./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec2_product39.cil.c --full-output -ea --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 03d7b7b3 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -ea -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec2_product39.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash faabc130c8aadbb7390121b68f1c41e161e50da9443e348cb1c3db1c45e9e0cb --- Real Ultimate output --- This is Ultimate 0.2.2-dev-03d7b7b [2022-02-20 18:07:32,391 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-02-20 18:07:32,403 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-02-20 18:07:32,437 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-02-20 18:07:32,438 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-02-20 18:07:32,441 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-02-20 18:07:32,442 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-02-20 18:07:32,444 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-02-20 18:07:32,445 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-02-20 18:07:32,451 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-02-20 18:07:32,452 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-02-20 18:07:32,453 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-02-20 18:07:32,453 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-02-20 18:07:32,455 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-02-20 18:07:32,456 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-02-20 18:07:32,459 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-02-20 18:07:32,460 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-02-20 18:07:32,460 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-02-20 18:07:32,462 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-02-20 18:07:32,467 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-02-20 18:07:32,468 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-02-20 18:07:32,469 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-02-20 18:07:32,470 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-02-20 18:07:32,470 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-02-20 18:07:32,475 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-02-20 18:07:32,475 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-02-20 18:07:32,475 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-02-20 18:07:32,476 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-02-20 18:07:32,477 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-02-20 18:07:32,477 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-02-20 18:07:32,477 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-02-20 18:07:32,478 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-02-20 18:07:32,479 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-02-20 18:07:32,480 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-02-20 18:07:32,481 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-02-20 18:07:32,481 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-02-20 18:07:32,481 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-02-20 18:07:32,481 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-02-20 18:07:32,482 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-02-20 18:07:32,482 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-02-20 18:07:32,483 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-02-20 18:07:32,483 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-02-20 18:07:32,506 INFO L113 SettingsManager]: Loading preferences was successful [2022-02-20 18:07:32,507 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-02-20 18:07:32,507 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-02-20 18:07:32,507 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-02-20 18:07:32,508 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-02-20 18:07:32,508 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-02-20 18:07:32,508 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-02-20 18:07:32,509 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-02-20 18:07:32,509 INFO L138 SettingsManager]: * Use SBE=true [2022-02-20 18:07:32,509 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-02-20 18:07:32,510 INFO L138 SettingsManager]: * sizeof long=4 [2022-02-20 18:07:32,510 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-02-20 18:07:32,510 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-02-20 18:07:32,510 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-02-20 18:07:32,510 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-02-20 18:07:32,510 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-02-20 18:07:32,510 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-02-20 18:07:32,511 INFO L138 SettingsManager]: * sizeof long double=12 [2022-02-20 18:07:32,511 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-02-20 18:07:32,511 INFO L138 SettingsManager]: * Use constant arrays=true [2022-02-20 18:07:32,511 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-02-20 18:07:32,511 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-02-20 18:07:32,511 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-02-20 18:07:32,512 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-02-20 18:07:32,512 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-02-20 18:07:32,512 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-02-20 18:07:32,512 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-02-20 18:07:32,512 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-02-20 18:07:32,512 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-02-20 18:07:32,512 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-02-20 18:07:32,513 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2022-02-20 18:07:32,513 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-02-20 18:07:32,513 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-02-20 18:07:32,513 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> faabc130c8aadbb7390121b68f1c41e161e50da9443e348cb1c3db1c45e9e0cb [2022-02-20 18:07:32,709 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-02-20 18:07:32,723 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-02-20 18:07:32,725 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-02-20 18:07:32,726 INFO L271 PluginConnector]: Initializing CDTParser... [2022-02-20 18:07:32,726 INFO L275 PluginConnector]: CDTParser initialized [2022-02-20 18:07:32,727 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec2_product39.cil.c [2022-02-20 18:07:32,766 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/302d84144/c179dcf49c90437d917a62c3bc455934/FLAG0e26d7fa5 [2022-02-20 18:07:33,135 INFO L306 CDTParser]: Found 1 translation units. [2022-02-20 18:07:33,135 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product39.cil.c [2022-02-20 18:07:33,148 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/302d84144/c179dcf49c90437d917a62c3bc455934/FLAG0e26d7fa5 [2022-02-20 18:07:33,535 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/302d84144/c179dcf49c90437d917a62c3bc455934 [2022-02-20 18:07:33,537 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-02-20 18:07:33,538 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-02-20 18:07:33,546 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-02-20 18:07:33,547 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-02-20 18:07:33,549 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-02-20 18:07:33,550 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.02 06:07:33" (1/1) ... [2022-02-20 18:07:33,551 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@72ba0db6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:07:33, skipping insertion in model container [2022-02-20 18:07:33,551 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.02 06:07:33" (1/1) ... [2022-02-20 18:07:33,555 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-02-20 18:07:33,581 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-02-20 18:07:33,801 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product39.cil.c[5087,5100] [2022-02-20 18:07:33,885 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-02-20 18:07:33,900 INFO L203 MainTranslator]: Completed pre-run [2022-02-20 18:07:33,932 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product39.cil.c[5087,5100] [2022-02-20 18:07:33,980 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-02-20 18:07:33,996 INFO L208 MainTranslator]: Completed translation [2022-02-20 18:07:33,997 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:07:33 WrapperNode [2022-02-20 18:07:33,997 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-02-20 18:07:33,998 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-02-20 18:07:33,998 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-02-20 18:07:33,998 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-02-20 18:07:34,002 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:07:33" (1/1) ... [2022-02-20 18:07:34,013 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:07:33" (1/1) ... [2022-02-20 18:07:34,042 INFO L137 Inliner]: procedures = 55, calls = 156, calls flagged for inlining = 22, calls inlined = 19, statements flattened = 250 [2022-02-20 18:07:34,043 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-02-20 18:07:34,043 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-02-20 18:07:34,044 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-02-20 18:07:34,044 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-02-20 18:07:34,049 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:07:33" (1/1) ... [2022-02-20 18:07:34,050 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:07:33" (1/1) ... [2022-02-20 18:07:34,052 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:07:33" (1/1) ... [2022-02-20 18:07:34,052 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:07:33" (1/1) ... [2022-02-20 18:07:34,065 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:07:33" (1/1) ... [2022-02-20 18:07:34,071 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:07:33" (1/1) ... [2022-02-20 18:07:34,080 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:07:33" (1/1) ... [2022-02-20 18:07:34,083 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-02-20 18:07:34,083 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-02-20 18:07:34,083 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-02-20 18:07:34,084 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-02-20 18:07:34,084 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:07:33" (1/1) ... [2022-02-20 18:07:34,089 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-02-20 18:07:34,104 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-20 18:07:34,115 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-02-20 18:07:34,116 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-02-20 18:07:34,142 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-02-20 18:07:34,142 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-02-20 18:07:34,142 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-02-20 18:07:34,143 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-02-20 18:07:34,143 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-02-20 18:07:34,143 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-02-20 18:07:34,143 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-02-20 18:07:34,143 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-02-20 18:07:34,147 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-02-20 18:07:34,147 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-02-20 18:07:34,148 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-02-20 18:07:34,148 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-02-20 18:07:34,148 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-02-20 18:07:34,148 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-02-20 18:07:34,148 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-02-20 18:07:34,148 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-02-20 18:07:34,148 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-02-20 18:07:34,148 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-02-20 18:07:34,149 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-02-20 18:07:34,149 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-02-20 18:07:34,234 INFO L234 CfgBuilder]: Building ICFG [2022-02-20 18:07:34,235 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-02-20 18:07:34,599 INFO L275 CfgBuilder]: Performing block encoding [2022-02-20 18:07:34,605 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-02-20 18:07:34,605 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-02-20 18:07:34,606 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.02 06:07:34 BoogieIcfgContainer [2022-02-20 18:07:34,607 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-02-20 18:07:34,608 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-02-20 18:07:34,608 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-02-20 18:07:34,611 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-02-20 18:07:34,611 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 20.02 06:07:33" (1/3) ... [2022-02-20 18:07:34,612 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@32e51122 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.02 06:07:34, skipping insertion in model container [2022-02-20 18:07:34,612 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:07:33" (2/3) ... [2022-02-20 18:07:34,612 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@32e51122 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.02 06:07:34, skipping insertion in model container [2022-02-20 18:07:34,613 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.02 06:07:34" (3/3) ... [2022-02-20 18:07:34,614 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product39.cil.c [2022-02-20 18:07:34,618 INFO L205 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-02-20 18:07:34,619 INFO L164 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-02-20 18:07:34,651 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-02-20 18:07:34,656 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2022-02-20 18:07:34,656 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-02-20 18:07:34,671 INFO L276 IsEmpty]: Start isEmpty. Operand has 94 states, 70 states have (on average 1.3857142857142857) internal successors, (97), 79 states have internal predecessors, (97), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) [2022-02-20 18:07:34,676 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-02-20 18:07:34,676 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:07:34,677 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:07:34,677 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:07:34,681 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:07:34,681 INFO L85 PathProgramCache]: Analyzing trace with hash 238573202, now seen corresponding path program 1 times [2022-02-20 18:07:34,688 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:07:34,688 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [566967667] [2022-02-20 18:07:34,688 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:07:34,689 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:07:34,827 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:34,902 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-02-20 18:07:34,907 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:34,919 INFO L290 TraceCheckUtils]: 0: Hoare triple {97#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {97#true} is VALID [2022-02-20 18:07:34,919 INFO L290 TraceCheckUtils]: 1: Hoare triple {97#true} assume true; {97#true} is VALID [2022-02-20 18:07:34,920 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {97#true} {98#false} #246#return; {98#false} is VALID [2022-02-20 18:07:34,925 INFO L290 TraceCheckUtils]: 0: Hoare triple {97#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(13, 9);call #Ultimate.allocInit(3, 10);call write~init~int(79, 10, 0, 1);call write~init~int(110, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(4, 11);call write~init~int(79, 11, 0, 1);call write~init~int(102, 11, 1, 1);call write~init~int(102, 11, 2, 1);call write~init~int(0, 11, 3, 1);call #Ultimate.allocInit(7, 12);call write~init~int(44, 12, 0, 1);call write~init~int(80, 12, 1, 1);call write~init~int(117, 12, 2, 1);call write~init~int(109, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(3, 13);call write~init~int(79, 13, 0, 1);call write~init~int(110, 13, 1, 1);call write~init~int(0, 13, 2, 1);call #Ultimate.allocInit(4, 14);call write~init~int(79, 14, 0, 1);call write~init~int(102, 14, 1, 1);call write~init~int(102, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(3, 15);call write~init~int(41, 15, 0, 1);call write~init~int(32, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(10, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~methAndRunningLastTime~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {97#true} is VALID [2022-02-20 18:07:34,926 INFO L290 TraceCheckUtils]: 1: Hoare triple {97#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret9#1, main_~retValue_acc~3#1, main_~tmp~0#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true; {97#true} is VALID [2022-02-20 18:07:34,926 INFO L290 TraceCheckUtils]: 2: Hoare triple {97#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {97#true} is VALID [2022-02-20 18:07:34,927 INFO L290 TraceCheckUtils]: 3: Hoare triple {97#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~8#1;havoc valid_product_~retValue_acc~8#1;valid_product_~retValue_acc~8#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~8#1; {97#true} is VALID [2022-02-20 18:07:34,928 INFO L290 TraceCheckUtils]: 4: Hoare triple {97#true} main_#t~ret9#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret9#1 && main_#t~ret9#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret9#1;havoc main_#t~ret9#1; {97#true} is VALID [2022-02-20 18:07:34,928 INFO L290 TraceCheckUtils]: 5: Hoare triple {97#true} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {97#true} is VALID [2022-02-20 18:07:34,928 INFO L290 TraceCheckUtils]: 6: Hoare triple {97#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0; {97#true} is VALID [2022-02-20 18:07:34,928 INFO L290 TraceCheckUtils]: 7: Hoare triple {97#true} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet12#1, test_#t~nondet13#1, test_#t~nondet14#1, test_#t~nondet15#1, test_~splverifierCounter~0#1, test_~tmp~2#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~2#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {97#true} is VALID [2022-02-20 18:07:34,929 INFO L290 TraceCheckUtils]: 8: Hoare triple {97#true} assume false; {98#false} is VALID [2022-02-20 18:07:34,929 INFO L272 TraceCheckUtils]: 9: Hoare triple {98#false} call cleanup(); {98#false} is VALID [2022-02-20 18:07:34,930 INFO L290 TraceCheckUtils]: 10: Hoare triple {98#false} havoc ~i~0;havoc ~__cil_tmp2~0; {98#false} is VALID [2022-02-20 18:07:34,930 INFO L272 TraceCheckUtils]: 11: Hoare triple {98#false} call timeShift(); {98#false} is VALID [2022-02-20 18:07:34,930 INFO L290 TraceCheckUtils]: 12: Hoare triple {98#false} assume !(0 != ~pumpRunning~0); {98#false} is VALID [2022-02-20 18:07:34,931 INFO L290 TraceCheckUtils]: 13: Hoare triple {98#false} assume !(0 != ~systemActive~0); {98#false} is VALID [2022-02-20 18:07:34,931 INFO L290 TraceCheckUtils]: 14: Hoare triple {98#false} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret10#1, __utac_acc__Specification2_spec__2_#t~ret11#1, __utac_acc__Specification2_spec__2_~tmp~1#1, __utac_acc__Specification2_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__2_~tmp~1#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~0#1; {98#false} is VALID [2022-02-20 18:07:34,931 INFO L272 TraceCheckUtils]: 15: Hoare triple {98#false} call __utac_acc__Specification2_spec__2_#t~ret10#1 := isMethaneLevelCritical(); {97#true} is VALID [2022-02-20 18:07:34,931 INFO L290 TraceCheckUtils]: 16: Hoare triple {97#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {97#true} is VALID [2022-02-20 18:07:34,932 INFO L290 TraceCheckUtils]: 17: Hoare triple {97#true} assume true; {97#true} is VALID [2022-02-20 18:07:34,932 INFO L284 TraceCheckUtils]: 18: Hoare quadruple {97#true} {98#false} #246#return; {98#false} is VALID [2022-02-20 18:07:34,932 INFO L290 TraceCheckUtils]: 19: Hoare triple {98#false} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret10#1 && __utac_acc__Specification2_spec__2_#t~ret10#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~1#1 := __utac_acc__Specification2_spec__2_#t~ret10#1;havoc __utac_acc__Specification2_spec__2_#t~ret10#1; {98#false} is VALID [2022-02-20 18:07:34,932 INFO L290 TraceCheckUtils]: 20: Hoare triple {98#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~1#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~5#1;havoc isPumpRunning_~retValue_acc~5#1;isPumpRunning_~retValue_acc~5#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~5#1; {98#false} is VALID [2022-02-20 18:07:34,933 INFO L290 TraceCheckUtils]: 21: Hoare triple {98#false} __utac_acc__Specification2_spec__2_#t~ret11#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret11#1 && __utac_acc__Specification2_spec__2_#t~ret11#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~0#1 := __utac_acc__Specification2_spec__2_#t~ret11#1;havoc __utac_acc__Specification2_spec__2_#t~ret11#1; {98#false} is VALID [2022-02-20 18:07:34,933 INFO L290 TraceCheckUtils]: 22: Hoare triple {98#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~0#1; {98#false} is VALID [2022-02-20 18:07:34,934 INFO L290 TraceCheckUtils]: 23: Hoare triple {98#false} assume 0 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {98#false} is VALID [2022-02-20 18:07:34,934 INFO L290 TraceCheckUtils]: 24: Hoare triple {98#false} assume !false; {98#false} is VALID [2022-02-20 18:07:34,935 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:07:34,935 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:07:34,935 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [566967667] [2022-02-20 18:07:34,936 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [566967667] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:07:34,936 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:07:34,936 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-02-20 18:07:34,938 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [478538192] [2022-02-20 18:07:34,939 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:07:34,943 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2022-02-20 18:07:34,945 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:07:34,948 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:07:34,987 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 25 edges. 25 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:34,987 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-02-20 18:07:34,987 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:07:35,004 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-02-20 18:07:35,005 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-02-20 18:07:35,010 INFO L87 Difference]: Start difference. First operand has 94 states, 70 states have (on average 1.3857142857142857) internal successors, (97), 79 states have internal predecessors, (97), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:07:35,118 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:35,118 INFO L93 Difference]: Finished difference Result 179 states and 244 transitions. [2022-02-20 18:07:35,118 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-02-20 18:07:35,119 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2022-02-20 18:07:35,119 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:07:35,122 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:07:35,133 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 244 transitions. [2022-02-20 18:07:35,138 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:07:35,147 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 244 transitions. [2022-02-20 18:07:35,148 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states and 244 transitions. [2022-02-20 18:07:35,335 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 244 edges. 244 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:35,347 INFO L225 Difference]: With dead ends: 179 [2022-02-20 18:07:35,347 INFO L226 Difference]: Without dead ends: 85 [2022-02-20 18:07:35,351 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-02-20 18:07:35,354 INFO L933 BasicCegarLoop]: 119 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 119 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:07:35,355 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 119 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:07:35,369 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 85 states. [2022-02-20 18:07:35,390 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 85 to 85. [2022-02-20 18:07:35,390 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:07:35,393 INFO L82 GeneralOperation]: Start isEquivalent. First operand 85 states. Second operand has 85 states, 63 states have (on average 1.3174603174603174) internal successors, (83), 71 states have internal predecessors, (83), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2022-02-20 18:07:35,394 INFO L74 IsIncluded]: Start isIncluded. First operand 85 states. Second operand has 85 states, 63 states have (on average 1.3174603174603174) internal successors, (83), 71 states have internal predecessors, (83), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2022-02-20 18:07:35,395 INFO L87 Difference]: Start difference. First operand 85 states. Second operand has 85 states, 63 states have (on average 1.3174603174603174) internal successors, (83), 71 states have internal predecessors, (83), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2022-02-20 18:07:35,401 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:35,401 INFO L93 Difference]: Finished difference Result 85 states and 110 transitions. [2022-02-20 18:07:35,401 INFO L276 IsEmpty]: Start isEmpty. Operand 85 states and 110 transitions. [2022-02-20 18:07:35,402 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:35,403 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:35,403 INFO L74 IsIncluded]: Start isIncluded. First operand has 85 states, 63 states have (on average 1.3174603174603174) internal successors, (83), 71 states have internal predecessors, (83), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) Second operand 85 states. [2022-02-20 18:07:35,403 INFO L87 Difference]: Start difference. First operand has 85 states, 63 states have (on average 1.3174603174603174) internal successors, (83), 71 states have internal predecessors, (83), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) Second operand 85 states. [2022-02-20 18:07:35,412 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:35,412 INFO L93 Difference]: Finished difference Result 85 states and 110 transitions. [2022-02-20 18:07:35,412 INFO L276 IsEmpty]: Start isEmpty. Operand 85 states and 110 transitions. [2022-02-20 18:07:35,413 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:35,413 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:35,413 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:07:35,414 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:07:35,414 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 85 states, 63 states have (on average 1.3174603174603174) internal successors, (83), 71 states have internal predecessors, (83), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2022-02-20 18:07:35,421 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 85 states to 85 states and 110 transitions. [2022-02-20 18:07:35,422 INFO L78 Accepts]: Start accepts. Automaton has 85 states and 110 transitions. Word has length 25 [2022-02-20 18:07:35,422 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:07:35,422 INFO L470 AbstractCegarLoop]: Abstraction has 85 states and 110 transitions. [2022-02-20 18:07:35,423 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:07:35,423 INFO L276 IsEmpty]: Start isEmpty. Operand 85 states and 110 transitions. [2022-02-20 18:07:35,424 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-02-20 18:07:35,424 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:07:35,424 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:07:35,424 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-02-20 18:07:35,424 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:07:35,425 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:07:35,425 INFO L85 PathProgramCache]: Analyzing trace with hash -1313382680, now seen corresponding path program 1 times [2022-02-20 18:07:35,425 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:07:35,425 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [239901689] [2022-02-20 18:07:35,425 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:07:35,425 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:07:35,447 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:35,470 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-02-20 18:07:35,471 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:35,482 INFO L290 TraceCheckUtils]: 0: Hoare triple {656#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {656#true} is VALID [2022-02-20 18:07:35,483 INFO L290 TraceCheckUtils]: 1: Hoare triple {656#true} assume true; {656#true} is VALID [2022-02-20 18:07:35,483 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {656#true} {657#false} #246#return; {657#false} is VALID [2022-02-20 18:07:35,483 INFO L290 TraceCheckUtils]: 0: Hoare triple {656#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(13, 9);call #Ultimate.allocInit(3, 10);call write~init~int(79, 10, 0, 1);call write~init~int(110, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(4, 11);call write~init~int(79, 11, 0, 1);call write~init~int(102, 11, 1, 1);call write~init~int(102, 11, 2, 1);call write~init~int(0, 11, 3, 1);call #Ultimate.allocInit(7, 12);call write~init~int(44, 12, 0, 1);call write~init~int(80, 12, 1, 1);call write~init~int(117, 12, 2, 1);call write~init~int(109, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(3, 13);call write~init~int(79, 13, 0, 1);call write~init~int(110, 13, 1, 1);call write~init~int(0, 13, 2, 1);call #Ultimate.allocInit(4, 14);call write~init~int(79, 14, 0, 1);call write~init~int(102, 14, 1, 1);call write~init~int(102, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(3, 15);call write~init~int(41, 15, 0, 1);call write~init~int(32, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(10, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~methAndRunningLastTime~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {656#true} is VALID [2022-02-20 18:07:35,483 INFO L290 TraceCheckUtils]: 1: Hoare triple {656#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret9#1, main_~retValue_acc~3#1, main_~tmp~0#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true; {656#true} is VALID [2022-02-20 18:07:35,483 INFO L290 TraceCheckUtils]: 2: Hoare triple {656#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {656#true} is VALID [2022-02-20 18:07:35,484 INFO L290 TraceCheckUtils]: 3: Hoare triple {656#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~8#1;havoc valid_product_~retValue_acc~8#1;valid_product_~retValue_acc~8#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~8#1; {656#true} is VALID [2022-02-20 18:07:35,484 INFO L290 TraceCheckUtils]: 4: Hoare triple {656#true} main_#t~ret9#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret9#1 && main_#t~ret9#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret9#1;havoc main_#t~ret9#1; {656#true} is VALID [2022-02-20 18:07:35,484 INFO L290 TraceCheckUtils]: 5: Hoare triple {656#true} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {656#true} is VALID [2022-02-20 18:07:35,484 INFO L290 TraceCheckUtils]: 6: Hoare triple {656#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0; {656#true} is VALID [2022-02-20 18:07:35,485 INFO L290 TraceCheckUtils]: 7: Hoare triple {656#true} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet12#1, test_#t~nondet13#1, test_#t~nondet14#1, test_#t~nondet15#1, test_~splverifierCounter~0#1, test_~tmp~2#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~2#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {658#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} is VALID [2022-02-20 18:07:35,485 INFO L290 TraceCheckUtils]: 8: Hoare triple {658#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} assume !false; {658#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} is VALID [2022-02-20 18:07:35,486 INFO L290 TraceCheckUtils]: 9: Hoare triple {658#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} assume !(test_~splverifierCounter~0#1 < 4); {657#false} is VALID [2022-02-20 18:07:35,486 INFO L272 TraceCheckUtils]: 10: Hoare triple {657#false} call cleanup(); {657#false} is VALID [2022-02-20 18:07:35,486 INFO L290 TraceCheckUtils]: 11: Hoare triple {657#false} havoc ~i~0;havoc ~__cil_tmp2~0; {657#false} is VALID [2022-02-20 18:07:35,486 INFO L272 TraceCheckUtils]: 12: Hoare triple {657#false} call timeShift(); {657#false} is VALID [2022-02-20 18:07:35,486 INFO L290 TraceCheckUtils]: 13: Hoare triple {657#false} assume !(0 != ~pumpRunning~0); {657#false} is VALID [2022-02-20 18:07:35,487 INFO L290 TraceCheckUtils]: 14: Hoare triple {657#false} assume !(0 != ~systemActive~0); {657#false} is VALID [2022-02-20 18:07:35,487 INFO L290 TraceCheckUtils]: 15: Hoare triple {657#false} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret10#1, __utac_acc__Specification2_spec__2_#t~ret11#1, __utac_acc__Specification2_spec__2_~tmp~1#1, __utac_acc__Specification2_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__2_~tmp~1#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~0#1; {657#false} is VALID [2022-02-20 18:07:35,487 INFO L272 TraceCheckUtils]: 16: Hoare triple {657#false} call __utac_acc__Specification2_spec__2_#t~ret10#1 := isMethaneLevelCritical(); {656#true} is VALID [2022-02-20 18:07:35,487 INFO L290 TraceCheckUtils]: 17: Hoare triple {656#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {656#true} is VALID [2022-02-20 18:07:35,489 INFO L290 TraceCheckUtils]: 18: Hoare triple {656#true} assume true; {656#true} is VALID [2022-02-20 18:07:35,489 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {656#true} {657#false} #246#return; {657#false} is VALID [2022-02-20 18:07:35,490 INFO L290 TraceCheckUtils]: 20: Hoare triple {657#false} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret10#1 && __utac_acc__Specification2_spec__2_#t~ret10#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~1#1 := __utac_acc__Specification2_spec__2_#t~ret10#1;havoc __utac_acc__Specification2_spec__2_#t~ret10#1; {657#false} is VALID [2022-02-20 18:07:35,490 INFO L290 TraceCheckUtils]: 21: Hoare triple {657#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~1#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~5#1;havoc isPumpRunning_~retValue_acc~5#1;isPumpRunning_~retValue_acc~5#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~5#1; {657#false} is VALID [2022-02-20 18:07:35,491 INFO L290 TraceCheckUtils]: 22: Hoare triple {657#false} __utac_acc__Specification2_spec__2_#t~ret11#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret11#1 && __utac_acc__Specification2_spec__2_#t~ret11#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~0#1 := __utac_acc__Specification2_spec__2_#t~ret11#1;havoc __utac_acc__Specification2_spec__2_#t~ret11#1; {657#false} is VALID [2022-02-20 18:07:35,491 INFO L290 TraceCheckUtils]: 23: Hoare triple {657#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~0#1; {657#false} is VALID [2022-02-20 18:07:35,492 INFO L290 TraceCheckUtils]: 24: Hoare triple {657#false} assume 0 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {657#false} is VALID [2022-02-20 18:07:35,492 INFO L290 TraceCheckUtils]: 25: Hoare triple {657#false} assume !false; {657#false} is VALID [2022-02-20 18:07:35,492 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:07:35,492 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:07:35,493 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [239901689] [2022-02-20 18:07:35,493 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [239901689] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:07:35,493 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:07:35,493 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-02-20 18:07:35,493 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [819299742] [2022-02-20 18:07:35,493 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:07:35,494 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2022-02-20 18:07:35,495 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:07:35,495 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:07:35,511 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 26 edges. 26 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:35,511 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-02-20 18:07:35,512 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:07:35,512 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-02-20 18:07:35,513 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:07:35,513 INFO L87 Difference]: Start difference. First operand 85 states and 110 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:07:35,608 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:35,609 INFO L93 Difference]: Finished difference Result 131 states and 169 transitions. [2022-02-20 18:07:35,609 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-02-20 18:07:35,609 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2022-02-20 18:07:35,609 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:07:35,610 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:07:35,613 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 169 transitions. [2022-02-20 18:07:35,614 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:07:35,618 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 169 transitions. [2022-02-20 18:07:35,618 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 169 transitions. [2022-02-20 18:07:35,724 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 169 edges. 169 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:35,728 INFO L225 Difference]: With dead ends: 131 [2022-02-20 18:07:35,728 INFO L226 Difference]: Without dead ends: 76 [2022-02-20 18:07:35,733 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:07:35,735 INFO L933 BasicCegarLoop]: 97 mSDtfsCounter, 16 mSDsluCounter, 76 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 173 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:07:35,736 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [20 Valid, 173 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:07:35,737 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 76 states. [2022-02-20 18:07:35,748 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 76 to 76. [2022-02-20 18:07:35,748 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:07:35,749 INFO L82 GeneralOperation]: Start isEquivalent. First operand 76 states. Second operand has 76 states, 57 states have (on average 1.3333333333333333) internal successors, (76), 65 states have internal predecessors, (76), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 8 states have call predecessors, (11), 11 states have call successors, (11) [2022-02-20 18:07:35,749 INFO L74 IsIncluded]: Start isIncluded. First operand 76 states. Second operand has 76 states, 57 states have (on average 1.3333333333333333) internal successors, (76), 65 states have internal predecessors, (76), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 8 states have call predecessors, (11), 11 states have call successors, (11) [2022-02-20 18:07:35,749 INFO L87 Difference]: Start difference. First operand 76 states. Second operand has 76 states, 57 states have (on average 1.3333333333333333) internal successors, (76), 65 states have internal predecessors, (76), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 8 states have call predecessors, (11), 11 states have call successors, (11) [2022-02-20 18:07:35,753 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:35,753 INFO L93 Difference]: Finished difference Result 76 states and 98 transitions. [2022-02-20 18:07:35,753 INFO L276 IsEmpty]: Start isEmpty. Operand 76 states and 98 transitions. [2022-02-20 18:07:35,753 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:35,753 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:35,754 INFO L74 IsIncluded]: Start isIncluded. First operand has 76 states, 57 states have (on average 1.3333333333333333) internal successors, (76), 65 states have internal predecessors, (76), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 8 states have call predecessors, (11), 11 states have call successors, (11) Second operand 76 states. [2022-02-20 18:07:35,754 INFO L87 Difference]: Start difference. First operand has 76 states, 57 states have (on average 1.3333333333333333) internal successors, (76), 65 states have internal predecessors, (76), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 8 states have call predecessors, (11), 11 states have call successors, (11) Second operand 76 states. [2022-02-20 18:07:35,756 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:35,756 INFO L93 Difference]: Finished difference Result 76 states and 98 transitions. [2022-02-20 18:07:35,756 INFO L276 IsEmpty]: Start isEmpty. Operand 76 states and 98 transitions. [2022-02-20 18:07:35,756 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:35,757 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:35,757 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:07:35,757 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:07:35,757 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 76 states, 57 states have (on average 1.3333333333333333) internal successors, (76), 65 states have internal predecessors, (76), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 8 states have call predecessors, (11), 11 states have call successors, (11) [2022-02-20 18:07:35,759 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 76 states to 76 states and 98 transitions. [2022-02-20 18:07:35,759 INFO L78 Accepts]: Start accepts. Automaton has 76 states and 98 transitions. Word has length 26 [2022-02-20 18:07:35,759 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:07:35,759 INFO L470 AbstractCegarLoop]: Abstraction has 76 states and 98 transitions. [2022-02-20 18:07:35,759 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:07:35,759 INFO L276 IsEmpty]: Start isEmpty. Operand 76 states and 98 transitions. [2022-02-20 18:07:35,760 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-02-20 18:07:35,760 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:07:35,760 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:07:35,760 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-02-20 18:07:35,760 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:07:35,761 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:07:35,761 INFO L85 PathProgramCache]: Analyzing trace with hash 418656316, now seen corresponding path program 1 times [2022-02-20 18:07:35,761 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:07:35,761 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [807718783] [2022-02-20 18:07:35,761 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:07:35,761 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:07:35,779 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:35,801 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-02-20 18:07:35,802 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:35,804 INFO L290 TraceCheckUtils]: 0: Hoare triple {1114#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {1114#true} is VALID [2022-02-20 18:07:35,804 INFO L290 TraceCheckUtils]: 1: Hoare triple {1114#true} assume true; {1114#true} is VALID [2022-02-20 18:07:35,804 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1114#true} {1115#false} #246#return; {1115#false} is VALID [2022-02-20 18:07:35,809 INFO L290 TraceCheckUtils]: 0: Hoare triple {1114#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(13, 9);call #Ultimate.allocInit(3, 10);call write~init~int(79, 10, 0, 1);call write~init~int(110, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(4, 11);call write~init~int(79, 11, 0, 1);call write~init~int(102, 11, 1, 1);call write~init~int(102, 11, 2, 1);call write~init~int(0, 11, 3, 1);call #Ultimate.allocInit(7, 12);call write~init~int(44, 12, 0, 1);call write~init~int(80, 12, 1, 1);call write~init~int(117, 12, 2, 1);call write~init~int(109, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(3, 13);call write~init~int(79, 13, 0, 1);call write~init~int(110, 13, 1, 1);call write~init~int(0, 13, 2, 1);call #Ultimate.allocInit(4, 14);call write~init~int(79, 14, 0, 1);call write~init~int(102, 14, 1, 1);call write~init~int(102, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(3, 15);call write~init~int(41, 15, 0, 1);call write~init~int(32, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(10, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~methAndRunningLastTime~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {1116#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:35,810 INFO L290 TraceCheckUtils]: 1: Hoare triple {1116#(= 1 ~systemActive~0)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret9#1, main_~retValue_acc~3#1, main_~tmp~0#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true; {1116#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:35,810 INFO L290 TraceCheckUtils]: 2: Hoare triple {1116#(= 1 ~systemActive~0)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {1116#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:35,811 INFO L290 TraceCheckUtils]: 3: Hoare triple {1116#(= 1 ~systemActive~0)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~8#1;havoc valid_product_~retValue_acc~8#1;valid_product_~retValue_acc~8#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~8#1; {1116#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:35,813 INFO L290 TraceCheckUtils]: 4: Hoare triple {1116#(= 1 ~systemActive~0)} main_#t~ret9#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret9#1 && main_#t~ret9#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret9#1;havoc main_#t~ret9#1; {1116#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:35,814 INFO L290 TraceCheckUtils]: 5: Hoare triple {1116#(= 1 ~systemActive~0)} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {1116#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:35,814 INFO L290 TraceCheckUtils]: 6: Hoare triple {1116#(= 1 ~systemActive~0)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0; {1116#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:35,814 INFO L290 TraceCheckUtils]: 7: Hoare triple {1116#(= 1 ~systemActive~0)} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet12#1, test_#t~nondet13#1, test_#t~nondet14#1, test_#t~nondet15#1, test_~splverifierCounter~0#1, test_~tmp~2#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~2#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {1116#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:35,815 INFO L290 TraceCheckUtils]: 8: Hoare triple {1116#(= 1 ~systemActive~0)} assume !false; {1116#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:35,815 INFO L290 TraceCheckUtils]: 9: Hoare triple {1116#(= 1 ~systemActive~0)} assume test_~splverifierCounter~0#1 < 4; {1116#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:35,816 INFO L290 TraceCheckUtils]: 10: Hoare triple {1116#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet12#1 && test_#t~nondet12#1 <= 2147483647;test_~tmp~2#1 := test_#t~nondet12#1;havoc test_#t~nondet12#1; {1116#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:35,816 INFO L290 TraceCheckUtils]: 11: Hoare triple {1116#(= 1 ~systemActive~0)} assume !(0 != test_~tmp~2#1); {1116#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:35,816 INFO L290 TraceCheckUtils]: 12: Hoare triple {1116#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet13#1 && test_#t~nondet13#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet13#1;havoc test_#t~nondet13#1; {1116#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:35,817 INFO L290 TraceCheckUtils]: 13: Hoare triple {1116#(= 1 ~systemActive~0)} assume !(0 != test_~tmp___0~1#1); {1116#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:35,818 INFO L290 TraceCheckUtils]: 14: Hoare triple {1116#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet14#1 && test_#t~nondet14#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet14#1;havoc test_#t~nondet14#1; {1116#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:35,821 INFO L290 TraceCheckUtils]: 15: Hoare triple {1116#(= 1 ~systemActive~0)} assume 0 != test_~tmp___2~0#1; {1116#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:35,821 INFO L272 TraceCheckUtils]: 16: Hoare triple {1116#(= 1 ~systemActive~0)} call timeShift(); {1116#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:35,822 INFO L290 TraceCheckUtils]: 17: Hoare triple {1116#(= 1 ~systemActive~0)} assume !(0 != ~pumpRunning~0); {1116#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:35,822 INFO L290 TraceCheckUtils]: 18: Hoare triple {1116#(= 1 ~systemActive~0)} assume !(0 != ~systemActive~0); {1115#false} is VALID [2022-02-20 18:07:35,822 INFO L290 TraceCheckUtils]: 19: Hoare triple {1115#false} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret10#1, __utac_acc__Specification2_spec__2_#t~ret11#1, __utac_acc__Specification2_spec__2_~tmp~1#1, __utac_acc__Specification2_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__2_~tmp~1#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~0#1; {1115#false} is VALID [2022-02-20 18:07:35,822 INFO L272 TraceCheckUtils]: 20: Hoare triple {1115#false} call __utac_acc__Specification2_spec__2_#t~ret10#1 := isMethaneLevelCritical(); {1114#true} is VALID [2022-02-20 18:07:35,823 INFO L290 TraceCheckUtils]: 21: Hoare triple {1114#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {1114#true} is VALID [2022-02-20 18:07:35,823 INFO L290 TraceCheckUtils]: 22: Hoare triple {1114#true} assume true; {1114#true} is VALID [2022-02-20 18:07:35,823 INFO L284 TraceCheckUtils]: 23: Hoare quadruple {1114#true} {1115#false} #246#return; {1115#false} is VALID [2022-02-20 18:07:35,823 INFO L290 TraceCheckUtils]: 24: Hoare triple {1115#false} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret10#1 && __utac_acc__Specification2_spec__2_#t~ret10#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~1#1 := __utac_acc__Specification2_spec__2_#t~ret10#1;havoc __utac_acc__Specification2_spec__2_#t~ret10#1; {1115#false} is VALID [2022-02-20 18:07:35,823 INFO L290 TraceCheckUtils]: 25: Hoare triple {1115#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~1#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~5#1;havoc isPumpRunning_~retValue_acc~5#1;isPumpRunning_~retValue_acc~5#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~5#1; {1115#false} is VALID [2022-02-20 18:07:35,823 INFO L290 TraceCheckUtils]: 26: Hoare triple {1115#false} __utac_acc__Specification2_spec__2_#t~ret11#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret11#1 && __utac_acc__Specification2_spec__2_#t~ret11#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~0#1 := __utac_acc__Specification2_spec__2_#t~ret11#1;havoc __utac_acc__Specification2_spec__2_#t~ret11#1; {1115#false} is VALID [2022-02-20 18:07:35,823 INFO L290 TraceCheckUtils]: 27: Hoare triple {1115#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~0#1; {1115#false} is VALID [2022-02-20 18:07:35,823 INFO L290 TraceCheckUtils]: 28: Hoare triple {1115#false} assume 0 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {1115#false} is VALID [2022-02-20 18:07:35,823 INFO L290 TraceCheckUtils]: 29: Hoare triple {1115#false} assume !false; {1115#false} is VALID [2022-02-20 18:07:35,824 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:07:35,824 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:07:35,824 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [807718783] [2022-02-20 18:07:35,824 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [807718783] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:07:35,824 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:07:35,824 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-02-20 18:07:35,824 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1550402050] [2022-02-20 18:07:35,824 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:07:35,825 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 30 [2022-02-20 18:07:35,825 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:07:35,825 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:07:35,850 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 30 edges. 30 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:35,850 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-02-20 18:07:35,850 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:07:35,850 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-02-20 18:07:35,850 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:07:35,851 INFO L87 Difference]: Start difference. First operand 76 states and 98 transitions. Second operand has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:07:35,979 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:35,979 INFO L93 Difference]: Finished difference Result 211 states and 278 transitions. [2022-02-20 18:07:35,979 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-02-20 18:07:35,979 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 30 [2022-02-20 18:07:35,980 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:07:35,980 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:07:35,983 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 278 transitions. [2022-02-20 18:07:35,983 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:07:35,985 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 278 transitions. [2022-02-20 18:07:35,986 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 278 transitions. [2022-02-20 18:07:36,146 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 278 edges. 278 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:36,150 INFO L225 Difference]: With dead ends: 211 [2022-02-20 18:07:36,150 INFO L226 Difference]: Without dead ends: 143 [2022-02-20 18:07:36,150 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:07:36,151 INFO L933 BasicCegarLoop]: 121 mSDtfsCounter, 77 mSDsluCounter, 87 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 77 SdHoareTripleChecker+Valid, 208 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:07:36,151 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [77 Valid, 208 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:07:36,152 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 143 states. [2022-02-20 18:07:36,160 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 143 to 140. [2022-02-20 18:07:36,160 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:07:36,161 INFO L82 GeneralOperation]: Start isEquivalent. First operand 143 states. Second operand has 140 states, 103 states have (on average 1.3592233009708738) internal successors, (140), 118 states have internal predecessors, (140), 22 states have call successors, (22), 14 states have call predecessors, (22), 14 states have return successors, (22), 15 states have call predecessors, (22), 22 states have call successors, (22) [2022-02-20 18:07:36,163 INFO L74 IsIncluded]: Start isIncluded. First operand 143 states. Second operand has 140 states, 103 states have (on average 1.3592233009708738) internal successors, (140), 118 states have internal predecessors, (140), 22 states have call successors, (22), 14 states have call predecessors, (22), 14 states have return successors, (22), 15 states have call predecessors, (22), 22 states have call successors, (22) [2022-02-20 18:07:36,164 INFO L87 Difference]: Start difference. First operand 143 states. Second operand has 140 states, 103 states have (on average 1.3592233009708738) internal successors, (140), 118 states have internal predecessors, (140), 22 states have call successors, (22), 14 states have call predecessors, (22), 14 states have return successors, (22), 15 states have call predecessors, (22), 22 states have call successors, (22) [2022-02-20 18:07:36,169 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:36,169 INFO L93 Difference]: Finished difference Result 143 states and 186 transitions. [2022-02-20 18:07:36,169 INFO L276 IsEmpty]: Start isEmpty. Operand 143 states and 186 transitions. [2022-02-20 18:07:36,169 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:36,169 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:36,170 INFO L74 IsIncluded]: Start isIncluded. First operand has 140 states, 103 states have (on average 1.3592233009708738) internal successors, (140), 118 states have internal predecessors, (140), 22 states have call successors, (22), 14 states have call predecessors, (22), 14 states have return successors, (22), 15 states have call predecessors, (22), 22 states have call successors, (22) Second operand 143 states. [2022-02-20 18:07:36,171 INFO L87 Difference]: Start difference. First operand has 140 states, 103 states have (on average 1.3592233009708738) internal successors, (140), 118 states have internal predecessors, (140), 22 states have call successors, (22), 14 states have call predecessors, (22), 14 states have return successors, (22), 15 states have call predecessors, (22), 22 states have call successors, (22) Second operand 143 states. [2022-02-20 18:07:36,175 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:36,175 INFO L93 Difference]: Finished difference Result 143 states and 186 transitions. [2022-02-20 18:07:36,175 INFO L276 IsEmpty]: Start isEmpty. Operand 143 states and 186 transitions. [2022-02-20 18:07:36,175 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:36,175 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:36,176 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:07:36,176 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:07:36,176 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 140 states, 103 states have (on average 1.3592233009708738) internal successors, (140), 118 states have internal predecessors, (140), 22 states have call successors, (22), 14 states have call predecessors, (22), 14 states have return successors, (22), 15 states have call predecessors, (22), 22 states have call successors, (22) [2022-02-20 18:07:36,180 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 140 states to 140 states and 184 transitions. [2022-02-20 18:07:36,180 INFO L78 Accepts]: Start accepts. Automaton has 140 states and 184 transitions. Word has length 30 [2022-02-20 18:07:36,180 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:07:36,180 INFO L470 AbstractCegarLoop]: Abstraction has 140 states and 184 transitions. [2022-02-20 18:07:36,181 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:07:36,181 INFO L276 IsEmpty]: Start isEmpty. Operand 140 states and 184 transitions. [2022-02-20 18:07:36,181 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2022-02-20 18:07:36,181 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:07:36,181 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:07:36,182 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-02-20 18:07:36,182 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:07:36,182 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:07:36,182 INFO L85 PathProgramCache]: Analyzing trace with hash -1768755130, now seen corresponding path program 1 times [2022-02-20 18:07:36,182 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:07:36,183 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1550740581] [2022-02-20 18:07:36,183 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:07:36,183 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:07:36,230 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:36,257 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-02-20 18:07:36,259 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:36,268 INFO L290 TraceCheckUtils]: 0: Hoare triple {1907#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {1915#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:36,269 INFO L290 TraceCheckUtils]: 1: Hoare triple {1915#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} assume true; {1915#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:36,270 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1915#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} {1909#(= ~methaneLevelCritical~0 0)} #246#return; {1913#(= |timeShift___utac_acc__Specification2_spec__2_#t~ret10#1| 0)} is VALID [2022-02-20 18:07:36,270 INFO L290 TraceCheckUtils]: 0: Hoare triple {1907#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(13, 9);call #Ultimate.allocInit(3, 10);call write~init~int(79, 10, 0, 1);call write~init~int(110, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(4, 11);call write~init~int(79, 11, 0, 1);call write~init~int(102, 11, 1, 1);call write~init~int(102, 11, 2, 1);call write~init~int(0, 11, 3, 1);call #Ultimate.allocInit(7, 12);call write~init~int(44, 12, 0, 1);call write~init~int(80, 12, 1, 1);call write~init~int(117, 12, 2, 1);call write~init~int(109, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(3, 13);call write~init~int(79, 13, 0, 1);call write~init~int(110, 13, 1, 1);call write~init~int(0, 13, 2, 1);call #Ultimate.allocInit(4, 14);call write~init~int(79, 14, 0, 1);call write~init~int(102, 14, 1, 1);call write~init~int(102, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(3, 15);call write~init~int(41, 15, 0, 1);call write~init~int(32, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(10, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~methAndRunningLastTime~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {1909#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:07:36,270 INFO L290 TraceCheckUtils]: 1: Hoare triple {1909#(= ~methaneLevelCritical~0 0)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret9#1, main_~retValue_acc~3#1, main_~tmp~0#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true; {1909#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:07:36,273 INFO L290 TraceCheckUtils]: 2: Hoare triple {1909#(= ~methaneLevelCritical~0 0)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {1909#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:07:36,273 INFO L290 TraceCheckUtils]: 3: Hoare triple {1909#(= ~methaneLevelCritical~0 0)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~8#1;havoc valid_product_~retValue_acc~8#1;valid_product_~retValue_acc~8#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~8#1; {1909#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:07:36,274 INFO L290 TraceCheckUtils]: 4: Hoare triple {1909#(= ~methaneLevelCritical~0 0)} main_#t~ret9#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret9#1 && main_#t~ret9#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret9#1;havoc main_#t~ret9#1; {1909#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:07:36,274 INFO L290 TraceCheckUtils]: 5: Hoare triple {1909#(= ~methaneLevelCritical~0 0)} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {1909#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:07:36,274 INFO L290 TraceCheckUtils]: 6: Hoare triple {1909#(= ~methaneLevelCritical~0 0)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0; {1909#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:07:36,275 INFO L290 TraceCheckUtils]: 7: Hoare triple {1909#(= ~methaneLevelCritical~0 0)} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet12#1, test_#t~nondet13#1, test_#t~nondet14#1, test_#t~nondet15#1, test_~splverifierCounter~0#1, test_~tmp~2#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~2#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {1909#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:07:36,275 INFO L290 TraceCheckUtils]: 8: Hoare triple {1909#(= ~methaneLevelCritical~0 0)} assume !false; {1909#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:07:36,275 INFO L290 TraceCheckUtils]: 9: Hoare triple {1909#(= ~methaneLevelCritical~0 0)} assume test_~splverifierCounter~0#1 < 4; {1909#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:07:36,277 INFO L290 TraceCheckUtils]: 10: Hoare triple {1909#(= ~methaneLevelCritical~0 0)} assume -2147483648 <= test_#t~nondet12#1 && test_#t~nondet12#1 <= 2147483647;test_~tmp~2#1 := test_#t~nondet12#1;havoc test_#t~nondet12#1; {1909#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:07:36,278 INFO L290 TraceCheckUtils]: 11: Hoare triple {1909#(= ~methaneLevelCritical~0 0)} assume !(0 != test_~tmp~2#1); {1909#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:07:36,279 INFO L290 TraceCheckUtils]: 12: Hoare triple {1909#(= ~methaneLevelCritical~0 0)} assume -2147483648 <= test_#t~nondet13#1 && test_#t~nondet13#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet13#1;havoc test_#t~nondet13#1; {1909#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:07:36,280 INFO L290 TraceCheckUtils]: 13: Hoare triple {1909#(= ~methaneLevelCritical~0 0)} assume !(0 != test_~tmp___0~1#1); {1909#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:07:36,280 INFO L290 TraceCheckUtils]: 14: Hoare triple {1909#(= ~methaneLevelCritical~0 0)} assume -2147483648 <= test_#t~nondet14#1 && test_#t~nondet14#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet14#1;havoc test_#t~nondet14#1; {1909#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:07:36,280 INFO L290 TraceCheckUtils]: 15: Hoare triple {1909#(= ~methaneLevelCritical~0 0)} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet15#1 && test_#t~nondet15#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet15#1;havoc test_#t~nondet15#1; {1909#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:07:36,281 INFO L290 TraceCheckUtils]: 16: Hoare triple {1909#(= ~methaneLevelCritical~0 0)} assume 0 != test_~tmp___1~0#1;assume { :begin_inline_stopSystem } true; {1909#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:07:36,281 INFO L290 TraceCheckUtils]: 17: Hoare triple {1909#(= ~methaneLevelCritical~0 0)} assume !(0 != ~pumpRunning~0); {1909#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:07:36,281 INFO L290 TraceCheckUtils]: 18: Hoare triple {1909#(= ~methaneLevelCritical~0 0)} ~systemActive~0 := 0; {1909#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:07:36,282 INFO L290 TraceCheckUtils]: 19: Hoare triple {1909#(= ~methaneLevelCritical~0 0)} assume { :end_inline_stopSystem } true; {1909#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:07:36,282 INFO L272 TraceCheckUtils]: 20: Hoare triple {1909#(= ~methaneLevelCritical~0 0)} call timeShift(); {1909#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:07:36,283 INFO L290 TraceCheckUtils]: 21: Hoare triple {1909#(= ~methaneLevelCritical~0 0)} assume !(0 != ~pumpRunning~0); {1909#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:07:36,284 INFO L290 TraceCheckUtils]: 22: Hoare triple {1909#(= ~methaneLevelCritical~0 0)} assume !(0 != ~systemActive~0); {1909#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:07:36,284 INFO L290 TraceCheckUtils]: 23: Hoare triple {1909#(= ~methaneLevelCritical~0 0)} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret10#1, __utac_acc__Specification2_spec__2_#t~ret11#1, __utac_acc__Specification2_spec__2_~tmp~1#1, __utac_acc__Specification2_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__2_~tmp~1#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~0#1; {1909#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:07:36,284 INFO L272 TraceCheckUtils]: 24: Hoare triple {1909#(= ~methaneLevelCritical~0 0)} call __utac_acc__Specification2_spec__2_#t~ret10#1 := isMethaneLevelCritical(); {1907#true} is VALID [2022-02-20 18:07:36,285 INFO L290 TraceCheckUtils]: 25: Hoare triple {1907#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {1915#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:36,286 INFO L290 TraceCheckUtils]: 26: Hoare triple {1915#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} assume true; {1915#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:36,293 INFO L284 TraceCheckUtils]: 27: Hoare quadruple {1915#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} {1909#(= ~methaneLevelCritical~0 0)} #246#return; {1913#(= |timeShift___utac_acc__Specification2_spec__2_#t~ret10#1| 0)} is VALID [2022-02-20 18:07:36,295 INFO L290 TraceCheckUtils]: 28: Hoare triple {1913#(= |timeShift___utac_acc__Specification2_spec__2_#t~ret10#1| 0)} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret10#1 && __utac_acc__Specification2_spec__2_#t~ret10#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~1#1 := __utac_acc__Specification2_spec__2_#t~ret10#1;havoc __utac_acc__Specification2_spec__2_#t~ret10#1; {1914#(= |timeShift___utac_acc__Specification2_spec__2_~tmp~1#1| 0)} is VALID [2022-02-20 18:07:36,296 INFO L290 TraceCheckUtils]: 29: Hoare triple {1914#(= |timeShift___utac_acc__Specification2_spec__2_~tmp~1#1| 0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp~1#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~5#1;havoc isPumpRunning_~retValue_acc~5#1;isPumpRunning_~retValue_acc~5#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~5#1; {1908#false} is VALID [2022-02-20 18:07:36,296 INFO L290 TraceCheckUtils]: 30: Hoare triple {1908#false} __utac_acc__Specification2_spec__2_#t~ret11#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret11#1 && __utac_acc__Specification2_spec__2_#t~ret11#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~0#1 := __utac_acc__Specification2_spec__2_#t~ret11#1;havoc __utac_acc__Specification2_spec__2_#t~ret11#1; {1908#false} is VALID [2022-02-20 18:07:36,296 INFO L290 TraceCheckUtils]: 31: Hoare triple {1908#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~0#1; {1908#false} is VALID [2022-02-20 18:07:36,296 INFO L290 TraceCheckUtils]: 32: Hoare triple {1908#false} assume 0 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {1908#false} is VALID [2022-02-20 18:07:36,296 INFO L290 TraceCheckUtils]: 33: Hoare triple {1908#false} assume !false; {1908#false} is VALID [2022-02-20 18:07:36,297 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:07:36,297 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:07:36,297 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1550740581] [2022-02-20 18:07:36,297 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1550740581] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:07:36,297 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:07:36,297 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-02-20 18:07:36,298 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [423247166] [2022-02-20 18:07:36,298 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:07:36,298 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 4 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 34 [2022-02-20 18:07:36,298 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:07:36,299 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 4 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:07:36,320 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 34 edges. 34 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:36,320 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-02-20 18:07:36,320 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:07:36,321 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-02-20 18:07:36,322 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-02-20 18:07:36,322 INFO L87 Difference]: Start difference. First operand 140 states and 184 transitions. Second operand has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 4 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:07:36,600 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:36,601 INFO L93 Difference]: Finished difference Result 402 states and 537 transitions. [2022-02-20 18:07:36,601 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-02-20 18:07:36,601 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 4 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 34 [2022-02-20 18:07:36,602 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:07:36,603 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 4 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:07:36,605 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 278 transitions. [2022-02-20 18:07:36,606 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 4 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:07:36,608 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 278 transitions. [2022-02-20 18:07:36,608 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states and 278 transitions. [2022-02-20 18:07:36,778 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 278 edges. 278 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:36,784 INFO L225 Difference]: With dead ends: 402 [2022-02-20 18:07:36,785 INFO L226 Difference]: Without dead ends: 270 [2022-02-20 18:07:36,785 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2022-02-20 18:07:36,786 INFO L933 BasicCegarLoop]: 106 mSDtfsCounter, 66 mSDsluCounter, 372 mSDsCounter, 0 mSdLazyCounter, 48 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 69 SdHoareTripleChecker+Valid, 478 SdHoareTripleChecker+Invalid, 52 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 48 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:07:36,786 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [69 Valid, 478 Invalid, 52 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 48 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:07:36,787 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 270 states. [2022-02-20 18:07:36,813 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 270 to 264. [2022-02-20 18:07:36,814 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:07:36,814 INFO L82 GeneralOperation]: Start isEquivalent. First operand 270 states. Second operand has 264 states, 191 states have (on average 1.3455497382198953) internal successors, (257), 220 states have internal predecessors, (257), 44 states have call successors, (44), 28 states have call predecessors, (44), 28 states have return successors, (46), 30 states have call predecessors, (46), 44 states have call successors, (46) [2022-02-20 18:07:36,815 INFO L74 IsIncluded]: Start isIncluded. First operand 270 states. Second operand has 264 states, 191 states have (on average 1.3455497382198953) internal successors, (257), 220 states have internal predecessors, (257), 44 states have call successors, (44), 28 states have call predecessors, (44), 28 states have return successors, (46), 30 states have call predecessors, (46), 44 states have call successors, (46) [2022-02-20 18:07:36,816 INFO L87 Difference]: Start difference. First operand 270 states. Second operand has 264 states, 191 states have (on average 1.3455497382198953) internal successors, (257), 220 states have internal predecessors, (257), 44 states have call successors, (44), 28 states have call predecessors, (44), 28 states have return successors, (46), 30 states have call predecessors, (46), 44 states have call successors, (46) [2022-02-20 18:07:36,822 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:36,822 INFO L93 Difference]: Finished difference Result 270 states and 353 transitions. [2022-02-20 18:07:36,822 INFO L276 IsEmpty]: Start isEmpty. Operand 270 states and 353 transitions. [2022-02-20 18:07:36,823 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:36,823 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:36,824 INFO L74 IsIncluded]: Start isIncluded. First operand has 264 states, 191 states have (on average 1.3455497382198953) internal successors, (257), 220 states have internal predecessors, (257), 44 states have call successors, (44), 28 states have call predecessors, (44), 28 states have return successors, (46), 30 states have call predecessors, (46), 44 states have call successors, (46) Second operand 270 states. [2022-02-20 18:07:36,824 INFO L87 Difference]: Start difference. First operand has 264 states, 191 states have (on average 1.3455497382198953) internal successors, (257), 220 states have internal predecessors, (257), 44 states have call successors, (44), 28 states have call predecessors, (44), 28 states have return successors, (46), 30 states have call predecessors, (46), 44 states have call successors, (46) Second operand 270 states. [2022-02-20 18:07:36,831 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:36,831 INFO L93 Difference]: Finished difference Result 270 states and 353 transitions. [2022-02-20 18:07:36,831 INFO L276 IsEmpty]: Start isEmpty. Operand 270 states and 353 transitions. [2022-02-20 18:07:36,831 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:36,832 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:36,832 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:07:36,832 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:07:36,832 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 264 states, 191 states have (on average 1.3455497382198953) internal successors, (257), 220 states have internal predecessors, (257), 44 states have call successors, (44), 28 states have call predecessors, (44), 28 states have return successors, (46), 30 states have call predecessors, (46), 44 states have call successors, (46) [2022-02-20 18:07:36,840 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 264 states to 264 states and 347 transitions. [2022-02-20 18:07:36,840 INFO L78 Accepts]: Start accepts. Automaton has 264 states and 347 transitions. Word has length 34 [2022-02-20 18:07:36,840 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:07:36,840 INFO L470 AbstractCegarLoop]: Abstraction has 264 states and 347 transitions. [2022-02-20 18:07:36,840 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 4 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:07:36,840 INFO L276 IsEmpty]: Start isEmpty. Operand 264 states and 347 transitions. [2022-02-20 18:07:36,841 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-02-20 18:07:36,841 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:07:36,841 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:07:36,841 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-02-20 18:07:36,842 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:07:36,842 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:07:36,842 INFO L85 PathProgramCache]: Analyzing trace with hash 1795843330, now seen corresponding path program 1 times [2022-02-20 18:07:36,842 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:07:36,842 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [551075018] [2022-02-20 18:07:36,842 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:07:36,842 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:07:36,861 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:36,890 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-02-20 18:07:36,891 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:36,895 INFO L290 TraceCheckUtils]: 0: Hoare triple {3424#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {3413#true} is VALID [2022-02-20 18:07:36,896 INFO L290 TraceCheckUtils]: 1: Hoare triple {3413#true} assume true; {3413#true} is VALID [2022-02-20 18:07:36,896 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {3413#true} {3415#(= ~pumpRunning~0 0)} #254#return; {3415#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:36,896 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-02-20 18:07:36,897 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:36,899 INFO L290 TraceCheckUtils]: 0: Hoare triple {3413#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {3413#true} is VALID [2022-02-20 18:07:36,899 INFO L290 TraceCheckUtils]: 1: Hoare triple {3413#true} assume true; {3413#true} is VALID [2022-02-20 18:07:36,900 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {3413#true} {3415#(= ~pumpRunning~0 0)} #246#return; {3415#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:36,900 INFO L290 TraceCheckUtils]: 0: Hoare triple {3413#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(13, 9);call #Ultimate.allocInit(3, 10);call write~init~int(79, 10, 0, 1);call write~init~int(110, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(4, 11);call write~init~int(79, 11, 0, 1);call write~init~int(102, 11, 1, 1);call write~init~int(102, 11, 2, 1);call write~init~int(0, 11, 3, 1);call #Ultimate.allocInit(7, 12);call write~init~int(44, 12, 0, 1);call write~init~int(80, 12, 1, 1);call write~init~int(117, 12, 2, 1);call write~init~int(109, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(3, 13);call write~init~int(79, 13, 0, 1);call write~init~int(110, 13, 1, 1);call write~init~int(0, 13, 2, 1);call #Ultimate.allocInit(4, 14);call write~init~int(79, 14, 0, 1);call write~init~int(102, 14, 1, 1);call write~init~int(102, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(3, 15);call write~init~int(41, 15, 0, 1);call write~init~int(32, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(10, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~methAndRunningLastTime~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {3415#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:36,900 INFO L290 TraceCheckUtils]: 1: Hoare triple {3415#(= ~pumpRunning~0 0)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret9#1, main_~retValue_acc~3#1, main_~tmp~0#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true; {3415#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:36,901 INFO L290 TraceCheckUtils]: 2: Hoare triple {3415#(= ~pumpRunning~0 0)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {3415#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:36,901 INFO L290 TraceCheckUtils]: 3: Hoare triple {3415#(= ~pumpRunning~0 0)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~8#1;havoc valid_product_~retValue_acc~8#1;valid_product_~retValue_acc~8#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~8#1; {3415#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:36,901 INFO L290 TraceCheckUtils]: 4: Hoare triple {3415#(= ~pumpRunning~0 0)} main_#t~ret9#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret9#1 && main_#t~ret9#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret9#1;havoc main_#t~ret9#1; {3415#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:36,902 INFO L290 TraceCheckUtils]: 5: Hoare triple {3415#(= ~pumpRunning~0 0)} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {3415#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:36,902 INFO L290 TraceCheckUtils]: 6: Hoare triple {3415#(= ~pumpRunning~0 0)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0; {3415#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:36,902 INFO L290 TraceCheckUtils]: 7: Hoare triple {3415#(= ~pumpRunning~0 0)} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet12#1, test_#t~nondet13#1, test_#t~nondet14#1, test_#t~nondet15#1, test_~splverifierCounter~0#1, test_~tmp~2#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~2#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {3415#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:36,903 INFO L290 TraceCheckUtils]: 8: Hoare triple {3415#(= ~pumpRunning~0 0)} assume !false; {3415#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:36,903 INFO L290 TraceCheckUtils]: 9: Hoare triple {3415#(= ~pumpRunning~0 0)} assume test_~splverifierCounter~0#1 < 4; {3415#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:36,903 INFO L290 TraceCheckUtils]: 10: Hoare triple {3415#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet12#1 && test_#t~nondet12#1 <= 2147483647;test_~tmp~2#1 := test_#t~nondet12#1;havoc test_#t~nondet12#1; {3415#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:36,903 INFO L290 TraceCheckUtils]: 11: Hoare triple {3415#(= ~pumpRunning~0 0)} assume !(0 != test_~tmp~2#1); {3415#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:36,904 INFO L290 TraceCheckUtils]: 12: Hoare triple {3415#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet13#1 && test_#t~nondet13#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet13#1;havoc test_#t~nondet13#1; {3415#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:36,904 INFO L290 TraceCheckUtils]: 13: Hoare triple {3415#(= ~pumpRunning~0 0)} assume 0 != test_~tmp___0~1#1; {3415#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:36,905 INFO L272 TraceCheckUtils]: 14: Hoare triple {3415#(= ~pumpRunning~0 0)} call changeMethaneLevel(); {3424#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:36,905 INFO L290 TraceCheckUtils]: 15: Hoare triple {3424#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {3413#true} is VALID [2022-02-20 18:07:36,905 INFO L290 TraceCheckUtils]: 16: Hoare triple {3413#true} assume true; {3413#true} is VALID [2022-02-20 18:07:36,905 INFO L284 TraceCheckUtils]: 17: Hoare quadruple {3413#true} {3415#(= ~pumpRunning~0 0)} #254#return; {3415#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:36,905 INFO L290 TraceCheckUtils]: 18: Hoare triple {3415#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet14#1 && test_#t~nondet14#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet14#1;havoc test_#t~nondet14#1; {3415#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:36,906 INFO L290 TraceCheckUtils]: 19: Hoare triple {3415#(= ~pumpRunning~0 0)} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet15#1 && test_#t~nondet15#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet15#1;havoc test_#t~nondet15#1; {3415#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:36,906 INFO L290 TraceCheckUtils]: 20: Hoare triple {3415#(= ~pumpRunning~0 0)} assume 0 != test_~tmp___1~0#1;assume { :begin_inline_stopSystem } true; {3415#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:36,906 INFO L290 TraceCheckUtils]: 21: Hoare triple {3415#(= ~pumpRunning~0 0)} assume !(0 != ~pumpRunning~0); {3415#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:36,907 INFO L290 TraceCheckUtils]: 22: Hoare triple {3415#(= ~pumpRunning~0 0)} ~systemActive~0 := 0; {3415#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:36,907 INFO L290 TraceCheckUtils]: 23: Hoare triple {3415#(= ~pumpRunning~0 0)} assume { :end_inline_stopSystem } true; {3415#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:36,908 INFO L272 TraceCheckUtils]: 24: Hoare triple {3415#(= ~pumpRunning~0 0)} call timeShift(); {3415#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:36,908 INFO L290 TraceCheckUtils]: 25: Hoare triple {3415#(= ~pumpRunning~0 0)} assume !(0 != ~pumpRunning~0); {3415#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:36,908 INFO L290 TraceCheckUtils]: 26: Hoare triple {3415#(= ~pumpRunning~0 0)} assume !(0 != ~systemActive~0); {3415#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:36,909 INFO L290 TraceCheckUtils]: 27: Hoare triple {3415#(= ~pumpRunning~0 0)} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret10#1, __utac_acc__Specification2_spec__2_#t~ret11#1, __utac_acc__Specification2_spec__2_~tmp~1#1, __utac_acc__Specification2_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__2_~tmp~1#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~0#1; {3415#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:36,909 INFO L272 TraceCheckUtils]: 28: Hoare triple {3415#(= ~pumpRunning~0 0)} call __utac_acc__Specification2_spec__2_#t~ret10#1 := isMethaneLevelCritical(); {3413#true} is VALID [2022-02-20 18:07:36,909 INFO L290 TraceCheckUtils]: 29: Hoare triple {3413#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {3413#true} is VALID [2022-02-20 18:07:36,909 INFO L290 TraceCheckUtils]: 30: Hoare triple {3413#true} assume true; {3413#true} is VALID [2022-02-20 18:07:36,910 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {3413#true} {3415#(= ~pumpRunning~0 0)} #246#return; {3415#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:36,910 INFO L290 TraceCheckUtils]: 32: Hoare triple {3415#(= ~pumpRunning~0 0)} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret10#1 && __utac_acc__Specification2_spec__2_#t~ret10#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~1#1 := __utac_acc__Specification2_spec__2_#t~ret10#1;havoc __utac_acc__Specification2_spec__2_#t~ret10#1; {3415#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:36,910 INFO L290 TraceCheckUtils]: 33: Hoare triple {3415#(= ~pumpRunning~0 0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp~1#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~5#1;havoc isPumpRunning_~retValue_acc~5#1;isPumpRunning_~retValue_acc~5#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~5#1; {3422#(= |timeShift_isPumpRunning_#res#1| 0)} is VALID [2022-02-20 18:07:36,911 INFO L290 TraceCheckUtils]: 34: Hoare triple {3422#(= |timeShift_isPumpRunning_#res#1| 0)} __utac_acc__Specification2_spec__2_#t~ret11#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret11#1 && __utac_acc__Specification2_spec__2_#t~ret11#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~0#1 := __utac_acc__Specification2_spec__2_#t~ret11#1;havoc __utac_acc__Specification2_spec__2_#t~ret11#1; {3423#(= |timeShift___utac_acc__Specification2_spec__2_~tmp___0~0#1| 0)} is VALID [2022-02-20 18:07:36,911 INFO L290 TraceCheckUtils]: 35: Hoare triple {3423#(= |timeShift___utac_acc__Specification2_spec__2_~tmp___0~0#1| 0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~0#1; {3414#false} is VALID [2022-02-20 18:07:36,911 INFO L290 TraceCheckUtils]: 36: Hoare triple {3414#false} assume 0 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {3414#false} is VALID [2022-02-20 18:07:36,911 INFO L290 TraceCheckUtils]: 37: Hoare triple {3414#false} assume !false; {3414#false} is VALID [2022-02-20 18:07:36,911 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:07:36,912 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:07:36,912 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [551075018] [2022-02-20 18:07:36,912 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [551075018] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:07:36,912 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:07:36,912 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-02-20 18:07:36,912 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1667323667] [2022-02-20 18:07:36,912 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:07:36,913 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.5) internal successors, (33), 5 states have internal predecessors, (33), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 38 [2022-02-20 18:07:36,913 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:07:36,913 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 5.5) internal successors, (33), 5 states have internal predecessors, (33), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:07:36,942 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 38 edges. 38 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:36,942 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-02-20 18:07:36,942 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:07:36,943 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-02-20 18:07:36,943 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-02-20 18:07:36,943 INFO L87 Difference]: Start difference. First operand 264 states and 347 transitions. Second operand has 6 states, 6 states have (on average 5.5) internal successors, (33), 5 states have internal predecessors, (33), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:07:37,481 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:37,481 INFO L93 Difference]: Finished difference Result 692 states and 928 transitions. [2022-02-20 18:07:37,481 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-02-20 18:07:37,481 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.5) internal successors, (33), 5 states have internal predecessors, (33), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 38 [2022-02-20 18:07:37,482 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:07:37,482 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 5.5) internal successors, (33), 5 states have internal predecessors, (33), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:07:37,485 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 255 transitions. [2022-02-20 18:07:37,485 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 5.5) internal successors, (33), 5 states have internal predecessors, (33), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:07:37,487 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 255 transitions. [2022-02-20 18:07:37,487 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states and 255 transitions. [2022-02-20 18:07:37,638 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 255 edges. 255 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:37,651 INFO L225 Difference]: With dead ends: 692 [2022-02-20 18:07:37,651 INFO L226 Difference]: Without dead ends: 436 [2022-02-20 18:07:37,652 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-02-20 18:07:37,653 INFO L933 BasicCegarLoop]: 92 mSDtfsCounter, 111 mSDsluCounter, 107 mSDsCounter, 0 mSdLazyCounter, 247 mSolverCounterSat, 39 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 117 SdHoareTripleChecker+Valid, 199 SdHoareTripleChecker+Invalid, 286 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 39 IncrementalHoareTripleChecker+Valid, 247 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-02-20 18:07:37,653 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [117 Valid, 199 Invalid, 286 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [39 Valid, 247 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-02-20 18:07:37,654 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 436 states. [2022-02-20 18:07:37,667 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 436 to 422. [2022-02-20 18:07:37,667 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:07:37,668 INFO L82 GeneralOperation]: Start isEquivalent. First operand 436 states. Second operand has 422 states, 309 states have (on average 1.2977346278317152) internal successors, (401), 338 states have internal predecessors, (401), 60 states have call successors, (60), 52 states have call predecessors, (60), 52 states have return successors, (80), 54 states have call predecessors, (80), 60 states have call successors, (80) [2022-02-20 18:07:37,669 INFO L74 IsIncluded]: Start isIncluded. First operand 436 states. Second operand has 422 states, 309 states have (on average 1.2977346278317152) internal successors, (401), 338 states have internal predecessors, (401), 60 states have call successors, (60), 52 states have call predecessors, (60), 52 states have return successors, (80), 54 states have call predecessors, (80), 60 states have call successors, (80) [2022-02-20 18:07:37,670 INFO L87 Difference]: Start difference. First operand 436 states. Second operand has 422 states, 309 states have (on average 1.2977346278317152) internal successors, (401), 338 states have internal predecessors, (401), 60 states have call successors, (60), 52 states have call predecessors, (60), 52 states have return successors, (80), 54 states have call predecessors, (80), 60 states have call successors, (80) [2022-02-20 18:07:37,681 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:37,681 INFO L93 Difference]: Finished difference Result 436 states and 559 transitions. [2022-02-20 18:07:37,681 INFO L276 IsEmpty]: Start isEmpty. Operand 436 states and 559 transitions. [2022-02-20 18:07:37,682 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:37,683 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:37,683 INFO L74 IsIncluded]: Start isIncluded. First operand has 422 states, 309 states have (on average 1.2977346278317152) internal successors, (401), 338 states have internal predecessors, (401), 60 states have call successors, (60), 52 states have call predecessors, (60), 52 states have return successors, (80), 54 states have call predecessors, (80), 60 states have call successors, (80) Second operand 436 states. [2022-02-20 18:07:37,684 INFO L87 Difference]: Start difference. First operand has 422 states, 309 states have (on average 1.2977346278317152) internal successors, (401), 338 states have internal predecessors, (401), 60 states have call successors, (60), 52 states have call predecessors, (60), 52 states have return successors, (80), 54 states have call predecessors, (80), 60 states have call successors, (80) Second operand 436 states. [2022-02-20 18:07:37,696 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:37,696 INFO L93 Difference]: Finished difference Result 436 states and 559 transitions. [2022-02-20 18:07:37,697 INFO L276 IsEmpty]: Start isEmpty. Operand 436 states and 559 transitions. [2022-02-20 18:07:37,697 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:37,698 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:37,698 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:07:37,698 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:07:37,699 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 422 states, 309 states have (on average 1.2977346278317152) internal successors, (401), 338 states have internal predecessors, (401), 60 states have call successors, (60), 52 states have call predecessors, (60), 52 states have return successors, (80), 54 states have call predecessors, (80), 60 states have call successors, (80) [2022-02-20 18:07:37,710 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 422 states to 422 states and 541 transitions. [2022-02-20 18:07:37,710 INFO L78 Accepts]: Start accepts. Automaton has 422 states and 541 transitions. Word has length 38 [2022-02-20 18:07:37,710 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:07:37,710 INFO L470 AbstractCegarLoop]: Abstraction has 422 states and 541 transitions. [2022-02-20 18:07:37,711 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.5) internal successors, (33), 5 states have internal predecessors, (33), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:07:37,711 INFO L276 IsEmpty]: Start isEmpty. Operand 422 states and 541 transitions. [2022-02-20 18:07:37,711 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2022-02-20 18:07:37,712 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:07:37,712 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:07:37,712 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-02-20 18:07:37,712 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:07:37,712 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:07:37,713 INFO L85 PathProgramCache]: Analyzing trace with hash -1327873931, now seen corresponding path program 1 times [2022-02-20 18:07:37,713 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:07:37,713 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1222848438] [2022-02-20 18:07:37,713 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:07:37,713 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:07:37,731 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:37,743 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-02-20 18:07:37,744 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:37,746 INFO L290 TraceCheckUtils]: 0: Hoare triple {5887#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {5868#true} is VALID [2022-02-20 18:07:37,746 INFO L290 TraceCheckUtils]: 1: Hoare triple {5868#true} assume true; {5868#true} is VALID [2022-02-20 18:07:37,746 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {5868#true} {5868#true} #254#return; {5868#true} is VALID [2022-02-20 18:07:37,748 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-02-20 18:07:37,751 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:37,787 INFO L290 TraceCheckUtils]: 0: Hoare triple {5888#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~3#1; {5868#true} is VALID [2022-02-20 18:07:37,788 INFO L290 TraceCheckUtils]: 1: Hoare triple {5868#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret27#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~5#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~5#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {5868#true} is VALID [2022-02-20 18:07:37,788 INFO L290 TraceCheckUtils]: 2: Hoare triple {5868#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~2#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {5868#true} is VALID [2022-02-20 18:07:37,788 INFO L290 TraceCheckUtils]: 3: Hoare triple {5868#true} isHighWaterLevel_#t~ret27#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret27#1 && isHighWaterLevel_#t~ret27#1 <= 2147483647;isHighWaterLevel_~tmp~5#1 := isHighWaterLevel_#t~ret27#1;havoc isHighWaterLevel_#t~ret27#1; {5868#true} is VALID [2022-02-20 18:07:37,788 INFO L290 TraceCheckUtils]: 4: Hoare triple {5868#true} assume 0 != isHighWaterLevel_~tmp~5#1;isHighWaterLevel_~tmp___0~2#1 := 0; {5889#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 0)} is VALID [2022-02-20 18:07:37,789 INFO L290 TraceCheckUtils]: 5: Hoare triple {5889#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 0)} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {5890#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)} is VALID [2022-02-20 18:07:37,789 INFO L290 TraceCheckUtils]: 6: Hoare triple {5890#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)} #t~ret16#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret16#1 && #t~ret16#1 <= 2147483647;~tmp~3#1 := #t~ret16#1;havoc #t~ret16#1; {5891#(= |processEnvironment__wrappee__highWaterSensor_~tmp~3#1| 0)} is VALID [2022-02-20 18:07:37,789 INFO L290 TraceCheckUtils]: 7: Hoare triple {5891#(= |processEnvironment__wrappee__highWaterSensor_~tmp~3#1| 0)} assume 0 != ~tmp~3#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {5869#false} is VALID [2022-02-20 18:07:37,790 INFO L290 TraceCheckUtils]: 8: Hoare triple {5869#false} assume { :end_inline_activatePump } true; {5869#false} is VALID [2022-02-20 18:07:37,790 INFO L290 TraceCheckUtils]: 9: Hoare triple {5869#false} assume true; {5869#false} is VALID [2022-02-20 18:07:37,790 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {5869#false} {5868#true} #244#return; {5869#false} is VALID [2022-02-20 18:07:37,790 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2022-02-20 18:07:37,791 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:37,793 INFO L290 TraceCheckUtils]: 0: Hoare triple {5868#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {5868#true} is VALID [2022-02-20 18:07:37,793 INFO L290 TraceCheckUtils]: 1: Hoare triple {5868#true} assume true; {5868#true} is VALID [2022-02-20 18:07:37,793 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {5868#true} {5869#false} #246#return; {5869#false} is VALID [2022-02-20 18:07:37,793 INFO L290 TraceCheckUtils]: 0: Hoare triple {5868#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(13, 9);call #Ultimate.allocInit(3, 10);call write~init~int(79, 10, 0, 1);call write~init~int(110, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(4, 11);call write~init~int(79, 11, 0, 1);call write~init~int(102, 11, 1, 1);call write~init~int(102, 11, 2, 1);call write~init~int(0, 11, 3, 1);call #Ultimate.allocInit(7, 12);call write~init~int(44, 12, 0, 1);call write~init~int(80, 12, 1, 1);call write~init~int(117, 12, 2, 1);call write~init~int(109, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(3, 13);call write~init~int(79, 13, 0, 1);call write~init~int(110, 13, 1, 1);call write~init~int(0, 13, 2, 1);call #Ultimate.allocInit(4, 14);call write~init~int(79, 14, 0, 1);call write~init~int(102, 14, 1, 1);call write~init~int(102, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(3, 15);call write~init~int(41, 15, 0, 1);call write~init~int(32, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(10, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~methAndRunningLastTime~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {5868#true} is VALID [2022-02-20 18:07:37,793 INFO L290 TraceCheckUtils]: 1: Hoare triple {5868#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret9#1, main_~retValue_acc~3#1, main_~tmp~0#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true; {5868#true} is VALID [2022-02-20 18:07:37,793 INFO L290 TraceCheckUtils]: 2: Hoare triple {5868#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {5868#true} is VALID [2022-02-20 18:07:37,794 INFO L290 TraceCheckUtils]: 3: Hoare triple {5868#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~8#1;havoc valid_product_~retValue_acc~8#1;valid_product_~retValue_acc~8#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~8#1; {5868#true} is VALID [2022-02-20 18:07:37,794 INFO L290 TraceCheckUtils]: 4: Hoare triple {5868#true} main_#t~ret9#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret9#1 && main_#t~ret9#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret9#1;havoc main_#t~ret9#1; {5868#true} is VALID [2022-02-20 18:07:37,794 INFO L290 TraceCheckUtils]: 5: Hoare triple {5868#true} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {5868#true} is VALID [2022-02-20 18:07:37,794 INFO L290 TraceCheckUtils]: 6: Hoare triple {5868#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0; {5868#true} is VALID [2022-02-20 18:07:37,794 INFO L290 TraceCheckUtils]: 7: Hoare triple {5868#true} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet12#1, test_#t~nondet13#1, test_#t~nondet14#1, test_#t~nondet15#1, test_~splverifierCounter~0#1, test_~tmp~2#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~2#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {5868#true} is VALID [2022-02-20 18:07:37,794 INFO L290 TraceCheckUtils]: 8: Hoare triple {5868#true} assume !false; {5868#true} is VALID [2022-02-20 18:07:37,794 INFO L290 TraceCheckUtils]: 9: Hoare triple {5868#true} assume test_~splverifierCounter~0#1 < 4; {5868#true} is VALID [2022-02-20 18:07:37,795 INFO L290 TraceCheckUtils]: 10: Hoare triple {5868#true} assume -2147483648 <= test_#t~nondet12#1 && test_#t~nondet12#1 <= 2147483647;test_~tmp~2#1 := test_#t~nondet12#1;havoc test_#t~nondet12#1; {5868#true} is VALID [2022-02-20 18:07:37,795 INFO L290 TraceCheckUtils]: 11: Hoare triple {5868#true} assume !(0 != test_~tmp~2#1); {5868#true} is VALID [2022-02-20 18:07:37,795 INFO L290 TraceCheckUtils]: 12: Hoare triple {5868#true} assume -2147483648 <= test_#t~nondet13#1 && test_#t~nondet13#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet13#1;havoc test_#t~nondet13#1; {5868#true} is VALID [2022-02-20 18:07:37,795 INFO L290 TraceCheckUtils]: 13: Hoare triple {5868#true} assume 0 != test_~tmp___0~1#1; {5868#true} is VALID [2022-02-20 18:07:37,795 INFO L272 TraceCheckUtils]: 14: Hoare triple {5868#true} call changeMethaneLevel(); {5887#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:37,795 INFO L290 TraceCheckUtils]: 15: Hoare triple {5887#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {5868#true} is VALID [2022-02-20 18:07:37,796 INFO L290 TraceCheckUtils]: 16: Hoare triple {5868#true} assume true; {5868#true} is VALID [2022-02-20 18:07:37,796 INFO L284 TraceCheckUtils]: 17: Hoare quadruple {5868#true} {5868#true} #254#return; {5868#true} is VALID [2022-02-20 18:07:37,796 INFO L290 TraceCheckUtils]: 18: Hoare triple {5868#true} assume -2147483648 <= test_#t~nondet14#1 && test_#t~nondet14#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet14#1;havoc test_#t~nondet14#1; {5868#true} is VALID [2022-02-20 18:07:37,796 INFO L290 TraceCheckUtils]: 19: Hoare triple {5868#true} assume 0 != test_~tmp___2~0#1; {5868#true} is VALID [2022-02-20 18:07:37,796 INFO L272 TraceCheckUtils]: 20: Hoare triple {5868#true} call timeShift(); {5868#true} is VALID [2022-02-20 18:07:37,796 INFO L290 TraceCheckUtils]: 21: Hoare triple {5868#true} assume !(0 != ~pumpRunning~0); {5868#true} is VALID [2022-02-20 18:07:37,796 INFO L290 TraceCheckUtils]: 22: Hoare triple {5868#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret17#1, processEnvironment_~tmp~4#1;havoc processEnvironment_~tmp~4#1; {5868#true} is VALID [2022-02-20 18:07:37,797 INFO L290 TraceCheckUtils]: 23: Hoare triple {5868#true} assume !(0 != ~pumpRunning~0); {5868#true} is VALID [2022-02-20 18:07:37,797 INFO L272 TraceCheckUtils]: 24: Hoare triple {5868#true} call processEnvironment__wrappee__highWaterSensor(); {5888#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:07:37,797 INFO L290 TraceCheckUtils]: 25: Hoare triple {5888#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~3#1; {5868#true} is VALID [2022-02-20 18:07:37,797 INFO L290 TraceCheckUtils]: 26: Hoare triple {5868#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret27#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~5#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~5#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {5868#true} is VALID [2022-02-20 18:07:37,797 INFO L290 TraceCheckUtils]: 27: Hoare triple {5868#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~2#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {5868#true} is VALID [2022-02-20 18:07:37,798 INFO L290 TraceCheckUtils]: 28: Hoare triple {5868#true} isHighWaterLevel_#t~ret27#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret27#1 && isHighWaterLevel_#t~ret27#1 <= 2147483647;isHighWaterLevel_~tmp~5#1 := isHighWaterLevel_#t~ret27#1;havoc isHighWaterLevel_#t~ret27#1; {5868#true} is VALID [2022-02-20 18:07:37,798 INFO L290 TraceCheckUtils]: 29: Hoare triple {5868#true} assume 0 != isHighWaterLevel_~tmp~5#1;isHighWaterLevel_~tmp___0~2#1 := 0; {5889#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 0)} is VALID [2022-02-20 18:07:37,798 INFO L290 TraceCheckUtils]: 30: Hoare triple {5889#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 0)} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {5890#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)} is VALID [2022-02-20 18:07:37,799 INFO L290 TraceCheckUtils]: 31: Hoare triple {5890#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)} #t~ret16#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret16#1 && #t~ret16#1 <= 2147483647;~tmp~3#1 := #t~ret16#1;havoc #t~ret16#1; {5891#(= |processEnvironment__wrappee__highWaterSensor_~tmp~3#1| 0)} is VALID [2022-02-20 18:07:37,799 INFO L290 TraceCheckUtils]: 32: Hoare triple {5891#(= |processEnvironment__wrappee__highWaterSensor_~tmp~3#1| 0)} assume 0 != ~tmp~3#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {5869#false} is VALID [2022-02-20 18:07:37,799 INFO L290 TraceCheckUtils]: 33: Hoare triple {5869#false} assume { :end_inline_activatePump } true; {5869#false} is VALID [2022-02-20 18:07:37,799 INFO L290 TraceCheckUtils]: 34: Hoare triple {5869#false} assume true; {5869#false} is VALID [2022-02-20 18:07:37,799 INFO L284 TraceCheckUtils]: 35: Hoare quadruple {5869#false} {5868#true} #244#return; {5869#false} is VALID [2022-02-20 18:07:37,799 INFO L290 TraceCheckUtils]: 36: Hoare triple {5869#false} assume { :end_inline_processEnvironment } true; {5869#false} is VALID [2022-02-20 18:07:37,800 INFO L290 TraceCheckUtils]: 37: Hoare triple {5869#false} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret10#1, __utac_acc__Specification2_spec__2_#t~ret11#1, __utac_acc__Specification2_spec__2_~tmp~1#1, __utac_acc__Specification2_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__2_~tmp~1#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~0#1; {5869#false} is VALID [2022-02-20 18:07:37,800 INFO L272 TraceCheckUtils]: 38: Hoare triple {5869#false} call __utac_acc__Specification2_spec__2_#t~ret10#1 := isMethaneLevelCritical(); {5868#true} is VALID [2022-02-20 18:07:37,800 INFO L290 TraceCheckUtils]: 39: Hoare triple {5868#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {5868#true} is VALID [2022-02-20 18:07:37,800 INFO L290 TraceCheckUtils]: 40: Hoare triple {5868#true} assume true; {5868#true} is VALID [2022-02-20 18:07:37,800 INFO L284 TraceCheckUtils]: 41: Hoare quadruple {5868#true} {5869#false} #246#return; {5869#false} is VALID [2022-02-20 18:07:37,800 INFO L290 TraceCheckUtils]: 42: Hoare triple {5869#false} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret10#1 && __utac_acc__Specification2_spec__2_#t~ret10#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~1#1 := __utac_acc__Specification2_spec__2_#t~ret10#1;havoc __utac_acc__Specification2_spec__2_#t~ret10#1; {5869#false} is VALID [2022-02-20 18:07:37,800 INFO L290 TraceCheckUtils]: 43: Hoare triple {5869#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~1#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~5#1;havoc isPumpRunning_~retValue_acc~5#1;isPumpRunning_~retValue_acc~5#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~5#1; {5869#false} is VALID [2022-02-20 18:07:37,801 INFO L290 TraceCheckUtils]: 44: Hoare triple {5869#false} __utac_acc__Specification2_spec__2_#t~ret11#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret11#1 && __utac_acc__Specification2_spec__2_#t~ret11#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~0#1 := __utac_acc__Specification2_spec__2_#t~ret11#1;havoc __utac_acc__Specification2_spec__2_#t~ret11#1; {5869#false} is VALID [2022-02-20 18:07:37,801 INFO L290 TraceCheckUtils]: 45: Hoare triple {5869#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~0#1; {5869#false} is VALID [2022-02-20 18:07:37,801 INFO L290 TraceCheckUtils]: 46: Hoare triple {5869#false} assume 0 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {5869#false} is VALID [2022-02-20 18:07:37,801 INFO L290 TraceCheckUtils]: 47: Hoare triple {5869#false} assume !false; {5869#false} is VALID [2022-02-20 18:07:37,801 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:07:37,801 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:07:37,801 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1222848438] [2022-02-20 18:07:37,802 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1222848438] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:07:37,802 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:07:37,802 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-02-20 18:07:37,802 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [136455484] [2022-02-20 18:07:37,802 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:07:37,802 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 48 [2022-02-20 18:07:37,803 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:07:37,803 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:07:37,827 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 48 edges. 48 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:37,827 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-02-20 18:07:37,827 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:07:37,827 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-02-20 18:07:37,828 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-02-20 18:07:37,828 INFO L87 Difference]: Start difference. First operand 422 states and 541 transitions. Second operand has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:07:38,430 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:38,431 INFO L93 Difference]: Finished difference Result 944 states and 1225 transitions. [2022-02-20 18:07:38,431 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-02-20 18:07:38,431 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 48 [2022-02-20 18:07:38,431 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:07:38,431 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:07:38,434 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 221 transitions. [2022-02-20 18:07:38,435 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:07:38,436 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 221 transitions. [2022-02-20 18:07:38,437 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 9 states and 221 transitions. [2022-02-20 18:07:38,584 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 221 edges. 221 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:38,599 INFO L225 Difference]: With dead ends: 944 [2022-02-20 18:07:38,600 INFO L226 Difference]: Without dead ends: 530 [2022-02-20 18:07:38,601 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2022-02-20 18:07:38,601 INFO L933 BasicCegarLoop]: 85 mSDtfsCounter, 117 mSDsluCounter, 133 mSDsCounter, 0 mSdLazyCounter, 296 mSolverCounterSat, 47 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 118 SdHoareTripleChecker+Valid, 218 SdHoareTripleChecker+Invalid, 343 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 47 IncrementalHoareTripleChecker+Valid, 296 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-02-20 18:07:38,602 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [118 Valid, 218 Invalid, 343 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [47 Valid, 296 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-02-20 18:07:38,602 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 530 states. [2022-02-20 18:07:38,616 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 530 to 516. [2022-02-20 18:07:38,617 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:07:38,618 INFO L82 GeneralOperation]: Start isEquivalent. First operand 530 states. Second operand has 516 states, 383 states have (on average 1.2610966057441253) internal successors, (483), 412 states have internal predecessors, (483), 68 states have call successors, (68), 52 states have call predecessors, (68), 64 states have return successors, (100), 70 states have call predecessors, (100), 68 states have call successors, (100) [2022-02-20 18:07:38,618 INFO L74 IsIncluded]: Start isIncluded. First operand 530 states. Second operand has 516 states, 383 states have (on average 1.2610966057441253) internal successors, (483), 412 states have internal predecessors, (483), 68 states have call successors, (68), 52 states have call predecessors, (68), 64 states have return successors, (100), 70 states have call predecessors, (100), 68 states have call successors, (100) [2022-02-20 18:07:38,619 INFO L87 Difference]: Start difference. First operand 530 states. Second operand has 516 states, 383 states have (on average 1.2610966057441253) internal successors, (483), 412 states have internal predecessors, (483), 68 states have call successors, (68), 52 states have call predecessors, (68), 64 states have return successors, (100), 70 states have call predecessors, (100), 68 states have call successors, (100) [2022-02-20 18:07:38,631 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:38,632 INFO L93 Difference]: Finished difference Result 530 states and 672 transitions. [2022-02-20 18:07:38,632 INFO L276 IsEmpty]: Start isEmpty. Operand 530 states and 672 transitions. [2022-02-20 18:07:38,633 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:38,633 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:38,634 INFO L74 IsIncluded]: Start isIncluded. First operand has 516 states, 383 states have (on average 1.2610966057441253) internal successors, (483), 412 states have internal predecessors, (483), 68 states have call successors, (68), 52 states have call predecessors, (68), 64 states have return successors, (100), 70 states have call predecessors, (100), 68 states have call successors, (100) Second operand 530 states. [2022-02-20 18:07:38,635 INFO L87 Difference]: Start difference. First operand has 516 states, 383 states have (on average 1.2610966057441253) internal successors, (483), 412 states have internal predecessors, (483), 68 states have call successors, (68), 52 states have call predecessors, (68), 64 states have return successors, (100), 70 states have call predecessors, (100), 68 states have call successors, (100) Second operand 530 states. [2022-02-20 18:07:38,647 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:38,647 INFO L93 Difference]: Finished difference Result 530 states and 672 transitions. [2022-02-20 18:07:38,648 INFO L276 IsEmpty]: Start isEmpty. Operand 530 states and 672 transitions. [2022-02-20 18:07:38,649 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:38,649 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:38,649 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:07:38,649 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:07:38,650 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 516 states, 383 states have (on average 1.2610966057441253) internal successors, (483), 412 states have internal predecessors, (483), 68 states have call successors, (68), 52 states have call predecessors, (68), 64 states have return successors, (100), 70 states have call predecessors, (100), 68 states have call successors, (100) [2022-02-20 18:07:38,664 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 516 states to 516 states and 651 transitions. [2022-02-20 18:07:38,664 INFO L78 Accepts]: Start accepts. Automaton has 516 states and 651 transitions. Word has length 48 [2022-02-20 18:07:38,664 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:07:38,665 INFO L470 AbstractCegarLoop]: Abstraction has 516 states and 651 transitions. [2022-02-20 18:07:38,665 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:07:38,665 INFO L276 IsEmpty]: Start isEmpty. Operand 516 states and 651 transitions. [2022-02-20 18:07:38,666 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2022-02-20 18:07:38,666 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:07:38,666 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:07:38,666 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-02-20 18:07:38,666 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:07:38,667 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:07:38,667 INFO L85 PathProgramCache]: Analyzing trace with hash 1278149623, now seen corresponding path program 1 times [2022-02-20 18:07:38,667 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:07:38,667 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1734047587] [2022-02-20 18:07:38,667 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:07:38,667 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:07:38,693 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:38,719 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-02-20 18:07:38,720 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:38,724 INFO L290 TraceCheckUtils]: 0: Hoare triple {9008#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {8989#true} is VALID [2022-02-20 18:07:38,724 INFO L290 TraceCheckUtils]: 1: Hoare triple {8989#true} assume true; {8989#true} is VALID [2022-02-20 18:07:38,724 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {8989#true} {8989#true} #254#return; {8989#true} is VALID [2022-02-20 18:07:38,726 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-02-20 18:07:38,736 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:38,754 INFO L290 TraceCheckUtils]: 0: Hoare triple {9009#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~3#1; {8989#true} is VALID [2022-02-20 18:07:38,755 INFO L290 TraceCheckUtils]: 1: Hoare triple {8989#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret27#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~5#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~5#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {8989#true} is VALID [2022-02-20 18:07:38,755 INFO L290 TraceCheckUtils]: 2: Hoare triple {8989#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~2#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {9010#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1)} is VALID [2022-02-20 18:07:38,755 INFO L290 TraceCheckUtils]: 3: Hoare triple {9010#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1)} isHighWaterLevel_#t~ret27#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret27#1 && isHighWaterLevel_#t~ret27#1 <= 2147483647;isHighWaterLevel_~tmp~5#1 := isHighWaterLevel_#t~ret27#1;havoc isHighWaterLevel_#t~ret27#1; {9011#(= (+ (- 1) |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~5#1|) 0)} is VALID [2022-02-20 18:07:38,756 INFO L290 TraceCheckUtils]: 4: Hoare triple {9011#(= (+ (- 1) |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~5#1|) 0)} assume !(0 != isHighWaterLevel_~tmp~5#1);isHighWaterLevel_~tmp___0~2#1 := 1; {8990#false} is VALID [2022-02-20 18:07:38,756 INFO L290 TraceCheckUtils]: 5: Hoare triple {8990#false} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {8990#false} is VALID [2022-02-20 18:07:38,756 INFO L290 TraceCheckUtils]: 6: Hoare triple {8990#false} #t~ret16#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret16#1 && #t~ret16#1 <= 2147483647;~tmp~3#1 := #t~ret16#1;havoc #t~ret16#1; {8990#false} is VALID [2022-02-20 18:07:38,758 INFO L290 TraceCheckUtils]: 7: Hoare triple {8990#false} assume 0 != ~tmp~3#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {8990#false} is VALID [2022-02-20 18:07:38,759 INFO L290 TraceCheckUtils]: 8: Hoare triple {8990#false} assume { :end_inline_activatePump } true; {8990#false} is VALID [2022-02-20 18:07:38,760 INFO L290 TraceCheckUtils]: 9: Hoare triple {8990#false} assume true; {8990#false} is VALID [2022-02-20 18:07:38,760 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {8990#false} {8989#true} #244#return; {8990#false} is VALID [2022-02-20 18:07:38,761 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2022-02-20 18:07:38,762 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:38,765 INFO L290 TraceCheckUtils]: 0: Hoare triple {8989#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {8989#true} is VALID [2022-02-20 18:07:38,765 INFO L290 TraceCheckUtils]: 1: Hoare triple {8989#true} assume true; {8989#true} is VALID [2022-02-20 18:07:38,765 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {8989#true} {8990#false} #246#return; {8990#false} is VALID [2022-02-20 18:07:38,765 INFO L290 TraceCheckUtils]: 0: Hoare triple {8989#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(13, 9);call #Ultimate.allocInit(3, 10);call write~init~int(79, 10, 0, 1);call write~init~int(110, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(4, 11);call write~init~int(79, 11, 0, 1);call write~init~int(102, 11, 1, 1);call write~init~int(102, 11, 2, 1);call write~init~int(0, 11, 3, 1);call #Ultimate.allocInit(7, 12);call write~init~int(44, 12, 0, 1);call write~init~int(80, 12, 1, 1);call write~init~int(117, 12, 2, 1);call write~init~int(109, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(3, 13);call write~init~int(79, 13, 0, 1);call write~init~int(110, 13, 1, 1);call write~init~int(0, 13, 2, 1);call #Ultimate.allocInit(4, 14);call write~init~int(79, 14, 0, 1);call write~init~int(102, 14, 1, 1);call write~init~int(102, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(3, 15);call write~init~int(41, 15, 0, 1);call write~init~int(32, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(10, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~methAndRunningLastTime~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {8989#true} is VALID [2022-02-20 18:07:38,765 INFO L290 TraceCheckUtils]: 1: Hoare triple {8989#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret9#1, main_~retValue_acc~3#1, main_~tmp~0#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true; {8989#true} is VALID [2022-02-20 18:07:38,767 INFO L290 TraceCheckUtils]: 2: Hoare triple {8989#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {8989#true} is VALID [2022-02-20 18:07:38,768 INFO L290 TraceCheckUtils]: 3: Hoare triple {8989#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~8#1;havoc valid_product_~retValue_acc~8#1;valid_product_~retValue_acc~8#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~8#1; {8989#true} is VALID [2022-02-20 18:07:38,768 INFO L290 TraceCheckUtils]: 4: Hoare triple {8989#true} main_#t~ret9#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret9#1 && main_#t~ret9#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret9#1;havoc main_#t~ret9#1; {8989#true} is VALID [2022-02-20 18:07:38,768 INFO L290 TraceCheckUtils]: 5: Hoare triple {8989#true} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {8989#true} is VALID [2022-02-20 18:07:38,768 INFO L290 TraceCheckUtils]: 6: Hoare triple {8989#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0; {8989#true} is VALID [2022-02-20 18:07:38,768 INFO L290 TraceCheckUtils]: 7: Hoare triple {8989#true} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet12#1, test_#t~nondet13#1, test_#t~nondet14#1, test_#t~nondet15#1, test_~splverifierCounter~0#1, test_~tmp~2#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~2#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {8989#true} is VALID [2022-02-20 18:07:38,768 INFO L290 TraceCheckUtils]: 8: Hoare triple {8989#true} assume !false; {8989#true} is VALID [2022-02-20 18:07:38,769 INFO L290 TraceCheckUtils]: 9: Hoare triple {8989#true} assume test_~splverifierCounter~0#1 < 4; {8989#true} is VALID [2022-02-20 18:07:38,769 INFO L290 TraceCheckUtils]: 10: Hoare triple {8989#true} assume -2147483648 <= test_#t~nondet12#1 && test_#t~nondet12#1 <= 2147483647;test_~tmp~2#1 := test_#t~nondet12#1;havoc test_#t~nondet12#1; {8989#true} is VALID [2022-02-20 18:07:38,769 INFO L290 TraceCheckUtils]: 11: Hoare triple {8989#true} assume !(0 != test_~tmp~2#1); {8989#true} is VALID [2022-02-20 18:07:38,769 INFO L290 TraceCheckUtils]: 12: Hoare triple {8989#true} assume -2147483648 <= test_#t~nondet13#1 && test_#t~nondet13#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet13#1;havoc test_#t~nondet13#1; {8989#true} is VALID [2022-02-20 18:07:38,769 INFO L290 TraceCheckUtils]: 13: Hoare triple {8989#true} assume 0 != test_~tmp___0~1#1; {8989#true} is VALID [2022-02-20 18:07:38,769 INFO L272 TraceCheckUtils]: 14: Hoare triple {8989#true} call changeMethaneLevel(); {9008#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:38,770 INFO L290 TraceCheckUtils]: 15: Hoare triple {9008#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {8989#true} is VALID [2022-02-20 18:07:38,770 INFO L290 TraceCheckUtils]: 16: Hoare triple {8989#true} assume true; {8989#true} is VALID [2022-02-20 18:07:38,770 INFO L284 TraceCheckUtils]: 17: Hoare quadruple {8989#true} {8989#true} #254#return; {8989#true} is VALID [2022-02-20 18:07:38,770 INFO L290 TraceCheckUtils]: 18: Hoare triple {8989#true} assume -2147483648 <= test_#t~nondet14#1 && test_#t~nondet14#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet14#1;havoc test_#t~nondet14#1; {8989#true} is VALID [2022-02-20 18:07:38,770 INFO L290 TraceCheckUtils]: 19: Hoare triple {8989#true} assume 0 != test_~tmp___2~0#1; {8989#true} is VALID [2022-02-20 18:07:38,770 INFO L272 TraceCheckUtils]: 20: Hoare triple {8989#true} call timeShift(); {8989#true} is VALID [2022-02-20 18:07:38,770 INFO L290 TraceCheckUtils]: 21: Hoare triple {8989#true} assume !(0 != ~pumpRunning~0); {8989#true} is VALID [2022-02-20 18:07:38,771 INFO L290 TraceCheckUtils]: 22: Hoare triple {8989#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret17#1, processEnvironment_~tmp~4#1;havoc processEnvironment_~tmp~4#1; {8989#true} is VALID [2022-02-20 18:07:38,771 INFO L290 TraceCheckUtils]: 23: Hoare triple {8989#true} assume !(0 != ~pumpRunning~0); {8989#true} is VALID [2022-02-20 18:07:38,771 INFO L272 TraceCheckUtils]: 24: Hoare triple {8989#true} call processEnvironment__wrappee__highWaterSensor(); {9009#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:07:38,771 INFO L290 TraceCheckUtils]: 25: Hoare triple {9009#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~3#1; {8989#true} is VALID [2022-02-20 18:07:38,771 INFO L290 TraceCheckUtils]: 26: Hoare triple {8989#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret27#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~5#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~5#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {8989#true} is VALID [2022-02-20 18:07:38,772 INFO L290 TraceCheckUtils]: 27: Hoare triple {8989#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~2#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {9010#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1)} is VALID [2022-02-20 18:07:38,773 INFO L290 TraceCheckUtils]: 28: Hoare triple {9010#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1)} isHighWaterLevel_#t~ret27#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret27#1 && isHighWaterLevel_#t~ret27#1 <= 2147483647;isHighWaterLevel_~tmp~5#1 := isHighWaterLevel_#t~ret27#1;havoc isHighWaterLevel_#t~ret27#1; {9011#(= (+ (- 1) |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~5#1|) 0)} is VALID [2022-02-20 18:07:38,773 INFO L290 TraceCheckUtils]: 29: Hoare triple {9011#(= (+ (- 1) |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~5#1|) 0)} assume !(0 != isHighWaterLevel_~tmp~5#1);isHighWaterLevel_~tmp___0~2#1 := 1; {8990#false} is VALID [2022-02-20 18:07:38,773 INFO L290 TraceCheckUtils]: 30: Hoare triple {8990#false} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {8990#false} is VALID [2022-02-20 18:07:38,773 INFO L290 TraceCheckUtils]: 31: Hoare triple {8990#false} #t~ret16#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret16#1 && #t~ret16#1 <= 2147483647;~tmp~3#1 := #t~ret16#1;havoc #t~ret16#1; {8990#false} is VALID [2022-02-20 18:07:38,773 INFO L290 TraceCheckUtils]: 32: Hoare triple {8990#false} assume 0 != ~tmp~3#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {8990#false} is VALID [2022-02-20 18:07:38,773 INFO L290 TraceCheckUtils]: 33: Hoare triple {8990#false} assume { :end_inline_activatePump } true; {8990#false} is VALID [2022-02-20 18:07:38,774 INFO L290 TraceCheckUtils]: 34: Hoare triple {8990#false} assume true; {8990#false} is VALID [2022-02-20 18:07:38,774 INFO L284 TraceCheckUtils]: 35: Hoare quadruple {8990#false} {8989#true} #244#return; {8990#false} is VALID [2022-02-20 18:07:38,774 INFO L290 TraceCheckUtils]: 36: Hoare triple {8990#false} assume { :end_inline_processEnvironment } true; {8990#false} is VALID [2022-02-20 18:07:38,774 INFO L290 TraceCheckUtils]: 37: Hoare triple {8990#false} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret10#1, __utac_acc__Specification2_spec__2_#t~ret11#1, __utac_acc__Specification2_spec__2_~tmp~1#1, __utac_acc__Specification2_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__2_~tmp~1#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~0#1; {8990#false} is VALID [2022-02-20 18:07:38,774 INFO L272 TraceCheckUtils]: 38: Hoare triple {8990#false} call __utac_acc__Specification2_spec__2_#t~ret10#1 := isMethaneLevelCritical(); {8989#true} is VALID [2022-02-20 18:07:38,774 INFO L290 TraceCheckUtils]: 39: Hoare triple {8989#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {8989#true} is VALID [2022-02-20 18:07:38,774 INFO L290 TraceCheckUtils]: 40: Hoare triple {8989#true} assume true; {8989#true} is VALID [2022-02-20 18:07:38,774 INFO L284 TraceCheckUtils]: 41: Hoare quadruple {8989#true} {8990#false} #246#return; {8990#false} is VALID [2022-02-20 18:07:38,775 INFO L290 TraceCheckUtils]: 42: Hoare triple {8990#false} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret10#1 && __utac_acc__Specification2_spec__2_#t~ret10#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~1#1 := __utac_acc__Specification2_spec__2_#t~ret10#1;havoc __utac_acc__Specification2_spec__2_#t~ret10#1; {8990#false} is VALID [2022-02-20 18:07:38,775 INFO L290 TraceCheckUtils]: 43: Hoare triple {8990#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~1#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~5#1;havoc isPumpRunning_~retValue_acc~5#1;isPumpRunning_~retValue_acc~5#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~5#1; {8990#false} is VALID [2022-02-20 18:07:38,775 INFO L290 TraceCheckUtils]: 44: Hoare triple {8990#false} __utac_acc__Specification2_spec__2_#t~ret11#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret11#1 && __utac_acc__Specification2_spec__2_#t~ret11#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~0#1 := __utac_acc__Specification2_spec__2_#t~ret11#1;havoc __utac_acc__Specification2_spec__2_#t~ret11#1; {8990#false} is VALID [2022-02-20 18:07:38,775 INFO L290 TraceCheckUtils]: 45: Hoare triple {8990#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~0#1; {8990#false} is VALID [2022-02-20 18:07:38,775 INFO L290 TraceCheckUtils]: 46: Hoare triple {8990#false} assume 0 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {8990#false} is VALID [2022-02-20 18:07:38,775 INFO L290 TraceCheckUtils]: 47: Hoare triple {8990#false} assume !false; {8990#false} is VALID [2022-02-20 18:07:38,776 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:07:38,777 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:07:38,777 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1734047587] [2022-02-20 18:07:38,777 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1734047587] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:07:38,777 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:07:38,777 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-02-20 18:07:38,777 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [998557704] [2022-02-20 18:07:38,777 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:07:38,778 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 4 states have internal predecessors, (41), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 48 [2022-02-20 18:07:38,778 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:07:38,778 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 4 states have internal predecessors, (41), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:07:38,801 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 48 edges. 48 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:38,802 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-02-20 18:07:38,802 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:07:38,803 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-02-20 18:07:38,803 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-02-20 18:07:38,803 INFO L87 Difference]: Start difference. First operand 516 states and 651 transitions. Second operand has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 4 states have internal predecessors, (41), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:07:39,278 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:39,278 INFO L93 Difference]: Finished difference Result 1058 states and 1371 transitions. [2022-02-20 18:07:39,278 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-02-20 18:07:39,279 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 4 states have internal predecessors, (41), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 48 [2022-02-20 18:07:39,279 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:07:39,279 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 4 states have internal predecessors, (41), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:07:39,281 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 221 transitions. [2022-02-20 18:07:39,281 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 4 states have internal predecessors, (41), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:07:39,283 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 221 transitions. [2022-02-20 18:07:39,283 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 221 transitions. [2022-02-20 18:07:39,409 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 221 edges. 221 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:39,425 INFO L225 Difference]: With dead ends: 1058 [2022-02-20 18:07:39,425 INFO L226 Difference]: Without dead ends: 550 [2022-02-20 18:07:39,426 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-02-20 18:07:39,427 INFO L933 BasicCegarLoop]: 85 mSDtfsCounter, 123 mSDsluCounter, 104 mSDsCounter, 0 mSdLazyCounter, 215 mSolverCounterSat, 45 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 124 SdHoareTripleChecker+Valid, 189 SdHoareTripleChecker+Invalid, 260 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 45 IncrementalHoareTripleChecker+Valid, 215 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-02-20 18:07:39,427 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [124 Valid, 189 Invalid, 260 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [45 Valid, 215 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-02-20 18:07:39,428 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 550 states. [2022-02-20 18:07:39,441 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 550 to 524. [2022-02-20 18:07:39,442 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:07:39,443 INFO L82 GeneralOperation]: Start isEquivalent. First operand 550 states. Second operand has 524 states, 391 states have (on average 1.2557544757033248) internal successors, (491), 420 states have internal predecessors, (491), 68 states have call successors, (68), 52 states have call predecessors, (68), 64 states have return successors, (100), 70 states have call predecessors, (100), 68 states have call successors, (100) [2022-02-20 18:07:39,444 INFO L74 IsIncluded]: Start isIncluded. First operand 550 states. Second operand has 524 states, 391 states have (on average 1.2557544757033248) internal successors, (491), 420 states have internal predecessors, (491), 68 states have call successors, (68), 52 states have call predecessors, (68), 64 states have return successors, (100), 70 states have call predecessors, (100), 68 states have call successors, (100) [2022-02-20 18:07:39,444 INFO L87 Difference]: Start difference. First operand 550 states. Second operand has 524 states, 391 states have (on average 1.2557544757033248) internal successors, (491), 420 states have internal predecessors, (491), 68 states have call successors, (68), 52 states have call predecessors, (68), 64 states have return successors, (100), 70 states have call predecessors, (100), 68 states have call successors, (100) [2022-02-20 18:07:39,456 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:39,457 INFO L93 Difference]: Finished difference Result 550 states and 692 transitions. [2022-02-20 18:07:39,457 INFO L276 IsEmpty]: Start isEmpty. Operand 550 states and 692 transitions. [2022-02-20 18:07:39,458 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:39,458 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:39,459 INFO L74 IsIncluded]: Start isIncluded. First operand has 524 states, 391 states have (on average 1.2557544757033248) internal successors, (491), 420 states have internal predecessors, (491), 68 states have call successors, (68), 52 states have call predecessors, (68), 64 states have return successors, (100), 70 states have call predecessors, (100), 68 states have call successors, (100) Second operand 550 states. [2022-02-20 18:07:39,460 INFO L87 Difference]: Start difference. First operand has 524 states, 391 states have (on average 1.2557544757033248) internal successors, (491), 420 states have internal predecessors, (491), 68 states have call successors, (68), 52 states have call predecessors, (68), 64 states have return successors, (100), 70 states have call predecessors, (100), 68 states have call successors, (100) Second operand 550 states. [2022-02-20 18:07:39,472 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:39,473 INFO L93 Difference]: Finished difference Result 550 states and 692 transitions. [2022-02-20 18:07:39,473 INFO L276 IsEmpty]: Start isEmpty. Operand 550 states and 692 transitions. [2022-02-20 18:07:39,474 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:39,474 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:39,474 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:07:39,474 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:07:39,476 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 524 states, 391 states have (on average 1.2557544757033248) internal successors, (491), 420 states have internal predecessors, (491), 68 states have call successors, (68), 52 states have call predecessors, (68), 64 states have return successors, (100), 70 states have call predecessors, (100), 68 states have call successors, (100) [2022-02-20 18:07:39,489 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 524 states to 524 states and 659 transitions. [2022-02-20 18:07:39,490 INFO L78 Accepts]: Start accepts. Automaton has 524 states and 659 transitions. Word has length 48 [2022-02-20 18:07:39,490 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:07:39,490 INFO L470 AbstractCegarLoop]: Abstraction has 524 states and 659 transitions. [2022-02-20 18:07:39,491 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 4 states have internal predecessors, (41), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:07:39,491 INFO L276 IsEmpty]: Start isEmpty. Operand 524 states and 659 transitions. [2022-02-20 18:07:39,491 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2022-02-20 18:07:39,492 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:07:39,492 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:07:39,492 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-02-20 18:07:39,492 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:07:39,492 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:07:39,493 INFO L85 PathProgramCache]: Analyzing trace with hash 1700851449, now seen corresponding path program 1 times [2022-02-20 18:07:39,493 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:07:39,493 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1192958526] [2022-02-20 18:07:39,493 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:07:39,493 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:07:39,506 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:39,523 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-02-20 18:07:39,524 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:39,527 INFO L290 TraceCheckUtils]: 0: Hoare triple {12331#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {12311#true} is VALID [2022-02-20 18:07:39,527 INFO L290 TraceCheckUtils]: 1: Hoare triple {12311#true} assume true; {12311#true} is VALID [2022-02-20 18:07:39,527 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {12311#true} {12313#(= ~waterLevel~0 1)} #254#return; {12313#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:39,529 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-02-20 18:07:39,533 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:39,542 INFO L290 TraceCheckUtils]: 0: Hoare triple {12332#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~3#1; {12311#true} is VALID [2022-02-20 18:07:39,542 INFO L290 TraceCheckUtils]: 1: Hoare triple {12311#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret27#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~5#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~5#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {12311#true} is VALID [2022-02-20 18:07:39,543 INFO L290 TraceCheckUtils]: 2: Hoare triple {12311#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {12333#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:39,543 INFO L290 TraceCheckUtils]: 3: Hoare triple {12333#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret27#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret27#1 && isHighWaterLevel_#t~ret27#1 <= 2147483647;isHighWaterLevel_~tmp~5#1 := isHighWaterLevel_#t~ret27#1;havoc isHighWaterLevel_#t~ret27#1; {12333#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:39,543 INFO L290 TraceCheckUtils]: 4: Hoare triple {12333#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~5#1);isHighWaterLevel_~tmp___0~2#1 := 1; {12333#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:39,544 INFO L290 TraceCheckUtils]: 5: Hoare triple {12333#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {12333#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:39,544 INFO L290 TraceCheckUtils]: 6: Hoare triple {12333#(<= 2 ~waterLevel~0)} #t~ret16#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret16#1 && #t~ret16#1 <= 2147483647;~tmp~3#1 := #t~ret16#1;havoc #t~ret16#1; {12333#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:39,544 INFO L290 TraceCheckUtils]: 7: Hoare triple {12333#(<= 2 ~waterLevel~0)} assume 0 != ~tmp~3#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {12333#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:39,544 INFO L290 TraceCheckUtils]: 8: Hoare triple {12333#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump } true; {12333#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:39,545 INFO L290 TraceCheckUtils]: 9: Hoare triple {12333#(<= 2 ~waterLevel~0)} assume true; {12333#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:39,545 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {12333#(<= 2 ~waterLevel~0)} {12313#(= ~waterLevel~0 1)} #244#return; {12312#false} is VALID [2022-02-20 18:07:39,545 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2022-02-20 18:07:39,546 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:39,548 INFO L290 TraceCheckUtils]: 0: Hoare triple {12311#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {12311#true} is VALID [2022-02-20 18:07:39,548 INFO L290 TraceCheckUtils]: 1: Hoare triple {12311#true} assume true; {12311#true} is VALID [2022-02-20 18:07:39,548 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {12311#true} {12312#false} #246#return; {12312#false} is VALID [2022-02-20 18:07:39,548 INFO L290 TraceCheckUtils]: 0: Hoare triple {12311#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(13, 9);call #Ultimate.allocInit(3, 10);call write~init~int(79, 10, 0, 1);call write~init~int(110, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(4, 11);call write~init~int(79, 11, 0, 1);call write~init~int(102, 11, 1, 1);call write~init~int(102, 11, 2, 1);call write~init~int(0, 11, 3, 1);call #Ultimate.allocInit(7, 12);call write~init~int(44, 12, 0, 1);call write~init~int(80, 12, 1, 1);call write~init~int(117, 12, 2, 1);call write~init~int(109, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(3, 13);call write~init~int(79, 13, 0, 1);call write~init~int(110, 13, 1, 1);call write~init~int(0, 13, 2, 1);call #Ultimate.allocInit(4, 14);call write~init~int(79, 14, 0, 1);call write~init~int(102, 14, 1, 1);call write~init~int(102, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(3, 15);call write~init~int(41, 15, 0, 1);call write~init~int(32, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(10, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~methAndRunningLastTime~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {12313#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:39,549 INFO L290 TraceCheckUtils]: 1: Hoare triple {12313#(= ~waterLevel~0 1)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret9#1, main_~retValue_acc~3#1, main_~tmp~0#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true; {12313#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:39,549 INFO L290 TraceCheckUtils]: 2: Hoare triple {12313#(= ~waterLevel~0 1)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {12313#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:39,549 INFO L290 TraceCheckUtils]: 3: Hoare triple {12313#(= ~waterLevel~0 1)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~8#1;havoc valid_product_~retValue_acc~8#1;valid_product_~retValue_acc~8#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~8#1; {12313#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:39,550 INFO L290 TraceCheckUtils]: 4: Hoare triple {12313#(= ~waterLevel~0 1)} main_#t~ret9#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret9#1 && main_#t~ret9#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret9#1;havoc main_#t~ret9#1; {12313#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:39,550 INFO L290 TraceCheckUtils]: 5: Hoare triple {12313#(= ~waterLevel~0 1)} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {12313#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:39,550 INFO L290 TraceCheckUtils]: 6: Hoare triple {12313#(= ~waterLevel~0 1)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0; {12313#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:39,550 INFO L290 TraceCheckUtils]: 7: Hoare triple {12313#(= ~waterLevel~0 1)} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet12#1, test_#t~nondet13#1, test_#t~nondet14#1, test_#t~nondet15#1, test_~splverifierCounter~0#1, test_~tmp~2#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~2#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {12313#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:39,551 INFO L290 TraceCheckUtils]: 8: Hoare triple {12313#(= ~waterLevel~0 1)} assume !false; {12313#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:39,551 INFO L290 TraceCheckUtils]: 9: Hoare triple {12313#(= ~waterLevel~0 1)} assume test_~splverifierCounter~0#1 < 4; {12313#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:39,551 INFO L290 TraceCheckUtils]: 10: Hoare triple {12313#(= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet12#1 && test_#t~nondet12#1 <= 2147483647;test_~tmp~2#1 := test_#t~nondet12#1;havoc test_#t~nondet12#1; {12313#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:39,552 INFO L290 TraceCheckUtils]: 11: Hoare triple {12313#(= ~waterLevel~0 1)} assume !(0 != test_~tmp~2#1); {12313#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:39,552 INFO L290 TraceCheckUtils]: 12: Hoare triple {12313#(= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet13#1 && test_#t~nondet13#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet13#1;havoc test_#t~nondet13#1; {12313#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:39,552 INFO L290 TraceCheckUtils]: 13: Hoare triple {12313#(= ~waterLevel~0 1)} assume 0 != test_~tmp___0~1#1; {12313#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:39,553 INFO L272 TraceCheckUtils]: 14: Hoare triple {12313#(= ~waterLevel~0 1)} call changeMethaneLevel(); {12331#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:39,574 INFO L290 TraceCheckUtils]: 15: Hoare triple {12331#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {12311#true} is VALID [2022-02-20 18:07:39,574 INFO L290 TraceCheckUtils]: 16: Hoare triple {12311#true} assume true; {12311#true} is VALID [2022-02-20 18:07:39,574 INFO L284 TraceCheckUtils]: 17: Hoare quadruple {12311#true} {12313#(= ~waterLevel~0 1)} #254#return; {12313#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:39,575 INFO L290 TraceCheckUtils]: 18: Hoare triple {12313#(= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet14#1 && test_#t~nondet14#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet14#1;havoc test_#t~nondet14#1; {12313#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:39,575 INFO L290 TraceCheckUtils]: 19: Hoare triple {12313#(= ~waterLevel~0 1)} assume 0 != test_~tmp___2~0#1; {12313#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:39,575 INFO L272 TraceCheckUtils]: 20: Hoare triple {12313#(= ~waterLevel~0 1)} call timeShift(); {12313#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:39,576 INFO L290 TraceCheckUtils]: 21: Hoare triple {12313#(= ~waterLevel~0 1)} assume !(0 != ~pumpRunning~0); {12313#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:39,576 INFO L290 TraceCheckUtils]: 22: Hoare triple {12313#(= ~waterLevel~0 1)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret17#1, processEnvironment_~tmp~4#1;havoc processEnvironment_~tmp~4#1; {12313#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:39,576 INFO L290 TraceCheckUtils]: 23: Hoare triple {12313#(= ~waterLevel~0 1)} assume !(0 != ~pumpRunning~0); {12313#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:39,577 INFO L272 TraceCheckUtils]: 24: Hoare triple {12313#(= ~waterLevel~0 1)} call processEnvironment__wrappee__highWaterSensor(); {12332#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:07:39,577 INFO L290 TraceCheckUtils]: 25: Hoare triple {12332#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~3#1; {12311#true} is VALID [2022-02-20 18:07:39,577 INFO L290 TraceCheckUtils]: 26: Hoare triple {12311#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret27#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~5#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~5#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {12311#true} is VALID [2022-02-20 18:07:39,578 INFO L290 TraceCheckUtils]: 27: Hoare triple {12311#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {12333#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:39,578 INFO L290 TraceCheckUtils]: 28: Hoare triple {12333#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret27#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret27#1 && isHighWaterLevel_#t~ret27#1 <= 2147483647;isHighWaterLevel_~tmp~5#1 := isHighWaterLevel_#t~ret27#1;havoc isHighWaterLevel_#t~ret27#1; {12333#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:39,578 INFO L290 TraceCheckUtils]: 29: Hoare triple {12333#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~5#1);isHighWaterLevel_~tmp___0~2#1 := 1; {12333#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:39,578 INFO L290 TraceCheckUtils]: 30: Hoare triple {12333#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {12333#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:39,579 INFO L290 TraceCheckUtils]: 31: Hoare triple {12333#(<= 2 ~waterLevel~0)} #t~ret16#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret16#1 && #t~ret16#1 <= 2147483647;~tmp~3#1 := #t~ret16#1;havoc #t~ret16#1; {12333#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:39,579 INFO L290 TraceCheckUtils]: 32: Hoare triple {12333#(<= 2 ~waterLevel~0)} assume 0 != ~tmp~3#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {12333#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:39,579 INFO L290 TraceCheckUtils]: 33: Hoare triple {12333#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump } true; {12333#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:39,580 INFO L290 TraceCheckUtils]: 34: Hoare triple {12333#(<= 2 ~waterLevel~0)} assume true; {12333#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:39,580 INFO L284 TraceCheckUtils]: 35: Hoare quadruple {12333#(<= 2 ~waterLevel~0)} {12313#(= ~waterLevel~0 1)} #244#return; {12312#false} is VALID [2022-02-20 18:07:39,580 INFO L290 TraceCheckUtils]: 36: Hoare triple {12312#false} assume { :end_inline_processEnvironment } true; {12312#false} is VALID [2022-02-20 18:07:39,580 INFO L290 TraceCheckUtils]: 37: Hoare triple {12312#false} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret10#1, __utac_acc__Specification2_spec__2_#t~ret11#1, __utac_acc__Specification2_spec__2_~tmp~1#1, __utac_acc__Specification2_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__2_~tmp~1#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~0#1; {12312#false} is VALID [2022-02-20 18:07:39,581 INFO L272 TraceCheckUtils]: 38: Hoare triple {12312#false} call __utac_acc__Specification2_spec__2_#t~ret10#1 := isMethaneLevelCritical(); {12311#true} is VALID [2022-02-20 18:07:39,581 INFO L290 TraceCheckUtils]: 39: Hoare triple {12311#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {12311#true} is VALID [2022-02-20 18:07:39,581 INFO L290 TraceCheckUtils]: 40: Hoare triple {12311#true} assume true; {12311#true} is VALID [2022-02-20 18:07:39,581 INFO L284 TraceCheckUtils]: 41: Hoare quadruple {12311#true} {12312#false} #246#return; {12312#false} is VALID [2022-02-20 18:07:39,581 INFO L290 TraceCheckUtils]: 42: Hoare triple {12312#false} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret10#1 && __utac_acc__Specification2_spec__2_#t~ret10#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~1#1 := __utac_acc__Specification2_spec__2_#t~ret10#1;havoc __utac_acc__Specification2_spec__2_#t~ret10#1; {12312#false} is VALID [2022-02-20 18:07:39,581 INFO L290 TraceCheckUtils]: 43: Hoare triple {12312#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~1#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~5#1;havoc isPumpRunning_~retValue_acc~5#1;isPumpRunning_~retValue_acc~5#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~5#1; {12312#false} is VALID [2022-02-20 18:07:39,582 INFO L290 TraceCheckUtils]: 44: Hoare triple {12312#false} __utac_acc__Specification2_spec__2_#t~ret11#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret11#1 && __utac_acc__Specification2_spec__2_#t~ret11#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~0#1 := __utac_acc__Specification2_spec__2_#t~ret11#1;havoc __utac_acc__Specification2_spec__2_#t~ret11#1; {12312#false} is VALID [2022-02-20 18:07:39,582 INFO L290 TraceCheckUtils]: 45: Hoare triple {12312#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~0#1; {12312#false} is VALID [2022-02-20 18:07:39,582 INFO L290 TraceCheckUtils]: 46: Hoare triple {12312#false} assume 0 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {12312#false} is VALID [2022-02-20 18:07:39,582 INFO L290 TraceCheckUtils]: 47: Hoare triple {12312#false} assume !false; {12312#false} is VALID [2022-02-20 18:07:39,582 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:07:39,582 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:07:39,583 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1192958526] [2022-02-20 18:07:39,583 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1192958526] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:07:39,583 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:07:39,583 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-02-20 18:07:39,583 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [776271390] [2022-02-20 18:07:39,583 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:07:39,584 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 4 states have internal predecessors, (41), 2 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 48 [2022-02-20 18:07:39,584 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:07:39,584 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 4 states have internal predecessors, (41), 2 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:07:39,613 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 48 edges. 48 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:39,613 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-02-20 18:07:39,613 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:07:39,614 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-02-20 18:07:39,614 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-02-20 18:07:39,614 INFO L87 Difference]: Start difference. First operand 524 states and 659 transitions. Second operand has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 4 states have internal predecessors, (41), 2 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:07:40,540 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:40,540 INFO L93 Difference]: Finished difference Result 1526 states and 1999 transitions. [2022-02-20 18:07:40,540 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-02-20 18:07:40,540 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 4 states have internal predecessors, (41), 2 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 48 [2022-02-20 18:07:40,540 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:07:40,541 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 4 states have internal predecessors, (41), 2 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:07:40,544 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 360 transitions. [2022-02-20 18:07:40,544 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 4 states have internal predecessors, (41), 2 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:07:40,547 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 360 transitions. [2022-02-20 18:07:40,547 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 12 states and 360 transitions. [2022-02-20 18:07:40,790 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 360 edges. 360 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:40,837 INFO L225 Difference]: With dead ends: 1526 [2022-02-20 18:07:40,837 INFO L226 Difference]: Without dead ends: 1010 [2022-02-20 18:07:40,839 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 10 SyntacticMatches, 1 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=40, Invalid=92, Unknown=0, NotChecked=0, Total=132 [2022-02-20 18:07:40,839 INFO L933 BasicCegarLoop]: 133 mSDtfsCounter, 315 mSDsluCounter, 119 mSDsCounter, 0 mSdLazyCounter, 270 mSolverCounterSat, 125 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 318 SdHoareTripleChecker+Valid, 252 SdHoareTripleChecker+Invalid, 395 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 125 IncrementalHoareTripleChecker+Valid, 270 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-02-20 18:07:40,839 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [318 Valid, 252 Invalid, 395 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [125 Valid, 270 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-02-20 18:07:40,840 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1010 states. [2022-02-20 18:07:40,924 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1010 to 998. [2022-02-20 18:07:40,925 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:07:40,927 INFO L82 GeneralOperation]: Start isEquivalent. First operand 1010 states. Second operand has 998 states, 745 states have (on average 1.225503355704698) internal successors, (913), 792 states have internal predecessors, (913), 130 states have call successors, (130), 118 states have call predecessors, (130), 122 states have return successors, (216), 128 states have call predecessors, (216), 130 states have call successors, (216) [2022-02-20 18:07:40,944 INFO L74 IsIncluded]: Start isIncluded. First operand 1010 states. Second operand has 998 states, 745 states have (on average 1.225503355704698) internal successors, (913), 792 states have internal predecessors, (913), 130 states have call successors, (130), 118 states have call predecessors, (130), 122 states have return successors, (216), 128 states have call predecessors, (216), 130 states have call successors, (216) [2022-02-20 18:07:40,947 INFO L87 Difference]: Start difference. First operand 1010 states. Second operand has 998 states, 745 states have (on average 1.225503355704698) internal successors, (913), 792 states have internal predecessors, (913), 130 states have call successors, (130), 118 states have call predecessors, (130), 122 states have return successors, (216), 128 states have call predecessors, (216), 130 states have call successors, (216) [2022-02-20 18:07:40,980 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:40,980 INFO L93 Difference]: Finished difference Result 1010 states and 1272 transitions. [2022-02-20 18:07:40,980 INFO L276 IsEmpty]: Start isEmpty. Operand 1010 states and 1272 transitions. [2022-02-20 18:07:40,983 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:40,983 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:40,984 INFO L74 IsIncluded]: Start isIncluded. First operand has 998 states, 745 states have (on average 1.225503355704698) internal successors, (913), 792 states have internal predecessors, (913), 130 states have call successors, (130), 118 states have call predecessors, (130), 122 states have return successors, (216), 128 states have call predecessors, (216), 130 states have call successors, (216) Second operand 1010 states. [2022-02-20 18:07:40,986 INFO L87 Difference]: Start difference. First operand has 998 states, 745 states have (on average 1.225503355704698) internal successors, (913), 792 states have internal predecessors, (913), 130 states have call successors, (130), 118 states have call predecessors, (130), 122 states have return successors, (216), 128 states have call predecessors, (216), 130 states have call successors, (216) Second operand 1010 states. [2022-02-20 18:07:41,019 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:41,019 INFO L93 Difference]: Finished difference Result 1010 states and 1272 transitions. [2022-02-20 18:07:41,019 INFO L276 IsEmpty]: Start isEmpty. Operand 1010 states and 1272 transitions. [2022-02-20 18:07:41,021 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:41,021 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:41,022 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:07:41,022 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:07:41,023 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 998 states, 745 states have (on average 1.225503355704698) internal successors, (913), 792 states have internal predecessors, (913), 130 states have call successors, (130), 118 states have call predecessors, (130), 122 states have return successors, (216), 128 states have call predecessors, (216), 130 states have call successors, (216) [2022-02-20 18:07:41,090 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 998 states to 998 states and 1259 transitions. [2022-02-20 18:07:41,090 INFO L78 Accepts]: Start accepts. Automaton has 998 states and 1259 transitions. Word has length 48 [2022-02-20 18:07:41,090 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:07:41,091 INFO L470 AbstractCegarLoop]: Abstraction has 998 states and 1259 transitions. [2022-02-20 18:07:41,091 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 4 states have internal predecessors, (41), 2 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:07:41,091 INFO L276 IsEmpty]: Start isEmpty. Operand 998 states and 1259 transitions. [2022-02-20 18:07:41,092 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2022-02-20 18:07:41,092 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:07:41,092 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:07:41,092 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-02-20 18:07:41,092 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:07:41,093 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:07:41,093 INFO L85 PathProgramCache]: Analyzing trace with hash -938154221, now seen corresponding path program 1 times [2022-02-20 18:07:41,093 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:07:41,093 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [165550153] [2022-02-20 18:07:41,093 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:07:41,093 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:07:41,109 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:41,125 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-02-20 18:07:41,126 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:41,128 INFO L290 TraceCheckUtils]: 0: Hoare triple {17880#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {17857#true} is VALID [2022-02-20 18:07:41,128 INFO L290 TraceCheckUtils]: 1: Hoare triple {17857#true} assume true; {17857#true} is VALID [2022-02-20 18:07:41,129 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {17857#true} {17859#(= ~methAndRunningLastTime~0 0)} #252#return; {17859#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:07:41,131 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:07:41,131 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:41,134 INFO L290 TraceCheckUtils]: 0: Hoare triple {17881#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {17857#true} is VALID [2022-02-20 18:07:41,134 INFO L290 TraceCheckUtils]: 1: Hoare triple {17857#true} assume true; {17857#true} is VALID [2022-02-20 18:07:41,134 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {17857#true} {17859#(= ~methAndRunningLastTime~0 0)} #254#return; {17859#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:07:41,137 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-02-20 18:07:41,140 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:41,142 INFO L290 TraceCheckUtils]: 0: Hoare triple {17882#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~3#1; {17857#true} is VALID [2022-02-20 18:07:41,142 INFO L290 TraceCheckUtils]: 1: Hoare triple {17857#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret27#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~5#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~5#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {17857#true} is VALID [2022-02-20 18:07:41,143 INFO L290 TraceCheckUtils]: 2: Hoare triple {17857#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {17857#true} is VALID [2022-02-20 18:07:41,143 INFO L290 TraceCheckUtils]: 3: Hoare triple {17857#true} isHighWaterLevel_#t~ret27#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret27#1 && isHighWaterLevel_#t~ret27#1 <= 2147483647;isHighWaterLevel_~tmp~5#1 := isHighWaterLevel_#t~ret27#1;havoc isHighWaterLevel_#t~ret27#1; {17857#true} is VALID [2022-02-20 18:07:41,143 INFO L290 TraceCheckUtils]: 4: Hoare triple {17857#true} assume !(0 != isHighWaterLevel_~tmp~5#1);isHighWaterLevel_~tmp___0~2#1 := 1; {17857#true} is VALID [2022-02-20 18:07:41,143 INFO L290 TraceCheckUtils]: 5: Hoare triple {17857#true} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {17857#true} is VALID [2022-02-20 18:07:41,143 INFO L290 TraceCheckUtils]: 6: Hoare triple {17857#true} #t~ret16#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret16#1 && #t~ret16#1 <= 2147483647;~tmp~3#1 := #t~ret16#1;havoc #t~ret16#1; {17857#true} is VALID [2022-02-20 18:07:41,143 INFO L290 TraceCheckUtils]: 7: Hoare triple {17857#true} assume 0 != ~tmp~3#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {17857#true} is VALID [2022-02-20 18:07:41,143 INFO L290 TraceCheckUtils]: 8: Hoare triple {17857#true} assume { :end_inline_activatePump } true; {17857#true} is VALID [2022-02-20 18:07:41,144 INFO L290 TraceCheckUtils]: 9: Hoare triple {17857#true} assume true; {17857#true} is VALID [2022-02-20 18:07:41,146 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {17857#true} {17859#(= ~methAndRunningLastTime~0 0)} #244#return; {17859#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:07:41,146 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2022-02-20 18:07:41,146 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:41,148 INFO L290 TraceCheckUtils]: 0: Hoare triple {17857#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {17857#true} is VALID [2022-02-20 18:07:41,148 INFO L290 TraceCheckUtils]: 1: Hoare triple {17857#true} assume true; {17857#true} is VALID [2022-02-20 18:07:41,148 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {17857#true} {17859#(= ~methAndRunningLastTime~0 0)} #246#return; {17859#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:07:41,149 INFO L290 TraceCheckUtils]: 0: Hoare triple {17857#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(13, 9);call #Ultimate.allocInit(3, 10);call write~init~int(79, 10, 0, 1);call write~init~int(110, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(4, 11);call write~init~int(79, 11, 0, 1);call write~init~int(102, 11, 1, 1);call write~init~int(102, 11, 2, 1);call write~init~int(0, 11, 3, 1);call #Ultimate.allocInit(7, 12);call write~init~int(44, 12, 0, 1);call write~init~int(80, 12, 1, 1);call write~init~int(117, 12, 2, 1);call write~init~int(109, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(3, 13);call write~init~int(79, 13, 0, 1);call write~init~int(110, 13, 1, 1);call write~init~int(0, 13, 2, 1);call #Ultimate.allocInit(4, 14);call write~init~int(79, 14, 0, 1);call write~init~int(102, 14, 1, 1);call write~init~int(102, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(3, 15);call write~init~int(41, 15, 0, 1);call write~init~int(32, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(10, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~methAndRunningLastTime~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {17857#true} is VALID [2022-02-20 18:07:41,149 INFO L290 TraceCheckUtils]: 1: Hoare triple {17857#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret9#1, main_~retValue_acc~3#1, main_~tmp~0#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true; {17857#true} is VALID [2022-02-20 18:07:41,149 INFO L290 TraceCheckUtils]: 2: Hoare triple {17857#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {17857#true} is VALID [2022-02-20 18:07:41,149 INFO L290 TraceCheckUtils]: 3: Hoare triple {17857#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~8#1;havoc valid_product_~retValue_acc~8#1;valid_product_~retValue_acc~8#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~8#1; {17857#true} is VALID [2022-02-20 18:07:41,149 INFO L290 TraceCheckUtils]: 4: Hoare triple {17857#true} main_#t~ret9#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret9#1 && main_#t~ret9#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret9#1;havoc main_#t~ret9#1; {17857#true} is VALID [2022-02-20 18:07:41,149 INFO L290 TraceCheckUtils]: 5: Hoare triple {17857#true} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {17857#true} is VALID [2022-02-20 18:07:41,150 INFO L290 TraceCheckUtils]: 6: Hoare triple {17857#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0; {17859#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:07:41,150 INFO L290 TraceCheckUtils]: 7: Hoare triple {17859#(= ~methAndRunningLastTime~0 0)} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet12#1, test_#t~nondet13#1, test_#t~nondet14#1, test_#t~nondet15#1, test_~splverifierCounter~0#1, test_~tmp~2#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~2#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {17859#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:07:41,150 INFO L290 TraceCheckUtils]: 8: Hoare triple {17859#(= ~methAndRunningLastTime~0 0)} assume !false; {17859#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:07:41,150 INFO L290 TraceCheckUtils]: 9: Hoare triple {17859#(= ~methAndRunningLastTime~0 0)} assume test_~splverifierCounter~0#1 < 4; {17859#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:07:41,151 INFO L290 TraceCheckUtils]: 10: Hoare triple {17859#(= ~methAndRunningLastTime~0 0)} assume -2147483648 <= test_#t~nondet12#1 && test_#t~nondet12#1 <= 2147483647;test_~tmp~2#1 := test_#t~nondet12#1;havoc test_#t~nondet12#1; {17859#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:07:41,151 INFO L290 TraceCheckUtils]: 11: Hoare triple {17859#(= ~methAndRunningLastTime~0 0)} assume 0 != test_~tmp~2#1; {17859#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:07:41,151 INFO L272 TraceCheckUtils]: 12: Hoare triple {17859#(= ~methAndRunningLastTime~0 0)} call waterRise(); {17880#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:07:41,152 INFO L290 TraceCheckUtils]: 13: Hoare triple {17880#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {17857#true} is VALID [2022-02-20 18:07:41,152 INFO L290 TraceCheckUtils]: 14: Hoare triple {17857#true} assume true; {17857#true} is VALID [2022-02-20 18:07:41,152 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {17857#true} {17859#(= ~methAndRunningLastTime~0 0)} #252#return; {17859#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:07:41,152 INFO L290 TraceCheckUtils]: 16: Hoare triple {17859#(= ~methAndRunningLastTime~0 0)} assume -2147483648 <= test_#t~nondet13#1 && test_#t~nondet13#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet13#1;havoc test_#t~nondet13#1; {17859#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:07:41,152 INFO L290 TraceCheckUtils]: 17: Hoare triple {17859#(= ~methAndRunningLastTime~0 0)} assume 0 != test_~tmp___0~1#1; {17859#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:07:41,153 INFO L272 TraceCheckUtils]: 18: Hoare triple {17859#(= ~methAndRunningLastTime~0 0)} call changeMethaneLevel(); {17881#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:41,153 INFO L290 TraceCheckUtils]: 19: Hoare triple {17881#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {17857#true} is VALID [2022-02-20 18:07:41,153 INFO L290 TraceCheckUtils]: 20: Hoare triple {17857#true} assume true; {17857#true} is VALID [2022-02-20 18:07:41,153 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {17857#true} {17859#(= ~methAndRunningLastTime~0 0)} #254#return; {17859#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:07:41,154 INFO L290 TraceCheckUtils]: 22: Hoare triple {17859#(= ~methAndRunningLastTime~0 0)} assume -2147483648 <= test_#t~nondet14#1 && test_#t~nondet14#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet14#1;havoc test_#t~nondet14#1; {17859#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:07:41,154 INFO L290 TraceCheckUtils]: 23: Hoare triple {17859#(= ~methAndRunningLastTime~0 0)} assume 0 != test_~tmp___2~0#1; {17859#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:07:41,154 INFO L272 TraceCheckUtils]: 24: Hoare triple {17859#(= ~methAndRunningLastTime~0 0)} call timeShift(); {17859#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:07:41,154 INFO L290 TraceCheckUtils]: 25: Hoare triple {17859#(= ~methAndRunningLastTime~0 0)} assume !(0 != ~pumpRunning~0); {17859#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:07:41,155 INFO L290 TraceCheckUtils]: 26: Hoare triple {17859#(= ~methAndRunningLastTime~0 0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret17#1, processEnvironment_~tmp~4#1;havoc processEnvironment_~tmp~4#1; {17859#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:07:41,155 INFO L290 TraceCheckUtils]: 27: Hoare triple {17859#(= ~methAndRunningLastTime~0 0)} assume !(0 != ~pumpRunning~0); {17859#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:07:41,155 INFO L272 TraceCheckUtils]: 28: Hoare triple {17859#(= ~methAndRunningLastTime~0 0)} call processEnvironment__wrappee__highWaterSensor(); {17882#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:07:41,156 INFO L290 TraceCheckUtils]: 29: Hoare triple {17882#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~3#1; {17857#true} is VALID [2022-02-20 18:07:41,156 INFO L290 TraceCheckUtils]: 30: Hoare triple {17857#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret27#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~5#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~5#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {17857#true} is VALID [2022-02-20 18:07:41,156 INFO L290 TraceCheckUtils]: 31: Hoare triple {17857#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {17857#true} is VALID [2022-02-20 18:07:41,156 INFO L290 TraceCheckUtils]: 32: Hoare triple {17857#true} isHighWaterLevel_#t~ret27#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret27#1 && isHighWaterLevel_#t~ret27#1 <= 2147483647;isHighWaterLevel_~tmp~5#1 := isHighWaterLevel_#t~ret27#1;havoc isHighWaterLevel_#t~ret27#1; {17857#true} is VALID [2022-02-20 18:07:41,156 INFO L290 TraceCheckUtils]: 33: Hoare triple {17857#true} assume !(0 != isHighWaterLevel_~tmp~5#1);isHighWaterLevel_~tmp___0~2#1 := 1; {17857#true} is VALID [2022-02-20 18:07:41,156 INFO L290 TraceCheckUtils]: 34: Hoare triple {17857#true} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {17857#true} is VALID [2022-02-20 18:07:41,156 INFO L290 TraceCheckUtils]: 35: Hoare triple {17857#true} #t~ret16#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret16#1 && #t~ret16#1 <= 2147483647;~tmp~3#1 := #t~ret16#1;havoc #t~ret16#1; {17857#true} is VALID [2022-02-20 18:07:41,156 INFO L290 TraceCheckUtils]: 36: Hoare triple {17857#true} assume 0 != ~tmp~3#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {17857#true} is VALID [2022-02-20 18:07:41,156 INFO L290 TraceCheckUtils]: 37: Hoare triple {17857#true} assume { :end_inline_activatePump } true; {17857#true} is VALID [2022-02-20 18:07:41,157 INFO L290 TraceCheckUtils]: 38: Hoare triple {17857#true} assume true; {17857#true} is VALID [2022-02-20 18:07:41,157 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {17857#true} {17859#(= ~methAndRunningLastTime~0 0)} #244#return; {17859#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:07:41,157 INFO L290 TraceCheckUtils]: 40: Hoare triple {17859#(= ~methAndRunningLastTime~0 0)} assume { :end_inline_processEnvironment } true; {17859#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:07:41,157 INFO L290 TraceCheckUtils]: 41: Hoare triple {17859#(= ~methAndRunningLastTime~0 0)} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret10#1, __utac_acc__Specification2_spec__2_#t~ret11#1, __utac_acc__Specification2_spec__2_~tmp~1#1, __utac_acc__Specification2_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__2_~tmp~1#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~0#1; {17859#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:07:41,158 INFO L272 TraceCheckUtils]: 42: Hoare triple {17859#(= ~methAndRunningLastTime~0 0)} call __utac_acc__Specification2_spec__2_#t~ret10#1 := isMethaneLevelCritical(); {17857#true} is VALID [2022-02-20 18:07:41,158 INFO L290 TraceCheckUtils]: 43: Hoare triple {17857#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {17857#true} is VALID [2022-02-20 18:07:41,158 INFO L290 TraceCheckUtils]: 44: Hoare triple {17857#true} assume true; {17857#true} is VALID [2022-02-20 18:07:41,158 INFO L284 TraceCheckUtils]: 45: Hoare quadruple {17857#true} {17859#(= ~methAndRunningLastTime~0 0)} #246#return; {17859#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:07:41,159 INFO L290 TraceCheckUtils]: 46: Hoare triple {17859#(= ~methAndRunningLastTime~0 0)} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret10#1 && __utac_acc__Specification2_spec__2_#t~ret10#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~1#1 := __utac_acc__Specification2_spec__2_#t~ret10#1;havoc __utac_acc__Specification2_spec__2_#t~ret10#1; {17859#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:07:41,159 INFO L290 TraceCheckUtils]: 47: Hoare triple {17859#(= ~methAndRunningLastTime~0 0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp~1#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~5#1;havoc isPumpRunning_~retValue_acc~5#1;isPumpRunning_~retValue_acc~5#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~5#1; {17859#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:07:41,159 INFO L290 TraceCheckUtils]: 48: Hoare triple {17859#(= ~methAndRunningLastTime~0 0)} __utac_acc__Specification2_spec__2_#t~ret11#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret11#1 && __utac_acc__Specification2_spec__2_#t~ret11#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~0#1 := __utac_acc__Specification2_spec__2_#t~ret11#1;havoc __utac_acc__Specification2_spec__2_#t~ret11#1; {17859#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:07:41,159 INFO L290 TraceCheckUtils]: 49: Hoare triple {17859#(= ~methAndRunningLastTime~0 0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~0#1; {17859#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:07:41,160 INFO L290 TraceCheckUtils]: 50: Hoare triple {17859#(= ~methAndRunningLastTime~0 0)} assume 0 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {17858#false} is VALID [2022-02-20 18:07:41,160 INFO L290 TraceCheckUtils]: 51: Hoare triple {17858#false} assume !false; {17858#false} is VALID [2022-02-20 18:07:41,160 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:07:41,160 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:07:41,160 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [165550153] [2022-02-20 18:07:41,160 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [165550153] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:07:41,160 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:07:41,161 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-02-20 18:07:41,161 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1975490048] [2022-02-20 18:07:41,161 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:07:41,161 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 3 states have internal predecessors, (43), 1 states have call successors, (5), 5 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 52 [2022-02-20 18:07:41,161 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:07:41,162 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 3 states have internal predecessors, (43), 1 states have call successors, (5), 5 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-02-20 18:07:41,188 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 52 edges. 52 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:41,188 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-02-20 18:07:41,188 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:07:41,188 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-02-20 18:07:41,188 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-02-20 18:07:41,189 INFO L87 Difference]: Start difference. First operand 998 states and 1259 transitions. Second operand has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 3 states have internal predecessors, (43), 1 states have call successors, (5), 5 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-02-20 18:07:42,391 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:42,391 INFO L93 Difference]: Finished difference Result 1972 states and 2635 transitions. [2022-02-20 18:07:42,391 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-02-20 18:07:42,391 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 3 states have internal predecessors, (43), 1 states have call successors, (5), 5 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 52 [2022-02-20 18:07:42,392 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:07:42,392 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 3 states have internal predecessors, (43), 1 states have call successors, (5), 5 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-02-20 18:07:42,395 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 337 transitions. [2022-02-20 18:07:42,396 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 3 states have internal predecessors, (43), 1 states have call successors, (5), 5 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-02-20 18:07:42,398 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 337 transitions. [2022-02-20 18:07:42,398 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 13 states and 337 transitions. [2022-02-20 18:07:42,648 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 337 edges. 337 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:42,828 INFO L225 Difference]: With dead ends: 1972 [2022-02-20 18:07:42,829 INFO L226 Difference]: Without dead ends: 1970 [2022-02-20 18:07:42,829 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 29 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 35 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=67, Invalid=143, Unknown=0, NotChecked=0, Total=210 [2022-02-20 18:07:42,830 INFO L933 BasicCegarLoop]: 94 mSDtfsCounter, 427 mSDsluCounter, 91 mSDsCounter, 0 mSdLazyCounter, 259 mSolverCounterSat, 230 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 429 SdHoareTripleChecker+Valid, 185 SdHoareTripleChecker+Invalid, 489 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 230 IncrementalHoareTripleChecker+Valid, 259 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-02-20 18:07:42,830 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [429 Valid, 185 Invalid, 489 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [230 Valid, 259 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-02-20 18:07:42,832 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1970 states. [2022-02-20 18:07:42,963 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1970 to 1533. [2022-02-20 18:07:42,963 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:07:42,966 INFO L82 GeneralOperation]: Start isEquivalent. First operand 1970 states. Second operand has 1533 states, 1138 states have (on average 1.2293497363796133) internal successors, (1399), 1228 states have internal predecessors, (1399), 211 states have call successors, (211), 151 states have call predecessors, (211), 183 states have return successors, (428), 204 states have call predecessors, (428), 211 states have call successors, (428) [2022-02-20 18:07:42,968 INFO L74 IsIncluded]: Start isIncluded. First operand 1970 states. Second operand has 1533 states, 1138 states have (on average 1.2293497363796133) internal successors, (1399), 1228 states have internal predecessors, (1399), 211 states have call successors, (211), 151 states have call predecessors, (211), 183 states have return successors, (428), 204 states have call predecessors, (428), 211 states have call successors, (428) [2022-02-20 18:07:42,969 INFO L87 Difference]: Start difference. First operand 1970 states. Second operand has 1533 states, 1138 states have (on average 1.2293497363796133) internal successors, (1399), 1228 states have internal predecessors, (1399), 211 states have call successors, (211), 151 states have call predecessors, (211), 183 states have return successors, (428), 204 states have call predecessors, (428), 211 states have call successors, (428) [2022-02-20 18:07:43,086 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:43,087 INFO L93 Difference]: Finished difference Result 1970 states and 2626 transitions. [2022-02-20 18:07:43,087 INFO L276 IsEmpty]: Start isEmpty. Operand 1970 states and 2626 transitions. [2022-02-20 18:07:43,093 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:43,093 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:43,117 INFO L74 IsIncluded]: Start isIncluded. First operand has 1533 states, 1138 states have (on average 1.2293497363796133) internal successors, (1399), 1228 states have internal predecessors, (1399), 211 states have call successors, (211), 151 states have call predecessors, (211), 183 states have return successors, (428), 204 states have call predecessors, (428), 211 states have call successors, (428) Second operand 1970 states. [2022-02-20 18:07:43,119 INFO L87 Difference]: Start difference. First operand has 1533 states, 1138 states have (on average 1.2293497363796133) internal successors, (1399), 1228 states have internal predecessors, (1399), 211 states have call successors, (211), 151 states have call predecessors, (211), 183 states have return successors, (428), 204 states have call predecessors, (428), 211 states have call successors, (428) Second operand 1970 states. [2022-02-20 18:07:43,239 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:43,239 INFO L93 Difference]: Finished difference Result 1970 states and 2626 transitions. [2022-02-20 18:07:43,239 INFO L276 IsEmpty]: Start isEmpty. Operand 1970 states and 2626 transitions. [2022-02-20 18:07:43,244 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:43,245 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:43,245 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:07:43,245 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:07:43,247 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1533 states, 1138 states have (on average 1.2293497363796133) internal successors, (1399), 1228 states have internal predecessors, (1399), 211 states have call successors, (211), 151 states have call predecessors, (211), 183 states have return successors, (428), 204 states have call predecessors, (428), 211 states have call successors, (428) [2022-02-20 18:07:43,347 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1533 states to 1533 states and 2038 transitions. [2022-02-20 18:07:43,348 INFO L78 Accepts]: Start accepts. Automaton has 1533 states and 2038 transitions. Word has length 52 [2022-02-20 18:07:43,348 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:07:43,348 INFO L470 AbstractCegarLoop]: Abstraction has 1533 states and 2038 transitions. [2022-02-20 18:07:43,348 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 3 states have internal predecessors, (43), 1 states have call successors, (5), 5 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-02-20 18:07:43,349 INFO L276 IsEmpty]: Start isEmpty. Operand 1533 states and 2038 transitions. [2022-02-20 18:07:43,351 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 83 [2022-02-20 18:07:43,351 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:07:43,351 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:07:43,352 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-02-20 18:07:43,352 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:07:43,352 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:07:43,352 INFO L85 PathProgramCache]: Analyzing trace with hash -1573279230, now seen corresponding path program 1 times [2022-02-20 18:07:43,352 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:07:43,353 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [392382855] [2022-02-20 18:07:43,353 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:07:43,353 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:07:43,369 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:43,389 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-02-20 18:07:43,390 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:43,391 INFO L290 TraceCheckUtils]: 0: Hoare triple {26757#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {26716#true} is VALID [2022-02-20 18:07:43,392 INFO L290 TraceCheckUtils]: 1: Hoare triple {26716#true} assume true; {26716#true} is VALID [2022-02-20 18:07:43,392 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {26716#true} {26716#true} #252#return; {26716#true} is VALID [2022-02-20 18:07:43,394 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:07:43,395 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:43,398 INFO L290 TraceCheckUtils]: 0: Hoare triple {26758#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {26716#true} is VALID [2022-02-20 18:07:43,399 INFO L290 TraceCheckUtils]: 1: Hoare triple {26716#true} assume true; {26716#true} is VALID [2022-02-20 18:07:43,399 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {26716#true} {26716#true} #254#return; {26716#true} is VALID [2022-02-20 18:07:43,403 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-02-20 18:07:43,410 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:43,429 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-02-20 18:07:43,432 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:43,436 INFO L290 TraceCheckUtils]: 0: Hoare triple {26775#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~3#1; {26716#true} is VALID [2022-02-20 18:07:43,437 INFO L290 TraceCheckUtils]: 1: Hoare triple {26716#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret27#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~5#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~5#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {26716#true} is VALID [2022-02-20 18:07:43,437 INFO L290 TraceCheckUtils]: 2: Hoare triple {26716#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {26716#true} is VALID [2022-02-20 18:07:43,437 INFO L290 TraceCheckUtils]: 3: Hoare triple {26716#true} isHighWaterLevel_#t~ret27#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret27#1 && isHighWaterLevel_#t~ret27#1 <= 2147483647;isHighWaterLevel_~tmp~5#1 := isHighWaterLevel_#t~ret27#1;havoc isHighWaterLevel_#t~ret27#1; {26716#true} is VALID [2022-02-20 18:07:43,437 INFO L290 TraceCheckUtils]: 4: Hoare triple {26716#true} assume !(0 != isHighWaterLevel_~tmp~5#1);isHighWaterLevel_~tmp___0~2#1 := 1; {26716#true} is VALID [2022-02-20 18:07:43,437 INFO L290 TraceCheckUtils]: 5: Hoare triple {26716#true} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {26716#true} is VALID [2022-02-20 18:07:43,437 INFO L290 TraceCheckUtils]: 6: Hoare triple {26716#true} #t~ret16#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret16#1 && #t~ret16#1 <= 2147483647;~tmp~3#1 := #t~ret16#1;havoc #t~ret16#1; {26716#true} is VALID [2022-02-20 18:07:43,437 INFO L290 TraceCheckUtils]: 7: Hoare triple {26716#true} assume 0 != ~tmp~3#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {26716#true} is VALID [2022-02-20 18:07:43,439 INFO L290 TraceCheckUtils]: 8: Hoare triple {26716#true} assume { :end_inline_activatePump } true; {26716#true} is VALID [2022-02-20 18:07:43,439 INFO L290 TraceCheckUtils]: 9: Hoare triple {26716#true} assume true; {26716#true} is VALID [2022-02-20 18:07:43,439 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {26716#true} {26760#(not (= 0 ~systemActive~0))} #244#return; {26760#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:07:43,440 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-02-20 18:07:43,440 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:43,450 INFO L290 TraceCheckUtils]: 0: Hoare triple {26716#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {26716#true} is VALID [2022-02-20 18:07:43,451 INFO L290 TraceCheckUtils]: 1: Hoare triple {26716#true} assume true; {26716#true} is VALID [2022-02-20 18:07:43,451 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {26716#true} {26760#(not (= 0 ~systemActive~0))} #246#return; {26760#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:07:43,451 INFO L290 TraceCheckUtils]: 0: Hoare triple {26759#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0) (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))} assume !(0 != ~pumpRunning~0); {26716#true} is VALID [2022-02-20 18:07:43,452 INFO L290 TraceCheckUtils]: 1: Hoare triple {26716#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret17#1, processEnvironment_~tmp~4#1;havoc processEnvironment_~tmp~4#1; {26760#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:07:43,452 INFO L290 TraceCheckUtils]: 2: Hoare triple {26760#(not (= 0 ~systemActive~0))} assume !(0 != ~pumpRunning~0); {26760#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:07:43,452 INFO L272 TraceCheckUtils]: 3: Hoare triple {26760#(not (= 0 ~systemActive~0))} call processEnvironment__wrappee__highWaterSensor(); {26775#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:07:43,453 INFO L290 TraceCheckUtils]: 4: Hoare triple {26775#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~3#1; {26716#true} is VALID [2022-02-20 18:07:43,453 INFO L290 TraceCheckUtils]: 5: Hoare triple {26716#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret27#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~5#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~5#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {26716#true} is VALID [2022-02-20 18:07:43,453 INFO L290 TraceCheckUtils]: 6: Hoare triple {26716#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {26716#true} is VALID [2022-02-20 18:07:43,453 INFO L290 TraceCheckUtils]: 7: Hoare triple {26716#true} isHighWaterLevel_#t~ret27#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret27#1 && isHighWaterLevel_#t~ret27#1 <= 2147483647;isHighWaterLevel_~tmp~5#1 := isHighWaterLevel_#t~ret27#1;havoc isHighWaterLevel_#t~ret27#1; {26716#true} is VALID [2022-02-20 18:07:43,453 INFO L290 TraceCheckUtils]: 8: Hoare triple {26716#true} assume !(0 != isHighWaterLevel_~tmp~5#1);isHighWaterLevel_~tmp___0~2#1 := 1; {26716#true} is VALID [2022-02-20 18:07:43,453 INFO L290 TraceCheckUtils]: 9: Hoare triple {26716#true} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {26716#true} is VALID [2022-02-20 18:07:43,453 INFO L290 TraceCheckUtils]: 10: Hoare triple {26716#true} #t~ret16#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret16#1 && #t~ret16#1 <= 2147483647;~tmp~3#1 := #t~ret16#1;havoc #t~ret16#1; {26716#true} is VALID [2022-02-20 18:07:43,453 INFO L290 TraceCheckUtils]: 11: Hoare triple {26716#true} assume 0 != ~tmp~3#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {26716#true} is VALID [2022-02-20 18:07:43,453 INFO L290 TraceCheckUtils]: 12: Hoare triple {26716#true} assume { :end_inline_activatePump } true; {26716#true} is VALID [2022-02-20 18:07:43,453 INFO L290 TraceCheckUtils]: 13: Hoare triple {26716#true} assume true; {26716#true} is VALID [2022-02-20 18:07:43,453 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {26716#true} {26760#(not (= 0 ~systemActive~0))} #244#return; {26760#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:07:43,454 INFO L290 TraceCheckUtils]: 15: Hoare triple {26760#(not (= 0 ~systemActive~0))} assume { :end_inline_processEnvironment } true; {26760#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:07:43,454 INFO L290 TraceCheckUtils]: 16: Hoare triple {26760#(not (= 0 ~systemActive~0))} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret10#1, __utac_acc__Specification2_spec__2_#t~ret11#1, __utac_acc__Specification2_spec__2_~tmp~1#1, __utac_acc__Specification2_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__2_~tmp~1#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~0#1; {26760#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:07:43,454 INFO L272 TraceCheckUtils]: 17: Hoare triple {26760#(not (= 0 ~systemActive~0))} call __utac_acc__Specification2_spec__2_#t~ret10#1 := isMethaneLevelCritical(); {26716#true} is VALID [2022-02-20 18:07:43,454 INFO L290 TraceCheckUtils]: 18: Hoare triple {26716#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {26716#true} is VALID [2022-02-20 18:07:43,454 INFO L290 TraceCheckUtils]: 19: Hoare triple {26716#true} assume true; {26716#true} is VALID [2022-02-20 18:07:43,455 INFO L284 TraceCheckUtils]: 20: Hoare quadruple {26716#true} {26760#(not (= 0 ~systemActive~0))} #246#return; {26760#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:07:43,455 INFO L290 TraceCheckUtils]: 21: Hoare triple {26760#(not (= 0 ~systemActive~0))} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret10#1 && __utac_acc__Specification2_spec__2_#t~ret10#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~1#1 := __utac_acc__Specification2_spec__2_#t~ret10#1;havoc __utac_acc__Specification2_spec__2_#t~ret10#1; {26760#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:07:43,456 INFO L290 TraceCheckUtils]: 22: Hoare triple {26760#(not (= 0 ~systemActive~0))} assume 0 != __utac_acc__Specification2_spec__2_~tmp~1#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~5#1;havoc isPumpRunning_~retValue_acc~5#1;isPumpRunning_~retValue_acc~5#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~5#1; {26760#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:07:43,456 INFO L290 TraceCheckUtils]: 23: Hoare triple {26760#(not (= 0 ~systemActive~0))} __utac_acc__Specification2_spec__2_#t~ret11#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret11#1 && __utac_acc__Specification2_spec__2_#t~ret11#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~0#1 := __utac_acc__Specification2_spec__2_#t~ret11#1;havoc __utac_acc__Specification2_spec__2_#t~ret11#1; {26760#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:07:43,456 INFO L290 TraceCheckUtils]: 24: Hoare triple {26760#(not (= 0 ~systemActive~0))} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~0#1; {26760#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:07:43,457 INFO L290 TraceCheckUtils]: 25: Hoare triple {26760#(not (= 0 ~systemActive~0))} assume !(0 != ~methAndRunningLastTime~0);~methAndRunningLastTime~0 := 1; {26760#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:07:43,457 INFO L290 TraceCheckUtils]: 26: Hoare triple {26760#(not (= 0 ~systemActive~0))} assume { :end_inline___utac_acc__Specification2_spec__2 } true; {26760#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:07:43,457 INFO L290 TraceCheckUtils]: 27: Hoare triple {26760#(not (= 0 ~systemActive~0))} assume true; {26760#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:07:43,458 INFO L284 TraceCheckUtils]: 28: Hoare quadruple {26760#(not (= 0 ~systemActive~0))} {26724#(= 0 ~systemActive~0)} #258#return; {26717#false} is VALID [2022-02-20 18:07:43,458 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 72 [2022-02-20 18:07:43,459 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:43,464 INFO L290 TraceCheckUtils]: 0: Hoare triple {26716#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {26716#true} is VALID [2022-02-20 18:07:43,464 INFO L290 TraceCheckUtils]: 1: Hoare triple {26716#true} assume true; {26716#true} is VALID [2022-02-20 18:07:43,464 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {26716#true} {26717#false} #246#return; {26717#false} is VALID [2022-02-20 18:07:43,464 INFO L290 TraceCheckUtils]: 0: Hoare triple {26716#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(13, 9);call #Ultimate.allocInit(3, 10);call write~init~int(79, 10, 0, 1);call write~init~int(110, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(4, 11);call write~init~int(79, 11, 0, 1);call write~init~int(102, 11, 1, 1);call write~init~int(102, 11, 2, 1);call write~init~int(0, 11, 3, 1);call #Ultimate.allocInit(7, 12);call write~init~int(44, 12, 0, 1);call write~init~int(80, 12, 1, 1);call write~init~int(117, 12, 2, 1);call write~init~int(109, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(3, 13);call write~init~int(79, 13, 0, 1);call write~init~int(110, 13, 1, 1);call write~init~int(0, 13, 2, 1);call #Ultimate.allocInit(4, 14);call write~init~int(79, 14, 0, 1);call write~init~int(102, 14, 1, 1);call write~init~int(102, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(3, 15);call write~init~int(41, 15, 0, 1);call write~init~int(32, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(10, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~methAndRunningLastTime~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {26716#true} is VALID [2022-02-20 18:07:43,465 INFO L290 TraceCheckUtils]: 1: Hoare triple {26716#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret9#1, main_~retValue_acc~3#1, main_~tmp~0#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true; {26716#true} is VALID [2022-02-20 18:07:43,465 INFO L290 TraceCheckUtils]: 2: Hoare triple {26716#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {26716#true} is VALID [2022-02-20 18:07:43,465 INFO L290 TraceCheckUtils]: 3: Hoare triple {26716#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~8#1;havoc valid_product_~retValue_acc~8#1;valid_product_~retValue_acc~8#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~8#1; {26716#true} is VALID [2022-02-20 18:07:43,465 INFO L290 TraceCheckUtils]: 4: Hoare triple {26716#true} main_#t~ret9#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret9#1 && main_#t~ret9#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret9#1;havoc main_#t~ret9#1; {26716#true} is VALID [2022-02-20 18:07:43,465 INFO L290 TraceCheckUtils]: 5: Hoare triple {26716#true} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {26716#true} is VALID [2022-02-20 18:07:43,465 INFO L290 TraceCheckUtils]: 6: Hoare triple {26716#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0; {26716#true} is VALID [2022-02-20 18:07:43,465 INFO L290 TraceCheckUtils]: 7: Hoare triple {26716#true} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet12#1, test_#t~nondet13#1, test_#t~nondet14#1, test_#t~nondet15#1, test_~splverifierCounter~0#1, test_~tmp~2#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~2#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {26716#true} is VALID [2022-02-20 18:07:43,466 INFO L290 TraceCheckUtils]: 8: Hoare triple {26716#true} assume !false; {26716#true} is VALID [2022-02-20 18:07:43,466 INFO L290 TraceCheckUtils]: 9: Hoare triple {26716#true} assume test_~splverifierCounter~0#1 < 4; {26716#true} is VALID [2022-02-20 18:07:43,466 INFO L290 TraceCheckUtils]: 10: Hoare triple {26716#true} assume -2147483648 <= test_#t~nondet12#1 && test_#t~nondet12#1 <= 2147483647;test_~tmp~2#1 := test_#t~nondet12#1;havoc test_#t~nondet12#1; {26716#true} is VALID [2022-02-20 18:07:43,466 INFO L290 TraceCheckUtils]: 11: Hoare triple {26716#true} assume 0 != test_~tmp~2#1; {26716#true} is VALID [2022-02-20 18:07:43,466 INFO L272 TraceCheckUtils]: 12: Hoare triple {26716#true} call waterRise(); {26757#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:07:43,466 INFO L290 TraceCheckUtils]: 13: Hoare triple {26757#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {26716#true} is VALID [2022-02-20 18:07:43,467 INFO L290 TraceCheckUtils]: 14: Hoare triple {26716#true} assume true; {26716#true} is VALID [2022-02-20 18:07:43,467 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {26716#true} {26716#true} #252#return; {26716#true} is VALID [2022-02-20 18:07:43,467 INFO L290 TraceCheckUtils]: 16: Hoare triple {26716#true} assume -2147483648 <= test_#t~nondet13#1 && test_#t~nondet13#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet13#1;havoc test_#t~nondet13#1; {26716#true} is VALID [2022-02-20 18:07:43,467 INFO L290 TraceCheckUtils]: 17: Hoare triple {26716#true} assume 0 != test_~tmp___0~1#1; {26716#true} is VALID [2022-02-20 18:07:43,467 INFO L272 TraceCheckUtils]: 18: Hoare triple {26716#true} call changeMethaneLevel(); {26758#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:43,467 INFO L290 TraceCheckUtils]: 19: Hoare triple {26758#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {26716#true} is VALID [2022-02-20 18:07:43,468 INFO L290 TraceCheckUtils]: 20: Hoare triple {26716#true} assume true; {26716#true} is VALID [2022-02-20 18:07:43,468 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {26716#true} {26716#true} #254#return; {26716#true} is VALID [2022-02-20 18:07:43,468 INFO L290 TraceCheckUtils]: 22: Hoare triple {26716#true} assume -2147483648 <= test_#t~nondet14#1 && test_#t~nondet14#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet14#1;havoc test_#t~nondet14#1; {26716#true} is VALID [2022-02-20 18:07:43,468 INFO L290 TraceCheckUtils]: 23: Hoare triple {26716#true} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet15#1 && test_#t~nondet15#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet15#1;havoc test_#t~nondet15#1; {26716#true} is VALID [2022-02-20 18:07:43,468 INFO L290 TraceCheckUtils]: 24: Hoare triple {26716#true} assume 0 != test_~tmp___1~0#1;assume { :begin_inline_stopSystem } true; {26716#true} is VALID [2022-02-20 18:07:43,468 INFO L290 TraceCheckUtils]: 25: Hoare triple {26716#true} assume !(0 != ~pumpRunning~0); {26716#true} is VALID [2022-02-20 18:07:43,468 INFO L290 TraceCheckUtils]: 26: Hoare triple {26716#true} ~systemActive~0 := 0; {26724#(= 0 ~systemActive~0)} is VALID [2022-02-20 18:07:43,469 INFO L290 TraceCheckUtils]: 27: Hoare triple {26724#(= 0 ~systemActive~0)} assume { :end_inline_stopSystem } true; {26724#(= 0 ~systemActive~0)} is VALID [2022-02-20 18:07:43,469 INFO L272 TraceCheckUtils]: 28: Hoare triple {26724#(= 0 ~systemActive~0)} call timeShift(); {26759#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0) (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))} is VALID [2022-02-20 18:07:43,469 INFO L290 TraceCheckUtils]: 29: Hoare triple {26759#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0) (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))} assume !(0 != ~pumpRunning~0); {26716#true} is VALID [2022-02-20 18:07:43,470 INFO L290 TraceCheckUtils]: 30: Hoare triple {26716#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret17#1, processEnvironment_~tmp~4#1;havoc processEnvironment_~tmp~4#1; {26760#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:07:43,470 INFO L290 TraceCheckUtils]: 31: Hoare triple {26760#(not (= 0 ~systemActive~0))} assume !(0 != ~pumpRunning~0); {26760#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:07:43,470 INFO L272 TraceCheckUtils]: 32: Hoare triple {26760#(not (= 0 ~systemActive~0))} call processEnvironment__wrappee__highWaterSensor(); {26775#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:07:43,470 INFO L290 TraceCheckUtils]: 33: Hoare triple {26775#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~3#1; {26716#true} is VALID [2022-02-20 18:07:43,471 INFO L290 TraceCheckUtils]: 34: Hoare triple {26716#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret27#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~5#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~5#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {26716#true} is VALID [2022-02-20 18:07:43,471 INFO L290 TraceCheckUtils]: 35: Hoare triple {26716#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {26716#true} is VALID [2022-02-20 18:07:43,471 INFO L290 TraceCheckUtils]: 36: Hoare triple {26716#true} isHighWaterLevel_#t~ret27#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret27#1 && isHighWaterLevel_#t~ret27#1 <= 2147483647;isHighWaterLevel_~tmp~5#1 := isHighWaterLevel_#t~ret27#1;havoc isHighWaterLevel_#t~ret27#1; {26716#true} is VALID [2022-02-20 18:07:43,471 INFO L290 TraceCheckUtils]: 37: Hoare triple {26716#true} assume !(0 != isHighWaterLevel_~tmp~5#1);isHighWaterLevel_~tmp___0~2#1 := 1; {26716#true} is VALID [2022-02-20 18:07:43,471 INFO L290 TraceCheckUtils]: 38: Hoare triple {26716#true} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {26716#true} is VALID [2022-02-20 18:07:43,471 INFO L290 TraceCheckUtils]: 39: Hoare triple {26716#true} #t~ret16#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret16#1 && #t~ret16#1 <= 2147483647;~tmp~3#1 := #t~ret16#1;havoc #t~ret16#1; {26716#true} is VALID [2022-02-20 18:07:43,471 INFO L290 TraceCheckUtils]: 40: Hoare triple {26716#true} assume 0 != ~tmp~3#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {26716#true} is VALID [2022-02-20 18:07:43,471 INFO L290 TraceCheckUtils]: 41: Hoare triple {26716#true} assume { :end_inline_activatePump } true; {26716#true} is VALID [2022-02-20 18:07:43,472 INFO L290 TraceCheckUtils]: 42: Hoare triple {26716#true} assume true; {26716#true} is VALID [2022-02-20 18:07:43,472 INFO L284 TraceCheckUtils]: 43: Hoare quadruple {26716#true} {26760#(not (= 0 ~systemActive~0))} #244#return; {26760#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:07:43,472 INFO L290 TraceCheckUtils]: 44: Hoare triple {26760#(not (= 0 ~systemActive~0))} assume { :end_inline_processEnvironment } true; {26760#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:07:43,472 INFO L290 TraceCheckUtils]: 45: Hoare triple {26760#(not (= 0 ~systemActive~0))} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret10#1, __utac_acc__Specification2_spec__2_#t~ret11#1, __utac_acc__Specification2_spec__2_~tmp~1#1, __utac_acc__Specification2_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__2_~tmp~1#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~0#1; {26760#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:07:43,473 INFO L272 TraceCheckUtils]: 46: Hoare triple {26760#(not (= 0 ~systemActive~0))} call __utac_acc__Specification2_spec__2_#t~ret10#1 := isMethaneLevelCritical(); {26716#true} is VALID [2022-02-20 18:07:43,473 INFO L290 TraceCheckUtils]: 47: Hoare triple {26716#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {26716#true} is VALID [2022-02-20 18:07:43,473 INFO L290 TraceCheckUtils]: 48: Hoare triple {26716#true} assume true; {26716#true} is VALID [2022-02-20 18:07:43,473 INFO L284 TraceCheckUtils]: 49: Hoare quadruple {26716#true} {26760#(not (= 0 ~systemActive~0))} #246#return; {26760#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:07:43,474 INFO L290 TraceCheckUtils]: 50: Hoare triple {26760#(not (= 0 ~systemActive~0))} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret10#1 && __utac_acc__Specification2_spec__2_#t~ret10#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~1#1 := __utac_acc__Specification2_spec__2_#t~ret10#1;havoc __utac_acc__Specification2_spec__2_#t~ret10#1; {26760#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:07:43,474 INFO L290 TraceCheckUtils]: 51: Hoare triple {26760#(not (= 0 ~systemActive~0))} assume 0 != __utac_acc__Specification2_spec__2_~tmp~1#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~5#1;havoc isPumpRunning_~retValue_acc~5#1;isPumpRunning_~retValue_acc~5#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~5#1; {26760#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:07:43,474 INFO L290 TraceCheckUtils]: 52: Hoare triple {26760#(not (= 0 ~systemActive~0))} __utac_acc__Specification2_spec__2_#t~ret11#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret11#1 && __utac_acc__Specification2_spec__2_#t~ret11#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~0#1 := __utac_acc__Specification2_spec__2_#t~ret11#1;havoc __utac_acc__Specification2_spec__2_#t~ret11#1; {26760#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:07:43,475 INFO L290 TraceCheckUtils]: 53: Hoare triple {26760#(not (= 0 ~systemActive~0))} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~0#1; {26760#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:07:43,475 INFO L290 TraceCheckUtils]: 54: Hoare triple {26760#(not (= 0 ~systemActive~0))} assume !(0 != ~methAndRunningLastTime~0);~methAndRunningLastTime~0 := 1; {26760#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:07:43,475 INFO L290 TraceCheckUtils]: 55: Hoare triple {26760#(not (= 0 ~systemActive~0))} assume { :end_inline___utac_acc__Specification2_spec__2 } true; {26760#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:07:43,475 INFO L290 TraceCheckUtils]: 56: Hoare triple {26760#(not (= 0 ~systemActive~0))} assume true; {26760#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:07:43,476 INFO L284 TraceCheckUtils]: 57: Hoare quadruple {26760#(not (= 0 ~systemActive~0))} {26724#(= 0 ~systemActive~0)} #258#return; {26717#false} is VALID [2022-02-20 18:07:43,476 INFO L290 TraceCheckUtils]: 58: Hoare triple {26717#false} assume !false; {26717#false} is VALID [2022-02-20 18:07:43,476 INFO L290 TraceCheckUtils]: 59: Hoare triple {26717#false} assume test_~splverifierCounter~0#1 < 4; {26717#false} is VALID [2022-02-20 18:07:43,476 INFO L290 TraceCheckUtils]: 60: Hoare triple {26717#false} assume -2147483648 <= test_#t~nondet12#1 && test_#t~nondet12#1 <= 2147483647;test_~tmp~2#1 := test_#t~nondet12#1;havoc test_#t~nondet12#1; {26717#false} is VALID [2022-02-20 18:07:43,476 INFO L290 TraceCheckUtils]: 61: Hoare triple {26717#false} assume !(0 != test_~tmp~2#1); {26717#false} is VALID [2022-02-20 18:07:43,476 INFO L290 TraceCheckUtils]: 62: Hoare triple {26717#false} assume -2147483648 <= test_#t~nondet13#1 && test_#t~nondet13#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet13#1;havoc test_#t~nondet13#1; {26717#false} is VALID [2022-02-20 18:07:43,476 INFO L290 TraceCheckUtils]: 63: Hoare triple {26717#false} assume !(0 != test_~tmp___0~1#1); {26717#false} is VALID [2022-02-20 18:07:43,477 INFO L290 TraceCheckUtils]: 64: Hoare triple {26717#false} assume -2147483648 <= test_#t~nondet14#1 && test_#t~nondet14#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet14#1;havoc test_#t~nondet14#1; {26717#false} is VALID [2022-02-20 18:07:43,477 INFO L290 TraceCheckUtils]: 65: Hoare triple {26717#false} assume 0 != test_~tmp___2~0#1; {26717#false} is VALID [2022-02-20 18:07:43,477 INFO L272 TraceCheckUtils]: 66: Hoare triple {26717#false} call timeShift(); {26717#false} is VALID [2022-02-20 18:07:43,477 INFO L290 TraceCheckUtils]: 67: Hoare triple {26717#false} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {26717#false} is VALID [2022-02-20 18:07:43,477 INFO L290 TraceCheckUtils]: 68: Hoare triple {26717#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {26717#false} is VALID [2022-02-20 18:07:43,477 INFO L290 TraceCheckUtils]: 69: Hoare triple {26717#false} assume { :end_inline_lowerWaterLevel } true; {26717#false} is VALID [2022-02-20 18:07:43,477 INFO L290 TraceCheckUtils]: 70: Hoare triple {26717#false} assume !(0 != ~systemActive~0); {26717#false} is VALID [2022-02-20 18:07:43,477 INFO L290 TraceCheckUtils]: 71: Hoare triple {26717#false} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret10#1, __utac_acc__Specification2_spec__2_#t~ret11#1, __utac_acc__Specification2_spec__2_~tmp~1#1, __utac_acc__Specification2_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__2_~tmp~1#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~0#1; {26717#false} is VALID [2022-02-20 18:07:43,478 INFO L272 TraceCheckUtils]: 72: Hoare triple {26717#false} call __utac_acc__Specification2_spec__2_#t~ret10#1 := isMethaneLevelCritical(); {26716#true} is VALID [2022-02-20 18:07:43,478 INFO L290 TraceCheckUtils]: 73: Hoare triple {26716#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {26716#true} is VALID [2022-02-20 18:07:43,478 INFO L290 TraceCheckUtils]: 74: Hoare triple {26716#true} assume true; {26716#true} is VALID [2022-02-20 18:07:43,478 INFO L284 TraceCheckUtils]: 75: Hoare quadruple {26716#true} {26717#false} #246#return; {26717#false} is VALID [2022-02-20 18:07:43,478 INFO L290 TraceCheckUtils]: 76: Hoare triple {26717#false} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret10#1 && __utac_acc__Specification2_spec__2_#t~ret10#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~1#1 := __utac_acc__Specification2_spec__2_#t~ret10#1;havoc __utac_acc__Specification2_spec__2_#t~ret10#1; {26717#false} is VALID [2022-02-20 18:07:43,478 INFO L290 TraceCheckUtils]: 77: Hoare triple {26717#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~1#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~5#1;havoc isPumpRunning_~retValue_acc~5#1;isPumpRunning_~retValue_acc~5#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~5#1; {26717#false} is VALID [2022-02-20 18:07:43,478 INFO L290 TraceCheckUtils]: 78: Hoare triple {26717#false} __utac_acc__Specification2_spec__2_#t~ret11#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret11#1 && __utac_acc__Specification2_spec__2_#t~ret11#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~0#1 := __utac_acc__Specification2_spec__2_#t~ret11#1;havoc __utac_acc__Specification2_spec__2_#t~ret11#1; {26717#false} is VALID [2022-02-20 18:07:43,478 INFO L290 TraceCheckUtils]: 79: Hoare triple {26717#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~0#1; {26717#false} is VALID [2022-02-20 18:07:43,479 INFO L290 TraceCheckUtils]: 80: Hoare triple {26717#false} assume 0 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {26717#false} is VALID [2022-02-20 18:07:43,479 INFO L290 TraceCheckUtils]: 81: Hoare triple {26717#false} assume !false; {26717#false} is VALID [2022-02-20 18:07:43,479 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 18 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-02-20 18:07:43,479 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:07:43,479 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [392382855] [2022-02-20 18:07:43,479 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [392382855] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:07:43,480 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:07:43,480 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-02-20 18:07:43,480 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1433063356] [2022-02-20 18:07:43,480 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:07:43,480 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 8.375) internal successors, (67), 4 states have internal predecessors, (67), 4 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) Word has length 82 [2022-02-20 18:07:43,481 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:07:43,481 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 8 states, 8 states have (on average 8.375) internal successors, (67), 4 states have internal predecessors, (67), 4 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) [2022-02-20 18:07:43,523 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 80 edges. 80 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:43,524 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-02-20 18:07:43,524 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:07:43,524 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-02-20 18:07:43,524 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2022-02-20 18:07:43,524 INFO L87 Difference]: Start difference. First operand 1533 states and 2038 transitions. Second operand has 8 states, 8 states have (on average 8.375) internal successors, (67), 4 states have internal predecessors, (67), 4 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) [2022-02-20 18:07:44,604 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:44,605 INFO L93 Difference]: Finished difference Result 1800 states and 2379 transitions. [2022-02-20 18:07:44,605 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-02-20 18:07:44,605 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 8.375) internal successors, (67), 4 states have internal predecessors, (67), 4 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) Word has length 82 [2022-02-20 18:07:44,605 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:07:44,606 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 8.375) internal successors, (67), 4 states have internal predecessors, (67), 4 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) [2022-02-20 18:07:44,609 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14 states to 14 states and 303 transitions. [2022-02-20 18:07:44,610 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 8.375) internal successors, (67), 4 states have internal predecessors, (67), 4 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) [2022-02-20 18:07:44,613 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14 states to 14 states and 303 transitions. [2022-02-20 18:07:44,613 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 14 states and 303 transitions. [2022-02-20 18:07:44,821 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 303 edges. 303 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:44,863 INFO L225 Difference]: With dead ends: 1800 [2022-02-20 18:07:44,863 INFO L226 Difference]: Without dead ends: 769 [2022-02-20 18:07:44,866 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 32 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 49 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=86, Invalid=220, Unknown=0, NotChecked=0, Total=306 [2022-02-20 18:07:44,866 INFO L933 BasicCegarLoop]: 123 mSDtfsCounter, 377 mSDsluCounter, 151 mSDsCounter, 0 mSdLazyCounter, 287 mSolverCounterSat, 162 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 386 SdHoareTripleChecker+Valid, 274 SdHoareTripleChecker+Invalid, 449 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 162 IncrementalHoareTripleChecker+Valid, 287 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-02-20 18:07:44,867 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [386 Valid, 274 Invalid, 449 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [162 Valid, 287 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-02-20 18:07:44,868 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 769 states. [2022-02-20 18:07:44,929 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 769 to 740. [2022-02-20 18:07:44,929 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:07:44,931 INFO L82 GeneralOperation]: Start isEquivalent. First operand 769 states. Second operand has 740 states, 552 states have (on average 1.193840579710145) internal successors, (659), 591 states have internal predecessors, (659), 98 states have call successors, (98), 72 states have call predecessors, (98), 89 states have return successors, (204), 99 states have call predecessors, (204), 98 states have call successors, (204) [2022-02-20 18:07:44,932 INFO L74 IsIncluded]: Start isIncluded. First operand 769 states. Second operand has 740 states, 552 states have (on average 1.193840579710145) internal successors, (659), 591 states have internal predecessors, (659), 98 states have call successors, (98), 72 states have call predecessors, (98), 89 states have return successors, (204), 99 states have call predecessors, (204), 98 states have call successors, (204) [2022-02-20 18:07:44,934 INFO L87 Difference]: Start difference. First operand 769 states. Second operand has 740 states, 552 states have (on average 1.193840579710145) internal successors, (659), 591 states have internal predecessors, (659), 98 states have call successors, (98), 72 states have call predecessors, (98), 89 states have return successors, (204), 99 states have call predecessors, (204), 98 states have call successors, (204) [2022-02-20 18:07:44,957 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:44,957 INFO L93 Difference]: Finished difference Result 769 states and 995 transitions. [2022-02-20 18:07:44,957 INFO L276 IsEmpty]: Start isEmpty. Operand 769 states and 995 transitions. [2022-02-20 18:07:44,959 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:44,959 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:44,961 INFO L74 IsIncluded]: Start isIncluded. First operand has 740 states, 552 states have (on average 1.193840579710145) internal successors, (659), 591 states have internal predecessors, (659), 98 states have call successors, (98), 72 states have call predecessors, (98), 89 states have return successors, (204), 99 states have call predecessors, (204), 98 states have call successors, (204) Second operand 769 states. [2022-02-20 18:07:44,962 INFO L87 Difference]: Start difference. First operand has 740 states, 552 states have (on average 1.193840579710145) internal successors, (659), 591 states have internal predecessors, (659), 98 states have call successors, (98), 72 states have call predecessors, (98), 89 states have return successors, (204), 99 states have call predecessors, (204), 98 states have call successors, (204) Second operand 769 states. [2022-02-20 18:07:44,989 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:44,989 INFO L93 Difference]: Finished difference Result 769 states and 995 transitions. [2022-02-20 18:07:44,990 INFO L276 IsEmpty]: Start isEmpty. Operand 769 states and 995 transitions. [2022-02-20 18:07:44,992 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:44,992 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:44,992 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:07:44,992 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:07:44,993 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 740 states, 552 states have (on average 1.193840579710145) internal successors, (659), 591 states have internal predecessors, (659), 98 states have call successors, (98), 72 states have call predecessors, (98), 89 states have return successors, (204), 99 states have call predecessors, (204), 98 states have call successors, (204) [2022-02-20 18:07:45,022 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 740 states to 740 states and 961 transitions. [2022-02-20 18:07:45,023 INFO L78 Accepts]: Start accepts. Automaton has 740 states and 961 transitions. Word has length 82 [2022-02-20 18:07:45,023 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:07:45,023 INFO L470 AbstractCegarLoop]: Abstraction has 740 states and 961 transitions. [2022-02-20 18:07:45,023 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 8.375) internal successors, (67), 4 states have internal predecessors, (67), 4 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) [2022-02-20 18:07:45,023 INFO L276 IsEmpty]: Start isEmpty. Operand 740 states and 961 transitions. [2022-02-20 18:07:45,025 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 91 [2022-02-20 18:07:45,025 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:07:45,025 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:07:45,025 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-02-20 18:07:45,025 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:07:45,026 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:07:45,026 INFO L85 PathProgramCache]: Analyzing trace with hash 750648094, now seen corresponding path program 1 times [2022-02-20 18:07:45,026 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:07:45,026 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1888489312] [2022-02-20 18:07:45,026 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:07:45,026 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:07:45,053 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:45,085 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-02-20 18:07:45,087 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:45,093 INFO L290 TraceCheckUtils]: 0: Hoare triple {31897#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {31844#true} is VALID [2022-02-20 18:07:45,094 INFO L290 TraceCheckUtils]: 1: Hoare triple {31844#true} assume true; {31844#true} is VALID [2022-02-20 18:07:45,094 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {31844#true} {31846#(= 1 ~systemActive~0)} #252#return; {31846#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:45,097 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:07:45,104 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:45,107 INFO L290 TraceCheckUtils]: 0: Hoare triple {31898#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {31844#true} is VALID [2022-02-20 18:07:45,107 INFO L290 TraceCheckUtils]: 1: Hoare triple {31844#true} assume true; {31844#true} is VALID [2022-02-20 18:07:45,107 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {31844#true} {31846#(= 1 ~systemActive~0)} #254#return; {31846#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:45,113 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-02-20 18:07:45,118 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:45,131 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-02-20 18:07:45,134 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:45,142 INFO L290 TraceCheckUtils]: 0: Hoare triple {31915#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~3#1; {31844#true} is VALID [2022-02-20 18:07:45,142 INFO L290 TraceCheckUtils]: 1: Hoare triple {31844#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret27#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~5#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~5#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {31844#true} is VALID [2022-02-20 18:07:45,142 INFO L290 TraceCheckUtils]: 2: Hoare triple {31844#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {31844#true} is VALID [2022-02-20 18:07:45,142 INFO L290 TraceCheckUtils]: 3: Hoare triple {31844#true} isHighWaterLevel_#t~ret27#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret27#1 && isHighWaterLevel_#t~ret27#1 <= 2147483647;isHighWaterLevel_~tmp~5#1 := isHighWaterLevel_#t~ret27#1;havoc isHighWaterLevel_#t~ret27#1; {31844#true} is VALID [2022-02-20 18:07:45,143 INFO L290 TraceCheckUtils]: 4: Hoare triple {31844#true} assume !(0 != isHighWaterLevel_~tmp~5#1);isHighWaterLevel_~tmp___0~2#1 := 1; {31844#true} is VALID [2022-02-20 18:07:45,143 INFO L290 TraceCheckUtils]: 5: Hoare triple {31844#true} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {31844#true} is VALID [2022-02-20 18:07:45,143 INFO L290 TraceCheckUtils]: 6: Hoare triple {31844#true} #t~ret16#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret16#1 && #t~ret16#1 <= 2147483647;~tmp~3#1 := #t~ret16#1;havoc #t~ret16#1; {31844#true} is VALID [2022-02-20 18:07:45,143 INFO L290 TraceCheckUtils]: 7: Hoare triple {31844#true} assume 0 != ~tmp~3#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {31911#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:07:45,143 INFO L290 TraceCheckUtils]: 8: Hoare triple {31911#(<= 1 ~pumpRunning~0)} assume { :end_inline_activatePump } true; {31911#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:07:45,144 INFO L290 TraceCheckUtils]: 9: Hoare triple {31911#(<= 1 ~pumpRunning~0)} assume true; {31911#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:07:45,144 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {31911#(<= 1 ~pumpRunning~0)} {31844#true} #244#return; {31911#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:07:45,144 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-02-20 18:07:45,145 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:45,148 INFO L290 TraceCheckUtils]: 0: Hoare triple {31844#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {31844#true} is VALID [2022-02-20 18:07:45,148 INFO L290 TraceCheckUtils]: 1: Hoare triple {31844#true} assume true; {31844#true} is VALID [2022-02-20 18:07:45,148 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {31844#true} {31911#(<= 1 ~pumpRunning~0)} #246#return; {31911#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:07:45,149 INFO L290 TraceCheckUtils]: 0: Hoare triple {31899#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0) (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))} assume !(0 != ~pumpRunning~0); {31844#true} is VALID [2022-02-20 18:07:45,149 INFO L290 TraceCheckUtils]: 1: Hoare triple {31844#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret17#1, processEnvironment_~tmp~4#1;havoc processEnvironment_~tmp~4#1; {31844#true} is VALID [2022-02-20 18:07:45,149 INFO L290 TraceCheckUtils]: 2: Hoare triple {31844#true} assume !(0 != ~pumpRunning~0); {31844#true} is VALID [2022-02-20 18:07:45,149 INFO L272 TraceCheckUtils]: 3: Hoare triple {31844#true} call processEnvironment__wrappee__highWaterSensor(); {31915#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:07:45,149 INFO L290 TraceCheckUtils]: 4: Hoare triple {31915#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~3#1; {31844#true} is VALID [2022-02-20 18:07:45,149 INFO L290 TraceCheckUtils]: 5: Hoare triple {31844#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret27#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~5#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~5#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {31844#true} is VALID [2022-02-20 18:07:45,150 INFO L290 TraceCheckUtils]: 6: Hoare triple {31844#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {31844#true} is VALID [2022-02-20 18:07:45,150 INFO L290 TraceCheckUtils]: 7: Hoare triple {31844#true} isHighWaterLevel_#t~ret27#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret27#1 && isHighWaterLevel_#t~ret27#1 <= 2147483647;isHighWaterLevel_~tmp~5#1 := isHighWaterLevel_#t~ret27#1;havoc isHighWaterLevel_#t~ret27#1; {31844#true} is VALID [2022-02-20 18:07:45,150 INFO L290 TraceCheckUtils]: 8: Hoare triple {31844#true} assume !(0 != isHighWaterLevel_~tmp~5#1);isHighWaterLevel_~tmp___0~2#1 := 1; {31844#true} is VALID [2022-02-20 18:07:45,150 INFO L290 TraceCheckUtils]: 9: Hoare triple {31844#true} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {31844#true} is VALID [2022-02-20 18:07:45,150 INFO L290 TraceCheckUtils]: 10: Hoare triple {31844#true} #t~ret16#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret16#1 && #t~ret16#1 <= 2147483647;~tmp~3#1 := #t~ret16#1;havoc #t~ret16#1; {31844#true} is VALID [2022-02-20 18:07:45,150 INFO L290 TraceCheckUtils]: 11: Hoare triple {31844#true} assume 0 != ~tmp~3#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {31911#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:07:45,151 INFO L290 TraceCheckUtils]: 12: Hoare triple {31911#(<= 1 ~pumpRunning~0)} assume { :end_inline_activatePump } true; {31911#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:07:45,151 INFO L290 TraceCheckUtils]: 13: Hoare triple {31911#(<= 1 ~pumpRunning~0)} assume true; {31911#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:07:45,151 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {31911#(<= 1 ~pumpRunning~0)} {31844#true} #244#return; {31911#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:07:45,152 INFO L290 TraceCheckUtils]: 15: Hoare triple {31911#(<= 1 ~pumpRunning~0)} assume { :end_inline_processEnvironment } true; {31911#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:07:45,152 INFO L290 TraceCheckUtils]: 16: Hoare triple {31911#(<= 1 ~pumpRunning~0)} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret10#1, __utac_acc__Specification2_spec__2_#t~ret11#1, __utac_acc__Specification2_spec__2_~tmp~1#1, __utac_acc__Specification2_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__2_~tmp~1#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~0#1; {31911#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:07:45,152 INFO L272 TraceCheckUtils]: 17: Hoare triple {31911#(<= 1 ~pumpRunning~0)} call __utac_acc__Specification2_spec__2_#t~ret10#1 := isMethaneLevelCritical(); {31844#true} is VALID [2022-02-20 18:07:45,152 INFO L290 TraceCheckUtils]: 18: Hoare triple {31844#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {31844#true} is VALID [2022-02-20 18:07:45,152 INFO L290 TraceCheckUtils]: 19: Hoare triple {31844#true} assume true; {31844#true} is VALID [2022-02-20 18:07:45,153 INFO L284 TraceCheckUtils]: 20: Hoare quadruple {31844#true} {31911#(<= 1 ~pumpRunning~0)} #246#return; {31911#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:07:45,153 INFO L290 TraceCheckUtils]: 21: Hoare triple {31911#(<= 1 ~pumpRunning~0)} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret10#1 && __utac_acc__Specification2_spec__2_#t~ret10#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~1#1 := __utac_acc__Specification2_spec__2_#t~ret10#1;havoc __utac_acc__Specification2_spec__2_#t~ret10#1; {31911#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:07:45,153 INFO L290 TraceCheckUtils]: 22: Hoare triple {31911#(<= 1 ~pumpRunning~0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp~1#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~5#1;havoc isPumpRunning_~retValue_acc~5#1;isPumpRunning_~retValue_acc~5#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~5#1; {31911#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:07:45,153 INFO L290 TraceCheckUtils]: 23: Hoare triple {31911#(<= 1 ~pumpRunning~0)} __utac_acc__Specification2_spec__2_#t~ret11#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret11#1 && __utac_acc__Specification2_spec__2_#t~ret11#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~0#1 := __utac_acc__Specification2_spec__2_#t~ret11#1;havoc __utac_acc__Specification2_spec__2_#t~ret11#1; {31911#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:07:45,154 INFO L290 TraceCheckUtils]: 24: Hoare triple {31911#(<= 1 ~pumpRunning~0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~0#1; {31911#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:07:45,154 INFO L290 TraceCheckUtils]: 25: Hoare triple {31911#(<= 1 ~pumpRunning~0)} assume !(0 != ~methAndRunningLastTime~0);~methAndRunningLastTime~0 := 1; {31911#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:07:45,154 INFO L290 TraceCheckUtils]: 26: Hoare triple {31911#(<= 1 ~pumpRunning~0)} assume { :end_inline___utac_acc__Specification2_spec__2 } true; {31911#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:07:45,155 INFO L290 TraceCheckUtils]: 27: Hoare triple {31911#(<= 1 ~pumpRunning~0)} assume true; {31911#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:07:45,155 INFO L284 TraceCheckUtils]: 28: Hoare quadruple {31911#(<= 1 ~pumpRunning~0)} {31846#(= 1 ~systemActive~0)} #258#return; {31882#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:07:45,156 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 66 [2022-02-20 18:07:45,158 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:45,163 INFO L290 TraceCheckUtils]: 0: Hoare triple {31915#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~3#1; {31844#true} is VALID [2022-02-20 18:07:45,163 INFO L290 TraceCheckUtils]: 1: Hoare triple {31844#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret27#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~5#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~5#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {31844#true} is VALID [2022-02-20 18:07:45,163 INFO L290 TraceCheckUtils]: 2: Hoare triple {31844#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {31844#true} is VALID [2022-02-20 18:07:45,163 INFO L290 TraceCheckUtils]: 3: Hoare triple {31844#true} isHighWaterLevel_#t~ret27#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret27#1 && isHighWaterLevel_#t~ret27#1 <= 2147483647;isHighWaterLevel_~tmp~5#1 := isHighWaterLevel_#t~ret27#1;havoc isHighWaterLevel_#t~ret27#1; {31844#true} is VALID [2022-02-20 18:07:45,163 INFO L290 TraceCheckUtils]: 4: Hoare triple {31844#true} assume !(0 != isHighWaterLevel_~tmp~5#1);isHighWaterLevel_~tmp___0~2#1 := 1; {31844#true} is VALID [2022-02-20 18:07:45,164 INFO L290 TraceCheckUtils]: 5: Hoare triple {31844#true} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {31844#true} is VALID [2022-02-20 18:07:45,164 INFO L290 TraceCheckUtils]: 6: Hoare triple {31844#true} #t~ret16#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret16#1 && #t~ret16#1 <= 2147483647;~tmp~3#1 := #t~ret16#1;havoc #t~ret16#1; {31844#true} is VALID [2022-02-20 18:07:45,164 INFO L290 TraceCheckUtils]: 7: Hoare triple {31844#true} assume 0 != ~tmp~3#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {31844#true} is VALID [2022-02-20 18:07:45,164 INFO L290 TraceCheckUtils]: 8: Hoare triple {31844#true} assume { :end_inline_activatePump } true; {31844#true} is VALID [2022-02-20 18:07:45,164 INFO L290 TraceCheckUtils]: 9: Hoare triple {31844#true} assume true; {31844#true} is VALID [2022-02-20 18:07:45,164 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {31844#true} {31845#false} #244#return; {31845#false} is VALID [2022-02-20 18:07:45,164 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2022-02-20 18:07:45,165 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:45,166 INFO L290 TraceCheckUtils]: 0: Hoare triple {31844#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {31844#true} is VALID [2022-02-20 18:07:45,167 INFO L290 TraceCheckUtils]: 1: Hoare triple {31844#true} assume true; {31844#true} is VALID [2022-02-20 18:07:45,167 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {31844#true} {31845#false} #246#return; {31845#false} is VALID [2022-02-20 18:07:45,168 INFO L290 TraceCheckUtils]: 0: Hoare triple {31844#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(13, 9);call #Ultimate.allocInit(3, 10);call write~init~int(79, 10, 0, 1);call write~init~int(110, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(4, 11);call write~init~int(79, 11, 0, 1);call write~init~int(102, 11, 1, 1);call write~init~int(102, 11, 2, 1);call write~init~int(0, 11, 3, 1);call #Ultimate.allocInit(7, 12);call write~init~int(44, 12, 0, 1);call write~init~int(80, 12, 1, 1);call write~init~int(117, 12, 2, 1);call write~init~int(109, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(3, 13);call write~init~int(79, 13, 0, 1);call write~init~int(110, 13, 1, 1);call write~init~int(0, 13, 2, 1);call #Ultimate.allocInit(4, 14);call write~init~int(79, 14, 0, 1);call write~init~int(102, 14, 1, 1);call write~init~int(102, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(3, 15);call write~init~int(41, 15, 0, 1);call write~init~int(32, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(10, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~methAndRunningLastTime~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {31846#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:45,168 INFO L290 TraceCheckUtils]: 1: Hoare triple {31846#(= 1 ~systemActive~0)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret9#1, main_~retValue_acc~3#1, main_~tmp~0#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true; {31846#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:45,169 INFO L290 TraceCheckUtils]: 2: Hoare triple {31846#(= 1 ~systemActive~0)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {31846#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:45,169 INFO L290 TraceCheckUtils]: 3: Hoare triple {31846#(= 1 ~systemActive~0)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~8#1;havoc valid_product_~retValue_acc~8#1;valid_product_~retValue_acc~8#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~8#1; {31846#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:45,169 INFO L290 TraceCheckUtils]: 4: Hoare triple {31846#(= 1 ~systemActive~0)} main_#t~ret9#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret9#1 && main_#t~ret9#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret9#1;havoc main_#t~ret9#1; {31846#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:45,170 INFO L290 TraceCheckUtils]: 5: Hoare triple {31846#(= 1 ~systemActive~0)} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {31846#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:45,170 INFO L290 TraceCheckUtils]: 6: Hoare triple {31846#(= 1 ~systemActive~0)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0; {31846#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:45,170 INFO L290 TraceCheckUtils]: 7: Hoare triple {31846#(= 1 ~systemActive~0)} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet12#1, test_#t~nondet13#1, test_#t~nondet14#1, test_#t~nondet15#1, test_~splverifierCounter~0#1, test_~tmp~2#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~2#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {31846#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:45,171 INFO L290 TraceCheckUtils]: 8: Hoare triple {31846#(= 1 ~systemActive~0)} assume !false; {31846#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:45,171 INFO L290 TraceCheckUtils]: 9: Hoare triple {31846#(= 1 ~systemActive~0)} assume test_~splverifierCounter~0#1 < 4; {31846#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:45,171 INFO L290 TraceCheckUtils]: 10: Hoare triple {31846#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet12#1 && test_#t~nondet12#1 <= 2147483647;test_~tmp~2#1 := test_#t~nondet12#1;havoc test_#t~nondet12#1; {31846#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:45,172 INFO L290 TraceCheckUtils]: 11: Hoare triple {31846#(= 1 ~systemActive~0)} assume 0 != test_~tmp~2#1; {31846#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:45,172 INFO L272 TraceCheckUtils]: 12: Hoare triple {31846#(= 1 ~systemActive~0)} call waterRise(); {31897#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:07:45,172 INFO L290 TraceCheckUtils]: 13: Hoare triple {31897#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {31844#true} is VALID [2022-02-20 18:07:45,172 INFO L290 TraceCheckUtils]: 14: Hoare triple {31844#true} assume true; {31844#true} is VALID [2022-02-20 18:07:45,172 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {31844#true} {31846#(= 1 ~systemActive~0)} #252#return; {31846#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:45,173 INFO L290 TraceCheckUtils]: 16: Hoare triple {31846#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet13#1 && test_#t~nondet13#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet13#1;havoc test_#t~nondet13#1; {31846#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:45,173 INFO L290 TraceCheckUtils]: 17: Hoare triple {31846#(= 1 ~systemActive~0)} assume 0 != test_~tmp___0~1#1; {31846#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:45,173 INFO L272 TraceCheckUtils]: 18: Hoare triple {31846#(= 1 ~systemActive~0)} call changeMethaneLevel(); {31898#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:45,174 INFO L290 TraceCheckUtils]: 19: Hoare triple {31898#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {31844#true} is VALID [2022-02-20 18:07:45,174 INFO L290 TraceCheckUtils]: 20: Hoare triple {31844#true} assume true; {31844#true} is VALID [2022-02-20 18:07:45,174 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {31844#true} {31846#(= 1 ~systemActive~0)} #254#return; {31846#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:45,174 INFO L290 TraceCheckUtils]: 22: Hoare triple {31846#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet14#1 && test_#t~nondet14#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet14#1;havoc test_#t~nondet14#1; {31846#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:45,175 INFO L290 TraceCheckUtils]: 23: Hoare triple {31846#(= 1 ~systemActive~0)} assume 0 != test_~tmp___2~0#1; {31846#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:45,175 INFO L272 TraceCheckUtils]: 24: Hoare triple {31846#(= 1 ~systemActive~0)} call timeShift(); {31899#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0) (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))} is VALID [2022-02-20 18:07:45,175 INFO L290 TraceCheckUtils]: 25: Hoare triple {31899#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0) (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))} assume !(0 != ~pumpRunning~0); {31844#true} is VALID [2022-02-20 18:07:45,175 INFO L290 TraceCheckUtils]: 26: Hoare triple {31844#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret17#1, processEnvironment_~tmp~4#1;havoc processEnvironment_~tmp~4#1; {31844#true} is VALID [2022-02-20 18:07:45,175 INFO L290 TraceCheckUtils]: 27: Hoare triple {31844#true} assume !(0 != ~pumpRunning~0); {31844#true} is VALID [2022-02-20 18:07:45,176 INFO L272 TraceCheckUtils]: 28: Hoare triple {31844#true} call processEnvironment__wrappee__highWaterSensor(); {31915#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:07:45,178 INFO L290 TraceCheckUtils]: 29: Hoare triple {31915#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~3#1; {31844#true} is VALID [2022-02-20 18:07:45,178 INFO L290 TraceCheckUtils]: 30: Hoare triple {31844#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret27#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~5#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~5#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {31844#true} is VALID [2022-02-20 18:07:45,178 INFO L290 TraceCheckUtils]: 31: Hoare triple {31844#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {31844#true} is VALID [2022-02-20 18:07:45,178 INFO L290 TraceCheckUtils]: 32: Hoare triple {31844#true} isHighWaterLevel_#t~ret27#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret27#1 && isHighWaterLevel_#t~ret27#1 <= 2147483647;isHighWaterLevel_~tmp~5#1 := isHighWaterLevel_#t~ret27#1;havoc isHighWaterLevel_#t~ret27#1; {31844#true} is VALID [2022-02-20 18:07:45,179 INFO L290 TraceCheckUtils]: 33: Hoare triple {31844#true} assume !(0 != isHighWaterLevel_~tmp~5#1);isHighWaterLevel_~tmp___0~2#1 := 1; {31844#true} is VALID [2022-02-20 18:07:45,179 INFO L290 TraceCheckUtils]: 34: Hoare triple {31844#true} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {31844#true} is VALID [2022-02-20 18:07:45,179 INFO L290 TraceCheckUtils]: 35: Hoare triple {31844#true} #t~ret16#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret16#1 && #t~ret16#1 <= 2147483647;~tmp~3#1 := #t~ret16#1;havoc #t~ret16#1; {31844#true} is VALID [2022-02-20 18:07:45,179 INFO L290 TraceCheckUtils]: 36: Hoare triple {31844#true} assume 0 != ~tmp~3#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {31911#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:07:45,180 INFO L290 TraceCheckUtils]: 37: Hoare triple {31911#(<= 1 ~pumpRunning~0)} assume { :end_inline_activatePump } true; {31911#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:07:45,180 INFO L290 TraceCheckUtils]: 38: Hoare triple {31911#(<= 1 ~pumpRunning~0)} assume true; {31911#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:07:45,180 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {31911#(<= 1 ~pumpRunning~0)} {31844#true} #244#return; {31911#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:07:45,180 INFO L290 TraceCheckUtils]: 40: Hoare triple {31911#(<= 1 ~pumpRunning~0)} assume { :end_inline_processEnvironment } true; {31911#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:07:45,181 INFO L290 TraceCheckUtils]: 41: Hoare triple {31911#(<= 1 ~pumpRunning~0)} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret10#1, __utac_acc__Specification2_spec__2_#t~ret11#1, __utac_acc__Specification2_spec__2_~tmp~1#1, __utac_acc__Specification2_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__2_~tmp~1#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~0#1; {31911#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:07:45,181 INFO L272 TraceCheckUtils]: 42: Hoare triple {31911#(<= 1 ~pumpRunning~0)} call __utac_acc__Specification2_spec__2_#t~ret10#1 := isMethaneLevelCritical(); {31844#true} is VALID [2022-02-20 18:07:45,181 INFO L290 TraceCheckUtils]: 43: Hoare triple {31844#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {31844#true} is VALID [2022-02-20 18:07:45,181 INFO L290 TraceCheckUtils]: 44: Hoare triple {31844#true} assume true; {31844#true} is VALID [2022-02-20 18:07:45,181 INFO L284 TraceCheckUtils]: 45: Hoare quadruple {31844#true} {31911#(<= 1 ~pumpRunning~0)} #246#return; {31911#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:07:45,182 INFO L290 TraceCheckUtils]: 46: Hoare triple {31911#(<= 1 ~pumpRunning~0)} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret10#1 && __utac_acc__Specification2_spec__2_#t~ret10#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~1#1 := __utac_acc__Specification2_spec__2_#t~ret10#1;havoc __utac_acc__Specification2_spec__2_#t~ret10#1; {31911#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:07:45,182 INFO L290 TraceCheckUtils]: 47: Hoare triple {31911#(<= 1 ~pumpRunning~0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp~1#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~5#1;havoc isPumpRunning_~retValue_acc~5#1;isPumpRunning_~retValue_acc~5#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~5#1; {31911#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:07:45,182 INFO L290 TraceCheckUtils]: 48: Hoare triple {31911#(<= 1 ~pumpRunning~0)} __utac_acc__Specification2_spec__2_#t~ret11#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret11#1 && __utac_acc__Specification2_spec__2_#t~ret11#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~0#1 := __utac_acc__Specification2_spec__2_#t~ret11#1;havoc __utac_acc__Specification2_spec__2_#t~ret11#1; {31911#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:07:45,182 INFO L290 TraceCheckUtils]: 49: Hoare triple {31911#(<= 1 ~pumpRunning~0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~0#1; {31911#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:07:45,183 INFO L290 TraceCheckUtils]: 50: Hoare triple {31911#(<= 1 ~pumpRunning~0)} assume !(0 != ~methAndRunningLastTime~0);~methAndRunningLastTime~0 := 1; {31911#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:07:45,183 INFO L290 TraceCheckUtils]: 51: Hoare triple {31911#(<= 1 ~pumpRunning~0)} assume { :end_inline___utac_acc__Specification2_spec__2 } true; {31911#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:07:45,183 INFO L290 TraceCheckUtils]: 52: Hoare triple {31911#(<= 1 ~pumpRunning~0)} assume true; {31911#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:07:45,184 INFO L284 TraceCheckUtils]: 53: Hoare quadruple {31911#(<= 1 ~pumpRunning~0)} {31846#(= 1 ~systemActive~0)} #258#return; {31882#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:07:45,184 INFO L290 TraceCheckUtils]: 54: Hoare triple {31882#(not (= ~pumpRunning~0 0))} assume !false; {31882#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:07:45,184 INFO L290 TraceCheckUtils]: 55: Hoare triple {31882#(not (= ~pumpRunning~0 0))} assume test_~splverifierCounter~0#1 < 4; {31882#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:07:45,185 INFO L290 TraceCheckUtils]: 56: Hoare triple {31882#(not (= ~pumpRunning~0 0))} assume -2147483648 <= test_#t~nondet12#1 && test_#t~nondet12#1 <= 2147483647;test_~tmp~2#1 := test_#t~nondet12#1;havoc test_#t~nondet12#1; {31882#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:07:45,185 INFO L290 TraceCheckUtils]: 57: Hoare triple {31882#(not (= ~pumpRunning~0 0))} assume !(0 != test_~tmp~2#1); {31882#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:07:45,185 INFO L290 TraceCheckUtils]: 58: Hoare triple {31882#(not (= ~pumpRunning~0 0))} assume -2147483648 <= test_#t~nondet13#1 && test_#t~nondet13#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet13#1;havoc test_#t~nondet13#1; {31882#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:07:45,185 INFO L290 TraceCheckUtils]: 59: Hoare triple {31882#(not (= ~pumpRunning~0 0))} assume !(0 != test_~tmp___0~1#1); {31882#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:07:45,186 INFO L290 TraceCheckUtils]: 60: Hoare triple {31882#(not (= ~pumpRunning~0 0))} assume -2147483648 <= test_#t~nondet14#1 && test_#t~nondet14#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet14#1;havoc test_#t~nondet14#1; {31882#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:07:45,186 INFO L290 TraceCheckUtils]: 61: Hoare triple {31882#(not (= ~pumpRunning~0 0))} assume 0 != test_~tmp___2~0#1; {31882#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:07:45,186 INFO L272 TraceCheckUtils]: 62: Hoare triple {31882#(not (= ~pumpRunning~0 0))} call timeShift(); {31882#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:07:45,187 INFO L290 TraceCheckUtils]: 63: Hoare triple {31882#(not (= ~pumpRunning~0 0))} assume !(0 != ~pumpRunning~0); {31845#false} is VALID [2022-02-20 18:07:45,187 INFO L290 TraceCheckUtils]: 64: Hoare triple {31845#false} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret17#1, processEnvironment_~tmp~4#1;havoc processEnvironment_~tmp~4#1; {31845#false} is VALID [2022-02-20 18:07:45,187 INFO L290 TraceCheckUtils]: 65: Hoare triple {31845#false} assume !(0 != ~pumpRunning~0); {31845#false} is VALID [2022-02-20 18:07:45,187 INFO L272 TraceCheckUtils]: 66: Hoare triple {31845#false} call processEnvironment__wrappee__highWaterSensor(); {31915#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:07:45,187 INFO L290 TraceCheckUtils]: 67: Hoare triple {31915#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~3#1; {31844#true} is VALID [2022-02-20 18:07:45,187 INFO L290 TraceCheckUtils]: 68: Hoare triple {31844#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret27#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~5#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~5#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {31844#true} is VALID [2022-02-20 18:07:45,197 INFO L290 TraceCheckUtils]: 69: Hoare triple {31844#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {31844#true} is VALID [2022-02-20 18:07:45,207 INFO L290 TraceCheckUtils]: 70: Hoare triple {31844#true} isHighWaterLevel_#t~ret27#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret27#1 && isHighWaterLevel_#t~ret27#1 <= 2147483647;isHighWaterLevel_~tmp~5#1 := isHighWaterLevel_#t~ret27#1;havoc isHighWaterLevel_#t~ret27#1; {31844#true} is VALID [2022-02-20 18:07:45,208 INFO L290 TraceCheckUtils]: 71: Hoare triple {31844#true} assume !(0 != isHighWaterLevel_~tmp~5#1);isHighWaterLevel_~tmp___0~2#1 := 1; {31844#true} is VALID [2022-02-20 18:07:45,208 INFO L290 TraceCheckUtils]: 72: Hoare triple {31844#true} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {31844#true} is VALID [2022-02-20 18:07:45,208 INFO L290 TraceCheckUtils]: 73: Hoare triple {31844#true} #t~ret16#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret16#1 && #t~ret16#1 <= 2147483647;~tmp~3#1 := #t~ret16#1;havoc #t~ret16#1; {31844#true} is VALID [2022-02-20 18:07:45,208 INFO L290 TraceCheckUtils]: 74: Hoare triple {31844#true} assume 0 != ~tmp~3#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {31844#true} is VALID [2022-02-20 18:07:45,208 INFO L290 TraceCheckUtils]: 75: Hoare triple {31844#true} assume { :end_inline_activatePump } true; {31844#true} is VALID [2022-02-20 18:07:45,208 INFO L290 TraceCheckUtils]: 76: Hoare triple {31844#true} assume true; {31844#true} is VALID [2022-02-20 18:07:45,209 INFO L284 TraceCheckUtils]: 77: Hoare quadruple {31844#true} {31845#false} #244#return; {31845#false} is VALID [2022-02-20 18:07:45,209 INFO L290 TraceCheckUtils]: 78: Hoare triple {31845#false} assume { :end_inline_processEnvironment } true; {31845#false} is VALID [2022-02-20 18:07:45,209 INFO L290 TraceCheckUtils]: 79: Hoare triple {31845#false} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret10#1, __utac_acc__Specification2_spec__2_#t~ret11#1, __utac_acc__Specification2_spec__2_~tmp~1#1, __utac_acc__Specification2_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__2_~tmp~1#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~0#1; {31845#false} is VALID [2022-02-20 18:07:45,209 INFO L272 TraceCheckUtils]: 80: Hoare triple {31845#false} call __utac_acc__Specification2_spec__2_#t~ret10#1 := isMethaneLevelCritical(); {31844#true} is VALID [2022-02-20 18:07:45,209 INFO L290 TraceCheckUtils]: 81: Hoare triple {31844#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {31844#true} is VALID [2022-02-20 18:07:45,209 INFO L290 TraceCheckUtils]: 82: Hoare triple {31844#true} assume true; {31844#true} is VALID [2022-02-20 18:07:45,209 INFO L284 TraceCheckUtils]: 83: Hoare quadruple {31844#true} {31845#false} #246#return; {31845#false} is VALID [2022-02-20 18:07:45,209 INFO L290 TraceCheckUtils]: 84: Hoare triple {31845#false} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret10#1 && __utac_acc__Specification2_spec__2_#t~ret10#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~1#1 := __utac_acc__Specification2_spec__2_#t~ret10#1;havoc __utac_acc__Specification2_spec__2_#t~ret10#1; {31845#false} is VALID [2022-02-20 18:07:45,210 INFO L290 TraceCheckUtils]: 85: Hoare triple {31845#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~1#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~5#1;havoc isPumpRunning_~retValue_acc~5#1;isPumpRunning_~retValue_acc~5#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~5#1; {31845#false} is VALID [2022-02-20 18:07:45,210 INFO L290 TraceCheckUtils]: 86: Hoare triple {31845#false} __utac_acc__Specification2_spec__2_#t~ret11#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret11#1 && __utac_acc__Specification2_spec__2_#t~ret11#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~0#1 := __utac_acc__Specification2_spec__2_#t~ret11#1;havoc __utac_acc__Specification2_spec__2_#t~ret11#1; {31845#false} is VALID [2022-02-20 18:07:45,210 INFO L290 TraceCheckUtils]: 87: Hoare triple {31845#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~0#1; {31845#false} is VALID [2022-02-20 18:07:45,210 INFO L290 TraceCheckUtils]: 88: Hoare triple {31845#false} assume 0 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {31845#false} is VALID [2022-02-20 18:07:45,210 INFO L290 TraceCheckUtils]: 89: Hoare triple {31845#false} assume !false; {31845#false} is VALID [2022-02-20 18:07:45,210 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 11 proven. 13 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2022-02-20 18:07:45,210 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:07:45,211 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1888489312] [2022-02-20 18:07:45,211 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1888489312] provided 0 perfect and 1 imperfect interpolant sequences [2022-02-20 18:07:45,211 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [359789552] [2022-02-20 18:07:45,211 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:07:45,211 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-02-20 18:07:45,211 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-20 18:07:45,213 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-02-20 18:07:45,217 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-02-20 18:07:45,301 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:45,304 INFO L263 TraceCheckSpWp]: Trace formula consists of 466 conjuncts, 4 conjunts are in the unsatisfiable core [2022-02-20 18:07:45,348 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:45,369 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 18:07:45,701 INFO L290 TraceCheckUtils]: 0: Hoare triple {31844#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(13, 9);call #Ultimate.allocInit(3, 10);call write~init~int(79, 10, 0, 1);call write~init~int(110, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(4, 11);call write~init~int(79, 11, 0, 1);call write~init~int(102, 11, 1, 1);call write~init~int(102, 11, 2, 1);call write~init~int(0, 11, 3, 1);call #Ultimate.allocInit(7, 12);call write~init~int(44, 12, 0, 1);call write~init~int(80, 12, 1, 1);call write~init~int(117, 12, 2, 1);call write~init~int(109, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(3, 13);call write~init~int(79, 13, 0, 1);call write~init~int(110, 13, 1, 1);call write~init~int(0, 13, 2, 1);call #Ultimate.allocInit(4, 14);call write~init~int(79, 14, 0, 1);call write~init~int(102, 14, 1, 1);call write~init~int(102, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(3, 15);call write~init~int(41, 15, 0, 1);call write~init~int(32, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(10, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~methAndRunningLastTime~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {31844#true} is VALID [2022-02-20 18:07:45,702 INFO L290 TraceCheckUtils]: 1: Hoare triple {31844#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret9#1, main_~retValue_acc~3#1, main_~tmp~0#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true; {31844#true} is VALID [2022-02-20 18:07:45,702 INFO L290 TraceCheckUtils]: 2: Hoare triple {31844#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {31844#true} is VALID [2022-02-20 18:07:45,702 INFO L290 TraceCheckUtils]: 3: Hoare triple {31844#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~8#1;havoc valid_product_~retValue_acc~8#1;valid_product_~retValue_acc~8#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~8#1; {31844#true} is VALID [2022-02-20 18:07:45,702 INFO L290 TraceCheckUtils]: 4: Hoare triple {31844#true} main_#t~ret9#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret9#1 && main_#t~ret9#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret9#1;havoc main_#t~ret9#1; {31844#true} is VALID [2022-02-20 18:07:45,702 INFO L290 TraceCheckUtils]: 5: Hoare triple {31844#true} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {31844#true} is VALID [2022-02-20 18:07:45,702 INFO L290 TraceCheckUtils]: 6: Hoare triple {31844#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0; {31844#true} is VALID [2022-02-20 18:07:45,702 INFO L290 TraceCheckUtils]: 7: Hoare triple {31844#true} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet12#1, test_#t~nondet13#1, test_#t~nondet14#1, test_#t~nondet15#1, test_~splverifierCounter~0#1, test_~tmp~2#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~2#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {31844#true} is VALID [2022-02-20 18:07:45,703 INFO L290 TraceCheckUtils]: 8: Hoare triple {31844#true} assume !false; {31844#true} is VALID [2022-02-20 18:07:45,703 INFO L290 TraceCheckUtils]: 9: Hoare triple {31844#true} assume test_~splverifierCounter~0#1 < 4; {31844#true} is VALID [2022-02-20 18:07:45,703 INFO L290 TraceCheckUtils]: 10: Hoare triple {31844#true} assume -2147483648 <= test_#t~nondet12#1 && test_#t~nondet12#1 <= 2147483647;test_~tmp~2#1 := test_#t~nondet12#1;havoc test_#t~nondet12#1; {31844#true} is VALID [2022-02-20 18:07:45,703 INFO L290 TraceCheckUtils]: 11: Hoare triple {31844#true} assume 0 != test_~tmp~2#1; {31844#true} is VALID [2022-02-20 18:07:45,703 INFO L272 TraceCheckUtils]: 12: Hoare triple {31844#true} call waterRise(); {31844#true} is VALID [2022-02-20 18:07:45,703 INFO L290 TraceCheckUtils]: 13: Hoare triple {31844#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {31844#true} is VALID [2022-02-20 18:07:45,703 INFO L290 TraceCheckUtils]: 14: Hoare triple {31844#true} assume true; {31844#true} is VALID [2022-02-20 18:07:45,703 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {31844#true} {31844#true} #252#return; {31844#true} is VALID [2022-02-20 18:07:45,704 INFO L290 TraceCheckUtils]: 16: Hoare triple {31844#true} assume -2147483648 <= test_#t~nondet13#1 && test_#t~nondet13#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet13#1;havoc test_#t~nondet13#1; {31844#true} is VALID [2022-02-20 18:07:45,704 INFO L290 TraceCheckUtils]: 17: Hoare triple {31844#true} assume 0 != test_~tmp___0~1#1; {31844#true} is VALID [2022-02-20 18:07:45,704 INFO L272 TraceCheckUtils]: 18: Hoare triple {31844#true} call changeMethaneLevel(); {31844#true} is VALID [2022-02-20 18:07:45,704 INFO L290 TraceCheckUtils]: 19: Hoare triple {31844#true} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {31844#true} is VALID [2022-02-20 18:07:45,704 INFO L290 TraceCheckUtils]: 20: Hoare triple {31844#true} assume true; {31844#true} is VALID [2022-02-20 18:07:45,704 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {31844#true} {31844#true} #254#return; {31844#true} is VALID [2022-02-20 18:07:45,704 INFO L290 TraceCheckUtils]: 22: Hoare triple {31844#true} assume -2147483648 <= test_#t~nondet14#1 && test_#t~nondet14#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet14#1;havoc test_#t~nondet14#1; {31844#true} is VALID [2022-02-20 18:07:45,704 INFO L290 TraceCheckUtils]: 23: Hoare triple {31844#true} assume 0 != test_~tmp___2~0#1; {31844#true} is VALID [2022-02-20 18:07:45,705 INFO L272 TraceCheckUtils]: 24: Hoare triple {31844#true} call timeShift(); {31844#true} is VALID [2022-02-20 18:07:45,705 INFO L290 TraceCheckUtils]: 25: Hoare triple {31844#true} assume !(0 != ~pumpRunning~0); {31844#true} is VALID [2022-02-20 18:07:45,705 INFO L290 TraceCheckUtils]: 26: Hoare triple {31844#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret17#1, processEnvironment_~tmp~4#1;havoc processEnvironment_~tmp~4#1; {31844#true} is VALID [2022-02-20 18:07:45,705 INFO L290 TraceCheckUtils]: 27: Hoare triple {31844#true} assume !(0 != ~pumpRunning~0); {31844#true} is VALID [2022-02-20 18:07:45,705 INFO L272 TraceCheckUtils]: 28: Hoare triple {31844#true} call processEnvironment__wrappee__highWaterSensor(); {31844#true} is VALID [2022-02-20 18:07:45,705 INFO L290 TraceCheckUtils]: 29: Hoare triple {31844#true} havoc ~tmp~3#1; {31844#true} is VALID [2022-02-20 18:07:45,705 INFO L290 TraceCheckUtils]: 30: Hoare triple {31844#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret27#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~5#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~5#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {31844#true} is VALID [2022-02-20 18:07:45,706 INFO L290 TraceCheckUtils]: 31: Hoare triple {31844#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {31844#true} is VALID [2022-02-20 18:07:45,706 INFO L290 TraceCheckUtils]: 32: Hoare triple {31844#true} isHighWaterLevel_#t~ret27#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret27#1 && isHighWaterLevel_#t~ret27#1 <= 2147483647;isHighWaterLevel_~tmp~5#1 := isHighWaterLevel_#t~ret27#1;havoc isHighWaterLevel_#t~ret27#1; {31844#true} is VALID [2022-02-20 18:07:45,706 INFO L290 TraceCheckUtils]: 33: Hoare triple {31844#true} assume !(0 != isHighWaterLevel_~tmp~5#1);isHighWaterLevel_~tmp___0~2#1 := 1; {31844#true} is VALID [2022-02-20 18:07:45,706 INFO L290 TraceCheckUtils]: 34: Hoare triple {31844#true} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {31844#true} is VALID [2022-02-20 18:07:45,706 INFO L290 TraceCheckUtils]: 35: Hoare triple {31844#true} #t~ret16#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret16#1 && #t~ret16#1 <= 2147483647;~tmp~3#1 := #t~ret16#1;havoc #t~ret16#1; {31844#true} is VALID [2022-02-20 18:07:45,707 INFO L290 TraceCheckUtils]: 36: Hoare triple {31844#true} assume 0 != ~tmp~3#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {31911#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:07:45,707 INFO L290 TraceCheckUtils]: 37: Hoare triple {31911#(<= 1 ~pumpRunning~0)} assume { :end_inline_activatePump } true; {31911#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:07:45,707 INFO L290 TraceCheckUtils]: 38: Hoare triple {31911#(<= 1 ~pumpRunning~0)} assume true; {31911#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:07:45,708 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {31911#(<= 1 ~pumpRunning~0)} {31844#true} #244#return; {31911#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:07:45,708 INFO L290 TraceCheckUtils]: 40: Hoare triple {31911#(<= 1 ~pumpRunning~0)} assume { :end_inline_processEnvironment } true; {31911#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:07:45,708 INFO L290 TraceCheckUtils]: 41: Hoare triple {31911#(<= 1 ~pumpRunning~0)} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret10#1, __utac_acc__Specification2_spec__2_#t~ret11#1, __utac_acc__Specification2_spec__2_~tmp~1#1, __utac_acc__Specification2_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__2_~tmp~1#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~0#1; {31911#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:07:45,709 INFO L272 TraceCheckUtils]: 42: Hoare triple {31911#(<= 1 ~pumpRunning~0)} call __utac_acc__Specification2_spec__2_#t~ret10#1 := isMethaneLevelCritical(); {31911#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:07:45,709 INFO L290 TraceCheckUtils]: 43: Hoare triple {31911#(<= 1 ~pumpRunning~0)} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {31911#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:07:45,709 INFO L290 TraceCheckUtils]: 44: Hoare triple {31911#(<= 1 ~pumpRunning~0)} assume true; {31911#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:07:45,710 INFO L284 TraceCheckUtils]: 45: Hoare quadruple {31911#(<= 1 ~pumpRunning~0)} {31911#(<= 1 ~pumpRunning~0)} #246#return; {31911#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:07:45,710 INFO L290 TraceCheckUtils]: 46: Hoare triple {31911#(<= 1 ~pumpRunning~0)} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret10#1 && __utac_acc__Specification2_spec__2_#t~ret10#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~1#1 := __utac_acc__Specification2_spec__2_#t~ret10#1;havoc __utac_acc__Specification2_spec__2_#t~ret10#1; {31911#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:07:45,710 INFO L290 TraceCheckUtils]: 47: Hoare triple {31911#(<= 1 ~pumpRunning~0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp~1#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~5#1;havoc isPumpRunning_~retValue_acc~5#1;isPumpRunning_~retValue_acc~5#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~5#1; {31911#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:07:45,711 INFO L290 TraceCheckUtils]: 48: Hoare triple {31911#(<= 1 ~pumpRunning~0)} __utac_acc__Specification2_spec__2_#t~ret11#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret11#1 && __utac_acc__Specification2_spec__2_#t~ret11#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~0#1 := __utac_acc__Specification2_spec__2_#t~ret11#1;havoc __utac_acc__Specification2_spec__2_#t~ret11#1; {31911#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:07:45,711 INFO L290 TraceCheckUtils]: 49: Hoare triple {31911#(<= 1 ~pumpRunning~0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~0#1; {31911#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:07:45,711 INFO L290 TraceCheckUtils]: 50: Hoare triple {31911#(<= 1 ~pumpRunning~0)} assume !(0 != ~methAndRunningLastTime~0);~methAndRunningLastTime~0 := 1; {31911#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:07:45,712 INFO L290 TraceCheckUtils]: 51: Hoare triple {31911#(<= 1 ~pumpRunning~0)} assume { :end_inline___utac_acc__Specification2_spec__2 } true; {31911#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:07:45,712 INFO L290 TraceCheckUtils]: 52: Hoare triple {31911#(<= 1 ~pumpRunning~0)} assume true; {31911#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:07:45,712 INFO L284 TraceCheckUtils]: 53: Hoare quadruple {31911#(<= 1 ~pumpRunning~0)} {31844#true} #258#return; {31911#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:07:45,712 INFO L290 TraceCheckUtils]: 54: Hoare triple {31911#(<= 1 ~pumpRunning~0)} assume !false; {31911#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:07:45,713 INFO L290 TraceCheckUtils]: 55: Hoare triple {31911#(<= 1 ~pumpRunning~0)} assume test_~splverifierCounter~0#1 < 4; {31911#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:07:45,713 INFO L290 TraceCheckUtils]: 56: Hoare triple {31911#(<= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet12#1 && test_#t~nondet12#1 <= 2147483647;test_~tmp~2#1 := test_#t~nondet12#1;havoc test_#t~nondet12#1; {31911#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:07:45,713 INFO L290 TraceCheckUtils]: 57: Hoare triple {31911#(<= 1 ~pumpRunning~0)} assume !(0 != test_~tmp~2#1); {31911#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:07:45,714 INFO L290 TraceCheckUtils]: 58: Hoare triple {31911#(<= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet13#1 && test_#t~nondet13#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet13#1;havoc test_#t~nondet13#1; {31911#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:07:45,714 INFO L290 TraceCheckUtils]: 59: Hoare triple {31911#(<= 1 ~pumpRunning~0)} assume !(0 != test_~tmp___0~1#1); {31911#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:07:45,714 INFO L290 TraceCheckUtils]: 60: Hoare triple {31911#(<= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet14#1 && test_#t~nondet14#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet14#1;havoc test_#t~nondet14#1; {31911#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:07:45,715 INFO L290 TraceCheckUtils]: 61: Hoare triple {31911#(<= 1 ~pumpRunning~0)} assume 0 != test_~tmp___2~0#1; {31911#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:07:45,715 INFO L272 TraceCheckUtils]: 62: Hoare triple {31911#(<= 1 ~pumpRunning~0)} call timeShift(); {31911#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:07:45,715 INFO L290 TraceCheckUtils]: 63: Hoare triple {31911#(<= 1 ~pumpRunning~0)} assume !(0 != ~pumpRunning~0); {31845#false} is VALID [2022-02-20 18:07:45,715 INFO L290 TraceCheckUtils]: 64: Hoare triple {31845#false} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret17#1, processEnvironment_~tmp~4#1;havoc processEnvironment_~tmp~4#1; {31845#false} is VALID [2022-02-20 18:07:45,716 INFO L290 TraceCheckUtils]: 65: Hoare triple {31845#false} assume !(0 != ~pumpRunning~0); {31845#false} is VALID [2022-02-20 18:07:45,716 INFO L272 TraceCheckUtils]: 66: Hoare triple {31845#false} call processEnvironment__wrappee__highWaterSensor(); {31845#false} is VALID [2022-02-20 18:07:45,716 INFO L290 TraceCheckUtils]: 67: Hoare triple {31845#false} havoc ~tmp~3#1; {31845#false} is VALID [2022-02-20 18:07:45,716 INFO L290 TraceCheckUtils]: 68: Hoare triple {31845#false} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret27#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~5#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~5#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {31845#false} is VALID [2022-02-20 18:07:45,716 INFO L290 TraceCheckUtils]: 69: Hoare triple {31845#false} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {31845#false} is VALID [2022-02-20 18:07:45,716 INFO L290 TraceCheckUtils]: 70: Hoare triple {31845#false} isHighWaterLevel_#t~ret27#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret27#1 && isHighWaterLevel_#t~ret27#1 <= 2147483647;isHighWaterLevel_~tmp~5#1 := isHighWaterLevel_#t~ret27#1;havoc isHighWaterLevel_#t~ret27#1; {31845#false} is VALID [2022-02-20 18:07:45,716 INFO L290 TraceCheckUtils]: 71: Hoare triple {31845#false} assume !(0 != isHighWaterLevel_~tmp~5#1);isHighWaterLevel_~tmp___0~2#1 := 1; {31845#false} is VALID [2022-02-20 18:07:45,716 INFO L290 TraceCheckUtils]: 72: Hoare triple {31845#false} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {31845#false} is VALID [2022-02-20 18:07:45,717 INFO L290 TraceCheckUtils]: 73: Hoare triple {31845#false} #t~ret16#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret16#1 && #t~ret16#1 <= 2147483647;~tmp~3#1 := #t~ret16#1;havoc #t~ret16#1; {31845#false} is VALID [2022-02-20 18:07:45,717 INFO L290 TraceCheckUtils]: 74: Hoare triple {31845#false} assume 0 != ~tmp~3#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {31845#false} is VALID [2022-02-20 18:07:45,717 INFO L290 TraceCheckUtils]: 75: Hoare triple {31845#false} assume { :end_inline_activatePump } true; {31845#false} is VALID [2022-02-20 18:07:45,717 INFO L290 TraceCheckUtils]: 76: Hoare triple {31845#false} assume true; {31845#false} is VALID [2022-02-20 18:07:45,717 INFO L284 TraceCheckUtils]: 77: Hoare quadruple {31845#false} {31845#false} #244#return; {31845#false} is VALID [2022-02-20 18:07:45,723 INFO L290 TraceCheckUtils]: 78: Hoare triple {31845#false} assume { :end_inline_processEnvironment } true; {31845#false} is VALID [2022-02-20 18:07:45,723 INFO L290 TraceCheckUtils]: 79: Hoare triple {31845#false} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret10#1, __utac_acc__Specification2_spec__2_#t~ret11#1, __utac_acc__Specification2_spec__2_~tmp~1#1, __utac_acc__Specification2_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__2_~tmp~1#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~0#1; {31845#false} is VALID [2022-02-20 18:07:45,723 INFO L272 TraceCheckUtils]: 80: Hoare triple {31845#false} call __utac_acc__Specification2_spec__2_#t~ret10#1 := isMethaneLevelCritical(); {31845#false} is VALID [2022-02-20 18:07:45,723 INFO L290 TraceCheckUtils]: 81: Hoare triple {31845#false} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {31845#false} is VALID [2022-02-20 18:07:45,724 INFO L290 TraceCheckUtils]: 82: Hoare triple {31845#false} assume true; {31845#false} is VALID [2022-02-20 18:07:45,724 INFO L284 TraceCheckUtils]: 83: Hoare quadruple {31845#false} {31845#false} #246#return; {31845#false} is VALID [2022-02-20 18:07:45,724 INFO L290 TraceCheckUtils]: 84: Hoare triple {31845#false} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret10#1 && __utac_acc__Specification2_spec__2_#t~ret10#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~1#1 := __utac_acc__Specification2_spec__2_#t~ret10#1;havoc __utac_acc__Specification2_spec__2_#t~ret10#1; {31845#false} is VALID [2022-02-20 18:07:45,724 INFO L290 TraceCheckUtils]: 85: Hoare triple {31845#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~1#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~5#1;havoc isPumpRunning_~retValue_acc~5#1;isPumpRunning_~retValue_acc~5#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~5#1; {31845#false} is VALID [2022-02-20 18:07:45,724 INFO L290 TraceCheckUtils]: 86: Hoare triple {31845#false} __utac_acc__Specification2_spec__2_#t~ret11#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret11#1 && __utac_acc__Specification2_spec__2_#t~ret11#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~0#1 := __utac_acc__Specification2_spec__2_#t~ret11#1;havoc __utac_acc__Specification2_spec__2_#t~ret11#1; {31845#false} is VALID [2022-02-20 18:07:45,724 INFO L290 TraceCheckUtils]: 87: Hoare triple {31845#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~0#1; {31845#false} is VALID [2022-02-20 18:07:45,724 INFO L290 TraceCheckUtils]: 88: Hoare triple {31845#false} assume 0 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {31845#false} is VALID [2022-02-20 18:07:45,725 INFO L290 TraceCheckUtils]: 89: Hoare triple {31845#false} assume !false; {31845#false} is VALID [2022-02-20 18:07:45,725 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 35 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:07:45,725 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-02-20 18:07:45,725 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleZ3 [359789552] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:07:45,725 INFO L191 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-02-20 18:07:45,726 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [9] total 9 [2022-02-20 18:07:45,726 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1482337075] [2022-02-20 18:07:45,726 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:07:45,726 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 25.0) internal successors, (75), 3 states have internal predecessors, (75), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) Word has length 90 [2022-02-20 18:07:45,727 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:07:45,727 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 3 states, 3 states have (on average 25.0) internal successors, (75), 3 states have internal predecessors, (75), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2022-02-20 18:07:45,780 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 90 edges. 90 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:45,780 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-02-20 18:07:45,780 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:07:45,781 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-02-20 18:07:45,781 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2022-02-20 18:07:45,781 INFO L87 Difference]: Start difference. First operand 740 states and 961 transitions. Second operand has 3 states, 3 states have (on average 25.0) internal successors, (75), 3 states have internal predecessors, (75), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2022-02-20 18:07:46,074 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:46,075 INFO L93 Difference]: Finished difference Result 1278 states and 1694 transitions. [2022-02-20 18:07:46,075 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-02-20 18:07:46,075 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 25.0) internal successors, (75), 3 states have internal predecessors, (75), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) Word has length 90 [2022-02-20 18:07:46,075 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:07:46,075 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 25.0) internal successors, (75), 3 states have internal predecessors, (75), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2022-02-20 18:07:46,077 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 221 transitions. [2022-02-20 18:07:46,077 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 25.0) internal successors, (75), 3 states have internal predecessors, (75), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2022-02-20 18:07:46,078 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 221 transitions. [2022-02-20 18:07:46,079 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 221 transitions. [2022-02-20 18:07:46,213 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 221 edges. 221 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:46,233 INFO L225 Difference]: With dead ends: 1278 [2022-02-20 18:07:46,233 INFO L226 Difference]: Without dead ends: 640 [2022-02-20 18:07:46,235 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 109 GetRequests, 102 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2022-02-20 18:07:46,236 INFO L933 BasicCegarLoop]: 129 mSDtfsCounter, 38 mSDsluCounter, 62 mSDsCounter, 0 mSdLazyCounter, 10 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 38 SdHoareTripleChecker+Valid, 191 SdHoareTripleChecker+Invalid, 12 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 10 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:07:46,236 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [38 Valid, 191 Invalid, 12 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 10 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:07:46,237 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 640 states. [2022-02-20 18:07:46,332 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 640 to 640. [2022-02-20 18:07:46,332 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:07:46,333 INFO L82 GeneralOperation]: Start isEquivalent. First operand 640 states. Second operand has 640 states, 476 states have (on average 1.1680672268907564) internal successors, (556), 510 states have internal predecessors, (556), 85 states have call successors, (85), 67 states have call predecessors, (85), 78 states have return successors, (129), 85 states have call predecessors, (129), 85 states have call successors, (129) [2022-02-20 18:07:46,334 INFO L74 IsIncluded]: Start isIncluded. First operand 640 states. Second operand has 640 states, 476 states have (on average 1.1680672268907564) internal successors, (556), 510 states have internal predecessors, (556), 85 states have call successors, (85), 67 states have call predecessors, (85), 78 states have return successors, (129), 85 states have call predecessors, (129), 85 states have call successors, (129) [2022-02-20 18:07:46,335 INFO L87 Difference]: Start difference. First operand 640 states. Second operand has 640 states, 476 states have (on average 1.1680672268907564) internal successors, (556), 510 states have internal predecessors, (556), 85 states have call successors, (85), 67 states have call predecessors, (85), 78 states have return successors, (129), 85 states have call predecessors, (129), 85 states have call successors, (129) [2022-02-20 18:07:46,348 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:46,348 INFO L93 Difference]: Finished difference Result 640 states and 770 transitions. [2022-02-20 18:07:46,348 INFO L276 IsEmpty]: Start isEmpty. Operand 640 states and 770 transitions. [2022-02-20 18:07:46,350 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:46,350 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:46,351 INFO L74 IsIncluded]: Start isIncluded. First operand has 640 states, 476 states have (on average 1.1680672268907564) internal successors, (556), 510 states have internal predecessors, (556), 85 states have call successors, (85), 67 states have call predecessors, (85), 78 states have return successors, (129), 85 states have call predecessors, (129), 85 states have call successors, (129) Second operand 640 states. [2022-02-20 18:07:46,351 INFO L87 Difference]: Start difference. First operand has 640 states, 476 states have (on average 1.1680672268907564) internal successors, (556), 510 states have internal predecessors, (556), 85 states have call successors, (85), 67 states have call predecessors, (85), 78 states have return successors, (129), 85 states have call predecessors, (129), 85 states have call successors, (129) Second operand 640 states. [2022-02-20 18:07:46,365 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:46,365 INFO L93 Difference]: Finished difference Result 640 states and 770 transitions. [2022-02-20 18:07:46,366 INFO L276 IsEmpty]: Start isEmpty. Operand 640 states and 770 transitions. [2022-02-20 18:07:46,367 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:46,367 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:46,367 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:07:46,367 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:07:46,368 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 640 states, 476 states have (on average 1.1680672268907564) internal successors, (556), 510 states have internal predecessors, (556), 85 states have call successors, (85), 67 states have call predecessors, (85), 78 states have return successors, (129), 85 states have call predecessors, (129), 85 states have call successors, (129) [2022-02-20 18:07:46,386 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 640 states to 640 states and 770 transitions. [2022-02-20 18:07:46,386 INFO L78 Accepts]: Start accepts. Automaton has 640 states and 770 transitions. Word has length 90 [2022-02-20 18:07:46,386 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:07:46,387 INFO L470 AbstractCegarLoop]: Abstraction has 640 states and 770 transitions. [2022-02-20 18:07:46,387 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 25.0) internal successors, (75), 3 states have internal predecessors, (75), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2022-02-20 18:07:46,387 INFO L276 IsEmpty]: Start isEmpty. Operand 640 states and 770 transitions. [2022-02-20 18:07:46,388 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 96 [2022-02-20 18:07:46,388 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:07:46,388 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:07:46,409 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-02-20 18:07:46,608 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-02-20 18:07:46,608 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:07:46,608 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:07:46,609 INFO L85 PathProgramCache]: Analyzing trace with hash -1881348981, now seen corresponding path program 1 times [2022-02-20 18:07:46,609 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:07:46,609 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [903224135] [2022-02-20 18:07:46,609 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:07:46,609 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:07:46,633 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:46,665 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-02-20 18:07:46,666 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:46,668 INFO L290 TraceCheckUtils]: 0: Hoare triple {36168#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {36114#true} is VALID [2022-02-20 18:07:46,668 INFO L290 TraceCheckUtils]: 1: Hoare triple {36114#true} assume true; {36114#true} is VALID [2022-02-20 18:07:46,668 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {36114#true} {36114#true} #252#return; {36114#true} is VALID [2022-02-20 18:07:46,672 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:07:46,673 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:46,678 INFO L290 TraceCheckUtils]: 0: Hoare triple {36169#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {36122#(= ~methaneLevelCritical~0 1)} is VALID [2022-02-20 18:07:46,679 INFO L290 TraceCheckUtils]: 1: Hoare triple {36122#(= ~methaneLevelCritical~0 1)} assume true; {36122#(= ~methaneLevelCritical~0 1)} is VALID [2022-02-20 18:07:46,679 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {36122#(= ~methaneLevelCritical~0 1)} {36114#true} #254#return; {36122#(= ~methaneLevelCritical~0 1)} is VALID [2022-02-20 18:07:46,685 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-02-20 18:07:46,690 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:46,697 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-02-20 18:07:46,699 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:46,701 INFO L290 TraceCheckUtils]: 0: Hoare triple {36185#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~3#1; {36114#true} is VALID [2022-02-20 18:07:46,701 INFO L290 TraceCheckUtils]: 1: Hoare triple {36114#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret27#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~5#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~5#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {36114#true} is VALID [2022-02-20 18:07:46,701 INFO L290 TraceCheckUtils]: 2: Hoare triple {36114#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {36114#true} is VALID [2022-02-20 18:07:46,702 INFO L290 TraceCheckUtils]: 3: Hoare triple {36114#true} isHighWaterLevel_#t~ret27#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret27#1 && isHighWaterLevel_#t~ret27#1 <= 2147483647;isHighWaterLevel_~tmp~5#1 := isHighWaterLevel_#t~ret27#1;havoc isHighWaterLevel_#t~ret27#1; {36114#true} is VALID [2022-02-20 18:07:46,702 INFO L290 TraceCheckUtils]: 4: Hoare triple {36114#true} assume !(0 != isHighWaterLevel_~tmp~5#1);isHighWaterLevel_~tmp___0~2#1 := 1; {36114#true} is VALID [2022-02-20 18:07:46,702 INFO L290 TraceCheckUtils]: 5: Hoare triple {36114#true} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {36114#true} is VALID [2022-02-20 18:07:46,702 INFO L290 TraceCheckUtils]: 6: Hoare triple {36114#true} #t~ret16#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret16#1 && #t~ret16#1 <= 2147483647;~tmp~3#1 := #t~ret16#1;havoc #t~ret16#1; {36114#true} is VALID [2022-02-20 18:07:46,702 INFO L290 TraceCheckUtils]: 7: Hoare triple {36114#true} assume 0 != ~tmp~3#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {36114#true} is VALID [2022-02-20 18:07:46,702 INFO L290 TraceCheckUtils]: 8: Hoare triple {36114#true} assume { :end_inline_activatePump } true; {36114#true} is VALID [2022-02-20 18:07:46,702 INFO L290 TraceCheckUtils]: 9: Hoare triple {36114#true} assume true; {36114#true} is VALID [2022-02-20 18:07:46,703 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {36114#true} {36114#true} #244#return; {36114#true} is VALID [2022-02-20 18:07:46,703 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-02-20 18:07:46,703 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:46,705 INFO L290 TraceCheckUtils]: 0: Hoare triple {36114#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {36114#true} is VALID [2022-02-20 18:07:46,705 INFO L290 TraceCheckUtils]: 1: Hoare triple {36114#true} assume true; {36114#true} is VALID [2022-02-20 18:07:46,705 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {36114#true} {36114#true} #246#return; {36114#true} is VALID [2022-02-20 18:07:46,705 INFO L290 TraceCheckUtils]: 0: Hoare triple {36170#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0) (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))} assume !(0 != ~pumpRunning~0); {36114#true} is VALID [2022-02-20 18:07:46,705 INFO L290 TraceCheckUtils]: 1: Hoare triple {36114#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret17#1, processEnvironment_~tmp~4#1;havoc processEnvironment_~tmp~4#1; {36114#true} is VALID [2022-02-20 18:07:46,705 INFO L290 TraceCheckUtils]: 2: Hoare triple {36114#true} assume !(0 != ~pumpRunning~0); {36114#true} is VALID [2022-02-20 18:07:46,706 INFO L272 TraceCheckUtils]: 3: Hoare triple {36114#true} call processEnvironment__wrappee__highWaterSensor(); {36185#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:07:46,706 INFO L290 TraceCheckUtils]: 4: Hoare triple {36185#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~3#1; {36114#true} is VALID [2022-02-20 18:07:46,706 INFO L290 TraceCheckUtils]: 5: Hoare triple {36114#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret27#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~5#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~5#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {36114#true} is VALID [2022-02-20 18:07:46,706 INFO L290 TraceCheckUtils]: 6: Hoare triple {36114#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {36114#true} is VALID [2022-02-20 18:07:46,706 INFO L290 TraceCheckUtils]: 7: Hoare triple {36114#true} isHighWaterLevel_#t~ret27#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret27#1 && isHighWaterLevel_#t~ret27#1 <= 2147483647;isHighWaterLevel_~tmp~5#1 := isHighWaterLevel_#t~ret27#1;havoc isHighWaterLevel_#t~ret27#1; {36114#true} is VALID [2022-02-20 18:07:46,706 INFO L290 TraceCheckUtils]: 8: Hoare triple {36114#true} assume !(0 != isHighWaterLevel_~tmp~5#1);isHighWaterLevel_~tmp___0~2#1 := 1; {36114#true} is VALID [2022-02-20 18:07:46,706 INFO L290 TraceCheckUtils]: 9: Hoare triple {36114#true} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {36114#true} is VALID [2022-02-20 18:07:46,706 INFO L290 TraceCheckUtils]: 10: Hoare triple {36114#true} #t~ret16#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret16#1 && #t~ret16#1 <= 2147483647;~tmp~3#1 := #t~ret16#1;havoc #t~ret16#1; {36114#true} is VALID [2022-02-20 18:07:46,707 INFO L290 TraceCheckUtils]: 11: Hoare triple {36114#true} assume 0 != ~tmp~3#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {36114#true} is VALID [2022-02-20 18:07:46,707 INFO L290 TraceCheckUtils]: 12: Hoare triple {36114#true} assume { :end_inline_activatePump } true; {36114#true} is VALID [2022-02-20 18:07:46,707 INFO L290 TraceCheckUtils]: 13: Hoare triple {36114#true} assume true; {36114#true} is VALID [2022-02-20 18:07:46,707 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {36114#true} {36114#true} #244#return; {36114#true} is VALID [2022-02-20 18:07:46,707 INFO L290 TraceCheckUtils]: 15: Hoare triple {36114#true} assume { :end_inline_processEnvironment } true; {36114#true} is VALID [2022-02-20 18:07:46,707 INFO L290 TraceCheckUtils]: 16: Hoare triple {36114#true} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret10#1, __utac_acc__Specification2_spec__2_#t~ret11#1, __utac_acc__Specification2_spec__2_~tmp~1#1, __utac_acc__Specification2_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__2_~tmp~1#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~0#1; {36114#true} is VALID [2022-02-20 18:07:46,707 INFO L272 TraceCheckUtils]: 17: Hoare triple {36114#true} call __utac_acc__Specification2_spec__2_#t~ret10#1 := isMethaneLevelCritical(); {36114#true} is VALID [2022-02-20 18:07:46,707 INFO L290 TraceCheckUtils]: 18: Hoare triple {36114#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {36114#true} is VALID [2022-02-20 18:07:46,708 INFO L290 TraceCheckUtils]: 19: Hoare triple {36114#true} assume true; {36114#true} is VALID [2022-02-20 18:07:46,708 INFO L284 TraceCheckUtils]: 20: Hoare quadruple {36114#true} {36114#true} #246#return; {36114#true} is VALID [2022-02-20 18:07:46,708 INFO L290 TraceCheckUtils]: 21: Hoare triple {36114#true} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret10#1 && __utac_acc__Specification2_spec__2_#t~ret10#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~1#1 := __utac_acc__Specification2_spec__2_#t~ret10#1;havoc __utac_acc__Specification2_spec__2_#t~ret10#1; {36114#true} is VALID [2022-02-20 18:07:46,708 INFO L290 TraceCheckUtils]: 22: Hoare triple {36114#true} assume 0 != __utac_acc__Specification2_spec__2_~tmp~1#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~5#1;havoc isPumpRunning_~retValue_acc~5#1;isPumpRunning_~retValue_acc~5#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~5#1; {36114#true} is VALID [2022-02-20 18:07:46,708 INFO L290 TraceCheckUtils]: 23: Hoare triple {36114#true} __utac_acc__Specification2_spec__2_#t~ret11#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret11#1 && __utac_acc__Specification2_spec__2_#t~ret11#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~0#1 := __utac_acc__Specification2_spec__2_#t~ret11#1;havoc __utac_acc__Specification2_spec__2_#t~ret11#1; {36114#true} is VALID [2022-02-20 18:07:46,708 INFO L290 TraceCheckUtils]: 24: Hoare triple {36114#true} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~0#1; {36114#true} is VALID [2022-02-20 18:07:46,708 INFO L290 TraceCheckUtils]: 25: Hoare triple {36114#true} assume !(0 != ~methAndRunningLastTime~0);~methAndRunningLastTime~0 := 1; {36114#true} is VALID [2022-02-20 18:07:46,708 INFO L290 TraceCheckUtils]: 26: Hoare triple {36114#true} assume { :end_inline___utac_acc__Specification2_spec__2 } true; {36114#true} is VALID [2022-02-20 18:07:46,709 INFO L290 TraceCheckUtils]: 27: Hoare triple {36114#true} assume true; {36114#true} is VALID [2022-02-20 18:07:46,709 INFO L284 TraceCheckUtils]: 28: Hoare quadruple {36114#true} {36122#(= ~methaneLevelCritical~0 1)} #258#return; {36122#(= ~methaneLevelCritical~0 1)} is VALID [2022-02-20 18:07:46,709 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2022-02-20 18:07:46,710 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:46,717 INFO L290 TraceCheckUtils]: 0: Hoare triple {36114#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {36186#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:46,717 INFO L290 TraceCheckUtils]: 1: Hoare triple {36186#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} assume true; {36186#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:46,718 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {36186#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} {36122#(= ~methaneLevelCritical~0 1)} #238#return; {36155#(= |timeShift_isMethaneAlarm_#t~ret18#1| 1)} is VALID [2022-02-20 18:07:46,718 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 75 [2022-02-20 18:07:46,719 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:46,721 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-02-20 18:07:46,722 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:46,723 INFO L290 TraceCheckUtils]: 0: Hoare triple {36114#true} assume true; {36114#true} is VALID [2022-02-20 18:07:46,723 INFO L284 TraceCheckUtils]: 1: Hoare quadruple {36114#true} {36114#true} #264#return; {36114#true} is VALID [2022-02-20 18:07:46,723 INFO L290 TraceCheckUtils]: 0: Hoare triple {36185#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~3#1; {36114#true} is VALID [2022-02-20 18:07:46,724 INFO L290 TraceCheckUtils]: 1: Hoare triple {36114#true} assume !(0 == ~pumpRunning~0); {36114#true} is VALID [2022-02-20 18:07:46,724 INFO L272 TraceCheckUtils]: 2: Hoare triple {36114#true} call processEnvironment__wrappee__base(); {36114#true} is VALID [2022-02-20 18:07:46,724 INFO L290 TraceCheckUtils]: 3: Hoare triple {36114#true} assume true; {36114#true} is VALID [2022-02-20 18:07:46,724 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {36114#true} {36114#true} #264#return; {36114#true} is VALID [2022-02-20 18:07:46,724 INFO L290 TraceCheckUtils]: 5: Hoare triple {36114#true} assume true; {36114#true} is VALID [2022-02-20 18:07:46,724 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {36114#true} {36115#false} #242#return; {36115#false} is VALID [2022-02-20 18:07:46,724 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 85 [2022-02-20 18:07:46,725 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:46,726 INFO L290 TraceCheckUtils]: 0: Hoare triple {36114#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {36114#true} is VALID [2022-02-20 18:07:46,726 INFO L290 TraceCheckUtils]: 1: Hoare triple {36114#true} assume true; {36114#true} is VALID [2022-02-20 18:07:46,726 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {36114#true} {36115#false} #246#return; {36115#false} is VALID [2022-02-20 18:07:46,727 INFO L290 TraceCheckUtils]: 0: Hoare triple {36114#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(13, 9);call #Ultimate.allocInit(3, 10);call write~init~int(79, 10, 0, 1);call write~init~int(110, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(4, 11);call write~init~int(79, 11, 0, 1);call write~init~int(102, 11, 1, 1);call write~init~int(102, 11, 2, 1);call write~init~int(0, 11, 3, 1);call #Ultimate.allocInit(7, 12);call write~init~int(44, 12, 0, 1);call write~init~int(80, 12, 1, 1);call write~init~int(117, 12, 2, 1);call write~init~int(109, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(3, 13);call write~init~int(79, 13, 0, 1);call write~init~int(110, 13, 1, 1);call write~init~int(0, 13, 2, 1);call #Ultimate.allocInit(4, 14);call write~init~int(79, 14, 0, 1);call write~init~int(102, 14, 1, 1);call write~init~int(102, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(3, 15);call write~init~int(41, 15, 0, 1);call write~init~int(32, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(10, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~methAndRunningLastTime~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {36114#true} is VALID [2022-02-20 18:07:46,727 INFO L290 TraceCheckUtils]: 1: Hoare triple {36114#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret9#1, main_~retValue_acc~3#1, main_~tmp~0#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true; {36114#true} is VALID [2022-02-20 18:07:46,727 INFO L290 TraceCheckUtils]: 2: Hoare triple {36114#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {36114#true} is VALID [2022-02-20 18:07:46,727 INFO L290 TraceCheckUtils]: 3: Hoare triple {36114#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~8#1;havoc valid_product_~retValue_acc~8#1;valid_product_~retValue_acc~8#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~8#1; {36114#true} is VALID [2022-02-20 18:07:46,727 INFO L290 TraceCheckUtils]: 4: Hoare triple {36114#true} main_#t~ret9#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret9#1 && main_#t~ret9#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret9#1;havoc main_#t~ret9#1; {36114#true} is VALID [2022-02-20 18:07:46,727 INFO L290 TraceCheckUtils]: 5: Hoare triple {36114#true} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {36114#true} is VALID [2022-02-20 18:07:46,727 INFO L290 TraceCheckUtils]: 6: Hoare triple {36114#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0; {36114#true} is VALID [2022-02-20 18:07:46,727 INFO L290 TraceCheckUtils]: 7: Hoare triple {36114#true} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet12#1, test_#t~nondet13#1, test_#t~nondet14#1, test_#t~nondet15#1, test_~splverifierCounter~0#1, test_~tmp~2#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~2#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {36114#true} is VALID [2022-02-20 18:07:46,728 INFO L290 TraceCheckUtils]: 8: Hoare triple {36114#true} assume !false; {36114#true} is VALID [2022-02-20 18:07:46,728 INFO L290 TraceCheckUtils]: 9: Hoare triple {36114#true} assume test_~splverifierCounter~0#1 < 4; {36114#true} is VALID [2022-02-20 18:07:46,728 INFO L290 TraceCheckUtils]: 10: Hoare triple {36114#true} assume -2147483648 <= test_#t~nondet12#1 && test_#t~nondet12#1 <= 2147483647;test_~tmp~2#1 := test_#t~nondet12#1;havoc test_#t~nondet12#1; {36114#true} is VALID [2022-02-20 18:07:46,728 INFO L290 TraceCheckUtils]: 11: Hoare triple {36114#true} assume 0 != test_~tmp~2#1; {36114#true} is VALID [2022-02-20 18:07:46,728 INFO L272 TraceCheckUtils]: 12: Hoare triple {36114#true} call waterRise(); {36168#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:07:46,728 INFO L290 TraceCheckUtils]: 13: Hoare triple {36168#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {36114#true} is VALID [2022-02-20 18:07:46,729 INFO L290 TraceCheckUtils]: 14: Hoare triple {36114#true} assume true; {36114#true} is VALID [2022-02-20 18:07:46,729 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {36114#true} {36114#true} #252#return; {36114#true} is VALID [2022-02-20 18:07:46,729 INFO L290 TraceCheckUtils]: 16: Hoare triple {36114#true} assume -2147483648 <= test_#t~nondet13#1 && test_#t~nondet13#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet13#1;havoc test_#t~nondet13#1; {36114#true} is VALID [2022-02-20 18:07:46,729 INFO L290 TraceCheckUtils]: 17: Hoare triple {36114#true} assume 0 != test_~tmp___0~1#1; {36114#true} is VALID [2022-02-20 18:07:46,729 INFO L272 TraceCheckUtils]: 18: Hoare triple {36114#true} call changeMethaneLevel(); {36169#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:46,729 INFO L290 TraceCheckUtils]: 19: Hoare triple {36169#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {36122#(= ~methaneLevelCritical~0 1)} is VALID [2022-02-20 18:07:46,730 INFO L290 TraceCheckUtils]: 20: Hoare triple {36122#(= ~methaneLevelCritical~0 1)} assume true; {36122#(= ~methaneLevelCritical~0 1)} is VALID [2022-02-20 18:07:46,730 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {36122#(= ~methaneLevelCritical~0 1)} {36114#true} #254#return; {36122#(= ~methaneLevelCritical~0 1)} is VALID [2022-02-20 18:07:46,730 INFO L290 TraceCheckUtils]: 22: Hoare triple {36122#(= ~methaneLevelCritical~0 1)} assume -2147483648 <= test_#t~nondet14#1 && test_#t~nondet14#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet14#1;havoc test_#t~nondet14#1; {36122#(= ~methaneLevelCritical~0 1)} is VALID [2022-02-20 18:07:46,731 INFO L290 TraceCheckUtils]: 23: Hoare triple {36122#(= ~methaneLevelCritical~0 1)} assume 0 != test_~tmp___2~0#1; {36122#(= ~methaneLevelCritical~0 1)} is VALID [2022-02-20 18:07:46,731 INFO L272 TraceCheckUtils]: 24: Hoare triple {36122#(= ~methaneLevelCritical~0 1)} call timeShift(); {36170#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0) (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))} is VALID [2022-02-20 18:07:46,731 INFO L290 TraceCheckUtils]: 25: Hoare triple {36170#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0) (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))} assume !(0 != ~pumpRunning~0); {36114#true} is VALID [2022-02-20 18:07:46,731 INFO L290 TraceCheckUtils]: 26: Hoare triple {36114#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret17#1, processEnvironment_~tmp~4#1;havoc processEnvironment_~tmp~4#1; {36114#true} is VALID [2022-02-20 18:07:46,731 INFO L290 TraceCheckUtils]: 27: Hoare triple {36114#true} assume !(0 != ~pumpRunning~0); {36114#true} is VALID [2022-02-20 18:07:46,732 INFO L272 TraceCheckUtils]: 28: Hoare triple {36114#true} call processEnvironment__wrappee__highWaterSensor(); {36185#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:07:46,732 INFO L290 TraceCheckUtils]: 29: Hoare triple {36185#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~3#1; {36114#true} is VALID [2022-02-20 18:07:46,732 INFO L290 TraceCheckUtils]: 30: Hoare triple {36114#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret27#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~5#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~5#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {36114#true} is VALID [2022-02-20 18:07:46,732 INFO L290 TraceCheckUtils]: 31: Hoare triple {36114#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {36114#true} is VALID [2022-02-20 18:07:46,732 INFO L290 TraceCheckUtils]: 32: Hoare triple {36114#true} isHighWaterLevel_#t~ret27#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret27#1 && isHighWaterLevel_#t~ret27#1 <= 2147483647;isHighWaterLevel_~tmp~5#1 := isHighWaterLevel_#t~ret27#1;havoc isHighWaterLevel_#t~ret27#1; {36114#true} is VALID [2022-02-20 18:07:46,732 INFO L290 TraceCheckUtils]: 33: Hoare triple {36114#true} assume !(0 != isHighWaterLevel_~tmp~5#1);isHighWaterLevel_~tmp___0~2#1 := 1; {36114#true} is VALID [2022-02-20 18:07:46,732 INFO L290 TraceCheckUtils]: 34: Hoare triple {36114#true} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {36114#true} is VALID [2022-02-20 18:07:46,733 INFO L290 TraceCheckUtils]: 35: Hoare triple {36114#true} #t~ret16#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret16#1 && #t~ret16#1 <= 2147483647;~tmp~3#1 := #t~ret16#1;havoc #t~ret16#1; {36114#true} is VALID [2022-02-20 18:07:46,733 INFO L290 TraceCheckUtils]: 36: Hoare triple {36114#true} assume 0 != ~tmp~3#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {36114#true} is VALID [2022-02-20 18:07:46,733 INFO L290 TraceCheckUtils]: 37: Hoare triple {36114#true} assume { :end_inline_activatePump } true; {36114#true} is VALID [2022-02-20 18:07:46,733 INFO L290 TraceCheckUtils]: 38: Hoare triple {36114#true} assume true; {36114#true} is VALID [2022-02-20 18:07:46,733 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {36114#true} {36114#true} #244#return; {36114#true} is VALID [2022-02-20 18:07:46,733 INFO L290 TraceCheckUtils]: 40: Hoare triple {36114#true} assume { :end_inline_processEnvironment } true; {36114#true} is VALID [2022-02-20 18:07:46,733 INFO L290 TraceCheckUtils]: 41: Hoare triple {36114#true} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret10#1, __utac_acc__Specification2_spec__2_#t~ret11#1, __utac_acc__Specification2_spec__2_~tmp~1#1, __utac_acc__Specification2_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__2_~tmp~1#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~0#1; {36114#true} is VALID [2022-02-20 18:07:46,733 INFO L272 TraceCheckUtils]: 42: Hoare triple {36114#true} call __utac_acc__Specification2_spec__2_#t~ret10#1 := isMethaneLevelCritical(); {36114#true} is VALID [2022-02-20 18:07:46,733 INFO L290 TraceCheckUtils]: 43: Hoare triple {36114#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {36114#true} is VALID [2022-02-20 18:07:46,734 INFO L290 TraceCheckUtils]: 44: Hoare triple {36114#true} assume true; {36114#true} is VALID [2022-02-20 18:07:46,734 INFO L284 TraceCheckUtils]: 45: Hoare quadruple {36114#true} {36114#true} #246#return; {36114#true} is VALID [2022-02-20 18:07:46,734 INFO L290 TraceCheckUtils]: 46: Hoare triple {36114#true} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret10#1 && __utac_acc__Specification2_spec__2_#t~ret10#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~1#1 := __utac_acc__Specification2_spec__2_#t~ret10#1;havoc __utac_acc__Specification2_spec__2_#t~ret10#1; {36114#true} is VALID [2022-02-20 18:07:46,734 INFO L290 TraceCheckUtils]: 47: Hoare triple {36114#true} assume 0 != __utac_acc__Specification2_spec__2_~tmp~1#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~5#1;havoc isPumpRunning_~retValue_acc~5#1;isPumpRunning_~retValue_acc~5#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~5#1; {36114#true} is VALID [2022-02-20 18:07:46,734 INFO L290 TraceCheckUtils]: 48: Hoare triple {36114#true} __utac_acc__Specification2_spec__2_#t~ret11#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret11#1 && __utac_acc__Specification2_spec__2_#t~ret11#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~0#1 := __utac_acc__Specification2_spec__2_#t~ret11#1;havoc __utac_acc__Specification2_spec__2_#t~ret11#1; {36114#true} is VALID [2022-02-20 18:07:46,734 INFO L290 TraceCheckUtils]: 49: Hoare triple {36114#true} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~0#1; {36114#true} is VALID [2022-02-20 18:07:46,734 INFO L290 TraceCheckUtils]: 50: Hoare triple {36114#true} assume !(0 != ~methAndRunningLastTime~0);~methAndRunningLastTime~0 := 1; {36114#true} is VALID [2022-02-20 18:07:46,734 INFO L290 TraceCheckUtils]: 51: Hoare triple {36114#true} assume { :end_inline___utac_acc__Specification2_spec__2 } true; {36114#true} is VALID [2022-02-20 18:07:46,735 INFO L290 TraceCheckUtils]: 52: Hoare triple {36114#true} assume true; {36114#true} is VALID [2022-02-20 18:07:46,735 INFO L284 TraceCheckUtils]: 53: Hoare quadruple {36114#true} {36122#(= ~methaneLevelCritical~0 1)} #258#return; {36122#(= ~methaneLevelCritical~0 1)} is VALID [2022-02-20 18:07:46,735 INFO L290 TraceCheckUtils]: 54: Hoare triple {36122#(= ~methaneLevelCritical~0 1)} assume !false; {36122#(= ~methaneLevelCritical~0 1)} is VALID [2022-02-20 18:07:46,735 INFO L290 TraceCheckUtils]: 55: Hoare triple {36122#(= ~methaneLevelCritical~0 1)} assume test_~splverifierCounter~0#1 < 4; {36122#(= ~methaneLevelCritical~0 1)} is VALID [2022-02-20 18:07:46,736 INFO L290 TraceCheckUtils]: 56: Hoare triple {36122#(= ~methaneLevelCritical~0 1)} assume -2147483648 <= test_#t~nondet12#1 && test_#t~nondet12#1 <= 2147483647;test_~tmp~2#1 := test_#t~nondet12#1;havoc test_#t~nondet12#1; {36122#(= ~methaneLevelCritical~0 1)} is VALID [2022-02-20 18:07:46,736 INFO L290 TraceCheckUtils]: 57: Hoare triple {36122#(= ~methaneLevelCritical~0 1)} assume !(0 != test_~tmp~2#1); {36122#(= ~methaneLevelCritical~0 1)} is VALID [2022-02-20 18:07:46,736 INFO L290 TraceCheckUtils]: 58: Hoare triple {36122#(= ~methaneLevelCritical~0 1)} assume -2147483648 <= test_#t~nondet13#1 && test_#t~nondet13#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet13#1;havoc test_#t~nondet13#1; {36122#(= ~methaneLevelCritical~0 1)} is VALID [2022-02-20 18:07:46,737 INFO L290 TraceCheckUtils]: 59: Hoare triple {36122#(= ~methaneLevelCritical~0 1)} assume !(0 != test_~tmp___0~1#1); {36122#(= ~methaneLevelCritical~0 1)} is VALID [2022-02-20 18:07:46,737 INFO L290 TraceCheckUtils]: 60: Hoare triple {36122#(= ~methaneLevelCritical~0 1)} assume -2147483648 <= test_#t~nondet14#1 && test_#t~nondet14#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet14#1;havoc test_#t~nondet14#1; {36122#(= ~methaneLevelCritical~0 1)} is VALID [2022-02-20 18:07:46,737 INFO L290 TraceCheckUtils]: 61: Hoare triple {36122#(= ~methaneLevelCritical~0 1)} assume 0 != test_~tmp___2~0#1; {36122#(= ~methaneLevelCritical~0 1)} is VALID [2022-02-20 18:07:46,737 INFO L272 TraceCheckUtils]: 62: Hoare triple {36122#(= ~methaneLevelCritical~0 1)} call timeShift(); {36122#(= ~methaneLevelCritical~0 1)} is VALID [2022-02-20 18:07:46,738 INFO L290 TraceCheckUtils]: 63: Hoare triple {36122#(= ~methaneLevelCritical~0 1)} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {36122#(= ~methaneLevelCritical~0 1)} is VALID [2022-02-20 18:07:46,738 INFO L290 TraceCheckUtils]: 64: Hoare triple {36122#(= ~methaneLevelCritical~0 1)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {36122#(= ~methaneLevelCritical~0 1)} is VALID [2022-02-20 18:07:46,738 INFO L290 TraceCheckUtils]: 65: Hoare triple {36122#(= ~methaneLevelCritical~0 1)} assume { :end_inline_lowerWaterLevel } true; {36122#(= ~methaneLevelCritical~0 1)} is VALID [2022-02-20 18:07:46,738 INFO L290 TraceCheckUtils]: 66: Hoare triple {36122#(= ~methaneLevelCritical~0 1)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret17#1, processEnvironment_~tmp~4#1;havoc processEnvironment_~tmp~4#1; {36122#(= ~methaneLevelCritical~0 1)} is VALID [2022-02-20 18:07:46,739 INFO L290 TraceCheckUtils]: 67: Hoare triple {36122#(= ~methaneLevelCritical~0 1)} assume 0 != ~pumpRunning~0;assume { :begin_inline_isMethaneAlarm } true;havoc isMethaneAlarm_#res#1;havoc isMethaneAlarm_#t~ret18#1, isMethaneAlarm_~retValue_acc~4#1;havoc isMethaneAlarm_~retValue_acc~4#1; {36122#(= ~methaneLevelCritical~0 1)} is VALID [2022-02-20 18:07:46,739 INFO L272 TraceCheckUtils]: 68: Hoare triple {36122#(= ~methaneLevelCritical~0 1)} call isMethaneAlarm_#t~ret18#1 := isMethaneLevelCritical(); {36114#true} is VALID [2022-02-20 18:07:46,739 INFO L290 TraceCheckUtils]: 69: Hoare triple {36114#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {36186#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:46,740 INFO L290 TraceCheckUtils]: 70: Hoare triple {36186#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} assume true; {36186#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:46,740 INFO L284 TraceCheckUtils]: 71: Hoare quadruple {36186#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} {36122#(= ~methaneLevelCritical~0 1)} #238#return; {36155#(= |timeShift_isMethaneAlarm_#t~ret18#1| 1)} is VALID [2022-02-20 18:07:46,740 INFO L290 TraceCheckUtils]: 72: Hoare triple {36155#(= |timeShift_isMethaneAlarm_#t~ret18#1| 1)} assume -2147483648 <= isMethaneAlarm_#t~ret18#1 && isMethaneAlarm_#t~ret18#1 <= 2147483647;isMethaneAlarm_~retValue_acc~4#1 := isMethaneAlarm_#t~ret18#1;havoc isMethaneAlarm_#t~ret18#1;isMethaneAlarm_#res#1 := isMethaneAlarm_~retValue_acc~4#1; {36156#(= |timeShift_isMethaneAlarm_#res#1| 1)} is VALID [2022-02-20 18:07:46,741 INFO L290 TraceCheckUtils]: 73: Hoare triple {36156#(= |timeShift_isMethaneAlarm_#res#1| 1)} processEnvironment_#t~ret17#1 := isMethaneAlarm_#res#1;assume { :end_inline_isMethaneAlarm } true;assume -2147483648 <= processEnvironment_#t~ret17#1 && processEnvironment_#t~ret17#1 <= 2147483647;processEnvironment_~tmp~4#1 := processEnvironment_#t~ret17#1;havoc processEnvironment_#t~ret17#1; {36157#(= (+ (- 1) |timeShift_processEnvironment_~tmp~4#1|) 0)} is VALID [2022-02-20 18:07:46,741 INFO L290 TraceCheckUtils]: 74: Hoare triple {36157#(= (+ (- 1) |timeShift_processEnvironment_~tmp~4#1|) 0)} assume !(0 != processEnvironment_~tmp~4#1); {36115#false} is VALID [2022-02-20 18:07:46,741 INFO L272 TraceCheckUtils]: 75: Hoare triple {36115#false} call processEnvironment__wrappee__highWaterSensor(); {36185#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:07:46,742 INFO L290 TraceCheckUtils]: 76: Hoare triple {36185#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~3#1; {36114#true} is VALID [2022-02-20 18:07:46,742 INFO L290 TraceCheckUtils]: 77: Hoare triple {36114#true} assume !(0 == ~pumpRunning~0); {36114#true} is VALID [2022-02-20 18:07:46,742 INFO L272 TraceCheckUtils]: 78: Hoare triple {36114#true} call processEnvironment__wrappee__base(); {36114#true} is VALID [2022-02-20 18:07:46,742 INFO L290 TraceCheckUtils]: 79: Hoare triple {36114#true} assume true; {36114#true} is VALID [2022-02-20 18:07:46,742 INFO L284 TraceCheckUtils]: 80: Hoare quadruple {36114#true} {36114#true} #264#return; {36114#true} is VALID [2022-02-20 18:07:46,742 INFO L290 TraceCheckUtils]: 81: Hoare triple {36114#true} assume true; {36114#true} is VALID [2022-02-20 18:07:46,742 INFO L284 TraceCheckUtils]: 82: Hoare quadruple {36114#true} {36115#false} #242#return; {36115#false} is VALID [2022-02-20 18:07:46,742 INFO L290 TraceCheckUtils]: 83: Hoare triple {36115#false} assume { :end_inline_processEnvironment } true; {36115#false} is VALID [2022-02-20 18:07:46,743 INFO L290 TraceCheckUtils]: 84: Hoare triple {36115#false} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret10#1, __utac_acc__Specification2_spec__2_#t~ret11#1, __utac_acc__Specification2_spec__2_~tmp~1#1, __utac_acc__Specification2_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__2_~tmp~1#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~0#1; {36115#false} is VALID [2022-02-20 18:07:46,743 INFO L272 TraceCheckUtils]: 85: Hoare triple {36115#false} call __utac_acc__Specification2_spec__2_#t~ret10#1 := isMethaneLevelCritical(); {36114#true} is VALID [2022-02-20 18:07:46,743 INFO L290 TraceCheckUtils]: 86: Hoare triple {36114#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {36114#true} is VALID [2022-02-20 18:07:46,743 INFO L290 TraceCheckUtils]: 87: Hoare triple {36114#true} assume true; {36114#true} is VALID [2022-02-20 18:07:46,743 INFO L284 TraceCheckUtils]: 88: Hoare quadruple {36114#true} {36115#false} #246#return; {36115#false} is VALID [2022-02-20 18:07:46,743 INFO L290 TraceCheckUtils]: 89: Hoare triple {36115#false} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret10#1 && __utac_acc__Specification2_spec__2_#t~ret10#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~1#1 := __utac_acc__Specification2_spec__2_#t~ret10#1;havoc __utac_acc__Specification2_spec__2_#t~ret10#1; {36115#false} is VALID [2022-02-20 18:07:46,743 INFO L290 TraceCheckUtils]: 90: Hoare triple {36115#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~1#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~5#1;havoc isPumpRunning_~retValue_acc~5#1;isPumpRunning_~retValue_acc~5#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~5#1; {36115#false} is VALID [2022-02-20 18:07:46,743 INFO L290 TraceCheckUtils]: 91: Hoare triple {36115#false} __utac_acc__Specification2_spec__2_#t~ret11#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret11#1 && __utac_acc__Specification2_spec__2_#t~ret11#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~0#1 := __utac_acc__Specification2_spec__2_#t~ret11#1;havoc __utac_acc__Specification2_spec__2_#t~ret11#1; {36115#false} is VALID [2022-02-20 18:07:46,744 INFO L290 TraceCheckUtils]: 92: Hoare triple {36115#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~0#1; {36115#false} is VALID [2022-02-20 18:07:46,744 INFO L290 TraceCheckUtils]: 93: Hoare triple {36115#false} assume 0 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {36115#false} is VALID [2022-02-20 18:07:46,744 INFO L290 TraceCheckUtils]: 94: Hoare triple {36115#false} assume !false; {36115#false} is VALID [2022-02-20 18:07:46,744 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 18 proven. 3 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-02-20 18:07:46,744 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:07:46,744 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [903224135] [2022-02-20 18:07:46,745 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [903224135] provided 0 perfect and 1 imperfect interpolant sequences [2022-02-20 18:07:46,745 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [836187922] [2022-02-20 18:07:46,745 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:07:46,745 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-02-20 18:07:46,745 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-20 18:07:46,746 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-02-20 18:07:46,747 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-02-20 18:07:46,828 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:46,830 INFO L263 TraceCheckSpWp]: Trace formula consists of 469 conjuncts, 8 conjunts are in the unsatisfiable core [2022-02-20 18:07:46,844 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:46,846 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 18:07:47,224 INFO L290 TraceCheckUtils]: 0: Hoare triple {36114#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(13, 9);call #Ultimate.allocInit(3, 10);call write~init~int(79, 10, 0, 1);call write~init~int(110, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(4, 11);call write~init~int(79, 11, 0, 1);call write~init~int(102, 11, 1, 1);call write~init~int(102, 11, 2, 1);call write~init~int(0, 11, 3, 1);call #Ultimate.allocInit(7, 12);call write~init~int(44, 12, 0, 1);call write~init~int(80, 12, 1, 1);call write~init~int(117, 12, 2, 1);call write~init~int(109, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(3, 13);call write~init~int(79, 13, 0, 1);call write~init~int(110, 13, 1, 1);call write~init~int(0, 13, 2, 1);call #Ultimate.allocInit(4, 14);call write~init~int(79, 14, 0, 1);call write~init~int(102, 14, 1, 1);call write~init~int(102, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(3, 15);call write~init~int(41, 15, 0, 1);call write~init~int(32, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(10, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~methAndRunningLastTime~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {36114#true} is VALID [2022-02-20 18:07:47,224 INFO L290 TraceCheckUtils]: 1: Hoare triple {36114#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret9#1, main_~retValue_acc~3#1, main_~tmp~0#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true; {36114#true} is VALID [2022-02-20 18:07:47,224 INFO L290 TraceCheckUtils]: 2: Hoare triple {36114#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {36114#true} is VALID [2022-02-20 18:07:47,224 INFO L290 TraceCheckUtils]: 3: Hoare triple {36114#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~8#1;havoc valid_product_~retValue_acc~8#1;valid_product_~retValue_acc~8#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~8#1; {36114#true} is VALID [2022-02-20 18:07:47,224 INFO L290 TraceCheckUtils]: 4: Hoare triple {36114#true} main_#t~ret9#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret9#1 && main_#t~ret9#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret9#1;havoc main_#t~ret9#1; {36114#true} is VALID [2022-02-20 18:07:47,225 INFO L290 TraceCheckUtils]: 5: Hoare triple {36114#true} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {36114#true} is VALID [2022-02-20 18:07:47,225 INFO L290 TraceCheckUtils]: 6: Hoare triple {36114#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0; {36114#true} is VALID [2022-02-20 18:07:47,225 INFO L290 TraceCheckUtils]: 7: Hoare triple {36114#true} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet12#1, test_#t~nondet13#1, test_#t~nondet14#1, test_#t~nondet15#1, test_~splverifierCounter~0#1, test_~tmp~2#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~2#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {36114#true} is VALID [2022-02-20 18:07:47,225 INFO L290 TraceCheckUtils]: 8: Hoare triple {36114#true} assume !false; {36114#true} is VALID [2022-02-20 18:07:47,225 INFO L290 TraceCheckUtils]: 9: Hoare triple {36114#true} assume test_~splverifierCounter~0#1 < 4; {36114#true} is VALID [2022-02-20 18:07:47,225 INFO L290 TraceCheckUtils]: 10: Hoare triple {36114#true} assume -2147483648 <= test_#t~nondet12#1 && test_#t~nondet12#1 <= 2147483647;test_~tmp~2#1 := test_#t~nondet12#1;havoc test_#t~nondet12#1; {36114#true} is VALID [2022-02-20 18:07:47,225 INFO L290 TraceCheckUtils]: 11: Hoare triple {36114#true} assume 0 != test_~tmp~2#1; {36114#true} is VALID [2022-02-20 18:07:47,225 INFO L272 TraceCheckUtils]: 12: Hoare triple {36114#true} call waterRise(); {36114#true} is VALID [2022-02-20 18:07:47,225 INFO L290 TraceCheckUtils]: 13: Hoare triple {36114#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {36114#true} is VALID [2022-02-20 18:07:47,226 INFO L290 TraceCheckUtils]: 14: Hoare triple {36114#true} assume true; {36114#true} is VALID [2022-02-20 18:07:47,226 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {36114#true} {36114#true} #252#return; {36114#true} is VALID [2022-02-20 18:07:47,226 INFO L290 TraceCheckUtils]: 16: Hoare triple {36114#true} assume -2147483648 <= test_#t~nondet13#1 && test_#t~nondet13#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet13#1;havoc test_#t~nondet13#1; {36114#true} is VALID [2022-02-20 18:07:47,226 INFO L290 TraceCheckUtils]: 17: Hoare triple {36114#true} assume 0 != test_~tmp___0~1#1; {36114#true} is VALID [2022-02-20 18:07:47,226 INFO L272 TraceCheckUtils]: 18: Hoare triple {36114#true} call changeMethaneLevel(); {36114#true} is VALID [2022-02-20 18:07:47,227 INFO L290 TraceCheckUtils]: 19: Hoare triple {36114#true} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {36249#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:47,227 INFO L290 TraceCheckUtils]: 20: Hoare triple {36249#(<= 1 ~methaneLevelCritical~0)} assume true; {36249#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:47,227 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {36249#(<= 1 ~methaneLevelCritical~0)} {36114#true} #254#return; {36249#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:47,227 INFO L290 TraceCheckUtils]: 22: Hoare triple {36249#(<= 1 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet14#1 && test_#t~nondet14#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet14#1;havoc test_#t~nondet14#1; {36249#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:47,228 INFO L290 TraceCheckUtils]: 23: Hoare triple {36249#(<= 1 ~methaneLevelCritical~0)} assume 0 != test_~tmp___2~0#1; {36249#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:47,228 INFO L272 TraceCheckUtils]: 24: Hoare triple {36249#(<= 1 ~methaneLevelCritical~0)} call timeShift(); {36249#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:47,228 INFO L290 TraceCheckUtils]: 25: Hoare triple {36249#(<= 1 ~methaneLevelCritical~0)} assume !(0 != ~pumpRunning~0); {36249#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:47,229 INFO L290 TraceCheckUtils]: 26: Hoare triple {36249#(<= 1 ~methaneLevelCritical~0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret17#1, processEnvironment_~tmp~4#1;havoc processEnvironment_~tmp~4#1; {36249#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:47,229 INFO L290 TraceCheckUtils]: 27: Hoare triple {36249#(<= 1 ~methaneLevelCritical~0)} assume !(0 != ~pumpRunning~0); {36249#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:47,229 INFO L272 TraceCheckUtils]: 28: Hoare triple {36249#(<= 1 ~methaneLevelCritical~0)} call processEnvironment__wrappee__highWaterSensor(); {36249#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:47,229 INFO L290 TraceCheckUtils]: 29: Hoare triple {36249#(<= 1 ~methaneLevelCritical~0)} havoc ~tmp~3#1; {36249#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:47,230 INFO L290 TraceCheckUtils]: 30: Hoare triple {36249#(<= 1 ~methaneLevelCritical~0)} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret27#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~5#1, isHighWaterLevel_~tmp___0~2#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~5#1;havoc isHighWaterLevel_~tmp___0~2#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {36249#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:47,230 INFO L290 TraceCheckUtils]: 31: Hoare triple {36249#(<= 1 ~methaneLevelCritical~0)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {36249#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:47,230 INFO L290 TraceCheckUtils]: 32: Hoare triple {36249#(<= 1 ~methaneLevelCritical~0)} isHighWaterLevel_#t~ret27#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret27#1 && isHighWaterLevel_#t~ret27#1 <= 2147483647;isHighWaterLevel_~tmp~5#1 := isHighWaterLevel_#t~ret27#1;havoc isHighWaterLevel_#t~ret27#1; {36249#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:47,231 INFO L290 TraceCheckUtils]: 33: Hoare triple {36249#(<= 1 ~methaneLevelCritical~0)} assume !(0 != isHighWaterLevel_~tmp~5#1);isHighWaterLevel_~tmp___0~2#1 := 1; {36249#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:47,231 INFO L290 TraceCheckUtils]: 34: Hoare triple {36249#(<= 1 ~methaneLevelCritical~0)} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~2#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {36249#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:47,231 INFO L290 TraceCheckUtils]: 35: Hoare triple {36249#(<= 1 ~methaneLevelCritical~0)} #t~ret16#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret16#1 && #t~ret16#1 <= 2147483647;~tmp~3#1 := #t~ret16#1;havoc #t~ret16#1; {36249#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:47,232 INFO L290 TraceCheckUtils]: 36: Hoare triple {36249#(<= 1 ~methaneLevelCritical~0)} assume 0 != ~tmp~3#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {36249#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:47,232 INFO L290 TraceCheckUtils]: 37: Hoare triple {36249#(<= 1 ~methaneLevelCritical~0)} assume { :end_inline_activatePump } true; {36249#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:47,232 INFO L290 TraceCheckUtils]: 38: Hoare triple {36249#(<= 1 ~methaneLevelCritical~0)} assume true; {36249#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:47,232 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {36249#(<= 1 ~methaneLevelCritical~0)} {36249#(<= 1 ~methaneLevelCritical~0)} #244#return; {36249#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:47,233 INFO L290 TraceCheckUtils]: 40: Hoare triple {36249#(<= 1 ~methaneLevelCritical~0)} assume { :end_inline_processEnvironment } true; {36249#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:47,233 INFO L290 TraceCheckUtils]: 41: Hoare triple {36249#(<= 1 ~methaneLevelCritical~0)} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret10#1, __utac_acc__Specification2_spec__2_#t~ret11#1, __utac_acc__Specification2_spec__2_~tmp~1#1, __utac_acc__Specification2_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__2_~tmp~1#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~0#1; {36249#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:47,233 INFO L272 TraceCheckUtils]: 42: Hoare triple {36249#(<= 1 ~methaneLevelCritical~0)} call __utac_acc__Specification2_spec__2_#t~ret10#1 := isMethaneLevelCritical(); {36249#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:47,234 INFO L290 TraceCheckUtils]: 43: Hoare triple {36249#(<= 1 ~methaneLevelCritical~0)} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {36249#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:47,234 INFO L290 TraceCheckUtils]: 44: Hoare triple {36249#(<= 1 ~methaneLevelCritical~0)} assume true; {36249#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:47,234 INFO L284 TraceCheckUtils]: 45: Hoare quadruple {36249#(<= 1 ~methaneLevelCritical~0)} {36249#(<= 1 ~methaneLevelCritical~0)} #246#return; {36249#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:47,235 INFO L290 TraceCheckUtils]: 46: Hoare triple {36249#(<= 1 ~methaneLevelCritical~0)} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret10#1 && __utac_acc__Specification2_spec__2_#t~ret10#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~1#1 := __utac_acc__Specification2_spec__2_#t~ret10#1;havoc __utac_acc__Specification2_spec__2_#t~ret10#1; {36249#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:47,235 INFO L290 TraceCheckUtils]: 47: Hoare triple {36249#(<= 1 ~methaneLevelCritical~0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp~1#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~5#1;havoc isPumpRunning_~retValue_acc~5#1;isPumpRunning_~retValue_acc~5#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~5#1; {36249#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:47,235 INFO L290 TraceCheckUtils]: 48: Hoare triple {36249#(<= 1 ~methaneLevelCritical~0)} __utac_acc__Specification2_spec__2_#t~ret11#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret11#1 && __utac_acc__Specification2_spec__2_#t~ret11#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~0#1 := __utac_acc__Specification2_spec__2_#t~ret11#1;havoc __utac_acc__Specification2_spec__2_#t~ret11#1; {36249#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:47,235 INFO L290 TraceCheckUtils]: 49: Hoare triple {36249#(<= 1 ~methaneLevelCritical~0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~0#1; {36249#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:47,236 INFO L290 TraceCheckUtils]: 50: Hoare triple {36249#(<= 1 ~methaneLevelCritical~0)} assume !(0 != ~methAndRunningLastTime~0);~methAndRunningLastTime~0 := 1; {36249#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:47,236 INFO L290 TraceCheckUtils]: 51: Hoare triple {36249#(<= 1 ~methaneLevelCritical~0)} assume { :end_inline___utac_acc__Specification2_spec__2 } true; {36249#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:47,236 INFO L290 TraceCheckUtils]: 52: Hoare triple {36249#(<= 1 ~methaneLevelCritical~0)} assume true; {36249#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:47,237 INFO L284 TraceCheckUtils]: 53: Hoare quadruple {36249#(<= 1 ~methaneLevelCritical~0)} {36249#(<= 1 ~methaneLevelCritical~0)} #258#return; {36249#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:47,238 INFO L290 TraceCheckUtils]: 54: Hoare triple {36249#(<= 1 ~methaneLevelCritical~0)} assume !false; {36249#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:47,238 INFO L290 TraceCheckUtils]: 55: Hoare triple {36249#(<= 1 ~methaneLevelCritical~0)} assume test_~splverifierCounter~0#1 < 4; {36249#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:47,238 INFO L290 TraceCheckUtils]: 56: Hoare triple {36249#(<= 1 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet12#1 && test_#t~nondet12#1 <= 2147483647;test_~tmp~2#1 := test_#t~nondet12#1;havoc test_#t~nondet12#1; {36249#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:47,239 INFO L290 TraceCheckUtils]: 57: Hoare triple {36249#(<= 1 ~methaneLevelCritical~0)} assume !(0 != test_~tmp~2#1); {36249#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:47,239 INFO L290 TraceCheckUtils]: 58: Hoare triple {36249#(<= 1 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet13#1 && test_#t~nondet13#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet13#1;havoc test_#t~nondet13#1; {36249#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:47,239 INFO L290 TraceCheckUtils]: 59: Hoare triple {36249#(<= 1 ~methaneLevelCritical~0)} assume !(0 != test_~tmp___0~1#1); {36249#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:47,239 INFO L290 TraceCheckUtils]: 60: Hoare triple {36249#(<= 1 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet14#1 && test_#t~nondet14#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet14#1;havoc test_#t~nondet14#1; {36249#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:47,240 INFO L290 TraceCheckUtils]: 61: Hoare triple {36249#(<= 1 ~methaneLevelCritical~0)} assume 0 != test_~tmp___2~0#1; {36249#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:47,240 INFO L272 TraceCheckUtils]: 62: Hoare triple {36249#(<= 1 ~methaneLevelCritical~0)} call timeShift(); {36249#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:47,240 INFO L290 TraceCheckUtils]: 63: Hoare triple {36249#(<= 1 ~methaneLevelCritical~0)} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {36249#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:47,241 INFO L290 TraceCheckUtils]: 64: Hoare triple {36249#(<= 1 ~methaneLevelCritical~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {36249#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:47,241 INFO L290 TraceCheckUtils]: 65: Hoare triple {36249#(<= 1 ~methaneLevelCritical~0)} assume { :end_inline_lowerWaterLevel } true; {36249#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:47,241 INFO L290 TraceCheckUtils]: 66: Hoare triple {36249#(<= 1 ~methaneLevelCritical~0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret17#1, processEnvironment_~tmp~4#1;havoc processEnvironment_~tmp~4#1; {36249#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:47,241 INFO L290 TraceCheckUtils]: 67: Hoare triple {36249#(<= 1 ~methaneLevelCritical~0)} assume 0 != ~pumpRunning~0;assume { :begin_inline_isMethaneAlarm } true;havoc isMethaneAlarm_#res#1;havoc isMethaneAlarm_#t~ret18#1, isMethaneAlarm_~retValue_acc~4#1;havoc isMethaneAlarm_~retValue_acc~4#1; {36249#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:47,242 INFO L272 TraceCheckUtils]: 68: Hoare triple {36249#(<= 1 ~methaneLevelCritical~0)} call isMethaneAlarm_#t~ret18#1 := isMethaneLevelCritical(); {36249#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:47,242 INFO L290 TraceCheckUtils]: 69: Hoare triple {36249#(<= 1 ~methaneLevelCritical~0)} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {36400#(and (<= ~methaneLevelCritical~0 |isMethaneLevelCritical_#res|) (<= 1 ~methaneLevelCritical~0))} is VALID [2022-02-20 18:07:47,242 INFO L290 TraceCheckUtils]: 70: Hoare triple {36400#(and (<= ~methaneLevelCritical~0 |isMethaneLevelCritical_#res|) (<= 1 ~methaneLevelCritical~0))} assume true; {36400#(and (<= ~methaneLevelCritical~0 |isMethaneLevelCritical_#res|) (<= 1 ~methaneLevelCritical~0))} is VALID [2022-02-20 18:07:47,243 INFO L284 TraceCheckUtils]: 71: Hoare quadruple {36400#(and (<= ~methaneLevelCritical~0 |isMethaneLevelCritical_#res|) (<= 1 ~methaneLevelCritical~0))} {36249#(<= 1 ~methaneLevelCritical~0)} #238#return; {36407#(<= 1 |timeShift_isMethaneAlarm_#t~ret18#1|)} is VALID [2022-02-20 18:07:47,243 INFO L290 TraceCheckUtils]: 72: Hoare triple {36407#(<= 1 |timeShift_isMethaneAlarm_#t~ret18#1|)} assume -2147483648 <= isMethaneAlarm_#t~ret18#1 && isMethaneAlarm_#t~ret18#1 <= 2147483647;isMethaneAlarm_~retValue_acc~4#1 := isMethaneAlarm_#t~ret18#1;havoc isMethaneAlarm_#t~ret18#1;isMethaneAlarm_#res#1 := isMethaneAlarm_~retValue_acc~4#1; {36411#(<= 1 |timeShift_isMethaneAlarm_#res#1|)} is VALID [2022-02-20 18:07:47,244 INFO L290 TraceCheckUtils]: 73: Hoare triple {36411#(<= 1 |timeShift_isMethaneAlarm_#res#1|)} processEnvironment_#t~ret17#1 := isMethaneAlarm_#res#1;assume { :end_inline_isMethaneAlarm } true;assume -2147483648 <= processEnvironment_#t~ret17#1 && processEnvironment_#t~ret17#1 <= 2147483647;processEnvironment_~tmp~4#1 := processEnvironment_#t~ret17#1;havoc processEnvironment_#t~ret17#1; {36415#(<= 1 |timeShift_processEnvironment_~tmp~4#1|)} is VALID [2022-02-20 18:07:47,244 INFO L290 TraceCheckUtils]: 74: Hoare triple {36415#(<= 1 |timeShift_processEnvironment_~tmp~4#1|)} assume !(0 != processEnvironment_~tmp~4#1); {36115#false} is VALID [2022-02-20 18:07:47,244 INFO L272 TraceCheckUtils]: 75: Hoare triple {36115#false} call processEnvironment__wrappee__highWaterSensor(); {36115#false} is VALID [2022-02-20 18:07:47,244 INFO L290 TraceCheckUtils]: 76: Hoare triple {36115#false} havoc ~tmp~3#1; {36115#false} is VALID [2022-02-20 18:07:47,244 INFO L290 TraceCheckUtils]: 77: Hoare triple {36115#false} assume !(0 == ~pumpRunning~0); {36115#false} is VALID [2022-02-20 18:07:47,244 INFO L272 TraceCheckUtils]: 78: Hoare triple {36115#false} call processEnvironment__wrappee__base(); {36115#false} is VALID [2022-02-20 18:07:47,244 INFO L290 TraceCheckUtils]: 79: Hoare triple {36115#false} assume true; {36115#false} is VALID [2022-02-20 18:07:47,244 INFO L284 TraceCheckUtils]: 80: Hoare quadruple {36115#false} {36115#false} #264#return; {36115#false} is VALID [2022-02-20 18:07:47,244 INFO L290 TraceCheckUtils]: 81: Hoare triple {36115#false} assume true; {36115#false} is VALID [2022-02-20 18:07:47,244 INFO L284 TraceCheckUtils]: 82: Hoare quadruple {36115#false} {36115#false} #242#return; {36115#false} is VALID [2022-02-20 18:07:47,244 INFO L290 TraceCheckUtils]: 83: Hoare triple {36115#false} assume { :end_inline_processEnvironment } true; {36115#false} is VALID [2022-02-20 18:07:47,245 INFO L290 TraceCheckUtils]: 84: Hoare triple {36115#false} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret10#1, __utac_acc__Specification2_spec__2_#t~ret11#1, __utac_acc__Specification2_spec__2_~tmp~1#1, __utac_acc__Specification2_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__2_~tmp~1#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~0#1; {36115#false} is VALID [2022-02-20 18:07:47,245 INFO L272 TraceCheckUtils]: 85: Hoare triple {36115#false} call __utac_acc__Specification2_spec__2_#t~ret10#1 := isMethaneLevelCritical(); {36115#false} is VALID [2022-02-20 18:07:47,245 INFO L290 TraceCheckUtils]: 86: Hoare triple {36115#false} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {36115#false} is VALID [2022-02-20 18:07:47,245 INFO L290 TraceCheckUtils]: 87: Hoare triple {36115#false} assume true; {36115#false} is VALID [2022-02-20 18:07:47,245 INFO L284 TraceCheckUtils]: 88: Hoare quadruple {36115#false} {36115#false} #246#return; {36115#false} is VALID [2022-02-20 18:07:47,245 INFO L290 TraceCheckUtils]: 89: Hoare triple {36115#false} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret10#1 && __utac_acc__Specification2_spec__2_#t~ret10#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~1#1 := __utac_acc__Specification2_spec__2_#t~ret10#1;havoc __utac_acc__Specification2_spec__2_#t~ret10#1; {36115#false} is VALID [2022-02-20 18:07:47,245 INFO L290 TraceCheckUtils]: 90: Hoare triple {36115#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~1#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~5#1;havoc isPumpRunning_~retValue_acc~5#1;isPumpRunning_~retValue_acc~5#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~5#1; {36115#false} is VALID [2022-02-20 18:07:47,245 INFO L290 TraceCheckUtils]: 91: Hoare triple {36115#false} __utac_acc__Specification2_spec__2_#t~ret11#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret11#1 && __utac_acc__Specification2_spec__2_#t~ret11#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~0#1 := __utac_acc__Specification2_spec__2_#t~ret11#1;havoc __utac_acc__Specification2_spec__2_#t~ret11#1; {36115#false} is VALID [2022-02-20 18:07:47,245 INFO L290 TraceCheckUtils]: 92: Hoare triple {36115#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~0#1; {36115#false} is VALID [2022-02-20 18:07:47,245 INFO L290 TraceCheckUtils]: 93: Hoare triple {36115#false} assume 0 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {36115#false} is VALID [2022-02-20 18:07:47,245 INFO L290 TraceCheckUtils]: 94: Hoare triple {36115#false} assume !false; {36115#false} is VALID [2022-02-20 18:07:47,245 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 26 proven. 0 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-02-20 18:07:47,245 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-02-20 18:07:47,246 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleZ3 [836187922] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:07:47,246 INFO L191 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-02-20 18:07:47,246 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [11] total 16 [2022-02-20 18:07:47,246 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1630774023] [2022-02-20 18:07:47,246 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:07:47,246 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 10.428571428571429) internal successors, (73), 6 states have internal predecessors, (73), 3 states have call successors, (9), 3 states have call predecessors, (9), 4 states have return successors, (9), 4 states have call predecessors, (9), 3 states have call successors, (9) Word has length 95 [2022-02-20 18:07:47,246 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:07:47,247 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 7 states, 7 states have (on average 10.428571428571429) internal successors, (73), 6 states have internal predecessors, (73), 3 states have call successors, (9), 3 states have call predecessors, (9), 4 states have return successors, (9), 4 states have call predecessors, (9), 3 states have call successors, (9) [2022-02-20 18:07:47,313 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 91 edges. 91 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:47,313 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-02-20 18:07:47,313 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:07:47,313 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-02-20 18:07:47,313 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=204, Unknown=0, NotChecked=0, Total=240 [2022-02-20 18:07:47,314 INFO L87 Difference]: Start difference. First operand 640 states and 770 transitions. Second operand has 7 states, 7 states have (on average 10.428571428571429) internal successors, (73), 6 states have internal predecessors, (73), 3 states have call successors, (9), 3 states have call predecessors, (9), 4 states have return successors, (9), 4 states have call predecessors, (9), 3 states have call successors, (9) [2022-02-20 18:07:47,830 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:47,831 INFO L93 Difference]: Finished difference Result 1163 states and 1392 transitions. [2022-02-20 18:07:47,831 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-02-20 18:07:47,831 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 10.428571428571429) internal successors, (73), 6 states have internal predecessors, (73), 3 states have call successors, (9), 3 states have call predecessors, (9), 4 states have return successors, (9), 4 states have call predecessors, (9), 3 states have call successors, (9) Word has length 95 [2022-02-20 18:07:47,831 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:07:47,831 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 10.428571428571429) internal successors, (73), 6 states have internal predecessors, (73), 3 states have call successors, (9), 3 states have call predecessors, (9), 4 states have return successors, (9), 4 states have call predecessors, (9), 3 states have call successors, (9) [2022-02-20 18:07:47,833 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 253 transitions. [2022-02-20 18:07:47,833 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 10.428571428571429) internal successors, (73), 6 states have internal predecessors, (73), 3 states have call successors, (9), 3 states have call predecessors, (9), 4 states have return successors, (9), 4 states have call predecessors, (9), 3 states have call successors, (9) [2022-02-20 18:07:47,835 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 253 transitions. [2022-02-20 18:07:47,835 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 253 transitions. [2022-02-20 18:07:47,970 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 253 edges. 253 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:47,970 INFO L225 Difference]: With dead ends: 1163 [2022-02-20 18:07:47,970 INFO L226 Difference]: Without dead ends: 0 [2022-02-20 18:07:47,972 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 121 GetRequests, 103 SyntacticMatches, 1 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 28 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=50, Invalid=292, Unknown=0, NotChecked=0, Total=342 [2022-02-20 18:07:47,973 INFO L933 BasicCegarLoop]: 159 mSDtfsCounter, 45 mSDsluCounter, 585 mSDsCounter, 0 mSdLazyCounter, 57 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 46 SdHoareTripleChecker+Valid, 744 SdHoareTripleChecker+Invalid, 64 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 57 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:07:47,973 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [46 Valid, 744 Invalid, 64 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 57 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:07:47,973 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-02-20 18:07:47,974 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-02-20 18:07:47,974 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:07:47,974 INFO L82 GeneralOperation]: Start isEquivalent. First operand 0 states. Second operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:07:47,974 INFO L74 IsIncluded]: Start isIncluded. First operand 0 states. Second operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:07:47,974 INFO L87 Difference]: Start difference. First operand 0 states. Second operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:07:47,974 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:47,974 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2022-02-20 18:07:47,974 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-02-20 18:07:47,975 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:47,975 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:47,975 INFO L74 IsIncluded]: Start isIncluded. First operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand 0 states. [2022-02-20 18:07:47,975 INFO L87 Difference]: Start difference. First operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand 0 states. [2022-02-20 18:07:47,975 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:47,975 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2022-02-20 18:07:47,975 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-02-20 18:07:47,975 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:47,975 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:47,976 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:07:47,976 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:07:47,976 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:07:47,976 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-02-20 18:07:47,976 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 95 [2022-02-20 18:07:47,976 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:07:47,976 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-02-20 18:07:47,976 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 10.428571428571429) internal successors, (73), 6 states have internal predecessors, (73), 3 states have call successors, (9), 3 states have call predecessors, (9), 4 states have return successors, (9), 4 states have call predecessors, (9), 3 states have call successors, (9) [2022-02-20 18:07:47,977 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-02-20 18:07:47,977 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:47,978 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-02-20 18:07:48,004 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-02-20 18:07:48,202 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-02-20 18:07:48,203 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-02-20 18:07:52,867 INFO L854 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 469 476) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (and (or .cse0 (not (= 1 ~systemActive~0))) (or .cse0 (not (<= 2 ~waterLevel~0)) (= 0 ~systemActive~0)))) [2022-02-20 18:07:52,867 INFO L858 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 469 476) no Hoare annotation was computed. [2022-02-20 18:07:52,868 INFO L858 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 469 476) no Hoare annotation was computed. [2022-02-20 18:07:52,868 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 402 408) no Hoare annotation was computed. [2022-02-20 18:07:52,868 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 402 408) the Hoare annotation is: true [2022-02-20 18:07:52,868 INFO L854 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 83 94) the Hoare annotation is: (let ((.cse0 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 ~pumpRunning~0))) (.cse6 (not (<= 1 |old(~methaneLevelCritical~0)|))) (.cse5 (not (= ~pumpRunning~0 0))) (.cse2 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse4 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse1 .cse2 .cse6 .cse4) (or .cse0 .cse5 .cse1 .cse2 .cse4) (or .cse1 .cse2 (not (<= 2 ~waterLevel~0)) .cse3 .cse6) (or .cse5 .cse2 .cse4 (not (= 0 ~systemActive~0))))) [2022-02-20 18:07:52,868 INFO L858 garLoopResultBuilder]: For program point L87-1(lines 83 94) no Hoare annotation was computed. [2022-02-20 18:07:52,868 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 83 94) no Hoare annotation was computed. [2022-02-20 18:07:52,868 INFO L858 garLoopResultBuilder]: For program point L382-1(lines 381 400) no Hoare annotation was computed. [2022-02-20 18:07:52,868 INFO L858 garLoopResultBuilder]: For program point L444(lines 444 452) no Hoare annotation was computed. [2022-02-20 18:07:52,869 INFO L858 garLoopResultBuilder]: For program point L440(lines 440 457) no Hoare annotation was computed. [2022-02-20 18:07:52,869 INFO L858 garLoopResultBuilder]: For program point L279(lines 279 285) no Hoare annotation was computed. [2022-02-20 18:07:52,869 INFO L858 garLoopResultBuilder]: For program point L300(line 300) no Hoare annotation was computed. [2022-02-20 18:07:52,869 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 378 401) no Hoare annotation was computed. [2022-02-20 18:07:52,869 INFO L854 garLoopResultBuilder]: At program point L482(line 482) the Hoare annotation is: (let ((.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse2 .cse5 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse4 .cse2 .cse5 .cse6) (or .cse0 .cse1 .cse2 .cse6) (or .cse1 .cse2 .cse5 (and .cse4 (= ~methAndRunningLastTime~0 0)) .cse3) (or .cse0 (not (= 0 ~systemActive~0))))) [2022-02-20 18:07:52,869 INFO L858 garLoopResultBuilder]: For program point L482-1(line 482) no Hoare annotation was computed. [2022-02-20 18:07:52,869 INFO L854 garLoopResultBuilder]: At program point L272(line 272) the Hoare annotation is: (let ((.cse11 (= ~pumpRunning~0 0)) (.cse5 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse3 (<= 1 ~pumpRunning~0)) (.cse4 (<= 2 ~waterLevel~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (and .cse11 .cse5 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse9 (not (<= 1 |old(~pumpRunning~0)|))) (.cse8 (not (<= 1 ~methaneLevelCritical~0))) (.cse10 (and (<= 1 |timeShift_processEnvironment_~tmp~4#1|) .cse11 (<= 1 |timeShift_isMethaneAlarm_#res#1|)))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4 .cse5) .cse6 .cse7) (or .cse0 .cse1 .cse2 (and .cse3 (= ~methAndRunningLastTime~0 0) .cse4 .cse5) .cse8 .cse7) (or .cse0 .cse7 (not (= 0 ~systemActive~0))) (or .cse2 .cse9 .cse8 .cse10 (not (<= 2 |old(~waterLevel~0)|))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse11 .cse2 .cse9 .cse6) (or .cse1 .cse2 .cse9 .cse8 .cse10)))) [2022-02-20 18:07:52,870 INFO L858 garLoopResultBuilder]: For program point L272-1(line 272) no Hoare annotation was computed. [2022-02-20 18:07:52,870 INFO L854 garLoopResultBuilder]: At program point L301(lines 296 303) the Hoare annotation is: (let ((.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse2 .cse4 .cse3) (or .cse2 .cse4 .cse5) (or .cse2 .cse4 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse1 .cse2 .cse5) (or .cse0 (not (= 0 ~systemActive~0))))) [2022-02-20 18:07:52,870 INFO L854 garLoopResultBuilder]: At program point L450(line 450) the Hoare annotation is: (let ((.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse2 .cse4 .cse3) (or .cse2 .cse4 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2 .cse4 .cse5) (or .cse0 .cse1 .cse2 .cse5) (or .cse0 (not (= 0 ~systemActive~0))))) [2022-02-20 18:07:52,870 INFO L854 garLoopResultBuilder]: At program point L446(line 446) the Hoare annotation is: (let ((.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse8 (<= 1 ~methaneLevelCritical~0)) (.cse9 (= 1 ~systemActive~0))) (let ((.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse4 (and (<= 1 ~pumpRunning~0) .cse6 (<= 1 |timeShift_processEnvironment_~tmp~4#1|) .cse8 (<= 1 |timeShift_isMethaneAlarm_#res#1|) .cse9)) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not .cse9)) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not .cse8)) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse2 .cse5 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse6 .cse2 .cse5 .cse7) (or .cse0 .cse1 .cse2 .cse7) (or .cse4 .cse1 .cse2 .cse5 .cse3) (or .cse0 (not (= 0 ~systemActive~0)))))) [2022-02-20 18:07:52,870 INFO L854 garLoopResultBuilder]: At program point L455(line 455) the Hoare annotation is: (let ((.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse6 (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0) (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (.cse5 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse2 .cse4) (or .cse1 .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse5 .cse0 .cse1 .cse3 .cse6) (or .cse5 .cse0 .cse1 .cse4 .cse6) (or .cse5 (not (= 0 ~systemActive~0))))) [2022-02-20 18:07:52,871 INFO L854 garLoopResultBuilder]: At program point L455-1(lines 436 460) the Hoare annotation is: (let ((.cse11 (= ~pumpRunning~0 0)) (.cse5 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse3 (<= 1 ~pumpRunning~0)) (.cse4 (<= 2 ~waterLevel~0)) (.cse7 (and .cse11 .cse5 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse9 (not (<= 1 |old(~pumpRunning~0)|))) (.cse8 (not (<= 1 ~methaneLevelCritical~0))) (.cse10 (and (<= 1 |timeShift_processEnvironment_~tmp~4#1|) .cse11 (<= 1 |timeShift_isMethaneAlarm_#res#1|))) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4 .cse5) .cse6 .cse7) (or .cse0 .cse1 .cse2 (and .cse3 (= ~methAndRunningLastTime~0 0) .cse4 .cse5) .cse8 .cse7) (or .cse2 .cse9 .cse8 .cse10 (not (<= 2 |old(~waterLevel~0)|))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse11 .cse2 .cse9 .cse6) (or .cse1 .cse2 .cse9 .cse8 .cse10) (or .cse0 (not (= 0 ~systemActive~0)))))) [2022-02-20 18:07:52,871 INFO L854 garLoopResultBuilder]: At program point L484(lines 477 487) the Hoare annotation is: (let ((.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (<= 1 |timeShift_isMethaneAlarm_#res#1|)) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse2 .cse5 .cse6) (or .cse0 .cse1 .cse2 .cse6) (or .cse1 .cse2 .cse5 .cse3 (and .cse4 (= ~methAndRunningLastTime~0 0) .cse7)) (or .cse2 .cse5 .cse3 (and .cse4 .cse7) (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 (not (= 0 ~systemActive~0))))) [2022-02-20 18:07:52,871 INFO L858 garLoopResultBuilder]: For program point L389-1(lines 389 395) no Hoare annotation was computed. [2022-02-20 18:07:52,871 INFO L858 garLoopResultBuilder]: For program point L63(lines 63 67) no Hoare annotation was computed. [2022-02-20 18:07:52,871 INFO L854 garLoopResultBuilder]: At program point L63-2(lines 59 70) the Hoare annotation is: (let ((.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse2 .cse5 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse4 .cse2 .cse5 .cse6) (or .cse0 .cse1 .cse2 .cse6) (or .cse1 .cse2 .cse5 (and .cse4 (= ~methAndRunningLastTime~0 0)) .cse3) (or .cse0 (not (= 0 ~systemActive~0))))) [2022-02-20 18:07:52,871 INFO L858 garLoopResultBuilder]: For program point L278(lines 278 288) no Hoare annotation was computed. [2022-02-20 18:07:52,871 INFO L858 garLoopResultBuilder]: For program point L274(lines 274 291) no Hoare annotation was computed. [2022-02-20 18:07:52,872 INFO L854 garLoopResultBuilder]: At program point L274-1(lines 266 294) the Hoare annotation is: (let ((.cse9 (= ~pumpRunning~0 0)) (.cse10 (= ~methAndRunningLastTime~0 0)) (.cse15 (<= 1 ~methaneLevelCritical~0)) (.cse14 (= 1 ~systemActive~0))) (let ((.cse2 (not (= 0 ~systemActive~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse12 (<= 1 ~pumpRunning~0)) (.cse13 (<= 2 ~waterLevel~0)) (.cse11 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~1#1| 0)) (.cse5 (not .cse14)) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse7 (not .cse15)) (.cse8 (and (<= 1 |timeShift_processEnvironment_~tmp~4#1|) .cse9 .cse10 .cse15 (<= 1 |timeShift_isMethaneAlarm_#res#1|) .cse14))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse6 .cse7 .cse8) (or .cse0 (and .cse9 .cse10 .cse11) .cse2) (or (and .cse12 .cse10 .cse13 .cse11 .cse3) .cse0 .cse4 .cse5 (and .cse9 .cse10 .cse11 .cse3) .cse1) (or .cse0 .cse4 .cse5 (and .cse12 .cse13 .cse11) .cse7 (and .cse9 .cse10 .cse14 .cse11)) (or .cse5 .cse6 .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse10 .cse3) (and .cse9 .cse10 .cse3)) (or .cse5 .cse6 .cse7 .cse8 (not (<= 2 |old(~waterLevel~0)|)))))) [2022-02-20 18:07:52,872 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 378 401) the Hoare annotation is: (let ((.cse8 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse9 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (let ((.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse6 (and (= ~pumpRunning~0 0) .cse8 .cse9)) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse8 .cse9))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse0 .cse1 .cse3 .cse6) (or .cse5 .cse6 (not (= 0 ~systemActive~0))) (or .cse5 .cse0 .cse1 .cse7 .cse6) (or .cse1 .cse2 .cse4 .cse7) (or .cse1 .cse2 .cse3 .cse4 (not (<= 2 |old(~waterLevel~0)|)))))) [2022-02-20 18:07:52,872 INFO L854 garLoopResultBuilder]: At program point L493(lines 488 496) the Hoare annotation is: (let ((.cse12 (= 1 ~systemActive~0)) (.cse10 (= ~pumpRunning~0 0)) (.cse11 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse5 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse7 (and .cse10 .cse11 .cse5 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (.cse8 (not (= 0 ~systemActive~0))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (not .cse12)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse9 (and (<= 1 |timeShift_processEnvironment_~tmp~4#1|) .cse10 (<= 1 |timeShift_isMethaneAlarm_#res#1|) .cse11 .cse12))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse4 .cse0 (and (<= 1 ~pumpRunning~0) (= ~methAndRunningLastTime~0 0) (<= 2 ~waterLevel~0) .cse5) .cse6 .cse7) (or .cse3 .cse7 .cse8) (or .cse0 .cse1 .cse6 .cse9 (not (<= 2 |old(~waterLevel~0)|))) (or .cse3 .cse2 .cse8) (or .cse3 .cse4 .cse0 .cse2) (or .cse4 .cse0 .cse1 .cse6 .cse9)))) [2022-02-20 18:07:52,872 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 378 401) no Hoare annotation was computed. [2022-02-20 18:07:52,872 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 300) no Hoare annotation was computed. [2022-02-20 18:07:52,872 INFO L861 garLoopResultBuilder]: At program point L163-2(lines 163 177) the Hoare annotation is: true [2022-02-20 18:07:52,872 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 153 182) no Hoare annotation was computed. [2022-02-20 18:07:52,872 INFO L861 garLoopResultBuilder]: At program point L159(line 159) the Hoare annotation is: true [2022-02-20 18:07:52,872 INFO L858 garLoopResultBuilder]: For program point L159-1(line 159) no Hoare annotation was computed. [2022-02-20 18:07:52,873 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 153 182) the Hoare annotation is: true [2022-02-20 18:07:52,873 INFO L861 garLoopResultBuilder]: At program point L178(lines 153 182) the Hoare annotation is: true [2022-02-20 18:07:52,873 INFO L858 garLoopResultBuilder]: For program point L174(line 174) no Hoare annotation was computed. [2022-02-20 18:07:52,873 INFO L858 garLoopResultBuilder]: For program point L167(lines 167 171) no Hoare annotation was computed. [2022-02-20 18:07:52,873 INFO L861 garLoopResultBuilder]: At program point L167-1(lines 167 171) the Hoare annotation is: true [2022-02-20 18:07:52,873 INFO L858 garLoopResultBuilder]: For program point L164(line 164) no Hoare annotation was computed. [2022-02-20 18:07:52,873 INFO L861 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 95 103) the Hoare annotation is: true [2022-02-20 18:07:52,873 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 95 103) no Hoare annotation was computed. [2022-02-20 18:07:52,873 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 95 103) no Hoare annotation was computed. [2022-02-20 18:07:52,874 INFO L861 garLoopResultBuilder]: At program point L225(lines 217 227) the Hoare annotation is: true [2022-02-20 18:07:52,874 INFO L861 garLoopResultBuilder]: At program point L250(lines 231 253) the Hoare annotation is: true [2022-02-20 18:07:52,874 INFO L854 garLoopResultBuilder]: At program point L564(lines 552 566) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= 0 ~systemActive~0)) [2022-02-20 18:07:52,874 INFO L858 garLoopResultBuilder]: For program point L556(lines 556 562) no Hoare annotation was computed. [2022-02-20 18:07:52,874 INFO L858 garLoopResultBuilder]: For program point L556-1(lines 556 562) no Hoare annotation was computed. [2022-02-20 18:07:52,874 INFO L854 garLoopResultBuilder]: At program point L263(lines 258 265) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-02-20 18:07:52,874 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-02-20 18:07:52,874 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-02-20 18:07:52,874 INFO L858 garLoopResultBuilder]: For program point L317(lines 316 363) no Hoare annotation was computed. [2022-02-20 18:07:52,875 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-02-20 18:07:52,875 INFO L858 garLoopResultBuilder]: For program point L346(lines 346 359) no Hoare annotation was computed. [2022-02-20 18:07:52,875 INFO L854 garLoopResultBuilder]: At program point L598(lines 593 601) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-02-20 18:07:52,875 INFO L854 garLoopResultBuilder]: At program point L338(line 338) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse6 (= ~pumpRunning~0 0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and .cse0 .cse4 .cse5 .cse2 .cse3) (and .cse6 .cse4 .cse1 .cse2 .cse3) (and .cse6 .cse4 .cse5 .cse2 .cse3) (and .cse6 .cse4 .cse3 (= 0 ~systemActive~0)))) [2022-02-20 18:07:52,875 INFO L861 garLoopResultBuilder]: At program point L367(lines 306 371) the Hoare annotation is: true [2022-02-20 18:07:52,875 INFO L854 garLoopResultBuilder]: At program point L590(lines 586 592) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-02-20 18:07:52,875 INFO L858 garLoopResultBuilder]: For program point L326(lines 326 332) no Hoare annotation was computed. [2022-02-20 18:07:52,875 INFO L858 garLoopResultBuilder]: For program point L326-1(lines 326 332) no Hoare annotation was computed. [2022-02-20 18:07:52,876 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-02-20 18:07:52,876 INFO L858 garLoopResultBuilder]: For program point L318(lines 318 322) no Hoare annotation was computed. [2022-02-20 18:07:52,876 INFO L854 garLoopResultBuilder]: At program point L558(line 558) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= 1 ~systemActive~0) .cse0) (and (<= 2 ~waterLevel~0) .cse0 (not (= 0 ~systemActive~0))))) [2022-02-20 18:07:52,876 INFO L854 garLoopResultBuilder]: At program point L364(lines 315 365) the Hoare annotation is: false [2022-02-20 18:07:52,876 INFO L854 garLoopResultBuilder]: At program point L583(lines 579 585) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-02-20 18:07:52,876 INFO L858 garLoopResultBuilder]: For program point L352(lines 352 358) no Hoare annotation was computed. [2022-02-20 18:07:52,876 INFO L854 garLoopResultBuilder]: At program point L352-2(lines 346 359) the Hoare annotation is: (let ((.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse5 (= ~pumpRunning~0 0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and .cse0 .cse4 .cse1 .cse2 .cse3) (and .cse5 .cse4 .cse1 .cse2 .cse3) (and .cse5 .cse4 .cse6 .cse2 .cse3) (and .cse5 .cse3 (= 0 ~systemActive~0)) (and .cse0 .cse6 .cse2 .cse3))) [2022-02-20 18:07:52,876 INFO L854 garLoopResultBuilder]: At program point L212(lines 208 214) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-02-20 18:07:52,877 INFO L858 garLoopResultBuilder]: For program point L241(lines 241 248) no Hoare annotation was computed. [2022-02-20 18:07:52,877 INFO L858 garLoopResultBuilder]: For program point L336(lines 336 342) no Hoare annotation was computed. [2022-02-20 18:07:52,877 INFO L858 garLoopResultBuilder]: For program point L336-1(lines 336 342) no Hoare annotation was computed. [2022-02-20 18:07:52,877 INFO L858 garLoopResultBuilder]: For program point L241-2(lines 241 248) no Hoare annotation was computed. [2022-02-20 18:07:52,877 INFO L854 garLoopResultBuilder]: At program point L361(lines 316 363) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse6 (= ~pumpRunning~0 0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and .cse0 .cse4 .cse5 .cse2 .cse3) (and .cse6 .cse4 .cse1 .cse2 .cse3) (and .cse6 .cse4 .cse5 .cse2 .cse3) (and .cse6 .cse4 .cse3 (= 0 ~systemActive~0)))) [2022-02-20 18:07:52,877 INFO L854 garLoopResultBuilder]: At program point L328(line 328) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse6 (= ~pumpRunning~0 0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and .cse0 .cse4 .cse5 .cse2 .cse3) (and .cse6 .cse4 .cse1 .cse2 .cse3) (and .cse6 .cse4 .cse5 .cse2 .cse3) (and .cse6 .cse4 .cse3 (= 0 ~systemActive~0)))) [2022-02-20 18:07:52,877 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 410 434) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= ~pumpRunning~0 0)) (.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse3 .cse0 .cse1) (or .cse2 .cse3 .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (= ~methAndRunningLastTime~0 0))))) [2022-02-20 18:07:52,877 INFO L854 garLoopResultBuilder]: At program point L145(lines 136 149) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0))) (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (and .cse5 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1))) (.cse4 (and .cse5 (<= 2 ~waterLevel~0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse0 .cse3 .cse1 .cse4) (or .cse2 .cse0 .cse3 (not (<= 1 ~methaneLevelCritical~0)) .cse4 (not (= ~methAndRunningLastTime~0 0)))))) [2022-02-20 18:07:52,878 INFO L854 garLoopResultBuilder]: At program point L424(line 424) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~3#1| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse3 .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (= ~methAndRunningLastTime~0 0))) (or .cse2 .cse3 .cse0 .cse1))) [2022-02-20 18:07:52,878 INFO L854 garLoopResultBuilder]: At program point L548(lines 533 551) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0))) (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (and .cse5 (<= 2 ~waterLevel~0))) (.cse4 (and .cse5 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse0 .cse1 .cse3 .cse4) (or .cse2 .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse3 .cse4 (not (= ~methAndRunningLastTime~0 0)))))) [2022-02-20 18:07:52,878 INFO L858 garLoopResultBuilder]: For program point L418(lines 418 426) no Hoare annotation was computed. [2022-02-20 18:07:52,878 INFO L858 garLoopResultBuilder]: For program point L414(lines 414 431) no Hoare annotation was computed. [2022-02-20 18:07:52,878 INFO L858 garLoopResultBuilder]: For program point L542(lines 542 546) no Hoare annotation was computed. [2022-02-20 18:07:52,878 INFO L858 garLoopResultBuilder]: For program point L542-2(lines 542 546) no Hoare annotation was computed. [2022-02-20 18:07:52,878 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 410 434) no Hoare annotation was computed. [2022-02-20 18:07:52,878 INFO L854 garLoopResultBuilder]: At program point L466(lines 461 468) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse3 .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (= ~methAndRunningLastTime~0 0))) (or .cse2 .cse3 .cse0 .cse1))) [2022-02-20 18:07:52,879 INFO L854 garLoopResultBuilder]: At program point L429(line 429) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (= ~methAndRunningLastTime~0 0))) (or .cse2 .cse0 .cse1))) [2022-02-20 18:07:52,879 INFO L858 garLoopResultBuilder]: For program point L140(lines 140 146) no Hoare annotation was computed. [2022-02-20 18:07:52,879 INFO L858 garLoopResultBuilder]: For program point L429-1(lines 410 434) no Hoare annotation was computed. [2022-02-20 18:07:52,879 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 71 82) no Hoare annotation was computed. [2022-02-20 18:07:52,879 INFO L858 garLoopResultBuilder]: For program point L75-1(lines 71 82) no Hoare annotation was computed. [2022-02-20 18:07:52,879 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 71 82) the Hoare annotation is: (let ((.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (not (<= 1 ~pumpRunning~0))) (.cse4 (not (= ~pumpRunning~0 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse5 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse4 .cse0 .cse1 .cse3 .cse5) (or .cse4 .cse3 .cse5 (not (= 0 ~systemActive~0))) (or .cse0 .cse6 .cse2 .cse3 .cse5) (or .cse4 .cse0 .cse6 .cse3 .cse5))) [2022-02-20 18:07:52,881 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:07:52,882 INFO L180 ceAbstractionStarter]: Computing trace abstraction results [2022-02-20 18:07:52,884 WARN L170 areAnnotationChecker]: deactivatePumpFINAL has no Hoare annotation [2022-02-20 18:07:52,884 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__baseEXIT has no Hoare annotation [2022-02-20 18:07:52,885 WARN L170 areAnnotationChecker]: L87-1 has no Hoare annotation [2022-02-20 18:07:52,885 WARN L170 areAnnotationChecker]: L87-1 has no Hoare annotation [2022-02-20 18:07:52,885 WARN L170 areAnnotationChecker]: L63 has no Hoare annotation [2022-02-20 18:07:52,885 WARN L170 areAnnotationChecker]: L382-1 has no Hoare annotation [2022-02-20 18:07:52,885 WARN L170 areAnnotationChecker]: isMethaneLevelCriticalFINAL has no Hoare annotation [2022-02-20 18:07:52,885 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2022-02-20 18:07:52,885 WARN L170 areAnnotationChecker]: L414 has no Hoare annotation [2022-02-20 18:07:52,885 WARN L170 areAnnotationChecker]: L75-1 has no Hoare annotation [2022-02-20 18:07:52,885 WARN L170 areAnnotationChecker]: L75-1 has no Hoare annotation [2022-02-20 18:07:52,885 WARN L170 areAnnotationChecker]: deactivatePumpFINAL has no Hoare annotation [2022-02-20 18:07:52,886 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__baseEXIT has no Hoare annotation [2022-02-20 18:07:52,886 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__baseEXIT has no Hoare annotation [2022-02-20 18:07:52,886 WARN L170 areAnnotationChecker]: L87-1 has no Hoare annotation [2022-02-20 18:07:52,886 WARN L170 areAnnotationChecker]: L63 has no Hoare annotation [2022-02-20 18:07:52,886 WARN L170 areAnnotationChecker]: L63 has no Hoare annotation [2022-02-20 18:07:52,886 WARN L170 areAnnotationChecker]: L382-1 has no Hoare annotation [2022-02-20 18:07:52,886 WARN L170 areAnnotationChecker]: L382-1 has no Hoare annotation [2022-02-20 18:07:52,886 WARN L170 areAnnotationChecker]: L159-1 has no Hoare annotation [2022-02-20 18:07:52,887 WARN L170 areAnnotationChecker]: isMethaneLevelCriticalFINAL has no Hoare annotation [2022-02-20 18:07:52,887 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2022-02-20 18:07:52,887 WARN L170 areAnnotationChecker]: L414 has no Hoare annotation [2022-02-20 18:07:52,887 WARN L170 areAnnotationChecker]: L414 has no Hoare annotation [2022-02-20 18:07:52,887 WARN L170 areAnnotationChecker]: L75-1 has no Hoare annotation [2022-02-20 18:07:52,887 WARN L170 areAnnotationChecker]: deactivatePumpEXIT has no Hoare annotation [2022-02-20 18:07:52,888 WARN L170 areAnnotationChecker]: deactivatePumpEXIT has no Hoare annotation [2022-02-20 18:07:52,888 WARN L170 areAnnotationChecker]: L429-1 has no Hoare annotation [2022-02-20 18:07:52,888 WARN L170 areAnnotationChecker]: changeMethaneLevelEXIT has no Hoare annotation [2022-02-20 18:07:52,888 WARN L170 areAnnotationChecker]: L382-1 has no Hoare annotation [2022-02-20 18:07:52,888 WARN L170 areAnnotationChecker]: L440 has no Hoare annotation [2022-02-20 18:07:52,888 WARN L170 areAnnotationChecker]: L440 has no Hoare annotation [2022-02-20 18:07:52,888 WARN L170 areAnnotationChecker]: L389-1 has no Hoare annotation [2022-02-20 18:07:52,888 WARN L170 areAnnotationChecker]: L159-1 has no Hoare annotation [2022-02-20 18:07:52,888 WARN L170 areAnnotationChecker]: isMethaneLevelCriticalEXIT has no Hoare annotation [2022-02-20 18:07:52,888 WARN L170 areAnnotationChecker]: isMethaneLevelCriticalEXIT has no Hoare annotation [2022-02-20 18:07:52,889 WARN L170 areAnnotationChecker]: L140 has no Hoare annotation [2022-02-20 18:07:52,889 WARN L170 areAnnotationChecker]: L140 has no Hoare annotation [2022-02-20 18:07:52,889 WARN L170 areAnnotationChecker]: L429-1 has no Hoare annotation [2022-02-20 18:07:52,889 WARN L170 areAnnotationChecker]: waterRiseEXIT has no Hoare annotation [2022-02-20 18:07:52,889 WARN L170 areAnnotationChecker]: L389-1 has no Hoare annotation [2022-02-20 18:07:52,889 WARN L170 areAnnotationChecker]: L556-1 has no Hoare annotation [2022-02-20 18:07:52,889 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__highWaterSensorEXIT has no Hoare annotation [2022-02-20 18:07:52,889 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__highWaterSensorEXIT has no Hoare annotation [2022-02-20 18:07:52,889 WARN L170 areAnnotationChecker]: L336-1 has no Hoare annotation [2022-02-20 18:07:52,890 WARN L170 areAnnotationChecker]: L482-1 has no Hoare annotation [2022-02-20 18:07:52,890 WARN L170 areAnnotationChecker]: L272-1 has no Hoare annotation [2022-02-20 18:07:52,890 WARN L170 areAnnotationChecker]: L164 has no Hoare annotation [2022-02-20 18:07:52,891 WARN L170 areAnnotationChecker]: L482-1 has no Hoare annotation [2022-02-20 18:07:52,891 WARN L170 areAnnotationChecker]: L272-1 has no Hoare annotation [2022-02-20 18:07:52,891 WARN L170 areAnnotationChecker]: L542 has no Hoare annotation [2022-02-20 18:07:52,891 WARN L170 areAnnotationChecker]: L326-1 has no Hoare annotation [2022-02-20 18:07:52,892 WARN L170 areAnnotationChecker]: L346 has no Hoare annotation [2022-02-20 18:07:52,892 WARN L170 areAnnotationChecker]: L346 has no Hoare annotation [2022-02-20 18:07:52,892 WARN L170 areAnnotationChecker]: cleanupEXIT has no Hoare annotation [2022-02-20 18:07:52,892 WARN L170 areAnnotationChecker]: L164 has no Hoare annotation [2022-02-20 18:07:52,892 WARN L170 areAnnotationChecker]: L444 has no Hoare annotation [2022-02-20 18:07:52,892 WARN L170 areAnnotationChecker]: L274 has no Hoare annotation [2022-02-20 18:07:52,892 WARN L170 areAnnotationChecker]: L274 has no Hoare annotation [2022-02-20 18:07:52,892 WARN L170 areAnnotationChecker]: L241 has no Hoare annotation [2022-02-20 18:07:52,892 WARN L170 areAnnotationChecker]: L542 has no Hoare annotation [2022-02-20 18:07:52,892 WARN L170 areAnnotationChecker]: L542 has no Hoare annotation [2022-02-20 18:07:52,892 WARN L170 areAnnotationChecker]: L336 has no Hoare annotation [2022-02-20 18:07:52,893 WARN L170 areAnnotationChecker]: L336 has no Hoare annotation [2022-02-20 18:07:52,893 WARN L170 areAnnotationChecker]: L352 has no Hoare annotation [2022-02-20 18:07:52,893 WARN L170 areAnnotationChecker]: L352 has no Hoare annotation [2022-02-20 18:07:52,893 WARN L170 areAnnotationChecker]: cleanupEXIT has no Hoare annotation [2022-02-20 18:07:52,894 WARN L170 areAnnotationChecker]: L167 has no Hoare annotation [2022-02-20 18:07:52,894 WARN L170 areAnnotationChecker]: L167 has no Hoare annotation [2022-02-20 18:07:52,894 WARN L170 areAnnotationChecker]: L444 has no Hoare annotation [2022-02-20 18:07:52,894 WARN L170 areAnnotationChecker]: L444 has no Hoare annotation [2022-02-20 18:07:52,894 WARN L170 areAnnotationChecker]: L278 has no Hoare annotation [2022-02-20 18:07:52,894 WARN L170 areAnnotationChecker]: timeShiftFINAL has no Hoare annotation [2022-02-20 18:07:52,894 WARN L170 areAnnotationChecker]: L241 has no Hoare annotation [2022-02-20 18:07:52,894 WARN L170 areAnnotationChecker]: L241 has no Hoare annotation [2022-02-20 18:07:52,894 WARN L170 areAnnotationChecker]: L542-2 has no Hoare annotation [2022-02-20 18:07:52,894 WARN L170 areAnnotationChecker]: L336-1 has no Hoare annotation [2022-02-20 18:07:52,897 WARN L170 areAnnotationChecker]: L317 has no Hoare annotation [2022-02-20 18:07:52,897 WARN L170 areAnnotationChecker]: L556 has no Hoare annotation [2022-02-20 18:07:52,897 WARN L170 areAnnotationChecker]: L556 has no Hoare annotation [2022-02-20 18:07:52,897 WARN L170 areAnnotationChecker]: L174 has no Hoare annotation [2022-02-20 18:07:52,898 WARN L170 areAnnotationChecker]: L278 has no Hoare annotation [2022-02-20 18:07:52,898 WARN L170 areAnnotationChecker]: L278 has no Hoare annotation [2022-02-20 18:07:52,899 WARN L170 areAnnotationChecker]: timeShiftFINAL has no Hoare annotation [2022-02-20 18:07:52,899 WARN L170 areAnnotationChecker]: L241-2 has no Hoare annotation [2022-02-20 18:07:52,899 WARN L170 areAnnotationChecker]: L418 has no Hoare annotation [2022-02-20 18:07:52,899 WARN L170 areAnnotationChecker]: L317 has no Hoare annotation [2022-02-20 18:07:52,899 WARN L170 areAnnotationChecker]: L317 has no Hoare annotation [2022-02-20 18:07:52,899 WARN L170 areAnnotationChecker]: L556-1 has no Hoare annotation [2022-02-20 18:07:52,899 WARN L170 areAnnotationChecker]: L241-2 has no Hoare annotation [2022-02-20 18:07:52,900 WARN L170 areAnnotationChecker]: L174 has no Hoare annotation [2022-02-20 18:07:52,900 WARN L170 areAnnotationChecker]: L279 has no Hoare annotation [2022-02-20 18:07:52,900 WARN L170 areAnnotationChecker]: L279 has no Hoare annotation [2022-02-20 18:07:52,900 WARN L170 areAnnotationChecker]: timeShiftEXIT has no Hoare annotation [2022-02-20 18:07:52,900 WARN L170 areAnnotationChecker]: timeShiftEXIT has no Hoare annotation [2022-02-20 18:07:52,900 WARN L170 areAnnotationChecker]: timeShiftEXIT has no Hoare annotation [2022-02-20 18:07:52,900 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2022-02-20 18:07:52,900 WARN L170 areAnnotationChecker]: L418 has no Hoare annotation [2022-02-20 18:07:52,900 WARN L170 areAnnotationChecker]: L418 has no Hoare annotation [2022-02-20 18:07:52,900 WARN L170 areAnnotationChecker]: L318 has no Hoare annotation [2022-02-20 18:07:52,900 WARN L170 areAnnotationChecker]: L300 has no Hoare annotation [2022-02-20 18:07:52,900 WARN L170 areAnnotationChecker]: L300 has no Hoare annotation [2022-02-20 18:07:52,900 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2022-02-20 18:07:52,900 WARN L170 areAnnotationChecker]: L429-1 has no Hoare annotation [2022-02-20 18:07:52,900 WARN L170 areAnnotationChecker]: L429-1 has no Hoare annotation [2022-02-20 18:07:52,900 WARN L170 areAnnotationChecker]: L326 has no Hoare annotation [2022-02-20 18:07:52,900 WARN L170 areAnnotationChecker]: L326 has no Hoare annotation [2022-02-20 18:07:52,902 WARN L170 areAnnotationChecker]: L326-1 has no Hoare annotation [2022-02-20 18:07:52,903 INFO L163 areAnnotationChecker]: CFG has 26 edges. 26 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. 0 times interpolants missing. [2022-02-20 18:07:52,949 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 20.02 06:07:52 BoogieIcfgContainer [2022-02-20 18:07:52,949 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-02-20 18:07:52,950 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-02-20 18:07:52,950 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-02-20 18:07:52,950 INFO L275 PluginConnector]: Witness Printer initialized [2022-02-20 18:07:52,951 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.02 06:07:34" (3/4) ... [2022-02-20 18:07:52,953 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-02-20 18:07:52,957 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-02-20 18:07:52,957 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-02-20 18:07:52,957 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-02-20 18:07:52,957 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-02-20 18:07:52,957 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-02-20 18:07:52,957 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-02-20 18:07:52,958 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-02-20 18:07:52,958 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-02-20 18:07:52,966 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 51 nodes and edges [2022-02-20 18:07:52,967 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-02-20 18:07:52,967 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-02-20 18:07:52,967 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-02-20 18:07:52,967 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-02-20 18:07:52,968 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-02-20 18:07:52,968 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-02-20 18:07:52,986 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && ((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0)) || !(1 <= methaneLevelCritical))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-02-20 18:07:52,987 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((1 <= tmp && pumpRunning == 0) && 1 <= \result)) || !(2 <= \old(waterLevel)))) && ((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((1 <= tmp && pumpRunning == 0) && 1 <= \result))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-02-20 18:07:52,988 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive)) || tmp == 0) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((((1 <= tmp && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && 1 <= \result) && 1 == systemActive))) && ((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && (((((((((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && tmp == 0) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel) && tmp == 0)) || !(methaneLevelCritical == 0))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && \old(waterLevel) == waterLevel))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && tmp == 0)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == 0))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((((1 <= tmp && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && 1 <= \result) && 1 == systemActive)) || !(2 <= \old(waterLevel))) [2022-02-20 18:07:52,989 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && 1 <= \result))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && 1 <= \result)) || !(2 <= \old(waterLevel)))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-02-20 18:07:52,989 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime))) && ((!(\old(pumpRunning) == 0) || (((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) || !(0 == systemActive))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((((1 <= tmp && pumpRunning == 0) && 1 <= \result) && \result == 0) && 1 == systemActive)) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((((1 <= tmp && pumpRunning == 0) && 1 <= \result) && \result == 0) && 1 == systemActive)) [2022-02-20 18:07:52,989 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 1)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 1)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || !(methAndRunningLastTime == 0)) [2022-02-20 18:07:52,989 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical))) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-02-20 18:07:52,989 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || !(methAndRunningLastTime == 0)) [2022-02-20 18:07:52,990 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0))) && (((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) [2022-02-20 18:07:53,011 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2022-02-20 18:07:53,011 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-02-20 18:07:53,012 INFO L158 Benchmark]: Toolchain (without parser) took 19474.05ms. Allocated memory was 109.1MB in the beginning and 302.0MB in the end (delta: 192.9MB). Free memory was 79.6MB in the beginning and 253.9MB in the end (delta: -174.3MB). Peak memory consumption was 19.7MB. Max. memory is 16.1GB. [2022-02-20 18:07:53,012 INFO L158 Benchmark]: CDTParser took 0.16ms. Allocated memory is still 109.1MB. Free memory is still 66.3MB. There was no memory consumed. Max. memory is 16.1GB. [2022-02-20 18:07:53,012 INFO L158 Benchmark]: CACSL2BoogieTranslator took 451.11ms. Allocated memory is still 109.1MB. Free memory was 79.6MB in the beginning and 72.9MB in the end (delta: 6.6MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2022-02-20 18:07:53,013 INFO L158 Benchmark]: Boogie Procedure Inliner took 45.19ms. Allocated memory is still 109.1MB. Free memory was 72.9MB in the beginning and 70.0MB in the end (delta: 3.0MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-02-20 18:07:53,013 INFO L158 Benchmark]: Boogie Preprocessor took 39.28ms. Allocated memory is still 109.1MB. Free memory was 70.0MB in the beginning and 68.3MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-02-20 18:07:53,013 INFO L158 Benchmark]: RCFGBuilder took 523.37ms. Allocated memory was 109.1MB in the beginning and 138.4MB in the end (delta: 29.4MB). Free memory was 68.3MB in the beginning and 108.2MB in the end (delta: -39.8MB). Peak memory consumption was 19.3MB. Max. memory is 16.1GB. [2022-02-20 18:07:53,013 INFO L158 Benchmark]: TraceAbstraction took 18341.48ms. Allocated memory was 138.4MB in the beginning and 302.0MB in the end (delta: 163.6MB). Free memory was 107.5MB in the beginning and 259.2MB in the end (delta: -151.6MB). Peak memory consumption was 174.9MB. Max. memory is 16.1GB. [2022-02-20 18:07:53,013 INFO L158 Benchmark]: Witness Printer took 61.27ms. Allocated memory is still 302.0MB. Free memory was 259.2MB in the beginning and 253.9MB in the end (delta: 5.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-02-20 18:07:53,014 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - AssertionsEnabledResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.16ms. Allocated memory is still 109.1MB. Free memory is still 66.3MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 451.11ms. Allocated memory is still 109.1MB. Free memory was 79.6MB in the beginning and 72.9MB in the end (delta: 6.6MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 45.19ms. Allocated memory is still 109.1MB. Free memory was 72.9MB in the beginning and 70.0MB in the end (delta: 3.0MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 39.28ms. Allocated memory is still 109.1MB. Free memory was 70.0MB in the beginning and 68.3MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 523.37ms. Allocated memory was 109.1MB in the beginning and 138.4MB in the end (delta: 29.4MB). Free memory was 68.3MB in the beginning and 108.2MB in the end (delta: -39.8MB). Peak memory consumption was 19.3MB. Max. memory is 16.1GB. * TraceAbstraction took 18341.48ms. Allocated memory was 138.4MB in the beginning and 302.0MB in the end (delta: 163.6MB). Free memory was 107.5MB in the beginning and 259.2MB in the end (delta: -151.6MB). Peak memory consumption was 174.9MB. Max. memory is 16.1GB. * Witness Printer took 61.27ms. Allocated memory is still 302.0MB. Free memory was 259.2MB in the beginning and 253.9MB in the end (delta: 5.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 300]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 94 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 18.2s, OverallIterations: 12, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 8.8s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 4.7s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1742 SdHoareTripleChecker+Valid, 1.7s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1712 mSDsluCounter, 3230 SdHoareTripleChecker+Invalid, 1.7s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 1887 mSDsCounter, 661 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1694 IncrementalHoareTripleChecker+Invalid, 2355 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 661 mSolverCounterUnsat, 1343 mSDtfsCounter, 1694 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 381 GetRequests, 282 SyntacticMatches, 2 SemanticMatches, 97 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 139 ImplicationChecksByTransitivity, 0.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1533occurred in iteration=9, InterpolantAutomatonStates: 89, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 1.4s AutomataMinimizationTime, 12 MinimizatonAttempts, 541 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 43 LocationsWithAnnotation, 2171 PreInvPairs, 2420 NumberOfFragments, 2652 HoareAnnotationTreeSize, 2171 FomulaSimplifications, 938 FormulaSimplificationTreeSizeReduction, 0.9s HoareSimplificationTime, 43 FomulaSimplificationsInter, 17222 FormulaSimplificationTreeSizeReductionInter, 3.5s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 1.8s InterpolantComputationTime, 801 NumberOfCodeBlocks, 801 NumberOfCodeBlocksAsserted, 14 NumberOfCheckSat, 787 ConstructedInterpolants, 0 QuantifiedInterpolants, 1489 SizeOfPredicates, 5 NumberOfNonLiveVariables, 935 ConjunctsInSsa, 12 ConjunctsInUnsatCore, 14 InterpolantComputations, 12 PerfectInterpolantSequences, 141/157 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 1)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 1)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 461]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0))) && (((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 163]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 296]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical))) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 231]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 217]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 208]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 533]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 316]: Loop Invariant Derived loop invariant: (((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && 2 <= waterLevel) && 1 == systemActive) && splverifierCounter == 0) || ((((1 <= pumpRunning && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0)) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && 1 == systemActive) && splverifierCounter == 0)) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && splverifierCounter == 0) && 0 == systemActive) - InvariantResult [Line: 258]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 488]: Loop Invariant Derived loop invariant: (((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime))) && ((!(\old(pumpRunning) == 0) || (((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) || !(0 == systemActive))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((((1 <= tmp && pumpRunning == 0) && 1 <= \result) && \result == 0) && 1 == systemActive)) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((((1 <= tmp && pumpRunning == 0) && 1 <= \result) && \result == 0) && 1 == systemActive)) - InvariantResult [Line: 266]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive)) || tmp == 0) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((((1 <= tmp && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && 1 <= \result) && 1 == systemActive))) && ((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && (((((((((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && tmp == 0) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel) && tmp == 0)) || !(methaneLevelCritical == 0))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && \old(waterLevel) == waterLevel))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && tmp == 0)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == 0))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((((1 <= tmp && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && 1 <= \result) && 1 == systemActive)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 579]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 315]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 436]: Loop Invariant Derived loop invariant: (((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((1 <= tmp && pumpRunning == 0) && 1 <= \result)) || !(2 <= \old(waterLevel)))) && ((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((1 <= tmp && pumpRunning == 0) && 1 <= \result))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 586]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 153]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 593]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 306]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 59]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && ((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0)) || !(1 <= methaneLevelCritical))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 552]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && splverifierCounter == 0) && 0 == systemActive - InvariantResult [Line: 477]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && 1 <= \result))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && 1 <= \result)) || !(2 <= \old(waterLevel)))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) RESULT: Ultimate proved your program to be correct! [2022-02-20 18:07:53,047 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE