc __utac_acc__Specification1_spec__1_#t~ret53#1, __utac_acc__Specification1_spec__1_#t~ret54#1, __utac_acc__Specification1_spec__1_~tmp~10#1, __utac_acc__Specification1_spec__1_~tmp___0~3#1;havoc __utac_acc__Specification1_spec__1_~tmp~10#1;havoc __utac_acc__Specification1_spec__1_~tmp___0~3#1; {6078#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:07:30,976 INFO L272 TraceCheckUtils]: 58: Hoare triple {6078#(= (_ bv0 32) ~pumpRunning~0)} call __utac_acc__Specification1_spec__1_#t~ret53#1 := isMethaneLevelCritical(); {6078#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:07:30,976 INFO L290 TraceCheckUtils]: 59: Hoare triple {6078#(= (_ bv0 32) ~pumpRunning~0)} havoc ~retValue_acc~9;~retValue_acc~9 := ~methaneLevelCritical~0;#res := ~retValue_acc~9; {6078#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:07:30,977 INFO L290 TraceCheckUtils]: 60: Hoare triple {6078#(= (_ bv0 32) ~pumpRunning~0)} assume true; {6078#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:07:30,977 INFO L284 TraceCheckUtils]: 61: Hoare quadruple {6078#(= (_ bv0 32) ~pumpRunning~0)} {6078#(= (_ bv0 32) ~pumpRunning~0)} #353#return; {6078#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:07:30,977 INFO L290 TraceCheckUtils]: 62: Hoare triple {6078#(= (_ bv0 32) ~pumpRunning~0)} __utac_acc__Specification1_spec__1_~tmp~10#1 := __utac_acc__Specification1_spec__1_#t~ret53#1;havoc __utac_acc__Specification1_spec__1_#t~ret53#1; {6078#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:07:30,978 INFO L290 TraceCheckUtils]: 63: Hoare triple {6078#(= (_ bv0 32) ~pumpRunning~0)} assume 0bv32 != __utac_acc__Specification1_spec__1_~tmp~10#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~1#1;havoc isPumpRunning_~retValue_acc~1#1;isPumpRunning_~retValue_acc~1#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~1#1; {6268#(= |timeShift_isPumpRunning_#res#1| (_ bv0 32))} is VALID [2022-02-20 18:07:30,978 INFO L290 TraceCheckUtils]: 64: Hoare triple {6268#(= |timeShift_isPumpRunning_#res#1| (_ bv0 32))} __utac_acc__Specification1_spec__1_#t~ret54#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;__utac_acc__Specification1_spec__1_~tmp___0~3#1 := __utac_acc__Specification1_spec__1_#t~ret54#1;havoc __utac_acc__Specification1_spec__1_#t~ret54#1; {6272#(= |timeShift___utac_acc__Specification1_spec__1_~tmp___0~3#1| (_ bv0 32))} is VALID [2022-02-20 18:07:30,978 INFO L290 TraceCheckUtils]: 65: Hoare triple {6272#(= |timeShift___utac_acc__Specification1_spec__1_~tmp___0~3#1| (_ bv0 32))} assume 0bv32 != __utac_acc__Specification1_spec__1_~tmp___0~3#1;assume { :begin_inline___automaton_fail } true; {6074#false} is VALID [2022-02-20 18:07:30,978 INFO L290 TraceCheckUtils]: 66: Hoare triple {6074#false} assume !false; {6074#false} is VALID [2022-02-20 18:07:30,979 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-02-20 18:07:30,979 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-02-20 18:07:30,979 INFO L144 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-02-20 18:07:30,979 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [699203150] [2022-02-20 18:07:30,979 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleMathsat [699203150] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:07:30,980 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:07:30,980 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-02-20 18:07:30,980 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1912478510] [2022-02-20 18:07:30,980 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:07:30,981 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 4 states have internal predecessors, (40), 1 states have call successors, (9), 1 states have call predecessors, (9), 1 states have return successors, (8), 1 states have call predecessors, (8), 1 states have call successors, (8) Word has length 67 [2022-02-20 18:07:30,981 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:07:30,981 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 5 states, 5 states have (on average 8.0) internal successors, (40), 4 states have internal predecessors, (40), 1 states have call successors, (9), 1 states have call predecessors, (9), 1 states have return successors, (8), 1 states have call predecessors, (8), 1 states have call successors, (8) [2022-02-20 18:07:31,047 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 57 edges. 57 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:31,047 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-02-20 18:07:31,047 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-02-20 18:07:31,048 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-02-20 18:07:31,048 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-02-20 18:07:31,048 INFO L87 Difference]: Start difference. First operand 418 states and 572 transitions. Second operand has 5 states, 5 states have (on average 8.0) internal successors, (40), 4 states have internal predecessors, (40), 1 states have call successors, (9), 1 states have call predecessors, (9), 1 states have return successors, (8), 1 states have call predecessors, (8), 1 states have call successors, (8) [2022-02-20 18:07:31,729 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:31,739 INFO L93 Difference]: Finished difference Result 1068 states and 1517 transitions. [2022-02-20 18:07:31,740 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-02-20 18:07:31,740 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 4 states have internal predecessors, (40), 1 states have call successors, (9), 1 states have call predecessors, (9), 1 states have return successors, (8), 1 states have call predecessors, (8), 1 states have call successors, (8) Word has length 67 [2022-02-20 18:07:31,741 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:07:31,741 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 8.0) internal successors, (40), 4 states have internal predecessors, (40), 1 states have call successors, (9), 1 states have call predecessors, (9), 1 states have return successors, (8), 1 states have call predecessors, (8), 1 states have call successors, (8) [2022-02-20 18:07:31,745 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 416 transitions. [2022-02-20 18:07:31,745 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 8.0) internal successors, (40), 4 states have internal predecessors, (40), 1 states have call successors, (9), 1 states have call predecessors, (9), 1 states have return successors, (8), 1 states have call predecessors, (8), 1 states have call successors, (8) [2022-02-20 18:07:31,760 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 416 transitions. [2022-02-20 18:07:31,760 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states and 416 transitions. [2022-02-20 18:07:32,151 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 416 edges. 416 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:32,174 INFO L225 Difference]: With dead ends: 1068 [2022-02-20 18:07:32,187 INFO L226 Difference]: Without dead ends: 672 [2022-02-20 18:07:32,188 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 68 GetRequests, 63 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-02-20 18:07:32,189 INFO L933 BasicCegarLoop]: 180 mSDtfsCounter, 93 mSDsluCounter, 464 mSDsCounter, 0 mSdLazyCounter, 31 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 93 SdHoareTripleChecker+Valid, 644 SdHoareTripleChecker+Invalid, 43 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 31 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:07:32,190 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [93 Valid, 644 Invalid, 43 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 31 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:07:32,191 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 672 states. [2022-02-20 18:07:32,244 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 672 to 658. [2022-02-20 18:07:32,244 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:07:32,246 INFO L82 GeneralOperation]: Start isEquivalent. First operand 672 states. Second operand has 658 states, 462 states have (on average 1.3246753246753247) internal successors, (612), 527 states have internal predecessors, (612), 122 states have call successors, (122), 73 states have call predecessors, (122), 73 states have return successors, (166), 112 states have call predecessors, (166), 122 states have call successors, (166) [2022-02-20 18:07:32,247 INFO L74 IsIncluded]: Start isIncluded. First operand 672 states. Second operand has 658 states, 462 states have (on average 1.3246753246753247) internal successors, (612), 527 states have internal predecessors, (612), 122 states have call successors, (122), 73 states have call predecessors, (122), 73 states have return successors, (166), 112 states have call predecessors, (166), 122 states have call successors, (166) [2022-02-20 18:07:32,248 INFO L87 Difference]: Start difference. First operand 672 states. Second operand has 658 states, 462 states have (on average 1.3246753246753247) internal successors, (612), 527 states have internal predecessors, (612), 122 states have call successors, (122), 73 states have call predecessors, (122), 73 states have return successors, (166), 112 states have call predecessors, (166), 122 states have call successors, (166) [2022-02-20 18:07:32,281 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:32,293 INFO L93 Difference]: Finished difference Result 672 states and 918 transitions. [2022-02-20 18:07:32,294 INFO L276 IsEmpty]: Start isEmpty. Operand 672 states and 918 transitions. [2022-02-20 18:07:32,296 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:32,296 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:32,298 INFO L74 IsIncluded]: Start isIncluded. First operand has 658 states, 462 states have (on average 1.3246753246753247) internal successors, (612), 527 states have internal predecessors, (612), 122 states have call successors, (122), 73 states have call predecessors, (122), 73 states have return successors, (166), 112 states have call predecessors, (166), 122 states have call successors, (166) Second operand 672 states. [2022-02-20 18:07:32,299 INFO L87 Difference]: Start difference. First operand has 658 states, 462 states have (on average 1.3246753246753247) internal successors, (612), 527 states have internal predecessors, (612), 122 states have call successors, (122), 73 states have call predecessors, (122), 73 states have return successors, (166), 112 states have call predecessors, (166), 122 states have call successors, (166) Second operand 672 states. [2022-02-20 18:07:32,335 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:32,343 INFO L93 Difference]: Finished difference Result 672 states and 918 transitions. [2022-02-20 18:07:32,344 INFO L276 IsEmpty]: Start isEmpty. Operand 672 states and 918 transitions. [2022-02-20 18:07:32,347 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:32,347 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:32,347 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:07:32,347 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:07:32,349 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 658 states, 462 states have (on average 1.3246753246753247) internal successors, (612), 527 states have internal predecessors, (612), 122 states have call successors, (122), 73 states have call predecessors, (122), 73 states have return successors, (166), 112 states have call predecessors, (166), 122 states have call successors, (166) [2022-02-20 18:07:32,410 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 658 states to 658 states and 900 transitions. [2022-02-20 18:07:32,411 INFO L78 Accepts]: Start accepts. Automaton has 658 states and 900 transitions. Word has length 67 [2022-02-20 18:07:32,412 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:07:32,412 INFO L470 AbstractCegarLoop]: Abstraction has 658 states and 900 transitions. [2022-02-20 18:07:32,412 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 4 states have internal predecessors, (40), 1 states have call successors, (9), 1 states have call predecessors, (9), 1 states have return successors, (8), 1 states have call predecessors, (8), 1 states have call successors, (8) [2022-02-20 18:07:32,413 INFO L276 IsEmpty]: Start isEmpty. Operand 658 states and 900 transitions. [2022-02-20 18:07:32,414 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 88 [2022-02-20 18:07:32,414 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:07:32,414 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:07:32,444 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (6)] Forceful destruction successful, exit code 0 [2022-02-20 18:07:32,644 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-02-20 18:07:32,644 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:07:32,644 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:07:32,644 INFO L85 PathProgramCache]: Analyzing trace with hash 2095005, now seen corresponding path program 1 times [2022-02-20 18:07:32,645 INFO L126 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-02-20 18:07:32,645 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1389709570] [2022-02-20 18:07:32,645 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:07:32,645 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-02-20 18:07:32,645 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-02-20 18:07:32,647 INFO L229 MonitoredProcess]: Starting monitored process 7 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-02-20 18:07:32,648 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (7)] Waiting until timeout for monitored process [2022-02-20 18:07:32,723 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:32,726 INFO L263 TraceCheckSpWp]: Trace formula consists of 256 conjuncts, 5 conjunts are in the unsatisfiable core [2022-02-20 18:07:32,743 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:32,745 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 18:07:32,920 INFO L290 TraceCheckUtils]: 0: Hoare triple {10124#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0bv32, 0bv32;assume 0bv1 == #valid[0bv32];assume ~bvult32(0bv32, #StackHeapBarrier);call #Ultimate.allocInit(2bv32, 1bv32);call write~init~intINTTYPE1(48bv8, 1bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 1bv32, 1bv32, 1bv32);call #Ultimate.allocInit(38bv32, 2bv32);call #Ultimate.allocInit(12bv32, 3bv32);call #Ultimate.allocInit(13bv32, 4bv32);call #Ultimate.allocInit(3bv32, 5bv32);call write~init~intINTTYPE1(79bv8, 5bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(110bv8, 5bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 5bv32, 2bv32, 1bv32);call #Ultimate.allocInit(4bv32, 6bv32);call write~init~intINTTYPE1(79bv8, 6bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 6bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 6bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 6bv32, 3bv32, 1bv32);call #Ultimate.allocInit(7bv32, 7bv32);call write~init~intINTTYPE1(44bv8, 7bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(80bv8, 7bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(117bv8, 7bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(109bv8, 7bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(112bv8, 7bv32, 4bv32, 1bv32);call write~init~intINTTYPE1(58bv8, 7bv32, 5bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 7bv32, 6bv32, 1bv32);call #Ultimate.allocInit(3bv32, 8bv32);call write~init~intINTTYPE1(79bv8, 8bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(110bv8, 8bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 8bv32, 2bv32, 1bv32);call #Ultimate.allocInit(4bv32, 9bv32);call write~init~intINTTYPE1(79bv8, 9bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 9bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 9bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 9bv32, 3bv32, 1bv32);call #Ultimate.allocInit(3bv32, 10bv32);call write~init~intINTTYPE1(41bv8, 10bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(32bv8, 10bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 10bv32, 2bv32, 1bv32);call #Ultimate.allocInit(2bv32, 11bv32);call write~init~intINTTYPE1(10bv8, 11bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 11bv32, 1bv32, 1bv32);call #Ultimate.allocInit(30bv32, 12bv32);call #Ultimate.allocInit(9bv32, 13bv32);call #Ultimate.allocInit(21bv32, 14bv32);call #Ultimate.allocInit(30bv32, 15bv32);call #Ultimate.allocInit(9bv32, 16bv32);call #Ultimate.allocInit(21bv32, 17bv32);call #Ultimate.allocInit(30bv32, 18bv32);call #Ultimate.allocInit(9bv32, 19bv32);call #Ultimate.allocInit(25bv32, 20bv32);call #Ultimate.allocInit(30bv32, 21bv32);call #Ultimate.allocInit(9bv32, 22bv32);call #Ultimate.allocInit(25bv32, 23bv32);call #Ultimate.allocInit(13bv32, 24bv32);call #Ultimate.allocInit(7bv32, 25bv32);call write~init~intINTTYPE1(44bv8, 25bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(77bv8, 25bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(101bv8, 25bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(116bv8, 25bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(104bv8, 25bv32, 4bv32, 1bv32);call write~init~intINTTYPE1(58bv8, 25bv32, 5bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 25bv32, 6bv32, 1bv32);call #Ultimate.allocInit(5bv32, 26bv32);call write~init~intINTTYPE1(67bv8, 26bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(82bv8, 26bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(73bv8, 26bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(84bv8, 26bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 26bv32, 4bv32, 1bv32);call #Ultimate.allocInit(3bv32, 27bv32);call write~init~intINTTYPE1(79bv8, 27bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(75bv8, 27bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 27bv32, 2bv32, 1bv32);call #Ultimate.allocInit(2bv32, 28bv32);call write~init~intINTTYPE1(41bv8, 28bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 28bv32, 1bv32, 1bv32);~__SELECTED_FEATURE_base~0 := 0bv32;~__SELECTED_FEATURE_highWaterSensor~0 := 0bv32;~__SELECTED_FEATURE_lowWaterSensor~0 := 0bv32;~__SELECTED_FEATURE_methaneQuery~0 := 0bv32;~__SELECTED_FEATURE_methaneAlarm~0 := 0bv32;~__SELECTED_FEATURE_stopCommand~0 := 0bv32;~__SELECTED_FEATURE_startCommand~0 := 0bv32;~__GUIDSL_ROOT_PRODUCTION~0 := 0bv32;~pumpRunning~0 := 0bv32;~systemActive~0 := 1bv32;~head~0.base, ~head~0.offset := 0bv32, 0bv32;~waterLevel~0 := 1bv32;~methaneLevelCritical~0 := 0bv32;~cleanupTimeShifts~0 := 4bv32; {10124#true} is VALID [2022-02-20 18:07:32,920 INFO L290 TraceCheckUtils]: 1: Hoare triple {10124#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret60#1, main_~retValue_acc~13#1, main_~tmp~11#1;havoc main_~retValue_acc~13#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1bv32; {10124#true} is VALID [2022-02-20 18:07:32,920 INFO L290 TraceCheckUtils]: 2: Hoare triple {10124#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret47#1, select_features_#t~ret48#1, select_features_#t~ret49#1, select_features_#t~ret50#1, select_features_#t~ret51#1, select_features_#t~ret52#1;~__SELECTED_FEATURE_base~0 := 1bv32; {10124#true} is VALID [2022-02-20 18:07:32,921 INFO L272 TraceCheckUtils]: 3: Hoare triple {10124#true} call select_features_#t~ret47#1 := select_one(); {10124#true} is VALID [2022-02-20 18:07:32,921 INFO L290 TraceCheckUtils]: 4: Hoare triple {10124#true} havoc ~retValue_acc~7;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {10124#true} is VALID [2022-02-20 18:07:32,921 INFO L290 TraceCheckUtils]: 5: Hoare triple {10124#true} assume true; {10124#true} is VALID [2022-02-20 18:07:32,921 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {10124#true} {10124#true} #355#return; {10124#true} is VALID [2022-02-20 18:07:32,921 INFO L290 TraceCheckUtils]: 7: Hoare triple {10124#true} ~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret47#1;havoc select_features_#t~ret47#1; {10124#true} is VALID [2022-02-20 18:07:32,921 INFO L272 TraceCheckUtils]: 8: Hoare triple {10124#true} call select_features_#t~ret48#1 := select_one(); {10124#true} is VALID [2022-02-20 18:07:32,922 INFO L290 TraceCheckUtils]: 9: Hoare triple {10124#true} havoc ~retValue_acc~7;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {10124#true} is VALID [2022-02-20 18:07:32,922 INFO L290 TraceCheckUtils]: 10: Hoare triple {10124#true} assume true; {10124#true} is VALID [2022-02-20 18:07:32,922 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {10124#true} {10124#true} #357#return; {10124#true} is VALID [2022-02-20 18:07:32,922 INFO L290 TraceCheckUtils]: 12: Hoare triple {10124#true} ~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret48#1;havoc select_features_#t~ret48#1; {10124#true} is VALID [2022-02-20 18:07:32,922 INFO L272 TraceCheckUtils]: 13: Hoare triple {10124#true} call select_features_#t~ret49#1 := select_one(); {10124#true} is VALID [2022-02-20 18:07:32,922 INFO L290 TraceCheckUtils]: 14: Hoare triple {10124#true} havoc ~retValue_acc~7;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {10124#true} is VALID [2022-02-20 18:07:32,923 INFO L290 TraceCheckUtils]: 15: Hoare triple {10124#true} assume true; {10124#true} is VALID [2022-02-20 18:07:32,923 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {10124#true} {10124#true} #359#return; {10124#true} is VALID [2022-02-20 18:07:32,923 INFO L290 TraceCheckUtils]: 17: Hoare triple {10124#true} ~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret49#1;havoc select_features_#t~ret49#1; {10124#true} is VALID [2022-02-20 18:07:32,923 INFO L272 TraceCheckUtils]: 18: Hoare triple {10124#true} call select_features_#t~ret50#1 := select_one(); {10124#true} is VALID [2022-02-20 18:07:32,923 INFO L290 TraceCheckUtils]: 19: Hoare triple {10124#true} havoc ~retValue_acc~7;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {10124#true} is VALID [2022-02-20 18:07:32,923 INFO L290 TraceCheckUtils]: 20: Hoare triple {10124#true} assume true; {10124#true} is VALID [2022-02-20 18:07:32,923 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {10124#true} {10124#true} #361#return; {10124#true} is VALID [2022-02-20 18:07:32,924 INFO L290 TraceCheckUtils]: 22: Hoare triple {10124#true} ~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret50#1;havoc select_features_#t~ret50#1; {10124#true} is VALID [2022-02-20 18:07:32,924 INFO L272 TraceCheckUtils]: 23: Hoare triple {10124#true} call select_features_#t~ret51#1 := select_one(); {10124#true} is VALID [2022-02-20 18:07:32,924 INFO L290 TraceCheckUtils]: 24: Hoare triple {10124#true} havoc ~retValue_acc~7;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {10124#true} is VALID [2022-02-20 18:07:32,924 INFO L290 TraceCheckUtils]: 25: Hoare triple {10124#true} assume true; {10124#true} is VALID [2022-02-20 18:07:32,924 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {10124#true} {10124#true} #363#return; {10124#true} is VALID [2022-02-20 18:07:32,924 INFO L290 TraceCheckUtils]: 27: Hoare triple {10124#true} ~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret51#1;havoc select_features_#t~ret51#1; {10124#true} is VALID [2022-02-20 18:07:32,924 INFO L272 TraceCheckUtils]: 28: Hoare triple {10124#true} call select_features_#t~ret52#1 := select_one(); {10124#true} is VALID [2022-02-20 18:07:32,925 INFO L290 TraceCheckUtils]: 29: Hoare triple {10124#true} havoc ~retValue_acc~7;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {10124#true} is VALID [2022-02-20 18:07:32,925 INFO L290 TraceCheckUtils]: 30: Hoare triple {10124#true} assume true; {10124#true} is VALID [2022-02-20 18:07:32,925 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {10124#true} {10124#true} #365#return; {10124#true} is VALID [2022-02-20 18:07:32,925 INFO L290 TraceCheckUtils]: 32: Hoare triple {10124#true} ~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret52#1;havoc select_features_#t~ret52#1; {10124#true} is VALID [2022-02-20 18:07:32,925 INFO L290 TraceCheckUtils]: 33: Hoare triple {10124#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~8#1;havoc valid_product_~retValue_acc~8#1;valid_product_~retValue_acc~8#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~8#1; {10124#true} is VALID [2022-02-20 18:07:32,925 INFO L290 TraceCheckUtils]: 34: Hoare triple {10124#true} main_#t~ret60#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret60#1;havoc main_#t~ret60#1; {10124#true} is VALID [2022-02-20 18:07:32,926 INFO L290 TraceCheckUtils]: 35: Hoare triple {10124#true} assume 0bv32 != main_~tmp~11#1;assume { :begin_inline_setup } true; {10124#true} is VALID [2022-02-20 18:07:32,926 INFO L290 TraceCheckUtils]: 36: Hoare triple {10124#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet4#1, test_#t~nondet5#1, test_#t~nondet6#1, test_#t~nondet7#1, test_~splverifierCounter~0#1, test_~tmp~0#1, test_~tmp___0~0#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~0#1;havoc test_~tmp___0~0#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0bv32; {10124#true} is VALID [2022-02-20 18:07:32,926 INFO L290 TraceCheckUtils]: 37: Hoare triple {10124#true} assume !false; {10124#true} is VALID [2022-02-20 18:07:32,926 INFO L290 TraceCheckUtils]: 38: Hoare triple {10124#true} assume ~bvslt32(test_~splverifierCounter~0#1, 4bv32); {10124#true} is VALID [2022-02-20 18:07:32,926 INFO L290 TraceCheckUtils]: 39: Hoare triple {10124#true} test_~tmp~0#1 := test_#t~nondet4#1;havoc test_#t~nondet4#1; {10124#true} is VALID [2022-02-20 18:07:32,926 INFO L290 TraceCheckUtils]: 40: Hoare triple {10124#true} assume !(0bv32 != test_~tmp~0#1); {10124#true} is VALID [2022-02-20 18:07:32,926 INFO L290 TraceCheckUtils]: 41: Hoare triple {10124#true} test_~tmp___0~0#1 := test_#t~nondet5#1;havoc test_#t~nondet5#1; {10124#true} is VALID [2022-02-20 18:07:32,927 INFO L290 TraceCheckUtils]: 42: Hoare triple {10124#true} assume 0bv32 != test_~tmp___0~0#1; {10124#true} is VALID [2022-02-20 18:07:32,927 INFO L272 TraceCheckUtils]: 43: Hoare triple {10124#true} call changeMethaneLevel(); {10124#true} is VALID [2022-02-20 18:07:32,927 INFO L290 TraceCheckUtils]: 44: Hoare triple {10124#true} assume !(0bv32 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1bv32; {10124#true} is VALID [2022-02-20 18:07:32,927 INFO L290 TraceCheckUtils]: 45: Hoare triple {10124#true} assume true; {10124#true} is VALID [2022-02-20 18:07:32,927 INFO L284 TraceCheckUtils]: 46: Hoare quadruple {10124#true} {10124#true} #369#return; {10124#true} is VALID [2022-02-20 18:07:32,927 INFO L290 TraceCheckUtils]: 47: Hoare triple {10124#true} test_~tmp___2~0#1 := test_#t~nondet6#1;havoc test_#t~nondet6#1; {10124#true} is VALID [2022-02-20 18:07:32,927 INFO L290 TraceCheckUtils]: 48: Hoare triple {10124#true} assume !(0bv32 != test_~tmp___2~0#1);test_~tmp___1~0#1 := test_#t~nondet7#1;havoc test_#t~nondet7#1; {10124#true} is VALID [2022-02-20 18:07:32,928 INFO L290 TraceCheckUtils]: 49: Hoare triple {10124#true} assume !(0bv32 != test_~tmp___1~0#1); {10124#true} is VALID [2022-02-20 18:07:32,928 INFO L272 TraceCheckUtils]: 50: Hoare triple {10124#true} call timeShift(); {10124#true} is VALID [2022-02-20 18:07:32,928 INFO L290 TraceCheckUtils]: 51: Hoare triple {10124#true} assume !(0bv32 != ~pumpRunning~0); {10124#true} is VALID [2022-02-20 18:07:32,928 INFO L290 TraceCheckUtils]: 52: Hoare triple {10124#true} assume 0bv32 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {10124#true} is VALID [2022-02-20 18:07:32,928 INFO L290 TraceCheckUtils]: 53: Hoare triple {10124#true} assume !(0bv32 != ~__SELECTED_FEATURE_methaneAlarm~0); {10124#true} is VALID [2022-02-20 18:07:32,928 INFO L272 TraceCheckUtils]: 54: Hoare triple {10124#true} call processEnvironment__before__methaneAlarm(); {10124#true} is VALID [2022-02-20 18:07:32,929 INFO L290 TraceCheckUtils]: 55: Hoare triple {10124#true} assume !(0bv32 != ~__SELECTED_FEATURE_lowWaterSensor~0); {10124#true} is VALID [2022-02-20 18:07:32,929 INFO L272 TraceCheckUtils]: 56: Hoare triple {10124#true} call processEnvironment__before__lowWaterSensor(); {10124#true} is VALID [2022-02-20 18:07:32,929 INFO L290 TraceCheckUtils]: 57: Hoare triple {10124#true} assume 0bv32 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret8#1, processEnvironment__role__highWaterSensor_~tmp~1#1;havoc processEnvironment__role__highWaterSensor_~tmp~1#1; {10124#true} is VALID [2022-02-20 18:07:32,929 INFO L290 TraceCheckUtils]: 58: Hoare triple {10124#true} assume 0bv32 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret21#1, isHighWaterLevel_~retValue_acc~2#1, isHighWaterLevel_~tmp~5#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~2#1;havoc isHighWaterLevel_~tmp~5#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {10124#true} is VALID [2022-02-20 18:07:32,929 INFO L290 TraceCheckUtils]: 59: Hoare triple {10124#true} assume ~bvslt32(~waterLevel~0, 2bv32);isHighWaterSensorDry_~retValue_acc~11#1 := 1bv32;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {10124#true} is VALID [2022-02-20 18:07:32,929 INFO L290 TraceCheckUtils]: 60: Hoare triple {10124#true} isHighWaterLevel_#t~ret21#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;isHighWaterLevel_~tmp~5#1 := isHighWaterLevel_#t~ret21#1;havoc isHighWaterLevel_#t~ret21#1; {10124#true} is VALID [2022-02-20 18:07:32,930 INFO L290 TraceCheckUtils]: 61: Hoare triple {10124#true} assume 0bv32 != isHighWaterLevel_~tmp~5#1;isHighWaterLevel_~tmp___0~1#1 := 0bv32; {10312#(= (_ bv0 32) |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp___0~1#1|)} is VALID [2022-02-20 18:07:32,930 INFO L290 TraceCheckUtils]: 62: Hoare triple {10312#(= (_ bv0 32) |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp___0~1#1|)} isHighWaterLevel_~retValue_acc~2#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~2#1; {10316#(= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_#res#1| (_ bv0 32))} is VALID [2022-02-20 18:07:32,931 INFO L290 TraceCheckUtils]: 63: Hoare triple {10316#(= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_#res#1| (_ bv0 32))} processEnvironment__role__highWaterSensor_#t~ret8#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;processEnvironment__role__highWaterSensor_~tmp~1#1 := processEnvironment__role__highWaterSensor_#t~ret8#1;havoc processEnvironment__role__highWaterSensor_#t~ret8#1; {10320#(= |processEnvironment__before__lowWaterSensor_processEnvironment__role__highWaterSensor_~tmp~1#1| (_ bv0 32))} is VALID [2022-02-20 18:07:32,931 INFO L290 TraceCheckUtils]: 64: Hoare triple {10320#(= |processEnvironment__before__lowWaterSensor_processEnvironment__role__highWaterSensor_~tmp~1#1| (_ bv0 32))} assume 0bv32 != processEnvironment__role__highWaterSensor_~tmp~1#1;assume { :begin_inline_activatePump } true; {10125#false} is VALID [2022-02-20 18:07:32,931 INFO L290 TraceCheckUtils]: 65: Hoare triple {10125#false} assume !(0bv32 != ~__SELECTED_FEATURE_methaneQuery~0); {10125#false} is VALID [2022-02-20 18:07:32,931 INFO L272 TraceCheckUtils]: 66: Hoare triple {10125#false} call activatePump__before__methaneQuery(); {10125#false} is VALID [2022-02-20 18:07:32,932 INFO L290 TraceCheckUtils]: 67: Hoare triple {10125#false} ~pumpRunning~0 := 1bv32; {10125#false} is VALID [2022-02-20 18:07:32,932 INFO L290 TraceCheckUtils]: 68: Hoare triple {10125#false} assume true; {10125#false} is VALID [2022-02-20 18:07:32,932 INFO L284 TraceCheckUtils]: 69: Hoare quadruple {10125#false} {10125#false} #331#return; {10125#false} is VALID [2022-02-20 18:07:32,932 INFO L290 TraceCheckUtils]: 70: Hoare triple {10125#false} assume { :end_inline_activatePump } true; {10125#false} is VALID [2022-02-20 18:07:32,932 INFO L290 TraceCheckUtils]: 71: Hoare triple {10125#false} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {10125#false} is VALID [2022-02-20 18:07:32,932 INFO L290 TraceCheckUtils]: 72: Hoare triple {10125#false} assume true; {10125#false} is VALID [2022-02-20 18:07:32,932 INFO L284 TraceCheckUtils]: 73: Hoare quadruple {10125#false} {10124#true} #383#return; {10125#false} is VALID [2022-02-20 18:07:32,933 INFO L290 TraceCheckUtils]: 74: Hoare triple {10125#false} assume true; {10125#false} is VALID [2022-02-20 18:07:32,933 INFO L284 TraceCheckUtils]: 75: Hoare quadruple {10125#false} {10124#true} #351#return; {10125#false} is VALID [2022-02-20 18:07:32,933 INFO L290 TraceCheckUtils]: 76: Hoare triple {10125#false} assume { :end_inline_processEnvironment } true; {10125#false} is VALID [2022-02-20 18:07:32,933 INFO L290 TraceCheckUtils]: 77: Hoare triple {10125#false} assume { :begin_inline___utac_acc__Specification1_spec__1 } true;havoc __utac_acc__Specification1_spec__1_#t~ret53#1, __utac_acc__Specification1_spec__1_#t~ret54#1, __utac_acc__Specification1_spec__1_~tmp~10#1, __utac_acc__Specification1_spec__1_~tmp___0~3#1;havoc __utac_acc__Specification1_spec__1_~tmp~10#1;havoc __utac_acc__Specification1_spec__1_~tmp___0~3#1; {10125#false} is VALID [2022-02-20 18:07:32,933 INFO L272 TraceCheckUtils]: 78: Hoare triple {10125#false} call __utac_acc__Specification1_spec__1_#t~ret53#1 := isMethaneLevelCritical(); {10125#false} is VALID [2022-02-20 18:07:32,933 INFO L290 TraceCheckUtils]: 79: Hoare triple {10125#false} havoc ~retValue_acc~9;~retValue_acc~9 := ~methaneLevelCritical~0;#res := ~retValue_acc~9; {10125#false} is VALID [2022-02-20 18:07:32,934 INFO L290 TraceCheckUtils]: 80: Hoare triple {10125#false} assume true; {10125#false} is VALID [2022-02-20 18:07:32,934 INFO L284 TraceCheckUtils]: 81: Hoare quadruple {10125#false} {10125#false} #353#return; {10125#false} is VALID [2022-02-20 18:07:32,934 INFO L290 TraceCheckUtils]: 82: Hoare triple {10125#false} __utac_acc__Specification1_spec__1_~tmp~10#1 := __utac_acc__Specification1_spec__1_#t~ret53#1;havoc __utac_acc__Specification1_spec__1_#t~ret53#1; {10125#false} is VALID [2022-02-20 18:07:32,934 INFO L290 TraceCheckUtils]: 83: Hoare triple {10125#false} assume 0bv32 != __utac_acc__Specification1_spec__1_~tmp~10#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~1#1;havoc isPumpRunning_~retValue_acc~1#1;isPumpRunning_~retValue_acc~1#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~1#1; {10125#false} is VALID [2022-02-20 18:07:32,934 INFO L290 TraceCheckUtils]: 84: Hoare triple {10125#false} __utac_acc__Specification1_spec__1_#t~ret54#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;__utac_acc__Specification1_spec__1_~tmp___0~3#1 := __utac_acc__Specification1_spec__1_#t~ret54#1;havoc __utac_acc__Specification1_spec__1_#t~ret54#1; {10125#false} is VALID [2022-02-20 18:07:32,934 INFO L290 TraceCheckUtils]: 85: Hoare triple {10125#false} assume 0bv32 != __utac_acc__Specification1_spec__1_~tmp___0~3#1;assume { :begin_inline___automaton_fail } true; {10125#false} is VALID [2022-02-20 18:07:32,935 INFO L290 TraceCheckUtils]: 86: Hoare triple {10125#false} assume !false; {10125#false} is VALID [2022-02-20 18:07:32,935 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-02-20 18:07:32,935 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-02-20 18:07:32,935 INFO L144 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-02-20 18:07:32,935 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1389709570] [2022-02-20 18:07:32,935 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1389709570] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:07:32,936 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:07:32,936 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-02-20 18:07:32,936 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1868436879] [2022-02-20 18:07:32,936 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:07:32,937 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 10.8) internal successors, (54), 5 states have internal predecessors, (54), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) Word has length 87 [2022-02-20 18:07:32,937 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:07:32,937 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 5 states, 5 states have (on average 10.8) internal successors, (54), 5 states have internal predecessors, (54), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-02-20 18:07:32,990 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 77 edges. 77 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:32,991 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-02-20 18:07:32,991 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-02-20 18:07:32,991 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-02-20 18:07:32,991 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-02-20 18:07:32,992 INFO L87 Difference]: Start difference. First operand 658 states and 900 transitions. Second operand has 5 states, 5 states have (on average 10.8) internal successors, (54), 5 states have internal predecessors, (54), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-02-20 18:07:33,417 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:33,418 INFO L93 Difference]: Finished difference Result 1334 states and 1925 transitions. [2022-02-20 18:07:33,418 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-02-20 18:07:33,418 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 10.8) internal successors, (54), 5 states have internal predecessors, (54), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) Word has length 87 [2022-02-20 18:07:33,419 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:07:33,419 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 10.8) internal successors, (54), 5 states have internal predecessors, (54), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-02-20 18:07:33,423 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 332 transitions. [2022-02-20 18:07:33,423 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 10.8) internal successors, (54), 5 states have internal predecessors, (54), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-02-20 18:07:33,426 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 332 transitions. [2022-02-20 18:07:33,427 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states and 332 transitions. [2022-02-20 18:07:33,636 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 332 edges. 332 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:33,662 INFO L225 Difference]: With dead ends: 1334 [2022-02-20 18:07:33,662 INFO L226 Difference]: Without dead ends: 698 [2022-02-20 18:07:33,664 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 88 GetRequests, 83 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-02-20 18:07:33,665 INFO L933 BasicCegarLoop]: 175 mSDtfsCounter, 12 mSDsluCounter, 510 mSDsCounter, 0 mSdLazyCounter, 13 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 13 SdHoareTripleChecker+Valid, 685 SdHoareTripleChecker+Invalid, 17 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 13 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:07:33,665 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [13 Valid, 685 Invalid, 17 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 13 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:07:33,666 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 698 states. [2022-02-20 18:07:33,681 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 698 to 670. [2022-02-20 18:07:33,682 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:07:33,683 INFO L82 GeneralOperation]: Start isEquivalent. First operand 698 states. Second operand has 670 states, 474 states have (on average 1.3164556962025316) internal successors, (624), 539 states have internal predecessors, (624), 122 states have call successors, (122), 73 states have call predecessors, (122), 73 states have return successors, (166), 112 states have call predecessors, (166), 122 states have call successors, (166) [2022-02-20 18:07:33,684 INFO L74 IsIncluded]: Start isIncluded. First operand 698 states. Second operand has 670 states, 474 states have (on average 1.3164556962025316) internal successors, (624), 539 states have internal predecessors, (624), 122 states have call successors, (122), 73 states have call predecessors, (122), 73 states have return successors, (166), 112 states have call predecessors, (166), 122 states have call successors, (166) [2022-02-20 18:07:33,685 INFO L87 Difference]: Start difference. First operand 698 states. Second operand has 670 states, 474 states have (on average 1.3164556962025316) internal successors, (624), 539 states have internal predecessors, (624), 122 states have call successors, (122), 73 states have call predecessors, (122), 73 states have return successors, (166), 112 states have call predecessors, (166), 122 states have call successors, (166) [2022-02-20 18:07:33,707 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:33,707 INFO L93 Difference]: Finished difference Result 698 states and 968 transitions. [2022-02-20 18:07:33,707 INFO L276 IsEmpty]: Start isEmpty. Operand 698 states and 968 transitions. [2022-02-20 18:07:33,709 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:33,709 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:33,711 INFO L74 IsIncluded]: Start isIncluded. First operand has 670 states, 474 states have (on average 1.3164556962025316) internal successors, (624), 539 states have internal predecessors, (624), 122 states have call successors, (122), 73 states have call predecessors, (122), 73 states have return successors, (166), 112 states have call predecessors, (166), 122 states have call successors, (166) Second operand 698 states. [2022-02-20 18:07:33,712 INFO L87 Difference]: Start difference. First operand has 670 states, 474 states have (on average 1.3164556962025316) internal successors, (624), 539 states have internal predecessors, (624), 122 states have call successors, (122), 73 states have call predecessors, (122), 73 states have return successors, (166), 112 states have call predecessors, (166), 122 states have call successors, (166) Second operand 698 states. [2022-02-20 18:07:33,734 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:33,734 INFO L93 Difference]: Finished difference Result 698 states and 968 transitions. [2022-02-20 18:07:33,735 INFO L276 IsEmpty]: Start isEmpty. Operand 698 states and 968 transitions. [2022-02-20 18:07:33,737 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:33,737 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:33,737 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:07:33,737 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:07:33,738 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 670 states, 474 states have (on average 1.3164556962025316) internal successors, (624), 539 states have internal predecessors, (624), 122 states have call successors, (122), 73 states have call predecessors, (122), 73 states have return successors, (166), 112 states have call predecessors, (166), 122 states have call successors, (166) [2022-02-20 18:07:33,778 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 670 states to 670 states and 912 transitions. [2022-02-20 18:07:33,780 INFO L78 Accepts]: Start accepts. Automaton has 670 states and 912 transitions. Word has length 87 [2022-02-20 18:07:33,780 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:07:33,780 INFO L470 AbstractCegarLoop]: Abstraction has 670 states and 912 transitions. [2022-02-20 18:07:33,780 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 10.8) internal successors, (54), 5 states have internal predecessors, (54), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-02-20 18:07:33,781 INFO L276 IsEmpty]: Start isEmpty. Operand 670 states and 912 transitions. [2022-02-20 18:07:33,782 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 88 [2022-02-20 18:07:33,782 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:07:33,782 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:07:33,789 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (7)] Forceful destruction successful, exit code 0 [2022-02-20 18:07:33,989 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-02-20 18:07:33,990 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:07:33,990 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:07:33,990 INFO L85 PathProgramCache]: Analyzing trace with hash 64134619, now seen corresponding path program 1 times [2022-02-20 18:07:33,990 INFO L126 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-02-20 18:07:33,991 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [898407216] [2022-02-20 18:07:33,991 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:07:33,991 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-02-20 18:07:33,991 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-02-20 18:07:33,993 INFO L229 MonitoredProcess]: Starting monitored process 8 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-02-20 18:07:33,994 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (8)] Waiting until timeout for monitored process [2022-02-20 18:07:34,050 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:34,054 INFO L263 TraceCheckSpWp]: Trace formula consists of 256 conjuncts, 4 conjunts are in the unsatisfiable core [2022-02-20 18:07:34,069 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:34,071 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 18:07:34,241 INFO L290 TraceCheckUtils]: 0: Hoare triple {14681#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0bv32, 0bv32;assume 0bv1 == #valid[0bv32];assume ~bvult32(0bv32, #StackHeapBarrier);call #Ultimate.allocInit(2bv32, 1bv32);call write~init~intINTTYPE1(48bv8, 1bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 1bv32, 1bv32, 1bv32);call #Ultimate.allocInit(38bv32, 2bv32);call #Ultimate.allocInit(12bv32, 3bv32);call #Ultimate.allocInit(13bv32, 4bv32);call #Ultimate.allocInit(3bv32, 5bv32);call write~init~intINTTYPE1(79bv8, 5bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(110bv8, 5bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 5bv32, 2bv32, 1bv32);call #Ultimate.allocInit(4bv32, 6bv32);call write~init~intINTTYPE1(79bv8, 6bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 6bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 6bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 6bv32, 3bv32, 1bv32);call #Ultimate.allocInit(7bv32, 7bv32);call write~init~intINTTYPE1(44bv8, 7bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(80bv8, 7bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(117bv8, 7bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(109bv8, 7bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(112bv8, 7bv32, 4bv32, 1bv32);call write~init~intINTTYPE1(58bv8, 7bv32, 5bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 7bv32, 6bv32, 1bv32);call #Ultimate.allocInit(3bv32, 8bv32);call write~init~intINTTYPE1(79bv8, 8bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(110bv8, 8bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 8bv32, 2bv32, 1bv32);call #Ultimate.allocInit(4bv32, 9bv32);call write~init~intINTTYPE1(79bv8, 9bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 9bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 9bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 9bv32, 3bv32, 1bv32);call #Ultimate.allocInit(3bv32, 10bv32);call write~init~intINTTYPE1(41bv8, 10bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(32bv8, 10bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 10bv32, 2bv32, 1bv32);call #Ultimate.allocInit(2bv32, 11bv32);call write~init~intINTTYPE1(10bv8, 11bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 11bv32, 1bv32, 1bv32);call #Ultimate.allocInit(30bv32, 12bv32);call #Ultimate.allocInit(9bv32, 13bv32);call #Ultimate.allocInit(21bv32, 14bv32);call #Ultimate.allocInit(30bv32, 15bv32);call #Ultimate.allocInit(9bv32, 16bv32);call #Ultimate.allocInit(21bv32, 17bv32);call #Ultimate.allocInit(30bv32, 18bv32);call #Ultimate.allocInit(9bv32, 19bv32);call #Ultimate.allocInit(25bv32, 20bv32);call #Ultimate.allocInit(30bv32, 21bv32);call #Ultimate.allocInit(9bv32, 22bv32);call #Ultimate.allocInit(25bv32, 23bv32);call #Ultimate.allocInit(13bv32, 24bv32);call #Ultimate.allocInit(7bv32, 25bv32);call write~init~intINTTYPE1(44bv8, 25bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(77bv8, 25bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(101bv8, 25bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(116bv8, 25bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(104bv8, 25bv32, 4bv32, 1bv32);call write~init~intINTTYPE1(58bv8, 25bv32, 5bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 25bv32, 6bv32, 1bv32);call #Ultimate.allocInit(5bv32, 26bv32);call write~init~intINTTYPE1(67bv8, 26bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(82bv8, 26bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(73bv8, 26bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(84bv8, 26bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 26bv32, 4bv32, 1bv32);call #Ultimate.allocInit(3bv32, 27bv32);call write~init~intINTTYPE1(79bv8, 27bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(75bv8, 27bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 27bv32, 2bv32, 1bv32);call #Ultimate.allocInit(2bv32, 28bv32);call write~init~intINTTYPE1(41bv8, 28bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 28bv32, 1bv32, 1bv32);~__SELECTED_FEATURE_base~0 := 0bv32;~__SELECTED_FEATURE_highWaterSensor~0 := 0bv32;~__SELECTED_FEATURE_lowWaterSensor~0 := 0bv32;~__SELECTED_FEATURE_methaneQuery~0 := 0bv32;~__SELECTED_FEATURE_methaneAlarm~0 := 0bv32;~__SELECTED_FEATURE_stopCommand~0 := 0bv32;~__SELECTED_FEATURE_startCommand~0 := 0bv32;~__GUIDSL_ROOT_PRODUCTION~0 := 0bv32;~pumpRunning~0 := 0bv32;~systemActive~0 := 1bv32;~head~0.base, ~head~0.offset := 0bv32, 0bv32;~waterLevel~0 := 1bv32;~methaneLevelCritical~0 := 0bv32;~cleanupTimeShifts~0 := 4bv32; {14681#true} is VALID [2022-02-20 18:07:34,241 INFO L290 TraceCheckUtils]: 1: Hoare triple {14681#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret60#1, main_~retValue_acc~13#1, main_~tmp~11#1;havoc main_~retValue_acc~13#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1bv32; {14681#true} is VALID [2022-02-20 18:07:34,241 INFO L290 TraceCheckUtils]: 2: Hoare triple {14681#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret47#1, select_features_#t~ret48#1, select_features_#t~ret49#1, select_features_#t~ret50#1, select_features_#t~ret51#1, select_features_#t~ret52#1;~__SELECTED_FEATURE_base~0 := 1bv32; {14681#true} is VALID [2022-02-20 18:07:34,242 INFO L272 TraceCheckUtils]: 3: Hoare triple {14681#true} call select_features_#t~ret47#1 := select_one(); {14681#true} is VALID [2022-02-20 18:07:34,242 INFO L290 TraceCheckUtils]: 4: Hoare triple {14681#true} havoc ~retValue_acc~7;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {14681#true} is VALID [2022-02-20 18:07:34,242 INFO L290 TraceCheckUtils]: 5: Hoare triple {14681#true} assume true; {14681#true} is VALID [2022-02-20 18:07:34,242 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {14681#true} {14681#true} #355#return; {14681#true} is VALID [2022-02-20 18:07:34,242 INFO L290 TraceCheckUtils]: 7: Hoare triple {14681#true} ~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret47#1;havoc select_features_#t~ret47#1; {14681#true} is VALID [2022-02-20 18:07:34,242 INFO L272 TraceCheckUtils]: 8: Hoare triple {14681#true} call select_features_#t~ret48#1 := select_one(); {14681#true} is VALID [2022-02-20 18:07:34,242 INFO L290 TraceCheckUtils]: 9: Hoare triple {14681#true} havoc ~retValue_acc~7;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {14681#true} is VALID [2022-02-20 18:07:34,243 INFO L290 TraceCheckUtils]: 10: Hoare triple {14681#true} assume true; {14681#true} is VALID [2022-02-20 18:07:34,243 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {14681#true} {14681#true} #357#return; {14681#true} is VALID [2022-02-20 18:07:34,243 INFO L290 TraceCheckUtils]: 12: Hoare triple {14681#true} ~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret48#1;havoc select_features_#t~ret48#1; {14681#true} is VALID [2022-02-20 18:07:34,243 INFO L272 TraceCheckUtils]: 13: Hoare triple {14681#true} call select_features_#t~ret49#1 := select_one(); {14681#true} is VALID [2022-02-20 18:07:34,243 INFO L290 TraceCheckUtils]: 14: Hoare triple {14681#true} havoc ~retValue_acc~7;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {14681#true} is VALID [2022-02-20 18:07:34,243 INFO L290 TraceCheckUtils]: 15: Hoare triple {14681#true} assume true; {14681#true} is VALID [2022-02-20 18:07:34,244 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {14681#true} {14681#true} #359#return; {14681#true} is VALID [2022-02-20 18:07:34,244 INFO L290 TraceCheckUtils]: 17: Hoare triple {14681#true} ~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret49#1;havoc select_features_#t~ret49#1; {14681#true} is VALID [2022-02-20 18:07:34,244 INFO L272 TraceCheckUtils]: 18: Hoare triple {14681#true} call select_features_#t~ret50#1 := select_one(); {14681#true} is VALID [2022-02-20 18:07:34,244 INFO L290 TraceCheckUtils]: 19: Hoare triple {14681#true} havoc ~retValue_acc~7;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {14681#true} is VALID [2022-02-20 18:07:34,244 INFO L290 TraceCheckUtils]: 20: Hoare triple {14681#true} assume true; {14681#true} is VALID [2022-02-20 18:07:34,244 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {14681#true} {14681#true} #361#return; {14681#true} is VALID [2022-02-20 18:07:34,245 INFO L290 TraceCheckUtils]: 22: Hoare triple {14681#true} ~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret50#1;havoc select_features_#t~ret50#1; {14681#true} is VALID [2022-02-20 18:07:34,245 INFO L272 TraceCheckUtils]: 23: Hoare triple {14681#true} call select_features_#t~ret51#1 := select_one(); {14681#true} is VALID [2022-02-20 18:07:34,245 INFO L290 TraceCheckUtils]: 24: Hoare triple {14681#true} havoc ~retValue_acc~7;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {14681#true} is VALID [2022-02-20 18:07:34,245 INFO L290 TraceCheckUtils]: 25: Hoare triple {14681#true} assume true; {14681#true} is VALID [2022-02-20 18:07:34,245 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {14681#true} {14681#true} #363#return; {14681#true} is VALID [2022-02-20 18:07:34,245 INFO L290 TraceCheckUtils]: 27: Hoare triple {14681#true} ~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret51#1;havoc select_features_#t~ret51#1; {14681#true} is VALID [2022-02-20 18:07:34,245 INFO L272 TraceCheckUtils]: 28: Hoare triple {14681#true} call select_features_#t~ret52#1 := select_one(); {14681#true} is VALID [2022-02-20 18:07:34,246 INFO L290 TraceCheckUtils]: 29: Hoare triple {14681#true} havoc ~retValue_acc~7;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {14681#true} is VALID [2022-02-20 18:07:34,246 INFO L290 TraceCheckUtils]: 30: Hoare triple {14681#true} assume true; {14681#true} is VALID [2022-02-20 18:07:34,246 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {14681#true} {14681#true} #365#return; {14681#true} is VALID [2022-02-20 18:07:34,246 INFO L290 TraceCheckUtils]: 32: Hoare triple {14681#true} ~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret52#1;havoc select_features_#t~ret52#1; {14681#true} is VALID [2022-02-20 18:07:34,246 INFO L290 TraceCheckUtils]: 33: Hoare triple {14681#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~8#1;havoc valid_product_~retValue_acc~8#1;valid_product_~retValue_acc~8#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~8#1; {14681#true} is VALID [2022-02-20 18:07:34,246 INFO L290 TraceCheckUtils]: 34: Hoare triple {14681#true} main_#t~ret60#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret60#1;havoc main_#t~ret60#1; {14681#true} is VALID [2022-02-20 18:07:34,247 INFO L290 TraceCheckUtils]: 35: Hoare triple {14681#true} assume 0bv32 != main_~tmp~11#1;assume { :begin_inline_setup } true; {14681#true} is VALID [2022-02-20 18:07:34,247 INFO L290 TraceCheckUtils]: 36: Hoare triple {14681#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet4#1, test_#t~nondet5#1, test_#t~nondet6#1, test_#t~nondet7#1, test_~splverifierCounter~0#1, test_~tmp~0#1, test_~tmp___0~0#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~0#1;havoc test_~tmp___0~0#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0bv32; {14681#true} is VALID [2022-02-20 18:07:34,247 INFO L290 TraceCheckUtils]: 37: Hoare triple {14681#true} assume !false; {14681#true} is VALID [2022-02-20 18:07:34,247 INFO L290 TraceCheckUtils]: 38: Hoare triple {14681#true} assume ~bvslt32(test_~splverifierCounter~0#1, 4bv32); {14681#true} is VALID [2022-02-20 18:07:34,247 INFO L290 TraceCheckUtils]: 39: Hoare triple {14681#true} test_~tmp~0#1 := test_#t~nondet4#1;havoc test_#t~nondet4#1; {14681#true} is VALID [2022-02-20 18:07:34,247 INFO L290 TraceCheckUtils]: 40: Hoare triple {14681#true} assume !(0bv32 != test_~tmp~0#1); {14681#true} is VALID [2022-02-20 18:07:34,247 INFO L290 TraceCheckUtils]: 41: Hoare triple {14681#true} test_~tmp___0~0#1 := test_#t~nondet5#1;havoc test_#t~nondet5#1; {14681#true} is VALID [2022-02-20 18:07:34,248 INFO L290 TraceCheckUtils]: 42: Hoare triple {14681#true} assume 0bv32 != test_~tmp___0~0#1; {14681#true} is VALID [2022-02-20 18:07:34,248 INFO L272 TraceCheckUtils]: 43: Hoare triple {14681#true} call changeMethaneLevel(); {14681#true} is VALID [2022-02-20 18:07:34,248 INFO L290 TraceCheckUtils]: 44: Hoare triple {14681#true} assume !(0bv32 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1bv32; {14681#true} is VALID [2022-02-20 18:07:34,248 INFO L290 TraceCheckUtils]: 45: Hoare triple {14681#true} assume true; {14681#true} is VALID [2022-02-20 18:07:34,248 INFO L284 TraceCheckUtils]: 46: Hoare quadruple {14681#true} {14681#true} #369#return; {14681#true} is VALID [2022-02-20 18:07:34,248 INFO L290 TraceCheckUtils]: 47: Hoare triple {14681#true} test_~tmp___2~0#1 := test_#t~nondet6#1;havoc test_#t~nondet6#1; {14681#true} is VALID [2022-02-20 18:07:34,248 INFO L290 TraceCheckUtils]: 48: Hoare triple {14681#true} assume !(0bv32 != test_~tmp___2~0#1);test_~tmp___1~0#1 := test_#t~nondet7#1;havoc test_#t~nondet7#1; {14681#true} is VALID [2022-02-20 18:07:34,249 INFO L290 TraceCheckUtils]: 49: Hoare triple {14681#true} assume !(0bv32 != test_~tmp___1~0#1); {14681#true} is VALID [2022-02-20 18:07:34,250 INFO L272 TraceCheckUtils]: 50: Hoare triple {14681#true} call timeShift(); {14681#true} is VALID [2022-02-20 18:07:34,250 INFO L290 TraceCheckUtils]: 51: Hoare triple {14681#true} assume !(0bv32 != ~pumpRunning~0); {14681#true} is VALID [2022-02-20 18:07:34,250 INFO L290 TraceCheckUtils]: 52: Hoare triple {14681#true} assume 0bv32 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {14681#true} is VALID [2022-02-20 18:07:34,250 INFO L290 TraceCheckUtils]: 53: Hoare triple {14681#true} assume !(0bv32 != ~__SELECTED_FEATURE_methaneAlarm~0); {14681#true} is VALID [2022-02-20 18:07:34,251 INFO L272 TraceCheckUtils]: 54: Hoare triple {14681#true} call processEnvironment__before__methaneAlarm(); {14681#true} is VALID [2022-02-20 18:07:34,251 INFO L290 TraceCheckUtils]: 55: Hoare triple {14681#true} assume !(0bv32 != ~__SELECTED_FEATURE_lowWaterSensor~0); {14681#true} is VALID [2022-02-20 18:07:34,251 INFO L272 TraceCheckUtils]: 56: Hoare triple {14681#true} call processEnvironment__before__lowWaterSensor(); {14681#true} is VALID [2022-02-20 18:07:34,251 INFO L290 TraceCheckUtils]: 57: Hoare triple {14681#true} assume 0bv32 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret8#1, processEnvironment__role__highWaterSensor_~tmp~1#1;havoc processEnvironment__role__highWaterSensor_~tmp~1#1; {14681#true} is VALID [2022-02-20 18:07:34,252 INFO L290 TraceCheckUtils]: 58: Hoare triple {14681#true} assume 0bv32 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret21#1, isHighWaterLevel_~retValue_acc~2#1, isHighWaterLevel_~tmp~5#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~2#1;havoc isHighWaterLevel_~tmp~5#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {14681#true} is VALID [2022-02-20 18:07:34,252 INFO L290 TraceCheckUtils]: 59: Hoare triple {14681#true} assume ~bvslt32(~waterLevel~0, 2bv32);isHighWaterSensorDry_~retValue_acc~11#1 := 1bv32;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {14863#(= (_ bv1 32) |processEnvironment__before__lowWaterSensor_isHighWaterSensorDry_#res#1|)} is VALID [2022-02-20 18:07:34,253 INFO L290 TraceCheckUtils]: 60: Hoare triple {14863#(= (_ bv1 32) |processEnvironment__before__lowWaterSensor_isHighWaterSensorDry_#res#1|)} isHighWaterLevel_#t~ret21#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;isHighWaterLevel_~tmp~5#1 := isHighWaterLevel_#t~ret21#1;havoc isHighWaterLevel_#t~ret21#1; {14867#(= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp~5#1| (_ bv1 32))} is VALID [2022-02-20 18:07:34,253 INFO L290 TraceCheckUtils]: 61: Hoare triple {14867#(= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp~5#1| (_ bv1 32))} assume !(0bv32 != isHighWaterLevel_~tmp~5#1);isHighWaterLevel_~tmp___0~1#1 := 1bv32; {14682#false} is VALID [2022-02-20 18:07:34,253 INFO L290 TraceCheckUtils]: 62: Hoare triple {14682#false} isHighWaterLevel_~retValue_acc~2#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~2#1; {14682#false} is VALID [2022-02-20 18:07:34,253 INFO L290 TraceCheckUtils]: 63: Hoare triple {14682#false} processEnvironment__role__highWaterSensor_#t~ret8#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;processEnvironment__role__highWaterSensor_~tmp~1#1 := processEnvironment__role__highWaterSensor_#t~ret8#1;havoc processEnvironment__role__highWaterSensor_#t~ret8#1; {14682#false} is VALID [2022-02-20 18:07:34,253 INFO L290 TraceCheckUtils]: 64: Hoare triple {14682#false} assume 0bv32 != processEnvironment__role__highWaterSensor_~tmp~1#1;assume { :begin_inline_activatePump } true; {14682#false} is VALID [2022-02-20 18:07:34,254 INFO L290 TraceCheckUtils]: 65: Hoare triple {14682#false} assume !(0bv32 != ~__SELECTED_FEATURE_methaneQuery~0); {14682#false} is VALID [2022-02-20 18:07:34,254 INFO L272 TraceCheckUtils]: 66: Hoare triple {14682#false} call activatePump__before__methaneQuery(); {14682#false} is VALID [2022-02-20 18:07:34,254 INFO L290 TraceCheckUtils]: 67: Hoare triple {14682#false} ~pumpRunning~0 := 1bv32; {14682#false} is VALID [2022-02-20 18:07:34,254 INFO L290 TraceCheckUtils]: 68: Hoare triple {14682#false} assume true; {14682#false} is VALID [2022-02-20 18:07:34,254 INFO L284 TraceCheckUtils]: 69: Hoare quadruple {14682#false} {14682#false} #331#return; {14682#false} is VALID [2022-02-20 18:07:34,254 INFO L290 TraceCheckUtils]: 70: Hoare triple {14682#false} assume { :end_inline_activatePump } true; {14682#false} is VALID [2022-02-20 18:07:34,254 INFO L290 TraceCheckUtils]: 71: Hoare triple {14682#false} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {14682#false} is VALID [2022-02-20 18:07:34,255 INFO L290 TraceCheckUtils]: 72: Hoare triple {14682#false} assume true; {14682#false} is VALID [2022-02-20 18:07:34,255 INFO L284 TraceCheckUtils]: 73: Hoare quadruple {14682#false} {14681#true} #383#return; {14682#false} is VALID [2022-02-20 18:07:34,255 INFO L290 TraceCheckUtils]: 74: Hoare triple {14682#false} assume true; {14682#false} is VALID [2022-02-20 18:07:34,255 INFO L284 TraceCheckUtils]: 75: Hoare quadruple {14682#false} {14681#true} #351#return; {14682#false} is VALID [2022-02-20 18:07:34,255 INFO L290 TraceCheckUtils]: 76: Hoare triple {14682#false} assume { :end_inline_processEnvironment } true; {14682#false} is VALID [2022-02-20 18:07:34,255 INFO L290 TraceCheckUtils]: 77: Hoare triple {14682#false} assume { :begin_inline___utac_acc__Specification1_spec__1 } true;havoc __utac_acc__Specification1_spec__1_#t~ret53#1, __utac_acc__Specification1_spec__1_#t~ret54#1, __utac_acc__Specification1_spec__1_~tmp~10#1, __utac_acc__Specification1_spec__1_~tmp___0~3#1;havoc __utac_acc__Specification1_spec__1_~tmp~10#1;havoc __utac_acc__Specification1_spec__1_~tmp___0~3#1; {14682#false} is VALID [2022-02-20 18:07:34,255 INFO L272 TraceCheckUtils]: 78: Hoare triple {14682#false} call __utac_acc__Specification1_spec__1_#t~ret53#1 := isMethaneLevelCritical(); {14682#false} is VALID [2022-02-20 18:07:34,256 INFO L290 TraceCheckUtils]: 79: Hoare triple {14682#false} havoc ~retValue_acc~9;~retValue_acc~9 := ~methaneLevelCritical~0;#res := ~retValue_acc~9; {14682#false} is VALID [2022-02-20 18:07:34,256 INFO L290 TraceCheckUtils]: 80: Hoare triple {14682#false} assume true; {14682#false} is VALID [2022-02-20 18:07:34,256 INFO L284 TraceCheckUtils]: 81: Hoare quadruple {14682#false} {14682#false} #353#return; {14682#false} is VALID [2022-02-20 18:07:34,256 INFO L290 TraceCheckUtils]: 82: Hoare triple {14682#false} __utac_acc__Specification1_spec__1_~tmp~10#1 := __utac_acc__Specification1_spec__1_#t~ret53#1;havoc __utac_acc__Specification1_spec__1_#t~ret53#1; {14682#false} is VALID [2022-02-20 18:07:34,256 INFO L290 TraceCheckUtils]: 83: Hoare triple {14682#false} assume 0bv32 != __utac_acc__Specification1_spec__1_~tmp~10#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~1#1;havoc isPumpRunning_~retValue_acc~1#1;isPumpRunning_~retValue_acc~1#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~1#1; {14682#false} is VALID [2022-02-20 18:07:34,256 INFO L290 TraceCheckUtils]: 84: Hoare triple {14682#false} __utac_acc__Specification1_spec__1_#t~ret54#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;__utac_acc__Specification1_spec__1_~tmp___0~3#1 := __utac_acc__Specification1_spec__1_#t~ret54#1;havoc __utac_acc__Specification1_spec__1_#t~ret54#1; {14682#false} is VALID [2022-02-20 18:07:34,256 INFO L290 TraceCheckUtils]: 85: Hoare triple {14682#false} assume 0bv32 != __utac_acc__Specification1_spec__1_~tmp___0~3#1;assume { :begin_inline___automaton_fail } true; {14682#false} is VALID [2022-02-20 18:07:34,257 INFO L290 TraceCheckUtils]: 86: Hoare triple {14682#false} assume !false; {14682#false} is VALID [2022-02-20 18:07:34,258 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-02-20 18:07:34,258 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-02-20 18:07:34,259 INFO L144 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-02-20 18:07:34,259 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [898407216] [2022-02-20 18:07:34,259 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleMathsat [898407216] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:07:34,259 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:07:34,259 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-02-20 18:07:34,259 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [297978311] [2022-02-20 18:07:34,259 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:07:34,261 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 13.5) internal successors, (54), 4 states have internal predecessors, (54), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) Word has length 87 [2022-02-20 18:07:34,261 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:07:34,261 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 4 states, 4 states have (on average 13.5) internal successors, (54), 4 states have internal predecessors, (54), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-02-20 18:07:34,313 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 77 edges. 77 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:34,313 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-02-20 18:07:34,313 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-02-20 18:07:34,314 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-02-20 18:07:34,314 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-02-20 18:07:34,314 INFO L87 Difference]: Start difference. First operand 670 states and 912 transitions. Second operand has 4 states, 4 states have (on average 13.5) internal successors, (54), 4 states have internal predecessors, (54), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-02-20 18:07:34,647 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:34,647 INFO L93 Difference]: Finished difference Result 1354 states and 1933 transitions. [2022-02-20 18:07:34,647 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-02-20 18:07:34,648 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 13.5) internal successors, (54), 4 states have internal predecessors, (54), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) Word has length 87 [2022-02-20 18:07:34,648 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:07:34,648 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4 states, 4 states have (on average 13.5) internal successors, (54), 4 states have internal predecessors, (54), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-02-20 18:07:34,651 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 329 transitions. [2022-02-20 18:07:34,651 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4 states, 4 states have (on average 13.5) internal successors, (54), 4 states have internal predecessors, (54), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-02-20 18:07:34,654 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 329 transitions. [2022-02-20 18:07:34,654 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 329 transitions. [2022-02-20 18:07:34,860 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 329 edges. 329 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:34,885 INFO L225 Difference]: With dead ends: 1354 [2022-02-20 18:07:34,885 INFO L226 Difference]: Without dead ends: 706 [2022-02-20 18:07:34,887 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 87 GetRequests, 84 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-02-20 18:07:34,888 INFO L933 BasicCegarLoop]: 172 mSDtfsCounter, 13 mSDsluCounter, 334 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 13 SdHoareTripleChecker+Valid, 506 SdHoareTripleChecker+Invalid, 11 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:07:34,888 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [13 Valid, 506 Invalid, 11 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:07:34,889 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 706 states. [2022-02-20 18:07:34,906 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 706 to 678. [2022-02-20 18:07:34,906 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:07:34,908 INFO L82 GeneralOperation]: Start isEquivalent. First operand 706 states. Second operand has 678 states, 482 states have (on average 1.3112033195020747) internal successors, (632), 547 states have internal predecessors, (632), 122 states have call successors, (122), 73 states have call predecessors, (122), 73 states have return successors, (166), 112 states have call predecessors, (166), 122 states have call successors, (166) [2022-02-20 18:07:34,909 INFO L74 IsIncluded]: Start isIncluded. First operand 706 states. Second operand has 678 states, 482 states have (on average 1.3112033195020747) internal successors, (632), 547 states have internal predecessors, (632), 122 states have call successors, (122), 73 states have call predecessors, (122), 73 states have return successors, (166), 112 states have call predecessors, (166), 122 states have call successors, (166) [2022-02-20 18:07:34,910 INFO L87 Difference]: Start difference. First operand 706 states. Second operand has 678 states, 482 states have (on average 1.3112033195020747) internal successors, (632), 547 states have internal predecessors, (632), 122 states have call successors, (122), 73 states have call predecessors, (122), 73 states have return successors, (166), 112 states have call predecessors, (166), 122 states have call successors, (166) [2022-02-20 18:07:34,931 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:34,931 INFO L93 Difference]: Finished difference Result 706 states and 964 transitions. [2022-02-20 18:07:34,931 INFO L276 IsEmpty]: Start isEmpty. Operand 706 states and 964 transitions. [2022-02-20 18:07:34,933 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:34,933 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:34,935 INFO L74 IsIncluded]: Start isIncluded. First operand has 678 states, 482 states have (on average 1.3112033195020747) internal successors, (632), 547 states have internal predecessors, (632), 122 states have call successors, (122), 73 states have call predecessors, (122), 73 states have return successors, (166), 112 states have call predecessors, (166), 122 states have call successors, (166) Second operand 706 states. [2022-02-20 18:07:34,936 INFO L87 Difference]: Start difference. First operand has 678 states, 482 states have (on average 1.3112033195020747) internal successors, (632), 547 states have internal predecessors, (632), 122 states have call successors, (122), 73 states have call predecessors, (122), 73 states have return successors, (166), 112 states have call predecessors, (166), 122 states have call successors, (166) Second operand 706 states. [2022-02-20 18:07:34,957 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:34,957 INFO L93 Difference]: Finished difference Result 706 states and 964 transitions. [2022-02-20 18:07:34,957 INFO L276 IsEmpty]: Start isEmpty. Operand 706 states and 964 transitions. [2022-02-20 18:07:34,959 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:34,959 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:34,959 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:07:34,960 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:07:34,972 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 678 states, 482 states have (on average 1.3112033195020747) internal successors, (632), 547 states have internal predecessors, (632), 122 states have call successors, (122), 73 states have call predecessors, (122), 73 states have return successors, (166), 112 states have call predecessors, (166), 122 states have call successors, (166) [2022-02-20 18:07:34,998 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 678 states to 678 states and 920 transitions. [2022-02-20 18:07:34,999 INFO L78 Accepts]: Start accepts. Automaton has 678 states and 920 transitions. Word has length 87 [2022-02-20 18:07:35,000 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:07:35,000 INFO L470 AbstractCegarLoop]: Abstraction has 678 states and 920 transitions. [2022-02-20 18:07:35,000 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 13.5) internal successors, (54), 4 states have internal predecessors, (54), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-02-20 18:07:35,001 INFO L276 IsEmpty]: Start isEmpty. Operand 678 states and 920 transitions. [2022-02-20 18:07:35,005 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 88 [2022-02-20 18:07:35,005 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:07:35,006 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:07:35,025 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (8)] Forceful destruction successful, exit code 0 [2022-02-20 18:07:35,213 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-02-20 18:07:35,214 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:07:35,214 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:07:35,214 INFO L85 PathProgramCache]: Analyzing trace with hash -445338471, now seen corresponding path program 1 times [2022-02-20 18:07:35,214 INFO L126 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-02-20 18:07:35,215 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [430065948] [2022-02-20 18:07:35,215 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:07:35,215 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-02-20 18:07:35,215 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-02-20 18:07:35,216 INFO L229 MonitoredProcess]: Starting monitored process 9 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-02-20 18:07:35,218 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (9)] Waiting until timeout for monitored process [2022-02-20 18:07:35,272 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:35,276 INFO L263 TraceCheckSpWp]: Trace formula consists of 256 conjuncts, 4 conjunts are in the unsatisfiable core [2022-02-20 18:07:35,301 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:35,302 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 18:07:35,517 INFO L290 TraceCheckUtils]: 0: Hoare triple {19291#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0bv32, 0bv32;assume 0bv1 == #valid[0bv32];assume ~bvult32(0bv32, #StackHeapBarrier);call #Ultimate.allocInit(2bv32, 1bv32);call write~init~intINTTYPE1(48bv8, 1bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 1bv32, 1bv32, 1bv32);call #Ultimate.allocInit(38bv32, 2bv32);call #Ultimate.allocInit(12bv32, 3bv32);call #Ultimate.allocInit(13bv32, 4bv32);call #Ultimate.allocInit(3bv32, 5bv32);call write~init~intINTTYPE1(79bv8, 5bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(110bv8, 5bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 5bv32, 2bv32, 1bv32);call #Ultimate.allocInit(4bv32, 6bv32);call write~init~intINTTYPE1(79bv8, 6bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 6bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 6bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 6bv32, 3bv32, 1bv32);call #Ultimate.allocInit(7bv32, 7bv32);call write~init~intINTTYPE1(44bv8, 7bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(80bv8, 7bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(117bv8, 7bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(109bv8, 7bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(112bv8, 7bv32, 4bv32, 1bv32);call write~init~intINTTYPE1(58bv8, 7bv32, 5bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 7bv32, 6bv32, 1bv32);call #Ultimate.allocInit(3bv32, 8bv32);call write~init~intINTTYPE1(79bv8, 8bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(110bv8, 8bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 8bv32, 2bv32, 1bv32);call #Ultimate.allocInit(4bv32, 9bv32);call write~init~intINTTYPE1(79bv8, 9bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 9bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 9bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 9bv32, 3bv32, 1bv32);call #Ultimate.allocInit(3bv32, 10bv32);call write~init~intINTTYPE1(41bv8, 10bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(32bv8, 10bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 10bv32, 2bv32, 1bv32);call #Ultimate.allocInit(2bv32, 11bv32);call write~init~intINTTYPE1(10bv8, 11bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 11bv32, 1bv32, 1bv32);call #Ultimate.allocInit(30bv32, 12bv32);call #Ultimate.allocInit(9bv32, 13bv32);call #Ultimate.allocInit(21bv32, 14bv32);call #Ultimate.allocInit(30bv32, 15bv32);call #Ultimate.allocInit(9bv32, 16bv32);call #Ultimate.allocInit(21bv32, 17bv32);call #Ultimate.allocInit(30bv32, 18bv32);call #Ultimate.allocInit(9bv32, 19bv32);call #Ultimate.allocInit(25bv32, 20bv32);call #Ultimate.allocInit(30bv32, 21bv32);call #Ultimate.allocInit(9bv32, 22bv32);call #Ultimate.allocInit(25bv32, 23bv32);call #Ultimate.allocInit(13bv32, 24bv32);call #Ultimate.allocInit(7bv32, 25bv32);call write~init~intINTTYPE1(44bv8, 25bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(77bv8, 25bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(101bv8, 25bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(116bv8, 25bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(104bv8, 25bv32, 4bv32, 1bv32);call write~init~intINTTYPE1(58bv8, 25bv32, 5bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 25bv32, 6bv32, 1bv32);call #Ultimate.allocInit(5bv32, 26bv32);call write~init~intINTTYPE1(67bv8, 26bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(82bv8, 26bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(73bv8, 26bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(84bv8, 26bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 26bv32, 4bv32, 1bv32);call #Ultimate.allocInit(3bv32, 27bv32);call write~init~intINTTYPE1(79bv8, 27bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(75bv8, 27bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 27bv32, 2bv32, 1bv32);call #Ultimate.allocInit(2bv32, 28bv32);call write~init~intINTTYPE1(41bv8, 28bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 28bv32, 1bv32, 1bv32);~__SELECTED_FEATURE_base~0 := 0bv32;~__SELECTED_FEATURE_highWaterSensor~0 := 0bv32;~__SELECTED_FEATURE_lowWaterSensor~0 := 0bv32;~__SELECTED_FEATURE_methaneQuery~0 := 0bv32;~__SELECTED_FEATURE_methaneAlarm~0 := 0bv32;~__SELECTED_FEATURE_stopCommand~0 := 0bv32;~__SELECTED_FEATURE_startCommand~0 := 0bv32;~__GUIDSL_ROOT_PRODUCTION~0 := 0bv32;~pumpRunning~0 := 0bv32;~systemActive~0 := 1bv32;~head~0.base, ~head~0.offset := 0bv32, 0bv32;~waterLevel~0 := 1bv32;~methaneLevelCritical~0 := 0bv32;~cleanupTimeShifts~0 := 4bv32; {19296#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:07:35,518 INFO L290 TraceCheckUtils]: 1: Hoare triple {19296#(= ~waterLevel~0 (_ bv1 32))} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret60#1, main_~retValue_acc~13#1, main_~tmp~11#1;havoc main_~retValue_acc~13#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1bv32; {19296#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:07:35,518 INFO L290 TraceCheckUtils]: 2: Hoare triple {19296#(= ~waterLevel~0 (_ bv1 32))} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret47#1, select_features_#t~ret48#1, select_features_#t~ret49#1, select_features_#t~ret50#1, select_features_#t~ret51#1, select_features_#t~ret52#1;~__SELECTED_FEATURE_base~0 := 1bv32; {19296#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:07:35,518 INFO L272 TraceCheckUtils]: 3: Hoare triple {19296#(= ~waterLevel~0 (_ bv1 32))} call select_features_#t~ret47#1 := select_one(); {19296#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:07:35,519 INFO L290 TraceCheckUtils]: 4: Hoare triple {19296#(= ~waterLevel~0 (_ bv1 32))} havoc ~retValue_acc~7;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {19296#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:07:35,519 INFO L290 TraceCheckUtils]: 5: Hoare triple {19296#(= ~waterLevel~0 (_ bv1 32))} assume true; {19296#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:07:35,520 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {19296#(= ~waterLevel~0 (_ bv1 32))} {19296#(= ~waterLevel~0 (_ bv1 32))} #355#return; {19296#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:07:35,520 INFO L290 TraceCheckUtils]: 7: Hoare triple {19296#(= ~waterLevel~0 (_ bv1 32))} ~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret47#1;havoc select_features_#t~ret47#1; {19296#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:07:35,520 INFO L272 TraceCheckUtils]: 8: Hoare triple {19296#(= ~waterLevel~0 (_ bv1 32))} call select_features_#t~ret48#1 := select_one(); {19296#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:07:35,521 INFO L290 TraceCheckUtils]: 9: Hoare triple {19296#(= ~waterLevel~0 (_ bv1 32))} havoc ~retValue_acc~7;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {19296#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:07:35,521 INFO L290 TraceCheckUtils]: 10: Hoare triple {19296#(= ~waterLevel~0 (_ bv1 32))} assume true; {19296#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:07:35,521 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {19296#(= ~waterLevel~0 (_ bv1 32))} {19296#(= ~waterLevel~0 (_ bv1 32))} #357#return; {19296#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:07:35,522 INFO L290 TraceCheckUtils]: 12: Hoare triple {19296#(= ~waterLevel~0 (_ bv1 32))} ~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret48#1;havoc select_features_#t~ret48#1; {19296#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:07:35,522 INFO L272 TraceCheckUtils]: 13: Hoare triple {19296#(= ~waterLevel~0 (_ bv1 32))} call select_features_#t~ret49#1 := select_one(); {19296#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:07:35,522 INFO L290 TraceCheckUtils]: 14: Hoare triple {19296#(= ~waterLevel~0 (_ bv1 32))} havoc ~retValue_acc~7;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {19296#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:07:35,523 INFO L290 TraceCheckUtils]: 15: Hoare triple {19296#(= ~waterLevel~0 (_ bv1 32))} assume true; {19296#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:07:35,523 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {19296#(= ~waterLevel~0 (_ bv1 32))} {19296#(= ~waterLevel~0 (_ bv1 32))} #359#return; {19296#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:07:35,523 INFO L290 TraceCheckUtils]: 17: Hoare triple {19296#(= ~waterLevel~0 (_ bv1 32))} ~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret49#1;havoc select_features_#t~ret49#1; {19296#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:07:35,524 INFO L272 TraceCheckUtils]: 18: Hoare triple {19296#(= ~waterLevel~0 (_ bv1 32))} call select_features_#t~ret50#1 := select_one(); {19296#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:07:35,524 INFO L290 TraceCheckUtils]: 19: Hoare triple {19296#(= ~waterLevel~0 (_ bv1 32))} havoc ~retValue_acc~7;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {19296#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:07:35,524 INFO L290 TraceCheckUtils]: 20: Hoare triple {19296#(= ~waterLevel~0 (_ bv1 32))} assume true; {19296#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:07:35,525 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {19296#(= ~waterLevel~0 (_ bv1 32))} {19296#(= ~waterLevel~0 (_ bv1 32))} #361#return; {19296#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:07:35,525 INFO L290 TraceCheckUtils]: 22: Hoare triple {19296#(= ~waterLevel~0 (_ bv1 32))} ~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret50#1;havoc select_features_#t~ret50#1; {19296#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:07:35,525 INFO L272 TraceCheckUtils]: 23: Hoare triple {19296#(= ~waterLevel~0 (_ bv1 32))} call select_features_#t~ret51#1 := select_one(); {19296#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:07:35,526 INFO L290 TraceCheckUtils]: 24: Hoare triple {19296#(= ~waterLevel~0 (_ bv1 32))} havoc ~retValue_acc~7;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {19296#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:07:35,526 INFO L290 TraceCheckUtils]: 25: Hoare triple {19296#(= ~waterLevel~0 (_ bv1 32))} assume true; {19296#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:07:35,526 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {19296#(= ~waterLevel~0 (_ bv1 32))} {19296#(= ~waterLevel~0 (_ bv1 32))} #363#return; {19296#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:07:35,527 INFO L290 TraceCheckUtils]: 27: Hoare triple {19296#(= ~waterLevel~0 (_ bv1 32))} ~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret51#1;havoc select_features_#t~ret51#1; {19296#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:07:35,527 INFO L272 TraceCheckUtils]: 28: Hoare triple {19296#(= ~waterLevel~0 (_ bv1 32))} call select_features_#t~ret52#1 := select_one(); {19296#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:07:35,527 INFO L290 TraceCheckUtils]: 29: Hoare triple {19296#(= ~waterLevel~0 (_ bv1 32))} havoc ~retValue_acc~7;~choice~0 := #t~nondet46;havoc #t~nondet46;~retValue_acc~7 := ~choice~0;#res := ~retValue_acc~7; {19296#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:07:35,528 INFO L290 TraceCheckUtils]: 30: Hoare triple {19296#(= ~waterLevel~0 (_ bv1 32))} assume true; {19296#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:07:35,528 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {19296#(= ~waterLevel~0 (_ bv1 32))} {19296#(= ~waterLevel~0 (_ bv1 32))} #365#return; {19296#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:07:35,528 INFO L290 TraceCheckUtils]: 32: Hoare triple {19296#(= ~waterLevel~0 (_ bv1 32))} ~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret52#1;havoc select_features_#t~ret52#1; {19296#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:07:35,529 INFO L290 TraceCheckUtils]: 33: Hoare triple {19296#(= ~waterLevel~0 (_ bv1 32))} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~8#1;havoc valid_product_~retValue_acc~8#1;valid_product_~retValue_acc~8#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~8#1; {19296#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:07:35,529 INFO L290 TraceCheckUtils]: 34: Hoare triple {19296#(= ~waterLevel~0 (_ bv1 32))} main_#t~ret60#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret60#1;havoc main_#t~ret60#1; {19296#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:07:35,529 INFO L290 TraceCheckUtils]: 35: Hoare triple {19296#(= ~waterLevel~0 (_ bv1 32))} assume 0bv32 != main_~tmp~11#1;assume { :begin_inline_setup } true; {19296#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:07:35,530 INFO L290 TraceCheckUtils]: 36: Hoare triple {19296#(= ~waterLevel~0 (_ bv1 32))} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet4#1, test_#t~nondet5#1, test_#t~nondet6#1, test_#t~nondet7#1, test_~splverifierCounter~0#1, test_~tmp~0#1, test_~tmp___0~0#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~0#1;havoc test_~tmp___0~0#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0bv32; {19296#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:07:35,535 INFO L290 TraceCheckUtils]: 37: Hoare triple {19296#(= ~waterLevel~0 (_ bv1 32))} assume !false; {19296#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:07:35,537 INFO L290 TraceCheckUtils]: 38: Hoare triple {19296#(= ~waterLevel~0 (_ bv1 32))} assume ~bvslt32(test_~splverifierCounter~0#1, 4bv32); {19296#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:07:35,537 INFO L290 TraceCheckUtils]: 39: Hoare triple {19296#(= ~waterLevel~0 (_ bv1 32))} test_~tmp~0#1 := test_#t~nondet4#1;havoc test_#t~nondet4#1; {19296#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:07:35,537 INFO L290 TraceCheckUtils]: 40: Hoare triple {19296#(= ~waterLevel~0 (_ bv1 32))} assume !(0bv32 != test_~tmp~0#1); {19296#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:07:35,538 INFO L290 TraceCheckUtils]: 41: Hoare triple {19296#(= ~waterLevel~0 (_ bv1 32))} test_~tmp___0~0#1 := test_#t~nondet5#1;havoc test_#t~nondet5#1; {19296#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:07:35,538 INFO L290 TraceCheckUtils]: 42: Hoare triple {19296#(= ~waterLevel~0 (_ bv1 32))} assume 0bv32 != test_~tmp___0~0#1; {19296#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:07:35,538 INFO L272 TraceCheckUtils]: 43: Hoare triple {19296#(= ~waterLevel~0 (_ bv1 32))} call changeMethaneLevel(); {19296#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:07:35,539 INFO L290 TraceCheckUtils]: 44: Hoare triple {19296#(= ~waterLevel~0 (_ bv1 32))} assume !(0bv32 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1bv32; {19296#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:07:35,539 INFO L290 TraceCheckUtils]: 45: Hoare triple {19296#(= ~waterLevel~0 (_ bv1 32))} assume true; {19296#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:07:35,539 INFO L284 TraceCheckUtils]: 46: Hoare quadruple {19296#(= ~waterLevel~0 (_ bv1 32))} {19296#(= ~waterLevel~0 (_ bv1 32))} #369#return; {19296#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:07:35,540 INFO L290 TraceCheckUtils]: 47: Hoare triple {19296#(= ~waterLevel~0 (_ bv1 32))} test_~tmp___2~0#1 := test_#t~nondet6#1;havoc test_#t~nondet6#1; {19296#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:07:35,540 INFO L290 TraceCheckUtils]: 48: Hoare triple {19296#(= ~waterLevel~0 (_ bv1 32))} assume !(0bv32 != test_~tmp___2~0#1);test_~tmp___1~0#1 := test_#t~nondet7#1;havoc test_#t~nondet7#1; {19296#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:07:35,540 INFO L290 TraceCheckUtils]: 49: Hoare triple {19296#(= ~waterLevel~0 (_ bv1 32))} assume !(0bv32 != test_~tmp___1~0#1); {19296#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:07:35,541 INFO L272 TraceCheckUtils]: 50: Hoare triple {19296#(= ~waterLevel~0 (_ bv1 32))} call timeShift(); {19296#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:07:35,541 INFO L290 TraceCheckUtils]: 51: Hoare triple {19296#(= ~waterLevel~0 (_ bv1 32))} assume !(0bv32 != ~pumpRunning~0); {19296#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:07:35,541 INFO L290 TraceCheckUtils]: 52: Hoare triple {19296#(= ~waterLevel~0 (_ bv1 32))} assume 0bv32 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {19296#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:07:35,541 INFO L290 TraceCheckUtils]: 53: Hoare triple {19296#(= ~waterLevel~0 (_ bv1 32))} assume !(0bv32 != ~__SELECTED_FEATURE_methaneAlarm~0); {19296#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:07:35,542 INFO L272 TraceCheckUtils]: 54: Hoare triple {19296#(= ~waterLevel~0 (_ bv1 32))} call processEnvironment__before__methaneAlarm(); {19296#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:07:35,542 INFO L290 TraceCheckUtils]: 55: Hoare triple {19296#(= ~waterLevel~0 (_ bv1 32))} assume !(0bv32 != ~__SELECTED_FEATURE_lowWaterSensor~0); {19296#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:07:35,543 INFO L272 TraceCheckUtils]: 56: Hoare triple {19296#(= ~waterLevel~0 (_ bv1 32))} call processEnvironment__before__lowWaterSensor(); {19296#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:07:35,546 INFO L290 TraceCheckUtils]: 57: Hoare triple {19296#(= ~waterLevel~0 (_ bv1 32))} assume 0bv32 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret8#1, processEnvironment__role__highWaterSensor_~tmp~1#1;havoc processEnvironment__role__highWaterSensor_~tmp~1#1; {19296#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:07:35,547 INFO L290 TraceCheckUtils]: 58: Hoare triple {19296#(= ~waterLevel~0 (_ bv1 32))} assume 0bv32 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret21#1, isHighWaterLevel_~retValue_acc~2#1, isHighWaterLevel_~tmp~5#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~2#1;havoc isHighWaterLevel_~tmp~5#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {19296#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:07:35,547 INFO L290 TraceCheckUtils]: 59: Hoare triple {19296#(= ~waterLevel~0 (_ bv1 32))} assume !~bvslt32(~waterLevel~0, 2bv32);isHighWaterSensorDry_~retValue_acc~11#1 := 0bv32;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {19292#false} is VALID [2022-02-20 18:07:35,547 INFO L290 TraceCheckUtils]: 60: Hoare triple {19292#false} isHighWaterLevel_#t~ret21#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;isHighWaterLevel_~tmp~5#1 := isHighWaterLevel_#t~ret21#1;havoc isHighWaterLevel_#t~ret21#1; {19292#false} is VALID [2022-02-20 18:07:35,547 INFO L290 TraceCheckUtils]: 61: Hoare triple {19292#false} assume !(0bv32 != isHighWaterLevel_~tmp~5#1);isHighWaterLevel_~tmp___0~1#1 := 1bv32; {19292#false} is VALID [2022-02-20 18:07:35,547 INFO L290 TraceCheckUtils]: 62: Hoare triple {19292#false} isHighWaterLevel_~retValue_acc~2#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~2#1; {19292#false} is VALID [2022-02-20 18:07:35,548 INFO L290 TraceCheckUtils]: 63: Hoare triple {19292#false} processEnvironment__role__highWaterSensor_#t~ret8#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;processEnvironment__role__highWaterSensor_~tmp~1#1 := processEnvironment__role__highWaterSensor_#t~ret8#1;havoc processEnvironment__role__highWaterSensor_#t~ret8#1; {19292#false} is VALID [2022-02-20 18:07:35,548 INFO L290 TraceCheckUtils]: 64: Hoare triple {19292#false} assume 0bv32 != processEnvironment__role__highWaterSensor_~tmp~1#1;assume { :begin_inline_activatePump } true; {19292#false} is VALID [2022-02-20 18:07:35,548 INFO L290 TraceCheckUtils]: 65: Hoare triple {19292#false} assume !(0bv32 != ~__SELECTED_FEATURE_methaneQuery~0); {19292#false} is VALID [2022-02-20 18:07:35,548 INFO L272 TraceCheckUtils]: 66: Hoare triple {19292#false} call activatePump__before__methaneQuery(); {19292#false} is VALID [2022-02-20 18:07:35,548 INFO L290 TraceCheckUtils]: 67: Hoare triple {19292#false} ~pumpRunning~0 := 1bv32; {19292#false} is VALID [2022-02-20 18:07:35,548 INFO L290 TraceCheckUtils]: 68: Hoare triple {19292#false} assume true; {19292#false} is VALID [2022-02-20 18:07:35,548 INFO L284 TraceCheckUtils]: 69: Hoare quadruple {19292#false} {19292#false} #331#return; {19292#false} is VALID [2022-02-20 18:07:35,548 INFO L290 TraceCheckUtils]: 70: Hoare triple {19292#false} assume { :end_inline_activatePump } true; {19292#false} is VALID [2022-02-20 18:07:35,549 INFO L290 TraceCheckUtils]: 71: Hoare triple {19292#false} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {19292#false} is VALID [2022-02-20 18:07:35,549 INFO L290 TraceCheckUtils]: 72: Hoare triple {19292#false} assume true; {19292#false} is VALID [2022-02-20 18:07:35,549 INFO L284 TraceCheckUtils]: 73: Hoare quadruple {19292#false} {19296#(= ~waterLevel~0 (_ bv1 32))} #383#return; {19292#false} is VALID [2022-02-20 18:07:35,549 INFO L290 TraceCheckUtils]: 74: Hoare triple {19292#false} assume true; {19292#false} is VALID [2022-02-20 18:07:35,549 INFO L284 TraceCheckUtils]: 75: Hoare quadruple {19292#false} {19296#(= ~waterLevel~0 (_ bv1 32))} #351#return; {19292#false} is VALID [2022-02-20 18:07:35,549 INFO L290 TraceCheckUtils]: 76: Hoare triple {19292#false} assume { :end_inline_processEnvironment } true; {19292#false} is VALID [2022-02-20 18:07:35,549 INFO L290 TraceCheckUtils]: 77: Hoare triple {19292#false} assume { :begin_inline___utac_acc__Specification1_spec__1 } true;havoc __utac_acc__Specification1_spec__1_#t~ret53#1, __utac_acc__Specification1_spec__1_#t~ret54#1, __utac_acc__Specification1_spec__1_~tmp~10#1, __utac_acc__Specification1_spec__1_~tmp___0~3#1;havoc __utac_acc__Specification1_spec__1_~tmp~10#1;havoc __utac_acc__Specification1_spec__1_~tmp___0~3#1; {19292#false} is VALID [2022-02-20 18:07:35,549 INFO L272 TraceCheckUtils]: 78: Hoare triple {19292#false} call __utac_acc__Specification1_spec__1_#t~ret53#1 := isMethaneLevelCritical(); {19292#false} is VALID [2022-02-20 18:07:35,550 INFO L290 TraceCheckUtils]: 79: Hoare triple {19292#false} havoc ~retValue_acc~9;~retValue_acc~9 := ~methaneLevelCritical~0;#res := ~retValue_acc~9; {19292#false} is VALID [2022-02-20 18:07:35,550 INFO L290 TraceCheckUtils]: 80: Hoare triple {19292#false} assume true; {19292#false} is VALID [2022-02-20 18:07:35,550 INFO L284 TraceCheckUtils]: 81: Hoare quadruple {19292#false} {19292#false} #353#return; {19292#false} is VALID [2022-02-20 18:07:35,550 INFO L290 TraceCheckUtils]: 82: Hoare triple {19292#false} __utac_acc__Specification1_spec__1_~tmp~10#1 := __utac_acc__Specification1_spec__1_#t~ret53#1;havoc __utac_acc__Specification1_spec__1_#t~ret53#1; {19292#false} is VALID [2022-02-20 18:07:35,550 INFO L290 TraceCheckUtils]: 83: Hoare triple {19292#false} assume 0bv32 != __utac_acc__Specification1_spec__1_~tmp~10#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~1#1;havoc isPumpRunning_~retValue_acc~1#1;isPumpRunning_~retValue_acc~1#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~1#1; {19292#false} is VALID [2022-02-20 18:07:35,550 INFO L290 TraceCheckUtils]: 84: Hoare triple {19292#false} __utac_acc__Specification1_spec__1_#t~ret54#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;__utac_acc__Specification1_spec__1_~tmp___0~3#1 := __utac_acc__Specification1_spec__1_#t~ret54#1;havoc __utac_acc__Specification1_spec__1_#t~ret54#1; {19292#false} is VALID [2022-02-20 18:07:35,550 INFO L290 TraceCheckUtils]: 85: Hoare triple {19292#false} assume 0bv32 != __utac_acc__Specification1_spec__1_~tmp___0~3#1;assume { :begin_inline___automaton_fail } true; {19292#false} is VALID [2022-02-20 18:07:35,550 INFO L290 TraceCheckUtils]: 86: Hoare triple {19292#false} assume !false; {19292#false} is VALID [2022-02-20 18:07:35,552 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-02-20 18:07:35,552 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-02-20 18:07:35,552 INFO L144 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-02-20 18:07:35,552 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [430065948] [2022-02-20 18:07:35,552 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleMathsat [430065948] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:07:35,552 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:07:35,552 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-02-20 18:07:35,552 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1278021516] [2022-02-20 18:07:35,553 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:07:35,553 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 18.0) internal successors, (54), 2 states have internal predecessors, (54), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) Word has length 87 [2022-02-20 18:07:35,553 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:07:35,553 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 3 states, 3 states have (on average 18.0) internal successors, (54), 2 states have internal predecessors, (54), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-02-20 18:07:35,625 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 77 edges. 77 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:35,625 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-02-20 18:07:35,625 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-02-20 18:07:35,626 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-02-20 18:07:35,626 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:07:35,626 INFO L87 Difference]: Start difference. First operand 678 states and 920 transitions. Second operand has 3 states, 3 states have (on average 18.0) internal successors, (54), 2 states have internal predecessors, (54), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-02-20 18:07:35,950 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:35,950 INFO L93 Difference]: Finished difference Result 1578 states and 2169 transitions. [2022-02-20 18:07:35,951 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-02-20 18:07:35,951 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 18.0) internal successors, (54), 2 states have internal predecessors, (54), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) Word has length 87 [2022-02-20 18:07:35,951 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:07:35,951 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 18.0) internal successors, (54), 2 states have internal predecessors, (54), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-02-20 18:07:35,955 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 397 transitions. [2022-02-20 18:07:35,956 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 18.0) internal successors, (54), 2 states have internal predecessors, (54), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-02-20 18:07:35,959 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 397 transitions. [2022-02-20 18:07:35,960 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 397 transitions. [2022-02-20 18:07:36,316 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 397 edges. 397 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:36,359 INFO L225 Difference]: With dead ends: 1578 [2022-02-20 18:07:36,359 INFO L226 Difference]: Without dead ends: 922 [2022-02-20 18:07:36,362 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 86 GetRequests, 85 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:07:36,363 INFO L933 BasicCegarLoop]: 177 mSDtfsCounter, 56 mSDsluCounter, 135 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 56 SdHoareTripleChecker+Valid, 312 SdHoareTripleChecker+Invalid, 10 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:07:36,363 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [56 Valid, 312 Invalid, 10 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:07:36,364 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 922 states. [2022-02-20 18:07:36,381 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 922 to 922. [2022-02-20 18:07:36,382 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:07:36,384 INFO L82 GeneralOperation]: Start isEquivalent. First operand 922 states. Second operand has 922 states, 662 states have (on average 1.2900302114803626) internal successors, (854), 743 states have internal predecessors, (854), 162 states have call successors, (162), 101 states have call predecessors, (162), 97 states have return successors, (208), 148 states have call predecessors, (208), 162 states have call successors, (208) [2022-02-20 18:07:36,385 INFO L74 IsIncluded]: Start isIncluded. First operand 922 states. Second operand has 922 states, 662 states have (on average 1.2900302114803626) internal successors, (854), 743 states have internal predecessors, (854), 162 states have call successors, (162), 101 states have call predecessors, (162), 97 states have return successors, (208), 148 states have call predecessors, (208), 162 states have call successors, (208) [2022-02-20 18:07:36,387 INFO L87 Difference]: Start difference. First operand 922 states. Second operand has 922 states, 662 states have (on average 1.2900302114803626) internal successors, (854), 743 states have internal predecessors, (854), 162 states have call successors, (162), 101 states have call predecessors, (162), 97 states have return successors, (208), 148 states have call predecessors, (208), 162 states have call successors, (208) [2022-02-20 18:07:36,417 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:36,417 INFO L93 Difference]: Finished difference Result 922 states and 1224 transitions. [2022-02-20 18:07:36,417 INFO L276 IsEmpty]: Start isEmpty. Operand 922 states and 1224 transitions. [2022-02-20 18:07:36,419 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:36,420 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:36,421 INFO L74 IsIncluded]: Start isIncluded. First operand has 922 states, 662 states have (on average 1.2900302114803626) internal successors, (854), 743 states have internal predecessors, (854), 162 states have call successors, (162), 101 states have call predecessors, (162), 97 states have return successors, (208), 148 states have call predecessors, (208), 162 states have call successors, (208) Second operand 922 states. [2022-02-20 18:07:36,422 INFO L87 Difference]: Start difference. First operand has 922 states, 662 states have (on average 1.2900302114803626) internal successors, (854), 743 states have internal predecessors, (854), 162 states have call successors, (162), 101 states have call predecessors, (162), 97 states have return successors, (208), 148 states have call predecessors, (208), 162 states have call successors, (208) Second operand 922 states. [2022-02-20 18:07:36,452 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:36,452 INFO L93 Difference]: Finished difference Result 922 states and 1224 transitions. [2022-02-20 18:07:36,452 INFO L276 IsEmpty]: Start isEmpty. Operand 922 states and 1224 transitions. [2022-02-20 18:07:36,454 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:36,454 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:36,454 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:07:36,454 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:07:36,456 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 922 states, 662 states have (on average 1.2900302114803626) internal successors, (854), 743 states have internal predecessors, (854), 162 states have call successors, (162), 101 states have call predecessors, (162), 97 states have return successors, (208), 148 states have call predecessors, (208), 162 states have call successors, (208) [2022-02-20 18:07:36,496 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 922 states to 922 states and 1224 transitions. [2022-02-20 18:07:36,496 INFO L78 Accepts]: Start accepts. Automaton has 922 states and 1224 transitions. Word has length 87 [2022-02-20 18:07:36,497 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:07:36,497 INFO L470 AbstractCegarLoop]: Abstraction has 922 states and 1224 transitions. [2022-02-20 18:07:36,497 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 18.0) internal successors, (54), 2 states have internal predecessors, (54), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-02-20 18:07:36,497 INFO L276 IsEmpty]: Start isEmpty. Operand 922 states and 1224 transitions. [2022-02-20 18:07:36,499 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 92 [2022-02-20 18:07:36,499 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:07:36,499 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:07:36,509 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (9)] Forceful destruction successful, exit code 0 [2022-02-20 18:07:36,706 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 9 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-02-20 18:07:36,707 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:07:36,708 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:07:36,708 INFO L85 PathProgramCache]: Analyzing trace with hash -1958821133, now seen corresponding path program 1 times [2022-02-20 18:07:36,708 INFO L126 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-02-20 18:07:36,708 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [514849412] [2022-02-20 18:07:36,708 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:07:36,708 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-02-20 18:07:36,709 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-02-20 18:07:36,710 INFO L229 MonitoredProcess]: Starting monitored process 10 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-02-20 18:07:36,711 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (10)] Waiting until timeout for monitored process [2022-02-20 18:07:36,792 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-02-20 18:07:36,792 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-02-20 18:07:36,858 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-02-20 18:07:37,015 INFO L138 FreeRefinementEngine]: Strategy WOLF found a feasible trace [2022-02-20 18:07:37,016 INFO L628 BasicCegarLoop]: Counterexample is feasible [2022-02-20 18:07:37,016 INFO L764 garLoopResultBuilder]: Registering result UNSAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-02-20 18:07:37,041 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (10)] Forceful destruction successful, exit code 0 [2022-02-20 18:07:37,225 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-02-20 18:07:37,228 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:07:37,231 INFO L180 ceAbstractionStarter]: Computing trace abstraction results [2022-02-20 18:07:37,268 FATAL L489 DefaultTranslator]: Callstack has procedure call flag but succeeding procedure is empty at [CALL] call #t~ret47 := select_one(); [2022-02-20 18:07:37,269 FATAL L? ?]: The Plugin de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction has thrown an exception: java.lang.AssertionError: callstack broken after backtranslation by InlinerBacktranslator at de.uni_freiburg.informatik.ultimate.boogie.procedureinliner.backtranslation.InlinerBacktranslator.translateProgramExecution(InlinerBacktranslator.java:230) at de.uni_freiburg.informatik.ultimate.core.coreplugin.services.ModelTranslationContainer.translateProgramExecution(ModelTranslationContainer.java:216) at de.uni_freiburg.informatik.ultimate.core.coreplugin.services.ModelTranslationContainer.translateProgramExecution(ModelTranslationContainer.java:225) at de.uni_freiburg.informatik.ultimate.core.coreplugin.services.ModelTranslationContainer.translateProgramExecution(ModelTranslationContainer.java:225) at de.uni_freiburg.informatik.ultimate.core.coreplugin.services.ModelTranslationContainer.translateProgramExecution(ModelTranslationContainer.java:206) at de.uni_freiburg.informatik.ultimate.core.lib.results.CounterExampleResult.getProgramExecutionAsString(CounterExampleResult.java:155) at de.uni_freiburg.informatik.ultimate.core.lib.results.CounterExampleResult.getLongDescription(CounterExampleResult.java:134) at de.uni_freiburg.informatik.ultimate.core.coreplugin.services.ResultService.reportResult(ResultService.java:86) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.CegarLoopResultReporter.reportResult(CegarLoopResultReporter.java:141) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionStarter.reportLocationResults(TraceAbstractionStarter.java:607) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionStarter.runCegarLoops(TraceAbstractionStarter.java:182) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionStarter.(TraceAbstractionStarter.java:156) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver.finish(TraceAbstractionObserver.java:123) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.runObserver(PluginConnector.java:168) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.runTool(PluginConnector.java:151) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.run(PluginConnector.java:128) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.executePluginConnector(ToolchainWalker.java:232) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.processPlugin(ToolchainWalker.java:226) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.walkUnprotected(ToolchainWalker.java:142) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.walk(ToolchainWalker.java:104) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainManager$Toolchain.processToolchain(ToolchainManager.java:320) at de.uni_freiburg.informatik.ultimate.core.coreplugin.toolchain.DefaultToolchainJob.run(DefaultToolchainJob.java:145) at org.eclipse.core.internal.jobs.Worker.run(Worker.java:63) [2022-02-20 18:07:37,271 INFO L158 Benchmark]: Toolchain (without parser) took 13853.66ms. Allocated memory was 65.0MB in the beginning and 197.1MB in the end (delta: 132.1MB). Free memory was 44.6MB in the beginning and 150.5MB in the end (delta: -105.9MB). Peak memory consumption was 26.0MB. Max. memory is 16.1GB. [2022-02-20 18:07:37,272 INFO L158 Benchmark]: CDTParser took 0.15ms. Allocated memory is still 65.0MB. Free memory was 47.0MB in the beginning and 46.9MB in the end (delta: 48.7kB). There was no memory consumed. Max. memory is 16.1GB. [2022-02-20 18:07:37,272 INFO L158 Benchmark]: CACSL2BoogieTranslator took 672.65ms. Allocated memory was 65.0MB in the beginning and 88.1MB in the end (delta: 23.1MB). Free memory was 44.3MB in the beginning and 67.3MB in the end (delta: -23.0MB). Peak memory consumption was 15.3MB. Max. memory is 16.1GB. [2022-02-20 18:07:37,272 INFO L158 Benchmark]: Boogie Procedure Inliner took 66.43ms. Allocated memory is still 88.1MB. Free memory was 67.3MB in the beginning and 64.1MB in the end (delta: 3.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-02-20 18:07:37,272 INFO L158 Benchmark]: Boogie Preprocessor took 38.44ms. Allocated memory is still 88.1MB. Free memory was 64.1MB in the beginning and 62.0MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-02-20 18:07:37,273 INFO L158 Benchmark]: RCFGBuilder took 441.84ms. Allocated memory is still 88.1MB. Free memory was 62.0MB in the beginning and 64.5MB in the end (delta: -2.5MB). Peak memory consumption was 18.0MB. Max. memory is 16.1GB. [2022-02-20 18:07:37,273 INFO L158 Benchmark]: TraceAbstraction took 12625.32ms. Allocated memory was 88.1MB in the beginning and 197.1MB in the end (delta: 109.1MB). Free memory was 63.9MB in the beginning and 150.5MB in the end (delta: -86.7MB). Peak memory consumption was 22.1MB. Max. memory is 16.1GB. [2022-02-20 18:07:37,274 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - AssertionsEnabledResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.15ms. Allocated memory is still 65.0MB. Free memory was 47.0MB in the beginning and 46.9MB in the end (delta: 48.7kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 672.65ms. Allocated memory was 65.0MB in the beginning and 88.1MB in the end (delta: 23.1MB). Free memory was 44.3MB in the beginning and 67.3MB in the end (delta: -23.0MB). Peak memory consumption was 15.3MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 66.43ms. Allocated memory is still 88.1MB. Free memory was 67.3MB in the beginning and 64.1MB in the end (delta: 3.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 38.44ms. Allocated memory is still 88.1MB. Free memory was 64.1MB in the beginning and 62.0MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 441.84ms. Allocated memory is still 88.1MB. Free memory was 62.0MB in the beginning and 64.5MB in the end (delta: -2.5MB). Peak memory consumption was 18.0MB. Max. memory is 16.1GB. * TraceAbstraction took 12625.32ms. Allocated memory was 88.1MB in the beginning and 197.1MB in the end (delta: 109.1MB). Free memory was 63.9MB in the beginning and 150.5MB in the end (delta: -86.7MB). Peak memory consumption was 22.1MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - ExceptionOrErrorResult: AssertionError: callstack broken after backtranslation by InlinerBacktranslator de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: AssertionError: callstack broken after backtranslation by InlinerBacktranslator: de.uni_freiburg.informatik.ultimate.boogie.procedureinliner.backtranslation.InlinerBacktranslator.translateProgramExecution(InlinerBacktranslator.java:230) RESULT: Ultimate could not prove your program: Toolchain returned no result. [2022-02-20 18:07:37,308 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: ERROR: ExceptionOrErrorResult: AssertionError: callstack broken after backtranslation by InlinerBacktranslator