./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec2_product46.cil.c --full-output -ea --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 03d7b7b3 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -ea -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec2_product46.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 02fb1fa00f2030f7900be70496baf2f4c44344da378fa11ef09f1f26dc14ae9d --- Real Ultimate output --- This is Ultimate 0.2.2-dev-03d7b7b [2022-02-20 18:07:40,245 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-02-20 18:07:40,246 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-02-20 18:07:40,266 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-02-20 18:07:40,267 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-02-20 18:07:40,267 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-02-20 18:07:40,268 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-02-20 18:07:40,269 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-02-20 18:07:40,271 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-02-20 18:07:40,271 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-02-20 18:07:40,272 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-02-20 18:07:40,274 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-02-20 18:07:40,274 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-02-20 18:07:40,278 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-02-20 18:07:40,280 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-02-20 18:07:40,282 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-02-20 18:07:40,283 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-02-20 18:07:40,285 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-02-20 18:07:40,286 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-02-20 18:07:40,291 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-02-20 18:07:40,292 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-02-20 18:07:40,295 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-02-20 18:07:40,296 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-02-20 18:07:40,297 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-02-20 18:07:40,298 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-02-20 18:07:40,302 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-02-20 18:07:40,303 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-02-20 18:07:40,303 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-02-20 18:07:40,304 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-02-20 18:07:40,304 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-02-20 18:07:40,304 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-02-20 18:07:40,305 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-02-20 18:07:40,306 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-02-20 18:07:40,307 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-02-20 18:07:40,307 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-02-20 18:07:40,308 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-02-20 18:07:40,309 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-02-20 18:07:40,309 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-02-20 18:07:40,309 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-02-20 18:07:40,309 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-02-20 18:07:40,310 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-02-20 18:07:40,311 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-02-20 18:07:40,327 INFO L113 SettingsManager]: Loading preferences was successful [2022-02-20 18:07:40,327 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-02-20 18:07:40,327 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-02-20 18:07:40,327 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-02-20 18:07:40,328 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-02-20 18:07:40,328 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-02-20 18:07:40,329 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-02-20 18:07:40,329 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-02-20 18:07:40,329 INFO L138 SettingsManager]: * Use SBE=true [2022-02-20 18:07:40,329 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-02-20 18:07:40,330 INFO L138 SettingsManager]: * sizeof long=4 [2022-02-20 18:07:40,330 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-02-20 18:07:40,330 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-02-20 18:07:40,331 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-02-20 18:07:40,331 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-02-20 18:07:40,331 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-02-20 18:07:40,331 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-02-20 18:07:40,331 INFO L138 SettingsManager]: * sizeof long double=12 [2022-02-20 18:07:40,331 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-02-20 18:07:40,331 INFO L138 SettingsManager]: * Use constant arrays=true [2022-02-20 18:07:40,332 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-02-20 18:07:40,332 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-02-20 18:07:40,332 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-02-20 18:07:40,332 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-02-20 18:07:40,332 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-02-20 18:07:40,332 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-02-20 18:07:40,332 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-02-20 18:07:40,333 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-02-20 18:07:40,333 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-02-20 18:07:40,333 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-02-20 18:07:40,333 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2022-02-20 18:07:40,333 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-02-20 18:07:40,333 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-02-20 18:07:40,334 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 02fb1fa00f2030f7900be70496baf2f4c44344da378fa11ef09f1f26dc14ae9d [2022-02-20 18:07:40,503 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-02-20 18:07:40,517 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-02-20 18:07:40,519 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-02-20 18:07:40,520 INFO L271 PluginConnector]: Initializing CDTParser... [2022-02-20 18:07:40,520 INFO L275 PluginConnector]: CDTParser initialized [2022-02-20 18:07:40,521 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec2_product46.cil.c [2022-02-20 18:07:40,565 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/11879b0c6/8309a3b827a0458f82ffd002f55df94f/FLAG671311e42 [2022-02-20 18:07:40,978 INFO L306 CDTParser]: Found 1 translation units. [2022-02-20 18:07:40,979 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product46.cil.c [2022-02-20 18:07:40,987 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/11879b0c6/8309a3b827a0458f82ffd002f55df94f/FLAG671311e42 [2022-02-20 18:07:41,367 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/11879b0c6/8309a3b827a0458f82ffd002f55df94f [2022-02-20 18:07:41,369 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-02-20 18:07:41,370 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-02-20 18:07:41,371 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-02-20 18:07:41,371 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-02-20 18:07:41,373 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-02-20 18:07:41,374 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.02 06:07:41" (1/1) ... [2022-02-20 18:07:41,375 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@188cfff3 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:07:41, skipping insertion in model container [2022-02-20 18:07:41,375 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.02 06:07:41" (1/1) ... [2022-02-20 18:07:41,380 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-02-20 18:07:41,417 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-02-20 18:07:41,681 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product46.cil.c[17174,17187] [2022-02-20 18:07:41,694 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-02-20 18:07:41,705 INFO L203 MainTranslator]: Completed pre-run [2022-02-20 18:07:41,782 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product46.cil.c[17174,17187] [2022-02-20 18:07:41,792 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-02-20 18:07:41,807 INFO L208 MainTranslator]: Completed translation [2022-02-20 18:07:41,808 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:07:41 WrapperNode [2022-02-20 18:07:41,808 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-02-20 18:07:41,810 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-02-20 18:07:41,810 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-02-20 18:07:41,810 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-02-20 18:07:41,815 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:07:41" (1/1) ... [2022-02-20 18:07:41,835 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:07:41" (1/1) ... [2022-02-20 18:07:41,864 INFO L137 Inliner]: procedures = 56, calls = 157, calls flagged for inlining = 23, calls inlined = 20, statements flattened = 249 [2022-02-20 18:07:41,865 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-02-20 18:07:41,865 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-02-20 18:07:41,865 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-02-20 18:07:41,866 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-02-20 18:07:41,871 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:07:41" (1/1) ... [2022-02-20 18:07:41,871 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:07:41" (1/1) ... [2022-02-20 18:07:41,873 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:07:41" (1/1) ... [2022-02-20 18:07:41,873 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:07:41" (1/1) ... [2022-02-20 18:07:41,877 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:07:41" (1/1) ... [2022-02-20 18:07:41,881 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:07:41" (1/1) ... [2022-02-20 18:07:41,882 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:07:41" (1/1) ... [2022-02-20 18:07:41,884 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-02-20 18:07:41,885 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-02-20 18:07:41,885 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-02-20 18:07:41,885 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-02-20 18:07:41,886 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:07:41" (1/1) ... [2022-02-20 18:07:41,891 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-02-20 18:07:41,917 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-20 18:07:41,927 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-02-20 18:07:41,956 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-02-20 18:07:41,972 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-02-20 18:07:41,973 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-02-20 18:07:41,973 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-02-20 18:07:41,973 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-02-20 18:07:41,973 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-02-20 18:07:41,973 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-02-20 18:07:41,973 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-02-20 18:07:41,974 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-02-20 18:07:41,974 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-02-20 18:07:41,974 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-02-20 18:07:41,974 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-02-20 18:07:41,974 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2022-02-20 18:07:41,974 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2022-02-20 18:07:41,974 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2022-02-20 18:07:41,974 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2022-02-20 18:07:41,974 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-02-20 18:07:41,975 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-02-20 18:07:41,975 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-02-20 18:07:41,975 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-02-20 18:07:41,975 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-02-20 18:07:42,023 INFO L234 CfgBuilder]: Building ICFG [2022-02-20 18:07:42,025 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-02-20 18:07:42,291 INFO L275 CfgBuilder]: Performing block encoding [2022-02-20 18:07:42,296 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-02-20 18:07:42,297 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-02-20 18:07:42,298 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.02 06:07:42 BoogieIcfgContainer [2022-02-20 18:07:42,298 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-02-20 18:07:42,300 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-02-20 18:07:42,300 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-02-20 18:07:42,302 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-02-20 18:07:42,303 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 20.02 06:07:41" (1/3) ... [2022-02-20 18:07:42,303 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3c602e6e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.02 06:07:42, skipping insertion in model container [2022-02-20 18:07:42,303 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:07:41" (2/3) ... [2022-02-20 18:07:42,304 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3c602e6e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.02 06:07:42, skipping insertion in model container [2022-02-20 18:07:42,304 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.02 06:07:42" (3/3) ... [2022-02-20 18:07:42,305 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product46.cil.c [2022-02-20 18:07:42,308 INFO L205 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-02-20 18:07:42,309 INFO L164 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-02-20 18:07:42,341 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-02-20 18:07:42,345 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2022-02-20 18:07:42,346 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-02-20 18:07:42,364 INFO L276 IsEmpty]: Start isEmpty. Operand has 96 states, 72 states have (on average 1.375) internal successors, (99), 80 states have internal predecessors, (99), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 12 states have call predecessors, (14), 14 states have call successors, (14) [2022-02-20 18:07:42,369 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-02-20 18:07:42,369 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:07:42,370 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:07:42,370 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:07:42,374 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:07:42,374 INFO L85 PathProgramCache]: Analyzing trace with hash 92222794, now seen corresponding path program 1 times [2022-02-20 18:07:42,381 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:07:42,381 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [28498372] [2022-02-20 18:07:42,382 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:07:42,382 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:07:42,481 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:42,568 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-02-20 18:07:42,574 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:42,589 INFO L290 TraceCheckUtils]: 0: Hoare triple {99#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~methaneLevelCritical~0;#res := ~retValue_acc~5; {99#true} is VALID [2022-02-20 18:07:42,589 INFO L290 TraceCheckUtils]: 1: Hoare triple {99#true} assume true; {99#true} is VALID [2022-02-20 18:07:42,590 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {99#true} {100#false} #247#return; {100#false} is VALID [2022-02-20 18:07:42,596 INFO L290 TraceCheckUtils]: 0: Hoare triple {99#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(13, 16);call #Ultimate.allocInit(7, 17);call write~init~int(44, 17, 0, 1);call write~init~int(77, 17, 1, 1);call write~init~int(101, 17, 2, 1);call write~init~int(116, 17, 3, 1);call write~init~int(104, 17, 4, 1);call write~init~int(58, 17, 5, 1);call write~init~int(0, 17, 6, 1);call #Ultimate.allocInit(5, 18);call write~init~int(67, 18, 0, 1);call write~init~int(82, 18, 1, 1);call write~init~int(73, 18, 2, 1);call write~init~int(84, 18, 3, 1);call write~init~int(0, 18, 4, 1);call #Ultimate.allocInit(3, 19);call write~init~int(79, 19, 0, 1);call write~init~int(75, 19, 1, 1);call write~init~int(0, 19, 2, 1);call #Ultimate.allocInit(2, 20);call write~init~int(41, 20, 0, 1);call write~init~int(0, 20, 1, 1);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~methAndRunningLastTime~0 := 0; {99#true} is VALID [2022-02-20 18:07:42,596 INFO L290 TraceCheckUtils]: 1: Hoare triple {99#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret33#1, main_~retValue_acc~8#1, main_~tmp~3#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~3#1;assume { :begin_inline_select_helpers } true; {99#true} is VALID [2022-02-20 18:07:42,596 INFO L290 TraceCheckUtils]: 2: Hoare triple {99#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {99#true} is VALID [2022-02-20 18:07:42,597 INFO L290 TraceCheckUtils]: 3: Hoare triple {99#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {99#true} is VALID [2022-02-20 18:07:42,597 INFO L290 TraceCheckUtils]: 4: Hoare triple {99#true} main_#t~ret33#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret33#1 && main_#t~ret33#1 <= 2147483647;main_~tmp~3#1 := main_#t~ret33#1;havoc main_#t~ret33#1; {99#true} is VALID [2022-02-20 18:07:42,597 INFO L290 TraceCheckUtils]: 5: Hoare triple {99#true} assume 0 != main_~tmp~3#1;assume { :begin_inline_setup } true; {99#true} is VALID [2022-02-20 18:07:42,598 INFO L290 TraceCheckUtils]: 6: Hoare triple {99#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0; {99#true} is VALID [2022-02-20 18:07:42,598 INFO L290 TraceCheckUtils]: 7: Hoare triple {99#true} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet49#1, test_#t~nondet50#1, test_#t~nondet51#1, test_#t~nondet52#1, test_~splverifierCounter~0#1, test_~tmp~9#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~9#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {99#true} is VALID [2022-02-20 18:07:42,599 INFO L290 TraceCheckUtils]: 8: Hoare triple {99#true} assume false; {100#false} is VALID [2022-02-20 18:07:42,600 INFO L272 TraceCheckUtils]: 9: Hoare triple {100#false} call cleanup(); {100#false} is VALID [2022-02-20 18:07:42,600 INFO L290 TraceCheckUtils]: 10: Hoare triple {100#false} havoc ~i~0;havoc ~__cil_tmp2~0; {100#false} is VALID [2022-02-20 18:07:42,600 INFO L272 TraceCheckUtils]: 11: Hoare triple {100#false} call timeShift(); {100#false} is VALID [2022-02-20 18:07:42,600 INFO L290 TraceCheckUtils]: 12: Hoare triple {100#false} assume !(0 != ~pumpRunning~0); {100#false} is VALID [2022-02-20 18:07:42,601 INFO L290 TraceCheckUtils]: 13: Hoare triple {100#false} assume !(0 != ~systemActive~0); {100#false} is VALID [2022-02-20 18:07:42,601 INFO L290 TraceCheckUtils]: 14: Hoare triple {100#false} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret47#1, __utac_acc__Specification2_spec__2_#t~ret48#1, __utac_acc__Specification2_spec__2_~tmp~8#1, __utac_acc__Specification2_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification2_spec__2_~tmp~8#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~1#1; {100#false} is VALID [2022-02-20 18:07:42,601 INFO L272 TraceCheckUtils]: 15: Hoare triple {100#false} call __utac_acc__Specification2_spec__2_#t~ret47#1 := isMethaneLevelCritical(); {99#true} is VALID [2022-02-20 18:07:42,601 INFO L290 TraceCheckUtils]: 16: Hoare triple {99#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~methaneLevelCritical~0;#res := ~retValue_acc~5; {99#true} is VALID [2022-02-20 18:07:42,602 INFO L290 TraceCheckUtils]: 17: Hoare triple {99#true} assume true; {99#true} is VALID [2022-02-20 18:07:42,602 INFO L284 TraceCheckUtils]: 18: Hoare quadruple {99#true} {100#false} #247#return; {100#false} is VALID [2022-02-20 18:07:42,602 INFO L290 TraceCheckUtils]: 19: Hoare triple {100#false} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret47#1 && __utac_acc__Specification2_spec__2_#t~ret47#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~8#1 := __utac_acc__Specification2_spec__2_#t~ret47#1;havoc __utac_acc__Specification2_spec__2_#t~ret47#1; {100#false} is VALID [2022-02-20 18:07:42,602 INFO L290 TraceCheckUtils]: 20: Hoare triple {100#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~8#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~10#1;havoc isPumpRunning_~retValue_acc~10#1;isPumpRunning_~retValue_acc~10#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~10#1; {100#false} is VALID [2022-02-20 18:07:42,603 INFO L290 TraceCheckUtils]: 21: Hoare triple {100#false} __utac_acc__Specification2_spec__2_#t~ret48#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret48#1 && __utac_acc__Specification2_spec__2_#t~ret48#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~1#1 := __utac_acc__Specification2_spec__2_#t~ret48#1;havoc __utac_acc__Specification2_spec__2_#t~ret48#1; {100#false} is VALID [2022-02-20 18:07:42,603 INFO L290 TraceCheckUtils]: 22: Hoare triple {100#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~1#1; {100#false} is VALID [2022-02-20 18:07:42,604 INFO L290 TraceCheckUtils]: 23: Hoare triple {100#false} assume 0 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {100#false} is VALID [2022-02-20 18:07:42,604 INFO L290 TraceCheckUtils]: 24: Hoare triple {100#false} assume !false; {100#false} is VALID [2022-02-20 18:07:42,604 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:07:42,605 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:07:42,605 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [28498372] [2022-02-20 18:07:42,606 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [28498372] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:07:42,606 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:07:42,606 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-02-20 18:07:42,609 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1349634571] [2022-02-20 18:07:42,609 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:07:42,613 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2022-02-20 18:07:42,615 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:07:42,617 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:07:42,655 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 25 edges. 25 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:42,655 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-02-20 18:07:42,656 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:07:42,672 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-02-20 18:07:42,673 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-02-20 18:07:42,677 INFO L87 Difference]: Start difference. First operand has 96 states, 72 states have (on average 1.375) internal successors, (99), 80 states have internal predecessors, (99), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 12 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:07:42,798 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:42,799 INFO L93 Difference]: Finished difference Result 183 states and 248 transitions. [2022-02-20 18:07:42,799 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-02-20 18:07:42,799 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2022-02-20 18:07:42,800 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:07:42,801 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:07:42,817 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 248 transitions. [2022-02-20 18:07:42,817 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:07:42,825 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 248 transitions. [2022-02-20 18:07:42,825 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states and 248 transitions. [2022-02-20 18:07:43,005 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 248 edges. 248 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:43,013 INFO L225 Difference]: With dead ends: 183 [2022-02-20 18:07:43,013 INFO L226 Difference]: Without dead ends: 87 [2022-02-20 18:07:43,015 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-02-20 18:07:43,018 INFO L933 BasicCegarLoop]: 121 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 121 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:07:43,018 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 121 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:07:43,029 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 87 states. [2022-02-20 18:07:43,041 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 87 to 87. [2022-02-20 18:07:43,041 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:07:43,042 INFO L82 GeneralOperation]: Start isEquivalent. First operand 87 states. Second operand has 87 states, 65 states have (on average 1.3076923076923077) internal successors, (85), 72 states have internal predecessors, (85), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 11 states have call predecessors, (13), 13 states have call successors, (13) [2022-02-20 18:07:43,043 INFO L74 IsIncluded]: Start isIncluded. First operand 87 states. Second operand has 87 states, 65 states have (on average 1.3076923076923077) internal successors, (85), 72 states have internal predecessors, (85), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 11 states have call predecessors, (13), 13 states have call successors, (13) [2022-02-20 18:07:43,044 INFO L87 Difference]: Start difference. First operand 87 states. Second operand has 87 states, 65 states have (on average 1.3076923076923077) internal successors, (85), 72 states have internal predecessors, (85), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 11 states have call predecessors, (13), 13 states have call successors, (13) [2022-02-20 18:07:43,048 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:43,048 INFO L93 Difference]: Finished difference Result 87 states and 112 transitions. [2022-02-20 18:07:43,048 INFO L276 IsEmpty]: Start isEmpty. Operand 87 states and 112 transitions. [2022-02-20 18:07:43,049 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:43,049 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:43,050 INFO L74 IsIncluded]: Start isIncluded. First operand has 87 states, 65 states have (on average 1.3076923076923077) internal successors, (85), 72 states have internal predecessors, (85), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 11 states have call predecessors, (13), 13 states have call successors, (13) Second operand 87 states. [2022-02-20 18:07:43,050 INFO L87 Difference]: Start difference. First operand has 87 states, 65 states have (on average 1.3076923076923077) internal successors, (85), 72 states have internal predecessors, (85), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 11 states have call predecessors, (13), 13 states have call successors, (13) Second operand 87 states. [2022-02-20 18:07:43,054 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:43,054 INFO L93 Difference]: Finished difference Result 87 states and 112 transitions. [2022-02-20 18:07:43,054 INFO L276 IsEmpty]: Start isEmpty. Operand 87 states and 112 transitions. [2022-02-20 18:07:43,055 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:43,055 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:43,055 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:07:43,056 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:07:43,056 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 87 states, 65 states have (on average 1.3076923076923077) internal successors, (85), 72 states have internal predecessors, (85), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 11 states have call predecessors, (13), 13 states have call successors, (13) [2022-02-20 18:07:43,059 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 87 states to 87 states and 112 transitions. [2022-02-20 18:07:43,060 INFO L78 Accepts]: Start accepts. Automaton has 87 states and 112 transitions. Word has length 25 [2022-02-20 18:07:43,060 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:07:43,060 INFO L470 AbstractCegarLoop]: Abstraction has 87 states and 112 transitions. [2022-02-20 18:07:43,060 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:07:43,061 INFO L276 IsEmpty]: Start isEmpty. Operand 87 states and 112 transitions. [2022-02-20 18:07:43,062 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-02-20 18:07:43,062 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:07:43,062 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:07:43,062 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-02-20 18:07:43,062 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:07:43,063 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:07:43,063 INFO L85 PathProgramCache]: Analyzing trace with hash -1552792509, now seen corresponding path program 1 times [2022-02-20 18:07:43,063 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:07:43,063 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [71614456] [2022-02-20 18:07:43,063 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:07:43,063 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:07:43,084 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:43,111 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-02-20 18:07:43,113 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:43,115 INFO L290 TraceCheckUtils]: 0: Hoare triple {671#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~methaneLevelCritical~0;#res := ~retValue_acc~5; {671#true} is VALID [2022-02-20 18:07:43,115 INFO L290 TraceCheckUtils]: 1: Hoare triple {671#true} assume true; {671#true} is VALID [2022-02-20 18:07:43,116 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {671#true} {672#false} #247#return; {672#false} is VALID [2022-02-20 18:07:43,116 INFO L290 TraceCheckUtils]: 0: Hoare triple {671#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(13, 16);call #Ultimate.allocInit(7, 17);call write~init~int(44, 17, 0, 1);call write~init~int(77, 17, 1, 1);call write~init~int(101, 17, 2, 1);call write~init~int(116, 17, 3, 1);call write~init~int(104, 17, 4, 1);call write~init~int(58, 17, 5, 1);call write~init~int(0, 17, 6, 1);call #Ultimate.allocInit(5, 18);call write~init~int(67, 18, 0, 1);call write~init~int(82, 18, 1, 1);call write~init~int(73, 18, 2, 1);call write~init~int(84, 18, 3, 1);call write~init~int(0, 18, 4, 1);call #Ultimate.allocInit(3, 19);call write~init~int(79, 19, 0, 1);call write~init~int(75, 19, 1, 1);call write~init~int(0, 19, 2, 1);call #Ultimate.allocInit(2, 20);call write~init~int(41, 20, 0, 1);call write~init~int(0, 20, 1, 1);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~methAndRunningLastTime~0 := 0; {671#true} is VALID [2022-02-20 18:07:43,116 INFO L290 TraceCheckUtils]: 1: Hoare triple {671#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret33#1, main_~retValue_acc~8#1, main_~tmp~3#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~3#1;assume { :begin_inline_select_helpers } true; {671#true} is VALID [2022-02-20 18:07:43,116 INFO L290 TraceCheckUtils]: 2: Hoare triple {671#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {671#true} is VALID [2022-02-20 18:07:43,116 INFO L290 TraceCheckUtils]: 3: Hoare triple {671#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {671#true} is VALID [2022-02-20 18:07:43,117 INFO L290 TraceCheckUtils]: 4: Hoare triple {671#true} main_#t~ret33#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret33#1 && main_#t~ret33#1 <= 2147483647;main_~tmp~3#1 := main_#t~ret33#1;havoc main_#t~ret33#1; {671#true} is VALID [2022-02-20 18:07:43,117 INFO L290 TraceCheckUtils]: 5: Hoare triple {671#true} assume 0 != main_~tmp~3#1;assume { :begin_inline_setup } true; {671#true} is VALID [2022-02-20 18:07:43,117 INFO L290 TraceCheckUtils]: 6: Hoare triple {671#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0; {671#true} is VALID [2022-02-20 18:07:43,117 INFO L290 TraceCheckUtils]: 7: Hoare triple {671#true} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet49#1, test_#t~nondet50#1, test_#t~nondet51#1, test_#t~nondet52#1, test_~splverifierCounter~0#1, test_~tmp~9#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~9#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {673#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} is VALID [2022-02-20 18:07:43,118 INFO L290 TraceCheckUtils]: 8: Hoare triple {673#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} assume !false; {673#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} is VALID [2022-02-20 18:07:43,118 INFO L290 TraceCheckUtils]: 9: Hoare triple {673#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} assume !(test_~splverifierCounter~0#1 < 4); {672#false} is VALID [2022-02-20 18:07:43,119 INFO L272 TraceCheckUtils]: 10: Hoare triple {672#false} call cleanup(); {672#false} is VALID [2022-02-20 18:07:43,119 INFO L290 TraceCheckUtils]: 11: Hoare triple {672#false} havoc ~i~0;havoc ~__cil_tmp2~0; {672#false} is VALID [2022-02-20 18:07:43,119 INFO L272 TraceCheckUtils]: 12: Hoare triple {672#false} call timeShift(); {672#false} is VALID [2022-02-20 18:07:43,119 INFO L290 TraceCheckUtils]: 13: Hoare triple {672#false} assume !(0 != ~pumpRunning~0); {672#false} is VALID [2022-02-20 18:07:43,119 INFO L290 TraceCheckUtils]: 14: Hoare triple {672#false} assume !(0 != ~systemActive~0); {672#false} is VALID [2022-02-20 18:07:43,119 INFO L290 TraceCheckUtils]: 15: Hoare triple {672#false} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret47#1, __utac_acc__Specification2_spec__2_#t~ret48#1, __utac_acc__Specification2_spec__2_~tmp~8#1, __utac_acc__Specification2_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification2_spec__2_~tmp~8#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~1#1; {672#false} is VALID [2022-02-20 18:07:43,120 INFO L272 TraceCheckUtils]: 16: Hoare triple {672#false} call __utac_acc__Specification2_spec__2_#t~ret47#1 := isMethaneLevelCritical(); {671#true} is VALID [2022-02-20 18:07:43,120 INFO L290 TraceCheckUtils]: 17: Hoare triple {671#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~methaneLevelCritical~0;#res := ~retValue_acc~5; {671#true} is VALID [2022-02-20 18:07:43,120 INFO L290 TraceCheckUtils]: 18: Hoare triple {671#true} assume true; {671#true} is VALID [2022-02-20 18:07:43,120 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {671#true} {672#false} #247#return; {672#false} is VALID [2022-02-20 18:07:43,120 INFO L290 TraceCheckUtils]: 20: Hoare triple {672#false} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret47#1 && __utac_acc__Specification2_spec__2_#t~ret47#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~8#1 := __utac_acc__Specification2_spec__2_#t~ret47#1;havoc __utac_acc__Specification2_spec__2_#t~ret47#1; {672#false} is VALID [2022-02-20 18:07:43,120 INFO L290 TraceCheckUtils]: 21: Hoare triple {672#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~8#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~10#1;havoc isPumpRunning_~retValue_acc~10#1;isPumpRunning_~retValue_acc~10#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~10#1; {672#false} is VALID [2022-02-20 18:07:43,121 INFO L290 TraceCheckUtils]: 22: Hoare triple {672#false} __utac_acc__Specification2_spec__2_#t~ret48#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret48#1 && __utac_acc__Specification2_spec__2_#t~ret48#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~1#1 := __utac_acc__Specification2_spec__2_#t~ret48#1;havoc __utac_acc__Specification2_spec__2_#t~ret48#1; {672#false} is VALID [2022-02-20 18:07:43,121 INFO L290 TraceCheckUtils]: 23: Hoare triple {672#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~1#1; {672#false} is VALID [2022-02-20 18:07:43,121 INFO L290 TraceCheckUtils]: 24: Hoare triple {672#false} assume 0 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {672#false} is VALID [2022-02-20 18:07:43,121 INFO L290 TraceCheckUtils]: 25: Hoare triple {672#false} assume !false; {672#false} is VALID [2022-02-20 18:07:43,121 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:07:43,122 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:07:43,122 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [71614456] [2022-02-20 18:07:43,122 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [71614456] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:07:43,122 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:07:43,122 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-02-20 18:07:43,122 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2130848171] [2022-02-20 18:07:43,123 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:07:43,124 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2022-02-20 18:07:43,124 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:07:43,124 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:07:43,141 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 26 edges. 26 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:43,141 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-02-20 18:07:43,142 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:07:43,142 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-02-20 18:07:43,142 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:07:43,143 INFO L87 Difference]: Start difference. First operand 87 states and 112 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:07:43,219 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:43,219 INFO L93 Difference]: Finished difference Result 138 states and 178 transitions. [2022-02-20 18:07:43,219 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-02-20 18:07:43,219 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2022-02-20 18:07:43,220 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:07:43,220 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:07:43,222 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 178 transitions. [2022-02-20 18:07:43,222 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:07:43,224 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 178 transitions. [2022-02-20 18:07:43,224 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 178 transitions. [2022-02-20 18:07:43,336 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 178 edges. 178 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:43,339 INFO L225 Difference]: With dead ends: 138 [2022-02-20 18:07:43,339 INFO L226 Difference]: Without dead ends: 78 [2022-02-20 18:07:43,340 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:07:43,341 INFO L933 BasicCegarLoop]: 99 mSDtfsCounter, 13 mSDsluCounter, 82 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 181 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:07:43,341 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [16 Valid, 181 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:07:43,342 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 78 states. [2022-02-20 18:07:43,346 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 78 to 78. [2022-02-20 18:07:43,346 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:07:43,346 INFO L82 GeneralOperation]: Start isEquivalent. First operand 78 states. Second operand has 78 states, 59 states have (on average 1.3220338983050848) internal successors, (78), 66 states have internal predecessors, (78), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-02-20 18:07:43,347 INFO L74 IsIncluded]: Start isIncluded. First operand 78 states. Second operand has 78 states, 59 states have (on average 1.3220338983050848) internal successors, (78), 66 states have internal predecessors, (78), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-02-20 18:07:43,347 INFO L87 Difference]: Start difference. First operand 78 states. Second operand has 78 states, 59 states have (on average 1.3220338983050848) internal successors, (78), 66 states have internal predecessors, (78), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-02-20 18:07:43,349 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:43,350 INFO L93 Difference]: Finished difference Result 78 states and 100 transitions. [2022-02-20 18:07:43,350 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 100 transitions. [2022-02-20 18:07:43,350 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:43,350 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:43,351 INFO L74 IsIncluded]: Start isIncluded. First operand has 78 states, 59 states have (on average 1.3220338983050848) internal successors, (78), 66 states have internal predecessors, (78), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) Second operand 78 states. [2022-02-20 18:07:43,351 INFO L87 Difference]: Start difference. First operand has 78 states, 59 states have (on average 1.3220338983050848) internal successors, (78), 66 states have internal predecessors, (78), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) Second operand 78 states. [2022-02-20 18:07:43,353 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:43,353 INFO L93 Difference]: Finished difference Result 78 states and 100 transitions. [2022-02-20 18:07:43,353 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 100 transitions. [2022-02-20 18:07:43,354 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:43,354 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:43,354 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:07:43,354 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:07:43,354 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 78 states, 59 states have (on average 1.3220338983050848) internal successors, (78), 66 states have internal predecessors, (78), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-02-20 18:07:43,357 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 78 states to 78 states and 100 transitions. [2022-02-20 18:07:43,357 INFO L78 Accepts]: Start accepts. Automaton has 78 states and 100 transitions. Word has length 26 [2022-02-20 18:07:43,357 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:07:43,357 INFO L470 AbstractCegarLoop]: Abstraction has 78 states and 100 transitions. [2022-02-20 18:07:43,358 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:07:43,358 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 100 transitions. [2022-02-20 18:07:43,359 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-02-20 18:07:43,359 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:07:43,359 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:07:43,359 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-02-20 18:07:43,359 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:07:43,360 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:07:43,360 INFO L85 PathProgramCache]: Analyzing trace with hash 877193570, now seen corresponding path program 1 times [2022-02-20 18:07:43,360 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:07:43,360 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1152799072] [2022-02-20 18:07:43,360 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:07:43,360 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:07:43,382 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:43,406 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-02-20 18:07:43,408 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:43,410 INFO L290 TraceCheckUtils]: 0: Hoare triple {1146#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~methaneLevelCritical~0;#res := ~retValue_acc~5; {1146#true} is VALID [2022-02-20 18:07:43,410 INFO L290 TraceCheckUtils]: 1: Hoare triple {1146#true} assume true; {1146#true} is VALID [2022-02-20 18:07:43,410 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1146#true} {1147#false} #247#return; {1147#false} is VALID [2022-02-20 18:07:43,412 INFO L290 TraceCheckUtils]: 0: Hoare triple {1146#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(13, 16);call #Ultimate.allocInit(7, 17);call write~init~int(44, 17, 0, 1);call write~init~int(77, 17, 1, 1);call write~init~int(101, 17, 2, 1);call write~init~int(116, 17, 3, 1);call write~init~int(104, 17, 4, 1);call write~init~int(58, 17, 5, 1);call write~init~int(0, 17, 6, 1);call #Ultimate.allocInit(5, 18);call write~init~int(67, 18, 0, 1);call write~init~int(82, 18, 1, 1);call write~init~int(73, 18, 2, 1);call write~init~int(84, 18, 3, 1);call write~init~int(0, 18, 4, 1);call #Ultimate.allocInit(3, 19);call write~init~int(79, 19, 0, 1);call write~init~int(75, 19, 1, 1);call write~init~int(0, 19, 2, 1);call #Ultimate.allocInit(2, 20);call write~init~int(41, 20, 0, 1);call write~init~int(0, 20, 1, 1);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~methAndRunningLastTime~0 := 0; {1148#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:43,412 INFO L290 TraceCheckUtils]: 1: Hoare triple {1148#(= 1 ~systemActive~0)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret33#1, main_~retValue_acc~8#1, main_~tmp~3#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~3#1;assume { :begin_inline_select_helpers } true; {1148#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:43,413 INFO L290 TraceCheckUtils]: 2: Hoare triple {1148#(= 1 ~systemActive~0)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {1148#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:43,413 INFO L290 TraceCheckUtils]: 3: Hoare triple {1148#(= 1 ~systemActive~0)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {1148#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:43,414 INFO L290 TraceCheckUtils]: 4: Hoare triple {1148#(= 1 ~systemActive~0)} main_#t~ret33#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret33#1 && main_#t~ret33#1 <= 2147483647;main_~tmp~3#1 := main_#t~ret33#1;havoc main_#t~ret33#1; {1148#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:43,414 INFO L290 TraceCheckUtils]: 5: Hoare triple {1148#(= 1 ~systemActive~0)} assume 0 != main_~tmp~3#1;assume { :begin_inline_setup } true; {1148#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:43,414 INFO L290 TraceCheckUtils]: 6: Hoare triple {1148#(= 1 ~systemActive~0)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0; {1148#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:43,415 INFO L290 TraceCheckUtils]: 7: Hoare triple {1148#(= 1 ~systemActive~0)} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet49#1, test_#t~nondet50#1, test_#t~nondet51#1, test_#t~nondet52#1, test_~splverifierCounter~0#1, test_~tmp~9#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~9#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {1148#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:43,415 INFO L290 TraceCheckUtils]: 8: Hoare triple {1148#(= 1 ~systemActive~0)} assume !false; {1148#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:43,416 INFO L290 TraceCheckUtils]: 9: Hoare triple {1148#(= 1 ~systemActive~0)} assume test_~splverifierCounter~0#1 < 4; {1148#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:43,416 INFO L290 TraceCheckUtils]: 10: Hoare triple {1148#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet49#1 && test_#t~nondet49#1 <= 2147483647;test_~tmp~9#1 := test_#t~nondet49#1;havoc test_#t~nondet49#1; {1148#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:43,417 INFO L290 TraceCheckUtils]: 11: Hoare triple {1148#(= 1 ~systemActive~0)} assume !(0 != test_~tmp~9#1); {1148#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:43,417 INFO L290 TraceCheckUtils]: 12: Hoare triple {1148#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet50#1 && test_#t~nondet50#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet50#1;havoc test_#t~nondet50#1; {1148#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:43,417 INFO L290 TraceCheckUtils]: 13: Hoare triple {1148#(= 1 ~systemActive~0)} assume !(0 != test_~tmp___0~2#1); {1148#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:43,418 INFO L290 TraceCheckUtils]: 14: Hoare triple {1148#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet51#1 && test_#t~nondet51#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet51#1;havoc test_#t~nondet51#1; {1148#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:43,418 INFO L290 TraceCheckUtils]: 15: Hoare triple {1148#(= 1 ~systemActive~0)} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet52#1 && test_#t~nondet52#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet52#1;havoc test_#t~nondet52#1; {1148#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:43,419 INFO L290 TraceCheckUtils]: 16: Hoare triple {1148#(= 1 ~systemActive~0)} assume 0 != test_~tmp___1~0#1; {1148#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:43,419 INFO L272 TraceCheckUtils]: 17: Hoare triple {1148#(= 1 ~systemActive~0)} call timeShift(); {1148#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:43,420 INFO L290 TraceCheckUtils]: 18: Hoare triple {1148#(= 1 ~systemActive~0)} assume !(0 != ~pumpRunning~0); {1148#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:43,420 INFO L290 TraceCheckUtils]: 19: Hoare triple {1148#(= 1 ~systemActive~0)} assume !(0 != ~systemActive~0); {1147#false} is VALID [2022-02-20 18:07:43,420 INFO L290 TraceCheckUtils]: 20: Hoare triple {1147#false} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret47#1, __utac_acc__Specification2_spec__2_#t~ret48#1, __utac_acc__Specification2_spec__2_~tmp~8#1, __utac_acc__Specification2_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification2_spec__2_~tmp~8#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~1#1; {1147#false} is VALID [2022-02-20 18:07:43,420 INFO L272 TraceCheckUtils]: 21: Hoare triple {1147#false} call __utac_acc__Specification2_spec__2_#t~ret47#1 := isMethaneLevelCritical(); {1146#true} is VALID [2022-02-20 18:07:43,420 INFO L290 TraceCheckUtils]: 22: Hoare triple {1146#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~methaneLevelCritical~0;#res := ~retValue_acc~5; {1146#true} is VALID [2022-02-20 18:07:43,421 INFO L290 TraceCheckUtils]: 23: Hoare triple {1146#true} assume true; {1146#true} is VALID [2022-02-20 18:07:43,421 INFO L284 TraceCheckUtils]: 24: Hoare quadruple {1146#true} {1147#false} #247#return; {1147#false} is VALID [2022-02-20 18:07:43,421 INFO L290 TraceCheckUtils]: 25: Hoare triple {1147#false} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret47#1 && __utac_acc__Specification2_spec__2_#t~ret47#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~8#1 := __utac_acc__Specification2_spec__2_#t~ret47#1;havoc __utac_acc__Specification2_spec__2_#t~ret47#1; {1147#false} is VALID [2022-02-20 18:07:43,421 INFO L290 TraceCheckUtils]: 26: Hoare triple {1147#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~8#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~10#1;havoc isPumpRunning_~retValue_acc~10#1;isPumpRunning_~retValue_acc~10#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~10#1; {1147#false} is VALID [2022-02-20 18:07:43,421 INFO L290 TraceCheckUtils]: 27: Hoare triple {1147#false} __utac_acc__Specification2_spec__2_#t~ret48#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret48#1 && __utac_acc__Specification2_spec__2_#t~ret48#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~1#1 := __utac_acc__Specification2_spec__2_#t~ret48#1;havoc __utac_acc__Specification2_spec__2_#t~ret48#1; {1147#false} is VALID [2022-02-20 18:07:43,421 INFO L290 TraceCheckUtils]: 28: Hoare triple {1147#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~1#1; {1147#false} is VALID [2022-02-20 18:07:43,422 INFO L290 TraceCheckUtils]: 29: Hoare triple {1147#false} assume 0 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {1147#false} is VALID [2022-02-20 18:07:43,422 INFO L290 TraceCheckUtils]: 30: Hoare triple {1147#false} assume !false; {1147#false} is VALID [2022-02-20 18:07:43,422 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:07:43,422 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:07:43,422 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1152799072] [2022-02-20 18:07:43,423 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1152799072] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:07:43,423 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:07:43,423 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-02-20 18:07:43,423 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1899206259] [2022-02-20 18:07:43,423 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:07:43,424 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31 [2022-02-20 18:07:43,424 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:07:43,424 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:07:43,443 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 31 edges. 31 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:43,443 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-02-20 18:07:43,443 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:07:43,444 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-02-20 18:07:43,444 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:07:43,444 INFO L87 Difference]: Start difference. First operand 78 states and 100 transitions. Second operand has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:07:43,504 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:43,505 INFO L93 Difference]: Finished difference Result 148 states and 193 transitions. [2022-02-20 18:07:43,505 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-02-20 18:07:43,505 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31 [2022-02-20 18:07:43,505 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:07:43,506 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:07:43,507 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 193 transitions. [2022-02-20 18:07:43,508 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:07:43,510 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 193 transitions. [2022-02-20 18:07:43,510 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 193 transitions. [2022-02-20 18:07:43,660 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 193 edges. 193 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:43,661 INFO L225 Difference]: With dead ends: 148 [2022-02-20 18:07:43,661 INFO L226 Difference]: Without dead ends: 78 [2022-02-20 18:07:43,662 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:07:43,663 INFO L933 BasicCegarLoop]: 98 mSDtfsCounter, 79 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 79 SdHoareTripleChecker+Valid, 98 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:07:43,663 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [79 Valid, 98 Invalid, 2 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:07:43,664 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 78 states. [2022-02-20 18:07:43,668 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 78 to 78. [2022-02-20 18:07:43,668 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:07:43,669 INFO L82 GeneralOperation]: Start isEquivalent. First operand 78 states. Second operand has 78 states, 59 states have (on average 1.305084745762712) internal successors, (77), 66 states have internal predecessors, (77), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-02-20 18:07:43,669 INFO L74 IsIncluded]: Start isIncluded. First operand 78 states. Second operand has 78 states, 59 states have (on average 1.305084745762712) internal successors, (77), 66 states have internal predecessors, (77), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-02-20 18:07:43,669 INFO L87 Difference]: Start difference. First operand 78 states. Second operand has 78 states, 59 states have (on average 1.305084745762712) internal successors, (77), 66 states have internal predecessors, (77), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-02-20 18:07:43,671 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:43,672 INFO L93 Difference]: Finished difference Result 78 states and 99 transitions. [2022-02-20 18:07:43,672 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 99 transitions. [2022-02-20 18:07:43,672 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:43,672 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:43,673 INFO L74 IsIncluded]: Start isIncluded. First operand has 78 states, 59 states have (on average 1.305084745762712) internal successors, (77), 66 states have internal predecessors, (77), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) Second operand 78 states. [2022-02-20 18:07:43,673 INFO L87 Difference]: Start difference. First operand has 78 states, 59 states have (on average 1.305084745762712) internal successors, (77), 66 states have internal predecessors, (77), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) Second operand 78 states. [2022-02-20 18:07:43,675 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:43,675 INFO L93 Difference]: Finished difference Result 78 states and 99 transitions. [2022-02-20 18:07:43,675 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 99 transitions. [2022-02-20 18:07:43,676 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:43,676 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:43,676 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:07:43,676 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:07:43,677 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 78 states, 59 states have (on average 1.305084745762712) internal successors, (77), 66 states have internal predecessors, (77), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-02-20 18:07:43,679 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 78 states to 78 states and 99 transitions. [2022-02-20 18:07:43,679 INFO L78 Accepts]: Start accepts. Automaton has 78 states and 99 transitions. Word has length 31 [2022-02-20 18:07:43,679 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:07:43,679 INFO L470 AbstractCegarLoop]: Abstraction has 78 states and 99 transitions. [2022-02-20 18:07:43,680 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:07:43,680 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 99 transitions. [2022-02-20 18:07:43,680 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-02-20 18:07:43,680 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:07:43,681 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:07:43,681 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-02-20 18:07:43,681 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:07:43,681 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:07:43,682 INFO L85 PathProgramCache]: Analyzing trace with hash -100681773, now seen corresponding path program 1 times [2022-02-20 18:07:43,682 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:07:43,682 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1923198470] [2022-02-20 18:07:43,682 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:07:43,682 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:07:43,712 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:43,738 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-02-20 18:07:43,740 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:43,748 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-02-20 18:07:43,749 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:43,751 INFO L290 TraceCheckUtils]: 0: Hoare triple {1633#true} assume true; {1633#true} is VALID [2022-02-20 18:07:43,752 INFO L284 TraceCheckUtils]: 1: Hoare quadruple {1633#true} {1647#(not (= |old(~pumpRunning~0)| 0))} #265#return; {1647#(not (= |old(~pumpRunning~0)| 0))} is VALID [2022-02-20 18:07:43,752 INFO L290 TraceCheckUtils]: 0: Hoare triple {1646#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~4#1; {1646#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:07:43,753 INFO L290 TraceCheckUtils]: 1: Hoare triple {1646#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 == ~pumpRunning~0); {1647#(not (= |old(~pumpRunning~0)| 0))} is VALID [2022-02-20 18:07:43,753 INFO L272 TraceCheckUtils]: 2: Hoare triple {1647#(not (= |old(~pumpRunning~0)| 0))} call processEnvironment__wrappee__base(); {1633#true} is VALID [2022-02-20 18:07:43,753 INFO L290 TraceCheckUtils]: 3: Hoare triple {1633#true} assume true; {1633#true} is VALID [2022-02-20 18:07:43,753 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {1633#true} {1647#(not (= |old(~pumpRunning~0)| 0))} #265#return; {1647#(not (= |old(~pumpRunning~0)| 0))} is VALID [2022-02-20 18:07:43,754 INFO L290 TraceCheckUtils]: 5: Hoare triple {1647#(not (= |old(~pumpRunning~0)| 0))} assume true; {1647#(not (= |old(~pumpRunning~0)| 0))} is VALID [2022-02-20 18:07:43,755 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {1647#(not (= |old(~pumpRunning~0)| 0))} {1635#(= ~pumpRunning~0 0)} #245#return; {1634#false} is VALID [2022-02-20 18:07:43,755 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2022-02-20 18:07:43,756 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:43,758 INFO L290 TraceCheckUtils]: 0: Hoare triple {1633#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~methaneLevelCritical~0;#res := ~retValue_acc~5; {1633#true} is VALID [2022-02-20 18:07:43,758 INFO L290 TraceCheckUtils]: 1: Hoare triple {1633#true} assume true; {1633#true} is VALID [2022-02-20 18:07:43,758 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1633#true} {1634#false} #247#return; {1634#false} is VALID [2022-02-20 18:07:43,758 INFO L290 TraceCheckUtils]: 0: Hoare triple {1633#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(13, 16);call #Ultimate.allocInit(7, 17);call write~init~int(44, 17, 0, 1);call write~init~int(77, 17, 1, 1);call write~init~int(101, 17, 2, 1);call write~init~int(116, 17, 3, 1);call write~init~int(104, 17, 4, 1);call write~init~int(58, 17, 5, 1);call write~init~int(0, 17, 6, 1);call #Ultimate.allocInit(5, 18);call write~init~int(67, 18, 0, 1);call write~init~int(82, 18, 1, 1);call write~init~int(73, 18, 2, 1);call write~init~int(84, 18, 3, 1);call write~init~int(0, 18, 4, 1);call #Ultimate.allocInit(3, 19);call write~init~int(79, 19, 0, 1);call write~init~int(75, 19, 1, 1);call write~init~int(0, 19, 2, 1);call #Ultimate.allocInit(2, 20);call write~init~int(41, 20, 0, 1);call write~init~int(0, 20, 1, 1);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~methAndRunningLastTime~0 := 0; {1635#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:43,759 INFO L290 TraceCheckUtils]: 1: Hoare triple {1635#(= ~pumpRunning~0 0)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret33#1, main_~retValue_acc~8#1, main_~tmp~3#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~3#1;assume { :begin_inline_select_helpers } true; {1635#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:43,759 INFO L290 TraceCheckUtils]: 2: Hoare triple {1635#(= ~pumpRunning~0 0)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {1635#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:43,760 INFO L290 TraceCheckUtils]: 3: Hoare triple {1635#(= ~pumpRunning~0 0)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {1635#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:43,760 INFO L290 TraceCheckUtils]: 4: Hoare triple {1635#(= ~pumpRunning~0 0)} main_#t~ret33#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret33#1 && main_#t~ret33#1 <= 2147483647;main_~tmp~3#1 := main_#t~ret33#1;havoc main_#t~ret33#1; {1635#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:43,760 INFO L290 TraceCheckUtils]: 5: Hoare triple {1635#(= ~pumpRunning~0 0)} assume 0 != main_~tmp~3#1;assume { :begin_inline_setup } true; {1635#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:43,761 INFO L290 TraceCheckUtils]: 6: Hoare triple {1635#(= ~pumpRunning~0 0)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0; {1635#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:43,761 INFO L290 TraceCheckUtils]: 7: Hoare triple {1635#(= ~pumpRunning~0 0)} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet49#1, test_#t~nondet50#1, test_#t~nondet51#1, test_#t~nondet52#1, test_~splverifierCounter~0#1, test_~tmp~9#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~9#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {1635#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:43,761 INFO L290 TraceCheckUtils]: 8: Hoare triple {1635#(= ~pumpRunning~0 0)} assume !false; {1635#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:43,762 INFO L290 TraceCheckUtils]: 9: Hoare triple {1635#(= ~pumpRunning~0 0)} assume test_~splverifierCounter~0#1 < 4; {1635#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:43,762 INFO L290 TraceCheckUtils]: 10: Hoare triple {1635#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet49#1 && test_#t~nondet49#1 <= 2147483647;test_~tmp~9#1 := test_#t~nondet49#1;havoc test_#t~nondet49#1; {1635#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:43,763 INFO L290 TraceCheckUtils]: 11: Hoare triple {1635#(= ~pumpRunning~0 0)} assume !(0 != test_~tmp~9#1); {1635#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:43,763 INFO L290 TraceCheckUtils]: 12: Hoare triple {1635#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet50#1 && test_#t~nondet50#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet50#1;havoc test_#t~nondet50#1; {1635#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:43,763 INFO L290 TraceCheckUtils]: 13: Hoare triple {1635#(= ~pumpRunning~0 0)} assume !(0 != test_~tmp___0~2#1); {1635#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:43,764 INFO L290 TraceCheckUtils]: 14: Hoare triple {1635#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet51#1 && test_#t~nondet51#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet51#1;havoc test_#t~nondet51#1; {1635#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:43,764 INFO L290 TraceCheckUtils]: 15: Hoare triple {1635#(= ~pumpRunning~0 0)} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet52#1 && test_#t~nondet52#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet52#1;havoc test_#t~nondet52#1; {1635#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:43,764 INFO L290 TraceCheckUtils]: 16: Hoare triple {1635#(= ~pumpRunning~0 0)} assume 0 != test_~tmp___1~0#1; {1635#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:43,765 INFO L272 TraceCheckUtils]: 17: Hoare triple {1635#(= ~pumpRunning~0 0)} call timeShift(); {1635#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:43,765 INFO L290 TraceCheckUtils]: 18: Hoare triple {1635#(= ~pumpRunning~0 0)} assume !(0 != ~pumpRunning~0); {1635#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:43,766 INFO L290 TraceCheckUtils]: 19: Hoare triple {1635#(= ~pumpRunning~0 0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret35#1, processEnvironment_~tmp~5#1;havoc processEnvironment_~tmp~5#1; {1635#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:43,766 INFO L290 TraceCheckUtils]: 20: Hoare triple {1635#(= ~pumpRunning~0 0)} assume !(0 != ~pumpRunning~0); {1635#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:43,766 INFO L272 TraceCheckUtils]: 21: Hoare triple {1635#(= ~pumpRunning~0 0)} call processEnvironment__wrappee__methaneQuery(); {1646#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:07:43,767 INFO L290 TraceCheckUtils]: 22: Hoare triple {1646#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~4#1; {1646#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:07:43,767 INFO L290 TraceCheckUtils]: 23: Hoare triple {1646#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 == ~pumpRunning~0); {1647#(not (= |old(~pumpRunning~0)| 0))} is VALID [2022-02-20 18:07:43,767 INFO L272 TraceCheckUtils]: 24: Hoare triple {1647#(not (= |old(~pumpRunning~0)| 0))} call processEnvironment__wrappee__base(); {1633#true} is VALID [2022-02-20 18:07:43,768 INFO L290 TraceCheckUtils]: 25: Hoare triple {1633#true} assume true; {1633#true} is VALID [2022-02-20 18:07:43,768 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {1633#true} {1647#(not (= |old(~pumpRunning~0)| 0))} #265#return; {1647#(not (= |old(~pumpRunning~0)| 0))} is VALID [2022-02-20 18:07:43,768 INFO L290 TraceCheckUtils]: 27: Hoare triple {1647#(not (= |old(~pumpRunning~0)| 0))} assume true; {1647#(not (= |old(~pumpRunning~0)| 0))} is VALID [2022-02-20 18:07:43,769 INFO L284 TraceCheckUtils]: 28: Hoare quadruple {1647#(not (= |old(~pumpRunning~0)| 0))} {1635#(= ~pumpRunning~0 0)} #245#return; {1634#false} is VALID [2022-02-20 18:07:43,769 INFO L290 TraceCheckUtils]: 29: Hoare triple {1634#false} assume { :end_inline_processEnvironment } true; {1634#false} is VALID [2022-02-20 18:07:43,769 INFO L290 TraceCheckUtils]: 30: Hoare triple {1634#false} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret47#1, __utac_acc__Specification2_spec__2_#t~ret48#1, __utac_acc__Specification2_spec__2_~tmp~8#1, __utac_acc__Specification2_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification2_spec__2_~tmp~8#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~1#1; {1634#false} is VALID [2022-02-20 18:07:43,769 INFO L272 TraceCheckUtils]: 31: Hoare triple {1634#false} call __utac_acc__Specification2_spec__2_#t~ret47#1 := isMethaneLevelCritical(); {1633#true} is VALID [2022-02-20 18:07:43,769 INFO L290 TraceCheckUtils]: 32: Hoare triple {1633#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~methaneLevelCritical~0;#res := ~retValue_acc~5; {1633#true} is VALID [2022-02-20 18:07:43,770 INFO L290 TraceCheckUtils]: 33: Hoare triple {1633#true} assume true; {1633#true} is VALID [2022-02-20 18:07:43,770 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {1633#true} {1634#false} #247#return; {1634#false} is VALID [2022-02-20 18:07:43,770 INFO L290 TraceCheckUtils]: 35: Hoare triple {1634#false} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret47#1 && __utac_acc__Specification2_spec__2_#t~ret47#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~8#1 := __utac_acc__Specification2_spec__2_#t~ret47#1;havoc __utac_acc__Specification2_spec__2_#t~ret47#1; {1634#false} is VALID [2022-02-20 18:07:43,770 INFO L290 TraceCheckUtils]: 36: Hoare triple {1634#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~8#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~10#1;havoc isPumpRunning_~retValue_acc~10#1;isPumpRunning_~retValue_acc~10#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~10#1; {1634#false} is VALID [2022-02-20 18:07:43,770 INFO L290 TraceCheckUtils]: 37: Hoare triple {1634#false} __utac_acc__Specification2_spec__2_#t~ret48#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret48#1 && __utac_acc__Specification2_spec__2_#t~ret48#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~1#1 := __utac_acc__Specification2_spec__2_#t~ret48#1;havoc __utac_acc__Specification2_spec__2_#t~ret48#1; {1634#false} is VALID [2022-02-20 18:07:43,771 INFO L290 TraceCheckUtils]: 38: Hoare triple {1634#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~1#1; {1634#false} is VALID [2022-02-20 18:07:43,771 INFO L290 TraceCheckUtils]: 39: Hoare triple {1634#false} assume 0 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {1634#false} is VALID [2022-02-20 18:07:43,771 INFO L290 TraceCheckUtils]: 40: Hoare triple {1634#false} assume !false; {1634#false} is VALID [2022-02-20 18:07:43,771 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:07:43,772 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:07:43,772 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1923198470] [2022-02-20 18:07:43,772 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1923198470] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:07:43,772 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:07:43,772 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-02-20 18:07:43,772 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1004795256] [2022-02-20 18:07:43,773 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:07:43,773 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 41 [2022-02-20 18:07:43,773 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:07:43,773 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-02-20 18:07:43,798 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 41 edges. 41 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:43,798 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-02-20 18:07:43,798 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:07:43,799 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-02-20 18:07:43,799 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-02-20 18:07:43,799 INFO L87 Difference]: Start difference. First operand 78 states and 99 transitions. Second operand has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-02-20 18:07:44,202 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:44,202 INFO L93 Difference]: Finished difference Result 229 states and 291 transitions. [2022-02-20 18:07:44,202 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-02-20 18:07:44,203 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 41 [2022-02-20 18:07:44,203 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:07:44,203 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-02-20 18:07:44,206 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 291 transitions. [2022-02-20 18:07:44,207 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-02-20 18:07:44,210 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 291 transitions. [2022-02-20 18:07:44,210 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 291 transitions. [2022-02-20 18:07:44,435 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 291 edges. 291 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:44,438 INFO L225 Difference]: With dead ends: 229 [2022-02-20 18:07:44,439 INFO L226 Difference]: Without dead ends: 159 [2022-02-20 18:07:44,439 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2022-02-20 18:07:44,440 INFO L933 BasicCegarLoop]: 135 mSDtfsCounter, 181 mSDsluCounter, 171 mSDsCounter, 0 mSdLazyCounter, 109 mSolverCounterSat, 58 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 183 SdHoareTripleChecker+Valid, 306 SdHoareTripleChecker+Invalid, 167 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 58 IncrementalHoareTripleChecker+Valid, 109 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-02-20 18:07:44,441 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [183 Valid, 306 Invalid, 167 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [58 Valid, 109 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-02-20 18:07:44,441 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 159 states. [2022-02-20 18:07:44,448 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 159 to 153. [2022-02-20 18:07:44,449 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:07:44,449 INFO L82 GeneralOperation]: Start isEquivalent. First operand 159 states. Second operand has 153 states, 116 states have (on average 1.2672413793103448) internal successors, (147), 124 states have internal predecessors, (147), 18 states have call successors, (18), 15 states have call predecessors, (18), 18 states have return successors, (23), 19 states have call predecessors, (23), 18 states have call successors, (23) [2022-02-20 18:07:44,450 INFO L74 IsIncluded]: Start isIncluded. First operand 159 states. Second operand has 153 states, 116 states have (on average 1.2672413793103448) internal successors, (147), 124 states have internal predecessors, (147), 18 states have call successors, (18), 15 states have call predecessors, (18), 18 states have return successors, (23), 19 states have call predecessors, (23), 18 states have call successors, (23) [2022-02-20 18:07:44,450 INFO L87 Difference]: Start difference. First operand 159 states. Second operand has 153 states, 116 states have (on average 1.2672413793103448) internal successors, (147), 124 states have internal predecessors, (147), 18 states have call successors, (18), 15 states have call predecessors, (18), 18 states have return successors, (23), 19 states have call predecessors, (23), 18 states have call successors, (23) [2022-02-20 18:07:44,454 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:44,454 INFO L93 Difference]: Finished difference Result 159 states and 191 transitions. [2022-02-20 18:07:44,454 INFO L276 IsEmpty]: Start isEmpty. Operand 159 states and 191 transitions. [2022-02-20 18:07:44,454 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:44,454 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:44,455 INFO L74 IsIncluded]: Start isIncluded. First operand has 153 states, 116 states have (on average 1.2672413793103448) internal successors, (147), 124 states have internal predecessors, (147), 18 states have call successors, (18), 15 states have call predecessors, (18), 18 states have return successors, (23), 19 states have call predecessors, (23), 18 states have call successors, (23) Second operand 159 states. [2022-02-20 18:07:44,455 INFO L87 Difference]: Start difference. First operand has 153 states, 116 states have (on average 1.2672413793103448) internal successors, (147), 124 states have internal predecessors, (147), 18 states have call successors, (18), 15 states have call predecessors, (18), 18 states have return successors, (23), 19 states have call predecessors, (23), 18 states have call successors, (23) Second operand 159 states. [2022-02-20 18:07:44,459 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:44,459 INFO L93 Difference]: Finished difference Result 159 states and 191 transitions. [2022-02-20 18:07:44,459 INFO L276 IsEmpty]: Start isEmpty. Operand 159 states and 191 transitions. [2022-02-20 18:07:44,459 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:44,459 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:44,460 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:07:44,460 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:07:44,460 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 153 states, 116 states have (on average 1.2672413793103448) internal successors, (147), 124 states have internal predecessors, (147), 18 states have call successors, (18), 15 states have call predecessors, (18), 18 states have return successors, (23), 19 states have call predecessors, (23), 18 states have call successors, (23) [2022-02-20 18:07:44,463 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 153 states to 153 states and 188 transitions. [2022-02-20 18:07:44,464 INFO L78 Accepts]: Start accepts. Automaton has 153 states and 188 transitions. Word has length 41 [2022-02-20 18:07:44,464 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:07:44,464 INFO L470 AbstractCegarLoop]: Abstraction has 153 states and 188 transitions. [2022-02-20 18:07:44,464 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-02-20 18:07:44,464 INFO L276 IsEmpty]: Start isEmpty. Operand 153 states and 188 transitions. [2022-02-20 18:07:44,465 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2022-02-20 18:07:44,465 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:07:44,465 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:07:44,465 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-02-20 18:07:44,466 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:07:44,466 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:07:44,466 INFO L85 PathProgramCache]: Analyzing trace with hash -1653796005, now seen corresponding path program 1 times [2022-02-20 18:07:44,466 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:07:44,466 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1174737791] [2022-02-20 18:07:44,466 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:07:44,467 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:07:44,485 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:44,516 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-02-20 18:07:44,520 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:44,524 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:07:44,525 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:44,527 INFO L290 TraceCheckUtils]: 0: Hoare triple {2511#true} assume true; {2511#true} is VALID [2022-02-20 18:07:44,527 INFO L284 TraceCheckUtils]: 1: Hoare quadruple {2511#true} {2511#true} #263#return; {2511#true} is VALID [2022-02-20 18:07:44,527 INFO L290 TraceCheckUtils]: 0: Hoare triple {2532#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~4#1; {2511#true} is VALID [2022-02-20 18:07:44,527 INFO L290 TraceCheckUtils]: 1: Hoare triple {2511#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret46#1, isHighWaterLevel_~retValue_acc~11#1, isHighWaterLevel_~tmp~7#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~11#1;havoc isHighWaterLevel_~tmp~7#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~7#1;havoc isHighWaterSensorDry_~retValue_acc~7#1; {2511#true} is VALID [2022-02-20 18:07:44,528 INFO L290 TraceCheckUtils]: 2: Hoare triple {2511#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~7#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~7#1; {2511#true} is VALID [2022-02-20 18:07:44,528 INFO L290 TraceCheckUtils]: 3: Hoare triple {2511#true} isHighWaterLevel_#t~ret46#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret46#1 && isHighWaterLevel_#t~ret46#1 <= 2147483647;isHighWaterLevel_~tmp~7#1 := isHighWaterLevel_#t~ret46#1;havoc isHighWaterLevel_#t~ret46#1; {2511#true} is VALID [2022-02-20 18:07:44,528 INFO L290 TraceCheckUtils]: 4: Hoare triple {2511#true} assume 0 != isHighWaterLevel_~tmp~7#1;isHighWaterLevel_~tmp___0~0#1 := 0; {2511#true} is VALID [2022-02-20 18:07:44,528 INFO L290 TraceCheckUtils]: 5: Hoare triple {2511#true} isHighWaterLevel_~retValue_acc~11#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~11#1; {2511#true} is VALID [2022-02-20 18:07:44,528 INFO L290 TraceCheckUtils]: 6: Hoare triple {2511#true} #t~ret34#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret34#1 && #t~ret34#1 <= 2147483647;~tmp~4#1 := #t~ret34#1;havoc #t~ret34#1; {2511#true} is VALID [2022-02-20 18:07:44,528 INFO L290 TraceCheckUtils]: 7: Hoare triple {2511#true} assume !(0 != ~tmp~4#1); {2511#true} is VALID [2022-02-20 18:07:44,529 INFO L272 TraceCheckUtils]: 8: Hoare triple {2511#true} call processEnvironment__wrappee__base(); {2511#true} is VALID [2022-02-20 18:07:44,529 INFO L290 TraceCheckUtils]: 9: Hoare triple {2511#true} assume true; {2511#true} is VALID [2022-02-20 18:07:44,529 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {2511#true} {2511#true} #263#return; {2511#true} is VALID [2022-02-20 18:07:44,529 INFO L290 TraceCheckUtils]: 11: Hoare triple {2511#true} assume true; {2511#true} is VALID [2022-02-20 18:07:44,529 INFO L284 TraceCheckUtils]: 12: Hoare quadruple {2511#true} {2513#(= ~methaneLevelCritical~0 0)} #245#return; {2513#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:07:44,530 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 37 [2022-02-20 18:07:44,531 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:44,538 INFO L290 TraceCheckUtils]: 0: Hoare triple {2511#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~methaneLevelCritical~0;#res := ~retValue_acc~5; {2535#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:44,538 INFO L290 TraceCheckUtils]: 1: Hoare triple {2535#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} assume true; {2535#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:44,539 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {2535#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} {2513#(= ~methaneLevelCritical~0 0)} #247#return; {2530#(= |timeShift___utac_acc__Specification2_spec__2_#t~ret47#1| 0)} is VALID [2022-02-20 18:07:44,539 INFO L290 TraceCheckUtils]: 0: Hoare triple {2511#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(13, 16);call #Ultimate.allocInit(7, 17);call write~init~int(44, 17, 0, 1);call write~init~int(77, 17, 1, 1);call write~init~int(101, 17, 2, 1);call write~init~int(116, 17, 3, 1);call write~init~int(104, 17, 4, 1);call write~init~int(58, 17, 5, 1);call write~init~int(0, 17, 6, 1);call #Ultimate.allocInit(5, 18);call write~init~int(67, 18, 0, 1);call write~init~int(82, 18, 1, 1);call write~init~int(73, 18, 2, 1);call write~init~int(84, 18, 3, 1);call write~init~int(0, 18, 4, 1);call #Ultimate.allocInit(3, 19);call write~init~int(79, 19, 0, 1);call write~init~int(75, 19, 1, 1);call write~init~int(0, 19, 2, 1);call #Ultimate.allocInit(2, 20);call write~init~int(41, 20, 0, 1);call write~init~int(0, 20, 1, 1);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~methAndRunningLastTime~0 := 0; {2513#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:07:44,540 INFO L290 TraceCheckUtils]: 1: Hoare triple {2513#(= ~methaneLevelCritical~0 0)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret33#1, main_~retValue_acc~8#1, main_~tmp~3#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~3#1;assume { :begin_inline_select_helpers } true; {2513#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:07:44,540 INFO L290 TraceCheckUtils]: 2: Hoare triple {2513#(= ~methaneLevelCritical~0 0)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {2513#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:07:44,540 INFO L290 TraceCheckUtils]: 3: Hoare triple {2513#(= ~methaneLevelCritical~0 0)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {2513#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:07:44,540 INFO L290 TraceCheckUtils]: 4: Hoare triple {2513#(= ~methaneLevelCritical~0 0)} main_#t~ret33#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret33#1 && main_#t~ret33#1 <= 2147483647;main_~tmp~3#1 := main_#t~ret33#1;havoc main_#t~ret33#1; {2513#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:07:44,541 INFO L290 TraceCheckUtils]: 5: Hoare triple {2513#(= ~methaneLevelCritical~0 0)} assume 0 != main_~tmp~3#1;assume { :begin_inline_setup } true; {2513#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:07:44,541 INFO L290 TraceCheckUtils]: 6: Hoare triple {2513#(= ~methaneLevelCritical~0 0)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0; {2513#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:07:44,541 INFO L290 TraceCheckUtils]: 7: Hoare triple {2513#(= ~methaneLevelCritical~0 0)} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet49#1, test_#t~nondet50#1, test_#t~nondet51#1, test_#t~nondet52#1, test_~splverifierCounter~0#1, test_~tmp~9#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~9#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {2513#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:07:44,542 INFO L290 TraceCheckUtils]: 8: Hoare triple {2513#(= ~methaneLevelCritical~0 0)} assume !false; {2513#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:07:44,542 INFO L290 TraceCheckUtils]: 9: Hoare triple {2513#(= ~methaneLevelCritical~0 0)} assume test_~splverifierCounter~0#1 < 4; {2513#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:07:44,542 INFO L290 TraceCheckUtils]: 10: Hoare triple {2513#(= ~methaneLevelCritical~0 0)} assume -2147483648 <= test_#t~nondet49#1 && test_#t~nondet49#1 <= 2147483647;test_~tmp~9#1 := test_#t~nondet49#1;havoc test_#t~nondet49#1; {2513#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:07:44,543 INFO L290 TraceCheckUtils]: 11: Hoare triple {2513#(= ~methaneLevelCritical~0 0)} assume !(0 != test_~tmp~9#1); {2513#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:07:44,543 INFO L290 TraceCheckUtils]: 12: Hoare triple {2513#(= ~methaneLevelCritical~0 0)} assume -2147483648 <= test_#t~nondet50#1 && test_#t~nondet50#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet50#1;havoc test_#t~nondet50#1; {2513#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:07:44,543 INFO L290 TraceCheckUtils]: 13: Hoare triple {2513#(= ~methaneLevelCritical~0 0)} assume !(0 != test_~tmp___0~2#1); {2513#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:07:44,544 INFO L290 TraceCheckUtils]: 14: Hoare triple {2513#(= ~methaneLevelCritical~0 0)} assume -2147483648 <= test_#t~nondet51#1 && test_#t~nondet51#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet51#1;havoc test_#t~nondet51#1; {2513#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:07:44,544 INFO L290 TraceCheckUtils]: 15: Hoare triple {2513#(= ~methaneLevelCritical~0 0)} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet52#1 && test_#t~nondet52#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet52#1;havoc test_#t~nondet52#1; {2513#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:07:44,544 INFO L290 TraceCheckUtils]: 16: Hoare triple {2513#(= ~methaneLevelCritical~0 0)} assume 0 != test_~tmp___1~0#1; {2513#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:07:44,545 INFO L272 TraceCheckUtils]: 17: Hoare triple {2513#(= ~methaneLevelCritical~0 0)} call timeShift(); {2513#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:07:44,545 INFO L290 TraceCheckUtils]: 18: Hoare triple {2513#(= ~methaneLevelCritical~0 0)} assume !(0 != ~pumpRunning~0); {2513#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:07:44,545 INFO L290 TraceCheckUtils]: 19: Hoare triple {2513#(= ~methaneLevelCritical~0 0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret35#1, processEnvironment_~tmp~5#1;havoc processEnvironment_~tmp~5#1; {2513#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:07:44,545 INFO L290 TraceCheckUtils]: 20: Hoare triple {2513#(= ~methaneLevelCritical~0 0)} assume !(0 != ~pumpRunning~0); {2513#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:07:44,546 INFO L272 TraceCheckUtils]: 21: Hoare triple {2513#(= ~methaneLevelCritical~0 0)} call processEnvironment__wrappee__methaneQuery(); {2532#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:07:44,546 INFO L290 TraceCheckUtils]: 22: Hoare triple {2532#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~4#1; {2511#true} is VALID [2022-02-20 18:07:44,546 INFO L290 TraceCheckUtils]: 23: Hoare triple {2511#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret46#1, isHighWaterLevel_~retValue_acc~11#1, isHighWaterLevel_~tmp~7#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~11#1;havoc isHighWaterLevel_~tmp~7#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~7#1;havoc isHighWaterSensorDry_~retValue_acc~7#1; {2511#true} is VALID [2022-02-20 18:07:44,546 INFO L290 TraceCheckUtils]: 24: Hoare triple {2511#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~7#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~7#1; {2511#true} is VALID [2022-02-20 18:07:44,546 INFO L290 TraceCheckUtils]: 25: Hoare triple {2511#true} isHighWaterLevel_#t~ret46#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret46#1 && isHighWaterLevel_#t~ret46#1 <= 2147483647;isHighWaterLevel_~tmp~7#1 := isHighWaterLevel_#t~ret46#1;havoc isHighWaterLevel_#t~ret46#1; {2511#true} is VALID [2022-02-20 18:07:44,547 INFO L290 TraceCheckUtils]: 26: Hoare triple {2511#true} assume 0 != isHighWaterLevel_~tmp~7#1;isHighWaterLevel_~tmp___0~0#1 := 0; {2511#true} is VALID [2022-02-20 18:07:44,547 INFO L290 TraceCheckUtils]: 27: Hoare triple {2511#true} isHighWaterLevel_~retValue_acc~11#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~11#1; {2511#true} is VALID [2022-02-20 18:07:44,547 INFO L290 TraceCheckUtils]: 28: Hoare triple {2511#true} #t~ret34#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret34#1 && #t~ret34#1 <= 2147483647;~tmp~4#1 := #t~ret34#1;havoc #t~ret34#1; {2511#true} is VALID [2022-02-20 18:07:44,547 INFO L290 TraceCheckUtils]: 29: Hoare triple {2511#true} assume !(0 != ~tmp~4#1); {2511#true} is VALID [2022-02-20 18:07:44,547 INFO L272 TraceCheckUtils]: 30: Hoare triple {2511#true} call processEnvironment__wrappee__base(); {2511#true} is VALID [2022-02-20 18:07:44,547 INFO L290 TraceCheckUtils]: 31: Hoare triple {2511#true} assume true; {2511#true} is VALID [2022-02-20 18:07:44,547 INFO L284 TraceCheckUtils]: 32: Hoare quadruple {2511#true} {2511#true} #263#return; {2511#true} is VALID [2022-02-20 18:07:44,547 INFO L290 TraceCheckUtils]: 33: Hoare triple {2511#true} assume true; {2511#true} is VALID [2022-02-20 18:07:44,548 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {2511#true} {2513#(= ~methaneLevelCritical~0 0)} #245#return; {2513#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:07:44,548 INFO L290 TraceCheckUtils]: 35: Hoare triple {2513#(= ~methaneLevelCritical~0 0)} assume { :end_inline_processEnvironment } true; {2513#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:07:44,549 INFO L290 TraceCheckUtils]: 36: Hoare triple {2513#(= ~methaneLevelCritical~0 0)} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret47#1, __utac_acc__Specification2_spec__2_#t~ret48#1, __utac_acc__Specification2_spec__2_~tmp~8#1, __utac_acc__Specification2_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification2_spec__2_~tmp~8#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~1#1; {2513#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:07:44,549 INFO L272 TraceCheckUtils]: 37: Hoare triple {2513#(= ~methaneLevelCritical~0 0)} call __utac_acc__Specification2_spec__2_#t~ret47#1 := isMethaneLevelCritical(); {2511#true} is VALID [2022-02-20 18:07:44,549 INFO L290 TraceCheckUtils]: 38: Hoare triple {2511#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~methaneLevelCritical~0;#res := ~retValue_acc~5; {2535#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:44,549 INFO L290 TraceCheckUtils]: 39: Hoare triple {2535#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} assume true; {2535#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:44,550 INFO L284 TraceCheckUtils]: 40: Hoare quadruple {2535#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} {2513#(= ~methaneLevelCritical~0 0)} #247#return; {2530#(= |timeShift___utac_acc__Specification2_spec__2_#t~ret47#1| 0)} is VALID [2022-02-20 18:07:44,550 INFO L290 TraceCheckUtils]: 41: Hoare triple {2530#(= |timeShift___utac_acc__Specification2_spec__2_#t~ret47#1| 0)} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret47#1 && __utac_acc__Specification2_spec__2_#t~ret47#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~8#1 := __utac_acc__Specification2_spec__2_#t~ret47#1;havoc __utac_acc__Specification2_spec__2_#t~ret47#1; {2531#(= |timeShift___utac_acc__Specification2_spec__2_~tmp~8#1| 0)} is VALID [2022-02-20 18:07:44,551 INFO L290 TraceCheckUtils]: 42: Hoare triple {2531#(= |timeShift___utac_acc__Specification2_spec__2_~tmp~8#1| 0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp~8#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~10#1;havoc isPumpRunning_~retValue_acc~10#1;isPumpRunning_~retValue_acc~10#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~10#1; {2512#false} is VALID [2022-02-20 18:07:44,551 INFO L290 TraceCheckUtils]: 43: Hoare triple {2512#false} __utac_acc__Specification2_spec__2_#t~ret48#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret48#1 && __utac_acc__Specification2_spec__2_#t~ret48#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~1#1 := __utac_acc__Specification2_spec__2_#t~ret48#1;havoc __utac_acc__Specification2_spec__2_#t~ret48#1; {2512#false} is VALID [2022-02-20 18:07:44,551 INFO L290 TraceCheckUtils]: 44: Hoare triple {2512#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~1#1; {2512#false} is VALID [2022-02-20 18:07:44,551 INFO L290 TraceCheckUtils]: 45: Hoare triple {2512#false} assume 0 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {2512#false} is VALID [2022-02-20 18:07:44,551 INFO L290 TraceCheckUtils]: 46: Hoare triple {2512#false} assume !false; {2512#false} is VALID [2022-02-20 18:07:44,552 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:07:44,552 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:07:44,552 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1174737791] [2022-02-20 18:07:44,552 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1174737791] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:07:44,552 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:07:44,552 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-02-20 18:07:44,552 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1678123812] [2022-02-20 18:07:44,553 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:07:44,553 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) Word has length 47 [2022-02-20 18:07:44,553 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:07:44,554 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:07:44,582 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 47 edges. 47 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:44,582 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-02-20 18:07:44,583 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:07:44,583 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-02-20 18:07:44,583 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-02-20 18:07:44,583 INFO L87 Difference]: Start difference. First operand 153 states and 188 transitions. Second operand has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:07:45,257 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:45,257 INFO L93 Difference]: Finished difference Result 443 states and 552 transitions. [2022-02-20 18:07:45,258 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-02-20 18:07:45,258 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) Word has length 47 [2022-02-20 18:07:45,258 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:07:45,258 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:07:45,262 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 316 transitions. [2022-02-20 18:07:45,262 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:07:45,266 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 316 transitions. [2022-02-20 18:07:45,266 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 13 states and 316 transitions. [2022-02-20 18:07:45,589 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 316 edges. 316 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:45,596 INFO L225 Difference]: With dead ends: 443 [2022-02-20 18:07:45,596 INFO L226 Difference]: Without dead ends: 298 [2022-02-20 18:07:45,596 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 23 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=53, Invalid=157, Unknown=0, NotChecked=0, Total=210 [2022-02-20 18:07:45,597 INFO L933 BasicCegarLoop]: 97 mSDtfsCounter, 148 mSDsluCounter, 331 mSDsCounter, 0 mSdLazyCounter, 227 mSolverCounterSat, 55 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 157 SdHoareTripleChecker+Valid, 428 SdHoareTripleChecker+Invalid, 282 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 55 IncrementalHoareTripleChecker+Valid, 227 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-02-20 18:07:45,597 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [157 Valid, 428 Invalid, 282 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [55 Valid, 227 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-02-20 18:07:45,598 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 298 states. [2022-02-20 18:07:45,656 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 298 to 284. [2022-02-20 18:07:45,656 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:07:45,657 INFO L82 GeneralOperation]: Start isEquivalent. First operand 298 states. Second operand has 284 states, 211 states have (on average 1.2274881516587677) internal successors, (259), 226 states have internal predecessors, (259), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (48), 38 states have call predecessors, (48), 36 states have call successors, (48) [2022-02-20 18:07:45,658 INFO L74 IsIncluded]: Start isIncluded. First operand 298 states. Second operand has 284 states, 211 states have (on average 1.2274881516587677) internal successors, (259), 226 states have internal predecessors, (259), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (48), 38 states have call predecessors, (48), 36 states have call successors, (48) [2022-02-20 18:07:45,658 INFO L87 Difference]: Start difference. First operand 298 states. Second operand has 284 states, 211 states have (on average 1.2274881516587677) internal successors, (259), 226 states have internal predecessors, (259), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (48), 38 states have call predecessors, (48), 36 states have call successors, (48) [2022-02-20 18:07:45,672 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:45,673 INFO L93 Difference]: Finished difference Result 298 states and 358 transitions. [2022-02-20 18:07:45,673 INFO L276 IsEmpty]: Start isEmpty. Operand 298 states and 358 transitions. [2022-02-20 18:07:45,689 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:45,689 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:45,690 INFO L74 IsIncluded]: Start isIncluded. First operand has 284 states, 211 states have (on average 1.2274881516587677) internal successors, (259), 226 states have internal predecessors, (259), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (48), 38 states have call predecessors, (48), 36 states have call successors, (48) Second operand 298 states. [2022-02-20 18:07:45,693 INFO L87 Difference]: Start difference. First operand has 284 states, 211 states have (on average 1.2274881516587677) internal successors, (259), 226 states have internal predecessors, (259), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (48), 38 states have call predecessors, (48), 36 states have call successors, (48) Second operand 298 states. [2022-02-20 18:07:45,701 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:45,701 INFO L93 Difference]: Finished difference Result 298 states and 358 transitions. [2022-02-20 18:07:45,701 INFO L276 IsEmpty]: Start isEmpty. Operand 298 states and 358 transitions. [2022-02-20 18:07:45,702 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:45,703 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:45,703 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:07:45,703 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:07:45,704 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 284 states, 211 states have (on average 1.2274881516587677) internal successors, (259), 226 states have internal predecessors, (259), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (48), 38 states have call predecessors, (48), 36 states have call successors, (48) [2022-02-20 18:07:45,711 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 284 states to 284 states and 343 transitions. [2022-02-20 18:07:45,711 INFO L78 Accepts]: Start accepts. Automaton has 284 states and 343 transitions. Word has length 47 [2022-02-20 18:07:45,720 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:07:45,720 INFO L470 AbstractCegarLoop]: Abstraction has 284 states and 343 transitions. [2022-02-20 18:07:45,721 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:07:45,721 INFO L276 IsEmpty]: Start isEmpty. Operand 284 states and 343 transitions. [2022-02-20 18:07:45,736 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-02-20 18:07:45,736 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:07:45,736 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:07:45,737 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-02-20 18:07:45,737 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:07:45,737 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:07:45,737 INFO L85 PathProgramCache]: Analyzing trace with hash 858621823, now seen corresponding path program 1 times [2022-02-20 18:07:45,737 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:07:45,737 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1254451005] [2022-02-20 18:07:45,737 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:07:45,737 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:07:45,764 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:45,852 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-02-20 18:07:45,854 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:45,857 INFO L290 TraceCheckUtils]: 0: Hoare triple {4188#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {4164#true} is VALID [2022-02-20 18:07:45,857 INFO L290 TraceCheckUtils]: 1: Hoare triple {4164#true} assume true; {4164#true} is VALID [2022-02-20 18:07:45,857 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {4164#true} {4166#(= ~pumpRunning~0 0)} #255#return; {4166#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:45,861 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-02-20 18:07:45,865 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:45,870 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:07:45,871 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:45,873 INFO L290 TraceCheckUtils]: 0: Hoare triple {4164#true} assume true; {4164#true} is VALID [2022-02-20 18:07:45,873 INFO L284 TraceCheckUtils]: 1: Hoare quadruple {4164#true} {4166#(= ~pumpRunning~0 0)} #263#return; {4166#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:45,874 INFO L290 TraceCheckUtils]: 0: Hoare triple {4189#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~4#1; {4164#true} is VALID [2022-02-20 18:07:45,874 INFO L290 TraceCheckUtils]: 1: Hoare triple {4164#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret46#1, isHighWaterLevel_~retValue_acc~11#1, isHighWaterLevel_~tmp~7#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~11#1;havoc isHighWaterLevel_~tmp~7#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~7#1;havoc isHighWaterSensorDry_~retValue_acc~7#1; {4166#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:45,874 INFO L290 TraceCheckUtils]: 2: Hoare triple {4166#(= ~pumpRunning~0 0)} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~7#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~7#1; {4166#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:45,875 INFO L290 TraceCheckUtils]: 3: Hoare triple {4166#(= ~pumpRunning~0 0)} isHighWaterLevel_#t~ret46#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret46#1 && isHighWaterLevel_#t~ret46#1 <= 2147483647;isHighWaterLevel_~tmp~7#1 := isHighWaterLevel_#t~ret46#1;havoc isHighWaterLevel_#t~ret46#1; {4166#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:45,875 INFO L290 TraceCheckUtils]: 4: Hoare triple {4166#(= ~pumpRunning~0 0)} assume 0 != isHighWaterLevel_~tmp~7#1;isHighWaterLevel_~tmp___0~0#1 := 0; {4166#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:45,875 INFO L290 TraceCheckUtils]: 5: Hoare triple {4166#(= ~pumpRunning~0 0)} isHighWaterLevel_~retValue_acc~11#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~11#1; {4166#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:45,876 INFO L290 TraceCheckUtils]: 6: Hoare triple {4166#(= ~pumpRunning~0 0)} #t~ret34#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret34#1 && #t~ret34#1 <= 2147483647;~tmp~4#1 := #t~ret34#1;havoc #t~ret34#1; {4166#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:45,876 INFO L290 TraceCheckUtils]: 7: Hoare triple {4166#(= ~pumpRunning~0 0)} assume !(0 != ~tmp~4#1); {4166#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:45,876 INFO L272 TraceCheckUtils]: 8: Hoare triple {4166#(= ~pumpRunning~0 0)} call processEnvironment__wrappee__base(); {4164#true} is VALID [2022-02-20 18:07:45,876 INFO L290 TraceCheckUtils]: 9: Hoare triple {4164#true} assume true; {4164#true} is VALID [2022-02-20 18:07:45,876 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {4164#true} {4166#(= ~pumpRunning~0 0)} #263#return; {4166#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:45,877 INFO L290 TraceCheckUtils]: 11: Hoare triple {4166#(= ~pumpRunning~0 0)} assume true; {4166#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:45,877 INFO L284 TraceCheckUtils]: 12: Hoare quadruple {4166#(= ~pumpRunning~0 0)} {4166#(= ~pumpRunning~0 0)} #245#return; {4166#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:45,877 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2022-02-20 18:07:45,878 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:45,880 INFO L290 TraceCheckUtils]: 0: Hoare triple {4164#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~methaneLevelCritical~0;#res := ~retValue_acc~5; {4164#true} is VALID [2022-02-20 18:07:45,880 INFO L290 TraceCheckUtils]: 1: Hoare triple {4164#true} assume true; {4164#true} is VALID [2022-02-20 18:07:45,881 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {4164#true} {4166#(= ~pumpRunning~0 0)} #247#return; {4166#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:45,881 INFO L290 TraceCheckUtils]: 0: Hoare triple {4164#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(13, 16);call #Ultimate.allocInit(7, 17);call write~init~int(44, 17, 0, 1);call write~init~int(77, 17, 1, 1);call write~init~int(101, 17, 2, 1);call write~init~int(116, 17, 3, 1);call write~init~int(104, 17, 4, 1);call write~init~int(58, 17, 5, 1);call write~init~int(0, 17, 6, 1);call #Ultimate.allocInit(5, 18);call write~init~int(67, 18, 0, 1);call write~init~int(82, 18, 1, 1);call write~init~int(73, 18, 2, 1);call write~init~int(84, 18, 3, 1);call write~init~int(0, 18, 4, 1);call #Ultimate.allocInit(3, 19);call write~init~int(79, 19, 0, 1);call write~init~int(75, 19, 1, 1);call write~init~int(0, 19, 2, 1);call #Ultimate.allocInit(2, 20);call write~init~int(41, 20, 0, 1);call write~init~int(0, 20, 1, 1);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~methAndRunningLastTime~0 := 0; {4166#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:45,882 INFO L290 TraceCheckUtils]: 1: Hoare triple {4166#(= ~pumpRunning~0 0)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret33#1, main_~retValue_acc~8#1, main_~tmp~3#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~3#1;assume { :begin_inline_select_helpers } true; {4166#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:45,882 INFO L290 TraceCheckUtils]: 2: Hoare triple {4166#(= ~pumpRunning~0 0)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {4166#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:45,882 INFO L290 TraceCheckUtils]: 3: Hoare triple {4166#(= ~pumpRunning~0 0)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {4166#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:45,882 INFO L290 TraceCheckUtils]: 4: Hoare triple {4166#(= ~pumpRunning~0 0)} main_#t~ret33#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret33#1 && main_#t~ret33#1 <= 2147483647;main_~tmp~3#1 := main_#t~ret33#1;havoc main_#t~ret33#1; {4166#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:45,883 INFO L290 TraceCheckUtils]: 5: Hoare triple {4166#(= ~pumpRunning~0 0)} assume 0 != main_~tmp~3#1;assume { :begin_inline_setup } true; {4166#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:45,883 INFO L290 TraceCheckUtils]: 6: Hoare triple {4166#(= ~pumpRunning~0 0)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0; {4166#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:45,883 INFO L290 TraceCheckUtils]: 7: Hoare triple {4166#(= ~pumpRunning~0 0)} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet49#1, test_#t~nondet50#1, test_#t~nondet51#1, test_#t~nondet52#1, test_~splverifierCounter~0#1, test_~tmp~9#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~9#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {4166#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:45,884 INFO L290 TraceCheckUtils]: 8: Hoare triple {4166#(= ~pumpRunning~0 0)} assume !false; {4166#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:45,884 INFO L290 TraceCheckUtils]: 9: Hoare triple {4166#(= ~pumpRunning~0 0)} assume test_~splverifierCounter~0#1 < 4; {4166#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:45,884 INFO L290 TraceCheckUtils]: 10: Hoare triple {4166#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet49#1 && test_#t~nondet49#1 <= 2147483647;test_~tmp~9#1 := test_#t~nondet49#1;havoc test_#t~nondet49#1; {4166#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:45,884 INFO L290 TraceCheckUtils]: 11: Hoare triple {4166#(= ~pumpRunning~0 0)} assume !(0 != test_~tmp~9#1); {4166#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:45,885 INFO L290 TraceCheckUtils]: 12: Hoare triple {4166#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet50#1 && test_#t~nondet50#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet50#1;havoc test_#t~nondet50#1; {4166#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:45,885 INFO L290 TraceCheckUtils]: 13: Hoare triple {4166#(= ~pumpRunning~0 0)} assume 0 != test_~tmp___0~2#1; {4166#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:45,886 INFO L272 TraceCheckUtils]: 14: Hoare triple {4166#(= ~pumpRunning~0 0)} call changeMethaneLevel(); {4188#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:45,886 INFO L290 TraceCheckUtils]: 15: Hoare triple {4188#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {4164#true} is VALID [2022-02-20 18:07:45,886 INFO L290 TraceCheckUtils]: 16: Hoare triple {4164#true} assume true; {4164#true} is VALID [2022-02-20 18:07:45,886 INFO L284 TraceCheckUtils]: 17: Hoare quadruple {4164#true} {4166#(= ~pumpRunning~0 0)} #255#return; {4166#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:45,886 INFO L290 TraceCheckUtils]: 18: Hoare triple {4166#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet51#1 && test_#t~nondet51#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet51#1;havoc test_#t~nondet51#1; {4166#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:45,887 INFO L290 TraceCheckUtils]: 19: Hoare triple {4166#(= ~pumpRunning~0 0)} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet52#1 && test_#t~nondet52#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet52#1;havoc test_#t~nondet52#1; {4166#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:45,887 INFO L290 TraceCheckUtils]: 20: Hoare triple {4166#(= ~pumpRunning~0 0)} assume 0 != test_~tmp___1~0#1; {4166#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:45,887 INFO L272 TraceCheckUtils]: 21: Hoare triple {4166#(= ~pumpRunning~0 0)} call timeShift(); {4166#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:45,888 INFO L290 TraceCheckUtils]: 22: Hoare triple {4166#(= ~pumpRunning~0 0)} assume !(0 != ~pumpRunning~0); {4166#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:45,888 INFO L290 TraceCheckUtils]: 23: Hoare triple {4166#(= ~pumpRunning~0 0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret35#1, processEnvironment_~tmp~5#1;havoc processEnvironment_~tmp~5#1; {4166#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:45,888 INFO L290 TraceCheckUtils]: 24: Hoare triple {4166#(= ~pumpRunning~0 0)} assume !(0 != ~pumpRunning~0); {4166#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:45,889 INFO L272 TraceCheckUtils]: 25: Hoare triple {4166#(= ~pumpRunning~0 0)} call processEnvironment__wrappee__methaneQuery(); {4189#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:07:45,889 INFO L290 TraceCheckUtils]: 26: Hoare triple {4189#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~4#1; {4164#true} is VALID [2022-02-20 18:07:45,889 INFO L290 TraceCheckUtils]: 27: Hoare triple {4164#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret46#1, isHighWaterLevel_~retValue_acc~11#1, isHighWaterLevel_~tmp~7#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~11#1;havoc isHighWaterLevel_~tmp~7#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~7#1;havoc isHighWaterSensorDry_~retValue_acc~7#1; {4166#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:45,890 INFO L290 TraceCheckUtils]: 28: Hoare triple {4166#(= ~pumpRunning~0 0)} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~7#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~7#1; {4166#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:45,890 INFO L290 TraceCheckUtils]: 29: Hoare triple {4166#(= ~pumpRunning~0 0)} isHighWaterLevel_#t~ret46#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret46#1 && isHighWaterLevel_#t~ret46#1 <= 2147483647;isHighWaterLevel_~tmp~7#1 := isHighWaterLevel_#t~ret46#1;havoc isHighWaterLevel_#t~ret46#1; {4166#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:45,890 INFO L290 TraceCheckUtils]: 30: Hoare triple {4166#(= ~pumpRunning~0 0)} assume 0 != isHighWaterLevel_~tmp~7#1;isHighWaterLevel_~tmp___0~0#1 := 0; {4166#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:45,890 INFO L290 TraceCheckUtils]: 31: Hoare triple {4166#(= ~pumpRunning~0 0)} isHighWaterLevel_~retValue_acc~11#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~11#1; {4166#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:45,891 INFO L290 TraceCheckUtils]: 32: Hoare triple {4166#(= ~pumpRunning~0 0)} #t~ret34#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret34#1 && #t~ret34#1 <= 2147483647;~tmp~4#1 := #t~ret34#1;havoc #t~ret34#1; {4166#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:45,891 INFO L290 TraceCheckUtils]: 33: Hoare triple {4166#(= ~pumpRunning~0 0)} assume !(0 != ~tmp~4#1); {4166#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:45,891 INFO L272 TraceCheckUtils]: 34: Hoare triple {4166#(= ~pumpRunning~0 0)} call processEnvironment__wrappee__base(); {4164#true} is VALID [2022-02-20 18:07:45,891 INFO L290 TraceCheckUtils]: 35: Hoare triple {4164#true} assume true; {4164#true} is VALID [2022-02-20 18:07:45,892 INFO L284 TraceCheckUtils]: 36: Hoare quadruple {4164#true} {4166#(= ~pumpRunning~0 0)} #263#return; {4166#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:45,892 INFO L290 TraceCheckUtils]: 37: Hoare triple {4166#(= ~pumpRunning~0 0)} assume true; {4166#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:45,892 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {4166#(= ~pumpRunning~0 0)} {4166#(= ~pumpRunning~0 0)} #245#return; {4166#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:45,893 INFO L290 TraceCheckUtils]: 39: Hoare triple {4166#(= ~pumpRunning~0 0)} assume { :end_inline_processEnvironment } true; {4166#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:45,893 INFO L290 TraceCheckUtils]: 40: Hoare triple {4166#(= ~pumpRunning~0 0)} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret47#1, __utac_acc__Specification2_spec__2_#t~ret48#1, __utac_acc__Specification2_spec__2_~tmp~8#1, __utac_acc__Specification2_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification2_spec__2_~tmp~8#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~1#1; {4166#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:45,893 INFO L272 TraceCheckUtils]: 41: Hoare triple {4166#(= ~pumpRunning~0 0)} call __utac_acc__Specification2_spec__2_#t~ret47#1 := isMethaneLevelCritical(); {4164#true} is VALID [2022-02-20 18:07:45,893 INFO L290 TraceCheckUtils]: 42: Hoare triple {4164#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~methaneLevelCritical~0;#res := ~retValue_acc~5; {4164#true} is VALID [2022-02-20 18:07:45,893 INFO L290 TraceCheckUtils]: 43: Hoare triple {4164#true} assume true; {4164#true} is VALID [2022-02-20 18:07:45,894 INFO L284 TraceCheckUtils]: 44: Hoare quadruple {4164#true} {4166#(= ~pumpRunning~0 0)} #247#return; {4166#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:45,894 INFO L290 TraceCheckUtils]: 45: Hoare triple {4166#(= ~pumpRunning~0 0)} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret47#1 && __utac_acc__Specification2_spec__2_#t~ret47#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~8#1 := __utac_acc__Specification2_spec__2_#t~ret47#1;havoc __utac_acc__Specification2_spec__2_#t~ret47#1; {4166#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:07:45,894 INFO L290 TraceCheckUtils]: 46: Hoare triple {4166#(= ~pumpRunning~0 0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp~8#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~10#1;havoc isPumpRunning_~retValue_acc~10#1;isPumpRunning_~retValue_acc~10#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~10#1; {4186#(= |timeShift_isPumpRunning_#res#1| 0)} is VALID [2022-02-20 18:07:45,895 INFO L290 TraceCheckUtils]: 47: Hoare triple {4186#(= |timeShift_isPumpRunning_#res#1| 0)} __utac_acc__Specification2_spec__2_#t~ret48#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret48#1 && __utac_acc__Specification2_spec__2_#t~ret48#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~1#1 := __utac_acc__Specification2_spec__2_#t~ret48#1;havoc __utac_acc__Specification2_spec__2_#t~ret48#1; {4187#(= |timeShift___utac_acc__Specification2_spec__2_~tmp___0~1#1| 0)} is VALID [2022-02-20 18:07:45,895 INFO L290 TraceCheckUtils]: 48: Hoare triple {4187#(= |timeShift___utac_acc__Specification2_spec__2_~tmp___0~1#1| 0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~1#1; {4165#false} is VALID [2022-02-20 18:07:45,895 INFO L290 TraceCheckUtils]: 49: Hoare triple {4165#false} assume 0 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {4165#false} is VALID [2022-02-20 18:07:45,895 INFO L290 TraceCheckUtils]: 50: Hoare triple {4165#false} assume !false; {4165#false} is VALID [2022-02-20 18:07:45,896 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:07:45,896 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:07:45,907 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1254451005] [2022-02-20 18:07:45,907 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1254451005] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:07:45,907 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:07:45,907 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-02-20 18:07:45,908 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1183648954] [2022-02-20 18:07:45,908 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:07:45,908 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 1 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 51 [2022-02-20 18:07:45,908 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:07:45,909 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 1 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-02-20 18:07:45,937 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 51 edges. 51 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:45,937 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-02-20 18:07:45,938 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:07:45,938 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-02-20 18:07:45,938 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-02-20 18:07:45,938 INFO L87 Difference]: Start difference. First operand 284 states and 343 transitions. Second operand has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 1 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-02-20 18:07:46,655 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:46,656 INFO L93 Difference]: Finished difference Result 572 states and 692 transitions. [2022-02-20 18:07:46,656 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-02-20 18:07:46,656 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 1 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 51 [2022-02-20 18:07:46,656 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:07:46,657 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 1 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-02-20 18:07:46,660 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15 states to 15 states and 290 transitions. [2022-02-20 18:07:46,660 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 1 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-02-20 18:07:46,663 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15 states to 15 states and 290 transitions. [2022-02-20 18:07:46,663 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 15 states and 290 transitions. [2022-02-20 18:07:46,834 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 290 edges. 290 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:46,839 INFO L225 Difference]: With dead ends: 572 [2022-02-20 18:07:46,840 INFO L226 Difference]: Without dead ends: 296 [2022-02-20 18:07:46,841 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 35 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=84, Invalid=188, Unknown=0, NotChecked=0, Total=272 [2022-02-20 18:07:46,841 INFO L933 BasicCegarLoop]: 101 mSDtfsCounter, 187 mSDsluCounter, 109 mSDsCounter, 0 mSdLazyCounter, 378 mSolverCounterSat, 70 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 189 SdHoareTripleChecker+Valid, 210 SdHoareTripleChecker+Invalid, 448 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 70 IncrementalHoareTripleChecker+Valid, 378 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-02-20 18:07:46,842 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [189 Valid, 210 Invalid, 448 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [70 Valid, 378 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-02-20 18:07:46,842 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 296 states. [2022-02-20 18:07:46,853 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 296 to 282. [2022-02-20 18:07:46,853 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:07:46,853 INFO L82 GeneralOperation]: Start isEquivalent. First operand 296 states. Second operand has 282 states, 209 states have (on average 1.2105263157894737) internal successors, (253), 224 states have internal predecessors, (253), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (48), 38 states have call predecessors, (48), 36 states have call successors, (48) [2022-02-20 18:07:46,854 INFO L74 IsIncluded]: Start isIncluded. First operand 296 states. Second operand has 282 states, 209 states have (on average 1.2105263157894737) internal successors, (253), 224 states have internal predecessors, (253), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (48), 38 states have call predecessors, (48), 36 states have call successors, (48) [2022-02-20 18:07:46,855 INFO L87 Difference]: Start difference. First operand 296 states. Second operand has 282 states, 209 states have (on average 1.2105263157894737) internal successors, (253), 224 states have internal predecessors, (253), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (48), 38 states have call predecessors, (48), 36 states have call successors, (48) [2022-02-20 18:07:46,862 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:46,862 INFO L93 Difference]: Finished difference Result 296 states and 352 transitions. [2022-02-20 18:07:46,862 INFO L276 IsEmpty]: Start isEmpty. Operand 296 states and 352 transitions. [2022-02-20 18:07:46,863 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:46,863 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:46,864 INFO L74 IsIncluded]: Start isIncluded. First operand has 282 states, 209 states have (on average 1.2105263157894737) internal successors, (253), 224 states have internal predecessors, (253), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (48), 38 states have call predecessors, (48), 36 states have call successors, (48) Second operand 296 states. [2022-02-20 18:07:46,864 INFO L87 Difference]: Start difference. First operand has 282 states, 209 states have (on average 1.2105263157894737) internal successors, (253), 224 states have internal predecessors, (253), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (48), 38 states have call predecessors, (48), 36 states have call successors, (48) Second operand 296 states. [2022-02-20 18:07:46,872 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:46,872 INFO L93 Difference]: Finished difference Result 296 states and 352 transitions. [2022-02-20 18:07:46,872 INFO L276 IsEmpty]: Start isEmpty. Operand 296 states and 352 transitions. [2022-02-20 18:07:46,873 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:46,873 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:46,873 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:07:46,873 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:07:46,874 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 282 states, 209 states have (on average 1.2105263157894737) internal successors, (253), 224 states have internal predecessors, (253), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (48), 38 states have call predecessors, (48), 36 states have call successors, (48) [2022-02-20 18:07:46,887 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 282 states to 282 states and 337 transitions. [2022-02-20 18:07:46,887 INFO L78 Accepts]: Start accepts. Automaton has 282 states and 337 transitions. Word has length 51 [2022-02-20 18:07:46,887 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:07:46,887 INFO L470 AbstractCegarLoop]: Abstraction has 282 states and 337 transitions. [2022-02-20 18:07:46,888 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 1 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-02-20 18:07:46,888 INFO L276 IsEmpty]: Start isEmpty. Operand 282 states and 337 transitions. [2022-02-20 18:07:46,889 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2022-02-20 18:07:46,889 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:07:46,889 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:07:46,889 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-02-20 18:07:46,890 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:07:46,890 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:07:46,890 INFO L85 PathProgramCache]: Analyzing trace with hash 1850253156, now seen corresponding path program 1 times [2022-02-20 18:07:46,890 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:07:46,890 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2071438339] [2022-02-20 18:07:46,890 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:07:46,891 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:07:46,924 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:46,948 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-02-20 18:07:46,949 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:46,953 INFO L290 TraceCheckUtils]: 0: Hoare triple {6032#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {6001#true} is VALID [2022-02-20 18:07:46,953 INFO L290 TraceCheckUtils]: 1: Hoare triple {6001#true} assume true; {6001#true} is VALID [2022-02-20 18:07:46,953 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {6001#true} {6001#true} #255#return; {6001#true} is VALID [2022-02-20 18:07:46,955 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-02-20 18:07:46,970 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:46,993 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:07:46,999 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:47,002 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:07:47,003 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:47,005 INFO L290 TraceCheckUtils]: 0: Hoare triple {6001#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~methaneLevelCritical~0;#res := ~retValue_acc~5; {6001#true} is VALID [2022-02-20 18:07:47,005 INFO L290 TraceCheckUtils]: 1: Hoare triple {6001#true} assume true; {6001#true} is VALID [2022-02-20 18:07:47,006 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {6001#true} {6001#true} #267#return; {6001#true} is VALID [2022-02-20 18:07:47,006 INFO L290 TraceCheckUtils]: 0: Hoare triple {6001#true} havoc ~retValue_acc~9; {6001#true} is VALID [2022-02-20 18:07:47,006 INFO L272 TraceCheckUtils]: 1: Hoare triple {6001#true} call #t~ret37 := isMethaneLevelCritical(); {6001#true} is VALID [2022-02-20 18:07:47,006 INFO L290 TraceCheckUtils]: 2: Hoare triple {6001#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~methaneLevelCritical~0;#res := ~retValue_acc~5; {6001#true} is VALID [2022-02-20 18:07:47,006 INFO L290 TraceCheckUtils]: 3: Hoare triple {6001#true} assume true; {6001#true} is VALID [2022-02-20 18:07:47,006 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {6001#true} {6001#true} #267#return; {6001#true} is VALID [2022-02-20 18:07:47,006 INFO L290 TraceCheckUtils]: 5: Hoare triple {6001#true} assume -2147483648 <= #t~ret37 && #t~ret37 <= 2147483647;~retValue_acc~9 := #t~ret37;havoc #t~ret37;#res := ~retValue_acc~9; {6001#true} is VALID [2022-02-20 18:07:47,007 INFO L290 TraceCheckUtils]: 6: Hoare triple {6001#true} assume true; {6001#true} is VALID [2022-02-20 18:07:47,007 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {6001#true} {6002#false} #261#return; {6002#false} is VALID [2022-02-20 18:07:47,007 INFO L290 TraceCheckUtils]: 0: Hoare triple {6033#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~4#1; {6001#true} is VALID [2022-02-20 18:07:47,007 INFO L290 TraceCheckUtils]: 1: Hoare triple {6001#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret46#1, isHighWaterLevel_~retValue_acc~11#1, isHighWaterLevel_~tmp~7#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~11#1;havoc isHighWaterLevel_~tmp~7#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~7#1;havoc isHighWaterSensorDry_~retValue_acc~7#1; {6001#true} is VALID [2022-02-20 18:07:47,007 INFO L290 TraceCheckUtils]: 2: Hoare triple {6001#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~7#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~7#1; {6001#true} is VALID [2022-02-20 18:07:47,007 INFO L290 TraceCheckUtils]: 3: Hoare triple {6001#true} isHighWaterLevel_#t~ret46#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret46#1 && isHighWaterLevel_#t~ret46#1 <= 2147483647;isHighWaterLevel_~tmp~7#1 := isHighWaterLevel_#t~ret46#1;havoc isHighWaterLevel_#t~ret46#1; {6001#true} is VALID [2022-02-20 18:07:47,008 INFO L290 TraceCheckUtils]: 4: Hoare triple {6001#true} assume 0 != isHighWaterLevel_~tmp~7#1;isHighWaterLevel_~tmp___0~0#1 := 0; {6034#(= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~0#1| 0)} is VALID [2022-02-20 18:07:47,008 INFO L290 TraceCheckUtils]: 5: Hoare triple {6034#(= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~0#1| 0)} isHighWaterLevel_~retValue_acc~11#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~11#1; {6035#(= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1| 0)} is VALID [2022-02-20 18:07:47,008 INFO L290 TraceCheckUtils]: 6: Hoare triple {6035#(= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1| 0)} #t~ret34#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret34#1 && #t~ret34#1 <= 2147483647;~tmp~4#1 := #t~ret34#1;havoc #t~ret34#1; {6036#(= |processEnvironment__wrappee__methaneQuery_~tmp~4#1| 0)} is VALID [2022-02-20 18:07:47,009 INFO L290 TraceCheckUtils]: 7: Hoare triple {6036#(= |processEnvironment__wrappee__methaneQuery_~tmp~4#1| 0)} assume 0 != ~tmp~4#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret36#1, activatePump_~tmp~6#1;havoc activatePump_~tmp~6#1; {6002#false} is VALID [2022-02-20 18:07:47,009 INFO L272 TraceCheckUtils]: 8: Hoare triple {6002#false} call activatePump_#t~ret36#1 := isMethaneAlarm(); {6001#true} is VALID [2022-02-20 18:07:47,009 INFO L290 TraceCheckUtils]: 9: Hoare triple {6001#true} havoc ~retValue_acc~9; {6001#true} is VALID [2022-02-20 18:07:47,009 INFO L272 TraceCheckUtils]: 10: Hoare triple {6001#true} call #t~ret37 := isMethaneLevelCritical(); {6001#true} is VALID [2022-02-20 18:07:47,009 INFO L290 TraceCheckUtils]: 11: Hoare triple {6001#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~methaneLevelCritical~0;#res := ~retValue_acc~5; {6001#true} is VALID [2022-02-20 18:07:47,009 INFO L290 TraceCheckUtils]: 12: Hoare triple {6001#true} assume true; {6001#true} is VALID [2022-02-20 18:07:47,009 INFO L284 TraceCheckUtils]: 13: Hoare quadruple {6001#true} {6001#true} #267#return; {6001#true} is VALID [2022-02-20 18:07:47,009 INFO L290 TraceCheckUtils]: 14: Hoare triple {6001#true} assume -2147483648 <= #t~ret37 && #t~ret37 <= 2147483647;~retValue_acc~9 := #t~ret37;havoc #t~ret37;#res := ~retValue_acc~9; {6001#true} is VALID [2022-02-20 18:07:47,010 INFO L290 TraceCheckUtils]: 15: Hoare triple {6001#true} assume true; {6001#true} is VALID [2022-02-20 18:07:47,010 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {6001#true} {6002#false} #261#return; {6002#false} is VALID [2022-02-20 18:07:47,010 INFO L290 TraceCheckUtils]: 17: Hoare triple {6002#false} assume -2147483648 <= activatePump_#t~ret36#1 && activatePump_#t~ret36#1 <= 2147483647;activatePump_~tmp~6#1 := activatePump_#t~ret36#1;havoc activatePump_#t~ret36#1; {6002#false} is VALID [2022-02-20 18:07:47,010 INFO L290 TraceCheckUtils]: 18: Hoare triple {6002#false} assume !(0 != activatePump_~tmp~6#1);assume { :begin_inline_activatePump__wrappee__highWaterSensor } true;~pumpRunning~0 := 1; {6002#false} is VALID [2022-02-20 18:07:47,010 INFO L290 TraceCheckUtils]: 19: Hoare triple {6002#false} assume { :end_inline_activatePump__wrappee__highWaterSensor } true; {6002#false} is VALID [2022-02-20 18:07:47,010 INFO L290 TraceCheckUtils]: 20: Hoare triple {6002#false} assume { :end_inline_activatePump } true; {6002#false} is VALID [2022-02-20 18:07:47,010 INFO L290 TraceCheckUtils]: 21: Hoare triple {6002#false} assume true; {6002#false} is VALID [2022-02-20 18:07:47,011 INFO L284 TraceCheckUtils]: 22: Hoare quadruple {6002#false} {6001#true} #245#return; {6002#false} is VALID [2022-02-20 18:07:47,011 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2022-02-20 18:07:47,012 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:47,013 INFO L290 TraceCheckUtils]: 0: Hoare triple {6001#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~methaneLevelCritical~0;#res := ~retValue_acc~5; {6001#true} is VALID [2022-02-20 18:07:47,013 INFO L290 TraceCheckUtils]: 1: Hoare triple {6001#true} assume true; {6001#true} is VALID [2022-02-20 18:07:47,014 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {6001#true} {6002#false} #247#return; {6002#false} is VALID [2022-02-20 18:07:47,014 INFO L290 TraceCheckUtils]: 0: Hoare triple {6001#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(13, 16);call #Ultimate.allocInit(7, 17);call write~init~int(44, 17, 0, 1);call write~init~int(77, 17, 1, 1);call write~init~int(101, 17, 2, 1);call write~init~int(116, 17, 3, 1);call write~init~int(104, 17, 4, 1);call write~init~int(58, 17, 5, 1);call write~init~int(0, 17, 6, 1);call #Ultimate.allocInit(5, 18);call write~init~int(67, 18, 0, 1);call write~init~int(82, 18, 1, 1);call write~init~int(73, 18, 2, 1);call write~init~int(84, 18, 3, 1);call write~init~int(0, 18, 4, 1);call #Ultimate.allocInit(3, 19);call write~init~int(79, 19, 0, 1);call write~init~int(75, 19, 1, 1);call write~init~int(0, 19, 2, 1);call #Ultimate.allocInit(2, 20);call write~init~int(41, 20, 0, 1);call write~init~int(0, 20, 1, 1);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~methAndRunningLastTime~0 := 0; {6001#true} is VALID [2022-02-20 18:07:47,014 INFO L290 TraceCheckUtils]: 1: Hoare triple {6001#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret33#1, main_~retValue_acc~8#1, main_~tmp~3#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~3#1;assume { :begin_inline_select_helpers } true; {6001#true} is VALID [2022-02-20 18:07:47,014 INFO L290 TraceCheckUtils]: 2: Hoare triple {6001#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {6001#true} is VALID [2022-02-20 18:07:47,014 INFO L290 TraceCheckUtils]: 3: Hoare triple {6001#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {6001#true} is VALID [2022-02-20 18:07:47,014 INFO L290 TraceCheckUtils]: 4: Hoare triple {6001#true} main_#t~ret33#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret33#1 && main_#t~ret33#1 <= 2147483647;main_~tmp~3#1 := main_#t~ret33#1;havoc main_#t~ret33#1; {6001#true} is VALID [2022-02-20 18:07:47,014 INFO L290 TraceCheckUtils]: 5: Hoare triple {6001#true} assume 0 != main_~tmp~3#1;assume { :begin_inline_setup } true; {6001#true} is VALID [2022-02-20 18:07:47,014 INFO L290 TraceCheckUtils]: 6: Hoare triple {6001#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0; {6001#true} is VALID [2022-02-20 18:07:47,015 INFO L290 TraceCheckUtils]: 7: Hoare triple {6001#true} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet49#1, test_#t~nondet50#1, test_#t~nondet51#1, test_#t~nondet52#1, test_~splverifierCounter~0#1, test_~tmp~9#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~9#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {6001#true} is VALID [2022-02-20 18:07:47,015 INFO L290 TraceCheckUtils]: 8: Hoare triple {6001#true} assume !false; {6001#true} is VALID [2022-02-20 18:07:47,015 INFO L290 TraceCheckUtils]: 9: Hoare triple {6001#true} assume test_~splverifierCounter~0#1 < 4; {6001#true} is VALID [2022-02-20 18:07:47,015 INFO L290 TraceCheckUtils]: 10: Hoare triple {6001#true} assume -2147483648 <= test_#t~nondet49#1 && test_#t~nondet49#1 <= 2147483647;test_~tmp~9#1 := test_#t~nondet49#1;havoc test_#t~nondet49#1; {6001#true} is VALID [2022-02-20 18:07:47,015 INFO L290 TraceCheckUtils]: 11: Hoare triple {6001#true} assume !(0 != test_~tmp~9#1); {6001#true} is VALID [2022-02-20 18:07:47,015 INFO L290 TraceCheckUtils]: 12: Hoare triple {6001#true} assume -2147483648 <= test_#t~nondet50#1 && test_#t~nondet50#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet50#1;havoc test_#t~nondet50#1; {6001#true} is VALID [2022-02-20 18:07:47,015 INFO L290 TraceCheckUtils]: 13: Hoare triple {6001#true} assume 0 != test_~tmp___0~2#1; {6001#true} is VALID [2022-02-20 18:07:47,016 INFO L272 TraceCheckUtils]: 14: Hoare triple {6001#true} call changeMethaneLevel(); {6032#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:47,016 INFO L290 TraceCheckUtils]: 15: Hoare triple {6032#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {6001#true} is VALID [2022-02-20 18:07:47,016 INFO L290 TraceCheckUtils]: 16: Hoare triple {6001#true} assume true; {6001#true} is VALID [2022-02-20 18:07:47,016 INFO L284 TraceCheckUtils]: 17: Hoare quadruple {6001#true} {6001#true} #255#return; {6001#true} is VALID [2022-02-20 18:07:47,016 INFO L290 TraceCheckUtils]: 18: Hoare triple {6001#true} assume -2147483648 <= test_#t~nondet51#1 && test_#t~nondet51#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet51#1;havoc test_#t~nondet51#1; {6001#true} is VALID [2022-02-20 18:07:47,016 INFO L290 TraceCheckUtils]: 19: Hoare triple {6001#true} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet52#1 && test_#t~nondet52#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet52#1;havoc test_#t~nondet52#1; {6001#true} is VALID [2022-02-20 18:07:47,016 INFO L290 TraceCheckUtils]: 20: Hoare triple {6001#true} assume 0 != test_~tmp___1~0#1; {6001#true} is VALID [2022-02-20 18:07:47,017 INFO L272 TraceCheckUtils]: 21: Hoare triple {6001#true} call timeShift(); {6001#true} is VALID [2022-02-20 18:07:47,017 INFO L290 TraceCheckUtils]: 22: Hoare triple {6001#true} assume !(0 != ~pumpRunning~0); {6001#true} is VALID [2022-02-20 18:07:47,017 INFO L290 TraceCheckUtils]: 23: Hoare triple {6001#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret35#1, processEnvironment_~tmp~5#1;havoc processEnvironment_~tmp~5#1; {6001#true} is VALID [2022-02-20 18:07:47,017 INFO L290 TraceCheckUtils]: 24: Hoare triple {6001#true} assume !(0 != ~pumpRunning~0); {6001#true} is VALID [2022-02-20 18:07:47,017 INFO L272 TraceCheckUtils]: 25: Hoare triple {6001#true} call processEnvironment__wrappee__methaneQuery(); {6033#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:07:47,017 INFO L290 TraceCheckUtils]: 26: Hoare triple {6033#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~4#1; {6001#true} is VALID [2022-02-20 18:07:47,018 INFO L290 TraceCheckUtils]: 27: Hoare triple {6001#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret46#1, isHighWaterLevel_~retValue_acc~11#1, isHighWaterLevel_~tmp~7#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~11#1;havoc isHighWaterLevel_~tmp~7#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~7#1;havoc isHighWaterSensorDry_~retValue_acc~7#1; {6001#true} is VALID [2022-02-20 18:07:47,018 INFO L290 TraceCheckUtils]: 28: Hoare triple {6001#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~7#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~7#1; {6001#true} is VALID [2022-02-20 18:07:47,018 INFO L290 TraceCheckUtils]: 29: Hoare triple {6001#true} isHighWaterLevel_#t~ret46#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret46#1 && isHighWaterLevel_#t~ret46#1 <= 2147483647;isHighWaterLevel_~tmp~7#1 := isHighWaterLevel_#t~ret46#1;havoc isHighWaterLevel_#t~ret46#1; {6001#true} is VALID [2022-02-20 18:07:47,018 INFO L290 TraceCheckUtils]: 30: Hoare triple {6001#true} assume 0 != isHighWaterLevel_~tmp~7#1;isHighWaterLevel_~tmp___0~0#1 := 0; {6034#(= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~0#1| 0)} is VALID [2022-02-20 18:07:47,018 INFO L290 TraceCheckUtils]: 31: Hoare triple {6034#(= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~0#1| 0)} isHighWaterLevel_~retValue_acc~11#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~11#1; {6035#(= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1| 0)} is VALID [2022-02-20 18:07:47,019 INFO L290 TraceCheckUtils]: 32: Hoare triple {6035#(= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1| 0)} #t~ret34#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret34#1 && #t~ret34#1 <= 2147483647;~tmp~4#1 := #t~ret34#1;havoc #t~ret34#1; {6036#(= |processEnvironment__wrappee__methaneQuery_~tmp~4#1| 0)} is VALID [2022-02-20 18:07:47,019 INFO L290 TraceCheckUtils]: 33: Hoare triple {6036#(= |processEnvironment__wrappee__methaneQuery_~tmp~4#1| 0)} assume 0 != ~tmp~4#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret36#1, activatePump_~tmp~6#1;havoc activatePump_~tmp~6#1; {6002#false} is VALID [2022-02-20 18:07:47,019 INFO L272 TraceCheckUtils]: 34: Hoare triple {6002#false} call activatePump_#t~ret36#1 := isMethaneAlarm(); {6001#true} is VALID [2022-02-20 18:07:47,019 INFO L290 TraceCheckUtils]: 35: Hoare triple {6001#true} havoc ~retValue_acc~9; {6001#true} is VALID [2022-02-20 18:07:47,019 INFO L272 TraceCheckUtils]: 36: Hoare triple {6001#true} call #t~ret37 := isMethaneLevelCritical(); {6001#true} is VALID [2022-02-20 18:07:47,020 INFO L290 TraceCheckUtils]: 37: Hoare triple {6001#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~methaneLevelCritical~0;#res := ~retValue_acc~5; {6001#true} is VALID [2022-02-20 18:07:47,020 INFO L290 TraceCheckUtils]: 38: Hoare triple {6001#true} assume true; {6001#true} is VALID [2022-02-20 18:07:47,020 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {6001#true} {6001#true} #267#return; {6001#true} is VALID [2022-02-20 18:07:47,020 INFO L290 TraceCheckUtils]: 40: Hoare triple {6001#true} assume -2147483648 <= #t~ret37 && #t~ret37 <= 2147483647;~retValue_acc~9 := #t~ret37;havoc #t~ret37;#res := ~retValue_acc~9; {6001#true} is VALID [2022-02-20 18:07:47,020 INFO L290 TraceCheckUtils]: 41: Hoare triple {6001#true} assume true; {6001#true} is VALID [2022-02-20 18:07:47,020 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {6001#true} {6002#false} #261#return; {6002#false} is VALID [2022-02-20 18:07:47,020 INFO L290 TraceCheckUtils]: 43: Hoare triple {6002#false} assume -2147483648 <= activatePump_#t~ret36#1 && activatePump_#t~ret36#1 <= 2147483647;activatePump_~tmp~6#1 := activatePump_#t~ret36#1;havoc activatePump_#t~ret36#1; {6002#false} is VALID [2022-02-20 18:07:47,020 INFO L290 TraceCheckUtils]: 44: Hoare triple {6002#false} assume !(0 != activatePump_~tmp~6#1);assume { :begin_inline_activatePump__wrappee__highWaterSensor } true;~pumpRunning~0 := 1; {6002#false} is VALID [2022-02-20 18:07:47,021 INFO L290 TraceCheckUtils]: 45: Hoare triple {6002#false} assume { :end_inline_activatePump__wrappee__highWaterSensor } true; {6002#false} is VALID [2022-02-20 18:07:47,021 INFO L290 TraceCheckUtils]: 46: Hoare triple {6002#false} assume { :end_inline_activatePump } true; {6002#false} is VALID [2022-02-20 18:07:47,021 INFO L290 TraceCheckUtils]: 47: Hoare triple {6002#false} assume true; {6002#false} is VALID [2022-02-20 18:07:47,021 INFO L284 TraceCheckUtils]: 48: Hoare quadruple {6002#false} {6001#true} #245#return; {6002#false} is VALID [2022-02-20 18:07:47,021 INFO L290 TraceCheckUtils]: 49: Hoare triple {6002#false} assume { :end_inline_processEnvironment } true; {6002#false} is VALID [2022-02-20 18:07:47,021 INFO L290 TraceCheckUtils]: 50: Hoare triple {6002#false} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret47#1, __utac_acc__Specification2_spec__2_#t~ret48#1, __utac_acc__Specification2_spec__2_~tmp~8#1, __utac_acc__Specification2_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification2_spec__2_~tmp~8#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~1#1; {6002#false} is VALID [2022-02-20 18:07:47,021 INFO L272 TraceCheckUtils]: 51: Hoare triple {6002#false} call __utac_acc__Specification2_spec__2_#t~ret47#1 := isMethaneLevelCritical(); {6001#true} is VALID [2022-02-20 18:07:47,021 INFO L290 TraceCheckUtils]: 52: Hoare triple {6001#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~methaneLevelCritical~0;#res := ~retValue_acc~5; {6001#true} is VALID [2022-02-20 18:07:47,022 INFO L290 TraceCheckUtils]: 53: Hoare triple {6001#true} assume true; {6001#true} is VALID [2022-02-20 18:07:47,022 INFO L284 TraceCheckUtils]: 54: Hoare quadruple {6001#true} {6002#false} #247#return; {6002#false} is VALID [2022-02-20 18:07:47,022 INFO L290 TraceCheckUtils]: 55: Hoare triple {6002#false} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret47#1 && __utac_acc__Specification2_spec__2_#t~ret47#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~8#1 := __utac_acc__Specification2_spec__2_#t~ret47#1;havoc __utac_acc__Specification2_spec__2_#t~ret47#1; {6002#false} is VALID [2022-02-20 18:07:47,022 INFO L290 TraceCheckUtils]: 56: Hoare triple {6002#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~8#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~10#1;havoc isPumpRunning_~retValue_acc~10#1;isPumpRunning_~retValue_acc~10#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~10#1; {6002#false} is VALID [2022-02-20 18:07:47,022 INFO L290 TraceCheckUtils]: 57: Hoare triple {6002#false} __utac_acc__Specification2_spec__2_#t~ret48#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret48#1 && __utac_acc__Specification2_spec__2_#t~ret48#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~1#1 := __utac_acc__Specification2_spec__2_#t~ret48#1;havoc __utac_acc__Specification2_spec__2_#t~ret48#1; {6002#false} is VALID [2022-02-20 18:07:47,022 INFO L290 TraceCheckUtils]: 58: Hoare triple {6002#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~1#1; {6002#false} is VALID [2022-02-20 18:07:47,022 INFO L290 TraceCheckUtils]: 59: Hoare triple {6002#false} assume 0 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {6002#false} is VALID [2022-02-20 18:07:47,022 INFO L290 TraceCheckUtils]: 60: Hoare triple {6002#false} assume !false; {6002#false} is VALID [2022-02-20 18:07:47,023 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-02-20 18:07:47,023 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:07:47,023 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2071438339] [2022-02-20 18:07:47,023 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2071438339] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:07:47,023 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:07:47,023 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-02-20 18:07:47,023 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2103309217] [2022-02-20 18:07:47,024 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:07:47,029 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 5 states have internal predecessors, (48), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 61 [2022-02-20 18:07:47,029 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:07:47,029 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 5 states have internal predecessors, (48), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-02-20 18:07:47,059 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 59 edges. 59 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:47,059 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-02-20 18:07:47,059 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:07:47,060 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-02-20 18:07:47,060 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-02-20 18:07:47,060 INFO L87 Difference]: Start difference. First operand 282 states and 337 transitions. Second operand has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 5 states have internal predecessors, (48), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-02-20 18:07:47,611 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:47,611 INFO L93 Difference]: Finished difference Result 574 states and 699 transitions. [2022-02-20 18:07:47,611 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-02-20 18:07:47,611 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 5 states have internal predecessors, (48), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 61 [2022-02-20 18:07:47,611 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:07:47,612 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 5 states have internal predecessors, (48), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-02-20 18:07:47,613 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 221 transitions. [2022-02-20 18:07:47,614 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 5 states have internal predecessors, (48), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-02-20 18:07:47,615 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 221 transitions. [2022-02-20 18:07:47,615 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 9 states and 221 transitions. [2022-02-20 18:07:47,738 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 221 edges. 221 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:47,744 INFO L225 Difference]: With dead ends: 574 [2022-02-20 18:07:47,744 INFO L226 Difference]: Without dead ends: 300 [2022-02-20 18:07:47,745 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2022-02-20 18:07:47,746 INFO L933 BasicCegarLoop]: 90 mSDtfsCounter, 125 mSDsluCounter, 117 mSDsCounter, 0 mSdLazyCounter, 315 mSolverCounterSat, 54 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 126 SdHoareTripleChecker+Valid, 207 SdHoareTripleChecker+Invalid, 369 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 54 IncrementalHoareTripleChecker+Valid, 315 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-02-20 18:07:47,746 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [126 Valid, 207 Invalid, 369 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [54 Valid, 315 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-02-20 18:07:47,746 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 300 states. [2022-02-20 18:07:47,755 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 300 to 288. [2022-02-20 18:07:47,755 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:07:47,756 INFO L82 GeneralOperation]: Start isEquivalent. First operand 300 states. Second operand has 288 states, 215 states have (on average 1.2046511627906977) internal successors, (259), 230 states have internal predecessors, (259), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (48), 38 states have call predecessors, (48), 36 states have call successors, (48) [2022-02-20 18:07:47,756 INFO L74 IsIncluded]: Start isIncluded. First operand 300 states. Second operand has 288 states, 215 states have (on average 1.2046511627906977) internal successors, (259), 230 states have internal predecessors, (259), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (48), 38 states have call predecessors, (48), 36 states have call successors, (48) [2022-02-20 18:07:47,757 INFO L87 Difference]: Start difference. First operand 300 states. Second operand has 288 states, 215 states have (on average 1.2046511627906977) internal successors, (259), 230 states have internal predecessors, (259), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (48), 38 states have call predecessors, (48), 36 states have call successors, (48) [2022-02-20 18:07:47,762 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:47,762 INFO L93 Difference]: Finished difference Result 300 states and 356 transitions. [2022-02-20 18:07:47,762 INFO L276 IsEmpty]: Start isEmpty. Operand 300 states and 356 transitions. [2022-02-20 18:07:47,763 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:47,763 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:47,764 INFO L74 IsIncluded]: Start isIncluded. First operand has 288 states, 215 states have (on average 1.2046511627906977) internal successors, (259), 230 states have internal predecessors, (259), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (48), 38 states have call predecessors, (48), 36 states have call successors, (48) Second operand 300 states. [2022-02-20 18:07:47,764 INFO L87 Difference]: Start difference. First operand has 288 states, 215 states have (on average 1.2046511627906977) internal successors, (259), 230 states have internal predecessors, (259), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (48), 38 states have call predecessors, (48), 36 states have call successors, (48) Second operand 300 states. [2022-02-20 18:07:47,770 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:47,770 INFO L93 Difference]: Finished difference Result 300 states and 356 transitions. [2022-02-20 18:07:47,770 INFO L276 IsEmpty]: Start isEmpty. Operand 300 states and 356 transitions. [2022-02-20 18:07:47,771 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:47,771 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:47,771 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:07:47,771 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:07:47,772 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 288 states, 215 states have (on average 1.2046511627906977) internal successors, (259), 230 states have internal predecessors, (259), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (48), 38 states have call predecessors, (48), 36 states have call successors, (48) [2022-02-20 18:07:47,777 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 288 states to 288 states and 343 transitions. [2022-02-20 18:07:47,778 INFO L78 Accepts]: Start accepts. Automaton has 288 states and 343 transitions. Word has length 61 [2022-02-20 18:07:47,778 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:07:47,778 INFO L470 AbstractCegarLoop]: Abstraction has 288 states and 343 transitions. [2022-02-20 18:07:47,778 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 5 states have internal predecessors, (48), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-02-20 18:07:47,778 INFO L276 IsEmpty]: Start isEmpty. Operand 288 states and 343 transitions. [2022-02-20 18:07:47,779 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2022-02-20 18:07:47,779 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:07:47,779 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:07:47,779 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-02-20 18:07:47,779 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:07:47,780 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:07:47,780 INFO L85 PathProgramCache]: Analyzing trace with hash -1743114266, now seen corresponding path program 1 times [2022-02-20 18:07:47,780 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:07:47,780 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2020656409] [2022-02-20 18:07:47,780 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:07:47,780 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:07:47,798 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:47,814 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-02-20 18:07:47,815 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:47,817 INFO L290 TraceCheckUtils]: 0: Hoare triple {7895#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {7863#true} is VALID [2022-02-20 18:07:47,817 INFO L290 TraceCheckUtils]: 1: Hoare triple {7863#true} assume true; {7863#true} is VALID [2022-02-20 18:07:47,818 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {7863#true} {7865#(= 1 ~systemActive~0)} #255#return; {7865#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:47,820 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-02-20 18:07:47,824 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:47,839 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:07:47,841 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:47,843 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:07:47,843 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:47,845 INFO L290 TraceCheckUtils]: 0: Hoare triple {7863#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~methaneLevelCritical~0;#res := ~retValue_acc~5; {7863#true} is VALID [2022-02-20 18:07:47,845 INFO L290 TraceCheckUtils]: 1: Hoare triple {7863#true} assume true; {7863#true} is VALID [2022-02-20 18:07:47,845 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {7863#true} {7863#true} #267#return; {7863#true} is VALID [2022-02-20 18:07:47,845 INFO L290 TraceCheckUtils]: 0: Hoare triple {7863#true} havoc ~retValue_acc~9; {7863#true} is VALID [2022-02-20 18:07:47,845 INFO L272 TraceCheckUtils]: 1: Hoare triple {7863#true} call #t~ret37 := isMethaneLevelCritical(); {7863#true} is VALID [2022-02-20 18:07:47,845 INFO L290 TraceCheckUtils]: 2: Hoare triple {7863#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~methaneLevelCritical~0;#res := ~retValue_acc~5; {7863#true} is VALID [2022-02-20 18:07:47,845 INFO L290 TraceCheckUtils]: 3: Hoare triple {7863#true} assume true; {7863#true} is VALID [2022-02-20 18:07:47,846 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {7863#true} {7863#true} #267#return; {7863#true} is VALID [2022-02-20 18:07:47,846 INFO L290 TraceCheckUtils]: 5: Hoare triple {7863#true} assume -2147483648 <= #t~ret37 && #t~ret37 <= 2147483647;~retValue_acc~9 := #t~ret37;havoc #t~ret37;#res := ~retValue_acc~9; {7863#true} is VALID [2022-02-20 18:07:47,846 INFO L290 TraceCheckUtils]: 6: Hoare triple {7863#true} assume true; {7863#true} is VALID [2022-02-20 18:07:47,846 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {7863#true} {7864#false} #261#return; {7864#false} is VALID [2022-02-20 18:07:47,846 INFO L290 TraceCheckUtils]: 0: Hoare triple {7896#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~4#1; {7863#true} is VALID [2022-02-20 18:07:47,846 INFO L290 TraceCheckUtils]: 1: Hoare triple {7863#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret46#1, isHighWaterLevel_~retValue_acc~11#1, isHighWaterLevel_~tmp~7#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~11#1;havoc isHighWaterLevel_~tmp~7#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~7#1;havoc isHighWaterSensorDry_~retValue_acc~7#1; {7863#true} is VALID [2022-02-20 18:07:47,847 INFO L290 TraceCheckUtils]: 2: Hoare triple {7863#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~7#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~7#1; {7897#(<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1|)} is VALID [2022-02-20 18:07:47,847 INFO L290 TraceCheckUtils]: 3: Hoare triple {7897#(<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1|)} isHighWaterLevel_#t~ret46#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret46#1 && isHighWaterLevel_#t~ret46#1 <= 2147483647;isHighWaterLevel_~tmp~7#1 := isHighWaterLevel_#t~ret46#1;havoc isHighWaterLevel_#t~ret46#1; {7898#(<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp~7#1|)} is VALID [2022-02-20 18:07:47,847 INFO L290 TraceCheckUtils]: 4: Hoare triple {7898#(<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp~7#1|)} assume !(0 != isHighWaterLevel_~tmp~7#1);isHighWaterLevel_~tmp___0~0#1 := 1; {7864#false} is VALID [2022-02-20 18:07:47,847 INFO L290 TraceCheckUtils]: 5: Hoare triple {7864#false} isHighWaterLevel_~retValue_acc~11#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~11#1; {7864#false} is VALID [2022-02-20 18:07:47,848 INFO L290 TraceCheckUtils]: 6: Hoare triple {7864#false} #t~ret34#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret34#1 && #t~ret34#1 <= 2147483647;~tmp~4#1 := #t~ret34#1;havoc #t~ret34#1; {7864#false} is VALID [2022-02-20 18:07:47,848 INFO L290 TraceCheckUtils]: 7: Hoare triple {7864#false} assume 0 != ~tmp~4#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret36#1, activatePump_~tmp~6#1;havoc activatePump_~tmp~6#1; {7864#false} is VALID [2022-02-20 18:07:47,848 INFO L272 TraceCheckUtils]: 8: Hoare triple {7864#false} call activatePump_#t~ret36#1 := isMethaneAlarm(); {7863#true} is VALID [2022-02-20 18:07:47,848 INFO L290 TraceCheckUtils]: 9: Hoare triple {7863#true} havoc ~retValue_acc~9; {7863#true} is VALID [2022-02-20 18:07:47,848 INFO L272 TraceCheckUtils]: 10: Hoare triple {7863#true} call #t~ret37 := isMethaneLevelCritical(); {7863#true} is VALID [2022-02-20 18:07:47,848 INFO L290 TraceCheckUtils]: 11: Hoare triple {7863#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~methaneLevelCritical~0;#res := ~retValue_acc~5; {7863#true} is VALID [2022-02-20 18:07:47,848 INFO L290 TraceCheckUtils]: 12: Hoare triple {7863#true} assume true; {7863#true} is VALID [2022-02-20 18:07:47,848 INFO L284 TraceCheckUtils]: 13: Hoare quadruple {7863#true} {7863#true} #267#return; {7863#true} is VALID [2022-02-20 18:07:47,849 INFO L290 TraceCheckUtils]: 14: Hoare triple {7863#true} assume -2147483648 <= #t~ret37 && #t~ret37 <= 2147483647;~retValue_acc~9 := #t~ret37;havoc #t~ret37;#res := ~retValue_acc~9; {7863#true} is VALID [2022-02-20 18:07:47,849 INFO L290 TraceCheckUtils]: 15: Hoare triple {7863#true} assume true; {7863#true} is VALID [2022-02-20 18:07:47,849 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {7863#true} {7864#false} #261#return; {7864#false} is VALID [2022-02-20 18:07:47,849 INFO L290 TraceCheckUtils]: 17: Hoare triple {7864#false} assume -2147483648 <= activatePump_#t~ret36#1 && activatePump_#t~ret36#1 <= 2147483647;activatePump_~tmp~6#1 := activatePump_#t~ret36#1;havoc activatePump_#t~ret36#1; {7864#false} is VALID [2022-02-20 18:07:47,849 INFO L290 TraceCheckUtils]: 18: Hoare triple {7864#false} assume !(0 != activatePump_~tmp~6#1);assume { :begin_inline_activatePump__wrappee__highWaterSensor } true;~pumpRunning~0 := 1; {7864#false} is VALID [2022-02-20 18:07:47,849 INFO L290 TraceCheckUtils]: 19: Hoare triple {7864#false} assume { :end_inline_activatePump__wrappee__highWaterSensor } true; {7864#false} is VALID [2022-02-20 18:07:47,849 INFO L290 TraceCheckUtils]: 20: Hoare triple {7864#false} assume { :end_inline_activatePump } true; {7864#false} is VALID [2022-02-20 18:07:47,849 INFO L290 TraceCheckUtils]: 21: Hoare triple {7864#false} assume true; {7864#false} is VALID [2022-02-20 18:07:47,850 INFO L284 TraceCheckUtils]: 22: Hoare quadruple {7864#false} {7863#true} #245#return; {7864#false} is VALID [2022-02-20 18:07:47,850 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2022-02-20 18:07:47,850 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:47,852 INFO L290 TraceCheckUtils]: 0: Hoare triple {7863#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~methaneLevelCritical~0;#res := ~retValue_acc~5; {7863#true} is VALID [2022-02-20 18:07:47,852 INFO L290 TraceCheckUtils]: 1: Hoare triple {7863#true} assume true; {7863#true} is VALID [2022-02-20 18:07:47,852 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {7863#true} {7864#false} #247#return; {7864#false} is VALID [2022-02-20 18:07:47,854 INFO L290 TraceCheckUtils]: 0: Hoare triple {7863#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(13, 16);call #Ultimate.allocInit(7, 17);call write~init~int(44, 17, 0, 1);call write~init~int(77, 17, 1, 1);call write~init~int(101, 17, 2, 1);call write~init~int(116, 17, 3, 1);call write~init~int(104, 17, 4, 1);call write~init~int(58, 17, 5, 1);call write~init~int(0, 17, 6, 1);call #Ultimate.allocInit(5, 18);call write~init~int(67, 18, 0, 1);call write~init~int(82, 18, 1, 1);call write~init~int(73, 18, 2, 1);call write~init~int(84, 18, 3, 1);call write~init~int(0, 18, 4, 1);call #Ultimate.allocInit(3, 19);call write~init~int(79, 19, 0, 1);call write~init~int(75, 19, 1, 1);call write~init~int(0, 19, 2, 1);call #Ultimate.allocInit(2, 20);call write~init~int(41, 20, 0, 1);call write~init~int(0, 20, 1, 1);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~methAndRunningLastTime~0 := 0; {7865#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:47,854 INFO L290 TraceCheckUtils]: 1: Hoare triple {7865#(= 1 ~systemActive~0)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret33#1, main_~retValue_acc~8#1, main_~tmp~3#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~3#1;assume { :begin_inline_select_helpers } true; {7865#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:47,854 INFO L290 TraceCheckUtils]: 2: Hoare triple {7865#(= 1 ~systemActive~0)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {7865#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:47,855 INFO L290 TraceCheckUtils]: 3: Hoare triple {7865#(= 1 ~systemActive~0)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {7865#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:47,855 INFO L290 TraceCheckUtils]: 4: Hoare triple {7865#(= 1 ~systemActive~0)} main_#t~ret33#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret33#1 && main_#t~ret33#1 <= 2147483647;main_~tmp~3#1 := main_#t~ret33#1;havoc main_#t~ret33#1; {7865#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:47,855 INFO L290 TraceCheckUtils]: 5: Hoare triple {7865#(= 1 ~systemActive~0)} assume 0 != main_~tmp~3#1;assume { :begin_inline_setup } true; {7865#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:47,856 INFO L290 TraceCheckUtils]: 6: Hoare triple {7865#(= 1 ~systemActive~0)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0; {7865#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:47,856 INFO L290 TraceCheckUtils]: 7: Hoare triple {7865#(= 1 ~systemActive~0)} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet49#1, test_#t~nondet50#1, test_#t~nondet51#1, test_#t~nondet52#1, test_~splverifierCounter~0#1, test_~tmp~9#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~9#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {7865#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:47,856 INFO L290 TraceCheckUtils]: 8: Hoare triple {7865#(= 1 ~systemActive~0)} assume !false; {7865#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:47,857 INFO L290 TraceCheckUtils]: 9: Hoare triple {7865#(= 1 ~systemActive~0)} assume test_~splverifierCounter~0#1 < 4; {7865#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:47,857 INFO L290 TraceCheckUtils]: 10: Hoare triple {7865#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet49#1 && test_#t~nondet49#1 <= 2147483647;test_~tmp~9#1 := test_#t~nondet49#1;havoc test_#t~nondet49#1; {7865#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:47,857 INFO L290 TraceCheckUtils]: 11: Hoare triple {7865#(= 1 ~systemActive~0)} assume !(0 != test_~tmp~9#1); {7865#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:47,858 INFO L290 TraceCheckUtils]: 12: Hoare triple {7865#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet50#1 && test_#t~nondet50#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet50#1;havoc test_#t~nondet50#1; {7865#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:47,858 INFO L290 TraceCheckUtils]: 13: Hoare triple {7865#(= 1 ~systemActive~0)} assume 0 != test_~tmp___0~2#1; {7865#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:47,858 INFO L272 TraceCheckUtils]: 14: Hoare triple {7865#(= 1 ~systemActive~0)} call changeMethaneLevel(); {7895#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:47,859 INFO L290 TraceCheckUtils]: 15: Hoare triple {7895#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {7863#true} is VALID [2022-02-20 18:07:47,859 INFO L290 TraceCheckUtils]: 16: Hoare triple {7863#true} assume true; {7863#true} is VALID [2022-02-20 18:07:47,859 INFO L284 TraceCheckUtils]: 17: Hoare quadruple {7863#true} {7865#(= 1 ~systemActive~0)} #255#return; {7865#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:47,859 INFO L290 TraceCheckUtils]: 18: Hoare triple {7865#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet51#1 && test_#t~nondet51#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet51#1;havoc test_#t~nondet51#1; {7865#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:47,860 INFO L290 TraceCheckUtils]: 19: Hoare triple {7865#(= 1 ~systemActive~0)} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet52#1 && test_#t~nondet52#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet52#1;havoc test_#t~nondet52#1; {7865#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:47,860 INFO L290 TraceCheckUtils]: 20: Hoare triple {7865#(= 1 ~systemActive~0)} assume 0 != test_~tmp___1~0#1; {7865#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:47,860 INFO L272 TraceCheckUtils]: 21: Hoare triple {7865#(= 1 ~systemActive~0)} call timeShift(); {7865#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:47,861 INFO L290 TraceCheckUtils]: 22: Hoare triple {7865#(= 1 ~systemActive~0)} assume !(0 != ~pumpRunning~0); {7865#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:47,861 INFO L290 TraceCheckUtils]: 23: Hoare triple {7865#(= 1 ~systemActive~0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret35#1, processEnvironment_~tmp~5#1;havoc processEnvironment_~tmp~5#1; {7863#true} is VALID [2022-02-20 18:07:47,861 INFO L290 TraceCheckUtils]: 24: Hoare triple {7863#true} assume !(0 != ~pumpRunning~0); {7863#true} is VALID [2022-02-20 18:07:47,861 INFO L272 TraceCheckUtils]: 25: Hoare triple {7863#true} call processEnvironment__wrappee__methaneQuery(); {7896#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:07:47,861 INFO L290 TraceCheckUtils]: 26: Hoare triple {7896#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~4#1; {7863#true} is VALID [2022-02-20 18:07:47,862 INFO L290 TraceCheckUtils]: 27: Hoare triple {7863#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret46#1, isHighWaterLevel_~retValue_acc~11#1, isHighWaterLevel_~tmp~7#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~11#1;havoc isHighWaterLevel_~tmp~7#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~7#1;havoc isHighWaterSensorDry_~retValue_acc~7#1; {7863#true} is VALID [2022-02-20 18:07:47,862 INFO L290 TraceCheckUtils]: 28: Hoare triple {7863#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~7#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~7#1; {7897#(<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1|)} is VALID [2022-02-20 18:07:47,862 INFO L290 TraceCheckUtils]: 29: Hoare triple {7897#(<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1|)} isHighWaterLevel_#t~ret46#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret46#1 && isHighWaterLevel_#t~ret46#1 <= 2147483647;isHighWaterLevel_~tmp~7#1 := isHighWaterLevel_#t~ret46#1;havoc isHighWaterLevel_#t~ret46#1; {7898#(<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp~7#1|)} is VALID [2022-02-20 18:07:47,863 INFO L290 TraceCheckUtils]: 30: Hoare triple {7898#(<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp~7#1|)} assume !(0 != isHighWaterLevel_~tmp~7#1);isHighWaterLevel_~tmp___0~0#1 := 1; {7864#false} is VALID [2022-02-20 18:07:47,863 INFO L290 TraceCheckUtils]: 31: Hoare triple {7864#false} isHighWaterLevel_~retValue_acc~11#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~11#1; {7864#false} is VALID [2022-02-20 18:07:47,863 INFO L290 TraceCheckUtils]: 32: Hoare triple {7864#false} #t~ret34#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret34#1 && #t~ret34#1 <= 2147483647;~tmp~4#1 := #t~ret34#1;havoc #t~ret34#1; {7864#false} is VALID [2022-02-20 18:07:47,863 INFO L290 TraceCheckUtils]: 33: Hoare triple {7864#false} assume 0 != ~tmp~4#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret36#1, activatePump_~tmp~6#1;havoc activatePump_~tmp~6#1; {7864#false} is VALID [2022-02-20 18:07:47,863 INFO L272 TraceCheckUtils]: 34: Hoare triple {7864#false} call activatePump_#t~ret36#1 := isMethaneAlarm(); {7863#true} is VALID [2022-02-20 18:07:47,863 INFO L290 TraceCheckUtils]: 35: Hoare triple {7863#true} havoc ~retValue_acc~9; {7863#true} is VALID [2022-02-20 18:07:47,863 INFO L272 TraceCheckUtils]: 36: Hoare triple {7863#true} call #t~ret37 := isMethaneLevelCritical(); {7863#true} is VALID [2022-02-20 18:07:47,863 INFO L290 TraceCheckUtils]: 37: Hoare triple {7863#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~methaneLevelCritical~0;#res := ~retValue_acc~5; {7863#true} is VALID [2022-02-20 18:07:47,864 INFO L290 TraceCheckUtils]: 38: Hoare triple {7863#true} assume true; {7863#true} is VALID [2022-02-20 18:07:47,864 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {7863#true} {7863#true} #267#return; {7863#true} is VALID [2022-02-20 18:07:47,864 INFO L290 TraceCheckUtils]: 40: Hoare triple {7863#true} assume -2147483648 <= #t~ret37 && #t~ret37 <= 2147483647;~retValue_acc~9 := #t~ret37;havoc #t~ret37;#res := ~retValue_acc~9; {7863#true} is VALID [2022-02-20 18:07:47,864 INFO L290 TraceCheckUtils]: 41: Hoare triple {7863#true} assume true; {7863#true} is VALID [2022-02-20 18:07:47,864 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {7863#true} {7864#false} #261#return; {7864#false} is VALID [2022-02-20 18:07:47,864 INFO L290 TraceCheckUtils]: 43: Hoare triple {7864#false} assume -2147483648 <= activatePump_#t~ret36#1 && activatePump_#t~ret36#1 <= 2147483647;activatePump_~tmp~6#1 := activatePump_#t~ret36#1;havoc activatePump_#t~ret36#1; {7864#false} is VALID [2022-02-20 18:07:47,864 INFO L290 TraceCheckUtils]: 44: Hoare triple {7864#false} assume !(0 != activatePump_~tmp~6#1);assume { :begin_inline_activatePump__wrappee__highWaterSensor } true;~pumpRunning~0 := 1; {7864#false} is VALID [2022-02-20 18:07:47,864 INFO L290 TraceCheckUtils]: 45: Hoare triple {7864#false} assume { :end_inline_activatePump__wrappee__highWaterSensor } true; {7864#false} is VALID [2022-02-20 18:07:47,865 INFO L290 TraceCheckUtils]: 46: Hoare triple {7864#false} assume { :end_inline_activatePump } true; {7864#false} is VALID [2022-02-20 18:07:47,865 INFO L290 TraceCheckUtils]: 47: Hoare triple {7864#false} assume true; {7864#false} is VALID [2022-02-20 18:07:47,865 INFO L284 TraceCheckUtils]: 48: Hoare quadruple {7864#false} {7863#true} #245#return; {7864#false} is VALID [2022-02-20 18:07:47,865 INFO L290 TraceCheckUtils]: 49: Hoare triple {7864#false} assume { :end_inline_processEnvironment } true; {7864#false} is VALID [2022-02-20 18:07:47,865 INFO L290 TraceCheckUtils]: 50: Hoare triple {7864#false} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret47#1, __utac_acc__Specification2_spec__2_#t~ret48#1, __utac_acc__Specification2_spec__2_~tmp~8#1, __utac_acc__Specification2_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification2_spec__2_~tmp~8#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~1#1; {7864#false} is VALID [2022-02-20 18:07:47,865 INFO L272 TraceCheckUtils]: 51: Hoare triple {7864#false} call __utac_acc__Specification2_spec__2_#t~ret47#1 := isMethaneLevelCritical(); {7863#true} is VALID [2022-02-20 18:07:47,865 INFO L290 TraceCheckUtils]: 52: Hoare triple {7863#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~methaneLevelCritical~0;#res := ~retValue_acc~5; {7863#true} is VALID [2022-02-20 18:07:47,865 INFO L290 TraceCheckUtils]: 53: Hoare triple {7863#true} assume true; {7863#true} is VALID [2022-02-20 18:07:47,865 INFO L284 TraceCheckUtils]: 54: Hoare quadruple {7863#true} {7864#false} #247#return; {7864#false} is VALID [2022-02-20 18:07:47,866 INFO L290 TraceCheckUtils]: 55: Hoare triple {7864#false} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret47#1 && __utac_acc__Specification2_spec__2_#t~ret47#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~8#1 := __utac_acc__Specification2_spec__2_#t~ret47#1;havoc __utac_acc__Specification2_spec__2_#t~ret47#1; {7864#false} is VALID [2022-02-20 18:07:47,866 INFO L290 TraceCheckUtils]: 56: Hoare triple {7864#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~8#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~10#1;havoc isPumpRunning_~retValue_acc~10#1;isPumpRunning_~retValue_acc~10#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~10#1; {7864#false} is VALID [2022-02-20 18:07:47,866 INFO L290 TraceCheckUtils]: 57: Hoare triple {7864#false} __utac_acc__Specification2_spec__2_#t~ret48#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret48#1 && __utac_acc__Specification2_spec__2_#t~ret48#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~1#1 := __utac_acc__Specification2_spec__2_#t~ret48#1;havoc __utac_acc__Specification2_spec__2_#t~ret48#1; {7864#false} is VALID [2022-02-20 18:07:47,866 INFO L290 TraceCheckUtils]: 58: Hoare triple {7864#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~1#1; {7864#false} is VALID [2022-02-20 18:07:47,866 INFO L290 TraceCheckUtils]: 59: Hoare triple {7864#false} assume 0 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {7864#false} is VALID [2022-02-20 18:07:47,866 INFO L290 TraceCheckUtils]: 60: Hoare triple {7864#false} assume !false; {7864#false} is VALID [2022-02-20 18:07:47,866 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-02-20 18:07:47,867 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:07:47,867 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2020656409] [2022-02-20 18:07:47,867 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2020656409] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:07:47,867 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:07:47,867 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-02-20 18:07:47,867 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [268847714] [2022-02-20 18:07:47,867 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:07:47,868 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 5 states have internal predecessors, (48), 3 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) Word has length 61 [2022-02-20 18:07:47,868 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:07:47,868 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 5 states have internal predecessors, (48), 3 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2022-02-20 18:07:47,918 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 59 edges. 59 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:47,919 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-02-20 18:07:47,919 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:07:47,919 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-02-20 18:07:47,919 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-02-20 18:07:47,919 INFO L87 Difference]: Start difference. First operand 288 states and 343 transitions. Second operand has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 5 states have internal predecessors, (48), 3 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2022-02-20 18:07:48,430 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:48,430 INFO L93 Difference]: Finished difference Result 586 states and 711 transitions. [2022-02-20 18:07:48,430 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-02-20 18:07:48,431 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 5 states have internal predecessors, (48), 3 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) Word has length 61 [2022-02-20 18:07:48,431 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:07:48,431 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 5 states have internal predecessors, (48), 3 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2022-02-20 18:07:48,433 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 221 transitions. [2022-02-20 18:07:48,433 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 5 states have internal predecessors, (48), 3 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2022-02-20 18:07:48,434 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 221 transitions. [2022-02-20 18:07:48,435 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states and 221 transitions. [2022-02-20 18:07:48,570 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 221 edges. 221 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:48,576 INFO L225 Difference]: With dead ends: 586 [2022-02-20 18:07:48,576 INFO L226 Difference]: Without dead ends: 306 [2022-02-20 18:07:48,577 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2022-02-20 18:07:48,577 INFO L933 BasicCegarLoop]: 91 mSDtfsCounter, 193 mSDsluCounter, 92 mSDsCounter, 0 mSdLazyCounter, 233 mSolverCounterSat, 72 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 195 SdHoareTripleChecker+Valid, 183 SdHoareTripleChecker+Invalid, 305 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 72 IncrementalHoareTripleChecker+Valid, 233 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-02-20 18:07:48,577 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [195 Valid, 183 Invalid, 305 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [72 Valid, 233 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-02-20 18:07:48,578 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 306 states. [2022-02-20 18:07:48,590 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 306 to 292. [2022-02-20 18:07:48,590 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:07:48,591 INFO L82 GeneralOperation]: Start isEquivalent. First operand 306 states. Second operand has 292 states, 219 states have (on average 1.2009132420091324) internal successors, (263), 234 states have internal predecessors, (263), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (48), 38 states have call predecessors, (48), 36 states have call successors, (48) [2022-02-20 18:07:48,591 INFO L74 IsIncluded]: Start isIncluded. First operand 306 states. Second operand has 292 states, 219 states have (on average 1.2009132420091324) internal successors, (263), 234 states have internal predecessors, (263), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (48), 38 states have call predecessors, (48), 36 states have call successors, (48) [2022-02-20 18:07:48,592 INFO L87 Difference]: Start difference. First operand 306 states. Second operand has 292 states, 219 states have (on average 1.2009132420091324) internal successors, (263), 234 states have internal predecessors, (263), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (48), 38 states have call predecessors, (48), 36 states have call successors, (48) [2022-02-20 18:07:48,597 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:48,597 INFO L93 Difference]: Finished difference Result 306 states and 362 transitions. [2022-02-20 18:07:48,597 INFO L276 IsEmpty]: Start isEmpty. Operand 306 states and 362 transitions. [2022-02-20 18:07:48,598 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:48,598 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:48,599 INFO L74 IsIncluded]: Start isIncluded. First operand has 292 states, 219 states have (on average 1.2009132420091324) internal successors, (263), 234 states have internal predecessors, (263), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (48), 38 states have call predecessors, (48), 36 states have call successors, (48) Second operand 306 states. [2022-02-20 18:07:48,599 INFO L87 Difference]: Start difference. First operand has 292 states, 219 states have (on average 1.2009132420091324) internal successors, (263), 234 states have internal predecessors, (263), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (48), 38 states have call predecessors, (48), 36 states have call successors, (48) Second operand 306 states. [2022-02-20 18:07:48,605 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:48,605 INFO L93 Difference]: Finished difference Result 306 states and 362 transitions. [2022-02-20 18:07:48,605 INFO L276 IsEmpty]: Start isEmpty. Operand 306 states and 362 transitions. [2022-02-20 18:07:48,605 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:48,605 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:48,606 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:07:48,606 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:07:48,606 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 292 states, 219 states have (on average 1.2009132420091324) internal successors, (263), 234 states have internal predecessors, (263), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (48), 38 states have call predecessors, (48), 36 states have call successors, (48) [2022-02-20 18:07:48,612 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 292 states to 292 states and 347 transitions. [2022-02-20 18:07:48,612 INFO L78 Accepts]: Start accepts. Automaton has 292 states and 347 transitions. Word has length 61 [2022-02-20 18:07:48,612 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:07:48,612 INFO L470 AbstractCegarLoop]: Abstraction has 292 states and 347 transitions. [2022-02-20 18:07:48,612 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 5 states have internal predecessors, (48), 3 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2022-02-20 18:07:48,613 INFO L276 IsEmpty]: Start isEmpty. Operand 292 states and 347 transitions. [2022-02-20 18:07:48,613 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2022-02-20 18:07:48,613 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:07:48,613 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:07:48,613 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-02-20 18:07:48,614 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:07:48,614 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:07:48,614 INFO L85 PathProgramCache]: Analyzing trace with hash -1815500824, now seen corresponding path program 1 times [2022-02-20 18:07:48,614 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:07:48,614 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1378557090] [2022-02-20 18:07:48,614 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:07:48,614 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:07:48,629 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:48,646 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-02-20 18:07:48,647 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:48,649 INFO L290 TraceCheckUtils]: 0: Hoare triple {9794#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {9762#true} is VALID [2022-02-20 18:07:48,649 INFO L290 TraceCheckUtils]: 1: Hoare triple {9762#true} assume true; {9762#true} is VALID [2022-02-20 18:07:48,649 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {9762#true} {9764#(= ~waterLevel~0 1)} #255#return; {9764#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:48,651 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-02-20 18:07:48,655 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:48,664 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:07:48,666 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:48,682 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:07:48,683 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:48,685 INFO L290 TraceCheckUtils]: 0: Hoare triple {9762#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~methaneLevelCritical~0;#res := ~retValue_acc~5; {9762#true} is VALID [2022-02-20 18:07:48,685 INFO L290 TraceCheckUtils]: 1: Hoare triple {9762#true} assume true; {9762#true} is VALID [2022-02-20 18:07:48,685 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {9762#true} {9762#true} #267#return; {9762#true} is VALID [2022-02-20 18:07:48,685 INFO L290 TraceCheckUtils]: 0: Hoare triple {9762#true} havoc ~retValue_acc~9; {9762#true} is VALID [2022-02-20 18:07:48,686 INFO L272 TraceCheckUtils]: 1: Hoare triple {9762#true} call #t~ret37 := isMethaneLevelCritical(); {9762#true} is VALID [2022-02-20 18:07:48,686 INFO L290 TraceCheckUtils]: 2: Hoare triple {9762#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~methaneLevelCritical~0;#res := ~retValue_acc~5; {9762#true} is VALID [2022-02-20 18:07:48,686 INFO L290 TraceCheckUtils]: 3: Hoare triple {9762#true} assume true; {9762#true} is VALID [2022-02-20 18:07:48,686 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {9762#true} {9762#true} #267#return; {9762#true} is VALID [2022-02-20 18:07:48,686 INFO L290 TraceCheckUtils]: 5: Hoare triple {9762#true} assume -2147483648 <= #t~ret37 && #t~ret37 <= 2147483647;~retValue_acc~9 := #t~ret37;havoc #t~ret37;#res := ~retValue_acc~9; {9762#true} is VALID [2022-02-20 18:07:48,686 INFO L290 TraceCheckUtils]: 6: Hoare triple {9762#true} assume true; {9762#true} is VALID [2022-02-20 18:07:48,686 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {9762#true} {9796#(<= 2 ~waterLevel~0)} #261#return; {9796#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:48,687 INFO L290 TraceCheckUtils]: 0: Hoare triple {9795#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~4#1; {9762#true} is VALID [2022-02-20 18:07:48,687 INFO L290 TraceCheckUtils]: 1: Hoare triple {9762#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret46#1, isHighWaterLevel_~retValue_acc~11#1, isHighWaterLevel_~tmp~7#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~11#1;havoc isHighWaterLevel_~tmp~7#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~7#1;havoc isHighWaterSensorDry_~retValue_acc~7#1; {9762#true} is VALID [2022-02-20 18:07:48,687 INFO L290 TraceCheckUtils]: 2: Hoare triple {9762#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~7#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~7#1; {9796#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:48,687 INFO L290 TraceCheckUtils]: 3: Hoare triple {9796#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret46#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret46#1 && isHighWaterLevel_#t~ret46#1 <= 2147483647;isHighWaterLevel_~tmp~7#1 := isHighWaterLevel_#t~ret46#1;havoc isHighWaterLevel_#t~ret46#1; {9796#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:48,688 INFO L290 TraceCheckUtils]: 4: Hoare triple {9796#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~7#1);isHighWaterLevel_~tmp___0~0#1 := 1; {9796#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:48,688 INFO L290 TraceCheckUtils]: 5: Hoare triple {9796#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~11#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~11#1; {9796#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:48,688 INFO L290 TraceCheckUtils]: 6: Hoare triple {9796#(<= 2 ~waterLevel~0)} #t~ret34#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret34#1 && #t~ret34#1 <= 2147483647;~tmp~4#1 := #t~ret34#1;havoc #t~ret34#1; {9796#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:48,695 INFO L290 TraceCheckUtils]: 7: Hoare triple {9796#(<= 2 ~waterLevel~0)} assume 0 != ~tmp~4#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret36#1, activatePump_~tmp~6#1;havoc activatePump_~tmp~6#1; {9796#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:48,696 INFO L272 TraceCheckUtils]: 8: Hoare triple {9796#(<= 2 ~waterLevel~0)} call activatePump_#t~ret36#1 := isMethaneAlarm(); {9762#true} is VALID [2022-02-20 18:07:48,696 INFO L290 TraceCheckUtils]: 9: Hoare triple {9762#true} havoc ~retValue_acc~9; {9762#true} is VALID [2022-02-20 18:07:48,696 INFO L272 TraceCheckUtils]: 10: Hoare triple {9762#true} call #t~ret37 := isMethaneLevelCritical(); {9762#true} is VALID [2022-02-20 18:07:48,696 INFO L290 TraceCheckUtils]: 11: Hoare triple {9762#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~methaneLevelCritical~0;#res := ~retValue_acc~5; {9762#true} is VALID [2022-02-20 18:07:48,696 INFO L290 TraceCheckUtils]: 12: Hoare triple {9762#true} assume true; {9762#true} is VALID [2022-02-20 18:07:48,696 INFO L284 TraceCheckUtils]: 13: Hoare quadruple {9762#true} {9762#true} #267#return; {9762#true} is VALID [2022-02-20 18:07:48,696 INFO L290 TraceCheckUtils]: 14: Hoare triple {9762#true} assume -2147483648 <= #t~ret37 && #t~ret37 <= 2147483647;~retValue_acc~9 := #t~ret37;havoc #t~ret37;#res := ~retValue_acc~9; {9762#true} is VALID [2022-02-20 18:07:48,696 INFO L290 TraceCheckUtils]: 15: Hoare triple {9762#true} assume true; {9762#true} is VALID [2022-02-20 18:07:48,702 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {9762#true} {9796#(<= 2 ~waterLevel~0)} #261#return; {9796#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:48,702 INFO L290 TraceCheckUtils]: 17: Hoare triple {9796#(<= 2 ~waterLevel~0)} assume -2147483648 <= activatePump_#t~ret36#1 && activatePump_#t~ret36#1 <= 2147483647;activatePump_~tmp~6#1 := activatePump_#t~ret36#1;havoc activatePump_#t~ret36#1; {9796#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:48,702 INFO L290 TraceCheckUtils]: 18: Hoare triple {9796#(<= 2 ~waterLevel~0)} assume !(0 != activatePump_~tmp~6#1);assume { :begin_inline_activatePump__wrappee__highWaterSensor } true;~pumpRunning~0 := 1; {9796#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:48,703 INFO L290 TraceCheckUtils]: 19: Hoare triple {9796#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump__wrappee__highWaterSensor } true; {9796#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:48,703 INFO L290 TraceCheckUtils]: 20: Hoare triple {9796#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump } true; {9796#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:48,703 INFO L290 TraceCheckUtils]: 21: Hoare triple {9796#(<= 2 ~waterLevel~0)} assume true; {9796#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:48,703 INFO L284 TraceCheckUtils]: 22: Hoare quadruple {9796#(<= 2 ~waterLevel~0)} {9764#(= ~waterLevel~0 1)} #245#return; {9763#false} is VALID [2022-02-20 18:07:48,704 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2022-02-20 18:07:48,704 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:48,707 INFO L290 TraceCheckUtils]: 0: Hoare triple {9762#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~methaneLevelCritical~0;#res := ~retValue_acc~5; {9762#true} is VALID [2022-02-20 18:07:48,707 INFO L290 TraceCheckUtils]: 1: Hoare triple {9762#true} assume true; {9762#true} is VALID [2022-02-20 18:07:48,707 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {9762#true} {9763#false} #247#return; {9763#false} is VALID [2022-02-20 18:07:48,707 INFO L290 TraceCheckUtils]: 0: Hoare triple {9762#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(13, 16);call #Ultimate.allocInit(7, 17);call write~init~int(44, 17, 0, 1);call write~init~int(77, 17, 1, 1);call write~init~int(101, 17, 2, 1);call write~init~int(116, 17, 3, 1);call write~init~int(104, 17, 4, 1);call write~init~int(58, 17, 5, 1);call write~init~int(0, 17, 6, 1);call #Ultimate.allocInit(5, 18);call write~init~int(67, 18, 0, 1);call write~init~int(82, 18, 1, 1);call write~init~int(73, 18, 2, 1);call write~init~int(84, 18, 3, 1);call write~init~int(0, 18, 4, 1);call #Ultimate.allocInit(3, 19);call write~init~int(79, 19, 0, 1);call write~init~int(75, 19, 1, 1);call write~init~int(0, 19, 2, 1);call #Ultimate.allocInit(2, 20);call write~init~int(41, 20, 0, 1);call write~init~int(0, 20, 1, 1);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~methAndRunningLastTime~0 := 0; {9764#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:48,708 INFO L290 TraceCheckUtils]: 1: Hoare triple {9764#(= ~waterLevel~0 1)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret33#1, main_~retValue_acc~8#1, main_~tmp~3#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~3#1;assume { :begin_inline_select_helpers } true; {9764#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:48,708 INFO L290 TraceCheckUtils]: 2: Hoare triple {9764#(= ~waterLevel~0 1)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {9764#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:48,708 INFO L290 TraceCheckUtils]: 3: Hoare triple {9764#(= ~waterLevel~0 1)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {9764#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:48,709 INFO L290 TraceCheckUtils]: 4: Hoare triple {9764#(= ~waterLevel~0 1)} main_#t~ret33#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret33#1 && main_#t~ret33#1 <= 2147483647;main_~tmp~3#1 := main_#t~ret33#1;havoc main_#t~ret33#1; {9764#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:48,709 INFO L290 TraceCheckUtils]: 5: Hoare triple {9764#(= ~waterLevel~0 1)} assume 0 != main_~tmp~3#1;assume { :begin_inline_setup } true; {9764#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:48,709 INFO L290 TraceCheckUtils]: 6: Hoare triple {9764#(= ~waterLevel~0 1)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0; {9764#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:48,709 INFO L290 TraceCheckUtils]: 7: Hoare triple {9764#(= ~waterLevel~0 1)} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet49#1, test_#t~nondet50#1, test_#t~nondet51#1, test_#t~nondet52#1, test_~splverifierCounter~0#1, test_~tmp~9#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~9#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {9764#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:48,710 INFO L290 TraceCheckUtils]: 8: Hoare triple {9764#(= ~waterLevel~0 1)} assume !false; {9764#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:48,710 INFO L290 TraceCheckUtils]: 9: Hoare triple {9764#(= ~waterLevel~0 1)} assume test_~splverifierCounter~0#1 < 4; {9764#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:48,710 INFO L290 TraceCheckUtils]: 10: Hoare triple {9764#(= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet49#1 && test_#t~nondet49#1 <= 2147483647;test_~tmp~9#1 := test_#t~nondet49#1;havoc test_#t~nondet49#1; {9764#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:48,711 INFO L290 TraceCheckUtils]: 11: Hoare triple {9764#(= ~waterLevel~0 1)} assume !(0 != test_~tmp~9#1); {9764#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:48,711 INFO L290 TraceCheckUtils]: 12: Hoare triple {9764#(= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet50#1 && test_#t~nondet50#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet50#1;havoc test_#t~nondet50#1; {9764#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:48,711 INFO L290 TraceCheckUtils]: 13: Hoare triple {9764#(= ~waterLevel~0 1)} assume 0 != test_~tmp___0~2#1; {9764#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:48,712 INFO L272 TraceCheckUtils]: 14: Hoare triple {9764#(= ~waterLevel~0 1)} call changeMethaneLevel(); {9794#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:48,712 INFO L290 TraceCheckUtils]: 15: Hoare triple {9794#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {9762#true} is VALID [2022-02-20 18:07:48,712 INFO L290 TraceCheckUtils]: 16: Hoare triple {9762#true} assume true; {9762#true} is VALID [2022-02-20 18:07:48,712 INFO L284 TraceCheckUtils]: 17: Hoare quadruple {9762#true} {9764#(= ~waterLevel~0 1)} #255#return; {9764#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:48,712 INFO L290 TraceCheckUtils]: 18: Hoare triple {9764#(= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet51#1 && test_#t~nondet51#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet51#1;havoc test_#t~nondet51#1; {9764#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:48,713 INFO L290 TraceCheckUtils]: 19: Hoare triple {9764#(= ~waterLevel~0 1)} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet52#1 && test_#t~nondet52#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet52#1;havoc test_#t~nondet52#1; {9764#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:48,713 INFO L290 TraceCheckUtils]: 20: Hoare triple {9764#(= ~waterLevel~0 1)} assume 0 != test_~tmp___1~0#1; {9764#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:48,713 INFO L272 TraceCheckUtils]: 21: Hoare triple {9764#(= ~waterLevel~0 1)} call timeShift(); {9764#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:48,714 INFO L290 TraceCheckUtils]: 22: Hoare triple {9764#(= ~waterLevel~0 1)} assume !(0 != ~pumpRunning~0); {9764#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:48,714 INFO L290 TraceCheckUtils]: 23: Hoare triple {9764#(= ~waterLevel~0 1)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret35#1, processEnvironment_~tmp~5#1;havoc processEnvironment_~tmp~5#1; {9764#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:48,714 INFO L290 TraceCheckUtils]: 24: Hoare triple {9764#(= ~waterLevel~0 1)} assume !(0 != ~pumpRunning~0); {9764#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:07:48,715 INFO L272 TraceCheckUtils]: 25: Hoare triple {9764#(= ~waterLevel~0 1)} call processEnvironment__wrappee__methaneQuery(); {9795#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:07:48,715 INFO L290 TraceCheckUtils]: 26: Hoare triple {9795#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~4#1; {9762#true} is VALID [2022-02-20 18:07:48,715 INFO L290 TraceCheckUtils]: 27: Hoare triple {9762#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret46#1, isHighWaterLevel_~retValue_acc~11#1, isHighWaterLevel_~tmp~7#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~11#1;havoc isHighWaterLevel_~tmp~7#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~7#1;havoc isHighWaterSensorDry_~retValue_acc~7#1; {9762#true} is VALID [2022-02-20 18:07:48,715 INFO L290 TraceCheckUtils]: 28: Hoare triple {9762#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~7#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~7#1; {9796#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:48,715 INFO L290 TraceCheckUtils]: 29: Hoare triple {9796#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret46#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret46#1 && isHighWaterLevel_#t~ret46#1 <= 2147483647;isHighWaterLevel_~tmp~7#1 := isHighWaterLevel_#t~ret46#1;havoc isHighWaterLevel_#t~ret46#1; {9796#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:48,716 INFO L290 TraceCheckUtils]: 30: Hoare triple {9796#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~7#1);isHighWaterLevel_~tmp___0~0#1 := 1; {9796#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:48,716 INFO L290 TraceCheckUtils]: 31: Hoare triple {9796#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~11#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~11#1; {9796#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:48,716 INFO L290 TraceCheckUtils]: 32: Hoare triple {9796#(<= 2 ~waterLevel~0)} #t~ret34#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret34#1 && #t~ret34#1 <= 2147483647;~tmp~4#1 := #t~ret34#1;havoc #t~ret34#1; {9796#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:48,717 INFO L290 TraceCheckUtils]: 33: Hoare triple {9796#(<= 2 ~waterLevel~0)} assume 0 != ~tmp~4#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret36#1, activatePump_~tmp~6#1;havoc activatePump_~tmp~6#1; {9796#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:48,717 INFO L272 TraceCheckUtils]: 34: Hoare triple {9796#(<= 2 ~waterLevel~0)} call activatePump_#t~ret36#1 := isMethaneAlarm(); {9762#true} is VALID [2022-02-20 18:07:48,717 INFO L290 TraceCheckUtils]: 35: Hoare triple {9762#true} havoc ~retValue_acc~9; {9762#true} is VALID [2022-02-20 18:07:48,717 INFO L272 TraceCheckUtils]: 36: Hoare triple {9762#true} call #t~ret37 := isMethaneLevelCritical(); {9762#true} is VALID [2022-02-20 18:07:48,717 INFO L290 TraceCheckUtils]: 37: Hoare triple {9762#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~methaneLevelCritical~0;#res := ~retValue_acc~5; {9762#true} is VALID [2022-02-20 18:07:48,717 INFO L290 TraceCheckUtils]: 38: Hoare triple {9762#true} assume true; {9762#true} is VALID [2022-02-20 18:07:48,717 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {9762#true} {9762#true} #267#return; {9762#true} is VALID [2022-02-20 18:07:48,717 INFO L290 TraceCheckUtils]: 40: Hoare triple {9762#true} assume -2147483648 <= #t~ret37 && #t~ret37 <= 2147483647;~retValue_acc~9 := #t~ret37;havoc #t~ret37;#res := ~retValue_acc~9; {9762#true} is VALID [2022-02-20 18:07:48,717 INFO L290 TraceCheckUtils]: 41: Hoare triple {9762#true} assume true; {9762#true} is VALID [2022-02-20 18:07:48,718 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {9762#true} {9796#(<= 2 ~waterLevel~0)} #261#return; {9796#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:48,718 INFO L290 TraceCheckUtils]: 43: Hoare triple {9796#(<= 2 ~waterLevel~0)} assume -2147483648 <= activatePump_#t~ret36#1 && activatePump_#t~ret36#1 <= 2147483647;activatePump_~tmp~6#1 := activatePump_#t~ret36#1;havoc activatePump_#t~ret36#1; {9796#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:48,718 INFO L290 TraceCheckUtils]: 44: Hoare triple {9796#(<= 2 ~waterLevel~0)} assume !(0 != activatePump_~tmp~6#1);assume { :begin_inline_activatePump__wrappee__highWaterSensor } true;~pumpRunning~0 := 1; {9796#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:48,719 INFO L290 TraceCheckUtils]: 45: Hoare triple {9796#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump__wrappee__highWaterSensor } true; {9796#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:48,719 INFO L290 TraceCheckUtils]: 46: Hoare triple {9796#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump } true; {9796#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:48,719 INFO L290 TraceCheckUtils]: 47: Hoare triple {9796#(<= 2 ~waterLevel~0)} assume true; {9796#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:07:48,720 INFO L284 TraceCheckUtils]: 48: Hoare quadruple {9796#(<= 2 ~waterLevel~0)} {9764#(= ~waterLevel~0 1)} #245#return; {9763#false} is VALID [2022-02-20 18:07:48,720 INFO L290 TraceCheckUtils]: 49: Hoare triple {9763#false} assume { :end_inline_processEnvironment } true; {9763#false} is VALID [2022-02-20 18:07:48,720 INFO L290 TraceCheckUtils]: 50: Hoare triple {9763#false} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret47#1, __utac_acc__Specification2_spec__2_#t~ret48#1, __utac_acc__Specification2_spec__2_~tmp~8#1, __utac_acc__Specification2_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification2_spec__2_~tmp~8#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~1#1; {9763#false} is VALID [2022-02-20 18:07:48,720 INFO L272 TraceCheckUtils]: 51: Hoare triple {9763#false} call __utac_acc__Specification2_spec__2_#t~ret47#1 := isMethaneLevelCritical(); {9762#true} is VALID [2022-02-20 18:07:48,720 INFO L290 TraceCheckUtils]: 52: Hoare triple {9762#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~methaneLevelCritical~0;#res := ~retValue_acc~5; {9762#true} is VALID [2022-02-20 18:07:48,720 INFO L290 TraceCheckUtils]: 53: Hoare triple {9762#true} assume true; {9762#true} is VALID [2022-02-20 18:07:48,720 INFO L284 TraceCheckUtils]: 54: Hoare quadruple {9762#true} {9763#false} #247#return; {9763#false} is VALID [2022-02-20 18:07:48,720 INFO L290 TraceCheckUtils]: 55: Hoare triple {9763#false} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret47#1 && __utac_acc__Specification2_spec__2_#t~ret47#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~8#1 := __utac_acc__Specification2_spec__2_#t~ret47#1;havoc __utac_acc__Specification2_spec__2_#t~ret47#1; {9763#false} is VALID [2022-02-20 18:07:48,720 INFO L290 TraceCheckUtils]: 56: Hoare triple {9763#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~8#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~10#1;havoc isPumpRunning_~retValue_acc~10#1;isPumpRunning_~retValue_acc~10#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~10#1; {9763#false} is VALID [2022-02-20 18:07:48,721 INFO L290 TraceCheckUtils]: 57: Hoare triple {9763#false} __utac_acc__Specification2_spec__2_#t~ret48#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret48#1 && __utac_acc__Specification2_spec__2_#t~ret48#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~1#1 := __utac_acc__Specification2_spec__2_#t~ret48#1;havoc __utac_acc__Specification2_spec__2_#t~ret48#1; {9763#false} is VALID [2022-02-20 18:07:48,721 INFO L290 TraceCheckUtils]: 58: Hoare triple {9763#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~1#1; {9763#false} is VALID [2022-02-20 18:07:48,739 INFO L290 TraceCheckUtils]: 59: Hoare triple {9763#false} assume 0 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {9763#false} is VALID [2022-02-20 18:07:48,740 INFO L290 TraceCheckUtils]: 60: Hoare triple {9763#false} assume !false; {9763#false} is VALID [2022-02-20 18:07:48,740 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-02-20 18:07:48,740 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:07:48,740 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1378557090] [2022-02-20 18:07:48,740 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1378557090] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:07:48,741 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:07:48,741 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-02-20 18:07:48,741 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1873467749] [2022-02-20 18:07:48,741 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:07:48,742 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.0) internal successors, (48), 4 states have internal predecessors, (48), 4 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) Word has length 61 [2022-02-20 18:07:48,743 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:07:48,743 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 8.0) internal successors, (48), 4 states have internal predecessors, (48), 4 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) [2022-02-20 18:07:48,774 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 59 edges. 59 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:48,781 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-02-20 18:07:48,781 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:07:48,781 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-02-20 18:07:48,782 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-02-20 18:07:48,782 INFO L87 Difference]: Start difference. First operand 292 states and 347 transitions. Second operand has 6 states, 6 states have (on average 8.0) internal successors, (48), 4 states have internal predecessors, (48), 4 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) [2022-02-20 18:07:49,614 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:49,614 INFO L93 Difference]: Finished difference Result 804 states and 1007 transitions. [2022-02-20 18:07:49,614 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-02-20 18:07:49,614 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.0) internal successors, (48), 4 states have internal predecessors, (48), 4 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) Word has length 61 [2022-02-20 18:07:49,614 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:07:49,614 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 8.0) internal successors, (48), 4 states have internal predecessors, (48), 4 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) [2022-02-20 18:07:49,617 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 355 transitions. [2022-02-20 18:07:49,617 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 8.0) internal successors, (48), 4 states have internal predecessors, (48), 4 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) [2022-02-20 18:07:49,620 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 355 transitions. [2022-02-20 18:07:49,620 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 12 states and 355 transitions. [2022-02-20 18:07:49,932 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 355 edges. 355 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:49,946 INFO L225 Difference]: With dead ends: 804 [2022-02-20 18:07:49,946 INFO L226 Difference]: Without dead ends: 520 [2022-02-20 18:07:49,947 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 25 GetRequests, 14 SyntacticMatches, 1 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=40, Invalid=92, Unknown=0, NotChecked=0, Total=132 [2022-02-20 18:07:49,948 INFO L933 BasicCegarLoop]: 135 mSDtfsCounter, 298 mSDsluCounter, 105 mSDsCounter, 0 mSdLazyCounter, 272 mSolverCounterSat, 129 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 300 SdHoareTripleChecker+Valid, 240 SdHoareTripleChecker+Invalid, 401 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 129 IncrementalHoareTripleChecker+Valid, 272 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-02-20 18:07:49,948 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [300 Valid, 240 Invalid, 401 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [129 Valid, 272 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-02-20 18:07:49,948 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 520 states. [2022-02-20 18:07:50,004 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 520 to 518. [2022-02-20 18:07:50,004 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:07:50,005 INFO L82 GeneralOperation]: Start isEquivalent. First operand 520 states. Second operand has 518 states, 389 states have (on average 1.19280205655527) internal successors, (464), 412 states have internal predecessors, (464), 66 states have call successors, (66), 60 states have call predecessors, (66), 62 states have return successors, (101), 66 states have call predecessors, (101), 66 states have call successors, (101) [2022-02-20 18:07:50,006 INFO L74 IsIncluded]: Start isIncluded. First operand 520 states. Second operand has 518 states, 389 states have (on average 1.19280205655527) internal successors, (464), 412 states have internal predecessors, (464), 66 states have call successors, (66), 60 states have call predecessors, (66), 62 states have return successors, (101), 66 states have call predecessors, (101), 66 states have call successors, (101) [2022-02-20 18:07:50,006 INFO L87 Difference]: Start difference. First operand 520 states. Second operand has 518 states, 389 states have (on average 1.19280205655527) internal successors, (464), 412 states have internal predecessors, (464), 66 states have call successors, (66), 60 states have call predecessors, (66), 62 states have return successors, (101), 66 states have call predecessors, (101), 66 states have call successors, (101) [2022-02-20 18:07:50,018 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:50,019 INFO L93 Difference]: Finished difference Result 520 states and 632 transitions. [2022-02-20 18:07:50,019 INFO L276 IsEmpty]: Start isEmpty. Operand 520 states and 632 transitions. [2022-02-20 18:07:50,020 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:50,020 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:50,020 INFO L74 IsIncluded]: Start isIncluded. First operand has 518 states, 389 states have (on average 1.19280205655527) internal successors, (464), 412 states have internal predecessors, (464), 66 states have call successors, (66), 60 states have call predecessors, (66), 62 states have return successors, (101), 66 states have call predecessors, (101), 66 states have call successors, (101) Second operand 520 states. [2022-02-20 18:07:50,021 INFO L87 Difference]: Start difference. First operand has 518 states, 389 states have (on average 1.19280205655527) internal successors, (464), 412 states have internal predecessors, (464), 66 states have call successors, (66), 60 states have call predecessors, (66), 62 states have return successors, (101), 66 states have call predecessors, (101), 66 states have call successors, (101) Second operand 520 states. [2022-02-20 18:07:50,033 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:50,033 INFO L93 Difference]: Finished difference Result 520 states and 632 transitions. [2022-02-20 18:07:50,033 INFO L276 IsEmpty]: Start isEmpty. Operand 520 states and 632 transitions. [2022-02-20 18:07:50,034 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:50,034 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:50,034 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:07:50,034 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:07:50,035 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 518 states, 389 states have (on average 1.19280205655527) internal successors, (464), 412 states have internal predecessors, (464), 66 states have call successors, (66), 60 states have call predecessors, (66), 62 states have return successors, (101), 66 states have call predecessors, (101), 66 states have call successors, (101) [2022-02-20 18:07:50,049 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 518 states to 518 states and 631 transitions. [2022-02-20 18:07:50,049 INFO L78 Accepts]: Start accepts. Automaton has 518 states and 631 transitions. Word has length 61 [2022-02-20 18:07:50,050 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:07:50,050 INFO L470 AbstractCegarLoop]: Abstraction has 518 states and 631 transitions. [2022-02-20 18:07:50,050 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.0) internal successors, (48), 4 states have internal predecessors, (48), 4 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) [2022-02-20 18:07:50,050 INFO L276 IsEmpty]: Start isEmpty. Operand 518 states and 631 transitions. [2022-02-20 18:07:50,051 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2022-02-20 18:07:50,051 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:07:50,051 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:07:50,051 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-02-20 18:07:50,051 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:07:50,051 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:07:50,052 INFO L85 PathProgramCache]: Analyzing trace with hash -1657207794, now seen corresponding path program 1 times [2022-02-20 18:07:50,052 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:07:50,052 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1137121479] [2022-02-20 18:07:50,052 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:07:50,052 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:07:50,066 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:50,088 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-02-20 18:07:50,090 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:50,091 INFO L290 TraceCheckUtils]: 0: Hoare triple {12748#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {12711#true} is VALID [2022-02-20 18:07:50,091 INFO L290 TraceCheckUtils]: 1: Hoare triple {12711#true} assume true; {12711#true} is VALID [2022-02-20 18:07:50,092 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {12711#true} {12713#(= 1 ~systemActive~0)} #253#return; {12713#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:50,095 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:07:50,096 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:50,102 INFO L290 TraceCheckUtils]: 0: Hoare triple {12749#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {12750#(= ~methaneLevelCritical~0 1)} is VALID [2022-02-20 18:07:50,102 INFO L290 TraceCheckUtils]: 1: Hoare triple {12750#(= ~methaneLevelCritical~0 1)} assume true; {12750#(= ~methaneLevelCritical~0 1)} is VALID [2022-02-20 18:07:50,103 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {12750#(= ~methaneLevelCritical~0 1)} {12713#(= 1 ~systemActive~0)} #255#return; {12720#(= ~methaneLevelCritical~0 ~systemActive~0)} is VALID [2022-02-20 18:07:50,107 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2022-02-20 18:07:50,110 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:50,135 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:07:50,136 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:50,154 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:07:50,155 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:50,170 INFO L290 TraceCheckUtils]: 0: Hoare triple {12711#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~methaneLevelCritical~0;#res := ~retValue_acc~5; {12768#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:50,170 INFO L290 TraceCheckUtils]: 1: Hoare triple {12768#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} assume true; {12768#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:50,171 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {12768#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} {12711#true} #267#return; {12766#(= ~methaneLevelCritical~0 |isMethaneAlarm_#t~ret37|)} is VALID [2022-02-20 18:07:50,171 INFO L290 TraceCheckUtils]: 0: Hoare triple {12711#true} havoc ~retValue_acc~9; {12711#true} is VALID [2022-02-20 18:07:50,171 INFO L272 TraceCheckUtils]: 1: Hoare triple {12711#true} call #t~ret37 := isMethaneLevelCritical(); {12711#true} is VALID [2022-02-20 18:07:50,171 INFO L290 TraceCheckUtils]: 2: Hoare triple {12711#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~methaneLevelCritical~0;#res := ~retValue_acc~5; {12768#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:50,172 INFO L290 TraceCheckUtils]: 3: Hoare triple {12768#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} assume true; {12768#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:50,172 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {12768#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} {12711#true} #267#return; {12766#(= ~methaneLevelCritical~0 |isMethaneAlarm_#t~ret37|)} is VALID [2022-02-20 18:07:50,172 INFO L290 TraceCheckUtils]: 5: Hoare triple {12766#(= ~methaneLevelCritical~0 |isMethaneAlarm_#t~ret37|)} assume -2147483648 <= #t~ret37 && #t~ret37 <= 2147483647;~retValue_acc~9 := #t~ret37;havoc #t~ret37;#res := ~retValue_acc~9; {12767#(= |isMethaneAlarm_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:50,173 INFO L290 TraceCheckUtils]: 6: Hoare triple {12767#(= |isMethaneAlarm_#res| ~methaneLevelCritical~0)} assume true; {12767#(= |isMethaneAlarm_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:50,173 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {12767#(= |isMethaneAlarm_#res| ~methaneLevelCritical~0)} {12711#true} #261#return; {12760#(= |processEnvironment__wrappee__methaneQuery_activatePump_#t~ret36#1| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:50,173 INFO L290 TraceCheckUtils]: 0: Hoare triple {12751#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~4#1; {12711#true} is VALID [2022-02-20 18:07:50,173 INFO L290 TraceCheckUtils]: 1: Hoare triple {12711#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret46#1, isHighWaterLevel_~retValue_acc~11#1, isHighWaterLevel_~tmp~7#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~11#1;havoc isHighWaterLevel_~tmp~7#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~7#1;havoc isHighWaterSensorDry_~retValue_acc~7#1; {12711#true} is VALID [2022-02-20 18:07:50,174 INFO L290 TraceCheckUtils]: 2: Hoare triple {12711#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~7#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~7#1; {12711#true} is VALID [2022-02-20 18:07:50,174 INFO L290 TraceCheckUtils]: 3: Hoare triple {12711#true} isHighWaterLevel_#t~ret46#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret46#1 && isHighWaterLevel_#t~ret46#1 <= 2147483647;isHighWaterLevel_~tmp~7#1 := isHighWaterLevel_#t~ret46#1;havoc isHighWaterLevel_#t~ret46#1; {12711#true} is VALID [2022-02-20 18:07:50,174 INFO L290 TraceCheckUtils]: 4: Hoare triple {12711#true} assume !(0 != isHighWaterLevel_~tmp~7#1);isHighWaterLevel_~tmp___0~0#1 := 1; {12711#true} is VALID [2022-02-20 18:07:50,174 INFO L290 TraceCheckUtils]: 5: Hoare triple {12711#true} isHighWaterLevel_~retValue_acc~11#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~11#1; {12711#true} is VALID [2022-02-20 18:07:50,174 INFO L290 TraceCheckUtils]: 6: Hoare triple {12711#true} #t~ret34#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret34#1 && #t~ret34#1 <= 2147483647;~tmp~4#1 := #t~ret34#1;havoc #t~ret34#1; {12711#true} is VALID [2022-02-20 18:07:50,174 INFO L290 TraceCheckUtils]: 7: Hoare triple {12711#true} assume 0 != ~tmp~4#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret36#1, activatePump_~tmp~6#1;havoc activatePump_~tmp~6#1; {12711#true} is VALID [2022-02-20 18:07:50,174 INFO L272 TraceCheckUtils]: 8: Hoare triple {12711#true} call activatePump_#t~ret36#1 := isMethaneAlarm(); {12711#true} is VALID [2022-02-20 18:07:50,174 INFO L290 TraceCheckUtils]: 9: Hoare triple {12711#true} havoc ~retValue_acc~9; {12711#true} is VALID [2022-02-20 18:07:50,174 INFO L272 TraceCheckUtils]: 10: Hoare triple {12711#true} call #t~ret37 := isMethaneLevelCritical(); {12711#true} is VALID [2022-02-20 18:07:50,175 INFO L290 TraceCheckUtils]: 11: Hoare triple {12711#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~methaneLevelCritical~0;#res := ~retValue_acc~5; {12768#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:50,175 INFO L290 TraceCheckUtils]: 12: Hoare triple {12768#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} assume true; {12768#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:50,176 INFO L284 TraceCheckUtils]: 13: Hoare quadruple {12768#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} {12711#true} #267#return; {12766#(= ~methaneLevelCritical~0 |isMethaneAlarm_#t~ret37|)} is VALID [2022-02-20 18:07:50,176 INFO L290 TraceCheckUtils]: 14: Hoare triple {12766#(= ~methaneLevelCritical~0 |isMethaneAlarm_#t~ret37|)} assume -2147483648 <= #t~ret37 && #t~ret37 <= 2147483647;~retValue_acc~9 := #t~ret37;havoc #t~ret37;#res := ~retValue_acc~9; {12767#(= |isMethaneAlarm_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:50,176 INFO L290 TraceCheckUtils]: 15: Hoare triple {12767#(= |isMethaneAlarm_#res| ~methaneLevelCritical~0)} assume true; {12767#(= |isMethaneAlarm_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:50,177 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {12767#(= |isMethaneAlarm_#res| ~methaneLevelCritical~0)} {12711#true} #261#return; {12760#(= |processEnvironment__wrappee__methaneQuery_activatePump_#t~ret36#1| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:50,177 INFO L290 TraceCheckUtils]: 17: Hoare triple {12760#(= |processEnvironment__wrappee__methaneQuery_activatePump_#t~ret36#1| ~methaneLevelCritical~0)} assume -2147483648 <= activatePump_#t~ret36#1 && activatePump_#t~ret36#1 <= 2147483647;activatePump_~tmp~6#1 := activatePump_#t~ret36#1;havoc activatePump_#t~ret36#1; {12761#(= |processEnvironment__wrappee__methaneQuery_activatePump_~tmp~6#1| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:50,177 INFO L290 TraceCheckUtils]: 18: Hoare triple {12761#(= |processEnvironment__wrappee__methaneQuery_activatePump_~tmp~6#1| ~methaneLevelCritical~0)} assume !(0 != activatePump_~tmp~6#1);assume { :begin_inline_activatePump__wrappee__highWaterSensor } true;~pumpRunning~0 := 1; {12762#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:07:50,178 INFO L290 TraceCheckUtils]: 19: Hoare triple {12762#(= ~methaneLevelCritical~0 0)} assume { :end_inline_activatePump__wrappee__highWaterSensor } true; {12762#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:07:50,178 INFO L290 TraceCheckUtils]: 20: Hoare triple {12762#(= ~methaneLevelCritical~0 0)} assume { :end_inline_activatePump } true; {12762#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:07:50,178 INFO L290 TraceCheckUtils]: 21: Hoare triple {12762#(= ~methaneLevelCritical~0 0)} assume true; {12762#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:07:50,179 INFO L284 TraceCheckUtils]: 22: Hoare quadruple {12762#(= ~methaneLevelCritical~0 0)} {12721#(not (= ~methaneLevelCritical~0 0))} #245#return; {12712#false} is VALID [2022-02-20 18:07:50,179 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2022-02-20 18:07:50,179 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:50,182 INFO L290 TraceCheckUtils]: 0: Hoare triple {12711#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~methaneLevelCritical~0;#res := ~retValue_acc~5; {12711#true} is VALID [2022-02-20 18:07:50,182 INFO L290 TraceCheckUtils]: 1: Hoare triple {12711#true} assume true; {12711#true} is VALID [2022-02-20 18:07:50,183 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {12711#true} {12712#false} #247#return; {12712#false} is VALID [2022-02-20 18:07:50,184 INFO L290 TraceCheckUtils]: 0: Hoare triple {12711#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(13, 16);call #Ultimate.allocInit(7, 17);call write~init~int(44, 17, 0, 1);call write~init~int(77, 17, 1, 1);call write~init~int(101, 17, 2, 1);call write~init~int(116, 17, 3, 1);call write~init~int(104, 17, 4, 1);call write~init~int(58, 17, 5, 1);call write~init~int(0, 17, 6, 1);call #Ultimate.allocInit(5, 18);call write~init~int(67, 18, 0, 1);call write~init~int(82, 18, 1, 1);call write~init~int(73, 18, 2, 1);call write~init~int(84, 18, 3, 1);call write~init~int(0, 18, 4, 1);call #Ultimate.allocInit(3, 19);call write~init~int(79, 19, 0, 1);call write~init~int(75, 19, 1, 1);call write~init~int(0, 19, 2, 1);call #Ultimate.allocInit(2, 20);call write~init~int(41, 20, 0, 1);call write~init~int(0, 20, 1, 1);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~methAndRunningLastTime~0 := 0; {12713#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:50,184 INFO L290 TraceCheckUtils]: 1: Hoare triple {12713#(= 1 ~systemActive~0)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret33#1, main_~retValue_acc~8#1, main_~tmp~3#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~3#1;assume { :begin_inline_select_helpers } true; {12713#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:50,184 INFO L290 TraceCheckUtils]: 2: Hoare triple {12713#(= 1 ~systemActive~0)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {12713#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:50,185 INFO L290 TraceCheckUtils]: 3: Hoare triple {12713#(= 1 ~systemActive~0)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {12713#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:50,185 INFO L290 TraceCheckUtils]: 4: Hoare triple {12713#(= 1 ~systemActive~0)} main_#t~ret33#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret33#1 && main_#t~ret33#1 <= 2147483647;main_~tmp~3#1 := main_#t~ret33#1;havoc main_#t~ret33#1; {12713#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:50,186 INFO L290 TraceCheckUtils]: 5: Hoare triple {12713#(= 1 ~systemActive~0)} assume 0 != main_~tmp~3#1;assume { :begin_inline_setup } true; {12713#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:50,186 INFO L290 TraceCheckUtils]: 6: Hoare triple {12713#(= 1 ~systemActive~0)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0; {12713#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:50,186 INFO L290 TraceCheckUtils]: 7: Hoare triple {12713#(= 1 ~systemActive~0)} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet49#1, test_#t~nondet50#1, test_#t~nondet51#1, test_#t~nondet52#1, test_~splverifierCounter~0#1, test_~tmp~9#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~9#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {12713#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:50,187 INFO L290 TraceCheckUtils]: 8: Hoare triple {12713#(= 1 ~systemActive~0)} assume !false; {12713#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:50,187 INFO L290 TraceCheckUtils]: 9: Hoare triple {12713#(= 1 ~systemActive~0)} assume test_~splverifierCounter~0#1 < 4; {12713#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:50,187 INFO L290 TraceCheckUtils]: 10: Hoare triple {12713#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet49#1 && test_#t~nondet49#1 <= 2147483647;test_~tmp~9#1 := test_#t~nondet49#1;havoc test_#t~nondet49#1; {12713#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:50,187 INFO L290 TraceCheckUtils]: 11: Hoare triple {12713#(= 1 ~systemActive~0)} assume 0 != test_~tmp~9#1; {12713#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:50,188 INFO L272 TraceCheckUtils]: 12: Hoare triple {12713#(= 1 ~systemActive~0)} call waterRise(); {12748#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:07:50,188 INFO L290 TraceCheckUtils]: 13: Hoare triple {12748#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {12711#true} is VALID [2022-02-20 18:07:50,188 INFO L290 TraceCheckUtils]: 14: Hoare triple {12711#true} assume true; {12711#true} is VALID [2022-02-20 18:07:50,188 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {12711#true} {12713#(= 1 ~systemActive~0)} #253#return; {12713#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:50,189 INFO L290 TraceCheckUtils]: 16: Hoare triple {12713#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet50#1 && test_#t~nondet50#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet50#1;havoc test_#t~nondet50#1; {12713#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:50,189 INFO L290 TraceCheckUtils]: 17: Hoare triple {12713#(= 1 ~systemActive~0)} assume 0 != test_~tmp___0~2#1; {12713#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:50,189 INFO L272 TraceCheckUtils]: 18: Hoare triple {12713#(= 1 ~systemActive~0)} call changeMethaneLevel(); {12749#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:50,190 INFO L290 TraceCheckUtils]: 19: Hoare triple {12749#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {12750#(= ~methaneLevelCritical~0 1)} is VALID [2022-02-20 18:07:50,190 INFO L290 TraceCheckUtils]: 20: Hoare triple {12750#(= ~methaneLevelCritical~0 1)} assume true; {12750#(= ~methaneLevelCritical~0 1)} is VALID [2022-02-20 18:07:50,190 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {12750#(= ~methaneLevelCritical~0 1)} {12713#(= 1 ~systemActive~0)} #255#return; {12720#(= ~methaneLevelCritical~0 ~systemActive~0)} is VALID [2022-02-20 18:07:50,191 INFO L290 TraceCheckUtils]: 22: Hoare triple {12720#(= ~methaneLevelCritical~0 ~systemActive~0)} assume -2147483648 <= test_#t~nondet51#1 && test_#t~nondet51#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet51#1;havoc test_#t~nondet51#1; {12720#(= ~methaneLevelCritical~0 ~systemActive~0)} is VALID [2022-02-20 18:07:50,191 INFO L290 TraceCheckUtils]: 23: Hoare triple {12720#(= ~methaneLevelCritical~0 ~systemActive~0)} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet52#1 && test_#t~nondet52#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet52#1;havoc test_#t~nondet52#1; {12720#(= ~methaneLevelCritical~0 ~systemActive~0)} is VALID [2022-02-20 18:07:50,191 INFO L290 TraceCheckUtils]: 24: Hoare triple {12720#(= ~methaneLevelCritical~0 ~systemActive~0)} assume 0 != test_~tmp___1~0#1; {12720#(= ~methaneLevelCritical~0 ~systemActive~0)} is VALID [2022-02-20 18:07:50,191 INFO L272 TraceCheckUtils]: 25: Hoare triple {12720#(= ~methaneLevelCritical~0 ~systemActive~0)} call timeShift(); {12720#(= ~methaneLevelCritical~0 ~systemActive~0)} is VALID [2022-02-20 18:07:50,192 INFO L290 TraceCheckUtils]: 26: Hoare triple {12720#(= ~methaneLevelCritical~0 ~systemActive~0)} assume !(0 != ~pumpRunning~0); {12720#(= ~methaneLevelCritical~0 ~systemActive~0)} is VALID [2022-02-20 18:07:50,192 INFO L290 TraceCheckUtils]: 27: Hoare triple {12720#(= ~methaneLevelCritical~0 ~systemActive~0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret35#1, processEnvironment_~tmp~5#1;havoc processEnvironment_~tmp~5#1; {12721#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:07:50,192 INFO L290 TraceCheckUtils]: 28: Hoare triple {12721#(not (= ~methaneLevelCritical~0 0))} assume !(0 != ~pumpRunning~0); {12721#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:07:50,193 INFO L272 TraceCheckUtils]: 29: Hoare triple {12721#(not (= ~methaneLevelCritical~0 0))} call processEnvironment__wrappee__methaneQuery(); {12751#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:07:50,193 INFO L290 TraceCheckUtils]: 30: Hoare triple {12751#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~4#1; {12711#true} is VALID [2022-02-20 18:07:50,193 INFO L290 TraceCheckUtils]: 31: Hoare triple {12711#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret46#1, isHighWaterLevel_~retValue_acc~11#1, isHighWaterLevel_~tmp~7#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~11#1;havoc isHighWaterLevel_~tmp~7#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~7#1;havoc isHighWaterSensorDry_~retValue_acc~7#1; {12711#true} is VALID [2022-02-20 18:07:50,193 INFO L290 TraceCheckUtils]: 32: Hoare triple {12711#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~7#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~7#1; {12711#true} is VALID [2022-02-20 18:07:50,193 INFO L290 TraceCheckUtils]: 33: Hoare triple {12711#true} isHighWaterLevel_#t~ret46#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret46#1 && isHighWaterLevel_#t~ret46#1 <= 2147483647;isHighWaterLevel_~tmp~7#1 := isHighWaterLevel_#t~ret46#1;havoc isHighWaterLevel_#t~ret46#1; {12711#true} is VALID [2022-02-20 18:07:50,193 INFO L290 TraceCheckUtils]: 34: Hoare triple {12711#true} assume !(0 != isHighWaterLevel_~tmp~7#1);isHighWaterLevel_~tmp___0~0#1 := 1; {12711#true} is VALID [2022-02-20 18:07:50,193 INFO L290 TraceCheckUtils]: 35: Hoare triple {12711#true} isHighWaterLevel_~retValue_acc~11#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~11#1; {12711#true} is VALID [2022-02-20 18:07:50,193 INFO L290 TraceCheckUtils]: 36: Hoare triple {12711#true} #t~ret34#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret34#1 && #t~ret34#1 <= 2147483647;~tmp~4#1 := #t~ret34#1;havoc #t~ret34#1; {12711#true} is VALID [2022-02-20 18:07:50,194 INFO L290 TraceCheckUtils]: 37: Hoare triple {12711#true} assume 0 != ~tmp~4#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret36#1, activatePump_~tmp~6#1;havoc activatePump_~tmp~6#1; {12711#true} is VALID [2022-02-20 18:07:50,194 INFO L272 TraceCheckUtils]: 38: Hoare triple {12711#true} call activatePump_#t~ret36#1 := isMethaneAlarm(); {12711#true} is VALID [2022-02-20 18:07:50,194 INFO L290 TraceCheckUtils]: 39: Hoare triple {12711#true} havoc ~retValue_acc~9; {12711#true} is VALID [2022-02-20 18:07:50,194 INFO L272 TraceCheckUtils]: 40: Hoare triple {12711#true} call #t~ret37 := isMethaneLevelCritical(); {12711#true} is VALID [2022-02-20 18:07:50,196 INFO L290 TraceCheckUtils]: 41: Hoare triple {12711#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~methaneLevelCritical~0;#res := ~retValue_acc~5; {12768#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:50,197 INFO L290 TraceCheckUtils]: 42: Hoare triple {12768#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} assume true; {12768#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:50,197 INFO L284 TraceCheckUtils]: 43: Hoare quadruple {12768#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} {12711#true} #267#return; {12766#(= ~methaneLevelCritical~0 |isMethaneAlarm_#t~ret37|)} is VALID [2022-02-20 18:07:50,197 INFO L290 TraceCheckUtils]: 44: Hoare triple {12766#(= ~methaneLevelCritical~0 |isMethaneAlarm_#t~ret37|)} assume -2147483648 <= #t~ret37 && #t~ret37 <= 2147483647;~retValue_acc~9 := #t~ret37;havoc #t~ret37;#res := ~retValue_acc~9; {12767#(= |isMethaneAlarm_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:50,198 INFO L290 TraceCheckUtils]: 45: Hoare triple {12767#(= |isMethaneAlarm_#res| ~methaneLevelCritical~0)} assume true; {12767#(= |isMethaneAlarm_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:50,198 INFO L284 TraceCheckUtils]: 46: Hoare quadruple {12767#(= |isMethaneAlarm_#res| ~methaneLevelCritical~0)} {12711#true} #261#return; {12760#(= |processEnvironment__wrappee__methaneQuery_activatePump_#t~ret36#1| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:50,198 INFO L290 TraceCheckUtils]: 47: Hoare triple {12760#(= |processEnvironment__wrappee__methaneQuery_activatePump_#t~ret36#1| ~methaneLevelCritical~0)} assume -2147483648 <= activatePump_#t~ret36#1 && activatePump_#t~ret36#1 <= 2147483647;activatePump_~tmp~6#1 := activatePump_#t~ret36#1;havoc activatePump_#t~ret36#1; {12761#(= |processEnvironment__wrappee__methaneQuery_activatePump_~tmp~6#1| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:50,199 INFO L290 TraceCheckUtils]: 48: Hoare triple {12761#(= |processEnvironment__wrappee__methaneQuery_activatePump_~tmp~6#1| ~methaneLevelCritical~0)} assume !(0 != activatePump_~tmp~6#1);assume { :begin_inline_activatePump__wrappee__highWaterSensor } true;~pumpRunning~0 := 1; {12762#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:07:50,199 INFO L290 TraceCheckUtils]: 49: Hoare triple {12762#(= ~methaneLevelCritical~0 0)} assume { :end_inline_activatePump__wrappee__highWaterSensor } true; {12762#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:07:50,199 INFO L290 TraceCheckUtils]: 50: Hoare triple {12762#(= ~methaneLevelCritical~0 0)} assume { :end_inline_activatePump } true; {12762#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:07:50,199 INFO L290 TraceCheckUtils]: 51: Hoare triple {12762#(= ~methaneLevelCritical~0 0)} assume true; {12762#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:07:50,200 INFO L284 TraceCheckUtils]: 52: Hoare quadruple {12762#(= ~methaneLevelCritical~0 0)} {12721#(not (= ~methaneLevelCritical~0 0))} #245#return; {12712#false} is VALID [2022-02-20 18:07:50,200 INFO L290 TraceCheckUtils]: 53: Hoare triple {12712#false} assume { :end_inline_processEnvironment } true; {12712#false} is VALID [2022-02-20 18:07:50,200 INFO L290 TraceCheckUtils]: 54: Hoare triple {12712#false} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret47#1, __utac_acc__Specification2_spec__2_#t~ret48#1, __utac_acc__Specification2_spec__2_~tmp~8#1, __utac_acc__Specification2_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification2_spec__2_~tmp~8#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~1#1; {12712#false} is VALID [2022-02-20 18:07:50,200 INFO L272 TraceCheckUtils]: 55: Hoare triple {12712#false} call __utac_acc__Specification2_spec__2_#t~ret47#1 := isMethaneLevelCritical(); {12711#true} is VALID [2022-02-20 18:07:50,200 INFO L290 TraceCheckUtils]: 56: Hoare triple {12711#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~methaneLevelCritical~0;#res := ~retValue_acc~5; {12711#true} is VALID [2022-02-20 18:07:50,200 INFO L290 TraceCheckUtils]: 57: Hoare triple {12711#true} assume true; {12711#true} is VALID [2022-02-20 18:07:50,200 INFO L284 TraceCheckUtils]: 58: Hoare quadruple {12711#true} {12712#false} #247#return; {12712#false} is VALID [2022-02-20 18:07:50,200 INFO L290 TraceCheckUtils]: 59: Hoare triple {12712#false} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret47#1 && __utac_acc__Specification2_spec__2_#t~ret47#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~8#1 := __utac_acc__Specification2_spec__2_#t~ret47#1;havoc __utac_acc__Specification2_spec__2_#t~ret47#1; {12712#false} is VALID [2022-02-20 18:07:50,201 INFO L290 TraceCheckUtils]: 60: Hoare triple {12712#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~8#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~10#1;havoc isPumpRunning_~retValue_acc~10#1;isPumpRunning_~retValue_acc~10#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~10#1; {12712#false} is VALID [2022-02-20 18:07:50,201 INFO L290 TraceCheckUtils]: 61: Hoare triple {12712#false} __utac_acc__Specification2_spec__2_#t~ret48#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret48#1 && __utac_acc__Specification2_spec__2_#t~ret48#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~1#1 := __utac_acc__Specification2_spec__2_#t~ret48#1;havoc __utac_acc__Specification2_spec__2_#t~ret48#1; {12712#false} is VALID [2022-02-20 18:07:50,201 INFO L290 TraceCheckUtils]: 62: Hoare triple {12712#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~1#1; {12712#false} is VALID [2022-02-20 18:07:50,201 INFO L290 TraceCheckUtils]: 63: Hoare triple {12712#false} assume 0 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {12712#false} is VALID [2022-02-20 18:07:50,201 INFO L290 TraceCheckUtils]: 64: Hoare triple {12712#false} assume !false; {12712#false} is VALID [2022-02-20 18:07:50,201 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-02-20 18:07:50,201 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:07:50,202 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1137121479] [2022-02-20 18:07:50,202 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1137121479] provided 0 perfect and 1 imperfect interpolant sequences [2022-02-20 18:07:50,202 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1916094281] [2022-02-20 18:07:50,202 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:07:50,202 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-02-20 18:07:50,202 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-20 18:07:50,216 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-02-20 18:07:50,233 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-02-20 18:07:50,294 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:50,296 INFO L263 TraceCheckSpWp]: Trace formula consists of 397 conjuncts, 9 conjunts are in the unsatisfiable core [2022-02-20 18:07:50,314 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:50,318 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 18:07:50,719 INFO L290 TraceCheckUtils]: 0: Hoare triple {12711#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(13, 16);call #Ultimate.allocInit(7, 17);call write~init~int(44, 17, 0, 1);call write~init~int(77, 17, 1, 1);call write~init~int(101, 17, 2, 1);call write~init~int(116, 17, 3, 1);call write~init~int(104, 17, 4, 1);call write~init~int(58, 17, 5, 1);call write~init~int(0, 17, 6, 1);call #Ultimate.allocInit(5, 18);call write~init~int(67, 18, 0, 1);call write~init~int(82, 18, 1, 1);call write~init~int(73, 18, 2, 1);call write~init~int(84, 18, 3, 1);call write~init~int(0, 18, 4, 1);call #Ultimate.allocInit(3, 19);call write~init~int(79, 19, 0, 1);call write~init~int(75, 19, 1, 1);call write~init~int(0, 19, 2, 1);call #Ultimate.allocInit(2, 20);call write~init~int(41, 20, 0, 1);call write~init~int(0, 20, 1, 1);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~methAndRunningLastTime~0 := 0; {12711#true} is VALID [2022-02-20 18:07:50,719 INFO L290 TraceCheckUtils]: 1: Hoare triple {12711#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret33#1, main_~retValue_acc~8#1, main_~tmp~3#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~3#1;assume { :begin_inline_select_helpers } true; {12711#true} is VALID [2022-02-20 18:07:50,719 INFO L290 TraceCheckUtils]: 2: Hoare triple {12711#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {12711#true} is VALID [2022-02-20 18:07:50,719 INFO L290 TraceCheckUtils]: 3: Hoare triple {12711#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {12711#true} is VALID [2022-02-20 18:07:50,719 INFO L290 TraceCheckUtils]: 4: Hoare triple {12711#true} main_#t~ret33#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret33#1 && main_#t~ret33#1 <= 2147483647;main_~tmp~3#1 := main_#t~ret33#1;havoc main_#t~ret33#1; {12711#true} is VALID [2022-02-20 18:07:50,720 INFO L290 TraceCheckUtils]: 5: Hoare triple {12711#true} assume 0 != main_~tmp~3#1;assume { :begin_inline_setup } true; {12711#true} is VALID [2022-02-20 18:07:50,720 INFO L290 TraceCheckUtils]: 6: Hoare triple {12711#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0; {12711#true} is VALID [2022-02-20 18:07:50,720 INFO L290 TraceCheckUtils]: 7: Hoare triple {12711#true} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet49#1, test_#t~nondet50#1, test_#t~nondet51#1, test_#t~nondet52#1, test_~splverifierCounter~0#1, test_~tmp~9#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~9#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {12711#true} is VALID [2022-02-20 18:07:50,720 INFO L290 TraceCheckUtils]: 8: Hoare triple {12711#true} assume !false; {12711#true} is VALID [2022-02-20 18:07:50,720 INFO L290 TraceCheckUtils]: 9: Hoare triple {12711#true} assume test_~splverifierCounter~0#1 < 4; {12711#true} is VALID [2022-02-20 18:07:50,720 INFO L290 TraceCheckUtils]: 10: Hoare triple {12711#true} assume -2147483648 <= test_#t~nondet49#1 && test_#t~nondet49#1 <= 2147483647;test_~tmp~9#1 := test_#t~nondet49#1;havoc test_#t~nondet49#1; {12711#true} is VALID [2022-02-20 18:07:50,720 INFO L290 TraceCheckUtils]: 11: Hoare triple {12711#true} assume 0 != test_~tmp~9#1; {12711#true} is VALID [2022-02-20 18:07:50,720 INFO L272 TraceCheckUtils]: 12: Hoare triple {12711#true} call waterRise(); {12711#true} is VALID [2022-02-20 18:07:50,721 INFO L290 TraceCheckUtils]: 13: Hoare triple {12711#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {12711#true} is VALID [2022-02-20 18:07:50,721 INFO L290 TraceCheckUtils]: 14: Hoare triple {12711#true} assume true; {12711#true} is VALID [2022-02-20 18:07:50,721 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {12711#true} {12711#true} #253#return; {12711#true} is VALID [2022-02-20 18:07:50,721 INFO L290 TraceCheckUtils]: 16: Hoare triple {12711#true} assume -2147483648 <= test_#t~nondet50#1 && test_#t~nondet50#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet50#1;havoc test_#t~nondet50#1; {12711#true} is VALID [2022-02-20 18:07:50,721 INFO L290 TraceCheckUtils]: 17: Hoare triple {12711#true} assume 0 != test_~tmp___0~2#1; {12711#true} is VALID [2022-02-20 18:07:50,721 INFO L272 TraceCheckUtils]: 18: Hoare triple {12711#true} call changeMethaneLevel(); {12711#true} is VALID [2022-02-20 18:07:50,722 INFO L290 TraceCheckUtils]: 19: Hoare triple {12711#true} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {12829#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:50,722 INFO L290 TraceCheckUtils]: 20: Hoare triple {12829#(<= 1 ~methaneLevelCritical~0)} assume true; {12829#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:50,722 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {12829#(<= 1 ~methaneLevelCritical~0)} {12711#true} #255#return; {12829#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:50,723 INFO L290 TraceCheckUtils]: 22: Hoare triple {12829#(<= 1 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet51#1 && test_#t~nondet51#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet51#1;havoc test_#t~nondet51#1; {12829#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:50,723 INFO L290 TraceCheckUtils]: 23: Hoare triple {12829#(<= 1 ~methaneLevelCritical~0)} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet52#1 && test_#t~nondet52#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet52#1;havoc test_#t~nondet52#1; {12829#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:50,723 INFO L290 TraceCheckUtils]: 24: Hoare triple {12829#(<= 1 ~methaneLevelCritical~0)} assume 0 != test_~tmp___1~0#1; {12829#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:50,723 INFO L272 TraceCheckUtils]: 25: Hoare triple {12829#(<= 1 ~methaneLevelCritical~0)} call timeShift(); {12829#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:50,724 INFO L290 TraceCheckUtils]: 26: Hoare triple {12829#(<= 1 ~methaneLevelCritical~0)} assume !(0 != ~pumpRunning~0); {12829#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:50,724 INFO L290 TraceCheckUtils]: 27: Hoare triple {12829#(<= 1 ~methaneLevelCritical~0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret35#1, processEnvironment_~tmp~5#1;havoc processEnvironment_~tmp~5#1; {12829#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:50,724 INFO L290 TraceCheckUtils]: 28: Hoare triple {12829#(<= 1 ~methaneLevelCritical~0)} assume !(0 != ~pumpRunning~0); {12829#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:50,725 INFO L272 TraceCheckUtils]: 29: Hoare triple {12829#(<= 1 ~methaneLevelCritical~0)} call processEnvironment__wrappee__methaneQuery(); {12829#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:50,725 INFO L290 TraceCheckUtils]: 30: Hoare triple {12829#(<= 1 ~methaneLevelCritical~0)} havoc ~tmp~4#1; {12829#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:50,725 INFO L290 TraceCheckUtils]: 31: Hoare triple {12829#(<= 1 ~methaneLevelCritical~0)} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret46#1, isHighWaterLevel_~retValue_acc~11#1, isHighWaterLevel_~tmp~7#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~11#1;havoc isHighWaterLevel_~tmp~7#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~7#1;havoc isHighWaterSensorDry_~retValue_acc~7#1; {12829#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:50,725 INFO L290 TraceCheckUtils]: 32: Hoare triple {12829#(<= 1 ~methaneLevelCritical~0)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~7#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~7#1; {12829#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:50,726 INFO L290 TraceCheckUtils]: 33: Hoare triple {12829#(<= 1 ~methaneLevelCritical~0)} isHighWaterLevel_#t~ret46#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret46#1 && isHighWaterLevel_#t~ret46#1 <= 2147483647;isHighWaterLevel_~tmp~7#1 := isHighWaterLevel_#t~ret46#1;havoc isHighWaterLevel_#t~ret46#1; {12829#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:50,726 INFO L290 TraceCheckUtils]: 34: Hoare triple {12829#(<= 1 ~methaneLevelCritical~0)} assume !(0 != isHighWaterLevel_~tmp~7#1);isHighWaterLevel_~tmp___0~0#1 := 1; {12829#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:50,726 INFO L290 TraceCheckUtils]: 35: Hoare triple {12829#(<= 1 ~methaneLevelCritical~0)} isHighWaterLevel_~retValue_acc~11#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~11#1; {12829#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:50,727 INFO L290 TraceCheckUtils]: 36: Hoare triple {12829#(<= 1 ~methaneLevelCritical~0)} #t~ret34#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret34#1 && #t~ret34#1 <= 2147483647;~tmp~4#1 := #t~ret34#1;havoc #t~ret34#1; {12829#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:50,727 INFO L290 TraceCheckUtils]: 37: Hoare triple {12829#(<= 1 ~methaneLevelCritical~0)} assume 0 != ~tmp~4#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret36#1, activatePump_~tmp~6#1;havoc activatePump_~tmp~6#1; {12829#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:50,727 INFO L272 TraceCheckUtils]: 38: Hoare triple {12829#(<= 1 ~methaneLevelCritical~0)} call activatePump_#t~ret36#1 := isMethaneAlarm(); {12829#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:50,727 INFO L290 TraceCheckUtils]: 39: Hoare triple {12829#(<= 1 ~methaneLevelCritical~0)} havoc ~retValue_acc~9; {12829#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:50,728 INFO L272 TraceCheckUtils]: 40: Hoare triple {12829#(<= 1 ~methaneLevelCritical~0)} call #t~ret37 := isMethaneLevelCritical(); {12829#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:50,728 INFO L290 TraceCheckUtils]: 41: Hoare triple {12829#(<= 1 ~methaneLevelCritical~0)} havoc ~retValue_acc~5;~retValue_acc~5 := ~methaneLevelCritical~0;#res := ~retValue_acc~5; {12896#(and (<= ~methaneLevelCritical~0 |isMethaneLevelCritical_#res|) (<= 1 ~methaneLevelCritical~0))} is VALID [2022-02-20 18:07:50,729 INFO L290 TraceCheckUtils]: 42: Hoare triple {12896#(and (<= ~methaneLevelCritical~0 |isMethaneLevelCritical_#res|) (<= 1 ~methaneLevelCritical~0))} assume true; {12896#(and (<= ~methaneLevelCritical~0 |isMethaneLevelCritical_#res|) (<= 1 ~methaneLevelCritical~0))} is VALID [2022-02-20 18:07:50,729 INFO L284 TraceCheckUtils]: 43: Hoare quadruple {12896#(and (<= ~methaneLevelCritical~0 |isMethaneLevelCritical_#res|) (<= 1 ~methaneLevelCritical~0))} {12829#(<= 1 ~methaneLevelCritical~0)} #267#return; {12903#(and (<= 1 ~methaneLevelCritical~0) (<= ~methaneLevelCritical~0 |isMethaneAlarm_#t~ret37|))} is VALID [2022-02-20 18:07:50,729 INFO L290 TraceCheckUtils]: 44: Hoare triple {12903#(and (<= 1 ~methaneLevelCritical~0) (<= ~methaneLevelCritical~0 |isMethaneAlarm_#t~ret37|))} assume -2147483648 <= #t~ret37 && #t~ret37 <= 2147483647;~retValue_acc~9 := #t~ret37;havoc #t~ret37;#res := ~retValue_acc~9; {12907#(and (<= 1 ~methaneLevelCritical~0) (<= ~methaneLevelCritical~0 |isMethaneAlarm_#res|))} is VALID [2022-02-20 18:07:50,740 INFO L290 TraceCheckUtils]: 45: Hoare triple {12907#(and (<= 1 ~methaneLevelCritical~0) (<= ~methaneLevelCritical~0 |isMethaneAlarm_#res|))} assume true; {12907#(and (<= 1 ~methaneLevelCritical~0) (<= ~methaneLevelCritical~0 |isMethaneAlarm_#res|))} is VALID [2022-02-20 18:07:50,740 INFO L284 TraceCheckUtils]: 46: Hoare quadruple {12907#(and (<= 1 ~methaneLevelCritical~0) (<= ~methaneLevelCritical~0 |isMethaneAlarm_#res|))} {12829#(<= 1 ~methaneLevelCritical~0)} #261#return; {12914#(and (<= 1 ~methaneLevelCritical~0) (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__methaneQuery_activatePump_#t~ret36#1|))} is VALID [2022-02-20 18:07:50,740 INFO L290 TraceCheckUtils]: 47: Hoare triple {12914#(and (<= 1 ~methaneLevelCritical~0) (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__methaneQuery_activatePump_#t~ret36#1|))} assume -2147483648 <= activatePump_#t~ret36#1 && activatePump_#t~ret36#1 <= 2147483647;activatePump_~tmp~6#1 := activatePump_#t~ret36#1;havoc activatePump_#t~ret36#1; {12918#(and (<= 1 ~methaneLevelCritical~0) (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__methaneQuery_activatePump_~tmp~6#1|))} is VALID [2022-02-20 18:07:50,741 INFO L290 TraceCheckUtils]: 48: Hoare triple {12918#(and (<= 1 ~methaneLevelCritical~0) (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__methaneQuery_activatePump_~tmp~6#1|))} assume !(0 != activatePump_~tmp~6#1);assume { :begin_inline_activatePump__wrappee__highWaterSensor } true;~pumpRunning~0 := 1; {12712#false} is VALID [2022-02-20 18:07:50,741 INFO L290 TraceCheckUtils]: 49: Hoare triple {12712#false} assume { :end_inline_activatePump__wrappee__highWaterSensor } true; {12712#false} is VALID [2022-02-20 18:07:50,741 INFO L290 TraceCheckUtils]: 50: Hoare triple {12712#false} assume { :end_inline_activatePump } true; {12712#false} is VALID [2022-02-20 18:07:50,741 INFO L290 TraceCheckUtils]: 51: Hoare triple {12712#false} assume true; {12712#false} is VALID [2022-02-20 18:07:50,741 INFO L284 TraceCheckUtils]: 52: Hoare quadruple {12712#false} {12829#(<= 1 ~methaneLevelCritical~0)} #245#return; {12712#false} is VALID [2022-02-20 18:07:50,741 INFO L290 TraceCheckUtils]: 53: Hoare triple {12712#false} assume { :end_inline_processEnvironment } true; {12712#false} is VALID [2022-02-20 18:07:50,741 INFO L290 TraceCheckUtils]: 54: Hoare triple {12712#false} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret47#1, __utac_acc__Specification2_spec__2_#t~ret48#1, __utac_acc__Specification2_spec__2_~tmp~8#1, __utac_acc__Specification2_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification2_spec__2_~tmp~8#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~1#1; {12712#false} is VALID [2022-02-20 18:07:50,741 INFO L272 TraceCheckUtils]: 55: Hoare triple {12712#false} call __utac_acc__Specification2_spec__2_#t~ret47#1 := isMethaneLevelCritical(); {12712#false} is VALID [2022-02-20 18:07:50,741 INFO L290 TraceCheckUtils]: 56: Hoare triple {12712#false} havoc ~retValue_acc~5;~retValue_acc~5 := ~methaneLevelCritical~0;#res := ~retValue_acc~5; {12712#false} is VALID [2022-02-20 18:07:50,741 INFO L290 TraceCheckUtils]: 57: Hoare triple {12712#false} assume true; {12712#false} is VALID [2022-02-20 18:07:50,741 INFO L284 TraceCheckUtils]: 58: Hoare quadruple {12712#false} {12712#false} #247#return; {12712#false} is VALID [2022-02-20 18:07:50,741 INFO L290 TraceCheckUtils]: 59: Hoare triple {12712#false} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret47#1 && __utac_acc__Specification2_spec__2_#t~ret47#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~8#1 := __utac_acc__Specification2_spec__2_#t~ret47#1;havoc __utac_acc__Specification2_spec__2_#t~ret47#1; {12712#false} is VALID [2022-02-20 18:07:50,741 INFO L290 TraceCheckUtils]: 60: Hoare triple {12712#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~8#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~10#1;havoc isPumpRunning_~retValue_acc~10#1;isPumpRunning_~retValue_acc~10#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~10#1; {12712#false} is VALID [2022-02-20 18:07:50,741 INFO L290 TraceCheckUtils]: 61: Hoare triple {12712#false} __utac_acc__Specification2_spec__2_#t~ret48#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret48#1 && __utac_acc__Specification2_spec__2_#t~ret48#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~1#1 := __utac_acc__Specification2_spec__2_#t~ret48#1;havoc __utac_acc__Specification2_spec__2_#t~ret48#1; {12712#false} is VALID [2022-02-20 18:07:50,741 INFO L290 TraceCheckUtils]: 62: Hoare triple {12712#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~1#1; {12712#false} is VALID [2022-02-20 18:07:50,742 INFO L290 TraceCheckUtils]: 63: Hoare triple {12712#false} assume 0 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {12712#false} is VALID [2022-02-20 18:07:50,742 INFO L290 TraceCheckUtils]: 64: Hoare triple {12712#false} assume !false; {12712#false} is VALID [2022-02-20 18:07:50,742 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:07:50,742 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-02-20 18:07:50,742 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1916094281] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:07:50,742 INFO L191 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-02-20 18:07:50,742 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [15] total 21 [2022-02-20 18:07:50,743 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1117127451] [2022-02-20 18:07:50,743 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:07:50,743 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 6.5) internal successors, (52), 6 states have internal predecessors, (52), 3 states have call successors, (7), 3 states have call predecessors, (7), 5 states have return successors, (6), 5 states have call predecessors, (6), 3 states have call successors, (6) Word has length 65 [2022-02-20 18:07:50,743 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:07:50,743 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 8 states, 8 states have (on average 6.5) internal successors, (52), 6 states have internal predecessors, (52), 3 states have call successors, (7), 3 states have call predecessors, (7), 5 states have return successors, (6), 5 states have call predecessors, (6), 3 states have call successors, (6) [2022-02-20 18:07:50,772 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 65 edges. 65 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:50,772 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-02-20 18:07:50,772 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:07:50,772 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-02-20 18:07:50,772 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=52, Invalid=368, Unknown=0, NotChecked=0, Total=420 [2022-02-20 18:07:50,773 INFO L87 Difference]: Start difference. First operand 518 states and 631 transitions. Second operand has 8 states, 8 states have (on average 6.5) internal successors, (52), 6 states have internal predecessors, (52), 3 states have call successors, (7), 3 states have call predecessors, (7), 5 states have return successors, (6), 5 states have call predecessors, (6), 3 states have call successors, (6) [2022-02-20 18:07:51,414 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:51,414 INFO L93 Difference]: Finished difference Result 1006 states and 1230 transitions. [2022-02-20 18:07:51,414 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-02-20 18:07:51,415 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 6.5) internal successors, (52), 6 states have internal predecessors, (52), 3 states have call successors, (7), 3 states have call predecessors, (7), 5 states have return successors, (6), 5 states have call predecessors, (6), 3 states have call successors, (6) Word has length 65 [2022-02-20 18:07:51,415 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:07:51,415 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 6.5) internal successors, (52), 6 states have internal predecessors, (52), 3 states have call successors, (7), 3 states have call predecessors, (7), 5 states have return successors, (6), 5 states have call predecessors, (6), 3 states have call successors, (6) [2022-02-20 18:07:51,417 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 277 transitions. [2022-02-20 18:07:51,417 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 6.5) internal successors, (52), 6 states have internal predecessors, (52), 3 states have call successors, (7), 3 states have call predecessors, (7), 5 states have return successors, (6), 5 states have call predecessors, (6), 3 states have call successors, (6) [2022-02-20 18:07:51,419 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 277 transitions. [2022-02-20 18:07:51,419 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states and 277 transitions. [2022-02-20 18:07:51,573 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 277 edges. 277 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:51,586 INFO L225 Difference]: With dead ends: 1006 [2022-02-20 18:07:51,586 INFO L226 Difference]: Without dead ends: 496 [2022-02-20 18:07:51,588 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 85 GetRequests, 66 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=52, Invalid=368, Unknown=0, NotChecked=0, Total=420 [2022-02-20 18:07:51,588 INFO L933 BasicCegarLoop]: 175 mSDtfsCounter, 63 mSDsluCounter, 565 mSDsCounter, 0 mSdLazyCounter, 151 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 67 SdHoareTripleChecker+Valid, 740 SdHoareTripleChecker+Invalid, 154 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 151 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-02-20 18:07:51,588 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [67 Valid, 740 Invalid, 154 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 151 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-02-20 18:07:51,589 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 496 states. [2022-02-20 18:07:51,677 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 496 to 494. [2022-02-20 18:07:51,677 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:07:51,678 INFO L82 GeneralOperation]: Start isEquivalent. First operand 496 states. Second operand has 494 states, 370 states have (on average 1.1756756756756757) internal successors, (435), 392 states have internal predecessors, (435), 64 states have call successors, (64), 58 states have call predecessors, (64), 59 states have return successors, (88), 63 states have call predecessors, (88), 64 states have call successors, (88) [2022-02-20 18:07:51,679 INFO L74 IsIncluded]: Start isIncluded. First operand 496 states. Second operand has 494 states, 370 states have (on average 1.1756756756756757) internal successors, (435), 392 states have internal predecessors, (435), 64 states have call successors, (64), 58 states have call predecessors, (64), 59 states have return successors, (88), 63 states have call predecessors, (88), 64 states have call successors, (88) [2022-02-20 18:07:51,679 INFO L87 Difference]: Start difference. First operand 496 states. Second operand has 494 states, 370 states have (on average 1.1756756756756757) internal successors, (435), 392 states have internal predecessors, (435), 64 states have call successors, (64), 58 states have call predecessors, (64), 59 states have return successors, (88), 63 states have call predecessors, (88), 64 states have call successors, (88) [2022-02-20 18:07:51,690 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:51,690 INFO L93 Difference]: Finished difference Result 496 states and 590 transitions. [2022-02-20 18:07:51,690 INFO L276 IsEmpty]: Start isEmpty. Operand 496 states and 590 transitions. [2022-02-20 18:07:51,691 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:51,691 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:51,692 INFO L74 IsIncluded]: Start isIncluded. First operand has 494 states, 370 states have (on average 1.1756756756756757) internal successors, (435), 392 states have internal predecessors, (435), 64 states have call successors, (64), 58 states have call predecessors, (64), 59 states have return successors, (88), 63 states have call predecessors, (88), 64 states have call successors, (88) Second operand 496 states. [2022-02-20 18:07:51,692 INFO L87 Difference]: Start difference. First operand has 494 states, 370 states have (on average 1.1756756756756757) internal successors, (435), 392 states have internal predecessors, (435), 64 states have call successors, (64), 58 states have call predecessors, (64), 59 states have return successors, (88), 63 states have call predecessors, (88), 64 states have call successors, (88) Second operand 496 states. [2022-02-20 18:07:51,703 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:51,703 INFO L93 Difference]: Finished difference Result 496 states and 590 transitions. [2022-02-20 18:07:51,703 INFO L276 IsEmpty]: Start isEmpty. Operand 496 states and 590 transitions. [2022-02-20 18:07:51,704 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:51,704 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:51,704 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:07:51,704 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:07:51,705 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 494 states, 370 states have (on average 1.1756756756756757) internal successors, (435), 392 states have internal predecessors, (435), 64 states have call successors, (64), 58 states have call predecessors, (64), 59 states have return successors, (88), 63 states have call predecessors, (88), 64 states have call successors, (88) [2022-02-20 18:07:51,739 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 494 states to 494 states and 587 transitions. [2022-02-20 18:07:51,739 INFO L78 Accepts]: Start accepts. Automaton has 494 states and 587 transitions. Word has length 65 [2022-02-20 18:07:51,739 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:07:51,739 INFO L470 AbstractCegarLoop]: Abstraction has 494 states and 587 transitions. [2022-02-20 18:07:51,740 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 6.5) internal successors, (52), 6 states have internal predecessors, (52), 3 states have call successors, (7), 3 states have call predecessors, (7), 5 states have return successors, (6), 5 states have call predecessors, (6), 3 states have call successors, (6) [2022-02-20 18:07:51,740 INFO L276 IsEmpty]: Start isEmpty. Operand 494 states and 587 transitions. [2022-02-20 18:07:51,744 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 111 [2022-02-20 18:07:51,745 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:07:51,745 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:07:51,781 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-02-20 18:07:51,966 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-02-20 18:07:51,966 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:07:51,967 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:07:51,967 INFO L85 PathProgramCache]: Analyzing trace with hash 1520356328, now seen corresponding path program 1 times [2022-02-20 18:07:51,968 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:07:51,968 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1683805244] [2022-02-20 18:07:51,968 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:07:51,968 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:07:52,000 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:52,049 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-02-20 18:07:52,050 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:52,053 INFO L290 TraceCheckUtils]: 0: Hoare triple {16119#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {16051#true} is VALID [2022-02-20 18:07:52,053 INFO L290 TraceCheckUtils]: 1: Hoare triple {16051#true} assume true; {16051#true} is VALID [2022-02-20 18:07:52,054 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {16051#true} {16053#(= 1 ~systemActive~0)} #253#return; {16053#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:52,061 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-02-20 18:07:52,065 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:52,075 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-02-20 18:07:52,079 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:52,082 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:07:52,084 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:52,086 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:07:52,087 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:52,091 INFO L290 TraceCheckUtils]: 0: Hoare triple {16051#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~methaneLevelCritical~0;#res := ~retValue_acc~5; {16051#true} is VALID [2022-02-20 18:07:52,091 INFO L290 TraceCheckUtils]: 1: Hoare triple {16051#true} assume true; {16051#true} is VALID [2022-02-20 18:07:52,091 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {16051#true} {16051#true} #267#return; {16051#true} is VALID [2022-02-20 18:07:52,092 INFO L290 TraceCheckUtils]: 0: Hoare triple {16051#true} havoc ~retValue_acc~9; {16051#true} is VALID [2022-02-20 18:07:52,092 INFO L272 TraceCheckUtils]: 1: Hoare triple {16051#true} call #t~ret37 := isMethaneLevelCritical(); {16051#true} is VALID [2022-02-20 18:07:52,092 INFO L290 TraceCheckUtils]: 2: Hoare triple {16051#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~methaneLevelCritical~0;#res := ~retValue_acc~5; {16051#true} is VALID [2022-02-20 18:07:52,092 INFO L290 TraceCheckUtils]: 3: Hoare triple {16051#true} assume true; {16051#true} is VALID [2022-02-20 18:07:52,092 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {16051#true} {16051#true} #267#return; {16051#true} is VALID [2022-02-20 18:07:52,092 INFO L290 TraceCheckUtils]: 5: Hoare triple {16051#true} assume -2147483648 <= #t~ret37 && #t~ret37 <= 2147483647;~retValue_acc~9 := #t~ret37;havoc #t~ret37;#res := ~retValue_acc~9; {16051#true} is VALID [2022-02-20 18:07:52,092 INFO L290 TraceCheckUtils]: 6: Hoare triple {16051#true} assume true; {16051#true} is VALID [2022-02-20 18:07:52,093 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {16051#true} {16051#true} #261#return; {16051#true} is VALID [2022-02-20 18:07:52,093 INFO L290 TraceCheckUtils]: 0: Hoare triple {16147#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~4#1; {16051#true} is VALID [2022-02-20 18:07:52,093 INFO L290 TraceCheckUtils]: 1: Hoare triple {16051#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret46#1, isHighWaterLevel_~retValue_acc~11#1, isHighWaterLevel_~tmp~7#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~11#1;havoc isHighWaterLevel_~tmp~7#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~7#1;havoc isHighWaterSensorDry_~retValue_acc~7#1; {16051#true} is VALID [2022-02-20 18:07:52,093 INFO L290 TraceCheckUtils]: 2: Hoare triple {16051#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~7#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~7#1; {16051#true} is VALID [2022-02-20 18:07:52,093 INFO L290 TraceCheckUtils]: 3: Hoare triple {16051#true} isHighWaterLevel_#t~ret46#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret46#1 && isHighWaterLevel_#t~ret46#1 <= 2147483647;isHighWaterLevel_~tmp~7#1 := isHighWaterLevel_#t~ret46#1;havoc isHighWaterLevel_#t~ret46#1; {16051#true} is VALID [2022-02-20 18:07:52,093 INFO L290 TraceCheckUtils]: 4: Hoare triple {16051#true} assume !(0 != isHighWaterLevel_~tmp~7#1);isHighWaterLevel_~tmp___0~0#1 := 1; {16051#true} is VALID [2022-02-20 18:07:52,094 INFO L290 TraceCheckUtils]: 5: Hoare triple {16051#true} isHighWaterLevel_~retValue_acc~11#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~11#1; {16051#true} is VALID [2022-02-20 18:07:52,094 INFO L290 TraceCheckUtils]: 6: Hoare triple {16051#true} #t~ret34#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret34#1 && #t~ret34#1 <= 2147483647;~tmp~4#1 := #t~ret34#1;havoc #t~ret34#1; {16051#true} is VALID [2022-02-20 18:07:52,094 INFO L290 TraceCheckUtils]: 7: Hoare triple {16051#true} assume 0 != ~tmp~4#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret36#1, activatePump_~tmp~6#1;havoc activatePump_~tmp~6#1; {16051#true} is VALID [2022-02-20 18:07:52,094 INFO L272 TraceCheckUtils]: 8: Hoare triple {16051#true} call activatePump_#t~ret36#1 := isMethaneAlarm(); {16051#true} is VALID [2022-02-20 18:07:52,094 INFO L290 TraceCheckUtils]: 9: Hoare triple {16051#true} havoc ~retValue_acc~9; {16051#true} is VALID [2022-02-20 18:07:52,094 INFO L272 TraceCheckUtils]: 10: Hoare triple {16051#true} call #t~ret37 := isMethaneLevelCritical(); {16051#true} is VALID [2022-02-20 18:07:52,094 INFO L290 TraceCheckUtils]: 11: Hoare triple {16051#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~methaneLevelCritical~0;#res := ~retValue_acc~5; {16051#true} is VALID [2022-02-20 18:07:52,094 INFO L290 TraceCheckUtils]: 12: Hoare triple {16051#true} assume true; {16051#true} is VALID [2022-02-20 18:07:52,095 INFO L284 TraceCheckUtils]: 13: Hoare quadruple {16051#true} {16051#true} #267#return; {16051#true} is VALID [2022-02-20 18:07:52,095 INFO L290 TraceCheckUtils]: 14: Hoare triple {16051#true} assume -2147483648 <= #t~ret37 && #t~ret37 <= 2147483647;~retValue_acc~9 := #t~ret37;havoc #t~ret37;#res := ~retValue_acc~9; {16051#true} is VALID [2022-02-20 18:07:52,095 INFO L290 TraceCheckUtils]: 15: Hoare triple {16051#true} assume true; {16051#true} is VALID [2022-02-20 18:07:52,095 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {16051#true} {16051#true} #261#return; {16051#true} is VALID [2022-02-20 18:07:52,095 INFO L290 TraceCheckUtils]: 17: Hoare triple {16051#true} assume -2147483648 <= activatePump_#t~ret36#1 && activatePump_#t~ret36#1 <= 2147483647;activatePump_~tmp~6#1 := activatePump_#t~ret36#1;havoc activatePump_#t~ret36#1; {16051#true} is VALID [2022-02-20 18:07:52,095 INFO L290 TraceCheckUtils]: 18: Hoare triple {16051#true} assume !(0 != activatePump_~tmp~6#1);assume { :begin_inline_activatePump__wrappee__highWaterSensor } true;~pumpRunning~0 := 1; {16051#true} is VALID [2022-02-20 18:07:52,095 INFO L290 TraceCheckUtils]: 19: Hoare triple {16051#true} assume { :end_inline_activatePump__wrappee__highWaterSensor } true; {16051#true} is VALID [2022-02-20 18:07:52,096 INFO L290 TraceCheckUtils]: 20: Hoare triple {16051#true} assume { :end_inline_activatePump } true; {16051#true} is VALID [2022-02-20 18:07:52,096 INFO L290 TraceCheckUtils]: 21: Hoare triple {16051#true} assume true; {16051#true} is VALID [2022-02-20 18:07:52,096 INFO L284 TraceCheckUtils]: 22: Hoare quadruple {16051#true} {16051#true} #245#return; {16051#true} is VALID [2022-02-20 18:07:52,096 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2022-02-20 18:07:52,097 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:52,099 INFO L290 TraceCheckUtils]: 0: Hoare triple {16051#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~methaneLevelCritical~0;#res := ~retValue_acc~5; {16051#true} is VALID [2022-02-20 18:07:52,099 INFO L290 TraceCheckUtils]: 1: Hoare triple {16051#true} assume true; {16051#true} is VALID [2022-02-20 18:07:52,099 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {16051#true} {16051#true} #247#return; {16051#true} is VALID [2022-02-20 18:07:52,099 INFO L290 TraceCheckUtils]: 0: Hoare triple {16120#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0) (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))} assume !(0 != ~pumpRunning~0); {16051#true} is VALID [2022-02-20 18:07:52,099 INFO L290 TraceCheckUtils]: 1: Hoare triple {16051#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret35#1, processEnvironment_~tmp~5#1;havoc processEnvironment_~tmp~5#1; {16051#true} is VALID [2022-02-20 18:07:52,100 INFO L290 TraceCheckUtils]: 2: Hoare triple {16051#true} assume !(0 != ~pumpRunning~0); {16051#true} is VALID [2022-02-20 18:07:52,100 INFO L272 TraceCheckUtils]: 3: Hoare triple {16051#true} call processEnvironment__wrappee__methaneQuery(); {16147#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:07:52,100 INFO L290 TraceCheckUtils]: 4: Hoare triple {16147#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~4#1; {16051#true} is VALID [2022-02-20 18:07:52,100 INFO L290 TraceCheckUtils]: 5: Hoare triple {16051#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret46#1, isHighWaterLevel_~retValue_acc~11#1, isHighWaterLevel_~tmp~7#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~11#1;havoc isHighWaterLevel_~tmp~7#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~7#1;havoc isHighWaterSensorDry_~retValue_acc~7#1; {16051#true} is VALID [2022-02-20 18:07:52,100 INFO L290 TraceCheckUtils]: 6: Hoare triple {16051#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~7#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~7#1; {16051#true} is VALID [2022-02-20 18:07:52,101 INFO L290 TraceCheckUtils]: 7: Hoare triple {16051#true} isHighWaterLevel_#t~ret46#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret46#1 && isHighWaterLevel_#t~ret46#1 <= 2147483647;isHighWaterLevel_~tmp~7#1 := isHighWaterLevel_#t~ret46#1;havoc isHighWaterLevel_#t~ret46#1; {16051#true} is VALID [2022-02-20 18:07:52,101 INFO L290 TraceCheckUtils]: 8: Hoare triple {16051#true} assume !(0 != isHighWaterLevel_~tmp~7#1);isHighWaterLevel_~tmp___0~0#1 := 1; {16051#true} is VALID [2022-02-20 18:07:52,101 INFO L290 TraceCheckUtils]: 9: Hoare triple {16051#true} isHighWaterLevel_~retValue_acc~11#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~11#1; {16051#true} is VALID [2022-02-20 18:07:52,101 INFO L290 TraceCheckUtils]: 10: Hoare triple {16051#true} #t~ret34#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret34#1 && #t~ret34#1 <= 2147483647;~tmp~4#1 := #t~ret34#1;havoc #t~ret34#1; {16051#true} is VALID [2022-02-20 18:07:52,101 INFO L290 TraceCheckUtils]: 11: Hoare triple {16051#true} assume 0 != ~tmp~4#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret36#1, activatePump_~tmp~6#1;havoc activatePump_~tmp~6#1; {16051#true} is VALID [2022-02-20 18:07:52,101 INFO L272 TraceCheckUtils]: 12: Hoare triple {16051#true} call activatePump_#t~ret36#1 := isMethaneAlarm(); {16051#true} is VALID [2022-02-20 18:07:52,101 INFO L290 TraceCheckUtils]: 13: Hoare triple {16051#true} havoc ~retValue_acc~9; {16051#true} is VALID [2022-02-20 18:07:52,102 INFO L272 TraceCheckUtils]: 14: Hoare triple {16051#true} call #t~ret37 := isMethaneLevelCritical(); {16051#true} is VALID [2022-02-20 18:07:52,102 INFO L290 TraceCheckUtils]: 15: Hoare triple {16051#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~methaneLevelCritical~0;#res := ~retValue_acc~5; {16051#true} is VALID [2022-02-20 18:07:52,102 INFO L290 TraceCheckUtils]: 16: Hoare triple {16051#true} assume true; {16051#true} is VALID [2022-02-20 18:07:52,102 INFO L284 TraceCheckUtils]: 17: Hoare quadruple {16051#true} {16051#true} #267#return; {16051#true} is VALID [2022-02-20 18:07:52,102 INFO L290 TraceCheckUtils]: 18: Hoare triple {16051#true} assume -2147483648 <= #t~ret37 && #t~ret37 <= 2147483647;~retValue_acc~9 := #t~ret37;havoc #t~ret37;#res := ~retValue_acc~9; {16051#true} is VALID [2022-02-20 18:07:52,102 INFO L290 TraceCheckUtils]: 19: Hoare triple {16051#true} assume true; {16051#true} is VALID [2022-02-20 18:07:52,102 INFO L284 TraceCheckUtils]: 20: Hoare quadruple {16051#true} {16051#true} #261#return; {16051#true} is VALID [2022-02-20 18:07:52,102 INFO L290 TraceCheckUtils]: 21: Hoare triple {16051#true} assume -2147483648 <= activatePump_#t~ret36#1 && activatePump_#t~ret36#1 <= 2147483647;activatePump_~tmp~6#1 := activatePump_#t~ret36#1;havoc activatePump_#t~ret36#1; {16051#true} is VALID [2022-02-20 18:07:52,103 INFO L290 TraceCheckUtils]: 22: Hoare triple {16051#true} assume !(0 != activatePump_~tmp~6#1);assume { :begin_inline_activatePump__wrappee__highWaterSensor } true;~pumpRunning~0 := 1; {16051#true} is VALID [2022-02-20 18:07:52,103 INFO L290 TraceCheckUtils]: 23: Hoare triple {16051#true} assume { :end_inline_activatePump__wrappee__highWaterSensor } true; {16051#true} is VALID [2022-02-20 18:07:52,103 INFO L290 TraceCheckUtils]: 24: Hoare triple {16051#true} assume { :end_inline_activatePump } true; {16051#true} is VALID [2022-02-20 18:07:52,103 INFO L290 TraceCheckUtils]: 25: Hoare triple {16051#true} assume true; {16051#true} is VALID [2022-02-20 18:07:52,103 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {16051#true} {16051#true} #245#return; {16051#true} is VALID [2022-02-20 18:07:52,103 INFO L290 TraceCheckUtils]: 27: Hoare triple {16051#true} assume { :end_inline_processEnvironment } true; {16051#true} is VALID [2022-02-20 18:07:52,103 INFO L290 TraceCheckUtils]: 28: Hoare triple {16051#true} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret47#1, __utac_acc__Specification2_spec__2_#t~ret48#1, __utac_acc__Specification2_spec__2_~tmp~8#1, __utac_acc__Specification2_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification2_spec__2_~tmp~8#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~1#1; {16051#true} is VALID [2022-02-20 18:07:52,103 INFO L272 TraceCheckUtils]: 29: Hoare triple {16051#true} call __utac_acc__Specification2_spec__2_#t~ret47#1 := isMethaneLevelCritical(); {16051#true} is VALID [2022-02-20 18:07:52,104 INFO L290 TraceCheckUtils]: 30: Hoare triple {16051#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~methaneLevelCritical~0;#res := ~retValue_acc~5; {16051#true} is VALID [2022-02-20 18:07:52,104 INFO L290 TraceCheckUtils]: 31: Hoare triple {16051#true} assume true; {16051#true} is VALID [2022-02-20 18:07:52,104 INFO L284 TraceCheckUtils]: 32: Hoare quadruple {16051#true} {16051#true} #247#return; {16051#true} is VALID [2022-02-20 18:07:52,104 INFO L290 TraceCheckUtils]: 33: Hoare triple {16051#true} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret47#1 && __utac_acc__Specification2_spec__2_#t~ret47#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~8#1 := __utac_acc__Specification2_spec__2_#t~ret47#1;havoc __utac_acc__Specification2_spec__2_#t~ret47#1; {16051#true} is VALID [2022-02-20 18:07:52,104 INFO L290 TraceCheckUtils]: 34: Hoare triple {16051#true} assume !(0 != __utac_acc__Specification2_spec__2_~tmp~8#1);~methAndRunningLastTime~0 := 0; {16051#true} is VALID [2022-02-20 18:07:52,104 INFO L290 TraceCheckUtils]: 35: Hoare triple {16051#true} assume { :end_inline___utac_acc__Specification2_spec__2 } true; {16051#true} is VALID [2022-02-20 18:07:52,105 INFO L290 TraceCheckUtils]: 36: Hoare triple {16051#true} assume true; {16051#true} is VALID [2022-02-20 18:07:52,105 INFO L284 TraceCheckUtils]: 37: Hoare quadruple {16051#true} {16053#(= 1 ~systemActive~0)} #257#return; {16051#true} is VALID [2022-02-20 18:07:52,110 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 66 [2022-02-20 18:07:52,113 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:52,124 INFO L290 TraceCheckUtils]: 0: Hoare triple {16159#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {16160#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:52,124 INFO L290 TraceCheckUtils]: 1: Hoare triple {16160#(<= 1 ~methaneLevelCritical~0)} assume true; {16160#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:52,125 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {16160#(<= 1 ~methaneLevelCritical~0)} {16051#true} #255#return; {16098#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:07:52,125 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 79 [2022-02-20 18:07:52,127 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:52,173 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:07:52,176 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:52,215 INFO L290 TraceCheckUtils]: 0: Hoare triple {16051#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~methaneLevelCritical~0;#res := ~retValue_acc~5; {16166#(and (or (< 0 (+ ~methaneLevelCritical~0 1)) (<= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)) (or (<= ~methaneLevelCritical~0 |isMethaneLevelCritical_#res|) (<= ~methaneLevelCritical~0 0)))} is VALID [2022-02-20 18:07:52,216 INFO L290 TraceCheckUtils]: 1: Hoare triple {16166#(and (or (< 0 (+ ~methaneLevelCritical~0 1)) (<= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)) (or (<= ~methaneLevelCritical~0 |isMethaneLevelCritical_#res|) (<= ~methaneLevelCritical~0 0)))} assume true; {16166#(and (or (< 0 (+ ~methaneLevelCritical~0 1)) (<= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)) (or (<= ~methaneLevelCritical~0 |isMethaneLevelCritical_#res|) (<= ~methaneLevelCritical~0 0)))} is VALID [2022-02-20 18:07:52,217 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {16166#(and (or (< 0 (+ ~methaneLevelCritical~0 1)) (<= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)) (or (<= ~methaneLevelCritical~0 |isMethaneLevelCritical_#res|) (<= ~methaneLevelCritical~0 0)))} {16051#true} #267#return; {16164#(or (= ~methaneLevelCritical~0 0) (not (= |isMethaneAlarm_#t~ret37| 0)))} is VALID [2022-02-20 18:07:52,217 INFO L290 TraceCheckUtils]: 0: Hoare triple {16051#true} havoc ~retValue_acc~9; {16051#true} is VALID [2022-02-20 18:07:52,217 INFO L272 TraceCheckUtils]: 1: Hoare triple {16051#true} call #t~ret37 := isMethaneLevelCritical(); {16051#true} is VALID [2022-02-20 18:07:52,218 INFO L290 TraceCheckUtils]: 2: Hoare triple {16051#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~methaneLevelCritical~0;#res := ~retValue_acc~5; {16166#(and (or (< 0 (+ ~methaneLevelCritical~0 1)) (<= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)) (or (<= ~methaneLevelCritical~0 |isMethaneLevelCritical_#res|) (<= ~methaneLevelCritical~0 0)))} is VALID [2022-02-20 18:07:52,218 INFO L290 TraceCheckUtils]: 3: Hoare triple {16166#(and (or (< 0 (+ ~methaneLevelCritical~0 1)) (<= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)) (or (<= ~methaneLevelCritical~0 |isMethaneLevelCritical_#res|) (<= ~methaneLevelCritical~0 0)))} assume true; {16166#(and (or (< 0 (+ ~methaneLevelCritical~0 1)) (<= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)) (or (<= ~methaneLevelCritical~0 |isMethaneLevelCritical_#res|) (<= ~methaneLevelCritical~0 0)))} is VALID [2022-02-20 18:07:52,219 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {16166#(and (or (< 0 (+ ~methaneLevelCritical~0 1)) (<= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)) (or (<= ~methaneLevelCritical~0 |isMethaneLevelCritical_#res|) (<= ~methaneLevelCritical~0 0)))} {16051#true} #267#return; {16164#(or (= ~methaneLevelCritical~0 0) (not (= |isMethaneAlarm_#t~ret37| 0)))} is VALID [2022-02-20 18:07:52,219 INFO L290 TraceCheckUtils]: 5: Hoare triple {16164#(or (= ~methaneLevelCritical~0 0) (not (= |isMethaneAlarm_#t~ret37| 0)))} assume -2147483648 <= #t~ret37 && #t~ret37 <= 2147483647;~retValue_acc~9 := #t~ret37;havoc #t~ret37;#res := ~retValue_acc~9; {16165#(or (= ~methaneLevelCritical~0 0) (<= (+ |isMethaneAlarm_#res| 1) 0) (<= 1 |isMethaneAlarm_#res|))} is VALID [2022-02-20 18:07:52,220 INFO L290 TraceCheckUtils]: 6: Hoare triple {16165#(or (= ~methaneLevelCritical~0 0) (<= (+ |isMethaneAlarm_#res| 1) 0) (<= 1 |isMethaneAlarm_#res|))} assume true; {16165#(or (= ~methaneLevelCritical~0 0) (<= (+ |isMethaneAlarm_#res| 1) 0) (<= 1 |isMethaneAlarm_#res|))} is VALID [2022-02-20 18:07:52,220 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {16165#(or (= ~methaneLevelCritical~0 0) (<= (+ |isMethaneAlarm_#res| 1) 0) (<= 1 |isMethaneAlarm_#res|))} {16098#(not (= ~methaneLevelCritical~0 0))} #241#return; {16107#(not (= |timeShift_processEnvironment_#t~ret35#1| 0))} is VALID [2022-02-20 18:07:52,220 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2022-02-20 18:07:52,222 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:52,226 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-02-20 18:07:52,227 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:52,229 INFO L290 TraceCheckUtils]: 0: Hoare triple {16051#true} assume true; {16051#true} is VALID [2022-02-20 18:07:52,229 INFO L284 TraceCheckUtils]: 1: Hoare quadruple {16051#true} {16051#true} #265#return; {16051#true} is VALID [2022-02-20 18:07:52,229 INFO L290 TraceCheckUtils]: 0: Hoare triple {16147#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~4#1; {16051#true} is VALID [2022-02-20 18:07:52,229 INFO L290 TraceCheckUtils]: 1: Hoare triple {16051#true} assume !(0 == ~pumpRunning~0); {16051#true} is VALID [2022-02-20 18:07:52,229 INFO L272 TraceCheckUtils]: 2: Hoare triple {16051#true} call processEnvironment__wrappee__base(); {16051#true} is VALID [2022-02-20 18:07:52,229 INFO L290 TraceCheckUtils]: 3: Hoare triple {16051#true} assume true; {16051#true} is VALID [2022-02-20 18:07:52,229 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {16051#true} {16051#true} #265#return; {16051#true} is VALID [2022-02-20 18:07:52,230 INFO L290 TraceCheckUtils]: 5: Hoare triple {16051#true} assume true; {16051#true} is VALID [2022-02-20 18:07:52,230 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {16051#true} {16052#false} #243#return; {16052#false} is VALID [2022-02-20 18:07:52,230 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 100 [2022-02-20 18:07:52,231 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:52,232 INFO L290 TraceCheckUtils]: 0: Hoare triple {16051#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~methaneLevelCritical~0;#res := ~retValue_acc~5; {16051#true} is VALID [2022-02-20 18:07:52,233 INFO L290 TraceCheckUtils]: 1: Hoare triple {16051#true} assume true; {16051#true} is VALID [2022-02-20 18:07:52,233 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {16051#true} {16052#false} #247#return; {16052#false} is VALID [2022-02-20 18:07:52,234 INFO L290 TraceCheckUtils]: 0: Hoare triple {16051#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(13, 16);call #Ultimate.allocInit(7, 17);call write~init~int(44, 17, 0, 1);call write~init~int(77, 17, 1, 1);call write~init~int(101, 17, 2, 1);call write~init~int(116, 17, 3, 1);call write~init~int(104, 17, 4, 1);call write~init~int(58, 17, 5, 1);call write~init~int(0, 17, 6, 1);call #Ultimate.allocInit(5, 18);call write~init~int(67, 18, 0, 1);call write~init~int(82, 18, 1, 1);call write~init~int(73, 18, 2, 1);call write~init~int(84, 18, 3, 1);call write~init~int(0, 18, 4, 1);call #Ultimate.allocInit(3, 19);call write~init~int(79, 19, 0, 1);call write~init~int(75, 19, 1, 1);call write~init~int(0, 19, 2, 1);call #Ultimate.allocInit(2, 20);call write~init~int(41, 20, 0, 1);call write~init~int(0, 20, 1, 1);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~methAndRunningLastTime~0 := 0; {16053#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:52,235 INFO L290 TraceCheckUtils]: 1: Hoare triple {16053#(= 1 ~systemActive~0)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret33#1, main_~retValue_acc~8#1, main_~tmp~3#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~3#1;assume { :begin_inline_select_helpers } true; {16053#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:52,235 INFO L290 TraceCheckUtils]: 2: Hoare triple {16053#(= 1 ~systemActive~0)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {16053#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:52,235 INFO L290 TraceCheckUtils]: 3: Hoare triple {16053#(= 1 ~systemActive~0)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {16053#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:52,236 INFO L290 TraceCheckUtils]: 4: Hoare triple {16053#(= 1 ~systemActive~0)} main_#t~ret33#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret33#1 && main_#t~ret33#1 <= 2147483647;main_~tmp~3#1 := main_#t~ret33#1;havoc main_#t~ret33#1; {16053#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:52,236 INFO L290 TraceCheckUtils]: 5: Hoare triple {16053#(= 1 ~systemActive~0)} assume 0 != main_~tmp~3#1;assume { :begin_inline_setup } true; {16053#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:52,236 INFO L290 TraceCheckUtils]: 6: Hoare triple {16053#(= 1 ~systemActive~0)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0; {16053#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:52,237 INFO L290 TraceCheckUtils]: 7: Hoare triple {16053#(= 1 ~systemActive~0)} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet49#1, test_#t~nondet50#1, test_#t~nondet51#1, test_#t~nondet52#1, test_~splverifierCounter~0#1, test_~tmp~9#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~9#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {16053#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:52,237 INFO L290 TraceCheckUtils]: 8: Hoare triple {16053#(= 1 ~systemActive~0)} assume !false; {16053#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:52,237 INFO L290 TraceCheckUtils]: 9: Hoare triple {16053#(= 1 ~systemActive~0)} assume test_~splverifierCounter~0#1 < 4; {16053#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:52,238 INFO L290 TraceCheckUtils]: 10: Hoare triple {16053#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet49#1 && test_#t~nondet49#1 <= 2147483647;test_~tmp~9#1 := test_#t~nondet49#1;havoc test_#t~nondet49#1; {16053#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:52,238 INFO L290 TraceCheckUtils]: 11: Hoare triple {16053#(= 1 ~systemActive~0)} assume 0 != test_~tmp~9#1; {16053#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:52,238 INFO L272 TraceCheckUtils]: 12: Hoare triple {16053#(= 1 ~systemActive~0)} call waterRise(); {16119#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:07:52,238 INFO L290 TraceCheckUtils]: 13: Hoare triple {16119#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {16051#true} is VALID [2022-02-20 18:07:52,239 INFO L290 TraceCheckUtils]: 14: Hoare triple {16051#true} assume true; {16051#true} is VALID [2022-02-20 18:07:52,239 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {16051#true} {16053#(= 1 ~systemActive~0)} #253#return; {16053#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:52,239 INFO L290 TraceCheckUtils]: 16: Hoare triple {16053#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet50#1 && test_#t~nondet50#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet50#1;havoc test_#t~nondet50#1; {16053#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:52,240 INFO L290 TraceCheckUtils]: 17: Hoare triple {16053#(= 1 ~systemActive~0)} assume !(0 != test_~tmp___0~2#1); {16053#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:52,240 INFO L290 TraceCheckUtils]: 18: Hoare triple {16053#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet51#1 && test_#t~nondet51#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet51#1;havoc test_#t~nondet51#1; {16053#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:52,240 INFO L290 TraceCheckUtils]: 19: Hoare triple {16053#(= 1 ~systemActive~0)} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet52#1 && test_#t~nondet52#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet52#1;havoc test_#t~nondet52#1; {16053#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:52,241 INFO L290 TraceCheckUtils]: 20: Hoare triple {16053#(= 1 ~systemActive~0)} assume 0 != test_~tmp___1~0#1; {16053#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:07:52,241 INFO L272 TraceCheckUtils]: 21: Hoare triple {16053#(= 1 ~systemActive~0)} call timeShift(); {16120#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0) (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))} is VALID [2022-02-20 18:07:52,241 INFO L290 TraceCheckUtils]: 22: Hoare triple {16120#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0) (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))} assume !(0 != ~pumpRunning~0); {16051#true} is VALID [2022-02-20 18:07:52,241 INFO L290 TraceCheckUtils]: 23: Hoare triple {16051#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret35#1, processEnvironment_~tmp~5#1;havoc processEnvironment_~tmp~5#1; {16051#true} is VALID [2022-02-20 18:07:52,241 INFO L290 TraceCheckUtils]: 24: Hoare triple {16051#true} assume !(0 != ~pumpRunning~0); {16051#true} is VALID [2022-02-20 18:07:52,242 INFO L272 TraceCheckUtils]: 25: Hoare triple {16051#true} call processEnvironment__wrappee__methaneQuery(); {16147#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:07:52,242 INFO L290 TraceCheckUtils]: 26: Hoare triple {16147#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~4#1; {16051#true} is VALID [2022-02-20 18:07:52,242 INFO L290 TraceCheckUtils]: 27: Hoare triple {16051#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret46#1, isHighWaterLevel_~retValue_acc~11#1, isHighWaterLevel_~tmp~7#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~11#1;havoc isHighWaterLevel_~tmp~7#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~7#1;havoc isHighWaterSensorDry_~retValue_acc~7#1; {16051#true} is VALID [2022-02-20 18:07:52,242 INFO L290 TraceCheckUtils]: 28: Hoare triple {16051#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~7#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~7#1; {16051#true} is VALID [2022-02-20 18:07:52,242 INFO L290 TraceCheckUtils]: 29: Hoare triple {16051#true} isHighWaterLevel_#t~ret46#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret46#1 && isHighWaterLevel_#t~ret46#1 <= 2147483647;isHighWaterLevel_~tmp~7#1 := isHighWaterLevel_#t~ret46#1;havoc isHighWaterLevel_#t~ret46#1; {16051#true} is VALID [2022-02-20 18:07:52,242 INFO L290 TraceCheckUtils]: 30: Hoare triple {16051#true} assume !(0 != isHighWaterLevel_~tmp~7#1);isHighWaterLevel_~tmp___0~0#1 := 1; {16051#true} is VALID [2022-02-20 18:07:52,242 INFO L290 TraceCheckUtils]: 31: Hoare triple {16051#true} isHighWaterLevel_~retValue_acc~11#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~11#1; {16051#true} is VALID [2022-02-20 18:07:52,242 INFO L290 TraceCheckUtils]: 32: Hoare triple {16051#true} #t~ret34#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret34#1 && #t~ret34#1 <= 2147483647;~tmp~4#1 := #t~ret34#1;havoc #t~ret34#1; {16051#true} is VALID [2022-02-20 18:07:52,242 INFO L290 TraceCheckUtils]: 33: Hoare triple {16051#true} assume 0 != ~tmp~4#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret36#1, activatePump_~tmp~6#1;havoc activatePump_~tmp~6#1; {16051#true} is VALID [2022-02-20 18:07:52,243 INFO L272 TraceCheckUtils]: 34: Hoare triple {16051#true} call activatePump_#t~ret36#1 := isMethaneAlarm(); {16051#true} is VALID [2022-02-20 18:07:52,243 INFO L290 TraceCheckUtils]: 35: Hoare triple {16051#true} havoc ~retValue_acc~9; {16051#true} is VALID [2022-02-20 18:07:52,243 INFO L272 TraceCheckUtils]: 36: Hoare triple {16051#true} call #t~ret37 := isMethaneLevelCritical(); {16051#true} is VALID [2022-02-20 18:07:52,243 INFO L290 TraceCheckUtils]: 37: Hoare triple {16051#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~methaneLevelCritical~0;#res := ~retValue_acc~5; {16051#true} is VALID [2022-02-20 18:07:52,243 INFO L290 TraceCheckUtils]: 38: Hoare triple {16051#true} assume true; {16051#true} is VALID [2022-02-20 18:07:52,243 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {16051#true} {16051#true} #267#return; {16051#true} is VALID [2022-02-20 18:07:52,243 INFO L290 TraceCheckUtils]: 40: Hoare triple {16051#true} assume -2147483648 <= #t~ret37 && #t~ret37 <= 2147483647;~retValue_acc~9 := #t~ret37;havoc #t~ret37;#res := ~retValue_acc~9; {16051#true} is VALID [2022-02-20 18:07:52,243 INFO L290 TraceCheckUtils]: 41: Hoare triple {16051#true} assume true; {16051#true} is VALID [2022-02-20 18:07:52,243 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {16051#true} {16051#true} #261#return; {16051#true} is VALID [2022-02-20 18:07:52,244 INFO L290 TraceCheckUtils]: 43: Hoare triple {16051#true} assume -2147483648 <= activatePump_#t~ret36#1 && activatePump_#t~ret36#1 <= 2147483647;activatePump_~tmp~6#1 := activatePump_#t~ret36#1;havoc activatePump_#t~ret36#1; {16051#true} is VALID [2022-02-20 18:07:52,244 INFO L290 TraceCheckUtils]: 44: Hoare triple {16051#true} assume !(0 != activatePump_~tmp~6#1);assume { :begin_inline_activatePump__wrappee__highWaterSensor } true;~pumpRunning~0 := 1; {16051#true} is VALID [2022-02-20 18:07:52,244 INFO L290 TraceCheckUtils]: 45: Hoare triple {16051#true} assume { :end_inline_activatePump__wrappee__highWaterSensor } true; {16051#true} is VALID [2022-02-20 18:07:52,244 INFO L290 TraceCheckUtils]: 46: Hoare triple {16051#true} assume { :end_inline_activatePump } true; {16051#true} is VALID [2022-02-20 18:07:52,244 INFO L290 TraceCheckUtils]: 47: Hoare triple {16051#true} assume true; {16051#true} is VALID [2022-02-20 18:07:52,244 INFO L284 TraceCheckUtils]: 48: Hoare quadruple {16051#true} {16051#true} #245#return; {16051#true} is VALID [2022-02-20 18:07:52,244 INFO L290 TraceCheckUtils]: 49: Hoare triple {16051#true} assume { :end_inline_processEnvironment } true; {16051#true} is VALID [2022-02-20 18:07:52,244 INFO L290 TraceCheckUtils]: 50: Hoare triple {16051#true} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret47#1, __utac_acc__Specification2_spec__2_#t~ret48#1, __utac_acc__Specification2_spec__2_~tmp~8#1, __utac_acc__Specification2_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification2_spec__2_~tmp~8#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~1#1; {16051#true} is VALID [2022-02-20 18:07:52,244 INFO L272 TraceCheckUtils]: 51: Hoare triple {16051#true} call __utac_acc__Specification2_spec__2_#t~ret47#1 := isMethaneLevelCritical(); {16051#true} is VALID [2022-02-20 18:07:52,244 INFO L290 TraceCheckUtils]: 52: Hoare triple {16051#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~methaneLevelCritical~0;#res := ~retValue_acc~5; {16051#true} is VALID [2022-02-20 18:07:52,245 INFO L290 TraceCheckUtils]: 53: Hoare triple {16051#true} assume true; {16051#true} is VALID [2022-02-20 18:07:52,245 INFO L284 TraceCheckUtils]: 54: Hoare quadruple {16051#true} {16051#true} #247#return; {16051#true} is VALID [2022-02-20 18:07:52,245 INFO L290 TraceCheckUtils]: 55: Hoare triple {16051#true} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret47#1 && __utac_acc__Specification2_spec__2_#t~ret47#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~8#1 := __utac_acc__Specification2_spec__2_#t~ret47#1;havoc __utac_acc__Specification2_spec__2_#t~ret47#1; {16051#true} is VALID [2022-02-20 18:07:52,245 INFO L290 TraceCheckUtils]: 56: Hoare triple {16051#true} assume !(0 != __utac_acc__Specification2_spec__2_~tmp~8#1);~methAndRunningLastTime~0 := 0; {16051#true} is VALID [2022-02-20 18:07:52,245 INFO L290 TraceCheckUtils]: 57: Hoare triple {16051#true} assume { :end_inline___utac_acc__Specification2_spec__2 } true; {16051#true} is VALID [2022-02-20 18:07:52,245 INFO L290 TraceCheckUtils]: 58: Hoare triple {16051#true} assume true; {16051#true} is VALID [2022-02-20 18:07:52,245 INFO L284 TraceCheckUtils]: 59: Hoare quadruple {16051#true} {16053#(= 1 ~systemActive~0)} #257#return; {16051#true} is VALID [2022-02-20 18:07:52,245 INFO L290 TraceCheckUtils]: 60: Hoare triple {16051#true} assume !false; {16051#true} is VALID [2022-02-20 18:07:52,245 INFO L290 TraceCheckUtils]: 61: Hoare triple {16051#true} assume test_~splverifierCounter~0#1 < 4; {16051#true} is VALID [2022-02-20 18:07:52,246 INFO L290 TraceCheckUtils]: 62: Hoare triple {16051#true} assume -2147483648 <= test_#t~nondet49#1 && test_#t~nondet49#1 <= 2147483647;test_~tmp~9#1 := test_#t~nondet49#1;havoc test_#t~nondet49#1; {16051#true} is VALID [2022-02-20 18:07:52,246 INFO L290 TraceCheckUtils]: 63: Hoare triple {16051#true} assume !(0 != test_~tmp~9#1); {16051#true} is VALID [2022-02-20 18:07:52,246 INFO L290 TraceCheckUtils]: 64: Hoare triple {16051#true} assume -2147483648 <= test_#t~nondet50#1 && test_#t~nondet50#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet50#1;havoc test_#t~nondet50#1; {16051#true} is VALID [2022-02-20 18:07:52,246 INFO L290 TraceCheckUtils]: 65: Hoare triple {16051#true} assume 0 != test_~tmp___0~2#1; {16051#true} is VALID [2022-02-20 18:07:52,246 INFO L272 TraceCheckUtils]: 66: Hoare triple {16051#true} call changeMethaneLevel(); {16159#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:52,247 INFO L290 TraceCheckUtils]: 67: Hoare triple {16159#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {16160#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:52,247 INFO L290 TraceCheckUtils]: 68: Hoare triple {16160#(<= 1 ~methaneLevelCritical~0)} assume true; {16160#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:52,247 INFO L284 TraceCheckUtils]: 69: Hoare quadruple {16160#(<= 1 ~methaneLevelCritical~0)} {16051#true} #255#return; {16098#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:07:52,248 INFO L290 TraceCheckUtils]: 70: Hoare triple {16098#(not (= ~methaneLevelCritical~0 0))} assume -2147483648 <= test_#t~nondet51#1 && test_#t~nondet51#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet51#1;havoc test_#t~nondet51#1; {16098#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:07:52,248 INFO L290 TraceCheckUtils]: 71: Hoare triple {16098#(not (= ~methaneLevelCritical~0 0))} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet52#1 && test_#t~nondet52#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet52#1;havoc test_#t~nondet52#1; {16098#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:07:52,248 INFO L290 TraceCheckUtils]: 72: Hoare triple {16098#(not (= ~methaneLevelCritical~0 0))} assume 0 != test_~tmp___1~0#1; {16098#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:07:52,248 INFO L272 TraceCheckUtils]: 73: Hoare triple {16098#(not (= ~methaneLevelCritical~0 0))} call timeShift(); {16098#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:07:52,249 INFO L290 TraceCheckUtils]: 74: Hoare triple {16098#(not (= ~methaneLevelCritical~0 0))} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {16098#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:07:52,249 INFO L290 TraceCheckUtils]: 75: Hoare triple {16098#(not (= ~methaneLevelCritical~0 0))} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {16098#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:07:52,249 INFO L290 TraceCheckUtils]: 76: Hoare triple {16098#(not (= ~methaneLevelCritical~0 0))} assume { :end_inline_lowerWaterLevel } true; {16098#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:07:52,250 INFO L290 TraceCheckUtils]: 77: Hoare triple {16098#(not (= ~methaneLevelCritical~0 0))} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret35#1, processEnvironment_~tmp~5#1;havoc processEnvironment_~tmp~5#1; {16098#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:07:52,250 INFO L290 TraceCheckUtils]: 78: Hoare triple {16098#(not (= ~methaneLevelCritical~0 0))} assume 0 != ~pumpRunning~0; {16098#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:07:52,250 INFO L272 TraceCheckUtils]: 79: Hoare triple {16098#(not (= ~methaneLevelCritical~0 0))} call processEnvironment_#t~ret35#1 := isMethaneAlarm(); {16051#true} is VALID [2022-02-20 18:07:52,253 INFO L290 TraceCheckUtils]: 80: Hoare triple {16051#true} havoc ~retValue_acc~9; {16051#true} is VALID [2022-02-20 18:07:52,253 INFO L272 TraceCheckUtils]: 81: Hoare triple {16051#true} call #t~ret37 := isMethaneLevelCritical(); {16051#true} is VALID [2022-02-20 18:07:52,254 INFO L290 TraceCheckUtils]: 82: Hoare triple {16051#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~methaneLevelCritical~0;#res := ~retValue_acc~5; {16166#(and (or (< 0 (+ ~methaneLevelCritical~0 1)) (<= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)) (or (<= ~methaneLevelCritical~0 |isMethaneLevelCritical_#res|) (<= ~methaneLevelCritical~0 0)))} is VALID [2022-02-20 18:07:52,254 INFO L290 TraceCheckUtils]: 83: Hoare triple {16166#(and (or (< 0 (+ ~methaneLevelCritical~0 1)) (<= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)) (or (<= ~methaneLevelCritical~0 |isMethaneLevelCritical_#res|) (<= ~methaneLevelCritical~0 0)))} assume true; {16166#(and (or (< 0 (+ ~methaneLevelCritical~0 1)) (<= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)) (or (<= ~methaneLevelCritical~0 |isMethaneLevelCritical_#res|) (<= ~methaneLevelCritical~0 0)))} is VALID [2022-02-20 18:07:52,255 INFO L284 TraceCheckUtils]: 84: Hoare quadruple {16166#(and (or (< 0 (+ ~methaneLevelCritical~0 1)) (<= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)) (or (<= ~methaneLevelCritical~0 |isMethaneLevelCritical_#res|) (<= ~methaneLevelCritical~0 0)))} {16051#true} #267#return; {16164#(or (= ~methaneLevelCritical~0 0) (not (= |isMethaneAlarm_#t~ret37| 0)))} is VALID [2022-02-20 18:07:52,255 INFO L290 TraceCheckUtils]: 85: Hoare triple {16164#(or (= ~methaneLevelCritical~0 0) (not (= |isMethaneAlarm_#t~ret37| 0)))} assume -2147483648 <= #t~ret37 && #t~ret37 <= 2147483647;~retValue_acc~9 := #t~ret37;havoc #t~ret37;#res := ~retValue_acc~9; {16165#(or (= ~methaneLevelCritical~0 0) (<= (+ |isMethaneAlarm_#res| 1) 0) (<= 1 |isMethaneAlarm_#res|))} is VALID [2022-02-20 18:07:52,256 INFO L290 TraceCheckUtils]: 86: Hoare triple {16165#(or (= ~methaneLevelCritical~0 0) (<= (+ |isMethaneAlarm_#res| 1) 0) (<= 1 |isMethaneAlarm_#res|))} assume true; {16165#(or (= ~methaneLevelCritical~0 0) (<= (+ |isMethaneAlarm_#res| 1) 0) (<= 1 |isMethaneAlarm_#res|))} is VALID [2022-02-20 18:07:52,256 INFO L284 TraceCheckUtils]: 87: Hoare quadruple {16165#(or (= ~methaneLevelCritical~0 0) (<= (+ |isMethaneAlarm_#res| 1) 0) (<= 1 |isMethaneAlarm_#res|))} {16098#(not (= ~methaneLevelCritical~0 0))} #241#return; {16107#(not (= |timeShift_processEnvironment_#t~ret35#1| 0))} is VALID [2022-02-20 18:07:52,256 INFO L290 TraceCheckUtils]: 88: Hoare triple {16107#(not (= |timeShift_processEnvironment_#t~ret35#1| 0))} assume -2147483648 <= processEnvironment_#t~ret35#1 && processEnvironment_#t~ret35#1 <= 2147483647;processEnvironment_~tmp~5#1 := processEnvironment_#t~ret35#1;havoc processEnvironment_#t~ret35#1; {16108#(not (= |timeShift_processEnvironment_~tmp~5#1| 0))} is VALID [2022-02-20 18:07:52,257 INFO L290 TraceCheckUtils]: 89: Hoare triple {16108#(not (= |timeShift_processEnvironment_~tmp~5#1| 0))} assume !(0 != processEnvironment_~tmp~5#1); {16052#false} is VALID [2022-02-20 18:07:52,257 INFO L272 TraceCheckUtils]: 90: Hoare triple {16052#false} call processEnvironment__wrappee__methaneQuery(); {16147#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:07:52,257 INFO L290 TraceCheckUtils]: 91: Hoare triple {16147#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~4#1; {16051#true} is VALID [2022-02-20 18:07:52,257 INFO L290 TraceCheckUtils]: 92: Hoare triple {16051#true} assume !(0 == ~pumpRunning~0); {16051#true} is VALID [2022-02-20 18:07:52,257 INFO L272 TraceCheckUtils]: 93: Hoare triple {16051#true} call processEnvironment__wrappee__base(); {16051#true} is VALID [2022-02-20 18:07:52,257 INFO L290 TraceCheckUtils]: 94: Hoare triple {16051#true} assume true; {16051#true} is VALID [2022-02-20 18:07:52,257 INFO L284 TraceCheckUtils]: 95: Hoare quadruple {16051#true} {16051#true} #265#return; {16051#true} is VALID [2022-02-20 18:07:52,258 INFO L290 TraceCheckUtils]: 96: Hoare triple {16051#true} assume true; {16051#true} is VALID [2022-02-20 18:07:52,258 INFO L284 TraceCheckUtils]: 97: Hoare quadruple {16051#true} {16052#false} #243#return; {16052#false} is VALID [2022-02-20 18:07:52,258 INFO L290 TraceCheckUtils]: 98: Hoare triple {16052#false} assume { :end_inline_processEnvironment } true; {16052#false} is VALID [2022-02-20 18:07:52,258 INFO L290 TraceCheckUtils]: 99: Hoare triple {16052#false} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret47#1, __utac_acc__Specification2_spec__2_#t~ret48#1, __utac_acc__Specification2_spec__2_~tmp~8#1, __utac_acc__Specification2_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification2_spec__2_~tmp~8#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~1#1; {16052#false} is VALID [2022-02-20 18:07:52,258 INFO L272 TraceCheckUtils]: 100: Hoare triple {16052#false} call __utac_acc__Specification2_spec__2_#t~ret47#1 := isMethaneLevelCritical(); {16051#true} is VALID [2022-02-20 18:07:52,258 INFO L290 TraceCheckUtils]: 101: Hoare triple {16051#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~methaneLevelCritical~0;#res := ~retValue_acc~5; {16051#true} is VALID [2022-02-20 18:07:52,258 INFO L290 TraceCheckUtils]: 102: Hoare triple {16051#true} assume true; {16051#true} is VALID [2022-02-20 18:07:52,258 INFO L284 TraceCheckUtils]: 103: Hoare quadruple {16051#true} {16052#false} #247#return; {16052#false} is VALID [2022-02-20 18:07:52,258 INFO L290 TraceCheckUtils]: 104: Hoare triple {16052#false} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret47#1 && __utac_acc__Specification2_spec__2_#t~ret47#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~8#1 := __utac_acc__Specification2_spec__2_#t~ret47#1;havoc __utac_acc__Specification2_spec__2_#t~ret47#1; {16052#false} is VALID [2022-02-20 18:07:52,259 INFO L290 TraceCheckUtils]: 105: Hoare triple {16052#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~8#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~10#1;havoc isPumpRunning_~retValue_acc~10#1;isPumpRunning_~retValue_acc~10#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~10#1; {16052#false} is VALID [2022-02-20 18:07:52,259 INFO L290 TraceCheckUtils]: 106: Hoare triple {16052#false} __utac_acc__Specification2_spec__2_#t~ret48#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret48#1 && __utac_acc__Specification2_spec__2_#t~ret48#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~1#1 := __utac_acc__Specification2_spec__2_#t~ret48#1;havoc __utac_acc__Specification2_spec__2_#t~ret48#1; {16052#false} is VALID [2022-02-20 18:07:52,259 INFO L290 TraceCheckUtils]: 107: Hoare triple {16052#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~1#1; {16052#false} is VALID [2022-02-20 18:07:52,259 INFO L290 TraceCheckUtils]: 108: Hoare triple {16052#false} assume 0 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {16052#false} is VALID [2022-02-20 18:07:52,259 INFO L290 TraceCheckUtils]: 109: Hoare triple {16052#false} assume !false; {16052#false} is VALID [2022-02-20 18:07:52,259 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 14 proven. 13 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2022-02-20 18:07:52,259 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:07:52,260 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1683805244] [2022-02-20 18:07:52,260 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1683805244] provided 0 perfect and 1 imperfect interpolant sequences [2022-02-20 18:07:52,260 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [687332540] [2022-02-20 18:07:52,260 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:07:52,260 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-02-20 18:07:52,260 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-20 18:07:52,261 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-02-20 18:07:52,262 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-02-20 18:07:52,344 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:52,346 INFO L263 TraceCheckSpWp]: Trace formula consists of 508 conjuncts, 9 conjunts are in the unsatisfiable core [2022-02-20 18:07:52,365 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:52,367 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 18:07:52,783 INFO L290 TraceCheckUtils]: 0: Hoare triple {16051#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(13, 16);call #Ultimate.allocInit(7, 17);call write~init~int(44, 17, 0, 1);call write~init~int(77, 17, 1, 1);call write~init~int(101, 17, 2, 1);call write~init~int(116, 17, 3, 1);call write~init~int(104, 17, 4, 1);call write~init~int(58, 17, 5, 1);call write~init~int(0, 17, 6, 1);call #Ultimate.allocInit(5, 18);call write~init~int(67, 18, 0, 1);call write~init~int(82, 18, 1, 1);call write~init~int(73, 18, 2, 1);call write~init~int(84, 18, 3, 1);call write~init~int(0, 18, 4, 1);call #Ultimate.allocInit(3, 19);call write~init~int(79, 19, 0, 1);call write~init~int(75, 19, 1, 1);call write~init~int(0, 19, 2, 1);call #Ultimate.allocInit(2, 20);call write~init~int(41, 20, 0, 1);call write~init~int(0, 20, 1, 1);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~methAndRunningLastTime~0 := 0; {16051#true} is VALID [2022-02-20 18:07:52,783 INFO L290 TraceCheckUtils]: 1: Hoare triple {16051#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret33#1, main_~retValue_acc~8#1, main_~tmp~3#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~3#1;assume { :begin_inline_select_helpers } true; {16051#true} is VALID [2022-02-20 18:07:52,783 INFO L290 TraceCheckUtils]: 2: Hoare triple {16051#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {16051#true} is VALID [2022-02-20 18:07:52,783 INFO L290 TraceCheckUtils]: 3: Hoare triple {16051#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {16051#true} is VALID [2022-02-20 18:07:52,784 INFO L290 TraceCheckUtils]: 4: Hoare triple {16051#true} main_#t~ret33#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret33#1 && main_#t~ret33#1 <= 2147483647;main_~tmp~3#1 := main_#t~ret33#1;havoc main_#t~ret33#1; {16051#true} is VALID [2022-02-20 18:07:52,784 INFO L290 TraceCheckUtils]: 5: Hoare triple {16051#true} assume 0 != main_~tmp~3#1;assume { :begin_inline_setup } true; {16051#true} is VALID [2022-02-20 18:07:52,784 INFO L290 TraceCheckUtils]: 6: Hoare triple {16051#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0; {16051#true} is VALID [2022-02-20 18:07:52,784 INFO L290 TraceCheckUtils]: 7: Hoare triple {16051#true} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet49#1, test_#t~nondet50#1, test_#t~nondet51#1, test_#t~nondet52#1, test_~splverifierCounter~0#1, test_~tmp~9#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~9#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {16051#true} is VALID [2022-02-20 18:07:52,784 INFO L290 TraceCheckUtils]: 8: Hoare triple {16051#true} assume !false; {16051#true} is VALID [2022-02-20 18:07:52,784 INFO L290 TraceCheckUtils]: 9: Hoare triple {16051#true} assume test_~splverifierCounter~0#1 < 4; {16051#true} is VALID [2022-02-20 18:07:52,784 INFO L290 TraceCheckUtils]: 10: Hoare triple {16051#true} assume -2147483648 <= test_#t~nondet49#1 && test_#t~nondet49#1 <= 2147483647;test_~tmp~9#1 := test_#t~nondet49#1;havoc test_#t~nondet49#1; {16051#true} is VALID [2022-02-20 18:07:52,784 INFO L290 TraceCheckUtils]: 11: Hoare triple {16051#true} assume 0 != test_~tmp~9#1; {16051#true} is VALID [2022-02-20 18:07:52,784 INFO L272 TraceCheckUtils]: 12: Hoare triple {16051#true} call waterRise(); {16051#true} is VALID [2022-02-20 18:07:52,785 INFO L290 TraceCheckUtils]: 13: Hoare triple {16051#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {16051#true} is VALID [2022-02-20 18:07:52,785 INFO L290 TraceCheckUtils]: 14: Hoare triple {16051#true} assume true; {16051#true} is VALID [2022-02-20 18:07:52,785 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {16051#true} {16051#true} #253#return; {16051#true} is VALID [2022-02-20 18:07:52,785 INFO L290 TraceCheckUtils]: 16: Hoare triple {16051#true} assume -2147483648 <= test_#t~nondet50#1 && test_#t~nondet50#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet50#1;havoc test_#t~nondet50#1; {16051#true} is VALID [2022-02-20 18:07:52,785 INFO L290 TraceCheckUtils]: 17: Hoare triple {16051#true} assume !(0 != test_~tmp___0~2#1); {16051#true} is VALID [2022-02-20 18:07:52,785 INFO L290 TraceCheckUtils]: 18: Hoare triple {16051#true} assume -2147483648 <= test_#t~nondet51#1 && test_#t~nondet51#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet51#1;havoc test_#t~nondet51#1; {16051#true} is VALID [2022-02-20 18:07:52,785 INFO L290 TraceCheckUtils]: 19: Hoare triple {16051#true} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet52#1 && test_#t~nondet52#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet52#1;havoc test_#t~nondet52#1; {16051#true} is VALID [2022-02-20 18:07:52,785 INFO L290 TraceCheckUtils]: 20: Hoare triple {16051#true} assume 0 != test_~tmp___1~0#1; {16051#true} is VALID [2022-02-20 18:07:52,785 INFO L272 TraceCheckUtils]: 21: Hoare triple {16051#true} call timeShift(); {16051#true} is VALID [2022-02-20 18:07:52,786 INFO L290 TraceCheckUtils]: 22: Hoare triple {16051#true} assume !(0 != ~pumpRunning~0); {16051#true} is VALID [2022-02-20 18:07:52,786 INFO L290 TraceCheckUtils]: 23: Hoare triple {16051#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret35#1, processEnvironment_~tmp~5#1;havoc processEnvironment_~tmp~5#1; {16051#true} is VALID [2022-02-20 18:07:52,786 INFO L290 TraceCheckUtils]: 24: Hoare triple {16051#true} assume !(0 != ~pumpRunning~0); {16051#true} is VALID [2022-02-20 18:07:52,786 INFO L272 TraceCheckUtils]: 25: Hoare triple {16051#true} call processEnvironment__wrappee__methaneQuery(); {16051#true} is VALID [2022-02-20 18:07:52,786 INFO L290 TraceCheckUtils]: 26: Hoare triple {16051#true} havoc ~tmp~4#1; {16051#true} is VALID [2022-02-20 18:07:52,786 INFO L290 TraceCheckUtils]: 27: Hoare triple {16051#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret46#1, isHighWaterLevel_~retValue_acc~11#1, isHighWaterLevel_~tmp~7#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~11#1;havoc isHighWaterLevel_~tmp~7#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~7#1;havoc isHighWaterSensorDry_~retValue_acc~7#1; {16051#true} is VALID [2022-02-20 18:07:52,786 INFO L290 TraceCheckUtils]: 28: Hoare triple {16051#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~7#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~7#1; {16051#true} is VALID [2022-02-20 18:07:52,786 INFO L290 TraceCheckUtils]: 29: Hoare triple {16051#true} isHighWaterLevel_#t~ret46#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret46#1 && isHighWaterLevel_#t~ret46#1 <= 2147483647;isHighWaterLevel_~tmp~7#1 := isHighWaterLevel_#t~ret46#1;havoc isHighWaterLevel_#t~ret46#1; {16051#true} is VALID [2022-02-20 18:07:52,786 INFO L290 TraceCheckUtils]: 30: Hoare triple {16051#true} assume !(0 != isHighWaterLevel_~tmp~7#1);isHighWaterLevel_~tmp___0~0#1 := 1; {16051#true} is VALID [2022-02-20 18:07:52,787 INFO L290 TraceCheckUtils]: 31: Hoare triple {16051#true} isHighWaterLevel_~retValue_acc~11#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~11#1; {16051#true} is VALID [2022-02-20 18:07:52,787 INFO L290 TraceCheckUtils]: 32: Hoare triple {16051#true} #t~ret34#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret34#1 && #t~ret34#1 <= 2147483647;~tmp~4#1 := #t~ret34#1;havoc #t~ret34#1; {16051#true} is VALID [2022-02-20 18:07:52,787 INFO L290 TraceCheckUtils]: 33: Hoare triple {16051#true} assume 0 != ~tmp~4#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret36#1, activatePump_~tmp~6#1;havoc activatePump_~tmp~6#1; {16051#true} is VALID [2022-02-20 18:07:52,787 INFO L272 TraceCheckUtils]: 34: Hoare triple {16051#true} call activatePump_#t~ret36#1 := isMethaneAlarm(); {16051#true} is VALID [2022-02-20 18:07:52,787 INFO L290 TraceCheckUtils]: 35: Hoare triple {16051#true} havoc ~retValue_acc~9; {16051#true} is VALID [2022-02-20 18:07:52,787 INFO L272 TraceCheckUtils]: 36: Hoare triple {16051#true} call #t~ret37 := isMethaneLevelCritical(); {16051#true} is VALID [2022-02-20 18:07:52,787 INFO L290 TraceCheckUtils]: 37: Hoare triple {16051#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~methaneLevelCritical~0;#res := ~retValue_acc~5; {16051#true} is VALID [2022-02-20 18:07:52,787 INFO L290 TraceCheckUtils]: 38: Hoare triple {16051#true} assume true; {16051#true} is VALID [2022-02-20 18:07:52,787 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {16051#true} {16051#true} #267#return; {16051#true} is VALID [2022-02-20 18:07:52,788 INFO L290 TraceCheckUtils]: 40: Hoare triple {16051#true} assume -2147483648 <= #t~ret37 && #t~ret37 <= 2147483647;~retValue_acc~9 := #t~ret37;havoc #t~ret37;#res := ~retValue_acc~9; {16051#true} is VALID [2022-02-20 18:07:52,788 INFO L290 TraceCheckUtils]: 41: Hoare triple {16051#true} assume true; {16051#true} is VALID [2022-02-20 18:07:52,788 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {16051#true} {16051#true} #261#return; {16051#true} is VALID [2022-02-20 18:07:52,788 INFO L290 TraceCheckUtils]: 43: Hoare triple {16051#true} assume -2147483648 <= activatePump_#t~ret36#1 && activatePump_#t~ret36#1 <= 2147483647;activatePump_~tmp~6#1 := activatePump_#t~ret36#1;havoc activatePump_#t~ret36#1; {16051#true} is VALID [2022-02-20 18:07:52,788 INFO L290 TraceCheckUtils]: 44: Hoare triple {16051#true} assume !(0 != activatePump_~tmp~6#1);assume { :begin_inline_activatePump__wrappee__highWaterSensor } true;~pumpRunning~0 := 1; {16051#true} is VALID [2022-02-20 18:07:52,788 INFO L290 TraceCheckUtils]: 45: Hoare triple {16051#true} assume { :end_inline_activatePump__wrappee__highWaterSensor } true; {16051#true} is VALID [2022-02-20 18:07:52,788 INFO L290 TraceCheckUtils]: 46: Hoare triple {16051#true} assume { :end_inline_activatePump } true; {16051#true} is VALID [2022-02-20 18:07:52,788 INFO L290 TraceCheckUtils]: 47: Hoare triple {16051#true} assume true; {16051#true} is VALID [2022-02-20 18:07:52,788 INFO L284 TraceCheckUtils]: 48: Hoare quadruple {16051#true} {16051#true} #245#return; {16051#true} is VALID [2022-02-20 18:07:52,789 INFO L290 TraceCheckUtils]: 49: Hoare triple {16051#true} assume { :end_inline_processEnvironment } true; {16051#true} is VALID [2022-02-20 18:07:52,789 INFO L290 TraceCheckUtils]: 50: Hoare triple {16051#true} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret47#1, __utac_acc__Specification2_spec__2_#t~ret48#1, __utac_acc__Specification2_spec__2_~tmp~8#1, __utac_acc__Specification2_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification2_spec__2_~tmp~8#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~1#1; {16051#true} is VALID [2022-02-20 18:07:52,789 INFO L272 TraceCheckUtils]: 51: Hoare triple {16051#true} call __utac_acc__Specification2_spec__2_#t~ret47#1 := isMethaneLevelCritical(); {16051#true} is VALID [2022-02-20 18:07:52,789 INFO L290 TraceCheckUtils]: 52: Hoare triple {16051#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~methaneLevelCritical~0;#res := ~retValue_acc~5; {16051#true} is VALID [2022-02-20 18:07:52,789 INFO L290 TraceCheckUtils]: 53: Hoare triple {16051#true} assume true; {16051#true} is VALID [2022-02-20 18:07:52,789 INFO L284 TraceCheckUtils]: 54: Hoare quadruple {16051#true} {16051#true} #247#return; {16051#true} is VALID [2022-02-20 18:07:52,789 INFO L290 TraceCheckUtils]: 55: Hoare triple {16051#true} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret47#1 && __utac_acc__Specification2_spec__2_#t~ret47#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~8#1 := __utac_acc__Specification2_spec__2_#t~ret47#1;havoc __utac_acc__Specification2_spec__2_#t~ret47#1; {16051#true} is VALID [2022-02-20 18:07:52,789 INFO L290 TraceCheckUtils]: 56: Hoare triple {16051#true} assume !(0 != __utac_acc__Specification2_spec__2_~tmp~8#1);~methAndRunningLastTime~0 := 0; {16051#true} is VALID [2022-02-20 18:07:52,789 INFO L290 TraceCheckUtils]: 57: Hoare triple {16051#true} assume { :end_inline___utac_acc__Specification2_spec__2 } true; {16051#true} is VALID [2022-02-20 18:07:52,790 INFO L290 TraceCheckUtils]: 58: Hoare triple {16051#true} assume true; {16051#true} is VALID [2022-02-20 18:07:52,790 INFO L284 TraceCheckUtils]: 59: Hoare quadruple {16051#true} {16051#true} #257#return; {16051#true} is VALID [2022-02-20 18:07:52,790 INFO L290 TraceCheckUtils]: 60: Hoare triple {16051#true} assume !false; {16051#true} is VALID [2022-02-20 18:07:52,790 INFO L290 TraceCheckUtils]: 61: Hoare triple {16051#true} assume test_~splverifierCounter~0#1 < 4; {16051#true} is VALID [2022-02-20 18:07:52,790 INFO L290 TraceCheckUtils]: 62: Hoare triple {16051#true} assume -2147483648 <= test_#t~nondet49#1 && test_#t~nondet49#1 <= 2147483647;test_~tmp~9#1 := test_#t~nondet49#1;havoc test_#t~nondet49#1; {16051#true} is VALID [2022-02-20 18:07:52,790 INFO L290 TraceCheckUtils]: 63: Hoare triple {16051#true} assume !(0 != test_~tmp~9#1); {16051#true} is VALID [2022-02-20 18:07:52,790 INFO L290 TraceCheckUtils]: 64: Hoare triple {16051#true} assume -2147483648 <= test_#t~nondet50#1 && test_#t~nondet50#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet50#1;havoc test_#t~nondet50#1; {16051#true} is VALID [2022-02-20 18:07:52,790 INFO L290 TraceCheckUtils]: 65: Hoare triple {16051#true} assume 0 != test_~tmp___0~2#1; {16051#true} is VALID [2022-02-20 18:07:52,790 INFO L272 TraceCheckUtils]: 66: Hoare triple {16051#true} call changeMethaneLevel(); {16051#true} is VALID [2022-02-20 18:07:52,791 INFO L290 TraceCheckUtils]: 67: Hoare triple {16051#true} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {16160#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:52,791 INFO L290 TraceCheckUtils]: 68: Hoare triple {16160#(<= 1 ~methaneLevelCritical~0)} assume true; {16160#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:52,792 INFO L284 TraceCheckUtils]: 69: Hoare quadruple {16160#(<= 1 ~methaneLevelCritical~0)} {16051#true} #255#return; {16160#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:52,792 INFO L290 TraceCheckUtils]: 70: Hoare triple {16160#(<= 1 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet51#1 && test_#t~nondet51#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet51#1;havoc test_#t~nondet51#1; {16160#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:52,792 INFO L290 TraceCheckUtils]: 71: Hoare triple {16160#(<= 1 ~methaneLevelCritical~0)} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet52#1 && test_#t~nondet52#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet52#1;havoc test_#t~nondet52#1; {16160#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:52,792 INFO L290 TraceCheckUtils]: 72: Hoare triple {16160#(<= 1 ~methaneLevelCritical~0)} assume 0 != test_~tmp___1~0#1; {16160#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:52,793 INFO L272 TraceCheckUtils]: 73: Hoare triple {16160#(<= 1 ~methaneLevelCritical~0)} call timeShift(); {16160#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:52,793 INFO L290 TraceCheckUtils]: 74: Hoare triple {16160#(<= 1 ~methaneLevelCritical~0)} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {16160#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:52,793 INFO L290 TraceCheckUtils]: 75: Hoare triple {16160#(<= 1 ~methaneLevelCritical~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {16160#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:52,794 INFO L290 TraceCheckUtils]: 76: Hoare triple {16160#(<= 1 ~methaneLevelCritical~0)} assume { :end_inline_lowerWaterLevel } true; {16160#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:52,794 INFO L290 TraceCheckUtils]: 77: Hoare triple {16160#(<= 1 ~methaneLevelCritical~0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret35#1, processEnvironment_~tmp~5#1;havoc processEnvironment_~tmp~5#1; {16160#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:52,794 INFO L290 TraceCheckUtils]: 78: Hoare triple {16160#(<= 1 ~methaneLevelCritical~0)} assume 0 != ~pumpRunning~0; {16160#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:52,795 INFO L272 TraceCheckUtils]: 79: Hoare triple {16160#(<= 1 ~methaneLevelCritical~0)} call processEnvironment_#t~ret35#1 := isMethaneAlarm(); {16160#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:52,795 INFO L290 TraceCheckUtils]: 80: Hoare triple {16160#(<= 1 ~methaneLevelCritical~0)} havoc ~retValue_acc~9; {16160#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:52,795 INFO L272 TraceCheckUtils]: 81: Hoare triple {16160#(<= 1 ~methaneLevelCritical~0)} call #t~ret37 := isMethaneLevelCritical(); {16160#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:07:52,796 INFO L290 TraceCheckUtils]: 82: Hoare triple {16160#(<= 1 ~methaneLevelCritical~0)} havoc ~retValue_acc~5;~retValue_acc~5 := ~methaneLevelCritical~0;#res := ~retValue_acc~5; {16418#(and (<= ~methaneLevelCritical~0 |isMethaneLevelCritical_#res|) (<= 1 ~methaneLevelCritical~0))} is VALID [2022-02-20 18:07:52,796 INFO L290 TraceCheckUtils]: 83: Hoare triple {16418#(and (<= ~methaneLevelCritical~0 |isMethaneLevelCritical_#res|) (<= 1 ~methaneLevelCritical~0))} assume true; {16418#(and (<= ~methaneLevelCritical~0 |isMethaneLevelCritical_#res|) (<= 1 ~methaneLevelCritical~0))} is VALID [2022-02-20 18:07:52,796 INFO L284 TraceCheckUtils]: 84: Hoare quadruple {16418#(and (<= ~methaneLevelCritical~0 |isMethaneLevelCritical_#res|) (<= 1 ~methaneLevelCritical~0))} {16160#(<= 1 ~methaneLevelCritical~0)} #267#return; {16425#(and (<= 1 ~methaneLevelCritical~0) (<= ~methaneLevelCritical~0 |isMethaneAlarm_#t~ret37|))} is VALID [2022-02-20 18:07:52,797 INFO L290 TraceCheckUtils]: 85: Hoare triple {16425#(and (<= 1 ~methaneLevelCritical~0) (<= ~methaneLevelCritical~0 |isMethaneAlarm_#t~ret37|))} assume -2147483648 <= #t~ret37 && #t~ret37 <= 2147483647;~retValue_acc~9 := #t~ret37;havoc #t~ret37;#res := ~retValue_acc~9; {16429#(and (<= 1 ~methaneLevelCritical~0) (<= ~methaneLevelCritical~0 |isMethaneAlarm_#res|))} is VALID [2022-02-20 18:07:52,797 INFO L290 TraceCheckUtils]: 86: Hoare triple {16429#(and (<= 1 ~methaneLevelCritical~0) (<= ~methaneLevelCritical~0 |isMethaneAlarm_#res|))} assume true; {16429#(and (<= 1 ~methaneLevelCritical~0) (<= ~methaneLevelCritical~0 |isMethaneAlarm_#res|))} is VALID [2022-02-20 18:07:52,798 INFO L284 TraceCheckUtils]: 87: Hoare quadruple {16429#(and (<= 1 ~methaneLevelCritical~0) (<= ~methaneLevelCritical~0 |isMethaneAlarm_#res|))} {16160#(<= 1 ~methaneLevelCritical~0)} #241#return; {16436#(<= 1 |timeShift_processEnvironment_#t~ret35#1|)} is VALID [2022-02-20 18:07:52,798 INFO L290 TraceCheckUtils]: 88: Hoare triple {16436#(<= 1 |timeShift_processEnvironment_#t~ret35#1|)} assume -2147483648 <= processEnvironment_#t~ret35#1 && processEnvironment_#t~ret35#1 <= 2147483647;processEnvironment_~tmp~5#1 := processEnvironment_#t~ret35#1;havoc processEnvironment_#t~ret35#1; {16440#(<= 1 |timeShift_processEnvironment_~tmp~5#1|)} is VALID [2022-02-20 18:07:52,799 INFO L290 TraceCheckUtils]: 89: Hoare triple {16440#(<= 1 |timeShift_processEnvironment_~tmp~5#1|)} assume !(0 != processEnvironment_~tmp~5#1); {16052#false} is VALID [2022-02-20 18:07:52,799 INFO L272 TraceCheckUtils]: 90: Hoare triple {16052#false} call processEnvironment__wrappee__methaneQuery(); {16052#false} is VALID [2022-02-20 18:07:52,799 INFO L290 TraceCheckUtils]: 91: Hoare triple {16052#false} havoc ~tmp~4#1; {16052#false} is VALID [2022-02-20 18:07:52,799 INFO L290 TraceCheckUtils]: 92: Hoare triple {16052#false} assume !(0 == ~pumpRunning~0); {16052#false} is VALID [2022-02-20 18:07:52,799 INFO L272 TraceCheckUtils]: 93: Hoare triple {16052#false} call processEnvironment__wrappee__base(); {16052#false} is VALID [2022-02-20 18:07:52,799 INFO L290 TraceCheckUtils]: 94: Hoare triple {16052#false} assume true; {16052#false} is VALID [2022-02-20 18:07:52,799 INFO L284 TraceCheckUtils]: 95: Hoare quadruple {16052#false} {16052#false} #265#return; {16052#false} is VALID [2022-02-20 18:07:52,799 INFO L290 TraceCheckUtils]: 96: Hoare triple {16052#false} assume true; {16052#false} is VALID [2022-02-20 18:07:52,799 INFO L284 TraceCheckUtils]: 97: Hoare quadruple {16052#false} {16052#false} #243#return; {16052#false} is VALID [2022-02-20 18:07:52,799 INFO L290 TraceCheckUtils]: 98: Hoare triple {16052#false} assume { :end_inline_processEnvironment } true; {16052#false} is VALID [2022-02-20 18:07:52,800 INFO L290 TraceCheckUtils]: 99: Hoare triple {16052#false} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret47#1, __utac_acc__Specification2_spec__2_#t~ret48#1, __utac_acc__Specification2_spec__2_~tmp~8#1, __utac_acc__Specification2_spec__2_~tmp___0~1#1;havoc __utac_acc__Specification2_spec__2_~tmp~8#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~1#1; {16052#false} is VALID [2022-02-20 18:07:52,800 INFO L272 TraceCheckUtils]: 100: Hoare triple {16052#false} call __utac_acc__Specification2_spec__2_#t~ret47#1 := isMethaneLevelCritical(); {16052#false} is VALID [2022-02-20 18:07:52,800 INFO L290 TraceCheckUtils]: 101: Hoare triple {16052#false} havoc ~retValue_acc~5;~retValue_acc~5 := ~methaneLevelCritical~0;#res := ~retValue_acc~5; {16052#false} is VALID [2022-02-20 18:07:52,800 INFO L290 TraceCheckUtils]: 102: Hoare triple {16052#false} assume true; {16052#false} is VALID [2022-02-20 18:07:52,800 INFO L284 TraceCheckUtils]: 103: Hoare quadruple {16052#false} {16052#false} #247#return; {16052#false} is VALID [2022-02-20 18:07:52,800 INFO L290 TraceCheckUtils]: 104: Hoare triple {16052#false} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret47#1 && __utac_acc__Specification2_spec__2_#t~ret47#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~8#1 := __utac_acc__Specification2_spec__2_#t~ret47#1;havoc __utac_acc__Specification2_spec__2_#t~ret47#1; {16052#false} is VALID [2022-02-20 18:07:52,800 INFO L290 TraceCheckUtils]: 105: Hoare triple {16052#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~8#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~10#1;havoc isPumpRunning_~retValue_acc~10#1;isPumpRunning_~retValue_acc~10#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~10#1; {16052#false} is VALID [2022-02-20 18:07:52,800 INFO L290 TraceCheckUtils]: 106: Hoare triple {16052#false} __utac_acc__Specification2_spec__2_#t~ret48#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret48#1 && __utac_acc__Specification2_spec__2_#t~ret48#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~1#1 := __utac_acc__Specification2_spec__2_#t~ret48#1;havoc __utac_acc__Specification2_spec__2_#t~ret48#1; {16052#false} is VALID [2022-02-20 18:07:52,800 INFO L290 TraceCheckUtils]: 107: Hoare triple {16052#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~1#1; {16052#false} is VALID [2022-02-20 18:07:52,801 INFO L290 TraceCheckUtils]: 108: Hoare triple {16052#false} assume 0 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {16052#false} is VALID [2022-02-20 18:07:52,801 INFO L290 TraceCheckUtils]: 109: Hoare triple {16052#false} assume !false; {16052#false} is VALID [2022-02-20 18:07:52,801 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 36 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-02-20 18:07:52,801 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-02-20 18:07:52,801 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleZ3 [687332540] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:07:52,801 INFO L191 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-02-20 18:07:52,802 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [14] total 19 [2022-02-20 18:07:52,802 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [906120876] [2022-02-20 18:07:52,802 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:07:52,802 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 9.875) internal successors, (79), 6 states have internal predecessors, (79), 3 states have call successors, (13), 3 states have call predecessors, (13), 5 states have return successors, (12), 5 states have call predecessors, (12), 3 states have call successors, (12) Word has length 110 [2022-02-20 18:07:52,803 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:07:52,803 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 8 states, 8 states have (on average 9.875) internal successors, (79), 6 states have internal predecessors, (79), 3 states have call successors, (13), 3 states have call predecessors, (13), 5 states have return successors, (12), 5 states have call predecessors, (12), 3 states have call successors, (12) [2022-02-20 18:07:52,862 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 104 edges. 104 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:52,862 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-02-20 18:07:52,862 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:07:52,863 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-02-20 18:07:52,863 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=49, Invalid=293, Unknown=0, NotChecked=0, Total=342 [2022-02-20 18:07:52,863 INFO L87 Difference]: Start difference. First operand 494 states and 587 transitions. Second operand has 8 states, 8 states have (on average 9.875) internal successors, (79), 6 states have internal predecessors, (79), 3 states have call successors, (13), 3 states have call predecessors, (13), 5 states have return successors, (12), 5 states have call predecessors, (12), 3 states have call successors, (12) [2022-02-20 18:07:53,610 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:53,611 INFO L93 Difference]: Finished difference Result 845 states and 1014 transitions. [2022-02-20 18:07:53,611 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-02-20 18:07:53,611 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 9.875) internal successors, (79), 6 states have internal predecessors, (79), 3 states have call successors, (13), 3 states have call predecessors, (13), 5 states have return successors, (12), 5 states have call predecessors, (12), 3 states have call successors, (12) Word has length 110 [2022-02-20 18:07:53,611 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:07:53,611 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 9.875) internal successors, (79), 6 states have internal predecessors, (79), 3 states have call successors, (13), 3 states have call predecessors, (13), 5 states have return successors, (12), 5 states have call predecessors, (12), 3 states have call successors, (12) [2022-02-20 18:07:53,613 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 274 transitions. [2022-02-20 18:07:53,613 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 9.875) internal successors, (79), 6 states have internal predecessors, (79), 3 states have call successors, (13), 3 states have call predecessors, (13), 5 states have return successors, (12), 5 states have call predecessors, (12), 3 states have call successors, (12) [2022-02-20 18:07:53,615 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 274 transitions. [2022-02-20 18:07:53,615 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states and 274 transitions. [2022-02-20 18:07:53,775 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 274 edges. 274 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:53,775 INFO L225 Difference]: With dead ends: 845 [2022-02-20 18:07:53,775 INFO L226 Difference]: Without dead ends: 0 [2022-02-20 18:07:53,777 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 144 GetRequests, 125 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 47 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=61, Invalid=359, Unknown=0, NotChecked=0, Total=420 [2022-02-20 18:07:53,777 INFO L933 BasicCegarLoop]: 174 mSDtfsCounter, 68 mSDsluCounter, 866 mSDsCounter, 0 mSdLazyCounter, 112 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 72 SdHoareTripleChecker+Valid, 1040 SdHoareTripleChecker+Invalid, 116 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 112 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-02-20 18:07:53,777 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [72 Valid, 1040 Invalid, 116 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 112 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-02-20 18:07:53,777 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-02-20 18:07:53,778 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-02-20 18:07:53,778 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:07:53,778 INFO L82 GeneralOperation]: Start isEquivalent. First operand 0 states. Second operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:07:53,778 INFO L74 IsIncluded]: Start isIncluded. First operand 0 states. Second operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:07:53,778 INFO L87 Difference]: Start difference. First operand 0 states. Second operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:07:53,778 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:53,778 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2022-02-20 18:07:53,778 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-02-20 18:07:53,778 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:53,778 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:53,778 INFO L74 IsIncluded]: Start isIncluded. First operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand 0 states. [2022-02-20 18:07:53,778 INFO L87 Difference]: Start difference. First operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand 0 states. [2022-02-20 18:07:53,778 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:53,778 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2022-02-20 18:07:53,778 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-02-20 18:07:53,778 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:53,778 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:53,778 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:07:53,778 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:07:53,779 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:07:53,779 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-02-20 18:07:53,779 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 110 [2022-02-20 18:07:53,779 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:07:53,779 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-02-20 18:07:53,779 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 9.875) internal successors, (79), 6 states have internal predecessors, (79), 3 states have call successors, (13), 3 states have call predecessors, (13), 5 states have return successors, (12), 5 states have call predecessors, (12), 3 states have call successors, (12) [2022-02-20 18:07:53,779 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-02-20 18:07:53,779 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:53,781 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-02-20 18:07:53,801 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-02-20 18:07:53,981 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-02-20 18:07:53,983 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-02-20 18:07:56,314 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 688 694) no Hoare annotation was computed. [2022-02-20 18:07:56,314 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 688 694) the Hoare annotation is: true [2022-02-20 18:07:56,314 INFO L854 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 487 498) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0))) (and (or (not (= |old(~methaneLevelCritical~0)| 0)) .cse0 .cse1) (or (not (= ~pumpRunning~0 0)) .cse0 .cse1 (not (<= 1 |old(~methaneLevelCritical~0)|))))) [2022-02-20 18:07:56,314 INFO L858 garLoopResultBuilder]: For program point L491-1(lines 487 498) no Hoare annotation was computed. [2022-02-20 18:07:56,314 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 487 498) no Hoare annotation was computed. [2022-02-20 18:07:56,314 INFO L858 garLoopResultBuilder]: For program point L894(lines 894 904) no Hoare annotation was computed. [2022-02-20 18:07:56,314 INFO L858 garLoopResultBuilder]: For program point L890(lines 890 907) no Hoare annotation was computed. [2022-02-20 18:07:56,315 INFO L854 garLoopResultBuilder]: At program point L890-1(lines 882 910) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (= ~pumpRunning~0 0)) (.cse12 (<= 2 ~waterLevel~0)) (.cse7 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~8#1| 0)) (.cse13 (= 1 ~systemActive~0)) (.cse14 (= ~methaneLevelCritical~0 0))) (let ((.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse4 (= ~waterLevel~0 1)) (.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (not .cse14)) (.cse9 (and .cse14 .cse12 .cse7 .cse13)) (.cse2 (not .cse13)) (.cse10 (and (<= 1 |timeShift_processEnvironment_~tmp~5#1|) .cse0 .cse8 .cse13)) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse11 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse2 .cse5 .cse4) (or (and .cse6 .cse7) .cse2 .cse5 (and .cse8 .cse7) .cse9) (or .cse2 .cse10 .cse3 (and .cse6 .cse8)) (or .cse0 .cse2 .cse5 .cse9 .cse11) (or .cse2 .cse12 .cse10 .cse3 .cse11)))) [2022-02-20 18:07:56,315 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 664 687) no Hoare annotation was computed. [2022-02-20 18:07:56,315 INFO L858 garLoopResultBuilder]: For program point L895(lines 895 901) no Hoare annotation was computed. [2022-02-20 18:07:56,315 INFO L854 garLoopResultBuilder]: At program point L796(lines 791 799) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 .cse2 (= ~waterLevel~0 1)) (or .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 (not (<= 2 |old(~waterLevel~0)|))) (let ((.cse3 (= ~pumpRunning~0 0)) (.cse4 (= |timeShift_isPumpRunning_#res#1| 0))) (or (and (<= 1 |timeShift_processEnvironment_~tmp~5#1|) .cse3 .cse4) .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse3 .cse4) .cse2)) (or .cse1 (not (= ~methaneLevelCritical~0 0))))) [2022-02-20 18:07:56,315 INFO L858 garLoopResultBuilder]: For program point L668-1(lines 667 686) no Hoare annotation was computed. [2022-02-20 18:07:56,315 INFO L858 garLoopResultBuilder]: For program point L730(lines 730 738) no Hoare annotation was computed. [2022-02-20 18:07:56,315 INFO L858 garLoopResultBuilder]: For program point L726(lines 726 743) no Hoare annotation was computed. [2022-02-20 18:07:56,315 INFO L854 garLoopResultBuilder]: At program point L888(line 888) the Hoare annotation is: (let ((.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse4 (= ~waterLevel~0 1)) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (= ~pumpRunning~0 0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse6 (<= 2 ~waterLevel~0)) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse7 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse2 .cse5 .cse4) (or .cse0 .cse2 .cse6 .cse3 .cse7) (or .cse8 .cse9 .cse2 .cse6 .cse5) (or (and (<= 1 |timeShift_processEnvironment_~tmp~5#1|) .cse9) .cse2 .cse3 (and .cse8 .cse9)) (or .cse0 .cse2 .cse6 .cse5 .cse7))) [2022-02-20 18:07:56,315 INFO L858 garLoopResultBuilder]: For program point L888-1(line 888) no Hoare annotation was computed. [2022-02-20 18:07:56,315 INFO L858 garLoopResultBuilder]: For program point L467(lines 467 471) no Hoare annotation was computed. [2022-02-20 18:07:56,316 INFO L854 garLoopResultBuilder]: At program point L467-2(lines 463 474) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= |old(~pumpRunning~0)| 0))))) (and (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse1) (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0))))) [2022-02-20 18:07:56,316 INFO L854 garLoopResultBuilder]: At program point L777(lines 772 779) the Hoare annotation is: (let ((.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~methaneLevelCritical~0 0)))) (and (or (and (<= 1 |timeShift_processEnvironment_~tmp~5#1|) .cse0) .cse1 .cse2) (or .cse3 .cse1 .cse2) (or .cse3 .cse1 .cse4) (or .cse0 .cse1 .cse4))) [2022-02-20 18:07:56,316 INFO L858 garLoopResultBuilder]: For program point L868(line 868) no Hoare annotation was computed. [2022-02-20 18:07:56,316 INFO L854 garLoopResultBuilder]: At program point L736(line 736) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (<= 1 ~methaneLevelCritical~0))) (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= |old(~pumpRunning~0)| 0))) (not (= ~methaneLevelCritical~0 0))))) [2022-02-20 18:07:56,316 INFO L854 garLoopResultBuilder]: At program point L728(line 728) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= |old(~pumpRunning~0)| 0))))) (and (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse1) (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0))))) [2022-02-20 18:07:56,316 INFO L858 garLoopResultBuilder]: For program point L728-1(line 728) no Hoare annotation was computed. [2022-02-20 18:07:56,316 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 664 687) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse4 (= ~waterLevel~0 1)) (.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse7 (<= 2 ~waterLevel~0)) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse8 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse2 .cse5 .cse4) (or .cse6 .cse2 .cse5) (or .cse6 .cse2 .cse3) (or .cse2 .cse7 .cse3 .cse8) (or .cse2 .cse7 .cse5 .cse8))) [2022-02-20 18:07:56,316 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 664 687) no Hoare annotation was computed. [2022-02-20 18:07:56,316 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 868) no Hoare annotation was computed. [2022-02-20 18:07:56,316 INFO L854 garLoopResultBuilder]: At program point L741(line 741) the Hoare annotation is: (let ((.cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0))) (.cse4 (not (= |old(~waterLevel~0)| 1))) (.cse5 (= ~waterLevel~0 1)) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse6 (<= 2 ~waterLevel~0)) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse7 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse2) (or .cse4 .cse0 .cse3 .cse5) (or .cse4 .cse0 .cse1 .cse5) (or .cse0 .cse6 .cse3 .cse7) (or .cse0 .cse6 .cse1 .cse7))) [2022-02-20 18:07:56,316 INFO L854 garLoopResultBuilder]: At program point L869(lines 864 871) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (<= 1 ~methaneLevelCritical~0))) (or .cse0 (not (= ~methaneLevelCritical~0 0))))) [2022-02-20 18:07:56,317 INFO L854 garLoopResultBuilder]: At program point L741-1(lines 722 746) the Hoare annotation is: (let ((.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse4 (= ~waterLevel~0 1)) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (= ~pumpRunning~0 0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse6 (<= 2 ~waterLevel~0)) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse7 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse2 .cse5 .cse4) (or .cse0 .cse2 .cse6 .cse3 .cse7) (or .cse8 .cse9 .cse2 .cse6 .cse5) (or (and (<= 1 |timeShift_processEnvironment_~tmp~5#1|) .cse9) .cse2 .cse3 (and .cse8 .cse9)) (or .cse0 .cse2 .cse6 .cse5 .cse7))) [2022-02-20 18:07:56,317 INFO L858 garLoopResultBuilder]: For program point L675-1(lines 675 681) no Hoare annotation was computed. [2022-02-20 18:07:56,317 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 557 586) no Hoare annotation was computed. [2022-02-20 18:07:56,317 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 557 586) the Hoare annotation is: true [2022-02-20 18:07:56,317 INFO L858 garLoopResultBuilder]: For program point L571(lines 571 575) no Hoare annotation was computed. [2022-02-20 18:07:56,317 INFO L861 garLoopResultBuilder]: At program point L571-1(lines 571 575) the Hoare annotation is: true [2022-02-20 18:07:56,317 INFO L858 garLoopResultBuilder]: For program point L568(line 568) no Hoare annotation was computed. [2022-02-20 18:07:56,317 INFO L861 garLoopResultBuilder]: At program point L567-2(lines 567 581) the Hoare annotation is: true [2022-02-20 18:07:56,317 INFO L861 garLoopResultBuilder]: At program point L563(line 563) the Hoare annotation is: true [2022-02-20 18:07:56,317 INFO L858 garLoopResultBuilder]: For program point L563-1(line 563) no Hoare annotation was computed. [2022-02-20 18:07:56,317 INFO L861 garLoopResultBuilder]: At program point L582(lines 557 586) the Hoare annotation is: true [2022-02-20 18:07:56,317 INFO L858 garLoopResultBuilder]: For program point L578(line 578) no Hoare annotation was computed. [2022-02-20 18:07:56,317 INFO L861 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 499 507) the Hoare annotation is: true [2022-02-20 18:07:56,317 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 499 507) no Hoare annotation was computed. [2022-02-20 18:07:56,317 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 499 507) no Hoare annotation was computed. [2022-02-20 18:07:56,317 INFO L858 garLoopResultBuilder]: For program point L960(lines 960 964) no Hoare annotation was computed. [2022-02-20 18:07:56,317 INFO L858 garLoopResultBuilder]: For program point L642-2(lines 642 649) no Hoare annotation was computed. [2022-02-20 18:07:56,317 INFO L854 garLoopResultBuilder]: At program point L960-2(lines 952 965) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (<= 1 ~methaneLevelCritical~0) .cse0 .cse1) (and (= ~methaneLevelCritical~0 0) .cse0 .cse1))) [2022-02-20 18:07:56,318 INFO L858 garLoopResultBuilder]: For program point L923(lines 922 969) no Hoare annotation was computed. [2022-02-20 18:07:56,318 INFO L858 garLoopResultBuilder]: For program point L952(lines 952 965) no Hoare annotation was computed. [2022-02-20 18:07:56,318 INFO L854 garLoopResultBuilder]: At program point L944(line 944) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~methaneLevelCritical~0 0) .cse0 .cse1) (and (= ~pumpRunning~0 0) (<= 1 ~methaneLevelCritical~0) .cse0 .cse1))) [2022-02-20 18:07:56,318 INFO L861 garLoopResultBuilder]: At program point L973(lines 912 977) the Hoare annotation is: true [2022-02-20 18:07:56,318 INFO L861 garLoopResultBuilder]: At program point L651(lines 632 654) the Hoare annotation is: true [2022-02-20 18:07:56,318 INFO L858 garLoopResultBuilder]: For program point L932(lines 932 938) no Hoare annotation was computed. [2022-02-20 18:07:56,318 INFO L858 garLoopResultBuilder]: For program point L932-1(lines 932 938) no Hoare annotation was computed. [2022-02-20 18:07:56,318 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-02-20 18:07:56,319 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-02-20 18:07:56,319 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-02-20 18:07:56,319 INFO L858 garLoopResultBuilder]: For program point L924(lines 924 928) no Hoare annotation was computed. [2022-02-20 18:07:56,319 INFO L854 garLoopResultBuilder]: At program point L879(lines 874 881) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-02-20 18:07:56,319 INFO L854 garLoopResultBuilder]: At program point L970(lines 921 971) the Hoare annotation is: false [2022-02-20 18:07:56,319 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-02-20 18:07:56,319 INFO L854 garLoopResultBuilder]: At program point L83(lines 78 86) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-02-20 18:07:56,319 INFO L858 garLoopResultBuilder]: For program point L942(lines 942 948) no Hoare annotation was computed. [2022-02-20 18:07:56,319 INFO L858 garLoopResultBuilder]: For program point L942-1(lines 942 948) no Hoare annotation was computed. [2022-02-20 18:07:56,320 INFO L854 garLoopResultBuilder]: At program point L75(lines 71 77) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-02-20 18:07:56,320 INFO L854 garLoopResultBuilder]: At program point L616(lines 612 618) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-02-20 18:07:56,320 INFO L854 garLoopResultBuilder]: At program point L967(lines 922 969) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~methaneLevelCritical~0 0) .cse0 .cse1) (and (= ~pumpRunning~0 0) (<= 1 ~methaneLevelCritical~0) .cse0 .cse1))) [2022-02-20 18:07:56,320 INFO L854 garLoopResultBuilder]: At program point L934(line 934) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~methaneLevelCritical~0 0) .cse0 .cse1) (and (= ~pumpRunning~0 0) (<= 1 ~methaneLevelCritical~0) .cse0 .cse1))) [2022-02-20 18:07:56,320 INFO L854 garLoopResultBuilder]: At program point L860(lines 855 862) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (<= 1 ~methaneLevelCritical~0) .cse0 .cse1) (and (= ~methaneLevelCritical~0 0) .cse0 .cse1))) [2022-02-20 18:07:56,320 INFO L861 garLoopResultBuilder]: At program point L629(lines 621 631) the Hoare annotation is: true [2022-02-20 18:07:56,320 INFO L854 garLoopResultBuilder]: At program point L68(lines 64 70) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-02-20 18:07:56,320 INFO L858 garLoopResultBuilder]: For program point L642(lines 642 649) no Hoare annotation was computed. [2022-02-20 18:07:56,320 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 475 486) no Hoare annotation was computed. [2022-02-20 18:07:56,321 INFO L858 garLoopResultBuilder]: For program point L479-1(lines 475 486) no Hoare annotation was computed. [2022-02-20 18:07:56,321 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 475 486) the Hoare annotation is: (let ((.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse4 (= ~waterLevel~0 1)) (.cse0 (not (= ~pumpRunning~0 0))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse6 (<= 2 ~waterLevel~0)) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse7 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse2 .cse5 .cse4) (or .cse0 .cse2 .cse6 .cse5 .cse7) (or .cse2 .cse6 .cse3 .cse7))) [2022-02-20 18:07:56,321 INFO L858 garLoopResultBuilder]: For program point L704(lines 704 712) no Hoare annotation was computed. [2022-02-20 18:07:56,321 INFO L858 garLoopResultBuilder]: For program point L700(lines 700 717) no Hoare annotation was computed. [2022-02-20 18:07:56,321 INFO L858 garLoopResultBuilder]: For program point L762(lines 762 768) no Hoare annotation was computed. [2022-02-20 18:07:56,321 INFO L854 garLoopResultBuilder]: At program point L760(line 760) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (<= 2 ~waterLevel~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 ~methaneLevelCritical~0)) (and .cse1 .cse2)) (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2) (not (= ~methaneLevelCritical~0 0))))) [2022-02-20 18:07:56,321 INFO L854 garLoopResultBuilder]: At program point L762-2(lines 755 771) the Hoare annotation is: (let ((.cse1 (= |old(~pumpRunning~0)| 0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (<= 2 ~waterLevel~0)) (.cse2 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2) (or (not .cse1) .cse0 (and (= ~pumpRunning~0 0) .cse3 (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__methaneQuery_activatePump_~tmp~6#1|)) (not (<= 1 ~methaneLevelCritical~0))) (or .cse0 .cse3 .cse2))) [2022-02-20 18:07:56,321 INFO L858 garLoopResultBuilder]: For program point L760-1(line 760) no Hoare annotation was computed. [2022-02-20 18:07:56,322 INFO L854 garLoopResultBuilder]: At program point L851(lines 836 854) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse4 (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~0#1| 0)) (.cse5 (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1| 0)) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (<= 2 ~waterLevel~0))) (and (let ((.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (or .cse0 (and .cse1 .cse2 .cse3) (not (= ~methaneLevelCritical~0 0)) (and .cse1 .cse2 .cse4 .cse5))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and .cse2 .cse4 .cse5) (not (<= 1 ~methaneLevelCritical~0)) (and .cse2 .cse3)))) [2022-02-20 18:07:56,322 INFO L854 garLoopResultBuilder]: At program point L752(lines 747 754) the Hoare annotation is: (let ((.cse1 (= |old(~pumpRunning~0)| 0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2) (or (not .cse1) .cse0 (not (<= 1 ~methaneLevelCritical~0))) (or .cse0 (<= 2 ~waterLevel~0) .cse2))) [2022-02-20 18:07:56,322 INFO L858 garLoopResultBuilder]: For program point L845(lines 845 849) no Hoare annotation was computed. [2022-02-20 18:07:56,322 INFO L858 garLoopResultBuilder]: For program point L845-2(lines 845 849) no Hoare annotation was computed. [2022-02-20 18:07:56,322 INFO L854 garLoopResultBuilder]: At program point L715(line 715) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1) (or .cse2 .cse0 (not (<= 1 ~methaneLevelCritical~0))) (or .cse2 .cse0 .cse1))) [2022-02-20 18:07:56,322 INFO L858 garLoopResultBuilder]: For program point L715-1(lines 696 720) no Hoare annotation was computed. [2022-02-20 18:07:56,322 INFO L858 garLoopResultBuilder]: For program point L544(lines 544 550) no Hoare annotation was computed. [2022-02-20 18:07:56,322 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 696 720) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (= ~methaneLevelCritical~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (<= 1 ~methaneLevelCritical~0))))) [2022-02-20 18:07:56,322 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 696 720) no Hoare annotation was computed. [2022-02-20 18:07:56,323 INFO L854 garLoopResultBuilder]: At program point L710(line 710) the Hoare annotation is: (let ((.cse2 (= 1 ~systemActive~0))) (let ((.cse0 (not .cse2)) (.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) .cse2 (= |processEnvironment__wrappee__methaneQuery_~tmp~4#1| 0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse1) (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1)))) [2022-02-20 18:07:56,323 INFO L854 garLoopResultBuilder]: At program point L549(lines 540 553) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0))) (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse1 (= |old(~pumpRunning~0)| 0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (and (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1|) .cse5)) (.cse4 (and .cse5 (<= 2 ~waterLevel~0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse2 .cse4) (or (not .cse1) .cse0 .cse3 (not (<= 1 ~methaneLevelCritical~0)) .cse4)))) [2022-02-20 18:07:56,323 INFO L861 garLoopResultBuilder]: At program point L785(line 785) the Hoare annotation is: true [2022-02-20 18:07:56,323 INFO L858 garLoopResultBuilder]: For program point L785-1(line 785) no Hoare annotation was computed. [2022-02-20 18:07:56,323 INFO L861 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 780 790) the Hoare annotation is: true [2022-02-20 18:07:56,323 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 780 790) no Hoare annotation was computed. [2022-02-20 18:07:56,323 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 780 790) no Hoare annotation was computed. [2022-02-20 18:07:56,325 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:07:56,326 INFO L180 ceAbstractionStarter]: Computing trace abstraction results [2022-02-20 18:07:56,328 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__baseEXIT has no Hoare annotation [2022-02-20 18:07:56,328 WARN L170 areAnnotationChecker]: L491-1 has no Hoare annotation [2022-02-20 18:07:56,329 WARN L170 areAnnotationChecker]: L491-1 has no Hoare annotation [2022-02-20 18:07:56,329 WARN L170 areAnnotationChecker]: L467 has no Hoare annotation [2022-02-20 18:07:56,329 WARN L170 areAnnotationChecker]: L668-1 has no Hoare annotation [2022-02-20 18:07:56,329 WARN L170 areAnnotationChecker]: isMethaneLevelCriticalFINAL has no Hoare annotation [2022-02-20 18:07:56,329 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2022-02-20 18:07:56,329 WARN L170 areAnnotationChecker]: L479-1 has no Hoare annotation [2022-02-20 18:07:56,329 WARN L170 areAnnotationChecker]: L479-1 has no Hoare annotation [2022-02-20 18:07:56,329 WARN L170 areAnnotationChecker]: L700 has no Hoare annotation [2022-02-20 18:07:56,329 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__baseEXIT has no Hoare annotation [2022-02-20 18:07:56,329 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__baseEXIT has no Hoare annotation [2022-02-20 18:07:56,329 WARN L170 areAnnotationChecker]: L491-1 has no Hoare annotation [2022-02-20 18:07:56,330 WARN L170 areAnnotationChecker]: L467 has no Hoare annotation [2022-02-20 18:07:56,330 WARN L170 areAnnotationChecker]: L467 has no Hoare annotation [2022-02-20 18:07:56,330 WARN L170 areAnnotationChecker]: L668-1 has no Hoare annotation [2022-02-20 18:07:56,330 WARN L170 areAnnotationChecker]: L668-1 has no Hoare annotation [2022-02-20 18:07:56,330 WARN L170 areAnnotationChecker]: L563-1 has no Hoare annotation [2022-02-20 18:07:56,331 WARN L170 areAnnotationChecker]: isMethaneLevelCriticalFINAL has no Hoare annotation [2022-02-20 18:07:56,331 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2022-02-20 18:07:56,331 WARN L170 areAnnotationChecker]: L479-1 has no Hoare annotation [2022-02-20 18:07:56,331 WARN L170 areAnnotationChecker]: L700 has no Hoare annotation [2022-02-20 18:07:56,331 WARN L170 areAnnotationChecker]: L700 has no Hoare annotation [2022-02-20 18:07:56,331 WARN L170 areAnnotationChecker]: L785-1 has no Hoare annotation [2022-02-20 18:07:56,331 WARN L170 areAnnotationChecker]: L715-1 has no Hoare annotation [2022-02-20 18:07:56,332 WARN L170 areAnnotationChecker]: changeMethaneLevelEXIT has no Hoare annotation [2022-02-20 18:07:56,332 WARN L170 areAnnotationChecker]: L668-1 has no Hoare annotation [2022-02-20 18:07:56,332 WARN L170 areAnnotationChecker]: L726 has no Hoare annotation [2022-02-20 18:07:56,332 WARN L170 areAnnotationChecker]: L726 has no Hoare annotation [2022-02-20 18:07:56,332 WARN L170 areAnnotationChecker]: L675-1 has no Hoare annotation [2022-02-20 18:07:56,332 WARN L170 areAnnotationChecker]: L563-1 has no Hoare annotation [2022-02-20 18:07:56,332 WARN L170 areAnnotationChecker]: isMethaneLevelCriticalEXIT has no Hoare annotation [2022-02-20 18:07:56,332 WARN L170 areAnnotationChecker]: isMethaneLevelCriticalEXIT has no Hoare annotation [2022-02-20 18:07:56,333 WARN L170 areAnnotationChecker]: waterRiseEXIT has no Hoare annotation [2022-02-20 18:07:56,333 WARN L170 areAnnotationChecker]: L544 has no Hoare annotation [2022-02-20 18:07:56,333 WARN L170 areAnnotationChecker]: L544 has no Hoare annotation [2022-02-20 18:07:56,333 WARN L170 areAnnotationChecker]: L715-1 has no Hoare annotation [2022-02-20 18:07:56,333 WARN L170 areAnnotationChecker]: L785-1 has no Hoare annotation [2022-02-20 18:07:56,333 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__methaneQueryEXIT has no Hoare annotation [2022-02-20 18:07:56,333 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__methaneQueryEXIT has no Hoare annotation [2022-02-20 18:07:56,333 WARN L170 areAnnotationChecker]: L942-1 has no Hoare annotation [2022-02-20 18:07:56,333 WARN L170 areAnnotationChecker]: L728-1 has no Hoare annotation [2022-02-20 18:07:56,335 WARN L170 areAnnotationChecker]: L888-1 has no Hoare annotation [2022-02-20 18:07:56,335 WARN L170 areAnnotationChecker]: L568 has no Hoare annotation [2022-02-20 18:07:56,335 WARN L170 areAnnotationChecker]: L888-1 has no Hoare annotation [2022-02-20 18:07:56,335 WARN L170 areAnnotationChecker]: L932-1 has no Hoare annotation [2022-02-20 18:07:56,335 WARN L170 areAnnotationChecker]: L845 has no Hoare annotation [2022-02-20 18:07:56,336 WARN L170 areAnnotationChecker]: isMethaneAlarmFINAL has no Hoare annotation [2022-02-20 18:07:56,336 WARN L170 areAnnotationChecker]: L675-1 has no Hoare annotation [2022-02-20 18:07:56,336 WARN L170 areAnnotationChecker]: L952 has no Hoare annotation [2022-02-20 18:07:56,336 WARN L170 areAnnotationChecker]: L952 has no Hoare annotation [2022-02-20 18:07:56,336 WARN L170 areAnnotationChecker]: L728-1 has no Hoare annotation [2022-02-20 18:07:56,336 WARN L170 areAnnotationChecker]: cleanupEXIT has no Hoare annotation [2022-02-20 18:07:56,336 WARN L170 areAnnotationChecker]: L568 has no Hoare annotation [2022-02-20 18:07:56,336 WARN L170 areAnnotationChecker]: L890 has no Hoare annotation [2022-02-20 18:07:56,336 WARN L170 areAnnotationChecker]: L890 has no Hoare annotation [2022-02-20 18:07:56,336 WARN L170 areAnnotationChecker]: L642 has no Hoare annotation [2022-02-20 18:07:56,336 WARN L170 areAnnotationChecker]: L942 has no Hoare annotation [2022-02-20 18:07:56,336 WARN L170 areAnnotationChecker]: L942 has no Hoare annotation [2022-02-20 18:07:56,337 WARN L170 areAnnotationChecker]: L845 has no Hoare annotation [2022-02-20 18:07:56,337 WARN L170 areAnnotationChecker]: L845 has no Hoare annotation [2022-02-20 18:07:56,337 WARN L170 areAnnotationChecker]: isMethaneAlarmEXIT has no Hoare annotation [2022-02-20 18:07:56,337 WARN L170 areAnnotationChecker]: isMethaneAlarmEXIT has no Hoare annotation [2022-02-20 18:07:56,337 WARN L170 areAnnotationChecker]: L960 has no Hoare annotation [2022-02-20 18:07:56,338 WARN L170 areAnnotationChecker]: L960 has no Hoare annotation [2022-02-20 18:07:56,338 WARN L170 areAnnotationChecker]: L730 has no Hoare annotation [2022-02-20 18:07:56,338 WARN L170 areAnnotationChecker]: L730 has no Hoare annotation [2022-02-20 18:07:56,338 WARN L170 areAnnotationChecker]: cleanupEXIT has no Hoare annotation [2022-02-20 18:07:56,338 WARN L170 areAnnotationChecker]: L571 has no Hoare annotation [2022-02-20 18:07:56,338 WARN L170 areAnnotationChecker]: L571 has no Hoare annotation [2022-02-20 18:07:56,338 WARN L170 areAnnotationChecker]: L894 has no Hoare annotation [2022-02-20 18:07:56,338 WARN L170 areAnnotationChecker]: timeShiftFINAL has no Hoare annotation [2022-02-20 18:07:56,338 WARN L170 areAnnotationChecker]: L642 has no Hoare annotation [2022-02-20 18:07:56,338 WARN L170 areAnnotationChecker]: L642 has no Hoare annotation [2022-02-20 18:07:56,338 WARN L170 areAnnotationChecker]: L942-1 has no Hoare annotation [2022-02-20 18:07:56,339 WARN L170 areAnnotationChecker]: L845-2 has no Hoare annotation [2022-02-20 18:07:56,339 WARN L170 areAnnotationChecker]: L760-1 has no Hoare annotation [2022-02-20 18:07:56,341 WARN L170 areAnnotationChecker]: L578 has no Hoare annotation [2022-02-20 18:07:56,342 WARN L170 areAnnotationChecker]: L894 has no Hoare annotation [2022-02-20 18:07:56,342 WARN L170 areAnnotationChecker]: L894 has no Hoare annotation [2022-02-20 18:07:56,342 WARN L170 areAnnotationChecker]: timeShiftFINAL has no Hoare annotation [2022-02-20 18:07:56,342 WARN L170 areAnnotationChecker]: L642-2 has no Hoare annotation [2022-02-20 18:07:56,342 WARN L170 areAnnotationChecker]: L704 has no Hoare annotation [2022-02-20 18:07:56,342 WARN L170 areAnnotationChecker]: L762 has no Hoare annotation [2022-02-20 18:07:56,342 WARN L170 areAnnotationChecker]: L762 has no Hoare annotation [2022-02-20 18:07:56,343 WARN L170 areAnnotationChecker]: L923 has no Hoare annotation [2022-02-20 18:07:56,343 WARN L170 areAnnotationChecker]: L642-2 has no Hoare annotation [2022-02-20 18:07:56,343 WARN L170 areAnnotationChecker]: L578 has no Hoare annotation [2022-02-20 18:07:56,343 WARN L170 areAnnotationChecker]: L895 has no Hoare annotation [2022-02-20 18:07:56,344 WARN L170 areAnnotationChecker]: L895 has no Hoare annotation [2022-02-20 18:07:56,344 WARN L170 areAnnotationChecker]: timeShiftEXIT has no Hoare annotation [2022-02-20 18:07:56,344 WARN L170 areAnnotationChecker]: timeShiftEXIT has no Hoare annotation [2022-02-20 18:07:56,344 WARN L170 areAnnotationChecker]: timeShiftEXIT has no Hoare annotation [2022-02-20 18:07:56,344 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2022-02-20 18:07:56,344 WARN L170 areAnnotationChecker]: L704 has no Hoare annotation [2022-02-20 18:07:56,344 WARN L170 areAnnotationChecker]: L704 has no Hoare annotation [2022-02-20 18:07:56,344 WARN L170 areAnnotationChecker]: L715-1 has no Hoare annotation [2022-02-20 18:07:56,345 WARN L170 areAnnotationChecker]: L923 has no Hoare annotation [2022-02-20 18:07:56,345 WARN L170 areAnnotationChecker]: L923 has no Hoare annotation [2022-02-20 18:07:56,346 WARN L170 areAnnotationChecker]: L868 has no Hoare annotation [2022-02-20 18:07:56,346 WARN L170 areAnnotationChecker]: L868 has no Hoare annotation [2022-02-20 18:07:56,346 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2022-02-20 18:07:56,346 WARN L170 areAnnotationChecker]: L760-1 has no Hoare annotation [2022-02-20 18:07:56,346 WARN L170 areAnnotationChecker]: L715-1 has no Hoare annotation [2022-02-20 18:07:56,346 WARN L170 areAnnotationChecker]: L924 has no Hoare annotation [2022-02-20 18:07:56,347 WARN L170 areAnnotationChecker]: L932 has no Hoare annotation [2022-02-20 18:07:56,347 WARN L170 areAnnotationChecker]: L932 has no Hoare annotation [2022-02-20 18:07:56,347 WARN L170 areAnnotationChecker]: L932-1 has no Hoare annotation [2022-02-20 18:07:56,348 INFO L163 areAnnotationChecker]: CFG has 29 edges. 29 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. 0 times interpolants missing. [2022-02-20 18:07:56,365 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 20.02 06:07:56 BoogieIcfgContainer [2022-02-20 18:07:56,365 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-02-20 18:07:56,365 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-02-20 18:07:56,365 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-02-20 18:07:56,366 INFO L275 PluginConnector]: Witness Printer initialized [2022-02-20 18:07:56,366 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.02 06:07:42" (3/4) ... [2022-02-20 18:07:56,368 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-02-20 18:07:56,371 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-02-20 18:07:56,371 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-02-20 18:07:56,371 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-02-20 18:07:56,372 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-02-20 18:07:56,372 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-02-20 18:07:56,372 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-02-20 18:07:56,372 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2022-02-20 18:07:56,372 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2022-02-20 18:07:56,383 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 50 nodes and edges [2022-02-20 18:07:56,383 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-02-20 18:07:56,384 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-02-20 18:07:56,384 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-02-20 18:07:56,384 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-02-20 18:07:56,385 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-02-20 18:07:56,385 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-02-20 18:07:56,403 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0))) && ((!(1 == systemActive) || (pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0))) || !(methaneLevelCritical == 0)) [2022-02-20 18:07:56,404 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || waterLevel == 1) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || waterLevel == 1)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && ((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(methaneLevelCritical == 0))) && ((((1 <= tmp && pumpRunning == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel))) [2022-02-20 18:07:56,405 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || waterLevel == 1) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || waterLevel == 1)) && (((((pumpRunning == \old(pumpRunning) && tmp == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && tmp == 0)) || (((methaneLevelCritical == 0 && 2 <= waterLevel) && tmp == 0) && 1 == systemActive))) && (((!(1 == systemActive) || (((1 <= tmp && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && 1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((methaneLevelCritical == 0 && 2 <= waterLevel) && tmp == 0) && 1 == systemActive)) || !(2 <= \old(waterLevel)))) && ((((!(1 == systemActive) || 2 <= waterLevel) || (((1 <= tmp && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && 1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel))) [2022-02-20 18:07:56,406 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((1 <= tmp && pumpRunning == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((pumpRunning == 0 || !(1 == systemActive)) || !(methaneLevelCritical == 0)) [2022-02-20 18:07:56,406 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || waterLevel == 1) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((((1 <= tmp && pumpRunning == 0) && \result == 0) || !(1 == systemActive)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0)) || !(1 <= methaneLevelCritical))) && (!(1 == systemActive) || !(methaneLevelCritical == 0)) [2022-02-20 18:07:56,406 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((pumpRunning == 0 && 2 <= waterLevel) && methaneLevelCritical <= tmp)) || !(1 <= methaneLevelCritical))) && ((!(1 == systemActive) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) [2022-02-20 18:07:56,406 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((!(1 == systemActive) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) [2022-02-20 18:07:56,406 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && (((!(1 == systemActive) || (1 <= \result && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (1 <= \result && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) [2022-02-20 18:07:56,407 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && \result == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) [2022-02-20 18:07:56,426 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2022-02-20 18:07:56,426 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-02-20 18:07:56,427 INFO L158 Benchmark]: Toolchain (without parser) took 15057.27ms. Allocated memory was 146.8MB in the beginning and 260.0MB in the end (delta: 113.2MB). Free memory was 110.1MB in the beginning and 203.3MB in the end (delta: -93.2MB). Peak memory consumption was 19.6MB. Max. memory is 16.1GB. [2022-02-20 18:07:56,427 INFO L158 Benchmark]: CDTParser took 0.17ms. Allocated memory is still 83.9MB. Free memory was 40.2MB in the beginning and 40.1MB in the end (delta: 43.6kB). There was no memory consumed. Max. memory is 16.1GB. [2022-02-20 18:07:56,428 INFO L158 Benchmark]: CACSL2BoogieTranslator took 437.45ms. Allocated memory is still 146.8MB. Free memory was 109.8MB in the beginning and 108.4MB in the end (delta: 1.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2022-02-20 18:07:56,428 INFO L158 Benchmark]: Boogie Procedure Inliner took 55.11ms. Allocated memory is still 146.8MB. Free memory was 108.4MB in the beginning and 105.4MB in the end (delta: 3.0MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-02-20 18:07:56,428 INFO L158 Benchmark]: Boogie Preprocessor took 18.87ms. Allocated memory is still 146.8MB. Free memory was 105.4MB in the beginning and 104.2MB in the end (delta: 1.2MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-02-20 18:07:56,429 INFO L158 Benchmark]: RCFGBuilder took 413.50ms. Allocated memory is still 146.8MB. Free memory was 104.2MB in the beginning and 83.2MB in the end (delta: 21.0MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. [2022-02-20 18:07:56,429 INFO L158 Benchmark]: TraceAbstraction took 14065.44ms. Allocated memory was 146.8MB in the beginning and 260.0MB in the end (delta: 113.2MB). Free memory was 82.4MB in the beginning and 208.6MB in the end (delta: -126.2MB). Peak memory consumption was 118.8MB. Max. memory is 16.1GB. [2022-02-20 18:07:56,429 INFO L158 Benchmark]: Witness Printer took 60.99ms. Allocated memory is still 260.0MB. Free memory was 208.6MB in the beginning and 203.3MB in the end (delta: 5.2MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-02-20 18:07:56,430 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - AssertionsEnabledResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.17ms. Allocated memory is still 83.9MB. Free memory was 40.2MB in the beginning and 40.1MB in the end (delta: 43.6kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 437.45ms. Allocated memory is still 146.8MB. Free memory was 109.8MB in the beginning and 108.4MB in the end (delta: 1.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 55.11ms. Allocated memory is still 146.8MB. Free memory was 108.4MB in the beginning and 105.4MB in the end (delta: 3.0MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 18.87ms. Allocated memory is still 146.8MB. Free memory was 105.4MB in the beginning and 104.2MB in the end (delta: 1.2MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 413.50ms. Allocated memory is still 146.8MB. Free memory was 104.2MB in the beginning and 83.2MB in the end (delta: 21.0MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. * TraceAbstraction took 14065.44ms. Allocated memory was 146.8MB in the beginning and 260.0MB in the end (delta: 113.2MB). Free memory was 82.4MB in the beginning and 208.6MB in the end (delta: -126.2MB). Peak memory consumption was 118.8MB. Max. memory is 16.1GB. * Witness Printer took 60.99ms. Allocated memory is still 260.0MB. Free memory was 208.6MB in the beginning and 203.3MB in the end (delta: 5.2MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 868]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 96 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 14.0s, OverallIterations: 11, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 7.6s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 2.3s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1384 SdHoareTripleChecker+Valid, 1.6s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1355 mSDsluCounter, 3754 SdHoareTripleChecker+Invalid, 1.6s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2438 mSDsCounter, 446 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1799 IncrementalHoareTripleChecker+Invalid, 2245 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 446 mSolverCounterUnsat, 1316 mSDtfsCounter, 1799 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 374 GetRequests, 269 SyntacticMatches, 1 SemanticMatches, 104 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 147 ImplicationChecksByTransitivity, 0.6s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=518occurred in iteration=9, InterpolantAutomatonStates: 88, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.6s AutomataMinimizationTime, 11 MinimizatonAttempts, 64 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 44 LocationsWithAnnotation, 1304 PreInvPairs, 1493 NumberOfFragments, 1522 HoareAnnotationTreeSize, 1304 FomulaSimplifications, 0 FormulaSimplificationTreeSizeReduction, 0.2s HoareSimplificationTime, 44 FomulaSimplificationsInter, 6629 FormulaSimplificationTreeSizeReductionInter, 2.0s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 2.0s InterpolantComputationTime, 754 NumberOfCodeBlocks, 754 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 741 ConstructedInterpolants, 0 QuantifiedInterpolants, 1490 SizeOfPredicates, 6 NumberOfNonLiveVariables, 905 ConjunctsInSsa, 18 ConjunctsInUnsatCore, 13 InterpolantComputations, 11 PerfectInterpolantSequences, 90/105 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 882]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || waterLevel == 1) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || waterLevel == 1)) && (((((pumpRunning == \old(pumpRunning) && tmp == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && tmp == 0)) || (((methaneLevelCritical == 0 && 2 <= waterLevel) && tmp == 0) && 1 == systemActive))) && (((!(1 == systemActive) || (((1 <= tmp && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && 1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((methaneLevelCritical == 0 && 2 <= waterLevel) && tmp == 0) && 1 == systemActive)) || !(2 <= \old(waterLevel)))) && ((((!(1 == systemActive) || 2 <= waterLevel) || (((1 <= tmp && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && 1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 864]: Loop Invariant Derived loop invariant: (!(1 == systemActive) || !(1 <= methaneLevelCritical)) && (!(1 == systemActive) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 747]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((!(1 == systemActive) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 612]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 874]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 921]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 78]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 855]: Loop Invariant Derived loop invariant: ((1 <= methaneLevelCritical && 1 == systemActive) && splverifierCounter == 0) || ((methaneLevelCritical == 0 && 1 == systemActive) && splverifierCounter == 0) - InvariantResult [Line: 64]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 755]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((pumpRunning == 0 && 2 <= waterLevel) && methaneLevelCritical <= tmp)) || !(1 <= methaneLevelCritical))) && ((!(1 == systemActive) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 463]: Loop Invariant Derived loop invariant: ((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0))) && ((!(1 == systemActive) || (pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0))) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 836]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && \result == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) - InvariantResult [Line: 71]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 772]: Loop Invariant Derived loop invariant: (((((1 <= tmp && pumpRunning == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((pumpRunning == 0 || !(1 == systemActive)) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 922]: Loop Invariant Derived loop invariant: ((methaneLevelCritical == 0 && 1 == systemActive) && splverifierCounter == 0) || (((pumpRunning == 0 && 1 <= methaneLevelCritical) && 1 == systemActive) && splverifierCounter == 0) - InvariantResult [Line: 722]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || waterLevel == 1) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || waterLevel == 1)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && ((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(methaneLevelCritical == 0))) && ((((1 <= tmp && pumpRunning == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 791]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || waterLevel == 1) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((((1 <= tmp && pumpRunning == 0) && \result == 0) || !(1 == systemActive)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0)) || !(1 <= methaneLevelCritical))) && (!(1 == systemActive) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 567]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 621]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 557]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 912]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 540]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && (((!(1 == systemActive) || (1 <= \result && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (1 <= \result && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) - InvariantResult [Line: 632]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2022-02-20 18:07:56,490 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE