./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec2_product52.cil.c --full-output -ea --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 03d7b7b3 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -ea -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec2_product52.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 4583285deb29d8014ded34089a46614a743cea13eee9bbb990cdfd770bfce36e --- Real Ultimate output --- This is Ultimate 0.2.2-dev-03d7b7b [2022-02-20 18:07:56,778 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-02-20 18:07:56,779 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-02-20 18:07:56,798 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-02-20 18:07:56,803 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-02-20 18:07:56,804 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-02-20 18:07:56,806 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-02-20 18:07:56,809 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-02-20 18:07:56,811 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-02-20 18:07:56,812 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-02-20 18:07:56,813 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-02-20 18:07:56,814 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-02-20 18:07:56,815 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-02-20 18:07:56,817 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-02-20 18:07:56,819 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-02-20 18:07:56,820 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-02-20 18:07:56,821 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-02-20 18:07:56,827 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-02-20 18:07:56,829 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-02-20 18:07:56,829 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-02-20 18:07:56,830 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-02-20 18:07:56,831 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-02-20 18:07:56,832 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-02-20 18:07:56,832 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-02-20 18:07:56,835 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-02-20 18:07:56,836 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-02-20 18:07:56,836 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-02-20 18:07:56,837 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-02-20 18:07:56,838 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-02-20 18:07:56,838 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-02-20 18:07:56,839 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-02-20 18:07:56,839 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-02-20 18:07:56,840 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-02-20 18:07:56,841 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-02-20 18:07:56,842 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-02-20 18:07:56,842 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-02-20 18:07:56,843 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-02-20 18:07:56,843 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-02-20 18:07:56,843 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-02-20 18:07:56,844 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-02-20 18:07:56,844 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-02-20 18:07:56,845 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-02-20 18:07:56,867 INFO L113 SettingsManager]: Loading preferences was successful [2022-02-20 18:07:56,869 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-02-20 18:07:56,869 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-02-20 18:07:56,869 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-02-20 18:07:56,870 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-02-20 18:07:56,870 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-02-20 18:07:56,871 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-02-20 18:07:56,871 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-02-20 18:07:56,871 INFO L138 SettingsManager]: * Use SBE=true [2022-02-20 18:07:56,871 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-02-20 18:07:56,872 INFO L138 SettingsManager]: * sizeof long=4 [2022-02-20 18:07:56,872 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-02-20 18:07:56,872 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-02-20 18:07:56,873 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-02-20 18:07:56,873 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-02-20 18:07:56,873 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-02-20 18:07:56,873 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-02-20 18:07:56,873 INFO L138 SettingsManager]: * sizeof long double=12 [2022-02-20 18:07:56,873 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-02-20 18:07:56,873 INFO L138 SettingsManager]: * Use constant arrays=true [2022-02-20 18:07:56,874 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-02-20 18:07:56,874 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-02-20 18:07:56,874 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-02-20 18:07:56,874 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-02-20 18:07:56,874 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-02-20 18:07:56,874 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-02-20 18:07:56,874 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-02-20 18:07:56,875 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-02-20 18:07:56,875 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-02-20 18:07:56,875 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-02-20 18:07:56,876 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2022-02-20 18:07:56,876 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-02-20 18:07:56,876 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-02-20 18:07:56,876 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 4583285deb29d8014ded34089a46614a743cea13eee9bbb990cdfd770bfce36e [2022-02-20 18:07:57,085 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-02-20 18:07:57,106 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-02-20 18:07:57,108 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-02-20 18:07:57,109 INFO L271 PluginConnector]: Initializing CDTParser... [2022-02-20 18:07:57,110 INFO L275 PluginConnector]: CDTParser initialized [2022-02-20 18:07:57,111 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec2_product52.cil.c [2022-02-20 18:07:57,164 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/439de86ff/b5d5f7a02e4b429eb88388954ddf8287/FLAG8ef5cea2b [2022-02-20 18:07:57,578 INFO L306 CDTParser]: Found 1 translation units. [2022-02-20 18:07:57,579 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product52.cil.c [2022-02-20 18:07:57,613 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/439de86ff/b5d5f7a02e4b429eb88388954ddf8287/FLAG8ef5cea2b [2022-02-20 18:07:57,624 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/439de86ff/b5d5f7a02e4b429eb88388954ddf8287 [2022-02-20 18:07:57,626 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-02-20 18:07:57,627 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-02-20 18:07:57,629 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-02-20 18:07:57,629 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-02-20 18:07:57,631 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-02-20 18:07:57,632 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.02 06:07:57" (1/1) ... [2022-02-20 18:07:57,633 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@5eb599b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:07:57, skipping insertion in model container [2022-02-20 18:07:57,633 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.02 06:07:57" (1/1) ... [2022-02-20 18:07:57,638 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-02-20 18:07:57,676 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-02-20 18:07:57,982 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product52.cil.c[19177,19190] [2022-02-20 18:07:57,986 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-02-20 18:07:57,995 INFO L203 MainTranslator]: Completed pre-run [2022-02-20 18:07:58,039 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product52.cil.c[19177,19190] [2022-02-20 18:07:58,040 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-02-20 18:07:58,054 INFO L208 MainTranslator]: Completed translation [2022-02-20 18:07:58,054 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:07:58 WrapperNode [2022-02-20 18:07:58,055 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-02-20 18:07:58,055 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-02-20 18:07:58,055 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-02-20 18:07:58,055 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-02-20 18:07:58,062 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:07:58" (1/1) ... [2022-02-20 18:07:58,084 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:07:58" (1/1) ... [2022-02-20 18:07:58,108 INFO L137 Inliner]: procedures = 58, calls = 158, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 265 [2022-02-20 18:07:58,109 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-02-20 18:07:58,109 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-02-20 18:07:58,109 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-02-20 18:07:58,109 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-02-20 18:07:58,115 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:07:58" (1/1) ... [2022-02-20 18:07:58,115 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:07:58" (1/1) ... [2022-02-20 18:07:58,116 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:07:58" (1/1) ... [2022-02-20 18:07:58,117 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:07:58" (1/1) ... [2022-02-20 18:07:58,129 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:07:58" (1/1) ... [2022-02-20 18:07:58,135 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:07:58" (1/1) ... [2022-02-20 18:07:58,136 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:07:58" (1/1) ... [2022-02-20 18:07:58,144 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-02-20 18:07:58,145 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-02-20 18:07:58,145 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-02-20 18:07:58,145 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-02-20 18:07:58,146 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:07:58" (1/1) ... [2022-02-20 18:07:58,155 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-02-20 18:07:58,164 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-20 18:07:58,173 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-02-20 18:07:58,180 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-02-20 18:07:58,200 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-02-20 18:07:58,200 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-02-20 18:07:58,200 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-02-20 18:07:58,200 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-02-20 18:07:58,200 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-02-20 18:07:58,200 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-02-20 18:07:58,201 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-02-20 18:07:58,201 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-02-20 18:07:58,201 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-02-20 18:07:58,201 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-02-20 18:07:58,201 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-02-20 18:07:58,201 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-02-20 18:07:58,201 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-02-20 18:07:58,201 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-02-20 18:07:58,202 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-02-20 18:07:58,202 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-02-20 18:07:58,202 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-02-20 18:07:58,202 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-02-20 18:07:58,202 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-02-20 18:07:58,202 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-02-20 18:07:58,252 INFO L234 CfgBuilder]: Building ICFG [2022-02-20 18:07:58,253 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-02-20 18:07:58,572 INFO L275 CfgBuilder]: Performing block encoding [2022-02-20 18:07:58,578 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-02-20 18:07:58,587 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-02-20 18:07:58,588 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.02 06:07:58 BoogieIcfgContainer [2022-02-20 18:07:58,589 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-02-20 18:07:58,590 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-02-20 18:07:58,590 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-02-20 18:07:58,592 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-02-20 18:07:58,592 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 20.02 06:07:57" (1/3) ... [2022-02-20 18:07:58,593 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@94fe991 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.02 06:07:58, skipping insertion in model container [2022-02-20 18:07:58,593 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:07:58" (2/3) ... [2022-02-20 18:07:58,593 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@94fe991 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.02 06:07:58, skipping insertion in model container [2022-02-20 18:07:58,594 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.02 06:07:58" (3/3) ... [2022-02-20 18:07:58,594 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product52.cil.c [2022-02-20 18:07:58,598 INFO L205 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-02-20 18:07:58,600 INFO L164 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-02-20 18:07:58,631 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-02-20 18:07:58,635 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2022-02-20 18:07:58,636 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-02-20 18:07:58,649 INFO L276 IsEmpty]: Start isEmpty. Operand has 96 states, 73 states have (on average 1.3835616438356164) internal successors, (101), 82 states have internal predecessors, (101), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2022-02-20 18:07:58,653 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-02-20 18:07:58,654 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:07:58,654 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:07:58,654 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:07:58,658 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:07:58,658 INFO L85 PathProgramCache]: Analyzing trace with hash -656399671, now seen corresponding path program 1 times [2022-02-20 18:07:58,664 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:07:58,664 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1326373387] [2022-02-20 18:07:58,665 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:07:58,665 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:07:58,762 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:58,843 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-02-20 18:07:58,845 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:58,858 INFO L290 TraceCheckUtils]: 0: Hoare triple {99#true} havoc ~retValue_acc~7;~retValue_acc~7 := ~methaneLevelCritical~0;#res := ~retValue_acc~7; {99#true} is VALID [2022-02-20 18:07:58,859 INFO L290 TraceCheckUtils]: 1: Hoare triple {99#true} assume true; {99#true} is VALID [2022-02-20 18:07:58,859 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {99#true} {100#false} #257#return; {100#false} is VALID [2022-02-20 18:07:58,864 INFO L290 TraceCheckUtils]: 0: Hoare triple {99#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(13, 12);call #Ultimate.allocInit(7, 13);call write~init~int(44, 13, 0, 1);call write~init~int(77, 13, 1, 1);call write~init~int(101, 13, 2, 1);call write~init~int(116, 13, 3, 1);call write~init~int(104, 13, 4, 1);call write~init~int(58, 13, 5, 1);call write~init~int(0, 13, 6, 1);call #Ultimate.allocInit(5, 14);call write~init~int(67, 14, 0, 1);call write~init~int(82, 14, 1, 1);call write~init~int(73, 14, 2, 1);call write~init~int(84, 14, 3, 1);call write~init~int(0, 14, 4, 1);call #Ultimate.allocInit(3, 15);call write~init~int(79, 15, 0, 1);call write~init~int(75, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(41, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4;~methAndRunningLastTime~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0; {99#true} is VALID [2022-02-20 18:07:58,865 INFO L290 TraceCheckUtils]: 1: Hoare triple {99#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret21#1, main_~retValue_acc~4#1, main_~tmp~5#1;havoc main_~retValue_acc~4#1;havoc main_~tmp~5#1;assume { :begin_inline_select_helpers } true; {99#true} is VALID [2022-02-20 18:07:58,865 INFO L290 TraceCheckUtils]: 2: Hoare triple {99#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {99#true} is VALID [2022-02-20 18:07:58,865 INFO L290 TraceCheckUtils]: 3: Hoare triple {99#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~6#1;havoc valid_product_~retValue_acc~6#1;valid_product_~retValue_acc~6#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~6#1; {99#true} is VALID [2022-02-20 18:07:58,865 INFO L290 TraceCheckUtils]: 4: Hoare triple {99#true} main_#t~ret21#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret21#1 && main_#t~ret21#1 <= 2147483647;main_~tmp~5#1 := main_#t~ret21#1;havoc main_#t~ret21#1; {99#true} is VALID [2022-02-20 18:07:58,866 INFO L290 TraceCheckUtils]: 5: Hoare triple {99#true} assume 0 != main_~tmp~5#1;assume { :begin_inline_setup } true; {99#true} is VALID [2022-02-20 18:07:58,866 INFO L290 TraceCheckUtils]: 6: Hoare triple {99#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0; {99#true} is VALID [2022-02-20 18:07:58,866 INFO L290 TraceCheckUtils]: 7: Hoare triple {99#true} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet4#1, test_#t~nondet5#1, test_#t~nondet6#1, test_#t~nondet7#1, test_~splverifierCounter~0#1, test_~tmp~0#1, test_~tmp___0~0#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~0#1;havoc test_~tmp___0~0#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {99#true} is VALID [2022-02-20 18:07:58,867 INFO L290 TraceCheckUtils]: 8: Hoare triple {99#true} assume false; {100#false} is VALID [2022-02-20 18:07:58,867 INFO L272 TraceCheckUtils]: 9: Hoare triple {100#false} call cleanup(); {100#false} is VALID [2022-02-20 18:07:58,890 INFO L290 TraceCheckUtils]: 10: Hoare triple {100#false} havoc ~i~0;havoc ~__cil_tmp2~0; {100#false} is VALID [2022-02-20 18:07:58,890 INFO L272 TraceCheckUtils]: 11: Hoare triple {100#false} call timeShift(); {100#false} is VALID [2022-02-20 18:07:58,890 INFO L290 TraceCheckUtils]: 12: Hoare triple {100#false} assume !(0 != ~pumpRunning~0); {100#false} is VALID [2022-02-20 18:07:58,891 INFO L290 TraceCheckUtils]: 13: Hoare triple {100#false} assume !(0 != ~systemActive~0); {100#false} is VALID [2022-02-20 18:07:58,891 INFO L290 TraceCheckUtils]: 14: Hoare triple {100#false} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret22#1, __utac_acc__Specification2_spec__2_#t~ret23#1, __utac_acc__Specification2_spec__2_~tmp~6#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~6#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {100#false} is VALID [2022-02-20 18:07:58,891 INFO L272 TraceCheckUtils]: 15: Hoare triple {100#false} call __utac_acc__Specification2_spec__2_#t~ret22#1 := isMethaneLevelCritical(); {99#true} is VALID [2022-02-20 18:07:58,891 INFO L290 TraceCheckUtils]: 16: Hoare triple {99#true} havoc ~retValue_acc~7;~retValue_acc~7 := ~methaneLevelCritical~0;#res := ~retValue_acc~7; {99#true} is VALID [2022-02-20 18:07:58,891 INFO L290 TraceCheckUtils]: 17: Hoare triple {99#true} assume true; {99#true} is VALID [2022-02-20 18:07:58,892 INFO L284 TraceCheckUtils]: 18: Hoare quadruple {99#true} {100#false} #257#return; {100#false} is VALID [2022-02-20 18:07:58,892 INFO L290 TraceCheckUtils]: 19: Hoare triple {100#false} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret22#1 && __utac_acc__Specification2_spec__2_#t~ret22#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~6#1 := __utac_acc__Specification2_spec__2_#t~ret22#1;havoc __utac_acc__Specification2_spec__2_#t~ret22#1; {100#false} is VALID [2022-02-20 18:07:58,892 INFO L290 TraceCheckUtils]: 20: Hoare triple {100#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~6#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~1#1;havoc isPumpRunning_~retValue_acc~1#1;isPumpRunning_~retValue_acc~1#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~1#1; {100#false} is VALID [2022-02-20 18:07:58,893 INFO L290 TraceCheckUtils]: 21: Hoare triple {100#false} __utac_acc__Specification2_spec__2_#t~ret23#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret23#1 && __utac_acc__Specification2_spec__2_#t~ret23#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret23#1;havoc __utac_acc__Specification2_spec__2_#t~ret23#1; {100#false} is VALID [2022-02-20 18:07:58,893 INFO L290 TraceCheckUtils]: 22: Hoare triple {100#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {100#false} is VALID [2022-02-20 18:07:58,894 INFO L290 TraceCheckUtils]: 23: Hoare triple {100#false} assume 0 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {100#false} is VALID [2022-02-20 18:07:58,894 INFO L290 TraceCheckUtils]: 24: Hoare triple {100#false} assume !false; {100#false} is VALID [2022-02-20 18:07:58,894 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:07:58,895 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:07:58,895 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1326373387] [2022-02-20 18:07:58,895 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1326373387] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:07:58,895 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:07:58,896 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-02-20 18:07:58,898 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1378832579] [2022-02-20 18:07:58,899 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:07:58,902 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2022-02-20 18:07:58,904 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:07:58,917 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:07:58,956 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 25 edges. 25 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:58,957 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-02-20 18:07:58,957 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:07:58,976 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-02-20 18:07:58,976 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-02-20 18:07:58,979 INFO L87 Difference]: Start difference. First operand has 96 states, 73 states have (on average 1.3835616438356164) internal successors, (101), 82 states have internal predecessors, (101), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:07:59,096 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:59,097 INFO L93 Difference]: Finished difference Result 183 states and 248 transitions. [2022-02-20 18:07:59,097 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-02-20 18:07:59,097 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2022-02-20 18:07:59,097 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:07:59,099 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:07:59,112 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 248 transitions. [2022-02-20 18:07:59,112 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:07:59,120 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 248 transitions. [2022-02-20 18:07:59,121 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states and 248 transitions. [2022-02-20 18:07:59,348 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 248 edges. 248 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:59,361 INFO L225 Difference]: With dead ends: 183 [2022-02-20 18:07:59,361 INFO L226 Difference]: Without dead ends: 87 [2022-02-20 18:07:59,365 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-02-20 18:07:59,368 INFO L933 BasicCegarLoop]: 121 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 121 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:07:59,369 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 121 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:07:59,382 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 87 states. [2022-02-20 18:07:59,394 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 87 to 87. [2022-02-20 18:07:59,395 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:07:59,396 INFO L82 GeneralOperation]: Start isEquivalent. First operand 87 states. Second operand has 87 states, 66 states have (on average 1.3181818181818181) internal successors, (87), 74 states have internal predecessors, (87), 13 states have call successors, (13), 8 states have call predecessors, (13), 7 states have return successors, (12), 9 states have call predecessors, (12), 12 states have call successors, (12) [2022-02-20 18:07:59,396 INFO L74 IsIncluded]: Start isIncluded. First operand 87 states. Second operand has 87 states, 66 states have (on average 1.3181818181818181) internal successors, (87), 74 states have internal predecessors, (87), 13 states have call successors, (13), 8 states have call predecessors, (13), 7 states have return successors, (12), 9 states have call predecessors, (12), 12 states have call successors, (12) [2022-02-20 18:07:59,398 INFO L87 Difference]: Start difference. First operand 87 states. Second operand has 87 states, 66 states have (on average 1.3181818181818181) internal successors, (87), 74 states have internal predecessors, (87), 13 states have call successors, (13), 8 states have call predecessors, (13), 7 states have return successors, (12), 9 states have call predecessors, (12), 12 states have call successors, (12) [2022-02-20 18:07:59,404 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:59,405 INFO L93 Difference]: Finished difference Result 87 states and 112 transitions. [2022-02-20 18:07:59,405 INFO L276 IsEmpty]: Start isEmpty. Operand 87 states and 112 transitions. [2022-02-20 18:07:59,406 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:59,406 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:59,407 INFO L74 IsIncluded]: Start isIncluded. First operand has 87 states, 66 states have (on average 1.3181818181818181) internal successors, (87), 74 states have internal predecessors, (87), 13 states have call successors, (13), 8 states have call predecessors, (13), 7 states have return successors, (12), 9 states have call predecessors, (12), 12 states have call successors, (12) Second operand 87 states. [2022-02-20 18:07:59,408 INFO L87 Difference]: Start difference. First operand has 87 states, 66 states have (on average 1.3181818181818181) internal successors, (87), 74 states have internal predecessors, (87), 13 states have call successors, (13), 8 states have call predecessors, (13), 7 states have return successors, (12), 9 states have call predecessors, (12), 12 states have call successors, (12) Second operand 87 states. [2022-02-20 18:07:59,413 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:59,417 INFO L93 Difference]: Finished difference Result 87 states and 112 transitions. [2022-02-20 18:07:59,417 INFO L276 IsEmpty]: Start isEmpty. Operand 87 states and 112 transitions. [2022-02-20 18:07:59,418 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:59,419 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:59,419 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:07:59,419 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:07:59,420 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 87 states, 66 states have (on average 1.3181818181818181) internal successors, (87), 74 states have internal predecessors, (87), 13 states have call successors, (13), 8 states have call predecessors, (13), 7 states have return successors, (12), 9 states have call predecessors, (12), 12 states have call successors, (12) [2022-02-20 18:07:59,425 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 87 states to 87 states and 112 transitions. [2022-02-20 18:07:59,431 INFO L78 Accepts]: Start accepts. Automaton has 87 states and 112 transitions. Word has length 25 [2022-02-20 18:07:59,431 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:07:59,431 INFO L470 AbstractCegarLoop]: Abstraction has 87 states and 112 transitions. [2022-02-20 18:07:59,432 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:07:59,432 INFO L276 IsEmpty]: Start isEmpty. Operand 87 states and 112 transitions. [2022-02-20 18:07:59,433 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-02-20 18:07:59,436 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:07:59,436 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:07:59,437 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-02-20 18:07:59,437 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:07:59,438 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:07:59,440 INFO L85 PathProgramCache]: Analyzing trace with hash -1991216904, now seen corresponding path program 1 times [2022-02-20 18:07:59,440 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:07:59,440 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2118276724] [2022-02-20 18:07:59,441 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:07:59,441 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:07:59,472 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:59,517 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-02-20 18:07:59,519 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:59,522 INFO L290 TraceCheckUtils]: 0: Hoare triple {671#true} havoc ~retValue_acc~7;~retValue_acc~7 := ~methaneLevelCritical~0;#res := ~retValue_acc~7; {671#true} is VALID [2022-02-20 18:07:59,522 INFO L290 TraceCheckUtils]: 1: Hoare triple {671#true} assume true; {671#true} is VALID [2022-02-20 18:07:59,522 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {671#true} {672#false} #257#return; {672#false} is VALID [2022-02-20 18:07:59,523 INFO L290 TraceCheckUtils]: 0: Hoare triple {671#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(13, 12);call #Ultimate.allocInit(7, 13);call write~init~int(44, 13, 0, 1);call write~init~int(77, 13, 1, 1);call write~init~int(101, 13, 2, 1);call write~init~int(116, 13, 3, 1);call write~init~int(104, 13, 4, 1);call write~init~int(58, 13, 5, 1);call write~init~int(0, 13, 6, 1);call #Ultimate.allocInit(5, 14);call write~init~int(67, 14, 0, 1);call write~init~int(82, 14, 1, 1);call write~init~int(73, 14, 2, 1);call write~init~int(84, 14, 3, 1);call write~init~int(0, 14, 4, 1);call #Ultimate.allocInit(3, 15);call write~init~int(79, 15, 0, 1);call write~init~int(75, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(41, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4;~methAndRunningLastTime~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0; {671#true} is VALID [2022-02-20 18:07:59,523 INFO L290 TraceCheckUtils]: 1: Hoare triple {671#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret21#1, main_~retValue_acc~4#1, main_~tmp~5#1;havoc main_~retValue_acc~4#1;havoc main_~tmp~5#1;assume { :begin_inline_select_helpers } true; {671#true} is VALID [2022-02-20 18:07:59,523 INFO L290 TraceCheckUtils]: 2: Hoare triple {671#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {671#true} is VALID [2022-02-20 18:07:59,523 INFO L290 TraceCheckUtils]: 3: Hoare triple {671#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~6#1;havoc valid_product_~retValue_acc~6#1;valid_product_~retValue_acc~6#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~6#1; {671#true} is VALID [2022-02-20 18:07:59,523 INFO L290 TraceCheckUtils]: 4: Hoare triple {671#true} main_#t~ret21#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret21#1 && main_#t~ret21#1 <= 2147483647;main_~tmp~5#1 := main_#t~ret21#1;havoc main_#t~ret21#1; {671#true} is VALID [2022-02-20 18:07:59,524 INFO L290 TraceCheckUtils]: 5: Hoare triple {671#true} assume 0 != main_~tmp~5#1;assume { :begin_inline_setup } true; {671#true} is VALID [2022-02-20 18:07:59,524 INFO L290 TraceCheckUtils]: 6: Hoare triple {671#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0; {671#true} is VALID [2022-02-20 18:07:59,524 INFO L290 TraceCheckUtils]: 7: Hoare triple {671#true} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet4#1, test_#t~nondet5#1, test_#t~nondet6#1, test_#t~nondet7#1, test_~splverifierCounter~0#1, test_~tmp~0#1, test_~tmp___0~0#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~0#1;havoc test_~tmp___0~0#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {673#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} is VALID [2022-02-20 18:07:59,527 INFO L290 TraceCheckUtils]: 8: Hoare triple {673#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} assume !false; {673#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} is VALID [2022-02-20 18:07:59,527 INFO L290 TraceCheckUtils]: 9: Hoare triple {673#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} assume !(test_~splverifierCounter~0#1 < 4); {672#false} is VALID [2022-02-20 18:07:59,527 INFO L272 TraceCheckUtils]: 10: Hoare triple {672#false} call cleanup(); {672#false} is VALID [2022-02-20 18:07:59,528 INFO L290 TraceCheckUtils]: 11: Hoare triple {672#false} havoc ~i~0;havoc ~__cil_tmp2~0; {672#false} is VALID [2022-02-20 18:07:59,528 INFO L272 TraceCheckUtils]: 12: Hoare triple {672#false} call timeShift(); {672#false} is VALID [2022-02-20 18:07:59,528 INFO L290 TraceCheckUtils]: 13: Hoare triple {672#false} assume !(0 != ~pumpRunning~0); {672#false} is VALID [2022-02-20 18:07:59,528 INFO L290 TraceCheckUtils]: 14: Hoare triple {672#false} assume !(0 != ~systemActive~0); {672#false} is VALID [2022-02-20 18:07:59,528 INFO L290 TraceCheckUtils]: 15: Hoare triple {672#false} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret22#1, __utac_acc__Specification2_spec__2_#t~ret23#1, __utac_acc__Specification2_spec__2_~tmp~6#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~6#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {672#false} is VALID [2022-02-20 18:07:59,529 INFO L272 TraceCheckUtils]: 16: Hoare triple {672#false} call __utac_acc__Specification2_spec__2_#t~ret22#1 := isMethaneLevelCritical(); {671#true} is VALID [2022-02-20 18:07:59,529 INFO L290 TraceCheckUtils]: 17: Hoare triple {671#true} havoc ~retValue_acc~7;~retValue_acc~7 := ~methaneLevelCritical~0;#res := ~retValue_acc~7; {671#true} is VALID [2022-02-20 18:07:59,529 INFO L290 TraceCheckUtils]: 18: Hoare triple {671#true} assume true; {671#true} is VALID [2022-02-20 18:07:59,529 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {671#true} {672#false} #257#return; {672#false} is VALID [2022-02-20 18:07:59,529 INFO L290 TraceCheckUtils]: 20: Hoare triple {672#false} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret22#1 && __utac_acc__Specification2_spec__2_#t~ret22#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~6#1 := __utac_acc__Specification2_spec__2_#t~ret22#1;havoc __utac_acc__Specification2_spec__2_#t~ret22#1; {672#false} is VALID [2022-02-20 18:07:59,530 INFO L290 TraceCheckUtils]: 21: Hoare triple {672#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~6#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~1#1;havoc isPumpRunning_~retValue_acc~1#1;isPumpRunning_~retValue_acc~1#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~1#1; {672#false} is VALID [2022-02-20 18:07:59,531 INFO L290 TraceCheckUtils]: 22: Hoare triple {672#false} __utac_acc__Specification2_spec__2_#t~ret23#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret23#1 && __utac_acc__Specification2_spec__2_#t~ret23#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret23#1;havoc __utac_acc__Specification2_spec__2_#t~ret23#1; {672#false} is VALID [2022-02-20 18:07:59,531 INFO L290 TraceCheckUtils]: 23: Hoare triple {672#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {672#false} is VALID [2022-02-20 18:07:59,531 INFO L290 TraceCheckUtils]: 24: Hoare triple {672#false} assume 0 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {672#false} is VALID [2022-02-20 18:07:59,531 INFO L290 TraceCheckUtils]: 25: Hoare triple {672#false} assume !false; {672#false} is VALID [2022-02-20 18:07:59,532 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:07:59,532 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:07:59,532 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2118276724] [2022-02-20 18:07:59,532 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2118276724] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:07:59,532 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:07:59,532 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-02-20 18:07:59,532 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1136728120] [2022-02-20 18:07:59,533 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:07:59,534 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2022-02-20 18:07:59,534 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:07:59,534 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:07:59,555 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 26 edges. 26 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:59,556 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-02-20 18:07:59,556 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:07:59,557 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-02-20 18:07:59,557 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:07:59,557 INFO L87 Difference]: Start difference. First operand 87 states and 112 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:07:59,660 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:59,661 INFO L93 Difference]: Finished difference Result 134 states and 172 transitions. [2022-02-20 18:07:59,661 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-02-20 18:07:59,661 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2022-02-20 18:07:59,662 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:07:59,662 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:07:59,666 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 172 transitions. [2022-02-20 18:07:59,666 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:07:59,669 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 172 transitions. [2022-02-20 18:07:59,670 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 172 transitions. [2022-02-20 18:07:59,773 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 172 edges. 172 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:59,775 INFO L225 Difference]: With dead ends: 134 [2022-02-20 18:07:59,775 INFO L226 Difference]: Without dead ends: 78 [2022-02-20 18:07:59,776 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:07:59,776 INFO L933 BasicCegarLoop]: 99 mSDtfsCounter, 17 mSDsluCounter, 77 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 176 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:07:59,777 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [21 Valid, 176 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:07:59,778 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 78 states. [2022-02-20 18:07:59,783 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 78 to 78. [2022-02-20 18:07:59,784 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:07:59,784 INFO L82 GeneralOperation]: Start isEquivalent. First operand 78 states. Second operand has 78 states, 60 states have (on average 1.3333333333333333) internal successors, (80), 68 states have internal predecessors, (80), 10 states have call successors, (10), 7 states have call predecessors, (10), 7 states have return successors, (10), 7 states have call predecessors, (10), 10 states have call successors, (10) [2022-02-20 18:07:59,785 INFO L74 IsIncluded]: Start isIncluded. First operand 78 states. Second operand has 78 states, 60 states have (on average 1.3333333333333333) internal successors, (80), 68 states have internal predecessors, (80), 10 states have call successors, (10), 7 states have call predecessors, (10), 7 states have return successors, (10), 7 states have call predecessors, (10), 10 states have call successors, (10) [2022-02-20 18:07:59,785 INFO L87 Difference]: Start difference. First operand 78 states. Second operand has 78 states, 60 states have (on average 1.3333333333333333) internal successors, (80), 68 states have internal predecessors, (80), 10 states have call successors, (10), 7 states have call predecessors, (10), 7 states have return successors, (10), 7 states have call predecessors, (10), 10 states have call successors, (10) [2022-02-20 18:07:59,787 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:59,787 INFO L93 Difference]: Finished difference Result 78 states and 100 transitions. [2022-02-20 18:07:59,788 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 100 transitions. [2022-02-20 18:07:59,788 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:59,788 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:59,789 INFO L74 IsIncluded]: Start isIncluded. First operand has 78 states, 60 states have (on average 1.3333333333333333) internal successors, (80), 68 states have internal predecessors, (80), 10 states have call successors, (10), 7 states have call predecessors, (10), 7 states have return successors, (10), 7 states have call predecessors, (10), 10 states have call successors, (10) Second operand 78 states. [2022-02-20 18:07:59,789 INFO L87 Difference]: Start difference. First operand has 78 states, 60 states have (on average 1.3333333333333333) internal successors, (80), 68 states have internal predecessors, (80), 10 states have call successors, (10), 7 states have call predecessors, (10), 7 states have return successors, (10), 7 states have call predecessors, (10), 10 states have call successors, (10) Second operand 78 states. [2022-02-20 18:07:59,791 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:07:59,791 INFO L93 Difference]: Finished difference Result 78 states and 100 transitions. [2022-02-20 18:07:59,792 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 100 transitions. [2022-02-20 18:07:59,792 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:07:59,792 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:07:59,792 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:07:59,792 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:07:59,793 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 78 states, 60 states have (on average 1.3333333333333333) internal successors, (80), 68 states have internal predecessors, (80), 10 states have call successors, (10), 7 states have call predecessors, (10), 7 states have return successors, (10), 7 states have call predecessors, (10), 10 states have call successors, (10) [2022-02-20 18:07:59,795 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 78 states to 78 states and 100 transitions. [2022-02-20 18:07:59,795 INFO L78 Accepts]: Start accepts. Automaton has 78 states and 100 transitions. Word has length 26 [2022-02-20 18:07:59,795 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:07:59,795 INFO L470 AbstractCegarLoop]: Abstraction has 78 states and 100 transitions. [2022-02-20 18:07:59,795 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:07:59,796 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 100 transitions. [2022-02-20 18:07:59,796 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-02-20 18:07:59,796 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:07:59,797 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:07:59,797 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-02-20 18:07:59,797 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:07:59,797 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:07:59,797 INFO L85 PathProgramCache]: Analyzing trace with hash -1985117727, now seen corresponding path program 1 times [2022-02-20 18:07:59,798 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:07:59,798 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1516856944] [2022-02-20 18:07:59,798 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:07:59,798 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:07:59,820 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:59,862 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-02-20 18:07:59,863 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:07:59,866 INFO L290 TraceCheckUtils]: 0: Hoare triple {1140#true} havoc ~retValue_acc~7;~retValue_acc~7 := ~methaneLevelCritical~0;#res := ~retValue_acc~7; {1140#true} is VALID [2022-02-20 18:07:59,866 INFO L290 TraceCheckUtils]: 1: Hoare triple {1140#true} assume true; {1140#true} is VALID [2022-02-20 18:07:59,866 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1140#true} {1141#false} #257#return; {1141#false} is VALID [2022-02-20 18:07:59,866 INFO L290 TraceCheckUtils]: 0: Hoare triple {1140#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(13, 12);call #Ultimate.allocInit(7, 13);call write~init~int(44, 13, 0, 1);call write~init~int(77, 13, 1, 1);call write~init~int(101, 13, 2, 1);call write~init~int(116, 13, 3, 1);call write~init~int(104, 13, 4, 1);call write~init~int(58, 13, 5, 1);call write~init~int(0, 13, 6, 1);call #Ultimate.allocInit(5, 14);call write~init~int(67, 14, 0, 1);call write~init~int(82, 14, 1, 1);call write~init~int(73, 14, 2, 1);call write~init~int(84, 14, 3, 1);call write~init~int(0, 14, 4, 1);call #Ultimate.allocInit(3, 15);call write~init~int(79, 15, 0, 1);call write~init~int(75, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(41, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4;~methAndRunningLastTime~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0; {1140#true} is VALID [2022-02-20 18:07:59,867 INFO L290 TraceCheckUtils]: 1: Hoare triple {1140#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret21#1, main_~retValue_acc~4#1, main_~tmp~5#1;havoc main_~retValue_acc~4#1;havoc main_~tmp~5#1;assume { :begin_inline_select_helpers } true; {1140#true} is VALID [2022-02-20 18:07:59,867 INFO L290 TraceCheckUtils]: 2: Hoare triple {1140#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {1140#true} is VALID [2022-02-20 18:07:59,867 INFO L290 TraceCheckUtils]: 3: Hoare triple {1140#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~6#1;havoc valid_product_~retValue_acc~6#1;valid_product_~retValue_acc~6#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~6#1; {1142#(= |ULTIMATE.start_valid_product_#res#1| 1)} is VALID [2022-02-20 18:07:59,868 INFO L290 TraceCheckUtils]: 4: Hoare triple {1142#(= |ULTIMATE.start_valid_product_#res#1| 1)} main_#t~ret21#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret21#1 && main_#t~ret21#1 <= 2147483647;main_~tmp~5#1 := main_#t~ret21#1;havoc main_#t~ret21#1; {1143#(= |ULTIMATE.start_main_~tmp~5#1| 1)} is VALID [2022-02-20 18:07:59,868 INFO L290 TraceCheckUtils]: 5: Hoare triple {1143#(= |ULTIMATE.start_main_~tmp~5#1| 1)} assume 0 != main_~tmp~5#1;assume { :begin_inline_setup } true; {1140#true} is VALID [2022-02-20 18:07:59,868 INFO L290 TraceCheckUtils]: 6: Hoare triple {1140#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0; {1140#true} is VALID [2022-02-20 18:07:59,868 INFO L290 TraceCheckUtils]: 7: Hoare triple {1140#true} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet4#1, test_#t~nondet5#1, test_#t~nondet6#1, test_#t~nondet7#1, test_~splverifierCounter~0#1, test_~tmp~0#1, test_~tmp___0~0#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~0#1;havoc test_~tmp___0~0#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {1140#true} is VALID [2022-02-20 18:07:59,869 INFO L290 TraceCheckUtils]: 8: Hoare triple {1140#true} assume !false; {1140#true} is VALID [2022-02-20 18:07:59,869 INFO L290 TraceCheckUtils]: 9: Hoare triple {1140#true} assume test_~splverifierCounter~0#1 < 4; {1140#true} is VALID [2022-02-20 18:07:59,869 INFO L290 TraceCheckUtils]: 10: Hoare triple {1140#true} assume -2147483648 <= test_#t~nondet4#1 && test_#t~nondet4#1 <= 2147483647;test_~tmp~0#1 := test_#t~nondet4#1;havoc test_#t~nondet4#1; {1140#true} is VALID [2022-02-20 18:07:59,869 INFO L290 TraceCheckUtils]: 11: Hoare triple {1140#true} assume !(0 != test_~tmp~0#1); {1140#true} is VALID [2022-02-20 18:07:59,869 INFO L290 TraceCheckUtils]: 12: Hoare triple {1140#true} assume -2147483648 <= test_#t~nondet5#1 && test_#t~nondet5#1 <= 2147483647;test_~tmp___0~0#1 := test_#t~nondet5#1;havoc test_#t~nondet5#1; {1140#true} is VALID [2022-02-20 18:07:59,869 INFO L290 TraceCheckUtils]: 13: Hoare triple {1140#true} assume !(0 != test_~tmp___0~0#1); {1140#true} is VALID [2022-02-20 18:07:59,870 INFO L290 TraceCheckUtils]: 14: Hoare triple {1140#true} assume -2147483648 <= test_#t~nondet6#1 && test_#t~nondet6#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet6#1;havoc test_#t~nondet6#1; {1140#true} is VALID [2022-02-20 18:07:59,870 INFO L290 TraceCheckUtils]: 15: Hoare triple {1140#true} assume 0 != test_~tmp___2~0#1;assume { :begin_inline_startSystem } true;~systemActive~0 := 1; {1144#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:07:59,871 INFO L290 TraceCheckUtils]: 16: Hoare triple {1144#(not (= 0 ~systemActive~0))} assume { :end_inline_startSystem } true; {1144#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:07:59,871 INFO L272 TraceCheckUtils]: 17: Hoare triple {1144#(not (= 0 ~systemActive~0))} call timeShift(); {1144#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:07:59,871 INFO L290 TraceCheckUtils]: 18: Hoare triple {1144#(not (= 0 ~systemActive~0))} assume !(0 != ~pumpRunning~0); {1144#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:07:59,872 INFO L290 TraceCheckUtils]: 19: Hoare triple {1144#(not (= 0 ~systemActive~0))} assume !(0 != ~systemActive~0); {1141#false} is VALID [2022-02-20 18:07:59,872 INFO L290 TraceCheckUtils]: 20: Hoare triple {1141#false} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret22#1, __utac_acc__Specification2_spec__2_#t~ret23#1, __utac_acc__Specification2_spec__2_~tmp~6#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~6#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {1141#false} is VALID [2022-02-20 18:07:59,872 INFO L272 TraceCheckUtils]: 21: Hoare triple {1141#false} call __utac_acc__Specification2_spec__2_#t~ret22#1 := isMethaneLevelCritical(); {1140#true} is VALID [2022-02-20 18:07:59,872 INFO L290 TraceCheckUtils]: 22: Hoare triple {1140#true} havoc ~retValue_acc~7;~retValue_acc~7 := ~methaneLevelCritical~0;#res := ~retValue_acc~7; {1140#true} is VALID [2022-02-20 18:07:59,872 INFO L290 TraceCheckUtils]: 23: Hoare triple {1140#true} assume true; {1140#true} is VALID [2022-02-20 18:07:59,873 INFO L284 TraceCheckUtils]: 24: Hoare quadruple {1140#true} {1141#false} #257#return; {1141#false} is VALID [2022-02-20 18:07:59,873 INFO L290 TraceCheckUtils]: 25: Hoare triple {1141#false} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret22#1 && __utac_acc__Specification2_spec__2_#t~ret22#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~6#1 := __utac_acc__Specification2_spec__2_#t~ret22#1;havoc __utac_acc__Specification2_spec__2_#t~ret22#1; {1141#false} is VALID [2022-02-20 18:07:59,873 INFO L290 TraceCheckUtils]: 26: Hoare triple {1141#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~6#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~1#1;havoc isPumpRunning_~retValue_acc~1#1;isPumpRunning_~retValue_acc~1#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~1#1; {1141#false} is VALID [2022-02-20 18:07:59,873 INFO L290 TraceCheckUtils]: 27: Hoare triple {1141#false} __utac_acc__Specification2_spec__2_#t~ret23#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret23#1 && __utac_acc__Specification2_spec__2_#t~ret23#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret23#1;havoc __utac_acc__Specification2_spec__2_#t~ret23#1; {1141#false} is VALID [2022-02-20 18:07:59,873 INFO L290 TraceCheckUtils]: 28: Hoare triple {1141#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {1141#false} is VALID [2022-02-20 18:07:59,873 INFO L290 TraceCheckUtils]: 29: Hoare triple {1141#false} assume 0 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {1141#false} is VALID [2022-02-20 18:07:59,874 INFO L290 TraceCheckUtils]: 30: Hoare triple {1141#false} assume !false; {1141#false} is VALID [2022-02-20 18:07:59,874 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:07:59,874 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:07:59,874 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1516856944] [2022-02-20 18:07:59,874 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1516856944] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:07:59,875 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:07:59,875 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-02-20 18:07:59,875 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [128413186] [2022-02-20 18:07:59,875 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:07:59,875 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31 [2022-02-20 18:07:59,876 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:07:59,876 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:07:59,894 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 31 edges. 31 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:07:59,894 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-02-20 18:07:59,895 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:07:59,895 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-02-20 18:07:59,895 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-02-20 18:07:59,895 INFO L87 Difference]: Start difference. First operand 78 states and 100 transitions. Second operand has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:08:00,154 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:00,155 INFO L93 Difference]: Finished difference Result 191 states and 249 transitions. [2022-02-20 18:08:00,155 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-02-20 18:08:00,155 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31 [2022-02-20 18:08:00,155 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:08:00,155 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:08:00,158 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 249 transitions. [2022-02-20 18:08:00,159 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:08:00,161 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 249 transitions. [2022-02-20 18:08:00,162 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states and 249 transitions. [2022-02-20 18:08:00,319 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 249 edges. 249 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:00,321 INFO L225 Difference]: With dead ends: 191 [2022-02-20 18:08:00,321 INFO L226 Difference]: Without dead ends: 121 [2022-02-20 18:08:00,322 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-02-20 18:08:00,323 INFO L933 BasicCegarLoop]: 114 mSDtfsCounter, 165 mSDsluCounter, 228 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 21 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 165 SdHoareTripleChecker+Valid, 342 SdHoareTripleChecker+Invalid, 33 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 21 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:08:00,323 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [165 Valid, 342 Invalid, 33 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [21 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:08:00,324 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 121 states. [2022-02-20 18:08:00,329 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 121 to 118. [2022-02-20 18:08:00,330 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:08:00,330 INFO L82 GeneralOperation]: Start isEquivalent. First operand 121 states. Second operand has 118 states, 90 states have (on average 1.3555555555555556) internal successors, (122), 101 states have internal predecessors, (122), 15 states have call successors, (15), 12 states have call predecessors, (15), 12 states have return successors, (16), 11 states have call predecessors, (16), 15 states have call successors, (16) [2022-02-20 18:08:00,330 INFO L74 IsIncluded]: Start isIncluded. First operand 121 states. Second operand has 118 states, 90 states have (on average 1.3555555555555556) internal successors, (122), 101 states have internal predecessors, (122), 15 states have call successors, (15), 12 states have call predecessors, (15), 12 states have return successors, (16), 11 states have call predecessors, (16), 15 states have call successors, (16) [2022-02-20 18:08:00,331 INFO L87 Difference]: Start difference. First operand 121 states. Second operand has 118 states, 90 states have (on average 1.3555555555555556) internal successors, (122), 101 states have internal predecessors, (122), 15 states have call successors, (15), 12 states have call predecessors, (15), 12 states have return successors, (16), 11 states have call predecessors, (16), 15 states have call successors, (16) [2022-02-20 18:08:00,338 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:00,338 INFO L93 Difference]: Finished difference Result 121 states and 155 transitions. [2022-02-20 18:08:00,338 INFO L276 IsEmpty]: Start isEmpty. Operand 121 states and 155 transitions. [2022-02-20 18:08:00,338 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:00,339 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:00,339 INFO L74 IsIncluded]: Start isIncluded. First operand has 118 states, 90 states have (on average 1.3555555555555556) internal successors, (122), 101 states have internal predecessors, (122), 15 states have call successors, (15), 12 states have call predecessors, (15), 12 states have return successors, (16), 11 states have call predecessors, (16), 15 states have call successors, (16) Second operand 121 states. [2022-02-20 18:08:00,340 INFO L87 Difference]: Start difference. First operand has 118 states, 90 states have (on average 1.3555555555555556) internal successors, (122), 101 states have internal predecessors, (122), 15 states have call successors, (15), 12 states have call predecessors, (15), 12 states have return successors, (16), 11 states have call predecessors, (16), 15 states have call successors, (16) Second operand 121 states. [2022-02-20 18:08:00,343 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:00,343 INFO L93 Difference]: Finished difference Result 121 states and 155 transitions. [2022-02-20 18:08:00,343 INFO L276 IsEmpty]: Start isEmpty. Operand 121 states and 155 transitions. [2022-02-20 18:08:00,344 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:00,344 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:00,344 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:08:00,344 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:08:00,345 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 118 states, 90 states have (on average 1.3555555555555556) internal successors, (122), 101 states have internal predecessors, (122), 15 states have call successors, (15), 12 states have call predecessors, (15), 12 states have return successors, (16), 11 states have call predecessors, (16), 15 states have call successors, (16) [2022-02-20 18:08:00,348 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 118 states to 118 states and 153 transitions. [2022-02-20 18:08:00,348 INFO L78 Accepts]: Start accepts. Automaton has 118 states and 153 transitions. Word has length 31 [2022-02-20 18:08:00,348 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:08:00,348 INFO L470 AbstractCegarLoop]: Abstraction has 118 states and 153 transitions. [2022-02-20 18:08:00,348 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:08:00,349 INFO L276 IsEmpty]: Start isEmpty. Operand 118 states and 153 transitions. [2022-02-20 18:08:00,349 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2022-02-20 18:08:00,349 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:08:00,349 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:08:00,350 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-02-20 18:08:00,350 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:08:00,350 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:08:00,351 INFO L85 PathProgramCache]: Analyzing trace with hash 1980394589, now seen corresponding path program 1 times [2022-02-20 18:08:00,351 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:08:00,351 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1988184328] [2022-02-20 18:08:00,351 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:08:00,352 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:08:00,384 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:00,451 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-02-20 18:08:00,453 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:00,456 INFO L290 TraceCheckUtils]: 0: Hoare triple {1834#true} havoc ~retValue_acc~7;~retValue_acc~7 := ~methaneLevelCritical~0;#res := ~retValue_acc~7; {1834#true} is VALID [2022-02-20 18:08:00,456 INFO L290 TraceCheckUtils]: 1: Hoare triple {1834#true} assume true; {1834#true} is VALID [2022-02-20 18:08:00,456 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1834#true} {1836#(= ~pumpRunning~0 0)} #257#return; {1836#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:00,457 INFO L290 TraceCheckUtils]: 0: Hoare triple {1834#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(13, 12);call #Ultimate.allocInit(7, 13);call write~init~int(44, 13, 0, 1);call write~init~int(77, 13, 1, 1);call write~init~int(101, 13, 2, 1);call write~init~int(116, 13, 3, 1);call write~init~int(104, 13, 4, 1);call write~init~int(58, 13, 5, 1);call write~init~int(0, 13, 6, 1);call #Ultimate.allocInit(5, 14);call write~init~int(67, 14, 0, 1);call write~init~int(82, 14, 1, 1);call write~init~int(73, 14, 2, 1);call write~init~int(84, 14, 3, 1);call write~init~int(0, 14, 4, 1);call #Ultimate.allocInit(3, 15);call write~init~int(79, 15, 0, 1);call write~init~int(75, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(41, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4;~methAndRunningLastTime~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0; {1834#true} is VALID [2022-02-20 18:08:00,457 INFO L290 TraceCheckUtils]: 1: Hoare triple {1834#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret21#1, main_~retValue_acc~4#1, main_~tmp~5#1;havoc main_~retValue_acc~4#1;havoc main_~tmp~5#1;assume { :begin_inline_select_helpers } true; {1834#true} is VALID [2022-02-20 18:08:00,457 INFO L290 TraceCheckUtils]: 2: Hoare triple {1834#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {1834#true} is VALID [2022-02-20 18:08:00,457 INFO L290 TraceCheckUtils]: 3: Hoare triple {1834#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~6#1;havoc valid_product_~retValue_acc~6#1;valid_product_~retValue_acc~6#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~6#1; {1834#true} is VALID [2022-02-20 18:08:00,457 INFO L290 TraceCheckUtils]: 4: Hoare triple {1834#true} main_#t~ret21#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret21#1 && main_#t~ret21#1 <= 2147483647;main_~tmp~5#1 := main_#t~ret21#1;havoc main_#t~ret21#1; {1834#true} is VALID [2022-02-20 18:08:00,457 INFO L290 TraceCheckUtils]: 5: Hoare triple {1834#true} assume 0 != main_~tmp~5#1;assume { :begin_inline_setup } true; {1834#true} is VALID [2022-02-20 18:08:00,457 INFO L290 TraceCheckUtils]: 6: Hoare triple {1834#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0; {1834#true} is VALID [2022-02-20 18:08:00,457 INFO L290 TraceCheckUtils]: 7: Hoare triple {1834#true} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet4#1, test_#t~nondet5#1, test_#t~nondet6#1, test_#t~nondet7#1, test_~splverifierCounter~0#1, test_~tmp~0#1, test_~tmp___0~0#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~0#1;havoc test_~tmp___0~0#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {1834#true} is VALID [2022-02-20 18:08:00,457 INFO L290 TraceCheckUtils]: 8: Hoare triple {1834#true} assume !false; {1834#true} is VALID [2022-02-20 18:08:00,457 INFO L290 TraceCheckUtils]: 9: Hoare triple {1834#true} assume test_~splverifierCounter~0#1 < 4; {1834#true} is VALID [2022-02-20 18:08:00,458 INFO L290 TraceCheckUtils]: 10: Hoare triple {1834#true} assume -2147483648 <= test_#t~nondet4#1 && test_#t~nondet4#1 <= 2147483647;test_~tmp~0#1 := test_#t~nondet4#1;havoc test_#t~nondet4#1; {1834#true} is VALID [2022-02-20 18:08:00,458 INFO L290 TraceCheckUtils]: 11: Hoare triple {1834#true} assume !(0 != test_~tmp~0#1); {1834#true} is VALID [2022-02-20 18:08:00,458 INFO L290 TraceCheckUtils]: 12: Hoare triple {1834#true} assume -2147483648 <= test_#t~nondet5#1 && test_#t~nondet5#1 <= 2147483647;test_~tmp___0~0#1 := test_#t~nondet5#1;havoc test_#t~nondet5#1; {1834#true} is VALID [2022-02-20 18:08:00,458 INFO L290 TraceCheckUtils]: 13: Hoare triple {1834#true} assume !(0 != test_~tmp___0~0#1); {1834#true} is VALID [2022-02-20 18:08:00,458 INFO L290 TraceCheckUtils]: 14: Hoare triple {1834#true} assume -2147483648 <= test_#t~nondet6#1 && test_#t~nondet6#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet6#1;havoc test_#t~nondet6#1; {1834#true} is VALID [2022-02-20 18:08:00,458 INFO L290 TraceCheckUtils]: 15: Hoare triple {1834#true} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet7#1 && test_#t~nondet7#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet7#1;havoc test_#t~nondet7#1; {1834#true} is VALID [2022-02-20 18:08:00,458 INFO L290 TraceCheckUtils]: 16: Hoare triple {1834#true} assume 0 != test_~tmp___1~0#1;assume { :begin_inline_stopSystem } true; {1834#true} is VALID [2022-02-20 18:08:00,458 INFO L290 TraceCheckUtils]: 17: Hoare triple {1834#true} assume !(0 != ~pumpRunning~0); {1834#true} is VALID [2022-02-20 18:08:00,458 INFO L290 TraceCheckUtils]: 18: Hoare triple {1834#true} ~systemActive~0 := 0; {1834#true} is VALID [2022-02-20 18:08:00,459 INFO L290 TraceCheckUtils]: 19: Hoare triple {1834#true} assume { :end_inline_stopSystem } true; {1834#true} is VALID [2022-02-20 18:08:00,459 INFO L272 TraceCheckUtils]: 20: Hoare triple {1834#true} call timeShift(); {1834#true} is VALID [2022-02-20 18:08:00,459 INFO L290 TraceCheckUtils]: 21: Hoare triple {1834#true} assume !(0 != ~pumpRunning~0); {1836#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:00,459 INFO L290 TraceCheckUtils]: 22: Hoare triple {1836#(= ~pumpRunning~0 0)} assume !(0 != ~systemActive~0); {1836#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:00,460 INFO L290 TraceCheckUtils]: 23: Hoare triple {1836#(= ~pumpRunning~0 0)} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret22#1, __utac_acc__Specification2_spec__2_#t~ret23#1, __utac_acc__Specification2_spec__2_~tmp~6#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~6#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {1836#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:00,460 INFO L272 TraceCheckUtils]: 24: Hoare triple {1836#(= ~pumpRunning~0 0)} call __utac_acc__Specification2_spec__2_#t~ret22#1 := isMethaneLevelCritical(); {1834#true} is VALID [2022-02-20 18:08:00,460 INFO L290 TraceCheckUtils]: 25: Hoare triple {1834#true} havoc ~retValue_acc~7;~retValue_acc~7 := ~methaneLevelCritical~0;#res := ~retValue_acc~7; {1834#true} is VALID [2022-02-20 18:08:00,460 INFO L290 TraceCheckUtils]: 26: Hoare triple {1834#true} assume true; {1834#true} is VALID [2022-02-20 18:08:00,461 INFO L284 TraceCheckUtils]: 27: Hoare quadruple {1834#true} {1836#(= ~pumpRunning~0 0)} #257#return; {1836#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:00,461 INFO L290 TraceCheckUtils]: 28: Hoare triple {1836#(= ~pumpRunning~0 0)} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret22#1 && __utac_acc__Specification2_spec__2_#t~ret22#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~6#1 := __utac_acc__Specification2_spec__2_#t~ret22#1;havoc __utac_acc__Specification2_spec__2_#t~ret22#1; {1836#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:00,461 INFO L290 TraceCheckUtils]: 29: Hoare triple {1836#(= ~pumpRunning~0 0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp~6#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~1#1;havoc isPumpRunning_~retValue_acc~1#1;isPumpRunning_~retValue_acc~1#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~1#1; {1840#(= |timeShift_isPumpRunning_#res#1| 0)} is VALID [2022-02-20 18:08:00,462 INFO L290 TraceCheckUtils]: 30: Hoare triple {1840#(= |timeShift_isPumpRunning_#res#1| 0)} __utac_acc__Specification2_spec__2_#t~ret23#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret23#1 && __utac_acc__Specification2_spec__2_#t~ret23#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret23#1;havoc __utac_acc__Specification2_spec__2_#t~ret23#1; {1841#(= |timeShift___utac_acc__Specification2_spec__2_~tmp___0~3#1| 0)} is VALID [2022-02-20 18:08:00,462 INFO L290 TraceCheckUtils]: 31: Hoare triple {1841#(= |timeShift___utac_acc__Specification2_spec__2_~tmp___0~3#1| 0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {1835#false} is VALID [2022-02-20 18:08:00,462 INFO L290 TraceCheckUtils]: 32: Hoare triple {1835#false} assume 0 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {1835#false} is VALID [2022-02-20 18:08:00,462 INFO L290 TraceCheckUtils]: 33: Hoare triple {1835#false} assume !false; {1835#false} is VALID [2022-02-20 18:08:00,463 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:08:00,463 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:08:00,463 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1988184328] [2022-02-20 18:08:00,463 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1988184328] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:08:00,463 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:08:00,463 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-02-20 18:08:00,463 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1938493942] [2022-02-20 18:08:00,463 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:08:00,464 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 34 [2022-02-20 18:08:00,464 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:08:00,464 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:08:00,493 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 34 edges. 34 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:00,493 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-02-20 18:08:00,493 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:08:00,494 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-02-20 18:08:00,494 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-02-20 18:08:00,494 INFO L87 Difference]: Start difference. First operand 118 states and 153 transitions. Second operand has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:08:00,682 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:00,683 INFO L93 Difference]: Finished difference Result 272 states and 364 transitions. [2022-02-20 18:08:00,683 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-02-20 18:08:00,683 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 34 [2022-02-20 18:08:00,683 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:08:00,684 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:08:00,686 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 259 transitions. [2022-02-20 18:08:00,687 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:08:00,689 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 259 transitions. [2022-02-20 18:08:00,690 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states and 259 transitions. [2022-02-20 18:08:00,829 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 259 edges. 259 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:00,832 INFO L225 Difference]: With dead ends: 272 [2022-02-20 18:08:00,832 INFO L226 Difference]: Without dead ends: 162 [2022-02-20 18:08:00,832 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-02-20 18:08:00,833 INFO L933 BasicCegarLoop]: 107 mSDtfsCounter, 78 mSDsluCounter, 280 mSDsCounter, 0 mSdLazyCounter, 27 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 78 SdHoareTripleChecker+Valid, 387 SdHoareTripleChecker+Invalid, 37 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 27 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:08:00,834 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [78 Valid, 387 Invalid, 37 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 27 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:08:00,834 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 162 states. [2022-02-20 18:08:00,843 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 162 to 152. [2022-02-20 18:08:00,844 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:08:00,844 INFO L82 GeneralOperation]: Start isEquivalent. First operand 162 states. Second operand has 152 states, 116 states have (on average 1.293103448275862) internal successors, (150), 126 states have internal predecessors, (150), 18 states have call successors, (18), 17 states have call predecessors, (18), 17 states have return successors, (24), 17 states have call predecessors, (24), 18 states have call successors, (24) [2022-02-20 18:08:00,845 INFO L74 IsIncluded]: Start isIncluded. First operand 162 states. Second operand has 152 states, 116 states have (on average 1.293103448275862) internal successors, (150), 126 states have internal predecessors, (150), 18 states have call successors, (18), 17 states have call predecessors, (18), 17 states have return successors, (24), 17 states have call predecessors, (24), 18 states have call successors, (24) [2022-02-20 18:08:00,845 INFO L87 Difference]: Start difference. First operand 162 states. Second operand has 152 states, 116 states have (on average 1.293103448275862) internal successors, (150), 126 states have internal predecessors, (150), 18 states have call successors, (18), 17 states have call predecessors, (18), 17 states have return successors, (24), 17 states have call predecessors, (24), 18 states have call successors, (24) [2022-02-20 18:08:00,849 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:00,849 INFO L93 Difference]: Finished difference Result 162 states and 206 transitions. [2022-02-20 18:08:00,849 INFO L276 IsEmpty]: Start isEmpty. Operand 162 states and 206 transitions. [2022-02-20 18:08:00,850 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:00,850 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:00,851 INFO L74 IsIncluded]: Start isIncluded. First operand has 152 states, 116 states have (on average 1.293103448275862) internal successors, (150), 126 states have internal predecessors, (150), 18 states have call successors, (18), 17 states have call predecessors, (18), 17 states have return successors, (24), 17 states have call predecessors, (24), 18 states have call successors, (24) Second operand 162 states. [2022-02-20 18:08:00,851 INFO L87 Difference]: Start difference. First operand has 152 states, 116 states have (on average 1.293103448275862) internal successors, (150), 126 states have internal predecessors, (150), 18 states have call successors, (18), 17 states have call predecessors, (18), 17 states have return successors, (24), 17 states have call predecessors, (24), 18 states have call successors, (24) Second operand 162 states. [2022-02-20 18:08:00,855 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:00,855 INFO L93 Difference]: Finished difference Result 162 states and 206 transitions. [2022-02-20 18:08:00,855 INFO L276 IsEmpty]: Start isEmpty. Operand 162 states and 206 transitions. [2022-02-20 18:08:00,856 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:00,856 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:00,856 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:08:00,856 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:08:00,857 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 152 states, 116 states have (on average 1.293103448275862) internal successors, (150), 126 states have internal predecessors, (150), 18 states have call successors, (18), 17 states have call predecessors, (18), 17 states have return successors, (24), 17 states have call predecessors, (24), 18 states have call successors, (24) [2022-02-20 18:08:00,860 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 152 states to 152 states and 192 transitions. [2022-02-20 18:08:00,861 INFO L78 Accepts]: Start accepts. Automaton has 152 states and 192 transitions. Word has length 34 [2022-02-20 18:08:00,861 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:08:00,861 INFO L470 AbstractCegarLoop]: Abstraction has 152 states and 192 transitions. [2022-02-20 18:08:00,861 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:08:00,861 INFO L276 IsEmpty]: Start isEmpty. Operand 152 states and 192 transitions. [2022-02-20 18:08:00,862 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-02-20 18:08:00,862 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:08:00,862 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:08:00,862 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-02-20 18:08:00,863 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:08:00,863 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:08:00,863 INFO L85 PathProgramCache]: Analyzing trace with hash -316583003, now seen corresponding path program 1 times [2022-02-20 18:08:00,863 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:08:00,863 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [807736625] [2022-02-20 18:08:00,864 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:08:00,864 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:08:00,882 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:00,897 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-02-20 18:08:00,901 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:00,917 INFO L290 TraceCheckUtils]: 0: Hoare triple {2778#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {2762#true} is VALID [2022-02-20 18:08:00,917 INFO L290 TraceCheckUtils]: 1: Hoare triple {2762#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret19#1, isHighWaterLevel_~retValue_acc~2#1, isHighWaterLevel_~tmp~3#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~2#1;havoc isHighWaterLevel_~tmp~3#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~9#1;havoc isHighWaterSensorDry_~retValue_acc~9#1; {2762#true} is VALID [2022-02-20 18:08:00,917 INFO L290 TraceCheckUtils]: 2: Hoare triple {2762#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~9#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~9#1; {2762#true} is VALID [2022-02-20 18:08:00,917 INFO L290 TraceCheckUtils]: 3: Hoare triple {2762#true} isHighWaterLevel_#t~ret19#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret19#1 && isHighWaterLevel_#t~ret19#1 <= 2147483647;isHighWaterLevel_~tmp~3#1 := isHighWaterLevel_#t~ret19#1;havoc isHighWaterLevel_#t~ret19#1; {2762#true} is VALID [2022-02-20 18:08:00,918 INFO L290 TraceCheckUtils]: 4: Hoare triple {2762#true} assume 0 != isHighWaterLevel_~tmp~3#1;isHighWaterLevel_~tmp___0~1#1 := 0; {2779#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0)} is VALID [2022-02-20 18:08:00,918 INFO L290 TraceCheckUtils]: 5: Hoare triple {2779#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0)} isHighWaterLevel_~retValue_acc~2#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~2#1; {2780#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)} is VALID [2022-02-20 18:08:00,919 INFO L290 TraceCheckUtils]: 6: Hoare triple {2780#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)} #t~ret8#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret8#1 && #t~ret8#1 <= 2147483647;~tmp~1#1 := #t~ret8#1;havoc #t~ret8#1; {2781#(= |processEnvironment__wrappee__highWaterSensor_~tmp~1#1| 0)} is VALID [2022-02-20 18:08:00,919 INFO L290 TraceCheckUtils]: 7: Hoare triple {2781#(= |processEnvironment__wrappee__highWaterSensor_~tmp~1#1| 0)} assume 0 != ~tmp~1#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {2763#false} is VALID [2022-02-20 18:08:00,919 INFO L290 TraceCheckUtils]: 8: Hoare triple {2763#false} assume { :end_inline_activatePump } true; {2763#false} is VALID [2022-02-20 18:08:00,919 INFO L290 TraceCheckUtils]: 9: Hoare triple {2763#false} assume true; {2763#false} is VALID [2022-02-20 18:08:00,920 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {2763#false} {2762#true} #255#return; {2763#false} is VALID [2022-02-20 18:08:00,920 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2022-02-20 18:08:00,921 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:00,923 INFO L290 TraceCheckUtils]: 0: Hoare triple {2762#true} havoc ~retValue_acc~7;~retValue_acc~7 := ~methaneLevelCritical~0;#res := ~retValue_acc~7; {2762#true} is VALID [2022-02-20 18:08:00,923 INFO L290 TraceCheckUtils]: 1: Hoare triple {2762#true} assume true; {2762#true} is VALID [2022-02-20 18:08:00,923 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {2762#true} {2763#false} #257#return; {2763#false} is VALID [2022-02-20 18:08:00,923 INFO L290 TraceCheckUtils]: 0: Hoare triple {2762#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(13, 12);call #Ultimate.allocInit(7, 13);call write~init~int(44, 13, 0, 1);call write~init~int(77, 13, 1, 1);call write~init~int(101, 13, 2, 1);call write~init~int(116, 13, 3, 1);call write~init~int(104, 13, 4, 1);call write~init~int(58, 13, 5, 1);call write~init~int(0, 13, 6, 1);call #Ultimate.allocInit(5, 14);call write~init~int(67, 14, 0, 1);call write~init~int(82, 14, 1, 1);call write~init~int(73, 14, 2, 1);call write~init~int(84, 14, 3, 1);call write~init~int(0, 14, 4, 1);call #Ultimate.allocInit(3, 15);call write~init~int(79, 15, 0, 1);call write~init~int(75, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(41, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4;~methAndRunningLastTime~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0; {2762#true} is VALID [2022-02-20 18:08:00,924 INFO L290 TraceCheckUtils]: 1: Hoare triple {2762#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret21#1, main_~retValue_acc~4#1, main_~tmp~5#1;havoc main_~retValue_acc~4#1;havoc main_~tmp~5#1;assume { :begin_inline_select_helpers } true; {2762#true} is VALID [2022-02-20 18:08:00,924 INFO L290 TraceCheckUtils]: 2: Hoare triple {2762#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {2762#true} is VALID [2022-02-20 18:08:00,924 INFO L290 TraceCheckUtils]: 3: Hoare triple {2762#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~6#1;havoc valid_product_~retValue_acc~6#1;valid_product_~retValue_acc~6#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~6#1; {2762#true} is VALID [2022-02-20 18:08:00,924 INFO L290 TraceCheckUtils]: 4: Hoare triple {2762#true} main_#t~ret21#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret21#1 && main_#t~ret21#1 <= 2147483647;main_~tmp~5#1 := main_#t~ret21#1;havoc main_#t~ret21#1; {2762#true} is VALID [2022-02-20 18:08:00,924 INFO L290 TraceCheckUtils]: 5: Hoare triple {2762#true} assume 0 != main_~tmp~5#1;assume { :begin_inline_setup } true; {2762#true} is VALID [2022-02-20 18:08:00,924 INFO L290 TraceCheckUtils]: 6: Hoare triple {2762#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0; {2762#true} is VALID [2022-02-20 18:08:00,924 INFO L290 TraceCheckUtils]: 7: Hoare triple {2762#true} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet4#1, test_#t~nondet5#1, test_#t~nondet6#1, test_#t~nondet7#1, test_~splverifierCounter~0#1, test_~tmp~0#1, test_~tmp___0~0#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~0#1;havoc test_~tmp___0~0#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {2762#true} is VALID [2022-02-20 18:08:00,925 INFO L290 TraceCheckUtils]: 8: Hoare triple {2762#true} assume !false; {2762#true} is VALID [2022-02-20 18:08:00,925 INFO L290 TraceCheckUtils]: 9: Hoare triple {2762#true} assume test_~splverifierCounter~0#1 < 4; {2762#true} is VALID [2022-02-20 18:08:00,925 INFO L290 TraceCheckUtils]: 10: Hoare triple {2762#true} assume -2147483648 <= test_#t~nondet4#1 && test_#t~nondet4#1 <= 2147483647;test_~tmp~0#1 := test_#t~nondet4#1;havoc test_#t~nondet4#1; {2762#true} is VALID [2022-02-20 18:08:00,925 INFO L290 TraceCheckUtils]: 11: Hoare triple {2762#true} assume !(0 != test_~tmp~0#1); {2762#true} is VALID [2022-02-20 18:08:00,925 INFO L290 TraceCheckUtils]: 12: Hoare triple {2762#true} assume -2147483648 <= test_#t~nondet5#1 && test_#t~nondet5#1 <= 2147483647;test_~tmp___0~0#1 := test_#t~nondet5#1;havoc test_#t~nondet5#1; {2762#true} is VALID [2022-02-20 18:08:00,925 INFO L290 TraceCheckUtils]: 13: Hoare triple {2762#true} assume !(0 != test_~tmp___0~0#1); {2762#true} is VALID [2022-02-20 18:08:00,926 INFO L290 TraceCheckUtils]: 14: Hoare triple {2762#true} assume -2147483648 <= test_#t~nondet6#1 && test_#t~nondet6#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet6#1;havoc test_#t~nondet6#1; {2762#true} is VALID [2022-02-20 18:08:00,926 INFO L290 TraceCheckUtils]: 15: Hoare triple {2762#true} assume 0 != test_~tmp___2~0#1;assume { :begin_inline_startSystem } true;~systemActive~0 := 1; {2762#true} is VALID [2022-02-20 18:08:00,926 INFO L290 TraceCheckUtils]: 16: Hoare triple {2762#true} assume { :end_inline_startSystem } true; {2762#true} is VALID [2022-02-20 18:08:00,926 INFO L272 TraceCheckUtils]: 17: Hoare triple {2762#true} call timeShift(); {2762#true} is VALID [2022-02-20 18:08:00,926 INFO L290 TraceCheckUtils]: 18: Hoare triple {2762#true} assume !(0 != ~pumpRunning~0); {2762#true} is VALID [2022-02-20 18:08:00,926 INFO L290 TraceCheckUtils]: 19: Hoare triple {2762#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret9#1, processEnvironment_~tmp~2#1;havoc processEnvironment_~tmp~2#1; {2762#true} is VALID [2022-02-20 18:08:00,927 INFO L290 TraceCheckUtils]: 20: Hoare triple {2762#true} assume !(0 != ~pumpRunning~0); {2762#true} is VALID [2022-02-20 18:08:00,927 INFO L272 TraceCheckUtils]: 21: Hoare triple {2762#true} call processEnvironment__wrappee__highWaterSensor(); {2778#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:00,927 INFO L290 TraceCheckUtils]: 22: Hoare triple {2778#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {2762#true} is VALID [2022-02-20 18:08:00,927 INFO L290 TraceCheckUtils]: 23: Hoare triple {2762#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret19#1, isHighWaterLevel_~retValue_acc~2#1, isHighWaterLevel_~tmp~3#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~2#1;havoc isHighWaterLevel_~tmp~3#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~9#1;havoc isHighWaterSensorDry_~retValue_acc~9#1; {2762#true} is VALID [2022-02-20 18:08:00,928 INFO L290 TraceCheckUtils]: 24: Hoare triple {2762#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~9#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~9#1; {2762#true} is VALID [2022-02-20 18:08:00,928 INFO L290 TraceCheckUtils]: 25: Hoare triple {2762#true} isHighWaterLevel_#t~ret19#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret19#1 && isHighWaterLevel_#t~ret19#1 <= 2147483647;isHighWaterLevel_~tmp~3#1 := isHighWaterLevel_#t~ret19#1;havoc isHighWaterLevel_#t~ret19#1; {2762#true} is VALID [2022-02-20 18:08:00,928 INFO L290 TraceCheckUtils]: 26: Hoare triple {2762#true} assume 0 != isHighWaterLevel_~tmp~3#1;isHighWaterLevel_~tmp___0~1#1 := 0; {2779#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0)} is VALID [2022-02-20 18:08:00,928 INFO L290 TraceCheckUtils]: 27: Hoare triple {2779#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0)} isHighWaterLevel_~retValue_acc~2#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~2#1; {2780#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)} is VALID [2022-02-20 18:08:00,929 INFO L290 TraceCheckUtils]: 28: Hoare triple {2780#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)} #t~ret8#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret8#1 && #t~ret8#1 <= 2147483647;~tmp~1#1 := #t~ret8#1;havoc #t~ret8#1; {2781#(= |processEnvironment__wrappee__highWaterSensor_~tmp~1#1| 0)} is VALID [2022-02-20 18:08:00,929 INFO L290 TraceCheckUtils]: 29: Hoare triple {2781#(= |processEnvironment__wrappee__highWaterSensor_~tmp~1#1| 0)} assume 0 != ~tmp~1#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {2763#false} is VALID [2022-02-20 18:08:00,929 INFO L290 TraceCheckUtils]: 30: Hoare triple {2763#false} assume { :end_inline_activatePump } true; {2763#false} is VALID [2022-02-20 18:08:00,929 INFO L290 TraceCheckUtils]: 31: Hoare triple {2763#false} assume true; {2763#false} is VALID [2022-02-20 18:08:00,930 INFO L284 TraceCheckUtils]: 32: Hoare quadruple {2763#false} {2762#true} #255#return; {2763#false} is VALID [2022-02-20 18:08:00,930 INFO L290 TraceCheckUtils]: 33: Hoare triple {2763#false} assume { :end_inline_processEnvironment } true; {2763#false} is VALID [2022-02-20 18:08:00,930 INFO L290 TraceCheckUtils]: 34: Hoare triple {2763#false} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret22#1, __utac_acc__Specification2_spec__2_#t~ret23#1, __utac_acc__Specification2_spec__2_~tmp~6#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~6#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {2763#false} is VALID [2022-02-20 18:08:00,930 INFO L272 TraceCheckUtils]: 35: Hoare triple {2763#false} call __utac_acc__Specification2_spec__2_#t~ret22#1 := isMethaneLevelCritical(); {2762#true} is VALID [2022-02-20 18:08:00,930 INFO L290 TraceCheckUtils]: 36: Hoare triple {2762#true} havoc ~retValue_acc~7;~retValue_acc~7 := ~methaneLevelCritical~0;#res := ~retValue_acc~7; {2762#true} is VALID [2022-02-20 18:08:00,930 INFO L290 TraceCheckUtils]: 37: Hoare triple {2762#true} assume true; {2762#true} is VALID [2022-02-20 18:08:00,931 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {2762#true} {2763#false} #257#return; {2763#false} is VALID [2022-02-20 18:08:00,931 INFO L290 TraceCheckUtils]: 39: Hoare triple {2763#false} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret22#1 && __utac_acc__Specification2_spec__2_#t~ret22#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~6#1 := __utac_acc__Specification2_spec__2_#t~ret22#1;havoc __utac_acc__Specification2_spec__2_#t~ret22#1; {2763#false} is VALID [2022-02-20 18:08:00,931 INFO L290 TraceCheckUtils]: 40: Hoare triple {2763#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~6#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~1#1;havoc isPumpRunning_~retValue_acc~1#1;isPumpRunning_~retValue_acc~1#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~1#1; {2763#false} is VALID [2022-02-20 18:08:00,931 INFO L290 TraceCheckUtils]: 41: Hoare triple {2763#false} __utac_acc__Specification2_spec__2_#t~ret23#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret23#1 && __utac_acc__Specification2_spec__2_#t~ret23#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret23#1;havoc __utac_acc__Specification2_spec__2_#t~ret23#1; {2763#false} is VALID [2022-02-20 18:08:00,931 INFO L290 TraceCheckUtils]: 42: Hoare triple {2763#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {2763#false} is VALID [2022-02-20 18:08:00,931 INFO L290 TraceCheckUtils]: 43: Hoare triple {2763#false} assume 0 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {2763#false} is VALID [2022-02-20 18:08:00,932 INFO L290 TraceCheckUtils]: 44: Hoare triple {2763#false} assume !false; {2763#false} is VALID [2022-02-20 18:08:00,932 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:08:00,932 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:08:00,932 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [807736625] [2022-02-20 18:08:00,932 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [807736625] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:08:00,932 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:08:00,933 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-02-20 18:08:00,933 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1209115846] [2022-02-20 18:08:00,933 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:08:00,933 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 45 [2022-02-20 18:08:00,933 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:08:00,934 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:08:00,955 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 45 edges. 45 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:00,956 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-02-20 18:08:00,956 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:08:00,956 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-02-20 18:08:00,956 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-02-20 18:08:00,957 INFO L87 Difference]: Start difference. First operand 152 states and 192 transitions. Second operand has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:08:01,286 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:01,286 INFO L93 Difference]: Finished difference Result 327 states and 420 transitions. [2022-02-20 18:08:01,286 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-02-20 18:08:01,286 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 45 [2022-02-20 18:08:01,286 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:08:01,286 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:08:01,289 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 225 transitions. [2022-02-20 18:08:01,289 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:08:01,291 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 225 transitions. [2022-02-20 18:08:01,291 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 225 transitions. [2022-02-20 18:08:01,418 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 225 edges. 225 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:01,421 INFO L225 Difference]: With dead ends: 327 [2022-02-20 18:08:01,422 INFO L226 Difference]: Without dead ends: 183 [2022-02-20 18:08:01,422 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-02-20 18:08:01,423 INFO L933 BasicCegarLoop]: 93 mSDtfsCounter, 65 mSDsluCounter, 281 mSDsCounter, 0 mSdLazyCounter, 112 mSolverCounterSat, 21 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 67 SdHoareTripleChecker+Valid, 374 SdHoareTripleChecker+Invalid, 133 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 21 IncrementalHoareTripleChecker+Valid, 112 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-02-20 18:08:01,423 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [67 Valid, 374 Invalid, 133 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [21 Valid, 112 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-02-20 18:08:01,424 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 183 states. [2022-02-20 18:08:01,432 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 183 to 178. [2022-02-20 18:08:01,432 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:08:01,432 INFO L82 GeneralOperation]: Start isEquivalent. First operand 183 states. Second operand has 178 states, 137 states have (on average 1.2773722627737227) internal successors, (175), 147 states have internal predecessors, (175), 20 states have call successors, (20), 17 states have call predecessors, (20), 20 states have return successors, (29), 21 states have call predecessors, (29), 20 states have call successors, (29) [2022-02-20 18:08:01,433 INFO L74 IsIncluded]: Start isIncluded. First operand 183 states. Second operand has 178 states, 137 states have (on average 1.2773722627737227) internal successors, (175), 147 states have internal predecessors, (175), 20 states have call successors, (20), 17 states have call predecessors, (20), 20 states have return successors, (29), 21 states have call predecessors, (29), 20 states have call successors, (29) [2022-02-20 18:08:01,433 INFO L87 Difference]: Start difference. First operand 183 states. Second operand has 178 states, 137 states have (on average 1.2773722627737227) internal successors, (175), 147 states have internal predecessors, (175), 20 states have call successors, (20), 17 states have call predecessors, (20), 20 states have return successors, (29), 21 states have call predecessors, (29), 20 states have call successors, (29) [2022-02-20 18:08:01,437 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:01,437 INFO L93 Difference]: Finished difference Result 183 states and 230 transitions. [2022-02-20 18:08:01,437 INFO L276 IsEmpty]: Start isEmpty. Operand 183 states and 230 transitions. [2022-02-20 18:08:01,438 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:01,438 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:01,438 INFO L74 IsIncluded]: Start isIncluded. First operand has 178 states, 137 states have (on average 1.2773722627737227) internal successors, (175), 147 states have internal predecessors, (175), 20 states have call successors, (20), 17 states have call predecessors, (20), 20 states have return successors, (29), 21 states have call predecessors, (29), 20 states have call successors, (29) Second operand 183 states. [2022-02-20 18:08:01,439 INFO L87 Difference]: Start difference. First operand has 178 states, 137 states have (on average 1.2773722627737227) internal successors, (175), 147 states have internal predecessors, (175), 20 states have call successors, (20), 17 states have call predecessors, (20), 20 states have return successors, (29), 21 states have call predecessors, (29), 20 states have call successors, (29) Second operand 183 states. [2022-02-20 18:08:01,443 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:01,443 INFO L93 Difference]: Finished difference Result 183 states and 230 transitions. [2022-02-20 18:08:01,443 INFO L276 IsEmpty]: Start isEmpty. Operand 183 states and 230 transitions. [2022-02-20 18:08:01,443 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:01,443 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:01,444 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:08:01,444 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:08:01,444 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 178 states, 137 states have (on average 1.2773722627737227) internal successors, (175), 147 states have internal predecessors, (175), 20 states have call successors, (20), 17 states have call predecessors, (20), 20 states have return successors, (29), 21 states have call predecessors, (29), 20 states have call successors, (29) [2022-02-20 18:08:01,448 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 178 states to 178 states and 224 transitions. [2022-02-20 18:08:01,448 INFO L78 Accepts]: Start accepts. Automaton has 178 states and 224 transitions. Word has length 45 [2022-02-20 18:08:01,448 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:08:01,448 INFO L470 AbstractCegarLoop]: Abstraction has 178 states and 224 transitions. [2022-02-20 18:08:01,449 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:08:01,449 INFO L276 IsEmpty]: Start isEmpty. Operand 178 states and 224 transitions. [2022-02-20 18:08:01,449 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2022-02-20 18:08:01,449 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:08:01,449 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:08:01,449 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-02-20 18:08:01,450 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:08:01,450 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:08:01,450 INFO L85 PathProgramCache]: Analyzing trace with hash -1187448669, now seen corresponding path program 1 times [2022-02-20 18:08:01,450 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:08:01,450 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [177144290] [2022-02-20 18:08:01,450 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:08:01,450 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:08:01,470 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:01,485 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-02-20 18:08:01,488 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:01,491 INFO L290 TraceCheckUtils]: 0: Hoare triple {3874#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {3857#true} is VALID [2022-02-20 18:08:01,492 INFO L290 TraceCheckUtils]: 1: Hoare triple {3857#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret19#1, isHighWaterLevel_~retValue_acc~2#1, isHighWaterLevel_~tmp~3#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~2#1;havoc isHighWaterLevel_~tmp~3#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~9#1;havoc isHighWaterSensorDry_~retValue_acc~9#1; {3857#true} is VALID [2022-02-20 18:08:01,492 INFO L290 TraceCheckUtils]: 2: Hoare triple {3857#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~9#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~9#1; {3857#true} is VALID [2022-02-20 18:08:01,492 INFO L290 TraceCheckUtils]: 3: Hoare triple {3857#true} isHighWaterLevel_#t~ret19#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret19#1 && isHighWaterLevel_#t~ret19#1 <= 2147483647;isHighWaterLevel_~tmp~3#1 := isHighWaterLevel_#t~ret19#1;havoc isHighWaterLevel_#t~ret19#1; {3857#true} is VALID [2022-02-20 18:08:01,492 INFO L290 TraceCheckUtils]: 4: Hoare triple {3857#true} assume !(0 != isHighWaterLevel_~tmp~3#1);isHighWaterLevel_~tmp___0~1#1 := 1; {3857#true} is VALID [2022-02-20 18:08:01,492 INFO L290 TraceCheckUtils]: 5: Hoare triple {3857#true} isHighWaterLevel_~retValue_acc~2#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~2#1; {3857#true} is VALID [2022-02-20 18:08:01,492 INFO L290 TraceCheckUtils]: 6: Hoare triple {3857#true} #t~ret8#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret8#1 && #t~ret8#1 <= 2147483647;~tmp~1#1 := #t~ret8#1;havoc #t~ret8#1; {3857#true} is VALID [2022-02-20 18:08:01,492 INFO L290 TraceCheckUtils]: 7: Hoare triple {3857#true} assume 0 != ~tmp~1#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {3857#true} is VALID [2022-02-20 18:08:01,492 INFO L290 TraceCheckUtils]: 8: Hoare triple {3857#true} assume { :end_inline_activatePump } true; {3857#true} is VALID [2022-02-20 18:08:01,492 INFO L290 TraceCheckUtils]: 9: Hoare triple {3857#true} assume true; {3857#true} is VALID [2022-02-20 18:08:01,492 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {3857#true} {3858#false} #255#return; {3858#false} is VALID [2022-02-20 18:08:01,493 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2022-02-20 18:08:01,493 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:01,495 INFO L290 TraceCheckUtils]: 0: Hoare triple {3857#true} havoc ~retValue_acc~7;~retValue_acc~7 := ~methaneLevelCritical~0;#res := ~retValue_acc~7; {3857#true} is VALID [2022-02-20 18:08:01,495 INFO L290 TraceCheckUtils]: 1: Hoare triple {3857#true} assume true; {3857#true} is VALID [2022-02-20 18:08:01,495 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {3857#true} {3858#false} #257#return; {3858#false} is VALID [2022-02-20 18:08:01,496 INFO L290 TraceCheckUtils]: 0: Hoare triple {3857#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(13, 12);call #Ultimate.allocInit(7, 13);call write~init~int(44, 13, 0, 1);call write~init~int(77, 13, 1, 1);call write~init~int(101, 13, 2, 1);call write~init~int(116, 13, 3, 1);call write~init~int(104, 13, 4, 1);call write~init~int(58, 13, 5, 1);call write~init~int(0, 13, 6, 1);call #Ultimate.allocInit(5, 14);call write~init~int(67, 14, 0, 1);call write~init~int(82, 14, 1, 1);call write~init~int(73, 14, 2, 1);call write~init~int(84, 14, 3, 1);call write~init~int(0, 14, 4, 1);call #Ultimate.allocInit(3, 15);call write~init~int(79, 15, 0, 1);call write~init~int(75, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(41, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4;~methAndRunningLastTime~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0; {3857#true} is VALID [2022-02-20 18:08:01,496 INFO L290 TraceCheckUtils]: 1: Hoare triple {3857#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret21#1, main_~retValue_acc~4#1, main_~tmp~5#1;havoc main_~retValue_acc~4#1;havoc main_~tmp~5#1;assume { :begin_inline_select_helpers } true; {3857#true} is VALID [2022-02-20 18:08:01,496 INFO L290 TraceCheckUtils]: 2: Hoare triple {3857#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {3857#true} is VALID [2022-02-20 18:08:01,496 INFO L290 TraceCheckUtils]: 3: Hoare triple {3857#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~6#1;havoc valid_product_~retValue_acc~6#1;valid_product_~retValue_acc~6#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~6#1; {3857#true} is VALID [2022-02-20 18:08:01,496 INFO L290 TraceCheckUtils]: 4: Hoare triple {3857#true} main_#t~ret21#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret21#1 && main_#t~ret21#1 <= 2147483647;main_~tmp~5#1 := main_#t~ret21#1;havoc main_#t~ret21#1; {3857#true} is VALID [2022-02-20 18:08:01,496 INFO L290 TraceCheckUtils]: 5: Hoare triple {3857#true} assume 0 != main_~tmp~5#1;assume { :begin_inline_setup } true; {3857#true} is VALID [2022-02-20 18:08:01,496 INFO L290 TraceCheckUtils]: 6: Hoare triple {3857#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0; {3857#true} is VALID [2022-02-20 18:08:01,496 INFO L290 TraceCheckUtils]: 7: Hoare triple {3857#true} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet4#1, test_#t~nondet5#1, test_#t~nondet6#1, test_#t~nondet7#1, test_~splverifierCounter~0#1, test_~tmp~0#1, test_~tmp___0~0#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~0#1;havoc test_~tmp___0~0#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {3857#true} is VALID [2022-02-20 18:08:01,496 INFO L290 TraceCheckUtils]: 8: Hoare triple {3857#true} assume !false; {3857#true} is VALID [2022-02-20 18:08:01,496 INFO L290 TraceCheckUtils]: 9: Hoare triple {3857#true} assume test_~splverifierCounter~0#1 < 4; {3857#true} is VALID [2022-02-20 18:08:01,496 INFO L290 TraceCheckUtils]: 10: Hoare triple {3857#true} assume -2147483648 <= test_#t~nondet4#1 && test_#t~nondet4#1 <= 2147483647;test_~tmp~0#1 := test_#t~nondet4#1;havoc test_#t~nondet4#1; {3857#true} is VALID [2022-02-20 18:08:01,496 INFO L290 TraceCheckUtils]: 11: Hoare triple {3857#true} assume !(0 != test_~tmp~0#1); {3857#true} is VALID [2022-02-20 18:08:01,497 INFO L290 TraceCheckUtils]: 12: Hoare triple {3857#true} assume -2147483648 <= test_#t~nondet5#1 && test_#t~nondet5#1 <= 2147483647;test_~tmp___0~0#1 := test_#t~nondet5#1;havoc test_#t~nondet5#1; {3857#true} is VALID [2022-02-20 18:08:01,497 INFO L290 TraceCheckUtils]: 13: Hoare triple {3857#true} assume !(0 != test_~tmp___0~0#1); {3857#true} is VALID [2022-02-20 18:08:01,497 INFO L290 TraceCheckUtils]: 14: Hoare triple {3857#true} assume -2147483648 <= test_#t~nondet6#1 && test_#t~nondet6#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet6#1;havoc test_#t~nondet6#1; {3857#true} is VALID [2022-02-20 18:08:01,497 INFO L290 TraceCheckUtils]: 15: Hoare triple {3857#true} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet7#1 && test_#t~nondet7#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet7#1;havoc test_#t~nondet7#1; {3857#true} is VALID [2022-02-20 18:08:01,497 INFO L290 TraceCheckUtils]: 16: Hoare triple {3857#true} assume 0 != test_~tmp___1~0#1;assume { :begin_inline_stopSystem } true; {3857#true} is VALID [2022-02-20 18:08:01,497 INFO L290 TraceCheckUtils]: 17: Hoare triple {3857#true} assume !(0 != ~pumpRunning~0); {3857#true} is VALID [2022-02-20 18:08:01,497 INFO L290 TraceCheckUtils]: 18: Hoare triple {3857#true} ~systemActive~0 := 0; {3859#(= 0 ~systemActive~0)} is VALID [2022-02-20 18:08:01,498 INFO L290 TraceCheckUtils]: 19: Hoare triple {3859#(= 0 ~systemActive~0)} assume { :end_inline_stopSystem } true; {3859#(= 0 ~systemActive~0)} is VALID [2022-02-20 18:08:01,498 INFO L272 TraceCheckUtils]: 20: Hoare triple {3859#(= 0 ~systemActive~0)} call timeShift(); {3859#(= 0 ~systemActive~0)} is VALID [2022-02-20 18:08:01,498 INFO L290 TraceCheckUtils]: 21: Hoare triple {3859#(= 0 ~systemActive~0)} assume !(0 != ~pumpRunning~0); {3859#(= 0 ~systemActive~0)} is VALID [2022-02-20 18:08:01,498 INFO L290 TraceCheckUtils]: 22: Hoare triple {3859#(= 0 ~systemActive~0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret9#1, processEnvironment_~tmp~2#1;havoc processEnvironment_~tmp~2#1; {3858#false} is VALID [2022-02-20 18:08:01,499 INFO L290 TraceCheckUtils]: 23: Hoare triple {3858#false} assume !(0 != ~pumpRunning~0); {3858#false} is VALID [2022-02-20 18:08:01,499 INFO L272 TraceCheckUtils]: 24: Hoare triple {3858#false} call processEnvironment__wrappee__highWaterSensor(); {3874#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:01,499 INFO L290 TraceCheckUtils]: 25: Hoare triple {3874#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {3857#true} is VALID [2022-02-20 18:08:01,499 INFO L290 TraceCheckUtils]: 26: Hoare triple {3857#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret19#1, isHighWaterLevel_~retValue_acc~2#1, isHighWaterLevel_~tmp~3#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~2#1;havoc isHighWaterLevel_~tmp~3#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~9#1;havoc isHighWaterSensorDry_~retValue_acc~9#1; {3857#true} is VALID [2022-02-20 18:08:01,499 INFO L290 TraceCheckUtils]: 27: Hoare triple {3857#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~9#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~9#1; {3857#true} is VALID [2022-02-20 18:08:01,499 INFO L290 TraceCheckUtils]: 28: Hoare triple {3857#true} isHighWaterLevel_#t~ret19#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret19#1 && isHighWaterLevel_#t~ret19#1 <= 2147483647;isHighWaterLevel_~tmp~3#1 := isHighWaterLevel_#t~ret19#1;havoc isHighWaterLevel_#t~ret19#1; {3857#true} is VALID [2022-02-20 18:08:01,499 INFO L290 TraceCheckUtils]: 29: Hoare triple {3857#true} assume !(0 != isHighWaterLevel_~tmp~3#1);isHighWaterLevel_~tmp___0~1#1 := 1; {3857#true} is VALID [2022-02-20 18:08:01,499 INFO L290 TraceCheckUtils]: 30: Hoare triple {3857#true} isHighWaterLevel_~retValue_acc~2#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~2#1; {3857#true} is VALID [2022-02-20 18:08:01,499 INFO L290 TraceCheckUtils]: 31: Hoare triple {3857#true} #t~ret8#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret8#1 && #t~ret8#1 <= 2147483647;~tmp~1#1 := #t~ret8#1;havoc #t~ret8#1; {3857#true} is VALID [2022-02-20 18:08:01,499 INFO L290 TraceCheckUtils]: 32: Hoare triple {3857#true} assume 0 != ~tmp~1#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {3857#true} is VALID [2022-02-20 18:08:01,499 INFO L290 TraceCheckUtils]: 33: Hoare triple {3857#true} assume { :end_inline_activatePump } true; {3857#true} is VALID [2022-02-20 18:08:01,499 INFO L290 TraceCheckUtils]: 34: Hoare triple {3857#true} assume true; {3857#true} is VALID [2022-02-20 18:08:01,500 INFO L284 TraceCheckUtils]: 35: Hoare quadruple {3857#true} {3858#false} #255#return; {3858#false} is VALID [2022-02-20 18:08:01,500 INFO L290 TraceCheckUtils]: 36: Hoare triple {3858#false} assume { :end_inline_processEnvironment } true; {3858#false} is VALID [2022-02-20 18:08:01,500 INFO L290 TraceCheckUtils]: 37: Hoare triple {3858#false} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret22#1, __utac_acc__Specification2_spec__2_#t~ret23#1, __utac_acc__Specification2_spec__2_~tmp~6#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~6#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {3858#false} is VALID [2022-02-20 18:08:01,500 INFO L272 TraceCheckUtils]: 38: Hoare triple {3858#false} call __utac_acc__Specification2_spec__2_#t~ret22#1 := isMethaneLevelCritical(); {3857#true} is VALID [2022-02-20 18:08:01,500 INFO L290 TraceCheckUtils]: 39: Hoare triple {3857#true} havoc ~retValue_acc~7;~retValue_acc~7 := ~methaneLevelCritical~0;#res := ~retValue_acc~7; {3857#true} is VALID [2022-02-20 18:08:01,500 INFO L290 TraceCheckUtils]: 40: Hoare triple {3857#true} assume true; {3857#true} is VALID [2022-02-20 18:08:01,500 INFO L284 TraceCheckUtils]: 41: Hoare quadruple {3857#true} {3858#false} #257#return; {3858#false} is VALID [2022-02-20 18:08:01,500 INFO L290 TraceCheckUtils]: 42: Hoare triple {3858#false} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret22#1 && __utac_acc__Specification2_spec__2_#t~ret22#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~6#1 := __utac_acc__Specification2_spec__2_#t~ret22#1;havoc __utac_acc__Specification2_spec__2_#t~ret22#1; {3858#false} is VALID [2022-02-20 18:08:01,500 INFO L290 TraceCheckUtils]: 43: Hoare triple {3858#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~6#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~1#1;havoc isPumpRunning_~retValue_acc~1#1;isPumpRunning_~retValue_acc~1#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~1#1; {3858#false} is VALID [2022-02-20 18:08:01,500 INFO L290 TraceCheckUtils]: 44: Hoare triple {3858#false} __utac_acc__Specification2_spec__2_#t~ret23#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret23#1 && __utac_acc__Specification2_spec__2_#t~ret23#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret23#1;havoc __utac_acc__Specification2_spec__2_#t~ret23#1; {3858#false} is VALID [2022-02-20 18:08:01,500 INFO L290 TraceCheckUtils]: 45: Hoare triple {3858#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {3858#false} is VALID [2022-02-20 18:08:01,501 INFO L290 TraceCheckUtils]: 46: Hoare triple {3858#false} assume 0 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {3858#false} is VALID [2022-02-20 18:08:01,501 INFO L290 TraceCheckUtils]: 47: Hoare triple {3858#false} assume !false; {3858#false} is VALID [2022-02-20 18:08:01,501 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:08:01,501 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:08:01,501 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [177144290] [2022-02-20 18:08:01,501 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [177144290] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:08:01,501 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:08:01,501 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-02-20 18:08:01,501 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [676772188] [2022-02-20 18:08:01,501 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:08:01,502 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 10.75) internal successors, (43), 3 states have internal predecessors, (43), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 48 [2022-02-20 18:08:01,502 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:08:01,502 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 4 states, 4 states have (on average 10.75) internal successors, (43), 3 states have internal predecessors, (43), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:08:01,526 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 48 edges. 48 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:01,526 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-02-20 18:08:01,526 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:08:01,527 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-02-20 18:08:01,527 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-02-20 18:08:01,527 INFO L87 Difference]: Start difference. First operand 178 states and 224 transitions. Second operand has 4 states, 4 states have (on average 10.75) internal successors, (43), 3 states have internal predecessors, (43), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:08:01,747 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:01,748 INFO L93 Difference]: Finished difference Result 352 states and 443 transitions. [2022-02-20 18:08:01,748 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-02-20 18:08:01,748 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 10.75) internal successors, (43), 3 states have internal predecessors, (43), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 48 [2022-02-20 18:08:01,748 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:08:01,748 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4 states, 4 states have (on average 10.75) internal successors, (43), 3 states have internal predecessors, (43), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:08:01,750 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 253 transitions. [2022-02-20 18:08:01,751 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4 states, 4 states have (on average 10.75) internal successors, (43), 3 states have internal predecessors, (43), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:08:01,753 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 253 transitions. [2022-02-20 18:08:01,753 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 253 transitions. [2022-02-20 18:08:01,915 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 253 edges. 253 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:01,918 INFO L225 Difference]: With dead ends: 352 [2022-02-20 18:08:01,918 INFO L226 Difference]: Without dead ends: 182 [2022-02-20 18:08:01,918 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-02-20 18:08:01,919 INFO L933 BasicCegarLoop]: 123 mSDtfsCounter, 92 mSDsluCounter, 142 mSDsCounter, 0 mSdLazyCounter, 60 mSolverCounterSat, 16 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 98 SdHoareTripleChecker+Valid, 265 SdHoareTripleChecker+Invalid, 76 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 16 IncrementalHoareTripleChecker+Valid, 60 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:08:01,919 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [98 Valid, 265 Invalid, 76 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [16 Valid, 60 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:08:01,920 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 182 states. [2022-02-20 18:08:01,927 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 182 to 178. [2022-02-20 18:08:01,927 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:08:01,927 INFO L82 GeneralOperation]: Start isEquivalent. First operand 182 states. Second operand has 178 states, 137 states have (on average 1.27007299270073) internal successors, (174), 147 states have internal predecessors, (174), 20 states have call successors, (20), 17 states have call predecessors, (20), 20 states have return successors, (27), 21 states have call predecessors, (27), 20 states have call successors, (27) [2022-02-20 18:08:01,927 INFO L74 IsIncluded]: Start isIncluded. First operand 182 states. Second operand has 178 states, 137 states have (on average 1.27007299270073) internal successors, (174), 147 states have internal predecessors, (174), 20 states have call successors, (20), 17 states have call predecessors, (20), 20 states have return successors, (27), 21 states have call predecessors, (27), 20 states have call successors, (27) [2022-02-20 18:08:01,928 INFO L87 Difference]: Start difference. First operand 182 states. Second operand has 178 states, 137 states have (on average 1.27007299270073) internal successors, (174), 147 states have internal predecessors, (174), 20 states have call successors, (20), 17 states have call predecessors, (20), 20 states have return successors, (27), 21 states have call predecessors, (27), 20 states have call successors, (27) [2022-02-20 18:08:01,932 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:01,932 INFO L93 Difference]: Finished difference Result 182 states and 224 transitions. [2022-02-20 18:08:01,932 INFO L276 IsEmpty]: Start isEmpty. Operand 182 states and 224 transitions. [2022-02-20 18:08:01,933 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:01,933 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:01,933 INFO L74 IsIncluded]: Start isIncluded. First operand has 178 states, 137 states have (on average 1.27007299270073) internal successors, (174), 147 states have internal predecessors, (174), 20 states have call successors, (20), 17 states have call predecessors, (20), 20 states have return successors, (27), 21 states have call predecessors, (27), 20 states have call successors, (27) Second operand 182 states. [2022-02-20 18:08:01,934 INFO L87 Difference]: Start difference. First operand has 178 states, 137 states have (on average 1.27007299270073) internal successors, (174), 147 states have internal predecessors, (174), 20 states have call successors, (20), 17 states have call predecessors, (20), 20 states have return successors, (27), 21 states have call predecessors, (27), 20 states have call successors, (27) Second operand 182 states. [2022-02-20 18:08:01,938 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:01,938 INFO L93 Difference]: Finished difference Result 182 states and 224 transitions. [2022-02-20 18:08:01,938 INFO L276 IsEmpty]: Start isEmpty. Operand 182 states and 224 transitions. [2022-02-20 18:08:01,938 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:01,938 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:01,938 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:08:01,938 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:08:01,939 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 178 states, 137 states have (on average 1.27007299270073) internal successors, (174), 147 states have internal predecessors, (174), 20 states have call successors, (20), 17 states have call predecessors, (20), 20 states have return successors, (27), 21 states have call predecessors, (27), 20 states have call successors, (27) [2022-02-20 18:08:01,943 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 178 states to 178 states and 221 transitions. [2022-02-20 18:08:01,943 INFO L78 Accepts]: Start accepts. Automaton has 178 states and 221 transitions. Word has length 48 [2022-02-20 18:08:01,943 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:08:01,943 INFO L470 AbstractCegarLoop]: Abstraction has 178 states and 221 transitions. [2022-02-20 18:08:01,943 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 10.75) internal successors, (43), 3 states have internal predecessors, (43), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:08:01,943 INFO L276 IsEmpty]: Start isEmpty. Operand 178 states and 221 transitions. [2022-02-20 18:08:01,944 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-02-20 18:08:01,944 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:08:01,944 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:08:01,944 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-02-20 18:08:01,944 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:08:01,944 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:08:01,945 INFO L85 PathProgramCache]: Analyzing trace with hash -2005526745, now seen corresponding path program 1 times [2022-02-20 18:08:01,945 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:08:01,945 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [972578591] [2022-02-20 18:08:01,945 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:08:01,945 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:08:01,957 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:01,969 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-02-20 18:08:01,973 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:01,985 INFO L290 TraceCheckUtils]: 0: Hoare triple {4992#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {4976#true} is VALID [2022-02-20 18:08:01,985 INFO L290 TraceCheckUtils]: 1: Hoare triple {4976#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret19#1, isHighWaterLevel_~retValue_acc~2#1, isHighWaterLevel_~tmp~3#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~2#1;havoc isHighWaterLevel_~tmp~3#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~9#1;havoc isHighWaterSensorDry_~retValue_acc~9#1; {4976#true} is VALID [2022-02-20 18:08:01,986 INFO L290 TraceCheckUtils]: 2: Hoare triple {4976#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~9#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~9#1; {4993#(<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|)} is VALID [2022-02-20 18:08:01,986 INFO L290 TraceCheckUtils]: 3: Hoare triple {4993#(<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|)} isHighWaterLevel_#t~ret19#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret19#1 && isHighWaterLevel_#t~ret19#1 <= 2147483647;isHighWaterLevel_~tmp~3#1 := isHighWaterLevel_#t~ret19#1;havoc isHighWaterLevel_#t~ret19#1; {4994#(<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~3#1|)} is VALID [2022-02-20 18:08:01,986 INFO L290 TraceCheckUtils]: 4: Hoare triple {4994#(<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~3#1|)} assume !(0 != isHighWaterLevel_~tmp~3#1);isHighWaterLevel_~tmp___0~1#1 := 1; {4977#false} is VALID [2022-02-20 18:08:01,986 INFO L290 TraceCheckUtils]: 5: Hoare triple {4977#false} isHighWaterLevel_~retValue_acc~2#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~2#1; {4977#false} is VALID [2022-02-20 18:08:01,987 INFO L290 TraceCheckUtils]: 6: Hoare triple {4977#false} #t~ret8#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret8#1 && #t~ret8#1 <= 2147483647;~tmp~1#1 := #t~ret8#1;havoc #t~ret8#1; {4977#false} is VALID [2022-02-20 18:08:01,987 INFO L290 TraceCheckUtils]: 7: Hoare triple {4977#false} assume 0 != ~tmp~1#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {4977#false} is VALID [2022-02-20 18:08:01,987 INFO L290 TraceCheckUtils]: 8: Hoare triple {4977#false} assume { :end_inline_activatePump } true; {4977#false} is VALID [2022-02-20 18:08:01,987 INFO L290 TraceCheckUtils]: 9: Hoare triple {4977#false} assume true; {4977#false} is VALID [2022-02-20 18:08:01,987 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {4977#false} {4976#true} #255#return; {4977#false} is VALID [2022-02-20 18:08:01,987 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2022-02-20 18:08:01,988 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:01,990 INFO L290 TraceCheckUtils]: 0: Hoare triple {4976#true} havoc ~retValue_acc~7;~retValue_acc~7 := ~methaneLevelCritical~0;#res := ~retValue_acc~7; {4976#true} is VALID [2022-02-20 18:08:01,990 INFO L290 TraceCheckUtils]: 1: Hoare triple {4976#true} assume true; {4976#true} is VALID [2022-02-20 18:08:01,990 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {4976#true} {4977#false} #257#return; {4977#false} is VALID [2022-02-20 18:08:01,990 INFO L290 TraceCheckUtils]: 0: Hoare triple {4976#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(13, 12);call #Ultimate.allocInit(7, 13);call write~init~int(44, 13, 0, 1);call write~init~int(77, 13, 1, 1);call write~init~int(101, 13, 2, 1);call write~init~int(116, 13, 3, 1);call write~init~int(104, 13, 4, 1);call write~init~int(58, 13, 5, 1);call write~init~int(0, 13, 6, 1);call #Ultimate.allocInit(5, 14);call write~init~int(67, 14, 0, 1);call write~init~int(82, 14, 1, 1);call write~init~int(73, 14, 2, 1);call write~init~int(84, 14, 3, 1);call write~init~int(0, 14, 4, 1);call #Ultimate.allocInit(3, 15);call write~init~int(79, 15, 0, 1);call write~init~int(75, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(41, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4;~methAndRunningLastTime~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0; {4976#true} is VALID [2022-02-20 18:08:01,990 INFO L290 TraceCheckUtils]: 1: Hoare triple {4976#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret21#1, main_~retValue_acc~4#1, main_~tmp~5#1;havoc main_~retValue_acc~4#1;havoc main_~tmp~5#1;assume { :begin_inline_select_helpers } true; {4976#true} is VALID [2022-02-20 18:08:01,990 INFO L290 TraceCheckUtils]: 2: Hoare triple {4976#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {4976#true} is VALID [2022-02-20 18:08:01,990 INFO L290 TraceCheckUtils]: 3: Hoare triple {4976#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~6#1;havoc valid_product_~retValue_acc~6#1;valid_product_~retValue_acc~6#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~6#1; {4976#true} is VALID [2022-02-20 18:08:01,990 INFO L290 TraceCheckUtils]: 4: Hoare triple {4976#true} main_#t~ret21#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret21#1 && main_#t~ret21#1 <= 2147483647;main_~tmp~5#1 := main_#t~ret21#1;havoc main_#t~ret21#1; {4976#true} is VALID [2022-02-20 18:08:01,990 INFO L290 TraceCheckUtils]: 5: Hoare triple {4976#true} assume 0 != main_~tmp~5#1;assume { :begin_inline_setup } true; {4976#true} is VALID [2022-02-20 18:08:01,990 INFO L290 TraceCheckUtils]: 6: Hoare triple {4976#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0; {4976#true} is VALID [2022-02-20 18:08:01,990 INFO L290 TraceCheckUtils]: 7: Hoare triple {4976#true} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet4#1, test_#t~nondet5#1, test_#t~nondet6#1, test_#t~nondet7#1, test_~splverifierCounter~0#1, test_~tmp~0#1, test_~tmp___0~0#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~0#1;havoc test_~tmp___0~0#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {4976#true} is VALID [2022-02-20 18:08:01,991 INFO L290 TraceCheckUtils]: 8: Hoare triple {4976#true} assume !false; {4976#true} is VALID [2022-02-20 18:08:01,991 INFO L290 TraceCheckUtils]: 9: Hoare triple {4976#true} assume test_~splverifierCounter~0#1 < 4; {4976#true} is VALID [2022-02-20 18:08:01,991 INFO L290 TraceCheckUtils]: 10: Hoare triple {4976#true} assume -2147483648 <= test_#t~nondet4#1 && test_#t~nondet4#1 <= 2147483647;test_~tmp~0#1 := test_#t~nondet4#1;havoc test_#t~nondet4#1; {4976#true} is VALID [2022-02-20 18:08:01,991 INFO L290 TraceCheckUtils]: 11: Hoare triple {4976#true} assume !(0 != test_~tmp~0#1); {4976#true} is VALID [2022-02-20 18:08:01,991 INFO L290 TraceCheckUtils]: 12: Hoare triple {4976#true} assume -2147483648 <= test_#t~nondet5#1 && test_#t~nondet5#1 <= 2147483647;test_~tmp___0~0#1 := test_#t~nondet5#1;havoc test_#t~nondet5#1; {4976#true} is VALID [2022-02-20 18:08:01,991 INFO L290 TraceCheckUtils]: 13: Hoare triple {4976#true} assume !(0 != test_~tmp___0~0#1); {4976#true} is VALID [2022-02-20 18:08:01,991 INFO L290 TraceCheckUtils]: 14: Hoare triple {4976#true} assume -2147483648 <= test_#t~nondet6#1 && test_#t~nondet6#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet6#1;havoc test_#t~nondet6#1; {4976#true} is VALID [2022-02-20 18:08:01,991 INFO L290 TraceCheckUtils]: 15: Hoare triple {4976#true} assume 0 != test_~tmp___2~0#1;assume { :begin_inline_startSystem } true;~systemActive~0 := 1; {4976#true} is VALID [2022-02-20 18:08:01,991 INFO L290 TraceCheckUtils]: 16: Hoare triple {4976#true} assume { :end_inline_startSystem } true; {4976#true} is VALID [2022-02-20 18:08:01,991 INFO L272 TraceCheckUtils]: 17: Hoare triple {4976#true} call timeShift(); {4976#true} is VALID [2022-02-20 18:08:01,991 INFO L290 TraceCheckUtils]: 18: Hoare triple {4976#true} assume !(0 != ~pumpRunning~0); {4976#true} is VALID [2022-02-20 18:08:01,991 INFO L290 TraceCheckUtils]: 19: Hoare triple {4976#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret9#1, processEnvironment_~tmp~2#1;havoc processEnvironment_~tmp~2#1; {4976#true} is VALID [2022-02-20 18:08:01,991 INFO L290 TraceCheckUtils]: 20: Hoare triple {4976#true} assume !(0 != ~pumpRunning~0); {4976#true} is VALID [2022-02-20 18:08:01,992 INFO L272 TraceCheckUtils]: 21: Hoare triple {4976#true} call processEnvironment__wrappee__highWaterSensor(); {4992#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:01,992 INFO L290 TraceCheckUtils]: 22: Hoare triple {4992#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {4976#true} is VALID [2022-02-20 18:08:01,992 INFO L290 TraceCheckUtils]: 23: Hoare triple {4976#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret19#1, isHighWaterLevel_~retValue_acc~2#1, isHighWaterLevel_~tmp~3#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~2#1;havoc isHighWaterLevel_~tmp~3#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~9#1;havoc isHighWaterSensorDry_~retValue_acc~9#1; {4976#true} is VALID [2022-02-20 18:08:01,992 INFO L290 TraceCheckUtils]: 24: Hoare triple {4976#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~9#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~9#1; {4993#(<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|)} is VALID [2022-02-20 18:08:01,993 INFO L290 TraceCheckUtils]: 25: Hoare triple {4993#(<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|)} isHighWaterLevel_#t~ret19#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret19#1 && isHighWaterLevel_#t~ret19#1 <= 2147483647;isHighWaterLevel_~tmp~3#1 := isHighWaterLevel_#t~ret19#1;havoc isHighWaterLevel_#t~ret19#1; {4994#(<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~3#1|)} is VALID [2022-02-20 18:08:01,993 INFO L290 TraceCheckUtils]: 26: Hoare triple {4994#(<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~3#1|)} assume !(0 != isHighWaterLevel_~tmp~3#1);isHighWaterLevel_~tmp___0~1#1 := 1; {4977#false} is VALID [2022-02-20 18:08:01,993 INFO L290 TraceCheckUtils]: 27: Hoare triple {4977#false} isHighWaterLevel_~retValue_acc~2#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~2#1; {4977#false} is VALID [2022-02-20 18:08:01,993 INFO L290 TraceCheckUtils]: 28: Hoare triple {4977#false} #t~ret8#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret8#1 && #t~ret8#1 <= 2147483647;~tmp~1#1 := #t~ret8#1;havoc #t~ret8#1; {4977#false} is VALID [2022-02-20 18:08:01,993 INFO L290 TraceCheckUtils]: 29: Hoare triple {4977#false} assume 0 != ~tmp~1#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {4977#false} is VALID [2022-02-20 18:08:01,993 INFO L290 TraceCheckUtils]: 30: Hoare triple {4977#false} assume { :end_inline_activatePump } true; {4977#false} is VALID [2022-02-20 18:08:01,993 INFO L290 TraceCheckUtils]: 31: Hoare triple {4977#false} assume true; {4977#false} is VALID [2022-02-20 18:08:01,993 INFO L284 TraceCheckUtils]: 32: Hoare quadruple {4977#false} {4976#true} #255#return; {4977#false} is VALID [2022-02-20 18:08:01,994 INFO L290 TraceCheckUtils]: 33: Hoare triple {4977#false} assume { :end_inline_processEnvironment } true; {4977#false} is VALID [2022-02-20 18:08:01,994 INFO L290 TraceCheckUtils]: 34: Hoare triple {4977#false} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret22#1, __utac_acc__Specification2_spec__2_#t~ret23#1, __utac_acc__Specification2_spec__2_~tmp~6#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~6#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {4977#false} is VALID [2022-02-20 18:08:01,994 INFO L272 TraceCheckUtils]: 35: Hoare triple {4977#false} call __utac_acc__Specification2_spec__2_#t~ret22#1 := isMethaneLevelCritical(); {4976#true} is VALID [2022-02-20 18:08:01,994 INFO L290 TraceCheckUtils]: 36: Hoare triple {4976#true} havoc ~retValue_acc~7;~retValue_acc~7 := ~methaneLevelCritical~0;#res := ~retValue_acc~7; {4976#true} is VALID [2022-02-20 18:08:01,994 INFO L290 TraceCheckUtils]: 37: Hoare triple {4976#true} assume true; {4976#true} is VALID [2022-02-20 18:08:01,994 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {4976#true} {4977#false} #257#return; {4977#false} is VALID [2022-02-20 18:08:01,994 INFO L290 TraceCheckUtils]: 39: Hoare triple {4977#false} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret22#1 && __utac_acc__Specification2_spec__2_#t~ret22#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~6#1 := __utac_acc__Specification2_spec__2_#t~ret22#1;havoc __utac_acc__Specification2_spec__2_#t~ret22#1; {4977#false} is VALID [2022-02-20 18:08:01,994 INFO L290 TraceCheckUtils]: 40: Hoare triple {4977#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~6#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~1#1;havoc isPumpRunning_~retValue_acc~1#1;isPumpRunning_~retValue_acc~1#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~1#1; {4977#false} is VALID [2022-02-20 18:08:01,994 INFO L290 TraceCheckUtils]: 41: Hoare triple {4977#false} __utac_acc__Specification2_spec__2_#t~ret23#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret23#1 && __utac_acc__Specification2_spec__2_#t~ret23#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret23#1;havoc __utac_acc__Specification2_spec__2_#t~ret23#1; {4977#false} is VALID [2022-02-20 18:08:01,994 INFO L290 TraceCheckUtils]: 42: Hoare triple {4977#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {4977#false} is VALID [2022-02-20 18:08:01,994 INFO L290 TraceCheckUtils]: 43: Hoare triple {4977#false} assume 0 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {4977#false} is VALID [2022-02-20 18:08:01,994 INFO L290 TraceCheckUtils]: 44: Hoare triple {4977#false} assume !false; {4977#false} is VALID [2022-02-20 18:08:01,995 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:08:01,995 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:08:01,995 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [972578591] [2022-02-20 18:08:01,995 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [972578591] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:08:01,995 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:08:01,995 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-02-20 18:08:01,995 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2045556701] [2022-02-20 18:08:01,995 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:08:01,996 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 45 [2022-02-20 18:08:01,996 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:08:01,996 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 5 states, 5 states have (on average 8.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:08:02,017 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 45 edges. 45 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:02,017 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-02-20 18:08:02,017 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:08:02,017 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-02-20 18:08:02,017 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-02-20 18:08:02,018 INFO L87 Difference]: Start difference. First operand 178 states and 221 transitions. Second operand has 5 states, 5 states have (on average 8.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:08:02,275 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:02,275 INFO L93 Difference]: Finished difference Result 358 states and 454 transitions. [2022-02-20 18:08:02,275 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-02-20 18:08:02,275 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 45 [2022-02-20 18:08:02,275 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:08:02,276 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 8.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:08:02,278 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 225 transitions. [2022-02-20 18:08:02,278 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 8.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:08:02,281 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 225 transitions. [2022-02-20 18:08:02,281 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 225 transitions. [2022-02-20 18:08:02,416 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 225 edges. 225 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:02,419 INFO L225 Difference]: With dead ends: 358 [2022-02-20 18:08:02,419 INFO L226 Difference]: Without dead ends: 188 [2022-02-20 18:08:02,420 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-02-20 18:08:02,420 INFO L933 BasicCegarLoop]: 95 mSDtfsCounter, 66 mSDsluCounter, 201 mSDsCounter, 0 mSdLazyCounter, 87 mSolverCounterSat, 16 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 69 SdHoareTripleChecker+Valid, 296 SdHoareTripleChecker+Invalid, 103 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 16 IncrementalHoareTripleChecker+Valid, 87 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-02-20 18:08:02,420 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [69 Valid, 296 Invalid, 103 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [16 Valid, 87 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-02-20 18:08:02,421 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 188 states. [2022-02-20 18:08:02,430 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 188 to 180. [2022-02-20 18:08:02,430 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:08:02,430 INFO L82 GeneralOperation]: Start isEquivalent. First operand 188 states. Second operand has 180 states, 139 states have (on average 1.2661870503597121) internal successors, (176), 149 states have internal predecessors, (176), 20 states have call successors, (20), 17 states have call predecessors, (20), 20 states have return successors, (27), 21 states have call predecessors, (27), 20 states have call successors, (27) [2022-02-20 18:08:02,431 INFO L74 IsIncluded]: Start isIncluded. First operand 188 states. Second operand has 180 states, 139 states have (on average 1.2661870503597121) internal successors, (176), 149 states have internal predecessors, (176), 20 states have call successors, (20), 17 states have call predecessors, (20), 20 states have return successors, (27), 21 states have call predecessors, (27), 20 states have call successors, (27) [2022-02-20 18:08:02,431 INFO L87 Difference]: Start difference. First operand 188 states. Second operand has 180 states, 139 states have (on average 1.2661870503597121) internal successors, (176), 149 states have internal predecessors, (176), 20 states have call successors, (20), 17 states have call predecessors, (20), 20 states have return successors, (27), 21 states have call predecessors, (27), 20 states have call successors, (27) [2022-02-20 18:08:02,435 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:02,435 INFO L93 Difference]: Finished difference Result 188 states and 232 transitions. [2022-02-20 18:08:02,435 INFO L276 IsEmpty]: Start isEmpty. Operand 188 states and 232 transitions. [2022-02-20 18:08:02,435 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:02,435 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:02,436 INFO L74 IsIncluded]: Start isIncluded. First operand has 180 states, 139 states have (on average 1.2661870503597121) internal successors, (176), 149 states have internal predecessors, (176), 20 states have call successors, (20), 17 states have call predecessors, (20), 20 states have return successors, (27), 21 states have call predecessors, (27), 20 states have call successors, (27) Second operand 188 states. [2022-02-20 18:08:02,436 INFO L87 Difference]: Start difference. First operand has 180 states, 139 states have (on average 1.2661870503597121) internal successors, (176), 149 states have internal predecessors, (176), 20 states have call successors, (20), 17 states have call predecessors, (20), 20 states have return successors, (27), 21 states have call predecessors, (27), 20 states have call successors, (27) Second operand 188 states. [2022-02-20 18:08:02,440 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:02,440 INFO L93 Difference]: Finished difference Result 188 states and 232 transitions. [2022-02-20 18:08:02,440 INFO L276 IsEmpty]: Start isEmpty. Operand 188 states and 232 transitions. [2022-02-20 18:08:02,440 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:02,440 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:02,440 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:08:02,440 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:08:02,441 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 180 states, 139 states have (on average 1.2661870503597121) internal successors, (176), 149 states have internal predecessors, (176), 20 states have call successors, (20), 17 states have call predecessors, (20), 20 states have return successors, (27), 21 states have call predecessors, (27), 20 states have call successors, (27) [2022-02-20 18:08:02,444 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 180 states to 180 states and 223 transitions. [2022-02-20 18:08:02,444 INFO L78 Accepts]: Start accepts. Automaton has 180 states and 223 transitions. Word has length 45 [2022-02-20 18:08:02,444 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:08:02,444 INFO L470 AbstractCegarLoop]: Abstraction has 180 states and 223 transitions. [2022-02-20 18:08:02,444 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:08:02,444 INFO L276 IsEmpty]: Start isEmpty. Operand 180 states and 223 transitions. [2022-02-20 18:08:02,445 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-02-20 18:08:02,445 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:08:02,445 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:08:02,445 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-02-20 18:08:02,445 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:08:02,445 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:08:02,445 INFO L85 PathProgramCache]: Analyzing trace with hash -1582824919, now seen corresponding path program 1 times [2022-02-20 18:08:02,445 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:08:02,445 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1906402329] [2022-02-20 18:08:02,446 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:08:02,446 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:08:02,460 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:02,477 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-02-20 18:08:02,481 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:02,489 INFO L290 TraceCheckUtils]: 0: Hoare triple {6138#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {6121#true} is VALID [2022-02-20 18:08:02,489 INFO L290 TraceCheckUtils]: 1: Hoare triple {6121#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret19#1, isHighWaterLevel_~retValue_acc~2#1, isHighWaterLevel_~tmp~3#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~2#1;havoc isHighWaterLevel_~tmp~3#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~9#1;havoc isHighWaterSensorDry_~retValue_acc~9#1; {6121#true} is VALID [2022-02-20 18:08:02,489 INFO L290 TraceCheckUtils]: 2: Hoare triple {6121#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~9#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~9#1; {6139#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:02,490 INFO L290 TraceCheckUtils]: 3: Hoare triple {6139#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret19#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret19#1 && isHighWaterLevel_#t~ret19#1 <= 2147483647;isHighWaterLevel_~tmp~3#1 := isHighWaterLevel_#t~ret19#1;havoc isHighWaterLevel_#t~ret19#1; {6139#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:02,490 INFO L290 TraceCheckUtils]: 4: Hoare triple {6139#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~3#1);isHighWaterLevel_~tmp___0~1#1 := 1; {6139#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:02,490 INFO L290 TraceCheckUtils]: 5: Hoare triple {6139#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~2#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~2#1; {6139#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:02,491 INFO L290 TraceCheckUtils]: 6: Hoare triple {6139#(<= 2 ~waterLevel~0)} #t~ret8#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret8#1 && #t~ret8#1 <= 2147483647;~tmp~1#1 := #t~ret8#1;havoc #t~ret8#1; {6139#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:02,491 INFO L290 TraceCheckUtils]: 7: Hoare triple {6139#(<= 2 ~waterLevel~0)} assume 0 != ~tmp~1#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {6139#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:02,491 INFO L290 TraceCheckUtils]: 8: Hoare triple {6139#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump } true; {6139#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:02,491 INFO L290 TraceCheckUtils]: 9: Hoare triple {6139#(<= 2 ~waterLevel~0)} assume true; {6139#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:02,492 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {6139#(<= 2 ~waterLevel~0)} {6123#(= ~waterLevel~0 1)} #255#return; {6122#false} is VALID [2022-02-20 18:08:02,492 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2022-02-20 18:08:02,493 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:02,494 INFO L290 TraceCheckUtils]: 0: Hoare triple {6121#true} havoc ~retValue_acc~7;~retValue_acc~7 := ~methaneLevelCritical~0;#res := ~retValue_acc~7; {6121#true} is VALID [2022-02-20 18:08:02,494 INFO L290 TraceCheckUtils]: 1: Hoare triple {6121#true} assume true; {6121#true} is VALID [2022-02-20 18:08:02,494 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {6121#true} {6122#false} #257#return; {6122#false} is VALID [2022-02-20 18:08:02,495 INFO L290 TraceCheckUtils]: 0: Hoare triple {6121#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(13, 12);call #Ultimate.allocInit(7, 13);call write~init~int(44, 13, 0, 1);call write~init~int(77, 13, 1, 1);call write~init~int(101, 13, 2, 1);call write~init~int(116, 13, 3, 1);call write~init~int(104, 13, 4, 1);call write~init~int(58, 13, 5, 1);call write~init~int(0, 13, 6, 1);call #Ultimate.allocInit(5, 14);call write~init~int(67, 14, 0, 1);call write~init~int(82, 14, 1, 1);call write~init~int(73, 14, 2, 1);call write~init~int(84, 14, 3, 1);call write~init~int(0, 14, 4, 1);call #Ultimate.allocInit(3, 15);call write~init~int(79, 15, 0, 1);call write~init~int(75, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(41, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4;~methAndRunningLastTime~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0; {6123#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:02,495 INFO L290 TraceCheckUtils]: 1: Hoare triple {6123#(= ~waterLevel~0 1)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret21#1, main_~retValue_acc~4#1, main_~tmp~5#1;havoc main_~retValue_acc~4#1;havoc main_~tmp~5#1;assume { :begin_inline_select_helpers } true; {6123#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:02,495 INFO L290 TraceCheckUtils]: 2: Hoare triple {6123#(= ~waterLevel~0 1)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {6123#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:02,496 INFO L290 TraceCheckUtils]: 3: Hoare triple {6123#(= ~waterLevel~0 1)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~6#1;havoc valid_product_~retValue_acc~6#1;valid_product_~retValue_acc~6#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~6#1; {6123#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:02,496 INFO L290 TraceCheckUtils]: 4: Hoare triple {6123#(= ~waterLevel~0 1)} main_#t~ret21#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret21#1 && main_#t~ret21#1 <= 2147483647;main_~tmp~5#1 := main_#t~ret21#1;havoc main_#t~ret21#1; {6123#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:02,496 INFO L290 TraceCheckUtils]: 5: Hoare triple {6123#(= ~waterLevel~0 1)} assume 0 != main_~tmp~5#1;assume { :begin_inline_setup } true; {6123#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:02,496 INFO L290 TraceCheckUtils]: 6: Hoare triple {6123#(= ~waterLevel~0 1)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0; {6123#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:02,497 INFO L290 TraceCheckUtils]: 7: Hoare triple {6123#(= ~waterLevel~0 1)} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet4#1, test_#t~nondet5#1, test_#t~nondet6#1, test_#t~nondet7#1, test_~splverifierCounter~0#1, test_~tmp~0#1, test_~tmp___0~0#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~0#1;havoc test_~tmp___0~0#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {6123#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:02,497 INFO L290 TraceCheckUtils]: 8: Hoare triple {6123#(= ~waterLevel~0 1)} assume !false; {6123#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:02,497 INFO L290 TraceCheckUtils]: 9: Hoare triple {6123#(= ~waterLevel~0 1)} assume test_~splverifierCounter~0#1 < 4; {6123#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:02,497 INFO L290 TraceCheckUtils]: 10: Hoare triple {6123#(= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet4#1 && test_#t~nondet4#1 <= 2147483647;test_~tmp~0#1 := test_#t~nondet4#1;havoc test_#t~nondet4#1; {6123#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:02,498 INFO L290 TraceCheckUtils]: 11: Hoare triple {6123#(= ~waterLevel~0 1)} assume !(0 != test_~tmp~0#1); {6123#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:02,498 INFO L290 TraceCheckUtils]: 12: Hoare triple {6123#(= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet5#1 && test_#t~nondet5#1 <= 2147483647;test_~tmp___0~0#1 := test_#t~nondet5#1;havoc test_#t~nondet5#1; {6123#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:02,498 INFO L290 TraceCheckUtils]: 13: Hoare triple {6123#(= ~waterLevel~0 1)} assume !(0 != test_~tmp___0~0#1); {6123#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:02,498 INFO L290 TraceCheckUtils]: 14: Hoare triple {6123#(= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet6#1 && test_#t~nondet6#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet6#1;havoc test_#t~nondet6#1; {6123#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:02,499 INFO L290 TraceCheckUtils]: 15: Hoare triple {6123#(= ~waterLevel~0 1)} assume 0 != test_~tmp___2~0#1;assume { :begin_inline_startSystem } true;~systemActive~0 := 1; {6123#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:02,499 INFO L290 TraceCheckUtils]: 16: Hoare triple {6123#(= ~waterLevel~0 1)} assume { :end_inline_startSystem } true; {6123#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:02,499 INFO L272 TraceCheckUtils]: 17: Hoare triple {6123#(= ~waterLevel~0 1)} call timeShift(); {6123#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:02,499 INFO L290 TraceCheckUtils]: 18: Hoare triple {6123#(= ~waterLevel~0 1)} assume !(0 != ~pumpRunning~0); {6123#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:02,500 INFO L290 TraceCheckUtils]: 19: Hoare triple {6123#(= ~waterLevel~0 1)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret9#1, processEnvironment_~tmp~2#1;havoc processEnvironment_~tmp~2#1; {6123#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:02,500 INFO L290 TraceCheckUtils]: 20: Hoare triple {6123#(= ~waterLevel~0 1)} assume !(0 != ~pumpRunning~0); {6123#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:02,500 INFO L272 TraceCheckUtils]: 21: Hoare triple {6123#(= ~waterLevel~0 1)} call processEnvironment__wrappee__highWaterSensor(); {6138#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:02,500 INFO L290 TraceCheckUtils]: 22: Hoare triple {6138#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {6121#true} is VALID [2022-02-20 18:08:02,500 INFO L290 TraceCheckUtils]: 23: Hoare triple {6121#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret19#1, isHighWaterLevel_~retValue_acc~2#1, isHighWaterLevel_~tmp~3#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~2#1;havoc isHighWaterLevel_~tmp~3#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~9#1;havoc isHighWaterSensorDry_~retValue_acc~9#1; {6121#true} is VALID [2022-02-20 18:08:02,501 INFO L290 TraceCheckUtils]: 24: Hoare triple {6121#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~9#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~9#1; {6139#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:02,501 INFO L290 TraceCheckUtils]: 25: Hoare triple {6139#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret19#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret19#1 && isHighWaterLevel_#t~ret19#1 <= 2147483647;isHighWaterLevel_~tmp~3#1 := isHighWaterLevel_#t~ret19#1;havoc isHighWaterLevel_#t~ret19#1; {6139#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:02,501 INFO L290 TraceCheckUtils]: 26: Hoare triple {6139#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~3#1);isHighWaterLevel_~tmp___0~1#1 := 1; {6139#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:02,502 INFO L290 TraceCheckUtils]: 27: Hoare triple {6139#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~2#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~2#1; {6139#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:02,502 INFO L290 TraceCheckUtils]: 28: Hoare triple {6139#(<= 2 ~waterLevel~0)} #t~ret8#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret8#1 && #t~ret8#1 <= 2147483647;~tmp~1#1 := #t~ret8#1;havoc #t~ret8#1; {6139#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:02,502 INFO L290 TraceCheckUtils]: 29: Hoare triple {6139#(<= 2 ~waterLevel~0)} assume 0 != ~tmp~1#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {6139#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:02,502 INFO L290 TraceCheckUtils]: 30: Hoare triple {6139#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump } true; {6139#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:02,503 INFO L290 TraceCheckUtils]: 31: Hoare triple {6139#(<= 2 ~waterLevel~0)} assume true; {6139#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:02,503 INFO L284 TraceCheckUtils]: 32: Hoare quadruple {6139#(<= 2 ~waterLevel~0)} {6123#(= ~waterLevel~0 1)} #255#return; {6122#false} is VALID [2022-02-20 18:08:02,503 INFO L290 TraceCheckUtils]: 33: Hoare triple {6122#false} assume { :end_inline_processEnvironment } true; {6122#false} is VALID [2022-02-20 18:08:02,503 INFO L290 TraceCheckUtils]: 34: Hoare triple {6122#false} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret22#1, __utac_acc__Specification2_spec__2_#t~ret23#1, __utac_acc__Specification2_spec__2_~tmp~6#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~6#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {6122#false} is VALID [2022-02-20 18:08:02,503 INFO L272 TraceCheckUtils]: 35: Hoare triple {6122#false} call __utac_acc__Specification2_spec__2_#t~ret22#1 := isMethaneLevelCritical(); {6121#true} is VALID [2022-02-20 18:08:02,503 INFO L290 TraceCheckUtils]: 36: Hoare triple {6121#true} havoc ~retValue_acc~7;~retValue_acc~7 := ~methaneLevelCritical~0;#res := ~retValue_acc~7; {6121#true} is VALID [2022-02-20 18:08:02,503 INFO L290 TraceCheckUtils]: 37: Hoare triple {6121#true} assume true; {6121#true} is VALID [2022-02-20 18:08:02,503 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {6121#true} {6122#false} #257#return; {6122#false} is VALID [2022-02-20 18:08:02,503 INFO L290 TraceCheckUtils]: 39: Hoare triple {6122#false} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret22#1 && __utac_acc__Specification2_spec__2_#t~ret22#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~6#1 := __utac_acc__Specification2_spec__2_#t~ret22#1;havoc __utac_acc__Specification2_spec__2_#t~ret22#1; {6122#false} is VALID [2022-02-20 18:08:02,504 INFO L290 TraceCheckUtils]: 40: Hoare triple {6122#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~6#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~1#1;havoc isPumpRunning_~retValue_acc~1#1;isPumpRunning_~retValue_acc~1#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~1#1; {6122#false} is VALID [2022-02-20 18:08:02,504 INFO L290 TraceCheckUtils]: 41: Hoare triple {6122#false} __utac_acc__Specification2_spec__2_#t~ret23#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret23#1 && __utac_acc__Specification2_spec__2_#t~ret23#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret23#1;havoc __utac_acc__Specification2_spec__2_#t~ret23#1; {6122#false} is VALID [2022-02-20 18:08:02,504 INFO L290 TraceCheckUtils]: 42: Hoare triple {6122#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {6122#false} is VALID [2022-02-20 18:08:02,504 INFO L290 TraceCheckUtils]: 43: Hoare triple {6122#false} assume 0 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {6122#false} is VALID [2022-02-20 18:08:02,504 INFO L290 TraceCheckUtils]: 44: Hoare triple {6122#false} assume !false; {6122#false} is VALID [2022-02-20 18:08:02,504 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:08:02,504 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:08:02,504 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1906402329] [2022-02-20 18:08:02,504 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1906402329] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:08:02,504 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:08:02,504 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-02-20 18:08:02,505 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1639483784] [2022-02-20 18:08:02,505 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:08:02,505 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 45 [2022-02-20 18:08:02,505 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:08:02,505 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 5 states, 5 states have (on average 8.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:08:02,529 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 45 edges. 45 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:02,529 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-02-20 18:08:02,529 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:08:02,529 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-02-20 18:08:02,529 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-02-20 18:08:02,530 INFO L87 Difference]: Start difference. First operand 180 states and 223 transitions. Second operand has 5 states, 5 states have (on average 8.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:08:03,002 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:03,002 INFO L93 Difference]: Finished difference Result 545 states and 699 transitions. [2022-02-20 18:08:03,002 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-02-20 18:08:03,003 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 45 [2022-02-20 18:08:03,003 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:08:03,003 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 8.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:08:03,006 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 366 transitions. [2022-02-20 18:08:03,006 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 8.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:08:03,009 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 366 transitions. [2022-02-20 18:08:03,009 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 366 transitions. [2022-02-20 18:08:03,221 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 366 edges. 366 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:03,239 INFO L225 Difference]: With dead ends: 545 [2022-02-20 18:08:03,239 INFO L226 Difference]: Without dead ends: 373 [2022-02-20 18:08:03,240 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 6 SyntacticMatches, 1 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-02-20 18:08:03,241 INFO L933 BasicCegarLoop]: 146 mSDtfsCounter, 213 mSDsluCounter, 185 mSDsCounter, 0 mSdLazyCounter, 141 mSolverCounterSat, 59 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 219 SdHoareTripleChecker+Valid, 331 SdHoareTripleChecker+Invalid, 200 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 59 IncrementalHoareTripleChecker+Valid, 141 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-02-20 18:08:03,241 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [219 Valid, 331 Invalid, 200 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [59 Valid, 141 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-02-20 18:08:03,256 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 373 states. [2022-02-20 18:08:03,358 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 373 to 371. [2022-02-20 18:08:03,358 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:08:03,359 INFO L82 GeneralOperation]: Start isEquivalent. First operand 373 states. Second operand has 371 states, 284 states have (on average 1.2394366197183098) internal successors, (352), 302 states have internal predecessors, (352), 44 states have call successors, (44), 42 states have call predecessors, (44), 42 states have return successors, (64), 43 states have call predecessors, (64), 44 states have call successors, (64) [2022-02-20 18:08:03,360 INFO L74 IsIncluded]: Start isIncluded. First operand 373 states. Second operand has 371 states, 284 states have (on average 1.2394366197183098) internal successors, (352), 302 states have internal predecessors, (352), 44 states have call successors, (44), 42 states have call predecessors, (44), 42 states have return successors, (64), 43 states have call predecessors, (64), 44 states have call successors, (64) [2022-02-20 18:08:03,361 INFO L87 Difference]: Start difference. First operand 373 states. Second operand has 371 states, 284 states have (on average 1.2394366197183098) internal successors, (352), 302 states have internal predecessors, (352), 44 states have call successors, (44), 42 states have call predecessors, (44), 42 states have return successors, (64), 43 states have call predecessors, (64), 44 states have call successors, (64) [2022-02-20 18:08:03,369 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:03,369 INFO L93 Difference]: Finished difference Result 373 states and 461 transitions. [2022-02-20 18:08:03,370 INFO L276 IsEmpty]: Start isEmpty. Operand 373 states and 461 transitions. [2022-02-20 18:08:03,370 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:03,371 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:03,372 INFO L74 IsIncluded]: Start isIncluded. First operand has 371 states, 284 states have (on average 1.2394366197183098) internal successors, (352), 302 states have internal predecessors, (352), 44 states have call successors, (44), 42 states have call predecessors, (44), 42 states have return successors, (64), 43 states have call predecessors, (64), 44 states have call successors, (64) Second operand 373 states. [2022-02-20 18:08:03,373 INFO L87 Difference]: Start difference. First operand has 371 states, 284 states have (on average 1.2394366197183098) internal successors, (352), 302 states have internal predecessors, (352), 44 states have call successors, (44), 42 states have call predecessors, (44), 42 states have return successors, (64), 43 states have call predecessors, (64), 44 states have call successors, (64) Second operand 373 states. [2022-02-20 18:08:03,381 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:03,381 INFO L93 Difference]: Finished difference Result 373 states and 461 transitions. [2022-02-20 18:08:03,381 INFO L276 IsEmpty]: Start isEmpty. Operand 373 states and 461 transitions. [2022-02-20 18:08:03,382 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:03,382 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:03,382 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:08:03,382 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:08:03,383 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 371 states, 284 states have (on average 1.2394366197183098) internal successors, (352), 302 states have internal predecessors, (352), 44 states have call successors, (44), 42 states have call predecessors, (44), 42 states have return successors, (64), 43 states have call predecessors, (64), 44 states have call successors, (64) [2022-02-20 18:08:03,393 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 371 states to 371 states and 460 transitions. [2022-02-20 18:08:03,393 INFO L78 Accepts]: Start accepts. Automaton has 371 states and 460 transitions. Word has length 45 [2022-02-20 18:08:03,393 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:08:03,394 INFO L470 AbstractCegarLoop]: Abstraction has 371 states and 460 transitions. [2022-02-20 18:08:03,394 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:08:03,394 INFO L276 IsEmpty]: Start isEmpty. Operand 371 states and 460 transitions. [2022-02-20 18:08:03,395 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-02-20 18:08:03,395 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:08:03,395 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:08:03,395 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-02-20 18:08:03,395 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:08:03,396 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:08:03,396 INFO L85 PathProgramCache]: Analyzing trace with hash 929828559, now seen corresponding path program 1 times [2022-02-20 18:08:03,396 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:08:03,396 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1928167150] [2022-02-20 18:08:03,396 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:08:03,396 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:08:03,423 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:03,445 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-02-20 18:08:03,447 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:03,449 INFO L290 TraceCheckUtils]: 0: Hoare triple {8179#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {8159#true} is VALID [2022-02-20 18:08:03,450 INFO L290 TraceCheckUtils]: 1: Hoare triple {8159#true} assume true; {8159#true} is VALID [2022-02-20 18:08:03,450 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {8159#true} {8161#(= ~methAndRunningLastTime~0 0)} #259#return; {8161#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:08:03,452 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-02-20 18:08:03,456 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:03,460 INFO L290 TraceCheckUtils]: 0: Hoare triple {8180#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {8159#true} is VALID [2022-02-20 18:08:03,460 INFO L290 TraceCheckUtils]: 1: Hoare triple {8159#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret19#1, isHighWaterLevel_~retValue_acc~2#1, isHighWaterLevel_~tmp~3#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~2#1;havoc isHighWaterLevel_~tmp~3#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~9#1;havoc isHighWaterSensorDry_~retValue_acc~9#1; {8159#true} is VALID [2022-02-20 18:08:03,460 INFO L290 TraceCheckUtils]: 2: Hoare triple {8159#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~9#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~9#1; {8159#true} is VALID [2022-02-20 18:08:03,460 INFO L290 TraceCheckUtils]: 3: Hoare triple {8159#true} isHighWaterLevel_#t~ret19#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret19#1 && isHighWaterLevel_#t~ret19#1 <= 2147483647;isHighWaterLevel_~tmp~3#1 := isHighWaterLevel_#t~ret19#1;havoc isHighWaterLevel_#t~ret19#1; {8159#true} is VALID [2022-02-20 18:08:03,460 INFO L290 TraceCheckUtils]: 4: Hoare triple {8159#true} assume !(0 != isHighWaterLevel_~tmp~3#1);isHighWaterLevel_~tmp___0~1#1 := 1; {8159#true} is VALID [2022-02-20 18:08:03,461 INFO L290 TraceCheckUtils]: 5: Hoare triple {8159#true} isHighWaterLevel_~retValue_acc~2#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~2#1; {8159#true} is VALID [2022-02-20 18:08:03,461 INFO L290 TraceCheckUtils]: 6: Hoare triple {8159#true} #t~ret8#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret8#1 && #t~ret8#1 <= 2147483647;~tmp~1#1 := #t~ret8#1;havoc #t~ret8#1; {8159#true} is VALID [2022-02-20 18:08:03,461 INFO L290 TraceCheckUtils]: 7: Hoare triple {8159#true} assume 0 != ~tmp~1#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {8159#true} is VALID [2022-02-20 18:08:03,461 INFO L290 TraceCheckUtils]: 8: Hoare triple {8159#true} assume { :end_inline_activatePump } true; {8159#true} is VALID [2022-02-20 18:08:03,461 INFO L290 TraceCheckUtils]: 9: Hoare triple {8159#true} assume true; {8159#true} is VALID [2022-02-20 18:08:03,465 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {8159#true} {8161#(= ~methAndRunningLastTime~0 0)} #255#return; {8161#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:08:03,465 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2022-02-20 18:08:03,466 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:03,468 INFO L290 TraceCheckUtils]: 0: Hoare triple {8159#true} havoc ~retValue_acc~7;~retValue_acc~7 := ~methaneLevelCritical~0;#res := ~retValue_acc~7; {8159#true} is VALID [2022-02-20 18:08:03,468 INFO L290 TraceCheckUtils]: 1: Hoare triple {8159#true} assume true; {8159#true} is VALID [2022-02-20 18:08:03,470 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {8159#true} {8161#(= ~methAndRunningLastTime~0 0)} #257#return; {8161#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:08:03,471 INFO L290 TraceCheckUtils]: 0: Hoare triple {8159#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(13, 12);call #Ultimate.allocInit(7, 13);call write~init~int(44, 13, 0, 1);call write~init~int(77, 13, 1, 1);call write~init~int(101, 13, 2, 1);call write~init~int(116, 13, 3, 1);call write~init~int(104, 13, 4, 1);call write~init~int(58, 13, 5, 1);call write~init~int(0, 13, 6, 1);call #Ultimate.allocInit(5, 14);call write~init~int(67, 14, 0, 1);call write~init~int(82, 14, 1, 1);call write~init~int(73, 14, 2, 1);call write~init~int(84, 14, 3, 1);call write~init~int(0, 14, 4, 1);call #Ultimate.allocInit(3, 15);call write~init~int(79, 15, 0, 1);call write~init~int(75, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(41, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4;~methAndRunningLastTime~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0; {8159#true} is VALID [2022-02-20 18:08:03,471 INFO L290 TraceCheckUtils]: 1: Hoare triple {8159#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret21#1, main_~retValue_acc~4#1, main_~tmp~5#1;havoc main_~retValue_acc~4#1;havoc main_~tmp~5#1;assume { :begin_inline_select_helpers } true; {8159#true} is VALID [2022-02-20 18:08:03,471 INFO L290 TraceCheckUtils]: 2: Hoare triple {8159#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {8159#true} is VALID [2022-02-20 18:08:03,471 INFO L290 TraceCheckUtils]: 3: Hoare triple {8159#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~6#1;havoc valid_product_~retValue_acc~6#1;valid_product_~retValue_acc~6#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~6#1; {8159#true} is VALID [2022-02-20 18:08:03,471 INFO L290 TraceCheckUtils]: 4: Hoare triple {8159#true} main_#t~ret21#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret21#1 && main_#t~ret21#1 <= 2147483647;main_~tmp~5#1 := main_#t~ret21#1;havoc main_#t~ret21#1; {8159#true} is VALID [2022-02-20 18:08:03,471 INFO L290 TraceCheckUtils]: 5: Hoare triple {8159#true} assume 0 != main_~tmp~5#1;assume { :begin_inline_setup } true; {8159#true} is VALID [2022-02-20 18:08:03,472 INFO L290 TraceCheckUtils]: 6: Hoare triple {8159#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0; {8161#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:08:03,472 INFO L290 TraceCheckUtils]: 7: Hoare triple {8161#(= ~methAndRunningLastTime~0 0)} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet4#1, test_#t~nondet5#1, test_#t~nondet6#1, test_#t~nondet7#1, test_~splverifierCounter~0#1, test_~tmp~0#1, test_~tmp___0~0#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~0#1;havoc test_~tmp___0~0#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {8161#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:08:03,472 INFO L290 TraceCheckUtils]: 8: Hoare triple {8161#(= ~methAndRunningLastTime~0 0)} assume !false; {8161#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:08:03,473 INFO L290 TraceCheckUtils]: 9: Hoare triple {8161#(= ~methAndRunningLastTime~0 0)} assume test_~splverifierCounter~0#1 < 4; {8161#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:08:03,473 INFO L290 TraceCheckUtils]: 10: Hoare triple {8161#(= ~methAndRunningLastTime~0 0)} assume -2147483648 <= test_#t~nondet4#1 && test_#t~nondet4#1 <= 2147483647;test_~tmp~0#1 := test_#t~nondet4#1;havoc test_#t~nondet4#1; {8161#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:08:03,474 INFO L290 TraceCheckUtils]: 11: Hoare triple {8161#(= ~methAndRunningLastTime~0 0)} assume 0 != test_~tmp~0#1; {8161#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:08:03,474 INFO L272 TraceCheckUtils]: 12: Hoare triple {8161#(= ~methAndRunningLastTime~0 0)} call waterRise(); {8179#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:08:03,474 INFO L290 TraceCheckUtils]: 13: Hoare triple {8179#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {8159#true} is VALID [2022-02-20 18:08:03,474 INFO L290 TraceCheckUtils]: 14: Hoare triple {8159#true} assume true; {8159#true} is VALID [2022-02-20 18:08:03,475 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {8159#true} {8161#(= ~methAndRunningLastTime~0 0)} #259#return; {8161#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:08:03,475 INFO L290 TraceCheckUtils]: 16: Hoare triple {8161#(= ~methAndRunningLastTime~0 0)} assume -2147483648 <= test_#t~nondet5#1 && test_#t~nondet5#1 <= 2147483647;test_~tmp___0~0#1 := test_#t~nondet5#1;havoc test_#t~nondet5#1; {8161#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:08:03,475 INFO L290 TraceCheckUtils]: 17: Hoare triple {8161#(= ~methAndRunningLastTime~0 0)} assume !(0 != test_~tmp___0~0#1); {8161#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:08:03,476 INFO L290 TraceCheckUtils]: 18: Hoare triple {8161#(= ~methAndRunningLastTime~0 0)} assume -2147483648 <= test_#t~nondet6#1 && test_#t~nondet6#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet6#1;havoc test_#t~nondet6#1; {8161#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:08:03,476 INFO L290 TraceCheckUtils]: 19: Hoare triple {8161#(= ~methAndRunningLastTime~0 0)} assume 0 != test_~tmp___2~0#1;assume { :begin_inline_startSystem } true;~systemActive~0 := 1; {8161#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:08:03,476 INFO L290 TraceCheckUtils]: 20: Hoare triple {8161#(= ~methAndRunningLastTime~0 0)} assume { :end_inline_startSystem } true; {8161#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:08:03,477 INFO L272 TraceCheckUtils]: 21: Hoare triple {8161#(= ~methAndRunningLastTime~0 0)} call timeShift(); {8161#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:08:03,477 INFO L290 TraceCheckUtils]: 22: Hoare triple {8161#(= ~methAndRunningLastTime~0 0)} assume !(0 != ~pumpRunning~0); {8161#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:08:03,477 INFO L290 TraceCheckUtils]: 23: Hoare triple {8161#(= ~methAndRunningLastTime~0 0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret9#1, processEnvironment_~tmp~2#1;havoc processEnvironment_~tmp~2#1; {8161#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:08:03,477 INFO L290 TraceCheckUtils]: 24: Hoare triple {8161#(= ~methAndRunningLastTime~0 0)} assume !(0 != ~pumpRunning~0); {8161#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:08:03,478 INFO L272 TraceCheckUtils]: 25: Hoare triple {8161#(= ~methAndRunningLastTime~0 0)} call processEnvironment__wrappee__highWaterSensor(); {8180#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:03,478 INFO L290 TraceCheckUtils]: 26: Hoare triple {8180#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {8159#true} is VALID [2022-02-20 18:08:03,478 INFO L290 TraceCheckUtils]: 27: Hoare triple {8159#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret19#1, isHighWaterLevel_~retValue_acc~2#1, isHighWaterLevel_~tmp~3#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~2#1;havoc isHighWaterLevel_~tmp~3#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~9#1;havoc isHighWaterSensorDry_~retValue_acc~9#1; {8159#true} is VALID [2022-02-20 18:08:03,478 INFO L290 TraceCheckUtils]: 28: Hoare triple {8159#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~9#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~9#1; {8159#true} is VALID [2022-02-20 18:08:03,478 INFO L290 TraceCheckUtils]: 29: Hoare triple {8159#true} isHighWaterLevel_#t~ret19#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret19#1 && isHighWaterLevel_#t~ret19#1 <= 2147483647;isHighWaterLevel_~tmp~3#1 := isHighWaterLevel_#t~ret19#1;havoc isHighWaterLevel_#t~ret19#1; {8159#true} is VALID [2022-02-20 18:08:03,479 INFO L290 TraceCheckUtils]: 30: Hoare triple {8159#true} assume !(0 != isHighWaterLevel_~tmp~3#1);isHighWaterLevel_~tmp___0~1#1 := 1; {8159#true} is VALID [2022-02-20 18:08:03,479 INFO L290 TraceCheckUtils]: 31: Hoare triple {8159#true} isHighWaterLevel_~retValue_acc~2#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~2#1; {8159#true} is VALID [2022-02-20 18:08:03,479 INFO L290 TraceCheckUtils]: 32: Hoare triple {8159#true} #t~ret8#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret8#1 && #t~ret8#1 <= 2147483647;~tmp~1#1 := #t~ret8#1;havoc #t~ret8#1; {8159#true} is VALID [2022-02-20 18:08:03,479 INFO L290 TraceCheckUtils]: 33: Hoare triple {8159#true} assume 0 != ~tmp~1#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {8159#true} is VALID [2022-02-20 18:08:03,479 INFO L290 TraceCheckUtils]: 34: Hoare triple {8159#true} assume { :end_inline_activatePump } true; {8159#true} is VALID [2022-02-20 18:08:03,479 INFO L290 TraceCheckUtils]: 35: Hoare triple {8159#true} assume true; {8159#true} is VALID [2022-02-20 18:08:03,480 INFO L284 TraceCheckUtils]: 36: Hoare quadruple {8159#true} {8161#(= ~methAndRunningLastTime~0 0)} #255#return; {8161#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:08:03,480 INFO L290 TraceCheckUtils]: 37: Hoare triple {8161#(= ~methAndRunningLastTime~0 0)} assume { :end_inline_processEnvironment } true; {8161#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:08:03,480 INFO L290 TraceCheckUtils]: 38: Hoare triple {8161#(= ~methAndRunningLastTime~0 0)} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret22#1, __utac_acc__Specification2_spec__2_#t~ret23#1, __utac_acc__Specification2_spec__2_~tmp~6#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~6#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {8161#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:08:03,480 INFO L272 TraceCheckUtils]: 39: Hoare triple {8161#(= ~methAndRunningLastTime~0 0)} call __utac_acc__Specification2_spec__2_#t~ret22#1 := isMethaneLevelCritical(); {8159#true} is VALID [2022-02-20 18:08:03,481 INFO L290 TraceCheckUtils]: 40: Hoare triple {8159#true} havoc ~retValue_acc~7;~retValue_acc~7 := ~methaneLevelCritical~0;#res := ~retValue_acc~7; {8159#true} is VALID [2022-02-20 18:08:03,481 INFO L290 TraceCheckUtils]: 41: Hoare triple {8159#true} assume true; {8159#true} is VALID [2022-02-20 18:08:03,482 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {8159#true} {8161#(= ~methAndRunningLastTime~0 0)} #257#return; {8161#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:08:03,482 INFO L290 TraceCheckUtils]: 43: Hoare triple {8161#(= ~methAndRunningLastTime~0 0)} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret22#1 && __utac_acc__Specification2_spec__2_#t~ret22#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~6#1 := __utac_acc__Specification2_spec__2_#t~ret22#1;havoc __utac_acc__Specification2_spec__2_#t~ret22#1; {8161#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:08:03,483 INFO L290 TraceCheckUtils]: 44: Hoare triple {8161#(= ~methAndRunningLastTime~0 0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp~6#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~1#1;havoc isPumpRunning_~retValue_acc~1#1;isPumpRunning_~retValue_acc~1#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~1#1; {8161#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:08:03,483 INFO L290 TraceCheckUtils]: 45: Hoare triple {8161#(= ~methAndRunningLastTime~0 0)} __utac_acc__Specification2_spec__2_#t~ret23#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret23#1 && __utac_acc__Specification2_spec__2_#t~ret23#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret23#1;havoc __utac_acc__Specification2_spec__2_#t~ret23#1; {8161#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:08:03,483 INFO L290 TraceCheckUtils]: 46: Hoare triple {8161#(= ~methAndRunningLastTime~0 0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {8161#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:08:03,483 INFO L290 TraceCheckUtils]: 47: Hoare triple {8161#(= ~methAndRunningLastTime~0 0)} assume 0 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {8160#false} is VALID [2022-02-20 18:08:03,484 INFO L290 TraceCheckUtils]: 48: Hoare triple {8160#false} assume !false; {8160#false} is VALID [2022-02-20 18:08:03,484 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:08:03,484 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:08:03,484 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1928167150] [2022-02-20 18:08:03,484 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1928167150] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:08:03,484 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:08:03,484 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-02-20 18:08:03,484 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1748154477] [2022-02-20 18:08:03,484 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:08:03,485 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 3 states have internal predecessors, (42), 1 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 49 [2022-02-20 18:08:03,485 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:08:03,485 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 5 states, 5 states have (on average 8.4) internal successors, (42), 3 states have internal predecessors, (42), 1 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-02-20 18:08:03,511 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 49 edges. 49 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:03,511 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-02-20 18:08:03,511 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:08:03,511 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-02-20 18:08:03,512 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-02-20 18:08:03,512 INFO L87 Difference]: Start difference. First operand 371 states and 460 transitions. Second operand has 5 states, 5 states have (on average 8.4) internal successors, (42), 3 states have internal predecessors, (42), 1 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-02-20 18:08:04,120 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:04,121 INFO L93 Difference]: Finished difference Result 690 states and 898 transitions. [2022-02-20 18:08:04,121 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-02-20 18:08:04,121 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 3 states have internal predecessors, (42), 1 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 49 [2022-02-20 18:08:04,121 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:08:04,121 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 8.4) internal successors, (42), 3 states have internal predecessors, (42), 1 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-02-20 18:08:04,124 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 341 transitions. [2022-02-20 18:08:04,124 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 8.4) internal successors, (42), 3 states have internal predecessors, (42), 1 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-02-20 18:08:04,127 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 341 transitions. [2022-02-20 18:08:04,127 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 9 states and 341 transitions. [2022-02-20 18:08:04,345 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 341 edges. 341 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:04,367 INFO L225 Difference]: With dead ends: 690 [2022-02-20 18:08:04,367 INFO L226 Difference]: Without dead ends: 688 [2022-02-20 18:08:04,367 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-02-20 18:08:04,368 INFO L933 BasicCegarLoop]: 105 mSDtfsCounter, 294 mSDsluCounter, 158 mSDsCounter, 0 mSdLazyCounter, 159 mSolverCounterSat, 116 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 298 SdHoareTripleChecker+Valid, 263 SdHoareTripleChecker+Invalid, 275 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 116 IncrementalHoareTripleChecker+Valid, 159 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-02-20 18:08:04,368 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [298 Valid, 263 Invalid, 275 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [116 Valid, 159 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-02-20 18:08:04,368 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 688 states. [2022-02-20 18:08:04,422 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 688 to 584. [2022-02-20 18:08:04,423 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:08:04,424 INFO L82 GeneralOperation]: Start isEquivalent. First operand 688 states. Second operand has 584 states, 449 states have (on average 1.247216035634744) internal successors, (560), 480 states have internal predecessors, (560), 69 states have call successors, (69), 56 states have call predecessors, (69), 65 states have return successors, (140), 68 states have call predecessors, (140), 69 states have call successors, (140) [2022-02-20 18:08:04,424 INFO L74 IsIncluded]: Start isIncluded. First operand 688 states. Second operand has 584 states, 449 states have (on average 1.247216035634744) internal successors, (560), 480 states have internal predecessors, (560), 69 states have call successors, (69), 56 states have call predecessors, (69), 65 states have return successors, (140), 68 states have call predecessors, (140), 69 states have call successors, (140) [2022-02-20 18:08:04,425 INFO L87 Difference]: Start difference. First operand 688 states. Second operand has 584 states, 449 states have (on average 1.247216035634744) internal successors, (560), 480 states have internal predecessors, (560), 69 states have call successors, (69), 56 states have call predecessors, (69), 65 states have return successors, (140), 68 states have call predecessors, (140), 69 states have call successors, (140) [2022-02-20 18:08:04,443 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:04,443 INFO L93 Difference]: Finished difference Result 688 states and 893 transitions. [2022-02-20 18:08:04,443 INFO L276 IsEmpty]: Start isEmpty. Operand 688 states and 893 transitions. [2022-02-20 18:08:04,445 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:04,445 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:04,446 INFO L74 IsIncluded]: Start isIncluded. First operand has 584 states, 449 states have (on average 1.247216035634744) internal successors, (560), 480 states have internal predecessors, (560), 69 states have call successors, (69), 56 states have call predecessors, (69), 65 states have return successors, (140), 68 states have call predecessors, (140), 69 states have call successors, (140) Second operand 688 states. [2022-02-20 18:08:04,446 INFO L87 Difference]: Start difference. First operand has 584 states, 449 states have (on average 1.247216035634744) internal successors, (560), 480 states have internal predecessors, (560), 69 states have call successors, (69), 56 states have call predecessors, (69), 65 states have return successors, (140), 68 states have call predecessors, (140), 69 states have call successors, (140) Second operand 688 states. [2022-02-20 18:08:04,464 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:04,465 INFO L93 Difference]: Finished difference Result 688 states and 893 transitions. [2022-02-20 18:08:04,465 INFO L276 IsEmpty]: Start isEmpty. Operand 688 states and 893 transitions. [2022-02-20 18:08:04,466 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:04,466 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:04,466 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:08:04,466 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:08:04,467 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 584 states, 449 states have (on average 1.247216035634744) internal successors, (560), 480 states have internal predecessors, (560), 69 states have call successors, (69), 56 states have call predecessors, (69), 65 states have return successors, (140), 68 states have call predecessors, (140), 69 states have call successors, (140) [2022-02-20 18:08:04,485 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 584 states to 584 states and 769 transitions. [2022-02-20 18:08:04,486 INFO L78 Accepts]: Start accepts. Automaton has 584 states and 769 transitions. Word has length 49 [2022-02-20 18:08:04,486 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:08:04,486 INFO L470 AbstractCegarLoop]: Abstraction has 584 states and 769 transitions. [2022-02-20 18:08:04,486 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 3 states have internal predecessors, (42), 1 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-02-20 18:08:04,486 INFO L276 IsEmpty]: Start isEmpty. Operand 584 states and 769 transitions. [2022-02-20 18:08:04,487 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 89 [2022-02-20 18:08:04,487 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:08:04,487 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:08:04,487 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-02-20 18:08:04,487 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:08:04,488 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:08:04,488 INFO L85 PathProgramCache]: Analyzing trace with hash 1198485224, now seen corresponding path program 1 times [2022-02-20 18:08:04,488 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:08:04,488 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [661666855] [2022-02-20 18:08:04,488 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:08:04,488 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:08:04,505 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:04,538 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-02-20 18:08:04,539 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:04,542 INFO L290 TraceCheckUtils]: 0: Hoare triple {11386#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {11335#true} is VALID [2022-02-20 18:08:04,542 INFO L290 TraceCheckUtils]: 1: Hoare triple {11335#true} assume true; {11335#true} is VALID [2022-02-20 18:08:04,542 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {11335#true} {11335#true} #259#return; {11335#true} is VALID [2022-02-20 18:08:04,547 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-02-20 18:08:04,554 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:04,568 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-02-20 18:08:04,572 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:04,582 INFO L290 TraceCheckUtils]: 0: Hoare triple {11403#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {11335#true} is VALID [2022-02-20 18:08:04,582 INFO L290 TraceCheckUtils]: 1: Hoare triple {11335#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret19#1, isHighWaterLevel_~retValue_acc~2#1, isHighWaterLevel_~tmp~3#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~2#1;havoc isHighWaterLevel_~tmp~3#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~9#1;havoc isHighWaterSensorDry_~retValue_acc~9#1; {11335#true} is VALID [2022-02-20 18:08:04,582 INFO L290 TraceCheckUtils]: 2: Hoare triple {11335#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~9#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~9#1; {11335#true} is VALID [2022-02-20 18:08:04,582 INFO L290 TraceCheckUtils]: 3: Hoare triple {11335#true} isHighWaterLevel_#t~ret19#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret19#1 && isHighWaterLevel_#t~ret19#1 <= 2147483647;isHighWaterLevel_~tmp~3#1 := isHighWaterLevel_#t~ret19#1;havoc isHighWaterLevel_#t~ret19#1; {11335#true} is VALID [2022-02-20 18:08:04,582 INFO L290 TraceCheckUtils]: 4: Hoare triple {11335#true} assume !(0 != isHighWaterLevel_~tmp~3#1);isHighWaterLevel_~tmp___0~1#1 := 1; {11335#true} is VALID [2022-02-20 18:08:04,582 INFO L290 TraceCheckUtils]: 5: Hoare triple {11335#true} isHighWaterLevel_~retValue_acc~2#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~2#1; {11335#true} is VALID [2022-02-20 18:08:04,583 INFO L290 TraceCheckUtils]: 6: Hoare triple {11335#true} #t~ret8#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret8#1 && #t~ret8#1 <= 2147483647;~tmp~1#1 := #t~ret8#1;havoc #t~ret8#1; {11335#true} is VALID [2022-02-20 18:08:04,583 INFO L290 TraceCheckUtils]: 7: Hoare triple {11335#true} assume 0 != ~tmp~1#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {11399#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:08:04,583 INFO L290 TraceCheckUtils]: 8: Hoare triple {11399#(<= 1 ~pumpRunning~0)} assume { :end_inline_activatePump } true; {11399#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:08:04,584 INFO L290 TraceCheckUtils]: 9: Hoare triple {11399#(<= 1 ~pumpRunning~0)} assume true; {11399#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:08:04,584 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {11399#(<= 1 ~pumpRunning~0)} {11335#true} #255#return; {11399#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:08:04,584 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-02-20 18:08:04,585 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:04,587 INFO L290 TraceCheckUtils]: 0: Hoare triple {11335#true} havoc ~retValue_acc~7;~retValue_acc~7 := ~methaneLevelCritical~0;#res := ~retValue_acc~7; {11335#true} is VALID [2022-02-20 18:08:04,587 INFO L290 TraceCheckUtils]: 1: Hoare triple {11335#true} assume true; {11335#true} is VALID [2022-02-20 18:08:04,588 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {11335#true} {11399#(<= 1 ~pumpRunning~0)} #257#return; {11399#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:08:04,588 INFO L290 TraceCheckUtils]: 0: Hoare triple {11387#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0) (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))} assume !(0 != ~pumpRunning~0); {11335#true} is VALID [2022-02-20 18:08:04,588 INFO L290 TraceCheckUtils]: 1: Hoare triple {11335#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret9#1, processEnvironment_~tmp~2#1;havoc processEnvironment_~tmp~2#1; {11335#true} is VALID [2022-02-20 18:08:04,588 INFO L290 TraceCheckUtils]: 2: Hoare triple {11335#true} assume !(0 != ~pumpRunning~0); {11335#true} is VALID [2022-02-20 18:08:04,588 INFO L272 TraceCheckUtils]: 3: Hoare triple {11335#true} call processEnvironment__wrappee__highWaterSensor(); {11403#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:04,588 INFO L290 TraceCheckUtils]: 4: Hoare triple {11403#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {11335#true} is VALID [2022-02-20 18:08:04,588 INFO L290 TraceCheckUtils]: 5: Hoare triple {11335#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret19#1, isHighWaterLevel_~retValue_acc~2#1, isHighWaterLevel_~tmp~3#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~2#1;havoc isHighWaterLevel_~tmp~3#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~9#1;havoc isHighWaterSensorDry_~retValue_acc~9#1; {11335#true} is VALID [2022-02-20 18:08:04,588 INFO L290 TraceCheckUtils]: 6: Hoare triple {11335#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~9#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~9#1; {11335#true} is VALID [2022-02-20 18:08:04,588 INFO L290 TraceCheckUtils]: 7: Hoare triple {11335#true} isHighWaterLevel_#t~ret19#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret19#1 && isHighWaterLevel_#t~ret19#1 <= 2147483647;isHighWaterLevel_~tmp~3#1 := isHighWaterLevel_#t~ret19#1;havoc isHighWaterLevel_#t~ret19#1; {11335#true} is VALID [2022-02-20 18:08:04,588 INFO L290 TraceCheckUtils]: 8: Hoare triple {11335#true} assume !(0 != isHighWaterLevel_~tmp~3#1);isHighWaterLevel_~tmp___0~1#1 := 1; {11335#true} is VALID [2022-02-20 18:08:04,589 INFO L290 TraceCheckUtils]: 9: Hoare triple {11335#true} isHighWaterLevel_~retValue_acc~2#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~2#1; {11335#true} is VALID [2022-02-20 18:08:04,589 INFO L290 TraceCheckUtils]: 10: Hoare triple {11335#true} #t~ret8#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret8#1 && #t~ret8#1 <= 2147483647;~tmp~1#1 := #t~ret8#1;havoc #t~ret8#1; {11335#true} is VALID [2022-02-20 18:08:04,589 INFO L290 TraceCheckUtils]: 11: Hoare triple {11335#true} assume 0 != ~tmp~1#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {11399#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:08:04,589 INFO L290 TraceCheckUtils]: 12: Hoare triple {11399#(<= 1 ~pumpRunning~0)} assume { :end_inline_activatePump } true; {11399#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:08:04,589 INFO L290 TraceCheckUtils]: 13: Hoare triple {11399#(<= 1 ~pumpRunning~0)} assume true; {11399#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:08:04,590 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {11399#(<= 1 ~pumpRunning~0)} {11335#true} #255#return; {11399#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:08:04,590 INFO L290 TraceCheckUtils]: 15: Hoare triple {11399#(<= 1 ~pumpRunning~0)} assume { :end_inline_processEnvironment } true; {11399#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:08:04,590 INFO L290 TraceCheckUtils]: 16: Hoare triple {11399#(<= 1 ~pumpRunning~0)} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret22#1, __utac_acc__Specification2_spec__2_#t~ret23#1, __utac_acc__Specification2_spec__2_~tmp~6#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~6#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {11399#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:08:04,590 INFO L272 TraceCheckUtils]: 17: Hoare triple {11399#(<= 1 ~pumpRunning~0)} call __utac_acc__Specification2_spec__2_#t~ret22#1 := isMethaneLevelCritical(); {11335#true} is VALID [2022-02-20 18:08:04,590 INFO L290 TraceCheckUtils]: 18: Hoare triple {11335#true} havoc ~retValue_acc~7;~retValue_acc~7 := ~methaneLevelCritical~0;#res := ~retValue_acc~7; {11335#true} is VALID [2022-02-20 18:08:04,590 INFO L290 TraceCheckUtils]: 19: Hoare triple {11335#true} assume true; {11335#true} is VALID [2022-02-20 18:08:04,591 INFO L284 TraceCheckUtils]: 20: Hoare quadruple {11335#true} {11399#(<= 1 ~pumpRunning~0)} #257#return; {11399#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:08:04,591 INFO L290 TraceCheckUtils]: 21: Hoare triple {11399#(<= 1 ~pumpRunning~0)} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret22#1 && __utac_acc__Specification2_spec__2_#t~ret22#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~6#1 := __utac_acc__Specification2_spec__2_#t~ret22#1;havoc __utac_acc__Specification2_spec__2_#t~ret22#1; {11399#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:08:04,591 INFO L290 TraceCheckUtils]: 22: Hoare triple {11399#(<= 1 ~pumpRunning~0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp~6#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~1#1;havoc isPumpRunning_~retValue_acc~1#1;isPumpRunning_~retValue_acc~1#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~1#1; {11399#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:08:04,591 INFO L290 TraceCheckUtils]: 23: Hoare triple {11399#(<= 1 ~pumpRunning~0)} __utac_acc__Specification2_spec__2_#t~ret23#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret23#1 && __utac_acc__Specification2_spec__2_#t~ret23#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret23#1;havoc __utac_acc__Specification2_spec__2_#t~ret23#1; {11399#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:08:04,592 INFO L290 TraceCheckUtils]: 24: Hoare triple {11399#(<= 1 ~pumpRunning~0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {11399#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:08:04,592 INFO L290 TraceCheckUtils]: 25: Hoare triple {11399#(<= 1 ~pumpRunning~0)} assume !(0 != ~methAndRunningLastTime~0);~methAndRunningLastTime~0 := 1; {11399#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:08:04,592 INFO L290 TraceCheckUtils]: 26: Hoare triple {11399#(<= 1 ~pumpRunning~0)} assume { :end_inline___utac_acc__Specification2_spec__2 } true; {11399#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:08:04,592 INFO L290 TraceCheckUtils]: 27: Hoare triple {11399#(<= 1 ~pumpRunning~0)} assume true; {11399#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:08:04,593 INFO L284 TraceCheckUtils]: 28: Hoare quadruple {11399#(<= 1 ~pumpRunning~0)} {11335#true} #265#return; {11371#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:08:04,593 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2022-02-20 18:08:04,595 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:04,598 INFO L290 TraceCheckUtils]: 0: Hoare triple {11403#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {11335#true} is VALID [2022-02-20 18:08:04,598 INFO L290 TraceCheckUtils]: 1: Hoare triple {11335#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret19#1, isHighWaterLevel_~retValue_acc~2#1, isHighWaterLevel_~tmp~3#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~2#1;havoc isHighWaterLevel_~tmp~3#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~9#1;havoc isHighWaterSensorDry_~retValue_acc~9#1; {11335#true} is VALID [2022-02-20 18:08:04,598 INFO L290 TraceCheckUtils]: 2: Hoare triple {11335#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~9#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~9#1; {11335#true} is VALID [2022-02-20 18:08:04,598 INFO L290 TraceCheckUtils]: 3: Hoare triple {11335#true} isHighWaterLevel_#t~ret19#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret19#1 && isHighWaterLevel_#t~ret19#1 <= 2147483647;isHighWaterLevel_~tmp~3#1 := isHighWaterLevel_#t~ret19#1;havoc isHighWaterLevel_#t~ret19#1; {11335#true} is VALID [2022-02-20 18:08:04,598 INFO L290 TraceCheckUtils]: 4: Hoare triple {11335#true} assume !(0 != isHighWaterLevel_~tmp~3#1);isHighWaterLevel_~tmp___0~1#1 := 1; {11335#true} is VALID [2022-02-20 18:08:04,598 INFO L290 TraceCheckUtils]: 5: Hoare triple {11335#true} isHighWaterLevel_~retValue_acc~2#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~2#1; {11335#true} is VALID [2022-02-20 18:08:04,598 INFO L290 TraceCheckUtils]: 6: Hoare triple {11335#true} #t~ret8#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret8#1 && #t~ret8#1 <= 2147483647;~tmp~1#1 := #t~ret8#1;havoc #t~ret8#1; {11335#true} is VALID [2022-02-20 18:08:04,598 INFO L290 TraceCheckUtils]: 7: Hoare triple {11335#true} assume 0 != ~tmp~1#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {11335#true} is VALID [2022-02-20 18:08:04,599 INFO L290 TraceCheckUtils]: 8: Hoare triple {11335#true} assume { :end_inline_activatePump } true; {11335#true} is VALID [2022-02-20 18:08:04,599 INFO L290 TraceCheckUtils]: 9: Hoare triple {11335#true} assume true; {11335#true} is VALID [2022-02-20 18:08:04,599 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {11335#true} {11336#false} #255#return; {11336#false} is VALID [2022-02-20 18:08:04,599 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2022-02-20 18:08:04,599 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:04,604 INFO L290 TraceCheckUtils]: 0: Hoare triple {11335#true} havoc ~retValue_acc~7;~retValue_acc~7 := ~methaneLevelCritical~0;#res := ~retValue_acc~7; {11335#true} is VALID [2022-02-20 18:08:04,605 INFO L290 TraceCheckUtils]: 1: Hoare triple {11335#true} assume true; {11335#true} is VALID [2022-02-20 18:08:04,605 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {11335#true} {11336#false} #257#return; {11336#false} is VALID [2022-02-20 18:08:04,605 INFO L290 TraceCheckUtils]: 0: Hoare triple {11335#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(13, 12);call #Ultimate.allocInit(7, 13);call write~init~int(44, 13, 0, 1);call write~init~int(77, 13, 1, 1);call write~init~int(101, 13, 2, 1);call write~init~int(116, 13, 3, 1);call write~init~int(104, 13, 4, 1);call write~init~int(58, 13, 5, 1);call write~init~int(0, 13, 6, 1);call #Ultimate.allocInit(5, 14);call write~init~int(67, 14, 0, 1);call write~init~int(82, 14, 1, 1);call write~init~int(73, 14, 2, 1);call write~init~int(84, 14, 3, 1);call write~init~int(0, 14, 4, 1);call #Ultimate.allocInit(3, 15);call write~init~int(79, 15, 0, 1);call write~init~int(75, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(41, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4;~methAndRunningLastTime~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0; {11335#true} is VALID [2022-02-20 18:08:04,605 INFO L290 TraceCheckUtils]: 1: Hoare triple {11335#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret21#1, main_~retValue_acc~4#1, main_~tmp~5#1;havoc main_~retValue_acc~4#1;havoc main_~tmp~5#1;assume { :begin_inline_select_helpers } true; {11335#true} is VALID [2022-02-20 18:08:04,605 INFO L290 TraceCheckUtils]: 2: Hoare triple {11335#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {11335#true} is VALID [2022-02-20 18:08:04,605 INFO L290 TraceCheckUtils]: 3: Hoare triple {11335#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~6#1;havoc valid_product_~retValue_acc~6#1;valid_product_~retValue_acc~6#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~6#1; {11337#(= |ULTIMATE.start_valid_product_#res#1| 1)} is VALID [2022-02-20 18:08:04,606 INFO L290 TraceCheckUtils]: 4: Hoare triple {11337#(= |ULTIMATE.start_valid_product_#res#1| 1)} main_#t~ret21#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret21#1 && main_#t~ret21#1 <= 2147483647;main_~tmp~5#1 := main_#t~ret21#1;havoc main_#t~ret21#1; {11338#(= |ULTIMATE.start_main_~tmp~5#1| 1)} is VALID [2022-02-20 18:08:04,606 INFO L290 TraceCheckUtils]: 5: Hoare triple {11338#(= |ULTIMATE.start_main_~tmp~5#1| 1)} assume 0 != main_~tmp~5#1;assume { :begin_inline_setup } true; {11335#true} is VALID [2022-02-20 18:08:04,606 INFO L290 TraceCheckUtils]: 6: Hoare triple {11335#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0; {11335#true} is VALID [2022-02-20 18:08:04,606 INFO L290 TraceCheckUtils]: 7: Hoare triple {11335#true} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet4#1, test_#t~nondet5#1, test_#t~nondet6#1, test_#t~nondet7#1, test_~splverifierCounter~0#1, test_~tmp~0#1, test_~tmp___0~0#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~0#1;havoc test_~tmp___0~0#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {11335#true} is VALID [2022-02-20 18:08:04,606 INFO L290 TraceCheckUtils]: 8: Hoare triple {11335#true} assume !false; {11335#true} is VALID [2022-02-20 18:08:04,606 INFO L290 TraceCheckUtils]: 9: Hoare triple {11335#true} assume test_~splverifierCounter~0#1 < 4; {11335#true} is VALID [2022-02-20 18:08:04,606 INFO L290 TraceCheckUtils]: 10: Hoare triple {11335#true} assume -2147483648 <= test_#t~nondet4#1 && test_#t~nondet4#1 <= 2147483647;test_~tmp~0#1 := test_#t~nondet4#1;havoc test_#t~nondet4#1; {11335#true} is VALID [2022-02-20 18:08:04,607 INFO L290 TraceCheckUtils]: 11: Hoare triple {11335#true} assume 0 != test_~tmp~0#1; {11335#true} is VALID [2022-02-20 18:08:04,607 INFO L272 TraceCheckUtils]: 12: Hoare triple {11335#true} call waterRise(); {11386#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:08:04,607 INFO L290 TraceCheckUtils]: 13: Hoare triple {11386#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {11335#true} is VALID [2022-02-20 18:08:04,607 INFO L290 TraceCheckUtils]: 14: Hoare triple {11335#true} assume true; {11335#true} is VALID [2022-02-20 18:08:04,607 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {11335#true} {11335#true} #259#return; {11335#true} is VALID [2022-02-20 18:08:04,607 INFO L290 TraceCheckUtils]: 16: Hoare triple {11335#true} assume -2147483648 <= test_#t~nondet5#1 && test_#t~nondet5#1 <= 2147483647;test_~tmp___0~0#1 := test_#t~nondet5#1;havoc test_#t~nondet5#1; {11335#true} is VALID [2022-02-20 18:08:04,607 INFO L290 TraceCheckUtils]: 17: Hoare triple {11335#true} assume !(0 != test_~tmp___0~0#1); {11335#true} is VALID [2022-02-20 18:08:04,608 INFO L290 TraceCheckUtils]: 18: Hoare triple {11335#true} assume -2147483648 <= test_#t~nondet6#1 && test_#t~nondet6#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet6#1;havoc test_#t~nondet6#1; {11335#true} is VALID [2022-02-20 18:08:04,608 INFO L290 TraceCheckUtils]: 19: Hoare triple {11335#true} assume 0 != test_~tmp___2~0#1;assume { :begin_inline_startSystem } true;~systemActive~0 := 1; {11335#true} is VALID [2022-02-20 18:08:04,608 INFO L290 TraceCheckUtils]: 20: Hoare triple {11335#true} assume { :end_inline_startSystem } true; {11335#true} is VALID [2022-02-20 18:08:04,608 INFO L272 TraceCheckUtils]: 21: Hoare triple {11335#true} call timeShift(); {11387#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0) (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))} is VALID [2022-02-20 18:08:04,608 INFO L290 TraceCheckUtils]: 22: Hoare triple {11387#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0) (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))} assume !(0 != ~pumpRunning~0); {11335#true} is VALID [2022-02-20 18:08:04,608 INFO L290 TraceCheckUtils]: 23: Hoare triple {11335#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret9#1, processEnvironment_~tmp~2#1;havoc processEnvironment_~tmp~2#1; {11335#true} is VALID [2022-02-20 18:08:04,608 INFO L290 TraceCheckUtils]: 24: Hoare triple {11335#true} assume !(0 != ~pumpRunning~0); {11335#true} is VALID [2022-02-20 18:08:04,608 INFO L272 TraceCheckUtils]: 25: Hoare triple {11335#true} call processEnvironment__wrappee__highWaterSensor(); {11403#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:04,608 INFO L290 TraceCheckUtils]: 26: Hoare triple {11403#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {11335#true} is VALID [2022-02-20 18:08:04,609 INFO L290 TraceCheckUtils]: 27: Hoare triple {11335#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret19#1, isHighWaterLevel_~retValue_acc~2#1, isHighWaterLevel_~tmp~3#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~2#1;havoc isHighWaterLevel_~tmp~3#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~9#1;havoc isHighWaterSensorDry_~retValue_acc~9#1; {11335#true} is VALID [2022-02-20 18:08:04,609 INFO L290 TraceCheckUtils]: 28: Hoare triple {11335#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~9#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~9#1; {11335#true} is VALID [2022-02-20 18:08:04,609 INFO L290 TraceCheckUtils]: 29: Hoare triple {11335#true} isHighWaterLevel_#t~ret19#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret19#1 && isHighWaterLevel_#t~ret19#1 <= 2147483647;isHighWaterLevel_~tmp~3#1 := isHighWaterLevel_#t~ret19#1;havoc isHighWaterLevel_#t~ret19#1; {11335#true} is VALID [2022-02-20 18:08:04,609 INFO L290 TraceCheckUtils]: 30: Hoare triple {11335#true} assume !(0 != isHighWaterLevel_~tmp~3#1);isHighWaterLevel_~tmp___0~1#1 := 1; {11335#true} is VALID [2022-02-20 18:08:04,609 INFO L290 TraceCheckUtils]: 31: Hoare triple {11335#true} isHighWaterLevel_~retValue_acc~2#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~2#1; {11335#true} is VALID [2022-02-20 18:08:04,609 INFO L290 TraceCheckUtils]: 32: Hoare triple {11335#true} #t~ret8#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret8#1 && #t~ret8#1 <= 2147483647;~tmp~1#1 := #t~ret8#1;havoc #t~ret8#1; {11335#true} is VALID [2022-02-20 18:08:04,609 INFO L290 TraceCheckUtils]: 33: Hoare triple {11335#true} assume 0 != ~tmp~1#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {11399#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:08:04,609 INFO L290 TraceCheckUtils]: 34: Hoare triple {11399#(<= 1 ~pumpRunning~0)} assume { :end_inline_activatePump } true; {11399#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:08:04,610 INFO L290 TraceCheckUtils]: 35: Hoare triple {11399#(<= 1 ~pumpRunning~0)} assume true; {11399#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:08:04,610 INFO L284 TraceCheckUtils]: 36: Hoare quadruple {11399#(<= 1 ~pumpRunning~0)} {11335#true} #255#return; {11399#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:08:04,610 INFO L290 TraceCheckUtils]: 37: Hoare triple {11399#(<= 1 ~pumpRunning~0)} assume { :end_inline_processEnvironment } true; {11399#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:08:04,610 INFO L290 TraceCheckUtils]: 38: Hoare triple {11399#(<= 1 ~pumpRunning~0)} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret22#1, __utac_acc__Specification2_spec__2_#t~ret23#1, __utac_acc__Specification2_spec__2_~tmp~6#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~6#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {11399#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:08:04,610 INFO L272 TraceCheckUtils]: 39: Hoare triple {11399#(<= 1 ~pumpRunning~0)} call __utac_acc__Specification2_spec__2_#t~ret22#1 := isMethaneLevelCritical(); {11335#true} is VALID [2022-02-20 18:08:04,610 INFO L290 TraceCheckUtils]: 40: Hoare triple {11335#true} havoc ~retValue_acc~7;~retValue_acc~7 := ~methaneLevelCritical~0;#res := ~retValue_acc~7; {11335#true} is VALID [2022-02-20 18:08:04,610 INFO L290 TraceCheckUtils]: 41: Hoare triple {11335#true} assume true; {11335#true} is VALID [2022-02-20 18:08:04,611 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {11335#true} {11399#(<= 1 ~pumpRunning~0)} #257#return; {11399#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:08:04,611 INFO L290 TraceCheckUtils]: 43: Hoare triple {11399#(<= 1 ~pumpRunning~0)} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret22#1 && __utac_acc__Specification2_spec__2_#t~ret22#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~6#1 := __utac_acc__Specification2_spec__2_#t~ret22#1;havoc __utac_acc__Specification2_spec__2_#t~ret22#1; {11399#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:08:04,611 INFO L290 TraceCheckUtils]: 44: Hoare triple {11399#(<= 1 ~pumpRunning~0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp~6#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~1#1;havoc isPumpRunning_~retValue_acc~1#1;isPumpRunning_~retValue_acc~1#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~1#1; {11399#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:08:04,611 INFO L290 TraceCheckUtils]: 45: Hoare triple {11399#(<= 1 ~pumpRunning~0)} __utac_acc__Specification2_spec__2_#t~ret23#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret23#1 && __utac_acc__Specification2_spec__2_#t~ret23#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret23#1;havoc __utac_acc__Specification2_spec__2_#t~ret23#1; {11399#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:08:04,612 INFO L290 TraceCheckUtils]: 46: Hoare triple {11399#(<= 1 ~pumpRunning~0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {11399#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:08:04,612 INFO L290 TraceCheckUtils]: 47: Hoare triple {11399#(<= 1 ~pumpRunning~0)} assume !(0 != ~methAndRunningLastTime~0);~methAndRunningLastTime~0 := 1; {11399#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:08:04,612 INFO L290 TraceCheckUtils]: 48: Hoare triple {11399#(<= 1 ~pumpRunning~0)} assume { :end_inline___utac_acc__Specification2_spec__2 } true; {11399#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:08:04,612 INFO L290 TraceCheckUtils]: 49: Hoare triple {11399#(<= 1 ~pumpRunning~0)} assume true; {11399#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:08:04,613 INFO L284 TraceCheckUtils]: 50: Hoare quadruple {11399#(<= 1 ~pumpRunning~0)} {11335#true} #265#return; {11371#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:08:04,613 INFO L290 TraceCheckUtils]: 51: Hoare triple {11371#(not (= ~pumpRunning~0 0))} assume !false; {11371#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:08:04,613 INFO L290 TraceCheckUtils]: 52: Hoare triple {11371#(not (= ~pumpRunning~0 0))} assume test_~splverifierCounter~0#1 < 4; {11371#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:08:04,613 INFO L290 TraceCheckUtils]: 53: Hoare triple {11371#(not (= ~pumpRunning~0 0))} assume -2147483648 <= test_#t~nondet4#1 && test_#t~nondet4#1 <= 2147483647;test_~tmp~0#1 := test_#t~nondet4#1;havoc test_#t~nondet4#1; {11371#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:08:04,614 INFO L290 TraceCheckUtils]: 54: Hoare triple {11371#(not (= ~pumpRunning~0 0))} assume !(0 != test_~tmp~0#1); {11371#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:08:04,614 INFO L290 TraceCheckUtils]: 55: Hoare triple {11371#(not (= ~pumpRunning~0 0))} assume -2147483648 <= test_#t~nondet5#1 && test_#t~nondet5#1 <= 2147483647;test_~tmp___0~0#1 := test_#t~nondet5#1;havoc test_#t~nondet5#1; {11371#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:08:04,614 INFO L290 TraceCheckUtils]: 56: Hoare triple {11371#(not (= ~pumpRunning~0 0))} assume !(0 != test_~tmp___0~0#1); {11371#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:08:04,614 INFO L290 TraceCheckUtils]: 57: Hoare triple {11371#(not (= ~pumpRunning~0 0))} assume -2147483648 <= test_#t~nondet6#1 && test_#t~nondet6#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet6#1;havoc test_#t~nondet6#1; {11371#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:08:04,614 INFO L290 TraceCheckUtils]: 58: Hoare triple {11371#(not (= ~pumpRunning~0 0))} assume 0 != test_~tmp___2~0#1;assume { :begin_inline_startSystem } true;~systemActive~0 := 1; {11371#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:08:04,615 INFO L290 TraceCheckUtils]: 59: Hoare triple {11371#(not (= ~pumpRunning~0 0))} assume { :end_inline_startSystem } true; {11371#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:08:04,615 INFO L272 TraceCheckUtils]: 60: Hoare triple {11371#(not (= ~pumpRunning~0 0))} call timeShift(); {11371#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:08:04,615 INFO L290 TraceCheckUtils]: 61: Hoare triple {11371#(not (= ~pumpRunning~0 0))} assume !(0 != ~pumpRunning~0); {11336#false} is VALID [2022-02-20 18:08:04,615 INFO L290 TraceCheckUtils]: 62: Hoare triple {11336#false} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret9#1, processEnvironment_~tmp~2#1;havoc processEnvironment_~tmp~2#1; {11336#false} is VALID [2022-02-20 18:08:04,615 INFO L290 TraceCheckUtils]: 63: Hoare triple {11336#false} assume !(0 != ~pumpRunning~0); {11336#false} is VALID [2022-02-20 18:08:04,615 INFO L272 TraceCheckUtils]: 64: Hoare triple {11336#false} call processEnvironment__wrappee__highWaterSensor(); {11403#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:04,615 INFO L290 TraceCheckUtils]: 65: Hoare triple {11403#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {11335#true} is VALID [2022-02-20 18:08:04,616 INFO L290 TraceCheckUtils]: 66: Hoare triple {11335#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret19#1, isHighWaterLevel_~retValue_acc~2#1, isHighWaterLevel_~tmp~3#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~2#1;havoc isHighWaterLevel_~tmp~3#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~9#1;havoc isHighWaterSensorDry_~retValue_acc~9#1; {11335#true} is VALID [2022-02-20 18:08:04,616 INFO L290 TraceCheckUtils]: 67: Hoare triple {11335#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~9#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~9#1; {11335#true} is VALID [2022-02-20 18:08:04,616 INFO L290 TraceCheckUtils]: 68: Hoare triple {11335#true} isHighWaterLevel_#t~ret19#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret19#1 && isHighWaterLevel_#t~ret19#1 <= 2147483647;isHighWaterLevel_~tmp~3#1 := isHighWaterLevel_#t~ret19#1;havoc isHighWaterLevel_#t~ret19#1; {11335#true} is VALID [2022-02-20 18:08:04,616 INFO L290 TraceCheckUtils]: 69: Hoare triple {11335#true} assume !(0 != isHighWaterLevel_~tmp~3#1);isHighWaterLevel_~tmp___0~1#1 := 1; {11335#true} is VALID [2022-02-20 18:08:04,616 INFO L290 TraceCheckUtils]: 70: Hoare triple {11335#true} isHighWaterLevel_~retValue_acc~2#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~2#1; {11335#true} is VALID [2022-02-20 18:08:04,616 INFO L290 TraceCheckUtils]: 71: Hoare triple {11335#true} #t~ret8#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret8#1 && #t~ret8#1 <= 2147483647;~tmp~1#1 := #t~ret8#1;havoc #t~ret8#1; {11335#true} is VALID [2022-02-20 18:08:04,616 INFO L290 TraceCheckUtils]: 72: Hoare triple {11335#true} assume 0 != ~tmp~1#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {11335#true} is VALID [2022-02-20 18:08:04,616 INFO L290 TraceCheckUtils]: 73: Hoare triple {11335#true} assume { :end_inline_activatePump } true; {11335#true} is VALID [2022-02-20 18:08:04,616 INFO L290 TraceCheckUtils]: 74: Hoare triple {11335#true} assume true; {11335#true} is VALID [2022-02-20 18:08:04,616 INFO L284 TraceCheckUtils]: 75: Hoare quadruple {11335#true} {11336#false} #255#return; {11336#false} is VALID [2022-02-20 18:08:04,616 INFO L290 TraceCheckUtils]: 76: Hoare triple {11336#false} assume { :end_inline_processEnvironment } true; {11336#false} is VALID [2022-02-20 18:08:04,616 INFO L290 TraceCheckUtils]: 77: Hoare triple {11336#false} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret22#1, __utac_acc__Specification2_spec__2_#t~ret23#1, __utac_acc__Specification2_spec__2_~tmp~6#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~6#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {11336#false} is VALID [2022-02-20 18:08:04,616 INFO L272 TraceCheckUtils]: 78: Hoare triple {11336#false} call __utac_acc__Specification2_spec__2_#t~ret22#1 := isMethaneLevelCritical(); {11335#true} is VALID [2022-02-20 18:08:04,616 INFO L290 TraceCheckUtils]: 79: Hoare triple {11335#true} havoc ~retValue_acc~7;~retValue_acc~7 := ~methaneLevelCritical~0;#res := ~retValue_acc~7; {11335#true} is VALID [2022-02-20 18:08:04,616 INFO L290 TraceCheckUtils]: 80: Hoare triple {11335#true} assume true; {11335#true} is VALID [2022-02-20 18:08:04,616 INFO L284 TraceCheckUtils]: 81: Hoare quadruple {11335#true} {11336#false} #257#return; {11336#false} is VALID [2022-02-20 18:08:04,616 INFO L290 TraceCheckUtils]: 82: Hoare triple {11336#false} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret22#1 && __utac_acc__Specification2_spec__2_#t~ret22#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~6#1 := __utac_acc__Specification2_spec__2_#t~ret22#1;havoc __utac_acc__Specification2_spec__2_#t~ret22#1; {11336#false} is VALID [2022-02-20 18:08:04,617 INFO L290 TraceCheckUtils]: 83: Hoare triple {11336#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~6#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~1#1;havoc isPumpRunning_~retValue_acc~1#1;isPumpRunning_~retValue_acc~1#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~1#1; {11336#false} is VALID [2022-02-20 18:08:04,617 INFO L290 TraceCheckUtils]: 84: Hoare triple {11336#false} __utac_acc__Specification2_spec__2_#t~ret23#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret23#1 && __utac_acc__Specification2_spec__2_#t~ret23#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret23#1;havoc __utac_acc__Specification2_spec__2_#t~ret23#1; {11336#false} is VALID [2022-02-20 18:08:04,617 INFO L290 TraceCheckUtils]: 85: Hoare triple {11336#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {11336#false} is VALID [2022-02-20 18:08:04,617 INFO L290 TraceCheckUtils]: 86: Hoare triple {11336#false} assume 0 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {11336#false} is VALID [2022-02-20 18:08:04,617 INFO L290 TraceCheckUtils]: 87: Hoare triple {11336#false} assume !false; {11336#false} is VALID [2022-02-20 18:08:04,617 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 21 proven. 4 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2022-02-20 18:08:04,617 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:08:04,618 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [661666855] [2022-02-20 18:08:04,618 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [661666855] provided 0 perfect and 1 imperfect interpolant sequences [2022-02-20 18:08:04,618 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1744988821] [2022-02-20 18:08:04,618 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:08:04,618 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-02-20 18:08:04,618 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-20 18:08:04,619 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-02-20 18:08:04,662 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-02-20 18:08:04,716 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:04,718 INFO L263 TraceCheckSpWp]: Trace formula consists of 462 conjuncts, 4 conjunts are in the unsatisfiable core [2022-02-20 18:08:04,737 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:04,742 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 18:08:04,988 INFO L290 TraceCheckUtils]: 0: Hoare triple {11335#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(13, 12);call #Ultimate.allocInit(7, 13);call write~init~int(44, 13, 0, 1);call write~init~int(77, 13, 1, 1);call write~init~int(101, 13, 2, 1);call write~init~int(116, 13, 3, 1);call write~init~int(104, 13, 4, 1);call write~init~int(58, 13, 5, 1);call write~init~int(0, 13, 6, 1);call #Ultimate.allocInit(5, 14);call write~init~int(67, 14, 0, 1);call write~init~int(82, 14, 1, 1);call write~init~int(73, 14, 2, 1);call write~init~int(84, 14, 3, 1);call write~init~int(0, 14, 4, 1);call #Ultimate.allocInit(3, 15);call write~init~int(79, 15, 0, 1);call write~init~int(75, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(41, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4;~methAndRunningLastTime~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0; {11335#true} is VALID [2022-02-20 18:08:04,988 INFO L290 TraceCheckUtils]: 1: Hoare triple {11335#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret21#1, main_~retValue_acc~4#1, main_~tmp~5#1;havoc main_~retValue_acc~4#1;havoc main_~tmp~5#1;assume { :begin_inline_select_helpers } true; {11335#true} is VALID [2022-02-20 18:08:04,988 INFO L290 TraceCheckUtils]: 2: Hoare triple {11335#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {11335#true} is VALID [2022-02-20 18:08:04,988 INFO L290 TraceCheckUtils]: 3: Hoare triple {11335#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~6#1;havoc valid_product_~retValue_acc~6#1;valid_product_~retValue_acc~6#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~6#1; {11335#true} is VALID [2022-02-20 18:08:04,989 INFO L290 TraceCheckUtils]: 4: Hoare triple {11335#true} main_#t~ret21#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret21#1 && main_#t~ret21#1 <= 2147483647;main_~tmp~5#1 := main_#t~ret21#1;havoc main_#t~ret21#1; {11335#true} is VALID [2022-02-20 18:08:04,989 INFO L290 TraceCheckUtils]: 5: Hoare triple {11335#true} assume 0 != main_~tmp~5#1;assume { :begin_inline_setup } true; {11335#true} is VALID [2022-02-20 18:08:04,989 INFO L290 TraceCheckUtils]: 6: Hoare triple {11335#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0; {11335#true} is VALID [2022-02-20 18:08:04,989 INFO L290 TraceCheckUtils]: 7: Hoare triple {11335#true} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet4#1, test_#t~nondet5#1, test_#t~nondet6#1, test_#t~nondet7#1, test_~splverifierCounter~0#1, test_~tmp~0#1, test_~tmp___0~0#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~0#1;havoc test_~tmp___0~0#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {11335#true} is VALID [2022-02-20 18:08:04,989 INFO L290 TraceCheckUtils]: 8: Hoare triple {11335#true} assume !false; {11335#true} is VALID [2022-02-20 18:08:04,989 INFO L290 TraceCheckUtils]: 9: Hoare triple {11335#true} assume test_~splverifierCounter~0#1 < 4; {11335#true} is VALID [2022-02-20 18:08:04,989 INFO L290 TraceCheckUtils]: 10: Hoare triple {11335#true} assume -2147483648 <= test_#t~nondet4#1 && test_#t~nondet4#1 <= 2147483647;test_~tmp~0#1 := test_#t~nondet4#1;havoc test_#t~nondet4#1; {11335#true} is VALID [2022-02-20 18:08:04,989 INFO L290 TraceCheckUtils]: 11: Hoare triple {11335#true} assume 0 != test_~tmp~0#1; {11335#true} is VALID [2022-02-20 18:08:04,990 INFO L272 TraceCheckUtils]: 12: Hoare triple {11335#true} call waterRise(); {11335#true} is VALID [2022-02-20 18:08:04,990 INFO L290 TraceCheckUtils]: 13: Hoare triple {11335#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {11335#true} is VALID [2022-02-20 18:08:04,990 INFO L290 TraceCheckUtils]: 14: Hoare triple {11335#true} assume true; {11335#true} is VALID [2022-02-20 18:08:04,990 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {11335#true} {11335#true} #259#return; {11335#true} is VALID [2022-02-20 18:08:04,990 INFO L290 TraceCheckUtils]: 16: Hoare triple {11335#true} assume -2147483648 <= test_#t~nondet5#1 && test_#t~nondet5#1 <= 2147483647;test_~tmp___0~0#1 := test_#t~nondet5#1;havoc test_#t~nondet5#1; {11335#true} is VALID [2022-02-20 18:08:04,990 INFO L290 TraceCheckUtils]: 17: Hoare triple {11335#true} assume !(0 != test_~tmp___0~0#1); {11335#true} is VALID [2022-02-20 18:08:04,990 INFO L290 TraceCheckUtils]: 18: Hoare triple {11335#true} assume -2147483648 <= test_#t~nondet6#1 && test_#t~nondet6#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet6#1;havoc test_#t~nondet6#1; {11335#true} is VALID [2022-02-20 18:08:04,990 INFO L290 TraceCheckUtils]: 19: Hoare triple {11335#true} assume 0 != test_~tmp___2~0#1;assume { :begin_inline_startSystem } true;~systemActive~0 := 1; {11335#true} is VALID [2022-02-20 18:08:04,991 INFO L290 TraceCheckUtils]: 20: Hoare triple {11335#true} assume { :end_inline_startSystem } true; {11335#true} is VALID [2022-02-20 18:08:04,991 INFO L272 TraceCheckUtils]: 21: Hoare triple {11335#true} call timeShift(); {11335#true} is VALID [2022-02-20 18:08:04,991 INFO L290 TraceCheckUtils]: 22: Hoare triple {11335#true} assume !(0 != ~pumpRunning~0); {11335#true} is VALID [2022-02-20 18:08:04,991 INFO L290 TraceCheckUtils]: 23: Hoare triple {11335#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret9#1, processEnvironment_~tmp~2#1;havoc processEnvironment_~tmp~2#1; {11335#true} is VALID [2022-02-20 18:08:04,991 INFO L290 TraceCheckUtils]: 24: Hoare triple {11335#true} assume !(0 != ~pumpRunning~0); {11335#true} is VALID [2022-02-20 18:08:04,991 INFO L272 TraceCheckUtils]: 25: Hoare triple {11335#true} call processEnvironment__wrappee__highWaterSensor(); {11335#true} is VALID [2022-02-20 18:08:04,991 INFO L290 TraceCheckUtils]: 26: Hoare triple {11335#true} havoc ~tmp~1#1; {11335#true} is VALID [2022-02-20 18:08:04,991 INFO L290 TraceCheckUtils]: 27: Hoare triple {11335#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret19#1, isHighWaterLevel_~retValue_acc~2#1, isHighWaterLevel_~tmp~3#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~2#1;havoc isHighWaterLevel_~tmp~3#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~9#1;havoc isHighWaterSensorDry_~retValue_acc~9#1; {11335#true} is VALID [2022-02-20 18:08:04,992 INFO L290 TraceCheckUtils]: 28: Hoare triple {11335#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~9#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~9#1; {11335#true} is VALID [2022-02-20 18:08:04,992 INFO L290 TraceCheckUtils]: 29: Hoare triple {11335#true} isHighWaterLevel_#t~ret19#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret19#1 && isHighWaterLevel_#t~ret19#1 <= 2147483647;isHighWaterLevel_~tmp~3#1 := isHighWaterLevel_#t~ret19#1;havoc isHighWaterLevel_#t~ret19#1; {11335#true} is VALID [2022-02-20 18:08:04,992 INFO L290 TraceCheckUtils]: 30: Hoare triple {11335#true} assume !(0 != isHighWaterLevel_~tmp~3#1);isHighWaterLevel_~tmp___0~1#1 := 1; {11335#true} is VALID [2022-02-20 18:08:04,992 INFO L290 TraceCheckUtils]: 31: Hoare triple {11335#true} isHighWaterLevel_~retValue_acc~2#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~2#1; {11335#true} is VALID [2022-02-20 18:08:04,992 INFO L290 TraceCheckUtils]: 32: Hoare triple {11335#true} #t~ret8#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret8#1 && #t~ret8#1 <= 2147483647;~tmp~1#1 := #t~ret8#1;havoc #t~ret8#1; {11335#true} is VALID [2022-02-20 18:08:04,993 INFO L290 TraceCheckUtils]: 33: Hoare triple {11335#true} assume 0 != ~tmp~1#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {11399#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:08:04,993 INFO L290 TraceCheckUtils]: 34: Hoare triple {11399#(<= 1 ~pumpRunning~0)} assume { :end_inline_activatePump } true; {11399#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:08:04,993 INFO L290 TraceCheckUtils]: 35: Hoare triple {11399#(<= 1 ~pumpRunning~0)} assume true; {11399#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:08:04,993 INFO L284 TraceCheckUtils]: 36: Hoare quadruple {11399#(<= 1 ~pumpRunning~0)} {11335#true} #255#return; {11399#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:08:04,994 INFO L290 TraceCheckUtils]: 37: Hoare triple {11399#(<= 1 ~pumpRunning~0)} assume { :end_inline_processEnvironment } true; {11399#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:08:04,994 INFO L290 TraceCheckUtils]: 38: Hoare triple {11399#(<= 1 ~pumpRunning~0)} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret22#1, __utac_acc__Specification2_spec__2_#t~ret23#1, __utac_acc__Specification2_spec__2_~tmp~6#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~6#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {11399#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:08:04,994 INFO L272 TraceCheckUtils]: 39: Hoare triple {11399#(<= 1 ~pumpRunning~0)} call __utac_acc__Specification2_spec__2_#t~ret22#1 := isMethaneLevelCritical(); {11399#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:08:04,994 INFO L290 TraceCheckUtils]: 40: Hoare triple {11399#(<= 1 ~pumpRunning~0)} havoc ~retValue_acc~7;~retValue_acc~7 := ~methaneLevelCritical~0;#res := ~retValue_acc~7; {11399#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:08:04,995 INFO L290 TraceCheckUtils]: 41: Hoare triple {11399#(<= 1 ~pumpRunning~0)} assume true; {11399#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:08:04,995 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {11399#(<= 1 ~pumpRunning~0)} {11399#(<= 1 ~pumpRunning~0)} #257#return; {11399#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:08:04,995 INFO L290 TraceCheckUtils]: 43: Hoare triple {11399#(<= 1 ~pumpRunning~0)} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret22#1 && __utac_acc__Specification2_spec__2_#t~ret22#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~6#1 := __utac_acc__Specification2_spec__2_#t~ret22#1;havoc __utac_acc__Specification2_spec__2_#t~ret22#1; {11399#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:08:04,996 INFO L290 TraceCheckUtils]: 44: Hoare triple {11399#(<= 1 ~pumpRunning~0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp~6#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~1#1;havoc isPumpRunning_~retValue_acc~1#1;isPumpRunning_~retValue_acc~1#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~1#1; {11399#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:08:04,996 INFO L290 TraceCheckUtils]: 45: Hoare triple {11399#(<= 1 ~pumpRunning~0)} __utac_acc__Specification2_spec__2_#t~ret23#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret23#1 && __utac_acc__Specification2_spec__2_#t~ret23#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret23#1;havoc __utac_acc__Specification2_spec__2_#t~ret23#1; {11399#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:08:04,996 INFO L290 TraceCheckUtils]: 46: Hoare triple {11399#(<= 1 ~pumpRunning~0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {11399#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:08:04,997 INFO L290 TraceCheckUtils]: 47: Hoare triple {11399#(<= 1 ~pumpRunning~0)} assume !(0 != ~methAndRunningLastTime~0);~methAndRunningLastTime~0 := 1; {11399#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:08:04,997 INFO L290 TraceCheckUtils]: 48: Hoare triple {11399#(<= 1 ~pumpRunning~0)} assume { :end_inline___utac_acc__Specification2_spec__2 } true; {11399#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:08:04,997 INFO L290 TraceCheckUtils]: 49: Hoare triple {11399#(<= 1 ~pumpRunning~0)} assume true; {11399#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:08:04,997 INFO L284 TraceCheckUtils]: 50: Hoare quadruple {11399#(<= 1 ~pumpRunning~0)} {11335#true} #265#return; {11399#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:08:04,998 INFO L290 TraceCheckUtils]: 51: Hoare triple {11399#(<= 1 ~pumpRunning~0)} assume !false; {11399#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:08:04,998 INFO L290 TraceCheckUtils]: 52: Hoare triple {11399#(<= 1 ~pumpRunning~0)} assume test_~splverifierCounter~0#1 < 4; {11399#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:08:04,998 INFO L290 TraceCheckUtils]: 53: Hoare triple {11399#(<= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet4#1 && test_#t~nondet4#1 <= 2147483647;test_~tmp~0#1 := test_#t~nondet4#1;havoc test_#t~nondet4#1; {11399#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:08:04,999 INFO L290 TraceCheckUtils]: 54: Hoare triple {11399#(<= 1 ~pumpRunning~0)} assume !(0 != test_~tmp~0#1); {11399#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:08:04,999 INFO L290 TraceCheckUtils]: 55: Hoare triple {11399#(<= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet5#1 && test_#t~nondet5#1 <= 2147483647;test_~tmp___0~0#1 := test_#t~nondet5#1;havoc test_#t~nondet5#1; {11399#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:08:04,999 INFO L290 TraceCheckUtils]: 56: Hoare triple {11399#(<= 1 ~pumpRunning~0)} assume !(0 != test_~tmp___0~0#1); {11399#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:08:04,999 INFO L290 TraceCheckUtils]: 57: Hoare triple {11399#(<= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet6#1 && test_#t~nondet6#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet6#1;havoc test_#t~nondet6#1; {11399#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:08:05,000 INFO L290 TraceCheckUtils]: 58: Hoare triple {11399#(<= 1 ~pumpRunning~0)} assume 0 != test_~tmp___2~0#1;assume { :begin_inline_startSystem } true;~systemActive~0 := 1; {11399#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:08:05,000 INFO L290 TraceCheckUtils]: 59: Hoare triple {11399#(<= 1 ~pumpRunning~0)} assume { :end_inline_startSystem } true; {11399#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:08:05,001 INFO L272 TraceCheckUtils]: 60: Hoare triple {11399#(<= 1 ~pumpRunning~0)} call timeShift(); {11399#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:08:05,001 INFO L290 TraceCheckUtils]: 61: Hoare triple {11399#(<= 1 ~pumpRunning~0)} assume !(0 != ~pumpRunning~0); {11336#false} is VALID [2022-02-20 18:08:05,001 INFO L290 TraceCheckUtils]: 62: Hoare triple {11336#false} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret9#1, processEnvironment_~tmp~2#1;havoc processEnvironment_~tmp~2#1; {11336#false} is VALID [2022-02-20 18:08:05,001 INFO L290 TraceCheckUtils]: 63: Hoare triple {11336#false} assume !(0 != ~pumpRunning~0); {11336#false} is VALID [2022-02-20 18:08:05,001 INFO L272 TraceCheckUtils]: 64: Hoare triple {11336#false} call processEnvironment__wrappee__highWaterSensor(); {11336#false} is VALID [2022-02-20 18:08:05,001 INFO L290 TraceCheckUtils]: 65: Hoare triple {11336#false} havoc ~tmp~1#1; {11336#false} is VALID [2022-02-20 18:08:05,002 INFO L290 TraceCheckUtils]: 66: Hoare triple {11336#false} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret19#1, isHighWaterLevel_~retValue_acc~2#1, isHighWaterLevel_~tmp~3#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~2#1;havoc isHighWaterLevel_~tmp~3#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~9#1;havoc isHighWaterSensorDry_~retValue_acc~9#1; {11336#false} is VALID [2022-02-20 18:08:05,002 INFO L290 TraceCheckUtils]: 67: Hoare triple {11336#false} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~9#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~9#1; {11336#false} is VALID [2022-02-20 18:08:05,002 INFO L290 TraceCheckUtils]: 68: Hoare triple {11336#false} isHighWaterLevel_#t~ret19#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret19#1 && isHighWaterLevel_#t~ret19#1 <= 2147483647;isHighWaterLevel_~tmp~3#1 := isHighWaterLevel_#t~ret19#1;havoc isHighWaterLevel_#t~ret19#1; {11336#false} is VALID [2022-02-20 18:08:05,002 INFO L290 TraceCheckUtils]: 69: Hoare triple {11336#false} assume !(0 != isHighWaterLevel_~tmp~3#1);isHighWaterLevel_~tmp___0~1#1 := 1; {11336#false} is VALID [2022-02-20 18:08:05,002 INFO L290 TraceCheckUtils]: 70: Hoare triple {11336#false} isHighWaterLevel_~retValue_acc~2#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~2#1; {11336#false} is VALID [2022-02-20 18:08:05,002 INFO L290 TraceCheckUtils]: 71: Hoare triple {11336#false} #t~ret8#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret8#1 && #t~ret8#1 <= 2147483647;~tmp~1#1 := #t~ret8#1;havoc #t~ret8#1; {11336#false} is VALID [2022-02-20 18:08:05,002 INFO L290 TraceCheckUtils]: 72: Hoare triple {11336#false} assume 0 != ~tmp~1#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {11336#false} is VALID [2022-02-20 18:08:05,002 INFO L290 TraceCheckUtils]: 73: Hoare triple {11336#false} assume { :end_inline_activatePump } true; {11336#false} is VALID [2022-02-20 18:08:05,003 INFO L290 TraceCheckUtils]: 74: Hoare triple {11336#false} assume true; {11336#false} is VALID [2022-02-20 18:08:05,003 INFO L284 TraceCheckUtils]: 75: Hoare quadruple {11336#false} {11336#false} #255#return; {11336#false} is VALID [2022-02-20 18:08:05,003 INFO L290 TraceCheckUtils]: 76: Hoare triple {11336#false} assume { :end_inline_processEnvironment } true; {11336#false} is VALID [2022-02-20 18:08:05,003 INFO L290 TraceCheckUtils]: 77: Hoare triple {11336#false} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret22#1, __utac_acc__Specification2_spec__2_#t~ret23#1, __utac_acc__Specification2_spec__2_~tmp~6#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~6#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {11336#false} is VALID [2022-02-20 18:08:05,003 INFO L272 TraceCheckUtils]: 78: Hoare triple {11336#false} call __utac_acc__Specification2_spec__2_#t~ret22#1 := isMethaneLevelCritical(); {11336#false} is VALID [2022-02-20 18:08:05,003 INFO L290 TraceCheckUtils]: 79: Hoare triple {11336#false} havoc ~retValue_acc~7;~retValue_acc~7 := ~methaneLevelCritical~0;#res := ~retValue_acc~7; {11336#false} is VALID [2022-02-20 18:08:05,003 INFO L290 TraceCheckUtils]: 80: Hoare triple {11336#false} assume true; {11336#false} is VALID [2022-02-20 18:08:05,003 INFO L284 TraceCheckUtils]: 81: Hoare quadruple {11336#false} {11336#false} #257#return; {11336#false} is VALID [2022-02-20 18:08:05,003 INFO L290 TraceCheckUtils]: 82: Hoare triple {11336#false} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret22#1 && __utac_acc__Specification2_spec__2_#t~ret22#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~6#1 := __utac_acc__Specification2_spec__2_#t~ret22#1;havoc __utac_acc__Specification2_spec__2_#t~ret22#1; {11336#false} is VALID [2022-02-20 18:08:05,004 INFO L290 TraceCheckUtils]: 83: Hoare triple {11336#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~6#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~1#1;havoc isPumpRunning_~retValue_acc~1#1;isPumpRunning_~retValue_acc~1#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~1#1; {11336#false} is VALID [2022-02-20 18:08:05,004 INFO L290 TraceCheckUtils]: 84: Hoare triple {11336#false} __utac_acc__Specification2_spec__2_#t~ret23#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret23#1 && __utac_acc__Specification2_spec__2_#t~ret23#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret23#1;havoc __utac_acc__Specification2_spec__2_#t~ret23#1; {11336#false} is VALID [2022-02-20 18:08:05,004 INFO L290 TraceCheckUtils]: 85: Hoare triple {11336#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {11336#false} is VALID [2022-02-20 18:08:05,004 INFO L290 TraceCheckUtils]: 86: Hoare triple {11336#false} assume 0 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {11336#false} is VALID [2022-02-20 18:08:05,004 INFO L290 TraceCheckUtils]: 87: Hoare triple {11336#false} assume !false; {11336#false} is VALID [2022-02-20 18:08:05,004 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 36 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:08:05,005 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-02-20 18:08:05,005 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1744988821] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:08:05,005 INFO L191 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-02-20 18:08:05,005 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [9] total 9 [2022-02-20 18:08:05,005 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [816714123] [2022-02-20 18:08:05,005 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:08:05,006 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 25.0) internal successors, (75), 3 states have internal predecessors, (75), 3 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) Word has length 88 [2022-02-20 18:08:05,006 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:08:05,006 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 3 states, 3 states have (on average 25.0) internal successors, (75), 3 states have internal predecessors, (75), 3 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) [2022-02-20 18:08:05,058 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 88 edges. 88 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:05,058 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-02-20 18:08:05,058 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:08:05,058 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-02-20 18:08:05,059 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2022-02-20 18:08:05,059 INFO L87 Difference]: Start difference. First operand 584 states and 769 transitions. Second operand has 3 states, 3 states have (on average 25.0) internal successors, (75), 3 states have internal predecessors, (75), 3 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) [2022-02-20 18:08:05,250 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:05,250 INFO L93 Difference]: Finished difference Result 993 states and 1335 transitions. [2022-02-20 18:08:05,250 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-02-20 18:08:05,250 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 25.0) internal successors, (75), 3 states have internal predecessors, (75), 3 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) Word has length 88 [2022-02-20 18:08:05,250 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:08:05,251 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 25.0) internal successors, (75), 3 states have internal predecessors, (75), 3 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) [2022-02-20 18:08:05,252 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 244 transitions. [2022-02-20 18:08:05,252 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 25.0) internal successors, (75), 3 states have internal predecessors, (75), 3 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) [2022-02-20 18:08:05,254 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 244 transitions. [2022-02-20 18:08:05,254 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 244 transitions. [2022-02-20 18:08:05,384 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 244 edges. 244 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:05,397 INFO L225 Difference]: With dead ends: 993 [2022-02-20 18:08:05,397 INFO L226 Difference]: Without dead ends: 501 [2022-02-20 18:08:05,399 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 108 GetRequests, 101 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2022-02-20 18:08:05,399 INFO L933 BasicCegarLoop]: 141 mSDtfsCounter, 42 mSDsluCounter, 68 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 42 SdHoareTripleChecker+Valid, 209 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:08:05,400 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [42 Valid, 209 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:08:05,400 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 501 states. [2022-02-20 18:08:05,474 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 501 to 501. [2022-02-20 18:08:05,474 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:08:05,475 INFO L82 GeneralOperation]: Start isEquivalent. First operand 501 states. Second operand has 501 states, 385 states have (on average 1.225974025974026) internal successors, (472), 412 states have internal predecessors, (472), 59 states have call successors, (59), 51 states have call predecessors, (59), 56 states have return successors, (85), 58 states have call predecessors, (85), 59 states have call successors, (85) [2022-02-20 18:08:05,476 INFO L74 IsIncluded]: Start isIncluded. First operand 501 states. Second operand has 501 states, 385 states have (on average 1.225974025974026) internal successors, (472), 412 states have internal predecessors, (472), 59 states have call successors, (59), 51 states have call predecessors, (59), 56 states have return successors, (85), 58 states have call predecessors, (85), 59 states have call successors, (85) [2022-02-20 18:08:05,476 INFO L87 Difference]: Start difference. First operand 501 states. Second operand has 501 states, 385 states have (on average 1.225974025974026) internal successors, (472), 412 states have internal predecessors, (472), 59 states have call successors, (59), 51 states have call predecessors, (59), 56 states have return successors, (85), 58 states have call predecessors, (85), 59 states have call successors, (85) [2022-02-20 18:08:05,487 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:05,487 INFO L93 Difference]: Finished difference Result 501 states and 616 transitions. [2022-02-20 18:08:05,487 INFO L276 IsEmpty]: Start isEmpty. Operand 501 states and 616 transitions. [2022-02-20 18:08:05,488 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:05,488 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:05,489 INFO L74 IsIncluded]: Start isIncluded. First operand has 501 states, 385 states have (on average 1.225974025974026) internal successors, (472), 412 states have internal predecessors, (472), 59 states have call successors, (59), 51 states have call predecessors, (59), 56 states have return successors, (85), 58 states have call predecessors, (85), 59 states have call successors, (85) Second operand 501 states. [2022-02-20 18:08:05,489 INFO L87 Difference]: Start difference. First operand has 501 states, 385 states have (on average 1.225974025974026) internal successors, (472), 412 states have internal predecessors, (472), 59 states have call successors, (59), 51 states have call predecessors, (59), 56 states have return successors, (85), 58 states have call predecessors, (85), 59 states have call successors, (85) Second operand 501 states. [2022-02-20 18:08:05,500 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:05,500 INFO L93 Difference]: Finished difference Result 501 states and 616 transitions. [2022-02-20 18:08:05,500 INFO L276 IsEmpty]: Start isEmpty. Operand 501 states and 616 transitions. [2022-02-20 18:08:05,501 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:05,501 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:05,501 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:08:05,501 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:08:05,502 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 501 states, 385 states have (on average 1.225974025974026) internal successors, (472), 412 states have internal predecessors, (472), 59 states have call successors, (59), 51 states have call predecessors, (59), 56 states have return successors, (85), 58 states have call predecessors, (85), 59 states have call successors, (85) [2022-02-20 18:08:05,515 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 501 states to 501 states and 616 transitions. [2022-02-20 18:08:05,515 INFO L78 Accepts]: Start accepts. Automaton has 501 states and 616 transitions. Word has length 88 [2022-02-20 18:08:05,515 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:08:05,515 INFO L470 AbstractCegarLoop]: Abstraction has 501 states and 616 transitions. [2022-02-20 18:08:05,516 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 25.0) internal successors, (75), 3 states have internal predecessors, (75), 3 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) [2022-02-20 18:08:05,516 INFO L276 IsEmpty]: Start isEmpty. Operand 501 states and 616 transitions. [2022-02-20 18:08:05,517 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 92 [2022-02-20 18:08:05,517 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:08:05,517 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:08:05,539 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2022-02-20 18:08:05,734 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-02-20 18:08:05,735 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:08:05,735 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:08:05,735 INFO L85 PathProgramCache]: Analyzing trace with hash 1221172747, now seen corresponding path program 1 times [2022-02-20 18:08:05,735 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:08:05,735 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [299524947] [2022-02-20 18:08:05,735 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:08:05,736 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:08:05,757 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:05,791 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-02-20 18:08:05,793 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:05,794 INFO L290 TraceCheckUtils]: 0: Hoare triple {14784#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {14735#true} is VALID [2022-02-20 18:08:05,795 INFO L290 TraceCheckUtils]: 1: Hoare triple {14735#true} assume true; {14735#true} is VALID [2022-02-20 18:08:05,795 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {14735#true} {14735#true} #259#return; {14735#true} is VALID [2022-02-20 18:08:05,802 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-02-20 18:08:05,805 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:05,816 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-02-20 18:08:05,818 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:05,820 INFO L290 TraceCheckUtils]: 0: Hoare triple {14800#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {14735#true} is VALID [2022-02-20 18:08:05,820 INFO L290 TraceCheckUtils]: 1: Hoare triple {14735#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret19#1, isHighWaterLevel_~retValue_acc~2#1, isHighWaterLevel_~tmp~3#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~2#1;havoc isHighWaterLevel_~tmp~3#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~9#1;havoc isHighWaterSensorDry_~retValue_acc~9#1; {14735#true} is VALID [2022-02-20 18:08:05,820 INFO L290 TraceCheckUtils]: 2: Hoare triple {14735#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~9#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~9#1; {14735#true} is VALID [2022-02-20 18:08:05,820 INFO L290 TraceCheckUtils]: 3: Hoare triple {14735#true} isHighWaterLevel_#t~ret19#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret19#1 && isHighWaterLevel_#t~ret19#1 <= 2147483647;isHighWaterLevel_~tmp~3#1 := isHighWaterLevel_#t~ret19#1;havoc isHighWaterLevel_#t~ret19#1; {14735#true} is VALID [2022-02-20 18:08:05,821 INFO L290 TraceCheckUtils]: 4: Hoare triple {14735#true} assume !(0 != isHighWaterLevel_~tmp~3#1);isHighWaterLevel_~tmp___0~1#1 := 1; {14735#true} is VALID [2022-02-20 18:08:05,821 INFO L290 TraceCheckUtils]: 5: Hoare triple {14735#true} isHighWaterLevel_~retValue_acc~2#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~2#1; {14735#true} is VALID [2022-02-20 18:08:05,821 INFO L290 TraceCheckUtils]: 6: Hoare triple {14735#true} #t~ret8#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret8#1 && #t~ret8#1 <= 2147483647;~tmp~1#1 := #t~ret8#1;havoc #t~ret8#1; {14735#true} is VALID [2022-02-20 18:08:05,821 INFO L290 TraceCheckUtils]: 7: Hoare triple {14735#true} assume 0 != ~tmp~1#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {14735#true} is VALID [2022-02-20 18:08:05,821 INFO L290 TraceCheckUtils]: 8: Hoare triple {14735#true} assume { :end_inline_activatePump } true; {14735#true} is VALID [2022-02-20 18:08:05,821 INFO L290 TraceCheckUtils]: 9: Hoare triple {14735#true} assume true; {14735#true} is VALID [2022-02-20 18:08:05,821 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {14735#true} {14735#true} #255#return; {14735#true} is VALID [2022-02-20 18:08:05,821 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-02-20 18:08:05,822 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:05,823 INFO L290 TraceCheckUtils]: 0: Hoare triple {14735#true} havoc ~retValue_acc~7;~retValue_acc~7 := ~methaneLevelCritical~0;#res := ~retValue_acc~7; {14735#true} is VALID [2022-02-20 18:08:05,823 INFO L290 TraceCheckUtils]: 1: Hoare triple {14735#true} assume true; {14735#true} is VALID [2022-02-20 18:08:05,823 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {14735#true} {14735#true} #257#return; {14735#true} is VALID [2022-02-20 18:08:05,823 INFO L290 TraceCheckUtils]: 0: Hoare triple {14785#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0) (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))} assume !(0 != ~pumpRunning~0); {14735#true} is VALID [2022-02-20 18:08:05,823 INFO L290 TraceCheckUtils]: 1: Hoare triple {14735#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret9#1, processEnvironment_~tmp~2#1;havoc processEnvironment_~tmp~2#1; {14735#true} is VALID [2022-02-20 18:08:05,824 INFO L290 TraceCheckUtils]: 2: Hoare triple {14735#true} assume !(0 != ~pumpRunning~0); {14735#true} is VALID [2022-02-20 18:08:05,824 INFO L272 TraceCheckUtils]: 3: Hoare triple {14735#true} call processEnvironment__wrappee__highWaterSensor(); {14800#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:05,824 INFO L290 TraceCheckUtils]: 4: Hoare triple {14800#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {14735#true} is VALID [2022-02-20 18:08:05,824 INFO L290 TraceCheckUtils]: 5: Hoare triple {14735#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret19#1, isHighWaterLevel_~retValue_acc~2#1, isHighWaterLevel_~tmp~3#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~2#1;havoc isHighWaterLevel_~tmp~3#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~9#1;havoc isHighWaterSensorDry_~retValue_acc~9#1; {14735#true} is VALID [2022-02-20 18:08:05,824 INFO L290 TraceCheckUtils]: 6: Hoare triple {14735#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~9#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~9#1; {14735#true} is VALID [2022-02-20 18:08:05,824 INFO L290 TraceCheckUtils]: 7: Hoare triple {14735#true} isHighWaterLevel_#t~ret19#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret19#1 && isHighWaterLevel_#t~ret19#1 <= 2147483647;isHighWaterLevel_~tmp~3#1 := isHighWaterLevel_#t~ret19#1;havoc isHighWaterLevel_#t~ret19#1; {14735#true} is VALID [2022-02-20 18:08:05,824 INFO L290 TraceCheckUtils]: 8: Hoare triple {14735#true} assume !(0 != isHighWaterLevel_~tmp~3#1);isHighWaterLevel_~tmp___0~1#1 := 1; {14735#true} is VALID [2022-02-20 18:08:05,824 INFO L290 TraceCheckUtils]: 9: Hoare triple {14735#true} isHighWaterLevel_~retValue_acc~2#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~2#1; {14735#true} is VALID [2022-02-20 18:08:05,824 INFO L290 TraceCheckUtils]: 10: Hoare triple {14735#true} #t~ret8#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret8#1 && #t~ret8#1 <= 2147483647;~tmp~1#1 := #t~ret8#1;havoc #t~ret8#1; {14735#true} is VALID [2022-02-20 18:08:05,824 INFO L290 TraceCheckUtils]: 11: Hoare triple {14735#true} assume 0 != ~tmp~1#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {14735#true} is VALID [2022-02-20 18:08:05,824 INFO L290 TraceCheckUtils]: 12: Hoare triple {14735#true} assume { :end_inline_activatePump } true; {14735#true} is VALID [2022-02-20 18:08:05,824 INFO L290 TraceCheckUtils]: 13: Hoare triple {14735#true} assume true; {14735#true} is VALID [2022-02-20 18:08:05,825 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {14735#true} {14735#true} #255#return; {14735#true} is VALID [2022-02-20 18:08:05,825 INFO L290 TraceCheckUtils]: 15: Hoare triple {14735#true} assume { :end_inline_processEnvironment } true; {14735#true} is VALID [2022-02-20 18:08:05,825 INFO L290 TraceCheckUtils]: 16: Hoare triple {14735#true} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret22#1, __utac_acc__Specification2_spec__2_#t~ret23#1, __utac_acc__Specification2_spec__2_~tmp~6#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~6#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {14735#true} is VALID [2022-02-20 18:08:05,825 INFO L272 TraceCheckUtils]: 17: Hoare triple {14735#true} call __utac_acc__Specification2_spec__2_#t~ret22#1 := isMethaneLevelCritical(); {14735#true} is VALID [2022-02-20 18:08:05,825 INFO L290 TraceCheckUtils]: 18: Hoare triple {14735#true} havoc ~retValue_acc~7;~retValue_acc~7 := ~methaneLevelCritical~0;#res := ~retValue_acc~7; {14735#true} is VALID [2022-02-20 18:08:05,825 INFO L290 TraceCheckUtils]: 19: Hoare triple {14735#true} assume true; {14735#true} is VALID [2022-02-20 18:08:05,825 INFO L284 TraceCheckUtils]: 20: Hoare quadruple {14735#true} {14735#true} #257#return; {14735#true} is VALID [2022-02-20 18:08:05,825 INFO L290 TraceCheckUtils]: 21: Hoare triple {14735#true} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret22#1 && __utac_acc__Specification2_spec__2_#t~ret22#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~6#1 := __utac_acc__Specification2_spec__2_#t~ret22#1;havoc __utac_acc__Specification2_spec__2_#t~ret22#1; {14735#true} is VALID [2022-02-20 18:08:05,825 INFO L290 TraceCheckUtils]: 22: Hoare triple {14735#true} assume 0 != __utac_acc__Specification2_spec__2_~tmp~6#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~1#1;havoc isPumpRunning_~retValue_acc~1#1;isPumpRunning_~retValue_acc~1#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~1#1; {14735#true} is VALID [2022-02-20 18:08:05,825 INFO L290 TraceCheckUtils]: 23: Hoare triple {14735#true} __utac_acc__Specification2_spec__2_#t~ret23#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret23#1 && __utac_acc__Specification2_spec__2_#t~ret23#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret23#1;havoc __utac_acc__Specification2_spec__2_#t~ret23#1; {14735#true} is VALID [2022-02-20 18:08:05,825 INFO L290 TraceCheckUtils]: 24: Hoare triple {14735#true} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {14735#true} is VALID [2022-02-20 18:08:05,825 INFO L290 TraceCheckUtils]: 25: Hoare triple {14735#true} assume !(0 != ~methAndRunningLastTime~0);~methAndRunningLastTime~0 := 1; {14735#true} is VALID [2022-02-20 18:08:05,825 INFO L290 TraceCheckUtils]: 26: Hoare triple {14735#true} assume { :end_inline___utac_acc__Specification2_spec__2 } true; {14735#true} is VALID [2022-02-20 18:08:05,825 INFO L290 TraceCheckUtils]: 27: Hoare triple {14735#true} assume true; {14735#true} is VALID [2022-02-20 18:08:05,825 INFO L284 TraceCheckUtils]: 28: Hoare quadruple {14735#true} {14735#true} #265#return; {14735#true} is VALID [2022-02-20 18:08:05,826 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2022-02-20 18:08:05,826 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:05,836 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-02-20 18:08:05,837 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:05,838 INFO L290 TraceCheckUtils]: 0: Hoare triple {14735#true} assume true; {14735#true} is VALID [2022-02-20 18:08:05,838 INFO L284 TraceCheckUtils]: 1: Hoare quadruple {14735#true} {14735#true} #271#return; {14735#true} is VALID [2022-02-20 18:08:05,838 INFO L290 TraceCheckUtils]: 0: Hoare triple {14800#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {14735#true} is VALID [2022-02-20 18:08:05,838 INFO L290 TraceCheckUtils]: 1: Hoare triple {14735#true} assume !(0 == ~pumpRunning~0); {14735#true} is VALID [2022-02-20 18:08:05,838 INFO L272 TraceCheckUtils]: 2: Hoare triple {14735#true} call processEnvironment__wrappee__base(); {14735#true} is VALID [2022-02-20 18:08:05,838 INFO L290 TraceCheckUtils]: 3: Hoare triple {14735#true} assume true; {14735#true} is VALID [2022-02-20 18:08:05,839 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {14735#true} {14735#true} #271#return; {14735#true} is VALID [2022-02-20 18:08:05,839 INFO L290 TraceCheckUtils]: 5: Hoare triple {14735#true} assume true; {14735#true} is VALID [2022-02-20 18:08:05,839 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {14735#true} {14736#false} #253#return; {14736#false} is VALID [2022-02-20 18:08:05,839 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 81 [2022-02-20 18:08:05,839 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:05,841 INFO L290 TraceCheckUtils]: 0: Hoare triple {14735#true} havoc ~retValue_acc~7;~retValue_acc~7 := ~methaneLevelCritical~0;#res := ~retValue_acc~7; {14735#true} is VALID [2022-02-20 18:08:05,841 INFO L290 TraceCheckUtils]: 1: Hoare triple {14735#true} assume true; {14735#true} is VALID [2022-02-20 18:08:05,841 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {14735#true} {14736#false} #257#return; {14736#false} is VALID [2022-02-20 18:08:05,841 INFO L290 TraceCheckUtils]: 0: Hoare triple {14735#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(13, 12);call #Ultimate.allocInit(7, 13);call write~init~int(44, 13, 0, 1);call write~init~int(77, 13, 1, 1);call write~init~int(101, 13, 2, 1);call write~init~int(116, 13, 3, 1);call write~init~int(104, 13, 4, 1);call write~init~int(58, 13, 5, 1);call write~init~int(0, 13, 6, 1);call #Ultimate.allocInit(5, 14);call write~init~int(67, 14, 0, 1);call write~init~int(82, 14, 1, 1);call write~init~int(73, 14, 2, 1);call write~init~int(84, 14, 3, 1);call write~init~int(0, 14, 4, 1);call #Ultimate.allocInit(3, 15);call write~init~int(79, 15, 0, 1);call write~init~int(75, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(41, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4;~methAndRunningLastTime~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0; {14735#true} is VALID [2022-02-20 18:08:05,841 INFO L290 TraceCheckUtils]: 1: Hoare triple {14735#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret21#1, main_~retValue_acc~4#1, main_~tmp~5#1;havoc main_~retValue_acc~4#1;havoc main_~tmp~5#1;assume { :begin_inline_select_helpers } true; {14735#true} is VALID [2022-02-20 18:08:05,841 INFO L290 TraceCheckUtils]: 2: Hoare triple {14735#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {14735#true} is VALID [2022-02-20 18:08:05,841 INFO L290 TraceCheckUtils]: 3: Hoare triple {14735#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~6#1;havoc valid_product_~retValue_acc~6#1;valid_product_~retValue_acc~6#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~6#1; {14737#(= |ULTIMATE.start_valid_product_#res#1| 1)} is VALID [2022-02-20 18:08:05,842 INFO L290 TraceCheckUtils]: 4: Hoare triple {14737#(= |ULTIMATE.start_valid_product_#res#1| 1)} main_#t~ret21#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret21#1 && main_#t~ret21#1 <= 2147483647;main_~tmp~5#1 := main_#t~ret21#1;havoc main_#t~ret21#1; {14738#(= |ULTIMATE.start_main_~tmp~5#1| 1)} is VALID [2022-02-20 18:08:05,842 INFO L290 TraceCheckUtils]: 5: Hoare triple {14738#(= |ULTIMATE.start_main_~tmp~5#1| 1)} assume 0 != main_~tmp~5#1;assume { :begin_inline_setup } true; {14735#true} is VALID [2022-02-20 18:08:05,842 INFO L290 TraceCheckUtils]: 6: Hoare triple {14735#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0; {14735#true} is VALID [2022-02-20 18:08:05,842 INFO L290 TraceCheckUtils]: 7: Hoare triple {14735#true} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet4#1, test_#t~nondet5#1, test_#t~nondet6#1, test_#t~nondet7#1, test_~splverifierCounter~0#1, test_~tmp~0#1, test_~tmp___0~0#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~0#1;havoc test_~tmp___0~0#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {14735#true} is VALID [2022-02-20 18:08:05,842 INFO L290 TraceCheckUtils]: 8: Hoare triple {14735#true} assume !false; {14735#true} is VALID [2022-02-20 18:08:05,842 INFO L290 TraceCheckUtils]: 9: Hoare triple {14735#true} assume test_~splverifierCounter~0#1 < 4; {14735#true} is VALID [2022-02-20 18:08:05,842 INFO L290 TraceCheckUtils]: 10: Hoare triple {14735#true} assume -2147483648 <= test_#t~nondet4#1 && test_#t~nondet4#1 <= 2147483647;test_~tmp~0#1 := test_#t~nondet4#1;havoc test_#t~nondet4#1; {14735#true} is VALID [2022-02-20 18:08:05,842 INFO L290 TraceCheckUtils]: 11: Hoare triple {14735#true} assume 0 != test_~tmp~0#1; {14735#true} is VALID [2022-02-20 18:08:05,843 INFO L272 TraceCheckUtils]: 12: Hoare triple {14735#true} call waterRise(); {14784#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:08:05,843 INFO L290 TraceCheckUtils]: 13: Hoare triple {14784#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {14735#true} is VALID [2022-02-20 18:08:05,843 INFO L290 TraceCheckUtils]: 14: Hoare triple {14735#true} assume true; {14735#true} is VALID [2022-02-20 18:08:05,843 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {14735#true} {14735#true} #259#return; {14735#true} is VALID [2022-02-20 18:08:05,843 INFO L290 TraceCheckUtils]: 16: Hoare triple {14735#true} assume -2147483648 <= test_#t~nondet5#1 && test_#t~nondet5#1 <= 2147483647;test_~tmp___0~0#1 := test_#t~nondet5#1;havoc test_#t~nondet5#1; {14735#true} is VALID [2022-02-20 18:08:05,843 INFO L290 TraceCheckUtils]: 17: Hoare triple {14735#true} assume !(0 != test_~tmp___0~0#1); {14735#true} is VALID [2022-02-20 18:08:05,843 INFO L290 TraceCheckUtils]: 18: Hoare triple {14735#true} assume -2147483648 <= test_#t~nondet6#1 && test_#t~nondet6#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet6#1;havoc test_#t~nondet6#1; {14735#true} is VALID [2022-02-20 18:08:05,843 INFO L290 TraceCheckUtils]: 19: Hoare triple {14735#true} assume 0 != test_~tmp___2~0#1;assume { :begin_inline_startSystem } true;~systemActive~0 := 1; {14735#true} is VALID [2022-02-20 18:08:05,843 INFO L290 TraceCheckUtils]: 20: Hoare triple {14735#true} assume { :end_inline_startSystem } true; {14735#true} is VALID [2022-02-20 18:08:05,843 INFO L272 TraceCheckUtils]: 21: Hoare triple {14735#true} call timeShift(); {14785#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0) (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))} is VALID [2022-02-20 18:08:05,843 INFO L290 TraceCheckUtils]: 22: Hoare triple {14785#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0) (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))} assume !(0 != ~pumpRunning~0); {14735#true} is VALID [2022-02-20 18:08:05,844 INFO L290 TraceCheckUtils]: 23: Hoare triple {14735#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret9#1, processEnvironment_~tmp~2#1;havoc processEnvironment_~tmp~2#1; {14735#true} is VALID [2022-02-20 18:08:05,844 INFO L290 TraceCheckUtils]: 24: Hoare triple {14735#true} assume !(0 != ~pumpRunning~0); {14735#true} is VALID [2022-02-20 18:08:05,844 INFO L272 TraceCheckUtils]: 25: Hoare triple {14735#true} call processEnvironment__wrappee__highWaterSensor(); {14800#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:05,844 INFO L290 TraceCheckUtils]: 26: Hoare triple {14800#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {14735#true} is VALID [2022-02-20 18:08:05,844 INFO L290 TraceCheckUtils]: 27: Hoare triple {14735#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret19#1, isHighWaterLevel_~retValue_acc~2#1, isHighWaterLevel_~tmp~3#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~2#1;havoc isHighWaterLevel_~tmp~3#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~9#1;havoc isHighWaterSensorDry_~retValue_acc~9#1; {14735#true} is VALID [2022-02-20 18:08:05,844 INFO L290 TraceCheckUtils]: 28: Hoare triple {14735#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~9#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~9#1; {14735#true} is VALID [2022-02-20 18:08:05,844 INFO L290 TraceCheckUtils]: 29: Hoare triple {14735#true} isHighWaterLevel_#t~ret19#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret19#1 && isHighWaterLevel_#t~ret19#1 <= 2147483647;isHighWaterLevel_~tmp~3#1 := isHighWaterLevel_#t~ret19#1;havoc isHighWaterLevel_#t~ret19#1; {14735#true} is VALID [2022-02-20 18:08:05,844 INFO L290 TraceCheckUtils]: 30: Hoare triple {14735#true} assume !(0 != isHighWaterLevel_~tmp~3#1);isHighWaterLevel_~tmp___0~1#1 := 1; {14735#true} is VALID [2022-02-20 18:08:05,844 INFO L290 TraceCheckUtils]: 31: Hoare triple {14735#true} isHighWaterLevel_~retValue_acc~2#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~2#1; {14735#true} is VALID [2022-02-20 18:08:05,844 INFO L290 TraceCheckUtils]: 32: Hoare triple {14735#true} #t~ret8#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret8#1 && #t~ret8#1 <= 2147483647;~tmp~1#1 := #t~ret8#1;havoc #t~ret8#1; {14735#true} is VALID [2022-02-20 18:08:05,844 INFO L290 TraceCheckUtils]: 33: Hoare triple {14735#true} assume 0 != ~tmp~1#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {14735#true} is VALID [2022-02-20 18:08:05,844 INFO L290 TraceCheckUtils]: 34: Hoare triple {14735#true} assume { :end_inline_activatePump } true; {14735#true} is VALID [2022-02-20 18:08:05,845 INFO L290 TraceCheckUtils]: 35: Hoare triple {14735#true} assume true; {14735#true} is VALID [2022-02-20 18:08:05,845 INFO L284 TraceCheckUtils]: 36: Hoare quadruple {14735#true} {14735#true} #255#return; {14735#true} is VALID [2022-02-20 18:08:05,845 INFO L290 TraceCheckUtils]: 37: Hoare triple {14735#true} assume { :end_inline_processEnvironment } true; {14735#true} is VALID [2022-02-20 18:08:05,845 INFO L290 TraceCheckUtils]: 38: Hoare triple {14735#true} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret22#1, __utac_acc__Specification2_spec__2_#t~ret23#1, __utac_acc__Specification2_spec__2_~tmp~6#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~6#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {14735#true} is VALID [2022-02-20 18:08:05,845 INFO L272 TraceCheckUtils]: 39: Hoare triple {14735#true} call __utac_acc__Specification2_spec__2_#t~ret22#1 := isMethaneLevelCritical(); {14735#true} is VALID [2022-02-20 18:08:05,845 INFO L290 TraceCheckUtils]: 40: Hoare triple {14735#true} havoc ~retValue_acc~7;~retValue_acc~7 := ~methaneLevelCritical~0;#res := ~retValue_acc~7; {14735#true} is VALID [2022-02-20 18:08:05,845 INFO L290 TraceCheckUtils]: 41: Hoare triple {14735#true} assume true; {14735#true} is VALID [2022-02-20 18:08:05,845 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {14735#true} {14735#true} #257#return; {14735#true} is VALID [2022-02-20 18:08:05,845 INFO L290 TraceCheckUtils]: 43: Hoare triple {14735#true} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret22#1 && __utac_acc__Specification2_spec__2_#t~ret22#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~6#1 := __utac_acc__Specification2_spec__2_#t~ret22#1;havoc __utac_acc__Specification2_spec__2_#t~ret22#1; {14735#true} is VALID [2022-02-20 18:08:05,845 INFO L290 TraceCheckUtils]: 44: Hoare triple {14735#true} assume 0 != __utac_acc__Specification2_spec__2_~tmp~6#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~1#1;havoc isPumpRunning_~retValue_acc~1#1;isPumpRunning_~retValue_acc~1#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~1#1; {14735#true} is VALID [2022-02-20 18:08:05,845 INFO L290 TraceCheckUtils]: 45: Hoare triple {14735#true} __utac_acc__Specification2_spec__2_#t~ret23#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret23#1 && __utac_acc__Specification2_spec__2_#t~ret23#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret23#1;havoc __utac_acc__Specification2_spec__2_#t~ret23#1; {14735#true} is VALID [2022-02-20 18:08:05,845 INFO L290 TraceCheckUtils]: 46: Hoare triple {14735#true} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {14735#true} is VALID [2022-02-20 18:08:05,845 INFO L290 TraceCheckUtils]: 47: Hoare triple {14735#true} assume !(0 != ~methAndRunningLastTime~0);~methAndRunningLastTime~0 := 1; {14735#true} is VALID [2022-02-20 18:08:05,845 INFO L290 TraceCheckUtils]: 48: Hoare triple {14735#true} assume { :end_inline___utac_acc__Specification2_spec__2 } true; {14735#true} is VALID [2022-02-20 18:08:05,845 INFO L290 TraceCheckUtils]: 49: Hoare triple {14735#true} assume true; {14735#true} is VALID [2022-02-20 18:08:05,845 INFO L284 TraceCheckUtils]: 50: Hoare quadruple {14735#true} {14735#true} #265#return; {14735#true} is VALID [2022-02-20 18:08:05,846 INFO L290 TraceCheckUtils]: 51: Hoare triple {14735#true} assume !false; {14735#true} is VALID [2022-02-20 18:08:05,846 INFO L290 TraceCheckUtils]: 52: Hoare triple {14735#true} assume test_~splverifierCounter~0#1 < 4; {14735#true} is VALID [2022-02-20 18:08:05,846 INFO L290 TraceCheckUtils]: 53: Hoare triple {14735#true} assume -2147483648 <= test_#t~nondet4#1 && test_#t~nondet4#1 <= 2147483647;test_~tmp~0#1 := test_#t~nondet4#1;havoc test_#t~nondet4#1; {14735#true} is VALID [2022-02-20 18:08:05,846 INFO L290 TraceCheckUtils]: 54: Hoare triple {14735#true} assume !(0 != test_~tmp~0#1); {14735#true} is VALID [2022-02-20 18:08:05,846 INFO L290 TraceCheckUtils]: 55: Hoare triple {14735#true} assume -2147483648 <= test_#t~nondet5#1 && test_#t~nondet5#1 <= 2147483647;test_~tmp___0~0#1 := test_#t~nondet5#1;havoc test_#t~nondet5#1; {14735#true} is VALID [2022-02-20 18:08:05,846 INFO L290 TraceCheckUtils]: 56: Hoare triple {14735#true} assume !(0 != test_~tmp___0~0#1); {14735#true} is VALID [2022-02-20 18:08:05,846 INFO L290 TraceCheckUtils]: 57: Hoare triple {14735#true} assume -2147483648 <= test_#t~nondet6#1 && test_#t~nondet6#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet6#1;havoc test_#t~nondet6#1; {14735#true} is VALID [2022-02-20 18:08:05,846 INFO L290 TraceCheckUtils]: 58: Hoare triple {14735#true} assume 0 != test_~tmp___2~0#1;assume { :begin_inline_startSystem } true;~systemActive~0 := 1; {14735#true} is VALID [2022-02-20 18:08:05,846 INFO L290 TraceCheckUtils]: 59: Hoare triple {14735#true} assume { :end_inline_startSystem } true; {14735#true} is VALID [2022-02-20 18:08:05,846 INFO L272 TraceCheckUtils]: 60: Hoare triple {14735#true} call timeShift(); {14735#true} is VALID [2022-02-20 18:08:05,846 INFO L290 TraceCheckUtils]: 61: Hoare triple {14735#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {14735#true} is VALID [2022-02-20 18:08:05,846 INFO L290 TraceCheckUtils]: 62: Hoare triple {14735#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {14735#true} is VALID [2022-02-20 18:08:05,846 INFO L290 TraceCheckUtils]: 63: Hoare triple {14735#true} assume { :end_inline_lowerWaterLevel } true; {14735#true} is VALID [2022-02-20 18:08:05,846 INFO L290 TraceCheckUtils]: 64: Hoare triple {14735#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret9#1, processEnvironment_~tmp~2#1;havoc processEnvironment_~tmp~2#1; {14735#true} is VALID [2022-02-20 18:08:05,846 INFO L290 TraceCheckUtils]: 65: Hoare triple {14735#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret20#1, isLowWaterLevel_~retValue_acc~3#1, isLowWaterLevel_~tmp~4#1, isLowWaterLevel_~tmp___0~2#1;havoc isLowWaterLevel_~retValue_acc~3#1;havoc isLowWaterLevel_~tmp~4#1;havoc isLowWaterLevel_~tmp___0~2#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~10#1;havoc isLowWaterSensorDry_~retValue_acc~10#1;isLowWaterSensorDry_~retValue_acc~10#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~10#1; {14735#true} is VALID [2022-02-20 18:08:05,847 INFO L290 TraceCheckUtils]: 66: Hoare triple {14735#true} isLowWaterLevel_#t~ret20#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret20#1 && isLowWaterLevel_#t~ret20#1 <= 2147483647;isLowWaterLevel_~tmp~4#1 := isLowWaterLevel_#t~ret20#1;havoc isLowWaterLevel_#t~ret20#1; {14735#true} is VALID [2022-02-20 18:08:05,847 INFO L290 TraceCheckUtils]: 67: Hoare triple {14735#true} assume !(0 != isLowWaterLevel_~tmp~4#1);isLowWaterLevel_~tmp___0~2#1 := 1; {14771#(not (= |timeShift_isLowWaterLevel_~tmp___0~2#1| 0))} is VALID [2022-02-20 18:08:05,847 INFO L290 TraceCheckUtils]: 68: Hoare triple {14771#(not (= |timeShift_isLowWaterLevel_~tmp___0~2#1| 0))} isLowWaterLevel_~retValue_acc~3#1 := isLowWaterLevel_~tmp___0~2#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~3#1; {14772#(not (= |timeShift_isLowWaterLevel_#res#1| 0))} is VALID [2022-02-20 18:08:05,848 INFO L290 TraceCheckUtils]: 69: Hoare triple {14772#(not (= |timeShift_isLowWaterLevel_#res#1| 0))} processEnvironment_#t~ret9#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret9#1 && processEnvironment_#t~ret9#1 <= 2147483647;processEnvironment_~tmp~2#1 := processEnvironment_#t~ret9#1;havoc processEnvironment_#t~ret9#1; {14773#(not (= |timeShift_processEnvironment_~tmp~2#1| 0))} is VALID [2022-02-20 18:08:05,848 INFO L290 TraceCheckUtils]: 70: Hoare triple {14773#(not (= |timeShift_processEnvironment_~tmp~2#1| 0))} assume !(0 != processEnvironment_~tmp~2#1); {14736#false} is VALID [2022-02-20 18:08:05,848 INFO L272 TraceCheckUtils]: 71: Hoare triple {14736#false} call processEnvironment__wrappee__highWaterSensor(); {14800#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:05,848 INFO L290 TraceCheckUtils]: 72: Hoare triple {14800#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {14735#true} is VALID [2022-02-20 18:08:05,848 INFO L290 TraceCheckUtils]: 73: Hoare triple {14735#true} assume !(0 == ~pumpRunning~0); {14735#true} is VALID [2022-02-20 18:08:05,848 INFO L272 TraceCheckUtils]: 74: Hoare triple {14735#true} call processEnvironment__wrappee__base(); {14735#true} is VALID [2022-02-20 18:08:05,848 INFO L290 TraceCheckUtils]: 75: Hoare triple {14735#true} assume true; {14735#true} is VALID [2022-02-20 18:08:05,848 INFO L284 TraceCheckUtils]: 76: Hoare quadruple {14735#true} {14735#true} #271#return; {14735#true} is VALID [2022-02-20 18:08:05,848 INFO L290 TraceCheckUtils]: 77: Hoare triple {14735#true} assume true; {14735#true} is VALID [2022-02-20 18:08:05,848 INFO L284 TraceCheckUtils]: 78: Hoare quadruple {14735#true} {14736#false} #253#return; {14736#false} is VALID [2022-02-20 18:08:05,848 INFO L290 TraceCheckUtils]: 79: Hoare triple {14736#false} assume { :end_inline_processEnvironment } true; {14736#false} is VALID [2022-02-20 18:08:05,848 INFO L290 TraceCheckUtils]: 80: Hoare triple {14736#false} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret22#1, __utac_acc__Specification2_spec__2_#t~ret23#1, __utac_acc__Specification2_spec__2_~tmp~6#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~6#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {14736#false} is VALID [2022-02-20 18:08:05,849 INFO L272 TraceCheckUtils]: 81: Hoare triple {14736#false} call __utac_acc__Specification2_spec__2_#t~ret22#1 := isMethaneLevelCritical(); {14735#true} is VALID [2022-02-20 18:08:05,849 INFO L290 TraceCheckUtils]: 82: Hoare triple {14735#true} havoc ~retValue_acc~7;~retValue_acc~7 := ~methaneLevelCritical~0;#res := ~retValue_acc~7; {14735#true} is VALID [2022-02-20 18:08:05,849 INFO L290 TraceCheckUtils]: 83: Hoare triple {14735#true} assume true; {14735#true} is VALID [2022-02-20 18:08:05,849 INFO L284 TraceCheckUtils]: 84: Hoare quadruple {14735#true} {14736#false} #257#return; {14736#false} is VALID [2022-02-20 18:08:05,849 INFO L290 TraceCheckUtils]: 85: Hoare triple {14736#false} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret22#1 && __utac_acc__Specification2_spec__2_#t~ret22#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~6#1 := __utac_acc__Specification2_spec__2_#t~ret22#1;havoc __utac_acc__Specification2_spec__2_#t~ret22#1; {14736#false} is VALID [2022-02-20 18:08:05,849 INFO L290 TraceCheckUtils]: 86: Hoare triple {14736#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~6#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~1#1;havoc isPumpRunning_~retValue_acc~1#1;isPumpRunning_~retValue_acc~1#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~1#1; {14736#false} is VALID [2022-02-20 18:08:05,849 INFO L290 TraceCheckUtils]: 87: Hoare triple {14736#false} __utac_acc__Specification2_spec__2_#t~ret23#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret23#1 && __utac_acc__Specification2_spec__2_#t~ret23#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret23#1;havoc __utac_acc__Specification2_spec__2_#t~ret23#1; {14736#false} is VALID [2022-02-20 18:08:05,849 INFO L290 TraceCheckUtils]: 88: Hoare triple {14736#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {14736#false} is VALID [2022-02-20 18:08:05,849 INFO L290 TraceCheckUtils]: 89: Hoare triple {14736#false} assume 0 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {14736#false} is VALID [2022-02-20 18:08:05,849 INFO L290 TraceCheckUtils]: 90: Hoare triple {14736#false} assume !false; {14736#false} is VALID [2022-02-20 18:08:05,849 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 8 proven. 1 refuted. 0 times theorem prover too weak. 19 trivial. 0 not checked. [2022-02-20 18:08:05,849 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:08:05,849 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [299524947] [2022-02-20 18:08:05,850 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [299524947] provided 0 perfect and 1 imperfect interpolant sequences [2022-02-20 18:08:05,850 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [140095003] [2022-02-20 18:08:05,850 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:08:05,850 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-02-20 18:08:05,850 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-20 18:08:05,851 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-02-20 18:08:05,852 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-02-20 18:08:05,944 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:05,946 INFO L263 TraceCheckSpWp]: Trace formula consists of 465 conjuncts, 5 conjunts are in the unsatisfiable core [2022-02-20 18:08:05,960 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:05,962 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 18:08:06,177 INFO L290 TraceCheckUtils]: 0: Hoare triple {14735#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(13, 12);call #Ultimate.allocInit(7, 13);call write~init~int(44, 13, 0, 1);call write~init~int(77, 13, 1, 1);call write~init~int(101, 13, 2, 1);call write~init~int(116, 13, 3, 1);call write~init~int(104, 13, 4, 1);call write~init~int(58, 13, 5, 1);call write~init~int(0, 13, 6, 1);call #Ultimate.allocInit(5, 14);call write~init~int(67, 14, 0, 1);call write~init~int(82, 14, 1, 1);call write~init~int(73, 14, 2, 1);call write~init~int(84, 14, 3, 1);call write~init~int(0, 14, 4, 1);call #Ultimate.allocInit(3, 15);call write~init~int(79, 15, 0, 1);call write~init~int(75, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(41, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4;~methAndRunningLastTime~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0; {14735#true} is VALID [2022-02-20 18:08:06,177 INFO L290 TraceCheckUtils]: 1: Hoare triple {14735#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret21#1, main_~retValue_acc~4#1, main_~tmp~5#1;havoc main_~retValue_acc~4#1;havoc main_~tmp~5#1;assume { :begin_inline_select_helpers } true; {14735#true} is VALID [2022-02-20 18:08:06,177 INFO L290 TraceCheckUtils]: 2: Hoare triple {14735#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {14735#true} is VALID [2022-02-20 18:08:06,177 INFO L290 TraceCheckUtils]: 3: Hoare triple {14735#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~6#1;havoc valid_product_~retValue_acc~6#1;valid_product_~retValue_acc~6#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~6#1; {14735#true} is VALID [2022-02-20 18:08:06,177 INFO L290 TraceCheckUtils]: 4: Hoare triple {14735#true} main_#t~ret21#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret21#1 && main_#t~ret21#1 <= 2147483647;main_~tmp~5#1 := main_#t~ret21#1;havoc main_#t~ret21#1; {14735#true} is VALID [2022-02-20 18:08:06,178 INFO L290 TraceCheckUtils]: 5: Hoare triple {14735#true} assume 0 != main_~tmp~5#1;assume { :begin_inline_setup } true; {14735#true} is VALID [2022-02-20 18:08:06,178 INFO L290 TraceCheckUtils]: 6: Hoare triple {14735#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0; {14735#true} is VALID [2022-02-20 18:08:06,178 INFO L290 TraceCheckUtils]: 7: Hoare triple {14735#true} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet4#1, test_#t~nondet5#1, test_#t~nondet6#1, test_#t~nondet7#1, test_~splverifierCounter~0#1, test_~tmp~0#1, test_~tmp___0~0#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~0#1;havoc test_~tmp___0~0#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {14735#true} is VALID [2022-02-20 18:08:06,178 INFO L290 TraceCheckUtils]: 8: Hoare triple {14735#true} assume !false; {14735#true} is VALID [2022-02-20 18:08:06,178 INFO L290 TraceCheckUtils]: 9: Hoare triple {14735#true} assume test_~splverifierCounter~0#1 < 4; {14735#true} is VALID [2022-02-20 18:08:06,178 INFO L290 TraceCheckUtils]: 10: Hoare triple {14735#true} assume -2147483648 <= test_#t~nondet4#1 && test_#t~nondet4#1 <= 2147483647;test_~tmp~0#1 := test_#t~nondet4#1;havoc test_#t~nondet4#1; {14735#true} is VALID [2022-02-20 18:08:06,178 INFO L290 TraceCheckUtils]: 11: Hoare triple {14735#true} assume 0 != test_~tmp~0#1; {14735#true} is VALID [2022-02-20 18:08:06,178 INFO L272 TraceCheckUtils]: 12: Hoare triple {14735#true} call waterRise(); {14735#true} is VALID [2022-02-20 18:08:06,179 INFO L290 TraceCheckUtils]: 13: Hoare triple {14735#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {14735#true} is VALID [2022-02-20 18:08:06,179 INFO L290 TraceCheckUtils]: 14: Hoare triple {14735#true} assume true; {14735#true} is VALID [2022-02-20 18:08:06,179 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {14735#true} {14735#true} #259#return; {14735#true} is VALID [2022-02-20 18:08:06,179 INFO L290 TraceCheckUtils]: 16: Hoare triple {14735#true} assume -2147483648 <= test_#t~nondet5#1 && test_#t~nondet5#1 <= 2147483647;test_~tmp___0~0#1 := test_#t~nondet5#1;havoc test_#t~nondet5#1; {14735#true} is VALID [2022-02-20 18:08:06,179 INFO L290 TraceCheckUtils]: 17: Hoare triple {14735#true} assume !(0 != test_~tmp___0~0#1); {14735#true} is VALID [2022-02-20 18:08:06,179 INFO L290 TraceCheckUtils]: 18: Hoare triple {14735#true} assume -2147483648 <= test_#t~nondet6#1 && test_#t~nondet6#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet6#1;havoc test_#t~nondet6#1; {14735#true} is VALID [2022-02-20 18:08:06,179 INFO L290 TraceCheckUtils]: 19: Hoare triple {14735#true} assume 0 != test_~tmp___2~0#1;assume { :begin_inline_startSystem } true;~systemActive~0 := 1; {14735#true} is VALID [2022-02-20 18:08:06,179 INFO L290 TraceCheckUtils]: 20: Hoare triple {14735#true} assume { :end_inline_startSystem } true; {14735#true} is VALID [2022-02-20 18:08:06,180 INFO L272 TraceCheckUtils]: 21: Hoare triple {14735#true} call timeShift(); {14735#true} is VALID [2022-02-20 18:08:06,180 INFO L290 TraceCheckUtils]: 22: Hoare triple {14735#true} assume !(0 != ~pumpRunning~0); {14735#true} is VALID [2022-02-20 18:08:06,180 INFO L290 TraceCheckUtils]: 23: Hoare triple {14735#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret9#1, processEnvironment_~tmp~2#1;havoc processEnvironment_~tmp~2#1; {14735#true} is VALID [2022-02-20 18:08:06,180 INFO L290 TraceCheckUtils]: 24: Hoare triple {14735#true} assume !(0 != ~pumpRunning~0); {14735#true} is VALID [2022-02-20 18:08:06,180 INFO L272 TraceCheckUtils]: 25: Hoare triple {14735#true} call processEnvironment__wrappee__highWaterSensor(); {14735#true} is VALID [2022-02-20 18:08:06,180 INFO L290 TraceCheckUtils]: 26: Hoare triple {14735#true} havoc ~tmp~1#1; {14735#true} is VALID [2022-02-20 18:08:06,180 INFO L290 TraceCheckUtils]: 27: Hoare triple {14735#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret19#1, isHighWaterLevel_~retValue_acc~2#1, isHighWaterLevel_~tmp~3#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~2#1;havoc isHighWaterLevel_~tmp~3#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~9#1;havoc isHighWaterSensorDry_~retValue_acc~9#1; {14735#true} is VALID [2022-02-20 18:08:06,180 INFO L290 TraceCheckUtils]: 28: Hoare triple {14735#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~9#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~9#1; {14735#true} is VALID [2022-02-20 18:08:06,180 INFO L290 TraceCheckUtils]: 29: Hoare triple {14735#true} isHighWaterLevel_#t~ret19#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret19#1 && isHighWaterLevel_#t~ret19#1 <= 2147483647;isHighWaterLevel_~tmp~3#1 := isHighWaterLevel_#t~ret19#1;havoc isHighWaterLevel_#t~ret19#1; {14735#true} is VALID [2022-02-20 18:08:06,181 INFO L290 TraceCheckUtils]: 30: Hoare triple {14735#true} assume !(0 != isHighWaterLevel_~tmp~3#1);isHighWaterLevel_~tmp___0~1#1 := 1; {14735#true} is VALID [2022-02-20 18:08:06,181 INFO L290 TraceCheckUtils]: 31: Hoare triple {14735#true} isHighWaterLevel_~retValue_acc~2#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~2#1; {14735#true} is VALID [2022-02-20 18:08:06,181 INFO L290 TraceCheckUtils]: 32: Hoare triple {14735#true} #t~ret8#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret8#1 && #t~ret8#1 <= 2147483647;~tmp~1#1 := #t~ret8#1;havoc #t~ret8#1; {14735#true} is VALID [2022-02-20 18:08:06,181 INFO L290 TraceCheckUtils]: 33: Hoare triple {14735#true} assume 0 != ~tmp~1#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {14735#true} is VALID [2022-02-20 18:08:06,181 INFO L290 TraceCheckUtils]: 34: Hoare triple {14735#true} assume { :end_inline_activatePump } true; {14735#true} is VALID [2022-02-20 18:08:06,181 INFO L290 TraceCheckUtils]: 35: Hoare triple {14735#true} assume true; {14735#true} is VALID [2022-02-20 18:08:06,181 INFO L284 TraceCheckUtils]: 36: Hoare quadruple {14735#true} {14735#true} #255#return; {14735#true} is VALID [2022-02-20 18:08:06,181 INFO L290 TraceCheckUtils]: 37: Hoare triple {14735#true} assume { :end_inline_processEnvironment } true; {14735#true} is VALID [2022-02-20 18:08:06,182 INFO L290 TraceCheckUtils]: 38: Hoare triple {14735#true} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret22#1, __utac_acc__Specification2_spec__2_#t~ret23#1, __utac_acc__Specification2_spec__2_~tmp~6#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~6#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {14735#true} is VALID [2022-02-20 18:08:06,182 INFO L272 TraceCheckUtils]: 39: Hoare triple {14735#true} call __utac_acc__Specification2_spec__2_#t~ret22#1 := isMethaneLevelCritical(); {14735#true} is VALID [2022-02-20 18:08:06,182 INFO L290 TraceCheckUtils]: 40: Hoare triple {14735#true} havoc ~retValue_acc~7;~retValue_acc~7 := ~methaneLevelCritical~0;#res := ~retValue_acc~7; {14735#true} is VALID [2022-02-20 18:08:06,182 INFO L290 TraceCheckUtils]: 41: Hoare triple {14735#true} assume true; {14735#true} is VALID [2022-02-20 18:08:06,182 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {14735#true} {14735#true} #257#return; {14735#true} is VALID [2022-02-20 18:08:06,182 INFO L290 TraceCheckUtils]: 43: Hoare triple {14735#true} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret22#1 && __utac_acc__Specification2_spec__2_#t~ret22#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~6#1 := __utac_acc__Specification2_spec__2_#t~ret22#1;havoc __utac_acc__Specification2_spec__2_#t~ret22#1; {14735#true} is VALID [2022-02-20 18:08:06,182 INFO L290 TraceCheckUtils]: 44: Hoare triple {14735#true} assume 0 != __utac_acc__Specification2_spec__2_~tmp~6#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~1#1;havoc isPumpRunning_~retValue_acc~1#1;isPumpRunning_~retValue_acc~1#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~1#1; {14735#true} is VALID [2022-02-20 18:08:06,182 INFO L290 TraceCheckUtils]: 45: Hoare triple {14735#true} __utac_acc__Specification2_spec__2_#t~ret23#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret23#1 && __utac_acc__Specification2_spec__2_#t~ret23#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret23#1;havoc __utac_acc__Specification2_spec__2_#t~ret23#1; {14735#true} is VALID [2022-02-20 18:08:06,183 INFO L290 TraceCheckUtils]: 46: Hoare triple {14735#true} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {14735#true} is VALID [2022-02-20 18:08:06,183 INFO L290 TraceCheckUtils]: 47: Hoare triple {14735#true} assume !(0 != ~methAndRunningLastTime~0);~methAndRunningLastTime~0 := 1; {14735#true} is VALID [2022-02-20 18:08:06,183 INFO L290 TraceCheckUtils]: 48: Hoare triple {14735#true} assume { :end_inline___utac_acc__Specification2_spec__2 } true; {14735#true} is VALID [2022-02-20 18:08:06,183 INFO L290 TraceCheckUtils]: 49: Hoare triple {14735#true} assume true; {14735#true} is VALID [2022-02-20 18:08:06,183 INFO L284 TraceCheckUtils]: 50: Hoare quadruple {14735#true} {14735#true} #265#return; {14735#true} is VALID [2022-02-20 18:08:06,183 INFO L290 TraceCheckUtils]: 51: Hoare triple {14735#true} assume !false; {14735#true} is VALID [2022-02-20 18:08:06,183 INFO L290 TraceCheckUtils]: 52: Hoare triple {14735#true} assume test_~splverifierCounter~0#1 < 4; {14735#true} is VALID [2022-02-20 18:08:06,183 INFO L290 TraceCheckUtils]: 53: Hoare triple {14735#true} assume -2147483648 <= test_#t~nondet4#1 && test_#t~nondet4#1 <= 2147483647;test_~tmp~0#1 := test_#t~nondet4#1;havoc test_#t~nondet4#1; {14735#true} is VALID [2022-02-20 18:08:06,184 INFO L290 TraceCheckUtils]: 54: Hoare triple {14735#true} assume !(0 != test_~tmp~0#1); {14735#true} is VALID [2022-02-20 18:08:06,184 INFO L290 TraceCheckUtils]: 55: Hoare triple {14735#true} assume -2147483648 <= test_#t~nondet5#1 && test_#t~nondet5#1 <= 2147483647;test_~tmp___0~0#1 := test_#t~nondet5#1;havoc test_#t~nondet5#1; {14735#true} is VALID [2022-02-20 18:08:06,184 INFO L290 TraceCheckUtils]: 56: Hoare triple {14735#true} assume !(0 != test_~tmp___0~0#1); {14735#true} is VALID [2022-02-20 18:08:06,184 INFO L290 TraceCheckUtils]: 57: Hoare triple {14735#true} assume -2147483648 <= test_#t~nondet6#1 && test_#t~nondet6#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet6#1;havoc test_#t~nondet6#1; {14735#true} is VALID [2022-02-20 18:08:06,184 INFO L290 TraceCheckUtils]: 58: Hoare triple {14735#true} assume 0 != test_~tmp___2~0#1;assume { :begin_inline_startSystem } true;~systemActive~0 := 1; {14735#true} is VALID [2022-02-20 18:08:06,184 INFO L290 TraceCheckUtils]: 59: Hoare triple {14735#true} assume { :end_inline_startSystem } true; {14735#true} is VALID [2022-02-20 18:08:06,184 INFO L272 TraceCheckUtils]: 60: Hoare triple {14735#true} call timeShift(); {14735#true} is VALID [2022-02-20 18:08:06,184 INFO L290 TraceCheckUtils]: 61: Hoare triple {14735#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {14735#true} is VALID [2022-02-20 18:08:06,184 INFO L290 TraceCheckUtils]: 62: Hoare triple {14735#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {14735#true} is VALID [2022-02-20 18:08:06,185 INFO L290 TraceCheckUtils]: 63: Hoare triple {14735#true} assume { :end_inline_lowerWaterLevel } true; {14735#true} is VALID [2022-02-20 18:08:06,185 INFO L290 TraceCheckUtils]: 64: Hoare triple {14735#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret9#1, processEnvironment_~tmp~2#1;havoc processEnvironment_~tmp~2#1; {14735#true} is VALID [2022-02-20 18:08:06,185 INFO L290 TraceCheckUtils]: 65: Hoare triple {14735#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret20#1, isLowWaterLevel_~retValue_acc~3#1, isLowWaterLevel_~tmp~4#1, isLowWaterLevel_~tmp___0~2#1;havoc isLowWaterLevel_~retValue_acc~3#1;havoc isLowWaterLevel_~tmp~4#1;havoc isLowWaterLevel_~tmp___0~2#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~10#1;havoc isLowWaterSensorDry_~retValue_acc~10#1;isLowWaterSensorDry_~retValue_acc~10#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~10#1; {14735#true} is VALID [2022-02-20 18:08:06,185 INFO L290 TraceCheckUtils]: 66: Hoare triple {14735#true} isLowWaterLevel_#t~ret20#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret20#1 && isLowWaterLevel_#t~ret20#1 <= 2147483647;isLowWaterLevel_~tmp~4#1 := isLowWaterLevel_#t~ret20#1;havoc isLowWaterLevel_#t~ret20#1; {14735#true} is VALID [2022-02-20 18:08:06,185 INFO L290 TraceCheckUtils]: 67: Hoare triple {14735#true} assume !(0 != isLowWaterLevel_~tmp~4#1);isLowWaterLevel_~tmp___0~2#1 := 1; {15007#(<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)} is VALID [2022-02-20 18:08:06,186 INFO L290 TraceCheckUtils]: 68: Hoare triple {15007#(<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)} isLowWaterLevel_~retValue_acc~3#1 := isLowWaterLevel_~tmp___0~2#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~3#1; {15011#(<= 1 |timeShift_isLowWaterLevel_#res#1|)} is VALID [2022-02-20 18:08:06,186 INFO L290 TraceCheckUtils]: 69: Hoare triple {15011#(<= 1 |timeShift_isLowWaterLevel_#res#1|)} processEnvironment_#t~ret9#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret9#1 && processEnvironment_#t~ret9#1 <= 2147483647;processEnvironment_~tmp~2#1 := processEnvironment_#t~ret9#1;havoc processEnvironment_#t~ret9#1; {15015#(<= 1 |timeShift_processEnvironment_~tmp~2#1|)} is VALID [2022-02-20 18:08:06,187 INFO L290 TraceCheckUtils]: 70: Hoare triple {15015#(<= 1 |timeShift_processEnvironment_~tmp~2#1|)} assume !(0 != processEnvironment_~tmp~2#1); {14736#false} is VALID [2022-02-20 18:08:06,187 INFO L272 TraceCheckUtils]: 71: Hoare triple {14736#false} call processEnvironment__wrappee__highWaterSensor(); {14736#false} is VALID [2022-02-20 18:08:06,187 INFO L290 TraceCheckUtils]: 72: Hoare triple {14736#false} havoc ~tmp~1#1; {14736#false} is VALID [2022-02-20 18:08:06,187 INFO L290 TraceCheckUtils]: 73: Hoare triple {14736#false} assume !(0 == ~pumpRunning~0); {14736#false} is VALID [2022-02-20 18:08:06,187 INFO L272 TraceCheckUtils]: 74: Hoare triple {14736#false} call processEnvironment__wrappee__base(); {14736#false} is VALID [2022-02-20 18:08:06,187 INFO L290 TraceCheckUtils]: 75: Hoare triple {14736#false} assume true; {14736#false} is VALID [2022-02-20 18:08:06,187 INFO L284 TraceCheckUtils]: 76: Hoare quadruple {14736#false} {14736#false} #271#return; {14736#false} is VALID [2022-02-20 18:08:06,187 INFO L290 TraceCheckUtils]: 77: Hoare triple {14736#false} assume true; {14736#false} is VALID [2022-02-20 18:08:06,188 INFO L284 TraceCheckUtils]: 78: Hoare quadruple {14736#false} {14736#false} #253#return; {14736#false} is VALID [2022-02-20 18:08:06,188 INFO L290 TraceCheckUtils]: 79: Hoare triple {14736#false} assume { :end_inline_processEnvironment } true; {14736#false} is VALID [2022-02-20 18:08:06,188 INFO L290 TraceCheckUtils]: 80: Hoare triple {14736#false} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret22#1, __utac_acc__Specification2_spec__2_#t~ret23#1, __utac_acc__Specification2_spec__2_~tmp~6#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~6#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {14736#false} is VALID [2022-02-20 18:08:06,188 INFO L272 TraceCheckUtils]: 81: Hoare triple {14736#false} call __utac_acc__Specification2_spec__2_#t~ret22#1 := isMethaneLevelCritical(); {14736#false} is VALID [2022-02-20 18:08:06,188 INFO L290 TraceCheckUtils]: 82: Hoare triple {14736#false} havoc ~retValue_acc~7;~retValue_acc~7 := ~methaneLevelCritical~0;#res := ~retValue_acc~7; {14736#false} is VALID [2022-02-20 18:08:06,188 INFO L290 TraceCheckUtils]: 83: Hoare triple {14736#false} assume true; {14736#false} is VALID [2022-02-20 18:08:06,188 INFO L284 TraceCheckUtils]: 84: Hoare quadruple {14736#false} {14736#false} #257#return; {14736#false} is VALID [2022-02-20 18:08:06,188 INFO L290 TraceCheckUtils]: 85: Hoare triple {14736#false} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret22#1 && __utac_acc__Specification2_spec__2_#t~ret22#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~6#1 := __utac_acc__Specification2_spec__2_#t~ret22#1;havoc __utac_acc__Specification2_spec__2_#t~ret22#1; {14736#false} is VALID [2022-02-20 18:08:06,188 INFO L290 TraceCheckUtils]: 86: Hoare triple {14736#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~6#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~1#1;havoc isPumpRunning_~retValue_acc~1#1;isPumpRunning_~retValue_acc~1#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~1#1; {14736#false} is VALID [2022-02-20 18:08:06,189 INFO L290 TraceCheckUtils]: 87: Hoare triple {14736#false} __utac_acc__Specification2_spec__2_#t~ret23#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret23#1 && __utac_acc__Specification2_spec__2_#t~ret23#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret23#1;havoc __utac_acc__Specification2_spec__2_#t~ret23#1; {14736#false} is VALID [2022-02-20 18:08:06,189 INFO L290 TraceCheckUtils]: 88: Hoare triple {14736#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {14736#false} is VALID [2022-02-20 18:08:06,189 INFO L290 TraceCheckUtils]: 89: Hoare triple {14736#false} assume 0 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {14736#false} is VALID [2022-02-20 18:08:06,189 INFO L290 TraceCheckUtils]: 90: Hoare triple {14736#false} assume !false; {14736#false} is VALID [2022-02-20 18:08:06,189 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2022-02-20 18:08:06,189 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-02-20 18:08:06,190 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleZ3 [140095003] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:08:06,190 INFO L191 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-02-20 18:08:06,190 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [10] total 13 [2022-02-20 18:08:06,190 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1718557956] [2022-02-20 18:08:06,190 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:08:06,191 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 13.4) internal successors, (67), 5 states have internal predecessors, (67), 2 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 91 [2022-02-20 18:08:06,191 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:08:06,191 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 5 states, 5 states have (on average 13.4) internal successors, (67), 5 states have internal predecessors, (67), 2 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:08:06,234 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 81 edges. 81 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:06,234 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-02-20 18:08:06,234 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:08:06,235 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-02-20 18:08:06,235 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=28, Invalid=128, Unknown=0, NotChecked=0, Total=156 [2022-02-20 18:08:06,235 INFO L87 Difference]: Start difference. First operand 501 states and 616 transitions. Second operand has 5 states, 5 states have (on average 13.4) internal successors, (67), 5 states have internal predecessors, (67), 2 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:08:06,537 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:06,537 INFO L93 Difference]: Finished difference Result 944 states and 1188 transitions. [2022-02-20 18:08:06,537 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-02-20 18:08:06,538 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 13.4) internal successors, (67), 5 states have internal predecessors, (67), 2 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 91 [2022-02-20 18:08:06,538 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:08:06,538 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 13.4) internal successors, (67), 5 states have internal predecessors, (67), 2 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:08:06,540 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 211 transitions. [2022-02-20 18:08:06,540 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 13.4) internal successors, (67), 5 states have internal predecessors, (67), 2 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:08:06,541 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 211 transitions. [2022-02-20 18:08:06,541 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 211 transitions. [2022-02-20 18:08:06,654 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 211 edges. 211 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:06,669 INFO L225 Difference]: With dead ends: 944 [2022-02-20 18:08:06,669 INFO L226 Difference]: Without dead ends: 535 [2022-02-20 18:08:06,670 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 115 GetRequests, 102 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 13 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=43, Invalid=167, Unknown=0, NotChecked=0, Total=210 [2022-02-20 18:08:06,671 INFO L933 BasicCegarLoop]: 110 mSDtfsCounter, 33 mSDsluCounter, 294 mSDsCounter, 0 mSdLazyCounter, 14 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 33 SdHoareTripleChecker+Valid, 404 SdHoareTripleChecker+Invalid, 20 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 14 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:08:06,671 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [33 Valid, 404 Invalid, 20 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 14 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:08:06,671 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 535 states. [2022-02-20 18:08:06,759 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 535 to 507. [2022-02-20 18:08:06,759 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:08:06,760 INFO L82 GeneralOperation]: Start isEquivalent. First operand 535 states. Second operand has 507 states, 391 states have (on average 1.2225063938618925) internal successors, (478), 418 states have internal predecessors, (478), 59 states have call successors, (59), 51 states have call predecessors, (59), 56 states have return successors, (85), 58 states have call predecessors, (85), 59 states have call successors, (85) [2022-02-20 18:08:06,761 INFO L74 IsIncluded]: Start isIncluded. First operand 535 states. Second operand has 507 states, 391 states have (on average 1.2225063938618925) internal successors, (478), 418 states have internal predecessors, (478), 59 states have call successors, (59), 51 states have call predecessors, (59), 56 states have return successors, (85), 58 states have call predecessors, (85), 59 states have call successors, (85) [2022-02-20 18:08:06,761 INFO L87 Difference]: Start difference. First operand 535 states. Second operand has 507 states, 391 states have (on average 1.2225063938618925) internal successors, (478), 418 states have internal predecessors, (478), 59 states have call successors, (59), 51 states have call predecessors, (59), 56 states have return successors, (85), 58 states have call predecessors, (85), 59 states have call successors, (85) [2022-02-20 18:08:06,773 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:06,773 INFO L93 Difference]: Finished difference Result 535 states and 660 transitions. [2022-02-20 18:08:06,773 INFO L276 IsEmpty]: Start isEmpty. Operand 535 states and 660 transitions. [2022-02-20 18:08:06,774 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:06,774 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:06,775 INFO L74 IsIncluded]: Start isIncluded. First operand has 507 states, 391 states have (on average 1.2225063938618925) internal successors, (478), 418 states have internal predecessors, (478), 59 states have call successors, (59), 51 states have call predecessors, (59), 56 states have return successors, (85), 58 states have call predecessors, (85), 59 states have call successors, (85) Second operand 535 states. [2022-02-20 18:08:06,776 INFO L87 Difference]: Start difference. First operand has 507 states, 391 states have (on average 1.2225063938618925) internal successors, (478), 418 states have internal predecessors, (478), 59 states have call successors, (59), 51 states have call predecessors, (59), 56 states have return successors, (85), 58 states have call predecessors, (85), 59 states have call successors, (85) Second operand 535 states. [2022-02-20 18:08:06,794 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:06,794 INFO L93 Difference]: Finished difference Result 535 states and 660 transitions. [2022-02-20 18:08:06,794 INFO L276 IsEmpty]: Start isEmpty. Operand 535 states and 660 transitions. [2022-02-20 18:08:06,796 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:06,796 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:06,796 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:08:06,796 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:08:06,797 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 507 states, 391 states have (on average 1.2225063938618925) internal successors, (478), 418 states have internal predecessors, (478), 59 states have call successors, (59), 51 states have call predecessors, (59), 56 states have return successors, (85), 58 states have call predecessors, (85), 59 states have call successors, (85) [2022-02-20 18:08:06,811 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 507 states to 507 states and 622 transitions. [2022-02-20 18:08:06,811 INFO L78 Accepts]: Start accepts. Automaton has 507 states and 622 transitions. Word has length 91 [2022-02-20 18:08:06,811 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:08:06,812 INFO L470 AbstractCegarLoop]: Abstraction has 507 states and 622 transitions. [2022-02-20 18:08:06,812 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 13.4) internal successors, (67), 5 states have internal predecessors, (67), 2 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:08:06,812 INFO L276 IsEmpty]: Start isEmpty. Operand 507 states and 622 transitions. [2022-02-20 18:08:06,813 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 92 [2022-02-20 18:08:06,813 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:08:06,813 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:08:06,834 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2022-02-20 18:08:07,027 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-02-20 18:08:07,027 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:08:07,028 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:08:07,028 INFO L85 PathProgramCache]: Analyzing trace with hash 1355186253, now seen corresponding path program 1 times [2022-02-20 18:08:07,028 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:08:07,028 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2047405809] [2022-02-20 18:08:07,028 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:08:07,028 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:08:07,051 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:07,066 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-02-20 18:08:07,068 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:07,070 INFO L290 TraceCheckUtils]: 0: Hoare triple {18205#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {18160#true} is VALID [2022-02-20 18:08:07,070 INFO L290 TraceCheckUtils]: 1: Hoare triple {18160#true} assume true; {18160#true} is VALID [2022-02-20 18:08:07,071 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {18160#true} {18162#(= ~methaneLevelCritical~0 0)} #259#return; {18162#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:07,075 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-02-20 18:08:07,081 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:07,104 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-02-20 18:08:07,107 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:07,109 INFO L290 TraceCheckUtils]: 0: Hoare triple {18224#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {18160#true} is VALID [2022-02-20 18:08:07,109 INFO L290 TraceCheckUtils]: 1: Hoare triple {18160#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret19#1, isHighWaterLevel_~retValue_acc~2#1, isHighWaterLevel_~tmp~3#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~2#1;havoc isHighWaterLevel_~tmp~3#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~9#1;havoc isHighWaterSensorDry_~retValue_acc~9#1; {18160#true} is VALID [2022-02-20 18:08:07,110 INFO L290 TraceCheckUtils]: 2: Hoare triple {18160#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~9#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~9#1; {18160#true} is VALID [2022-02-20 18:08:07,110 INFO L290 TraceCheckUtils]: 3: Hoare triple {18160#true} isHighWaterLevel_#t~ret19#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret19#1 && isHighWaterLevel_#t~ret19#1 <= 2147483647;isHighWaterLevel_~tmp~3#1 := isHighWaterLevel_#t~ret19#1;havoc isHighWaterLevel_#t~ret19#1; {18160#true} is VALID [2022-02-20 18:08:07,110 INFO L290 TraceCheckUtils]: 4: Hoare triple {18160#true} assume !(0 != isHighWaterLevel_~tmp~3#1);isHighWaterLevel_~tmp___0~1#1 := 1; {18160#true} is VALID [2022-02-20 18:08:07,110 INFO L290 TraceCheckUtils]: 5: Hoare triple {18160#true} isHighWaterLevel_~retValue_acc~2#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~2#1; {18160#true} is VALID [2022-02-20 18:08:07,110 INFO L290 TraceCheckUtils]: 6: Hoare triple {18160#true} #t~ret8#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret8#1 && #t~ret8#1 <= 2147483647;~tmp~1#1 := #t~ret8#1;havoc #t~ret8#1; {18160#true} is VALID [2022-02-20 18:08:07,110 INFO L290 TraceCheckUtils]: 7: Hoare triple {18160#true} assume 0 != ~tmp~1#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {18160#true} is VALID [2022-02-20 18:08:07,111 INFO L290 TraceCheckUtils]: 8: Hoare triple {18160#true} assume { :end_inline_activatePump } true; {18160#true} is VALID [2022-02-20 18:08:07,111 INFO L290 TraceCheckUtils]: 9: Hoare triple {18160#true} assume true; {18160#true} is VALID [2022-02-20 18:08:07,111 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {18160#true} {18160#true} #255#return; {18160#true} is VALID [2022-02-20 18:08:07,111 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-02-20 18:08:07,112 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:07,119 INFO L290 TraceCheckUtils]: 0: Hoare triple {18160#true} havoc ~retValue_acc~7;~retValue_acc~7 := ~methaneLevelCritical~0;#res := ~retValue_acc~7; {18225#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:07,120 INFO L290 TraceCheckUtils]: 1: Hoare triple {18225#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} assume true; {18225#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:07,120 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {18225#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} {18160#true} #257#return; {18221#(= |timeShift___utac_acc__Specification2_spec__2_#t~ret22#1| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:07,121 INFO L290 TraceCheckUtils]: 0: Hoare triple {18206#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0) (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))} assume !(0 != ~pumpRunning~0); {18160#true} is VALID [2022-02-20 18:08:07,121 INFO L290 TraceCheckUtils]: 1: Hoare triple {18160#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret9#1, processEnvironment_~tmp~2#1;havoc processEnvironment_~tmp~2#1; {18160#true} is VALID [2022-02-20 18:08:07,121 INFO L290 TraceCheckUtils]: 2: Hoare triple {18160#true} assume !(0 != ~pumpRunning~0); {18160#true} is VALID [2022-02-20 18:08:07,121 INFO L272 TraceCheckUtils]: 3: Hoare triple {18160#true} call processEnvironment__wrappee__highWaterSensor(); {18224#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:07,121 INFO L290 TraceCheckUtils]: 4: Hoare triple {18224#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {18160#true} is VALID [2022-02-20 18:08:07,122 INFO L290 TraceCheckUtils]: 5: Hoare triple {18160#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret19#1, isHighWaterLevel_~retValue_acc~2#1, isHighWaterLevel_~tmp~3#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~2#1;havoc isHighWaterLevel_~tmp~3#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~9#1;havoc isHighWaterSensorDry_~retValue_acc~9#1; {18160#true} is VALID [2022-02-20 18:08:07,122 INFO L290 TraceCheckUtils]: 6: Hoare triple {18160#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~9#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~9#1; {18160#true} is VALID [2022-02-20 18:08:07,122 INFO L290 TraceCheckUtils]: 7: Hoare triple {18160#true} isHighWaterLevel_#t~ret19#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret19#1 && isHighWaterLevel_#t~ret19#1 <= 2147483647;isHighWaterLevel_~tmp~3#1 := isHighWaterLevel_#t~ret19#1;havoc isHighWaterLevel_#t~ret19#1; {18160#true} is VALID [2022-02-20 18:08:07,122 INFO L290 TraceCheckUtils]: 8: Hoare triple {18160#true} assume !(0 != isHighWaterLevel_~tmp~3#1);isHighWaterLevel_~tmp___0~1#1 := 1; {18160#true} is VALID [2022-02-20 18:08:07,122 INFO L290 TraceCheckUtils]: 9: Hoare triple {18160#true} isHighWaterLevel_~retValue_acc~2#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~2#1; {18160#true} is VALID [2022-02-20 18:08:07,122 INFO L290 TraceCheckUtils]: 10: Hoare triple {18160#true} #t~ret8#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret8#1 && #t~ret8#1 <= 2147483647;~tmp~1#1 := #t~ret8#1;havoc #t~ret8#1; {18160#true} is VALID [2022-02-20 18:08:07,122 INFO L290 TraceCheckUtils]: 11: Hoare triple {18160#true} assume 0 != ~tmp~1#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {18160#true} is VALID [2022-02-20 18:08:07,123 INFO L290 TraceCheckUtils]: 12: Hoare triple {18160#true} assume { :end_inline_activatePump } true; {18160#true} is VALID [2022-02-20 18:08:07,123 INFO L290 TraceCheckUtils]: 13: Hoare triple {18160#true} assume true; {18160#true} is VALID [2022-02-20 18:08:07,123 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {18160#true} {18160#true} #255#return; {18160#true} is VALID [2022-02-20 18:08:07,123 INFO L290 TraceCheckUtils]: 15: Hoare triple {18160#true} assume { :end_inline_processEnvironment } true; {18160#true} is VALID [2022-02-20 18:08:07,123 INFO L290 TraceCheckUtils]: 16: Hoare triple {18160#true} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret22#1, __utac_acc__Specification2_spec__2_#t~ret23#1, __utac_acc__Specification2_spec__2_~tmp~6#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~6#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {18160#true} is VALID [2022-02-20 18:08:07,123 INFO L272 TraceCheckUtils]: 17: Hoare triple {18160#true} call __utac_acc__Specification2_spec__2_#t~ret22#1 := isMethaneLevelCritical(); {18160#true} is VALID [2022-02-20 18:08:07,124 INFO L290 TraceCheckUtils]: 18: Hoare triple {18160#true} havoc ~retValue_acc~7;~retValue_acc~7 := ~methaneLevelCritical~0;#res := ~retValue_acc~7; {18225#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:07,124 INFO L290 TraceCheckUtils]: 19: Hoare triple {18225#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} assume true; {18225#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:07,125 INFO L284 TraceCheckUtils]: 20: Hoare quadruple {18225#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} {18160#true} #257#return; {18221#(= |timeShift___utac_acc__Specification2_spec__2_#t~ret22#1| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:07,125 INFO L290 TraceCheckUtils]: 21: Hoare triple {18221#(= |timeShift___utac_acc__Specification2_spec__2_#t~ret22#1| ~methaneLevelCritical~0)} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret22#1 && __utac_acc__Specification2_spec__2_#t~ret22#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~6#1 := __utac_acc__Specification2_spec__2_#t~ret22#1;havoc __utac_acc__Specification2_spec__2_#t~ret22#1; {18222#(= |timeShift___utac_acc__Specification2_spec__2_~tmp~6#1| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:07,125 INFO L290 TraceCheckUtils]: 22: Hoare triple {18222#(= |timeShift___utac_acc__Specification2_spec__2_~tmp~6#1| ~methaneLevelCritical~0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp~6#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~1#1;havoc isPumpRunning_~retValue_acc~1#1;isPumpRunning_~retValue_acc~1#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~1#1; {18223#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:08:07,126 INFO L290 TraceCheckUtils]: 23: Hoare triple {18223#(not (= ~methaneLevelCritical~0 0))} __utac_acc__Specification2_spec__2_#t~ret23#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret23#1 && __utac_acc__Specification2_spec__2_#t~ret23#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret23#1;havoc __utac_acc__Specification2_spec__2_#t~ret23#1; {18223#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:08:07,126 INFO L290 TraceCheckUtils]: 24: Hoare triple {18223#(not (= ~methaneLevelCritical~0 0))} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {18223#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:08:07,126 INFO L290 TraceCheckUtils]: 25: Hoare triple {18223#(not (= ~methaneLevelCritical~0 0))} assume !(0 != ~methAndRunningLastTime~0);~methAndRunningLastTime~0 := 1; {18223#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:08:07,127 INFO L290 TraceCheckUtils]: 26: Hoare triple {18223#(not (= ~methaneLevelCritical~0 0))} assume { :end_inline___utac_acc__Specification2_spec__2 } true; {18223#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:08:07,127 INFO L290 TraceCheckUtils]: 27: Hoare triple {18223#(not (= ~methaneLevelCritical~0 0))} assume true; {18223#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:08:07,127 INFO L284 TraceCheckUtils]: 28: Hoare quadruple {18223#(not (= ~methaneLevelCritical~0 0))} {18162#(= ~methaneLevelCritical~0 0)} #265#return; {18161#false} is VALID [2022-02-20 18:08:07,128 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2022-02-20 18:08:07,129 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:07,130 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-02-20 18:08:07,131 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:07,133 INFO L290 TraceCheckUtils]: 0: Hoare triple {18160#true} assume true; {18160#true} is VALID [2022-02-20 18:08:07,133 INFO L284 TraceCheckUtils]: 1: Hoare quadruple {18160#true} {18160#true} #271#return; {18160#true} is VALID [2022-02-20 18:08:07,133 INFO L290 TraceCheckUtils]: 0: Hoare triple {18224#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {18160#true} is VALID [2022-02-20 18:08:07,133 INFO L290 TraceCheckUtils]: 1: Hoare triple {18160#true} assume !(0 == ~pumpRunning~0); {18160#true} is VALID [2022-02-20 18:08:07,133 INFO L272 TraceCheckUtils]: 2: Hoare triple {18160#true} call processEnvironment__wrappee__base(); {18160#true} is VALID [2022-02-20 18:08:07,133 INFO L290 TraceCheckUtils]: 3: Hoare triple {18160#true} assume true; {18160#true} is VALID [2022-02-20 18:08:07,134 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {18160#true} {18160#true} #271#return; {18160#true} is VALID [2022-02-20 18:08:07,134 INFO L290 TraceCheckUtils]: 5: Hoare triple {18160#true} assume true; {18160#true} is VALID [2022-02-20 18:08:07,134 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {18160#true} {18161#false} #253#return; {18161#false} is VALID [2022-02-20 18:08:07,134 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 81 [2022-02-20 18:08:07,135 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:07,136 INFO L290 TraceCheckUtils]: 0: Hoare triple {18160#true} havoc ~retValue_acc~7;~retValue_acc~7 := ~methaneLevelCritical~0;#res := ~retValue_acc~7; {18160#true} is VALID [2022-02-20 18:08:07,137 INFO L290 TraceCheckUtils]: 1: Hoare triple {18160#true} assume true; {18160#true} is VALID [2022-02-20 18:08:07,137 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {18160#true} {18161#false} #257#return; {18161#false} is VALID [2022-02-20 18:08:07,138 INFO L290 TraceCheckUtils]: 0: Hoare triple {18160#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(13, 12);call #Ultimate.allocInit(7, 13);call write~init~int(44, 13, 0, 1);call write~init~int(77, 13, 1, 1);call write~init~int(101, 13, 2, 1);call write~init~int(116, 13, 3, 1);call write~init~int(104, 13, 4, 1);call write~init~int(58, 13, 5, 1);call write~init~int(0, 13, 6, 1);call #Ultimate.allocInit(5, 14);call write~init~int(67, 14, 0, 1);call write~init~int(82, 14, 1, 1);call write~init~int(73, 14, 2, 1);call write~init~int(84, 14, 3, 1);call write~init~int(0, 14, 4, 1);call #Ultimate.allocInit(3, 15);call write~init~int(79, 15, 0, 1);call write~init~int(75, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(41, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4;~methAndRunningLastTime~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0; {18162#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:07,138 INFO L290 TraceCheckUtils]: 1: Hoare triple {18162#(= ~methaneLevelCritical~0 0)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret21#1, main_~retValue_acc~4#1, main_~tmp~5#1;havoc main_~retValue_acc~4#1;havoc main_~tmp~5#1;assume { :begin_inline_select_helpers } true; {18162#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:07,138 INFO L290 TraceCheckUtils]: 2: Hoare triple {18162#(= ~methaneLevelCritical~0 0)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {18162#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:07,139 INFO L290 TraceCheckUtils]: 3: Hoare triple {18162#(= ~methaneLevelCritical~0 0)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~6#1;havoc valid_product_~retValue_acc~6#1;valid_product_~retValue_acc~6#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~6#1; {18162#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:07,140 INFO L290 TraceCheckUtils]: 4: Hoare triple {18162#(= ~methaneLevelCritical~0 0)} main_#t~ret21#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret21#1 && main_#t~ret21#1 <= 2147483647;main_~tmp~5#1 := main_#t~ret21#1;havoc main_#t~ret21#1; {18162#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:07,141 INFO L290 TraceCheckUtils]: 5: Hoare triple {18162#(= ~methaneLevelCritical~0 0)} assume 0 != main_~tmp~5#1;assume { :begin_inline_setup } true; {18162#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:07,141 INFO L290 TraceCheckUtils]: 6: Hoare triple {18162#(= ~methaneLevelCritical~0 0)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0; {18162#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:07,141 INFO L290 TraceCheckUtils]: 7: Hoare triple {18162#(= ~methaneLevelCritical~0 0)} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet4#1, test_#t~nondet5#1, test_#t~nondet6#1, test_#t~nondet7#1, test_~splverifierCounter~0#1, test_~tmp~0#1, test_~tmp___0~0#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~0#1;havoc test_~tmp___0~0#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {18162#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:07,144 INFO L290 TraceCheckUtils]: 8: Hoare triple {18162#(= ~methaneLevelCritical~0 0)} assume !false; {18162#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:07,145 INFO L290 TraceCheckUtils]: 9: Hoare triple {18162#(= ~methaneLevelCritical~0 0)} assume test_~splverifierCounter~0#1 < 4; {18162#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:07,145 INFO L290 TraceCheckUtils]: 10: Hoare triple {18162#(= ~methaneLevelCritical~0 0)} assume -2147483648 <= test_#t~nondet4#1 && test_#t~nondet4#1 <= 2147483647;test_~tmp~0#1 := test_#t~nondet4#1;havoc test_#t~nondet4#1; {18162#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:07,145 INFO L290 TraceCheckUtils]: 11: Hoare triple {18162#(= ~methaneLevelCritical~0 0)} assume 0 != test_~tmp~0#1; {18162#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:07,146 INFO L272 TraceCheckUtils]: 12: Hoare triple {18162#(= ~methaneLevelCritical~0 0)} call waterRise(); {18205#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:08:07,146 INFO L290 TraceCheckUtils]: 13: Hoare triple {18205#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {18160#true} is VALID [2022-02-20 18:08:07,146 INFO L290 TraceCheckUtils]: 14: Hoare triple {18160#true} assume true; {18160#true} is VALID [2022-02-20 18:08:07,146 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {18160#true} {18162#(= ~methaneLevelCritical~0 0)} #259#return; {18162#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:07,147 INFO L290 TraceCheckUtils]: 16: Hoare triple {18162#(= ~methaneLevelCritical~0 0)} assume -2147483648 <= test_#t~nondet5#1 && test_#t~nondet5#1 <= 2147483647;test_~tmp___0~0#1 := test_#t~nondet5#1;havoc test_#t~nondet5#1; {18162#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:07,147 INFO L290 TraceCheckUtils]: 17: Hoare triple {18162#(= ~methaneLevelCritical~0 0)} assume !(0 != test_~tmp___0~0#1); {18162#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:07,147 INFO L290 TraceCheckUtils]: 18: Hoare triple {18162#(= ~methaneLevelCritical~0 0)} assume -2147483648 <= test_#t~nondet6#1 && test_#t~nondet6#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet6#1;havoc test_#t~nondet6#1; {18162#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:07,148 INFO L290 TraceCheckUtils]: 19: Hoare triple {18162#(= ~methaneLevelCritical~0 0)} assume 0 != test_~tmp___2~0#1;assume { :begin_inline_startSystem } true;~systemActive~0 := 1; {18162#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:07,148 INFO L290 TraceCheckUtils]: 20: Hoare triple {18162#(= ~methaneLevelCritical~0 0)} assume { :end_inline_startSystem } true; {18162#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:07,148 INFO L272 TraceCheckUtils]: 21: Hoare triple {18162#(= ~methaneLevelCritical~0 0)} call timeShift(); {18206#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0) (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))} is VALID [2022-02-20 18:08:07,149 INFO L290 TraceCheckUtils]: 22: Hoare triple {18206#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0) (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))} assume !(0 != ~pumpRunning~0); {18160#true} is VALID [2022-02-20 18:08:07,149 INFO L290 TraceCheckUtils]: 23: Hoare triple {18160#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret9#1, processEnvironment_~tmp~2#1;havoc processEnvironment_~tmp~2#1; {18160#true} is VALID [2022-02-20 18:08:07,149 INFO L290 TraceCheckUtils]: 24: Hoare triple {18160#true} assume !(0 != ~pumpRunning~0); {18160#true} is VALID [2022-02-20 18:08:07,149 INFO L272 TraceCheckUtils]: 25: Hoare triple {18160#true} call processEnvironment__wrappee__highWaterSensor(); {18224#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:07,150 INFO L290 TraceCheckUtils]: 26: Hoare triple {18224#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {18160#true} is VALID [2022-02-20 18:08:07,150 INFO L290 TraceCheckUtils]: 27: Hoare triple {18160#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret19#1, isHighWaterLevel_~retValue_acc~2#1, isHighWaterLevel_~tmp~3#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~2#1;havoc isHighWaterLevel_~tmp~3#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~9#1;havoc isHighWaterSensorDry_~retValue_acc~9#1; {18160#true} is VALID [2022-02-20 18:08:07,150 INFO L290 TraceCheckUtils]: 28: Hoare triple {18160#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~9#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~9#1; {18160#true} is VALID [2022-02-20 18:08:07,150 INFO L290 TraceCheckUtils]: 29: Hoare triple {18160#true} isHighWaterLevel_#t~ret19#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret19#1 && isHighWaterLevel_#t~ret19#1 <= 2147483647;isHighWaterLevel_~tmp~3#1 := isHighWaterLevel_#t~ret19#1;havoc isHighWaterLevel_#t~ret19#1; {18160#true} is VALID [2022-02-20 18:08:07,150 INFO L290 TraceCheckUtils]: 30: Hoare triple {18160#true} assume !(0 != isHighWaterLevel_~tmp~3#1);isHighWaterLevel_~tmp___0~1#1 := 1; {18160#true} is VALID [2022-02-20 18:08:07,150 INFO L290 TraceCheckUtils]: 31: Hoare triple {18160#true} isHighWaterLevel_~retValue_acc~2#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~2#1; {18160#true} is VALID [2022-02-20 18:08:07,151 INFO L290 TraceCheckUtils]: 32: Hoare triple {18160#true} #t~ret8#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret8#1 && #t~ret8#1 <= 2147483647;~tmp~1#1 := #t~ret8#1;havoc #t~ret8#1; {18160#true} is VALID [2022-02-20 18:08:07,151 INFO L290 TraceCheckUtils]: 33: Hoare triple {18160#true} assume 0 != ~tmp~1#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {18160#true} is VALID [2022-02-20 18:08:07,151 INFO L290 TraceCheckUtils]: 34: Hoare triple {18160#true} assume { :end_inline_activatePump } true; {18160#true} is VALID [2022-02-20 18:08:07,151 INFO L290 TraceCheckUtils]: 35: Hoare triple {18160#true} assume true; {18160#true} is VALID [2022-02-20 18:08:07,151 INFO L284 TraceCheckUtils]: 36: Hoare quadruple {18160#true} {18160#true} #255#return; {18160#true} is VALID [2022-02-20 18:08:07,151 INFO L290 TraceCheckUtils]: 37: Hoare triple {18160#true} assume { :end_inline_processEnvironment } true; {18160#true} is VALID [2022-02-20 18:08:07,151 INFO L290 TraceCheckUtils]: 38: Hoare triple {18160#true} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret22#1, __utac_acc__Specification2_spec__2_#t~ret23#1, __utac_acc__Specification2_spec__2_~tmp~6#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~6#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {18160#true} is VALID [2022-02-20 18:08:07,152 INFO L272 TraceCheckUtils]: 39: Hoare triple {18160#true} call __utac_acc__Specification2_spec__2_#t~ret22#1 := isMethaneLevelCritical(); {18160#true} is VALID [2022-02-20 18:08:07,152 INFO L290 TraceCheckUtils]: 40: Hoare triple {18160#true} havoc ~retValue_acc~7;~retValue_acc~7 := ~methaneLevelCritical~0;#res := ~retValue_acc~7; {18225#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:07,152 INFO L290 TraceCheckUtils]: 41: Hoare triple {18225#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} assume true; {18225#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:07,153 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {18225#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} {18160#true} #257#return; {18221#(= |timeShift___utac_acc__Specification2_spec__2_#t~ret22#1| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:07,153 INFO L290 TraceCheckUtils]: 43: Hoare triple {18221#(= |timeShift___utac_acc__Specification2_spec__2_#t~ret22#1| ~methaneLevelCritical~0)} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret22#1 && __utac_acc__Specification2_spec__2_#t~ret22#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~6#1 := __utac_acc__Specification2_spec__2_#t~ret22#1;havoc __utac_acc__Specification2_spec__2_#t~ret22#1; {18222#(= |timeShift___utac_acc__Specification2_spec__2_~tmp~6#1| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:07,154 INFO L290 TraceCheckUtils]: 44: Hoare triple {18222#(= |timeShift___utac_acc__Specification2_spec__2_~tmp~6#1| ~methaneLevelCritical~0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp~6#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~1#1;havoc isPumpRunning_~retValue_acc~1#1;isPumpRunning_~retValue_acc~1#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~1#1; {18223#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:08:07,154 INFO L290 TraceCheckUtils]: 45: Hoare triple {18223#(not (= ~methaneLevelCritical~0 0))} __utac_acc__Specification2_spec__2_#t~ret23#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret23#1 && __utac_acc__Specification2_spec__2_#t~ret23#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret23#1;havoc __utac_acc__Specification2_spec__2_#t~ret23#1; {18223#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:08:07,154 INFO L290 TraceCheckUtils]: 46: Hoare triple {18223#(not (= ~methaneLevelCritical~0 0))} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {18223#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:08:07,154 INFO L290 TraceCheckUtils]: 47: Hoare triple {18223#(not (= ~methaneLevelCritical~0 0))} assume !(0 != ~methAndRunningLastTime~0);~methAndRunningLastTime~0 := 1; {18223#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:08:07,155 INFO L290 TraceCheckUtils]: 48: Hoare triple {18223#(not (= ~methaneLevelCritical~0 0))} assume { :end_inline___utac_acc__Specification2_spec__2 } true; {18223#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:08:07,155 INFO L290 TraceCheckUtils]: 49: Hoare triple {18223#(not (= ~methaneLevelCritical~0 0))} assume true; {18223#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:08:07,156 INFO L284 TraceCheckUtils]: 50: Hoare quadruple {18223#(not (= ~methaneLevelCritical~0 0))} {18162#(= ~methaneLevelCritical~0 0)} #265#return; {18161#false} is VALID [2022-02-20 18:08:07,156 INFO L290 TraceCheckUtils]: 51: Hoare triple {18161#false} assume !false; {18161#false} is VALID [2022-02-20 18:08:07,156 INFO L290 TraceCheckUtils]: 52: Hoare triple {18161#false} assume test_~splverifierCounter~0#1 < 4; {18161#false} is VALID [2022-02-20 18:08:07,156 INFO L290 TraceCheckUtils]: 53: Hoare triple {18161#false} assume -2147483648 <= test_#t~nondet4#1 && test_#t~nondet4#1 <= 2147483647;test_~tmp~0#1 := test_#t~nondet4#1;havoc test_#t~nondet4#1; {18161#false} is VALID [2022-02-20 18:08:07,156 INFO L290 TraceCheckUtils]: 54: Hoare triple {18161#false} assume !(0 != test_~tmp~0#1); {18161#false} is VALID [2022-02-20 18:08:07,156 INFO L290 TraceCheckUtils]: 55: Hoare triple {18161#false} assume -2147483648 <= test_#t~nondet5#1 && test_#t~nondet5#1 <= 2147483647;test_~tmp___0~0#1 := test_#t~nondet5#1;havoc test_#t~nondet5#1; {18161#false} is VALID [2022-02-20 18:08:07,156 INFO L290 TraceCheckUtils]: 56: Hoare triple {18161#false} assume !(0 != test_~tmp___0~0#1); {18161#false} is VALID [2022-02-20 18:08:07,156 INFO L290 TraceCheckUtils]: 57: Hoare triple {18161#false} assume -2147483648 <= test_#t~nondet6#1 && test_#t~nondet6#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet6#1;havoc test_#t~nondet6#1; {18161#false} is VALID [2022-02-20 18:08:07,157 INFO L290 TraceCheckUtils]: 58: Hoare triple {18161#false} assume 0 != test_~tmp___2~0#1;assume { :begin_inline_startSystem } true;~systemActive~0 := 1; {18161#false} is VALID [2022-02-20 18:08:07,157 INFO L290 TraceCheckUtils]: 59: Hoare triple {18161#false} assume { :end_inline_startSystem } true; {18161#false} is VALID [2022-02-20 18:08:07,157 INFO L272 TraceCheckUtils]: 60: Hoare triple {18161#false} call timeShift(); {18161#false} is VALID [2022-02-20 18:08:07,157 INFO L290 TraceCheckUtils]: 61: Hoare triple {18161#false} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {18161#false} is VALID [2022-02-20 18:08:07,157 INFO L290 TraceCheckUtils]: 62: Hoare triple {18161#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {18161#false} is VALID [2022-02-20 18:08:07,157 INFO L290 TraceCheckUtils]: 63: Hoare triple {18161#false} assume { :end_inline_lowerWaterLevel } true; {18161#false} is VALID [2022-02-20 18:08:07,157 INFO L290 TraceCheckUtils]: 64: Hoare triple {18161#false} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret9#1, processEnvironment_~tmp~2#1;havoc processEnvironment_~tmp~2#1; {18161#false} is VALID [2022-02-20 18:08:07,158 INFO L290 TraceCheckUtils]: 65: Hoare triple {18161#false} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret20#1, isLowWaterLevel_~retValue_acc~3#1, isLowWaterLevel_~tmp~4#1, isLowWaterLevel_~tmp___0~2#1;havoc isLowWaterLevel_~retValue_acc~3#1;havoc isLowWaterLevel_~tmp~4#1;havoc isLowWaterLevel_~tmp___0~2#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~10#1;havoc isLowWaterSensorDry_~retValue_acc~10#1;isLowWaterSensorDry_~retValue_acc~10#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~10#1; {18161#false} is VALID [2022-02-20 18:08:07,158 INFO L290 TraceCheckUtils]: 66: Hoare triple {18161#false} isLowWaterLevel_#t~ret20#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret20#1 && isLowWaterLevel_#t~ret20#1 <= 2147483647;isLowWaterLevel_~tmp~4#1 := isLowWaterLevel_#t~ret20#1;havoc isLowWaterLevel_#t~ret20#1; {18161#false} is VALID [2022-02-20 18:08:07,158 INFO L290 TraceCheckUtils]: 67: Hoare triple {18161#false} assume 0 != isLowWaterLevel_~tmp~4#1;isLowWaterLevel_~tmp___0~2#1 := 0; {18161#false} is VALID [2022-02-20 18:08:07,158 INFO L290 TraceCheckUtils]: 68: Hoare triple {18161#false} isLowWaterLevel_~retValue_acc~3#1 := isLowWaterLevel_~tmp___0~2#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~3#1; {18161#false} is VALID [2022-02-20 18:08:07,158 INFO L290 TraceCheckUtils]: 69: Hoare triple {18161#false} processEnvironment_#t~ret9#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret9#1 && processEnvironment_#t~ret9#1 <= 2147483647;processEnvironment_~tmp~2#1 := processEnvironment_#t~ret9#1;havoc processEnvironment_#t~ret9#1; {18161#false} is VALID [2022-02-20 18:08:07,158 INFO L290 TraceCheckUtils]: 70: Hoare triple {18161#false} assume !(0 != processEnvironment_~tmp~2#1); {18161#false} is VALID [2022-02-20 18:08:07,159 INFO L272 TraceCheckUtils]: 71: Hoare triple {18161#false} call processEnvironment__wrappee__highWaterSensor(); {18224#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:07,159 INFO L290 TraceCheckUtils]: 72: Hoare triple {18224#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {18160#true} is VALID [2022-02-20 18:08:07,159 INFO L290 TraceCheckUtils]: 73: Hoare triple {18160#true} assume !(0 == ~pumpRunning~0); {18160#true} is VALID [2022-02-20 18:08:07,159 INFO L272 TraceCheckUtils]: 74: Hoare triple {18160#true} call processEnvironment__wrappee__base(); {18160#true} is VALID [2022-02-20 18:08:07,159 INFO L290 TraceCheckUtils]: 75: Hoare triple {18160#true} assume true; {18160#true} is VALID [2022-02-20 18:08:07,159 INFO L284 TraceCheckUtils]: 76: Hoare quadruple {18160#true} {18160#true} #271#return; {18160#true} is VALID [2022-02-20 18:08:07,159 INFO L290 TraceCheckUtils]: 77: Hoare triple {18160#true} assume true; {18160#true} is VALID [2022-02-20 18:08:07,160 INFO L284 TraceCheckUtils]: 78: Hoare quadruple {18160#true} {18161#false} #253#return; {18161#false} is VALID [2022-02-20 18:08:07,160 INFO L290 TraceCheckUtils]: 79: Hoare triple {18161#false} assume { :end_inline_processEnvironment } true; {18161#false} is VALID [2022-02-20 18:08:07,160 INFO L290 TraceCheckUtils]: 80: Hoare triple {18161#false} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret22#1, __utac_acc__Specification2_spec__2_#t~ret23#1, __utac_acc__Specification2_spec__2_~tmp~6#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~6#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {18161#false} is VALID [2022-02-20 18:08:07,160 INFO L272 TraceCheckUtils]: 81: Hoare triple {18161#false} call __utac_acc__Specification2_spec__2_#t~ret22#1 := isMethaneLevelCritical(); {18160#true} is VALID [2022-02-20 18:08:07,160 INFO L290 TraceCheckUtils]: 82: Hoare triple {18160#true} havoc ~retValue_acc~7;~retValue_acc~7 := ~methaneLevelCritical~0;#res := ~retValue_acc~7; {18160#true} is VALID [2022-02-20 18:08:07,160 INFO L290 TraceCheckUtils]: 83: Hoare triple {18160#true} assume true; {18160#true} is VALID [2022-02-20 18:08:07,160 INFO L284 TraceCheckUtils]: 84: Hoare quadruple {18160#true} {18161#false} #257#return; {18161#false} is VALID [2022-02-20 18:08:07,160 INFO L290 TraceCheckUtils]: 85: Hoare triple {18161#false} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret22#1 && __utac_acc__Specification2_spec__2_#t~ret22#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~6#1 := __utac_acc__Specification2_spec__2_#t~ret22#1;havoc __utac_acc__Specification2_spec__2_#t~ret22#1; {18161#false} is VALID [2022-02-20 18:08:07,161 INFO L290 TraceCheckUtils]: 86: Hoare triple {18161#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~6#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~1#1;havoc isPumpRunning_~retValue_acc~1#1;isPumpRunning_~retValue_acc~1#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~1#1; {18161#false} is VALID [2022-02-20 18:08:07,161 INFO L290 TraceCheckUtils]: 87: Hoare triple {18161#false} __utac_acc__Specification2_spec__2_#t~ret23#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret23#1 && __utac_acc__Specification2_spec__2_#t~ret23#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret23#1;havoc __utac_acc__Specification2_spec__2_#t~ret23#1; {18161#false} is VALID [2022-02-20 18:08:07,161 INFO L290 TraceCheckUtils]: 88: Hoare triple {18161#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {18161#false} is VALID [2022-02-20 18:08:07,161 INFO L290 TraceCheckUtils]: 89: Hoare triple {18161#false} assume 0 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {18161#false} is VALID [2022-02-20 18:08:07,161 INFO L290 TraceCheckUtils]: 90: Hoare triple {18161#false} assume !false; {18161#false} is VALID [2022-02-20 18:08:07,162 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 21 proven. 2 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2022-02-20 18:08:07,162 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:08:07,162 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2047405809] [2022-02-20 18:08:07,162 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2047405809] provided 0 perfect and 1 imperfect interpolant sequences [2022-02-20 18:08:07,162 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1406337256] [2022-02-20 18:08:07,162 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:08:07,163 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-02-20 18:08:07,163 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-20 18:08:07,164 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-02-20 18:08:07,165 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-02-20 18:08:07,245 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:07,248 INFO L263 TraceCheckSpWp]: Trace formula consists of 464 conjuncts, 11 conjunts are in the unsatisfiable core [2022-02-20 18:08:07,267 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:07,268 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 18:08:07,554 INFO L290 TraceCheckUtils]: 0: Hoare triple {18160#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(13, 12);call #Ultimate.allocInit(7, 13);call write~init~int(44, 13, 0, 1);call write~init~int(77, 13, 1, 1);call write~init~int(101, 13, 2, 1);call write~init~int(116, 13, 3, 1);call write~init~int(104, 13, 4, 1);call write~init~int(58, 13, 5, 1);call write~init~int(0, 13, 6, 1);call #Ultimate.allocInit(5, 14);call write~init~int(67, 14, 0, 1);call write~init~int(82, 14, 1, 1);call write~init~int(73, 14, 2, 1);call write~init~int(84, 14, 3, 1);call write~init~int(0, 14, 4, 1);call #Ultimate.allocInit(3, 15);call write~init~int(79, 15, 0, 1);call write~init~int(75, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(41, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4;~methAndRunningLastTime~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0; {18160#true} is VALID [2022-02-20 18:08:07,554 INFO L290 TraceCheckUtils]: 1: Hoare triple {18160#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret21#1, main_~retValue_acc~4#1, main_~tmp~5#1;havoc main_~retValue_acc~4#1;havoc main_~tmp~5#1;assume { :begin_inline_select_helpers } true; {18160#true} is VALID [2022-02-20 18:08:07,555 INFO L290 TraceCheckUtils]: 2: Hoare triple {18160#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {18160#true} is VALID [2022-02-20 18:08:07,555 INFO L290 TraceCheckUtils]: 3: Hoare triple {18160#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~6#1;havoc valid_product_~retValue_acc~6#1;valid_product_~retValue_acc~6#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~6#1; {18160#true} is VALID [2022-02-20 18:08:07,555 INFO L290 TraceCheckUtils]: 4: Hoare triple {18160#true} main_#t~ret21#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret21#1 && main_#t~ret21#1 <= 2147483647;main_~tmp~5#1 := main_#t~ret21#1;havoc main_#t~ret21#1; {18160#true} is VALID [2022-02-20 18:08:07,555 INFO L290 TraceCheckUtils]: 5: Hoare triple {18160#true} assume 0 != main_~tmp~5#1;assume { :begin_inline_setup } true; {18160#true} is VALID [2022-02-20 18:08:07,555 INFO L290 TraceCheckUtils]: 6: Hoare triple {18160#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0; {18160#true} is VALID [2022-02-20 18:08:07,555 INFO L290 TraceCheckUtils]: 7: Hoare triple {18160#true} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet4#1, test_#t~nondet5#1, test_#t~nondet6#1, test_#t~nondet7#1, test_~splverifierCounter~0#1, test_~tmp~0#1, test_~tmp___0~0#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~0#1;havoc test_~tmp___0~0#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {18160#true} is VALID [2022-02-20 18:08:07,555 INFO L290 TraceCheckUtils]: 8: Hoare triple {18160#true} assume !false; {18160#true} is VALID [2022-02-20 18:08:07,555 INFO L290 TraceCheckUtils]: 9: Hoare triple {18160#true} assume test_~splverifierCounter~0#1 < 4; {18160#true} is VALID [2022-02-20 18:08:07,556 INFO L290 TraceCheckUtils]: 10: Hoare triple {18160#true} assume -2147483648 <= test_#t~nondet4#1 && test_#t~nondet4#1 <= 2147483647;test_~tmp~0#1 := test_#t~nondet4#1;havoc test_#t~nondet4#1; {18160#true} is VALID [2022-02-20 18:08:07,556 INFO L290 TraceCheckUtils]: 11: Hoare triple {18160#true} assume 0 != test_~tmp~0#1; {18160#true} is VALID [2022-02-20 18:08:07,556 INFO L272 TraceCheckUtils]: 12: Hoare triple {18160#true} call waterRise(); {18160#true} is VALID [2022-02-20 18:08:07,556 INFO L290 TraceCheckUtils]: 13: Hoare triple {18160#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {18160#true} is VALID [2022-02-20 18:08:07,556 INFO L290 TraceCheckUtils]: 14: Hoare triple {18160#true} assume true; {18160#true} is VALID [2022-02-20 18:08:07,556 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {18160#true} {18160#true} #259#return; {18160#true} is VALID [2022-02-20 18:08:07,556 INFO L290 TraceCheckUtils]: 16: Hoare triple {18160#true} assume -2147483648 <= test_#t~nondet5#1 && test_#t~nondet5#1 <= 2147483647;test_~tmp___0~0#1 := test_#t~nondet5#1;havoc test_#t~nondet5#1; {18160#true} is VALID [2022-02-20 18:08:07,556 INFO L290 TraceCheckUtils]: 17: Hoare triple {18160#true} assume !(0 != test_~tmp___0~0#1); {18160#true} is VALID [2022-02-20 18:08:07,557 INFO L290 TraceCheckUtils]: 18: Hoare triple {18160#true} assume -2147483648 <= test_#t~nondet6#1 && test_#t~nondet6#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet6#1;havoc test_#t~nondet6#1; {18160#true} is VALID [2022-02-20 18:08:07,557 INFO L290 TraceCheckUtils]: 19: Hoare triple {18160#true} assume 0 != test_~tmp___2~0#1;assume { :begin_inline_startSystem } true;~systemActive~0 := 1; {18160#true} is VALID [2022-02-20 18:08:07,557 INFO L290 TraceCheckUtils]: 20: Hoare triple {18160#true} assume { :end_inline_startSystem } true; {18160#true} is VALID [2022-02-20 18:08:07,557 INFO L272 TraceCheckUtils]: 21: Hoare triple {18160#true} call timeShift(); {18160#true} is VALID [2022-02-20 18:08:07,557 INFO L290 TraceCheckUtils]: 22: Hoare triple {18160#true} assume !(0 != ~pumpRunning~0); {18160#true} is VALID [2022-02-20 18:08:07,557 INFO L290 TraceCheckUtils]: 23: Hoare triple {18160#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret9#1, processEnvironment_~tmp~2#1;havoc processEnvironment_~tmp~2#1; {18160#true} is VALID [2022-02-20 18:08:07,557 INFO L290 TraceCheckUtils]: 24: Hoare triple {18160#true} assume !(0 != ~pumpRunning~0); {18160#true} is VALID [2022-02-20 18:08:07,557 INFO L272 TraceCheckUtils]: 25: Hoare triple {18160#true} call processEnvironment__wrappee__highWaterSensor(); {18160#true} is VALID [2022-02-20 18:08:07,558 INFO L290 TraceCheckUtils]: 26: Hoare triple {18160#true} havoc ~tmp~1#1; {18160#true} is VALID [2022-02-20 18:08:07,558 INFO L290 TraceCheckUtils]: 27: Hoare triple {18160#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret19#1, isHighWaterLevel_~retValue_acc~2#1, isHighWaterLevel_~tmp~3#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~2#1;havoc isHighWaterLevel_~tmp~3#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~9#1;havoc isHighWaterSensorDry_~retValue_acc~9#1; {18160#true} is VALID [2022-02-20 18:08:07,558 INFO L290 TraceCheckUtils]: 28: Hoare triple {18160#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~9#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~9#1; {18315#(not (< ~waterLevel~0 2))} is VALID [2022-02-20 18:08:07,558 INFO L290 TraceCheckUtils]: 29: Hoare triple {18315#(not (< ~waterLevel~0 2))} isHighWaterLevel_#t~ret19#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret19#1 && isHighWaterLevel_#t~ret19#1 <= 2147483647;isHighWaterLevel_~tmp~3#1 := isHighWaterLevel_#t~ret19#1;havoc isHighWaterLevel_#t~ret19#1; {18315#(not (< ~waterLevel~0 2))} is VALID [2022-02-20 18:08:07,559 INFO L290 TraceCheckUtils]: 30: Hoare triple {18315#(not (< ~waterLevel~0 2))} assume !(0 != isHighWaterLevel_~tmp~3#1);isHighWaterLevel_~tmp___0~1#1 := 1; {18315#(not (< ~waterLevel~0 2))} is VALID [2022-02-20 18:08:07,559 INFO L290 TraceCheckUtils]: 31: Hoare triple {18315#(not (< ~waterLevel~0 2))} isHighWaterLevel_~retValue_acc~2#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~2#1; {18315#(not (< ~waterLevel~0 2))} is VALID [2022-02-20 18:08:07,559 INFO L290 TraceCheckUtils]: 32: Hoare triple {18315#(not (< ~waterLevel~0 2))} #t~ret8#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret8#1 && #t~ret8#1 <= 2147483647;~tmp~1#1 := #t~ret8#1;havoc #t~ret8#1; {18315#(not (< ~waterLevel~0 2))} is VALID [2022-02-20 18:08:07,559 INFO L290 TraceCheckUtils]: 33: Hoare triple {18315#(not (< ~waterLevel~0 2))} assume 0 != ~tmp~1#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {18315#(not (< ~waterLevel~0 2))} is VALID [2022-02-20 18:08:07,560 INFO L290 TraceCheckUtils]: 34: Hoare triple {18315#(not (< ~waterLevel~0 2))} assume { :end_inline_activatePump } true; {18315#(not (< ~waterLevel~0 2))} is VALID [2022-02-20 18:08:07,560 INFO L290 TraceCheckUtils]: 35: Hoare triple {18315#(not (< ~waterLevel~0 2))} assume true; {18315#(not (< ~waterLevel~0 2))} is VALID [2022-02-20 18:08:07,560 INFO L284 TraceCheckUtils]: 36: Hoare quadruple {18315#(not (< ~waterLevel~0 2))} {18160#true} #255#return; {18315#(not (< ~waterLevel~0 2))} is VALID [2022-02-20 18:08:07,561 INFO L290 TraceCheckUtils]: 37: Hoare triple {18315#(not (< ~waterLevel~0 2))} assume { :end_inline_processEnvironment } true; {18315#(not (< ~waterLevel~0 2))} is VALID [2022-02-20 18:08:07,561 INFO L290 TraceCheckUtils]: 38: Hoare triple {18315#(not (< ~waterLevel~0 2))} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret22#1, __utac_acc__Specification2_spec__2_#t~ret23#1, __utac_acc__Specification2_spec__2_~tmp~6#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~6#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {18315#(not (< ~waterLevel~0 2))} is VALID [2022-02-20 18:08:07,561 INFO L272 TraceCheckUtils]: 39: Hoare triple {18315#(not (< ~waterLevel~0 2))} call __utac_acc__Specification2_spec__2_#t~ret22#1 := isMethaneLevelCritical(); {18315#(not (< ~waterLevel~0 2))} is VALID [2022-02-20 18:08:07,561 INFO L290 TraceCheckUtils]: 40: Hoare triple {18315#(not (< ~waterLevel~0 2))} havoc ~retValue_acc~7;~retValue_acc~7 := ~methaneLevelCritical~0;#res := ~retValue_acc~7; {18315#(not (< ~waterLevel~0 2))} is VALID [2022-02-20 18:08:07,562 INFO L290 TraceCheckUtils]: 41: Hoare triple {18315#(not (< ~waterLevel~0 2))} assume true; {18315#(not (< ~waterLevel~0 2))} is VALID [2022-02-20 18:08:07,562 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {18315#(not (< ~waterLevel~0 2))} {18315#(not (< ~waterLevel~0 2))} #257#return; {18315#(not (< ~waterLevel~0 2))} is VALID [2022-02-20 18:08:07,562 INFO L290 TraceCheckUtils]: 43: Hoare triple {18315#(not (< ~waterLevel~0 2))} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret22#1 && __utac_acc__Specification2_spec__2_#t~ret22#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~6#1 := __utac_acc__Specification2_spec__2_#t~ret22#1;havoc __utac_acc__Specification2_spec__2_#t~ret22#1; {18315#(not (< ~waterLevel~0 2))} is VALID [2022-02-20 18:08:07,563 INFO L290 TraceCheckUtils]: 44: Hoare triple {18315#(not (< ~waterLevel~0 2))} assume 0 != __utac_acc__Specification2_spec__2_~tmp~6#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~1#1;havoc isPumpRunning_~retValue_acc~1#1;isPumpRunning_~retValue_acc~1#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~1#1; {18315#(not (< ~waterLevel~0 2))} is VALID [2022-02-20 18:08:07,563 INFO L290 TraceCheckUtils]: 45: Hoare triple {18315#(not (< ~waterLevel~0 2))} __utac_acc__Specification2_spec__2_#t~ret23#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret23#1 && __utac_acc__Specification2_spec__2_#t~ret23#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret23#1;havoc __utac_acc__Specification2_spec__2_#t~ret23#1; {18315#(not (< ~waterLevel~0 2))} is VALID [2022-02-20 18:08:07,563 INFO L290 TraceCheckUtils]: 46: Hoare triple {18315#(not (< ~waterLevel~0 2))} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {18315#(not (< ~waterLevel~0 2))} is VALID [2022-02-20 18:08:07,564 INFO L290 TraceCheckUtils]: 47: Hoare triple {18315#(not (< ~waterLevel~0 2))} assume !(0 != ~methAndRunningLastTime~0);~methAndRunningLastTime~0 := 1; {18315#(not (< ~waterLevel~0 2))} is VALID [2022-02-20 18:08:07,564 INFO L290 TraceCheckUtils]: 48: Hoare triple {18315#(not (< ~waterLevel~0 2))} assume { :end_inline___utac_acc__Specification2_spec__2 } true; {18315#(not (< ~waterLevel~0 2))} is VALID [2022-02-20 18:08:07,564 INFO L290 TraceCheckUtils]: 49: Hoare triple {18315#(not (< ~waterLevel~0 2))} assume true; {18315#(not (< ~waterLevel~0 2))} is VALID [2022-02-20 18:08:07,564 INFO L284 TraceCheckUtils]: 50: Hoare quadruple {18315#(not (< ~waterLevel~0 2))} {18160#true} #265#return; {18315#(not (< ~waterLevel~0 2))} is VALID [2022-02-20 18:08:07,565 INFO L290 TraceCheckUtils]: 51: Hoare triple {18315#(not (< ~waterLevel~0 2))} assume !false; {18315#(not (< ~waterLevel~0 2))} is VALID [2022-02-20 18:08:07,565 INFO L290 TraceCheckUtils]: 52: Hoare triple {18315#(not (< ~waterLevel~0 2))} assume test_~splverifierCounter~0#1 < 4; {18315#(not (< ~waterLevel~0 2))} is VALID [2022-02-20 18:08:07,565 INFO L290 TraceCheckUtils]: 53: Hoare triple {18315#(not (< ~waterLevel~0 2))} assume -2147483648 <= test_#t~nondet4#1 && test_#t~nondet4#1 <= 2147483647;test_~tmp~0#1 := test_#t~nondet4#1;havoc test_#t~nondet4#1; {18315#(not (< ~waterLevel~0 2))} is VALID [2022-02-20 18:08:07,565 INFO L290 TraceCheckUtils]: 54: Hoare triple {18315#(not (< ~waterLevel~0 2))} assume !(0 != test_~tmp~0#1); {18315#(not (< ~waterLevel~0 2))} is VALID [2022-02-20 18:08:07,566 INFO L290 TraceCheckUtils]: 55: Hoare triple {18315#(not (< ~waterLevel~0 2))} assume -2147483648 <= test_#t~nondet5#1 && test_#t~nondet5#1 <= 2147483647;test_~tmp___0~0#1 := test_#t~nondet5#1;havoc test_#t~nondet5#1; {18315#(not (< ~waterLevel~0 2))} is VALID [2022-02-20 18:08:07,566 INFO L290 TraceCheckUtils]: 56: Hoare triple {18315#(not (< ~waterLevel~0 2))} assume !(0 != test_~tmp___0~0#1); {18315#(not (< ~waterLevel~0 2))} is VALID [2022-02-20 18:08:07,566 INFO L290 TraceCheckUtils]: 57: Hoare triple {18315#(not (< ~waterLevel~0 2))} assume -2147483648 <= test_#t~nondet6#1 && test_#t~nondet6#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet6#1;havoc test_#t~nondet6#1; {18315#(not (< ~waterLevel~0 2))} is VALID [2022-02-20 18:08:07,567 INFO L290 TraceCheckUtils]: 58: Hoare triple {18315#(not (< ~waterLevel~0 2))} assume 0 != test_~tmp___2~0#1;assume { :begin_inline_startSystem } true;~systemActive~0 := 1; {18315#(not (< ~waterLevel~0 2))} is VALID [2022-02-20 18:08:07,567 INFO L290 TraceCheckUtils]: 59: Hoare triple {18315#(not (< ~waterLevel~0 2))} assume { :end_inline_startSystem } true; {18315#(not (< ~waterLevel~0 2))} is VALID [2022-02-20 18:08:07,567 INFO L272 TraceCheckUtils]: 60: Hoare triple {18315#(not (< ~waterLevel~0 2))} call timeShift(); {18315#(not (< ~waterLevel~0 2))} is VALID [2022-02-20 18:08:07,567 INFO L290 TraceCheckUtils]: 61: Hoare triple {18315#(not (< ~waterLevel~0 2))} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {18315#(not (< ~waterLevel~0 2))} is VALID [2022-02-20 18:08:07,568 INFO L290 TraceCheckUtils]: 62: Hoare triple {18315#(not (< ~waterLevel~0 2))} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {18418#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:08:07,568 INFO L290 TraceCheckUtils]: 63: Hoare triple {18418#(<= 1 ~waterLevel~0)} assume { :end_inline_lowerWaterLevel } true; {18418#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:08:07,568 INFO L290 TraceCheckUtils]: 64: Hoare triple {18418#(<= 1 ~waterLevel~0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret9#1, processEnvironment_~tmp~2#1;havoc processEnvironment_~tmp~2#1; {18418#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:08:07,569 INFO L290 TraceCheckUtils]: 65: Hoare triple {18418#(<= 1 ~waterLevel~0)} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret20#1, isLowWaterLevel_~retValue_acc~3#1, isLowWaterLevel_~tmp~4#1, isLowWaterLevel_~tmp___0~2#1;havoc isLowWaterLevel_~retValue_acc~3#1;havoc isLowWaterLevel_~tmp~4#1;havoc isLowWaterLevel_~tmp___0~2#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~10#1;havoc isLowWaterSensorDry_~retValue_acc~10#1;isLowWaterSensorDry_~retValue_acc~10#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~10#1; {18428#(= |timeShift_isLowWaterSensorDry_#res#1| 0)} is VALID [2022-02-20 18:08:07,569 INFO L290 TraceCheckUtils]: 66: Hoare triple {18428#(= |timeShift_isLowWaterSensorDry_#res#1| 0)} isLowWaterLevel_#t~ret20#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret20#1 && isLowWaterLevel_#t~ret20#1 <= 2147483647;isLowWaterLevel_~tmp~4#1 := isLowWaterLevel_#t~ret20#1;havoc isLowWaterLevel_#t~ret20#1; {18432#(= |timeShift_isLowWaterLevel_~tmp~4#1| 0)} is VALID [2022-02-20 18:08:07,570 INFO L290 TraceCheckUtils]: 67: Hoare triple {18432#(= |timeShift_isLowWaterLevel_~tmp~4#1| 0)} assume 0 != isLowWaterLevel_~tmp~4#1;isLowWaterLevel_~tmp___0~2#1 := 0; {18161#false} is VALID [2022-02-20 18:08:07,570 INFO L290 TraceCheckUtils]: 68: Hoare triple {18161#false} isLowWaterLevel_~retValue_acc~3#1 := isLowWaterLevel_~tmp___0~2#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~3#1; {18161#false} is VALID [2022-02-20 18:08:07,570 INFO L290 TraceCheckUtils]: 69: Hoare triple {18161#false} processEnvironment_#t~ret9#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret9#1 && processEnvironment_#t~ret9#1 <= 2147483647;processEnvironment_~tmp~2#1 := processEnvironment_#t~ret9#1;havoc processEnvironment_#t~ret9#1; {18161#false} is VALID [2022-02-20 18:08:07,570 INFO L290 TraceCheckUtils]: 70: Hoare triple {18161#false} assume !(0 != processEnvironment_~tmp~2#1); {18161#false} is VALID [2022-02-20 18:08:07,570 INFO L272 TraceCheckUtils]: 71: Hoare triple {18161#false} call processEnvironment__wrappee__highWaterSensor(); {18161#false} is VALID [2022-02-20 18:08:07,570 INFO L290 TraceCheckUtils]: 72: Hoare triple {18161#false} havoc ~tmp~1#1; {18161#false} is VALID [2022-02-20 18:08:07,570 INFO L290 TraceCheckUtils]: 73: Hoare triple {18161#false} assume !(0 == ~pumpRunning~0); {18161#false} is VALID [2022-02-20 18:08:07,570 INFO L272 TraceCheckUtils]: 74: Hoare triple {18161#false} call processEnvironment__wrappee__base(); {18161#false} is VALID [2022-02-20 18:08:07,570 INFO L290 TraceCheckUtils]: 75: Hoare triple {18161#false} assume true; {18161#false} is VALID [2022-02-20 18:08:07,571 INFO L284 TraceCheckUtils]: 76: Hoare quadruple {18161#false} {18161#false} #271#return; {18161#false} is VALID [2022-02-20 18:08:07,571 INFO L290 TraceCheckUtils]: 77: Hoare triple {18161#false} assume true; {18161#false} is VALID [2022-02-20 18:08:07,571 INFO L284 TraceCheckUtils]: 78: Hoare quadruple {18161#false} {18161#false} #253#return; {18161#false} is VALID [2022-02-20 18:08:07,571 INFO L290 TraceCheckUtils]: 79: Hoare triple {18161#false} assume { :end_inline_processEnvironment } true; {18161#false} is VALID [2022-02-20 18:08:07,571 INFO L290 TraceCheckUtils]: 80: Hoare triple {18161#false} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret22#1, __utac_acc__Specification2_spec__2_#t~ret23#1, __utac_acc__Specification2_spec__2_~tmp~6#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~6#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {18161#false} is VALID [2022-02-20 18:08:07,571 INFO L272 TraceCheckUtils]: 81: Hoare triple {18161#false} call __utac_acc__Specification2_spec__2_#t~ret22#1 := isMethaneLevelCritical(); {18161#false} is VALID [2022-02-20 18:08:07,571 INFO L290 TraceCheckUtils]: 82: Hoare triple {18161#false} havoc ~retValue_acc~7;~retValue_acc~7 := ~methaneLevelCritical~0;#res := ~retValue_acc~7; {18161#false} is VALID [2022-02-20 18:08:07,571 INFO L290 TraceCheckUtils]: 83: Hoare triple {18161#false} assume true; {18161#false} is VALID [2022-02-20 18:08:07,572 INFO L284 TraceCheckUtils]: 84: Hoare quadruple {18161#false} {18161#false} #257#return; {18161#false} is VALID [2022-02-20 18:08:07,572 INFO L290 TraceCheckUtils]: 85: Hoare triple {18161#false} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret22#1 && __utac_acc__Specification2_spec__2_#t~ret22#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~6#1 := __utac_acc__Specification2_spec__2_#t~ret22#1;havoc __utac_acc__Specification2_spec__2_#t~ret22#1; {18161#false} is VALID [2022-02-20 18:08:07,572 INFO L290 TraceCheckUtils]: 86: Hoare triple {18161#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~6#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~1#1;havoc isPumpRunning_~retValue_acc~1#1;isPumpRunning_~retValue_acc~1#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~1#1; {18161#false} is VALID [2022-02-20 18:08:07,572 INFO L290 TraceCheckUtils]: 87: Hoare triple {18161#false} __utac_acc__Specification2_spec__2_#t~ret23#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret23#1 && __utac_acc__Specification2_spec__2_#t~ret23#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret23#1;havoc __utac_acc__Specification2_spec__2_#t~ret23#1; {18161#false} is VALID [2022-02-20 18:08:07,572 INFO L290 TraceCheckUtils]: 88: Hoare triple {18161#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {18161#false} is VALID [2022-02-20 18:08:07,572 INFO L290 TraceCheckUtils]: 89: Hoare triple {18161#false} assume 0 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {18161#false} is VALID [2022-02-20 18:08:07,572 INFO L290 TraceCheckUtils]: 90: Hoare triple {18161#false} assume !false; {18161#false} is VALID [2022-02-20 18:08:07,573 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:08:07,573 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-02-20 18:08:07,573 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1406337256] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:08:07,573 INFO L191 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-02-20 18:08:07,573 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [10] total 14 [2022-02-20 18:08:07,573 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [424276505] [2022-02-20 18:08:07,573 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:08:07,574 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 12.666666666666666) internal successors, (76), 6 states have internal predecessors, (76), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) Word has length 91 [2022-02-20 18:08:07,574 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:08:07,574 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 12.666666666666666) internal successors, (76), 6 states have internal predecessors, (76), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2022-02-20 18:08:07,622 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 91 edges. 91 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:07,622 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-02-20 18:08:07,623 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:08:07,623 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-02-20 18:08:07,623 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=28, Invalid=154, Unknown=0, NotChecked=0, Total=182 [2022-02-20 18:08:07,623 INFO L87 Difference]: Start difference. First operand 507 states and 622 transitions. Second operand has 6 states, 6 states have (on average 12.666666666666666) internal successors, (76), 6 states have internal predecessors, (76), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2022-02-20 18:08:08,050 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:08,050 INFO L93 Difference]: Finished difference Result 823 states and 1018 transitions. [2022-02-20 18:08:08,050 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-02-20 18:08:08,051 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 12.666666666666666) internal successors, (76), 6 states have internal predecessors, (76), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) Word has length 91 [2022-02-20 18:08:08,051 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:08:08,051 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 12.666666666666666) internal successors, (76), 6 states have internal predecessors, (76), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2022-02-20 18:08:08,053 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 262 transitions. [2022-02-20 18:08:08,053 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 12.666666666666666) internal successors, (76), 6 states have internal predecessors, (76), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2022-02-20 18:08:08,055 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 262 transitions. [2022-02-20 18:08:08,055 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states and 262 transitions. [2022-02-20 18:08:08,216 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 262 edges. 262 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:08,216 INFO L225 Difference]: With dead ends: 823 [2022-02-20 18:08:08,217 INFO L226 Difference]: Without dead ends: 0 [2022-02-20 18:08:08,218 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 111 GetRequests, 96 SyntacticMatches, 1 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 20 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=38, Invalid=202, Unknown=0, NotChecked=0, Total=240 [2022-02-20 18:08:08,219 INFO L933 BasicCegarLoop]: 150 mSDtfsCounter, 144 mSDsluCounter, 342 mSDsCounter, 0 mSdLazyCounter, 43 mSolverCounterSat, 14 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 144 SdHoareTripleChecker+Valid, 492 SdHoareTripleChecker+Invalid, 57 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 14 IncrementalHoareTripleChecker+Valid, 43 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:08:08,219 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [144 Valid, 492 Invalid, 57 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [14 Valid, 43 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:08:08,219 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-02-20 18:08:08,220 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-02-20 18:08:08,220 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:08:08,220 INFO L82 GeneralOperation]: Start isEquivalent. First operand 0 states. Second operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:08:08,220 INFO L74 IsIncluded]: Start isIncluded. First operand 0 states. Second operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:08:08,220 INFO L87 Difference]: Start difference. First operand 0 states. Second operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:08:08,220 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:08,220 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2022-02-20 18:08:08,220 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-02-20 18:08:08,220 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:08,221 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:08,221 INFO L74 IsIncluded]: Start isIncluded. First operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand 0 states. [2022-02-20 18:08:08,221 INFO L87 Difference]: Start difference. First operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand 0 states. [2022-02-20 18:08:08,221 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:08,221 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2022-02-20 18:08:08,221 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-02-20 18:08:08,221 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:08,221 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:08,221 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:08:08,222 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:08:08,222 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:08:08,222 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-02-20 18:08:08,222 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 91 [2022-02-20 18:08:08,222 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:08:08,222 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-02-20 18:08:08,222 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 12.666666666666666) internal successors, (76), 6 states have internal predecessors, (76), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2022-02-20 18:08:08,223 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-02-20 18:08:08,223 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:08,225 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-02-20 18:08:08,256 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-02-20 18:08:08,431 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-02-20 18:08:08,433 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-02-20 18:08:11,173 INFO L854 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 229 236) the Hoare annotation is: (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) (not (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0)) [2022-02-20 18:08:11,173 INFO L858 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 229 236) no Hoare annotation was computed. [2022-02-20 18:08:11,173 INFO L858 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 229 236) no Hoare annotation was computed. [2022-02-20 18:08:11,173 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 162 168) no Hoare annotation was computed. [2022-02-20 18:08:11,173 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 162 168) the Hoare annotation is: true [2022-02-20 18:08:11,173 INFO L858 garLoopResultBuilder]: For program point L562-1(lines 558 569) no Hoare annotation was computed. [2022-02-20 18:08:11,173 INFO L861 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 558 569) the Hoare annotation is: true [2022-02-20 18:08:11,173 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 558 569) no Hoare annotation was computed. [2022-02-20 18:08:11,174 INFO L861 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 570 578) the Hoare annotation is: true [2022-02-20 18:08:11,174 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 570 578) no Hoare annotation was computed. [2022-02-20 18:08:11,174 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 570 578) no Hoare annotation was computed. [2022-02-20 18:08:11,174 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 356 385) no Hoare annotation was computed. [2022-02-20 18:08:11,174 INFO L861 garLoopResultBuilder]: At program point L381(lines 356 385) the Hoare annotation is: true [2022-02-20 18:08:11,174 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 356 385) the Hoare annotation is: true [2022-02-20 18:08:11,174 INFO L858 garLoopResultBuilder]: For program point L377(line 377) no Hoare annotation was computed. [2022-02-20 18:08:11,174 INFO L858 garLoopResultBuilder]: For program point L370(lines 370 374) no Hoare annotation was computed. [2022-02-20 18:08:11,174 INFO L861 garLoopResultBuilder]: At program point L370-1(lines 370 374) the Hoare annotation is: true [2022-02-20 18:08:11,174 INFO L858 garLoopResultBuilder]: For program point L367(line 367) no Hoare annotation was computed. [2022-02-20 18:08:11,174 INFO L861 garLoopResultBuilder]: At program point L366-2(lines 366 380) the Hoare annotation is: true [2022-02-20 18:08:11,174 INFO L861 garLoopResultBuilder]: At program point L362(line 362) the Hoare annotation is: true [2022-02-20 18:08:11,174 INFO L858 garLoopResultBuilder]: For program point L362-1(line 362) no Hoare annotation was computed. [2022-02-20 18:08:11,174 INFO L854 garLoopResultBuilder]: At program point L630(lines 625 633) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (<= 1 |old(~waterLevel~0)|))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (= 0 ~systemActive~0)) (.cse5 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 (not .cse2)) (or .cse3 (= ~methAndRunningLastTime~0 0) .cse4 .cse2 .cse5) (or .cse0 .cse3 .cse1) (or .cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 ~waterLevel~0)) .cse2 .cse5))) [2022-02-20 18:08:11,174 INFO L854 garLoopResultBuilder]: At program point L1006(lines 1001 1008) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 1 |old(~waterLevel~0)|))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not .cse2)) (or .cse0 (not (= |old(~methAndRunningLastTime~0)| 0)) .cse1) (or (not (<= 1 |old(~pumpRunning~0)|)) .cse2 (not (<= 2 |old(~waterLevel~0)|))))) [2022-02-20 18:08:11,174 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 138 161) no Hoare annotation was computed. [2022-02-20 18:08:11,174 INFO L858 garLoopResultBuilder]: For program point L321(lines 321 325) no Hoare annotation was computed. [2022-02-20 18:08:11,174 INFO L858 garLoopResultBuilder]: For program point L321-2(lines 321 325) no Hoare annotation was computed. [2022-02-20 18:08:11,175 INFO L858 garLoopResultBuilder]: For program point L478(lines 478 488) no Hoare annotation was computed. [2022-02-20 18:08:11,175 INFO L858 garLoopResultBuilder]: For program point L474(lines 474 491) no Hoare annotation was computed. [2022-02-20 18:08:11,175 INFO L854 garLoopResultBuilder]: At program point L474-1(lines 466 494) the Hoare annotation is: (let ((.cse6 (= 0 ~systemActive~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (<= 1 |old(~waterLevel~0)|))) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= ~methAndRunningLastTime~0 0)) (.cse5 (not .cse6))) (and (or .cse0 (and .cse1 .cse2 .cse3) .cse4 .cse5) (or .cse0 (not (= |old(~methAndRunningLastTime~0)| 0)) .cse4 (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) .cse3) (and .cse1 .cse2 .cse3 .cse5) .cse6) (or (not (<= 1 |old(~pumpRunning~0)|)) (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse1 .cse2 (= |timeShift_isLowWaterLevel_~tmp~4#1| 0) (<= 1 ~waterLevel~0) .cse5) .cse6 (not (<= 2 |old(~waterLevel~0)|)))))) [2022-02-20 18:08:11,176 INFO L854 garLoopResultBuilder]: At program point L210(line 210) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 1 |old(~waterLevel~0)|))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not .cse2)) (or .cse0 (not (= |old(~methAndRunningLastTime~0)| 0)) .cse1) (or (not (<= 1 |old(~pumpRunning~0)|)) .cse2 (not (<= 2 |old(~waterLevel~0)|))))) [2022-02-20 18:08:11,176 INFO L854 garLoopResultBuilder]: At program point L206(line 206) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= 1 |old(~waterLevel~0)|)))) (and (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (= |timeShift_isLowWaterLevel_~tmp~4#1| 0) (<= 1 ~waterLevel~0)) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 (not (<= 2 |old(~waterLevel~0)|))) (or .cse1 .cse2 (not .cse0)) (or .cse1 (not (= |old(~methAndRunningLastTime~0)| 0)) .cse2))) [2022-02-20 18:08:11,176 INFO L858 garLoopResultBuilder]: For program point L479(lines 479 485) no Hoare annotation was computed. [2022-02-20 18:08:11,176 INFO L854 garLoopResultBuilder]: At program point L215(line 215) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 1 |old(~waterLevel~0)|))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not .cse2)) (or .cse0 (not (= |old(~methAndRunningLastTime~0)| 0)) (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse1) (or (not (<= 1 |old(~pumpRunning~0)|)) .cse2 (not (<= 2 |old(~waterLevel~0)|))))) [2022-02-20 18:08:11,176 INFO L854 garLoopResultBuilder]: At program point L215-1(lines 196 220) the Hoare annotation is: (let ((.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse6 (= 0 ~systemActive~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= ~pumpRunning~0 0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0)))) (and (let ((.cse3 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse0 .cse1 (and .cse2 .cse3) (and (<= 1 ~pumpRunning~0) .cse4 .cse3) .cse5)) (or (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse2 (= |timeShift_isLowWaterLevel_~tmp~4#1| 0) (<= 1 ~waterLevel~0)) (not (<= 1 |old(~pumpRunning~0)|)) .cse6 .cse5) (or .cse0 (not (<= 1 |old(~waterLevel~0)|)) (not .cse6)) (or .cse0 (and .cse2 .cse4 (= ~waterLevel~0 1)) .cse1 (not (= |old(~waterLevel~0)| 1))))) [2022-02-20 18:08:11,176 INFO L858 garLoopResultBuilder]: For program point L149-1(lines 149 155) no Hoare annotation was computed. [2022-02-20 18:08:11,176 INFO L854 garLoopResultBuilder]: At program point L327(lines 312 330) the Hoare annotation is: (let ((.cse2 (= 0 ~systemActive~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 1 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 (not .cse2)) (or (not (<= 1 |old(~pumpRunning~0)|)) .cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (= |timeShift_isLowWaterLevel_~tmp~4#1| 0) (<= 1 ~waterLevel~0) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 (not (= |old(~methAndRunningLastTime~0)| 0)) .cse1))) [2022-02-20 18:08:11,176 INFO L854 garLoopResultBuilder]: At program point L253(lines 248 256) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0)) (.cse6 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse2 (= ~methAndRunningLastTime~0 0)) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (and .cse5 .cse6 .cse3)) (.cse7 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (and (<= 1 ~pumpRunning~0) .cse2 .cse3) (< |old(~waterLevel~0)| 2) .cse4) (or (and .cse5 .cse2 .cse6 (= ~waterLevel~0 1)) .cse0 .cse1 (not (= |old(~waterLevel~0)| 1))) (or .cse0 (not (<= 1 |old(~waterLevel~0)|)) .cse4 (not .cse7)) (or (not (<= 1 |old(~pumpRunning~0)|)) (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse5 .cse6 (= |timeShift_isLowWaterLevel_~tmp~4#1| 0) (<= 1 ~waterLevel~0)) .cse7 (not (<= 2 |old(~waterLevel~0)|)))))) [2022-02-20 18:08:11,176 INFO L858 garLoopResultBuilder]: For program point L538(lines 538 542) no Hoare annotation was computed. [2022-02-20 18:08:11,176 INFO L854 garLoopResultBuilder]: At program point L538-2(lines 534 545) the Hoare annotation is: (let ((.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (= 0 ~systemActive~0)) (.cse2 (not (<= 2 |old(~waterLevel~0)|))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse4 (not (<= 1 |old(~waterLevel~0)|)))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0)) .cse1 .cse2) (or .cse3 .cse4 (not .cse1)) (or .cse5 (= ~methAndRunningLastTime~0 0) .cse0 .cse1 .cse2) (or .cse3 .cse5 .cse4))) [2022-02-20 18:08:11,177 INFO L854 garLoopResultBuilder]: At program point L472(line 472) the Hoare annotation is: (let ((.cse6 (= ~pumpRunning~0 0)) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse3 (= ~methAndRunningLastTime~0 0)) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse8 (not (= |old(~waterLevel~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (and .cse6 .cse4)) (.cse7 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 (and (<= 1 ~pumpRunning~0) .cse3 .cse4) .cse5) (or (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse6 (= |timeShift_isLowWaterLevel_~tmp~4#1| 0) (<= 1 ~waterLevel~0)) (not (<= 1 |old(~pumpRunning~0)|)) .cse7 .cse5) (or .cse0 .cse1 .cse3 .cse8) (or .cse0 .cse1 .cse8 (and .cse6 (= ~waterLevel~0 1))) (or .cse0 .cse2 (not (<= 1 |old(~waterLevel~0)|)) (not .cse7))))) [2022-02-20 18:08:11,187 INFO L858 garLoopResultBuilder]: For program point L472-1(line 472) no Hoare annotation was computed. [2022-02-20 18:08:11,187 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 138 161) the Hoare annotation is: (let ((.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= 2 |old(~waterLevel~0)|))) (.cse5 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse6 (= ~methAndRunningLastTime~0 0)) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (and (= ~pumpRunning~0 0) .cse1)) (.cse8 (not (<= 1 |old(~waterLevel~0)|))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1) .cse2 .cse3) (or .cse4 .cse5 .cse6 (not (= |old(~waterLevel~0)| 1))) (or .cse5 .cse6 .cse0 .cse2 .cse3) (or .cse4 .cse5 .cse7 .cse8) (or .cse4 .cse5 .cse6 (< |old(~waterLevel~0)| 2) .cse2) (or .cse4 .cse7 .cse8 (not .cse2))))) [2022-02-20 18:08:11,187 INFO L858 garLoopResultBuilder]: For program point L142-1(lines 141 160) no Hoare annotation was computed. [2022-02-20 18:08:11,187 INFO L858 garLoopResultBuilder]: For program point L1005(line 1005) no Hoare annotation was computed. [2022-02-20 18:08:11,187 INFO L858 garLoopResultBuilder]: For program point L204(lines 204 212) no Hoare annotation was computed. [2022-02-20 18:08:11,187 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 138 161) no Hoare annotation was computed. [2022-02-20 18:08:11,187 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 1005) no Hoare annotation was computed. [2022-02-20 18:08:11,188 INFO L858 garLoopResultBuilder]: For program point L200(lines 200 217) no Hoare annotation was computed. [2022-02-20 18:08:11,188 INFO L854 garLoopResultBuilder]: At program point L337(line 337) the Hoare annotation is: (and (<= 1 ~pumpRunning~0) (= |ULTIMATE.start_valid_product_#res#1| 1) (<= 2 ~waterLevel~0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= |ULTIMATE.start_main_~tmp~5#1| 1) (not (= 0 ~systemActive~0))) [2022-02-20 18:08:11,188 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-02-20 18:08:11,188 INFO L854 garLoopResultBuilder]: At program point L511(lines 507 513) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-02-20 18:08:11,188 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-02-20 18:08:11,188 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-02-20 18:08:11,188 INFO L861 garLoopResultBuilder]: At program point L119(lines 56 123) the Hoare annotation is: true [2022-02-20 18:08:11,188 INFO L858 garLoopResultBuilder]: For program point L86(lines 86 92) no Hoare annotation was computed. [2022-02-20 18:08:11,188 INFO L858 garLoopResultBuilder]: For program point L86-1(lines 86 92) no Hoare annotation was computed. [2022-02-20 18:08:11,188 INFO L854 garLoopResultBuilder]: At program point L78(line 78) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= |ULTIMATE.start_main_~tmp~5#1| 1))) (or (and (<= 1 ~pumpRunning~0) .cse0 (<= 2 ~waterLevel~0) .cse1 .cse2 (not (= 0 ~systemActive~0))) (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) .cse0 .cse1 (<= 1 ~waterLevel~0) .cse2))) [2022-02-20 18:08:11,188 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-02-20 18:08:11,188 INFO L854 garLoopResultBuilder]: At program point L351(lines 346 353) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= |ULTIMATE.start_main_~tmp~5#1| 1)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and (<= 1 ~pumpRunning~0) .cse0 (<= 2 ~waterLevel~0) .cse1 .cse2 .cse3) (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) .cse0 .cse1 (<= 1 ~waterLevel~0) .cse2 .cse3))) [2022-02-20 18:08:11,188 INFO L858 garLoopResultBuilder]: For program point L442(lines 442 449) no Hoare annotation was computed. [2022-02-20 18:08:11,188 INFO L858 garLoopResultBuilder]: For program point L442-2(lines 442 449) no Hoare annotation was computed. [2022-02-20 18:08:11,188 INFO L854 garLoopResultBuilder]: At program point L343(lines 331 345) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (<= 1 ~waterLevel~0) (= |ULTIMATE.start_main_~tmp~5#1| 1) (= 0 ~systemActive~0)) [2022-02-20 18:08:11,188 INFO L854 garLoopResultBuilder]: At program point L116(lines 65 117) the Hoare annotation is: false [2022-02-20 18:08:11,188 INFO L854 garLoopResultBuilder]: At program point L463(lines 458 465) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~5#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-02-20 18:08:11,188 INFO L858 garLoopResultBuilder]: For program point L335(lines 335 341) no Hoare annotation was computed. [2022-02-20 18:08:11,189 INFO L858 garLoopResultBuilder]: For program point L335-1(lines 335 341) no Hoare annotation was computed. [2022-02-20 18:08:11,189 INFO L861 garLoopResultBuilder]: At program point L426(lines 418 428) the Hoare annotation is: true [2022-02-20 18:08:11,189 INFO L858 garLoopResultBuilder]: For program point L104(lines 104 110) no Hoare annotation was computed. [2022-02-20 18:08:11,189 INFO L854 garLoopResultBuilder]: At program point L104-2(lines 96 111) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 0)) (.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (<= 1 ~waterLevel~0)) (.cse2 (= |ULTIMATE.start_main_~tmp~5#1| 1)) (.cse3 (= 0 ~systemActive~0))) (or (and (<= 1 ~pumpRunning~0) .cse0 (<= 2 ~waterLevel~0) .cse1 .cse2 (not .cse3)) (and .cse4 (= ~methAndRunningLastTime~0 0) .cse0 .cse1 .cse5 .cse2) (and .cse4 .cse0 .cse1 .cse5 .cse2 .cse3))) [2022-02-20 18:08:11,189 INFO L858 garLoopResultBuilder]: For program point L67(lines 66 115) no Hoare annotation was computed. [2022-02-20 18:08:11,189 INFO L861 garLoopResultBuilder]: At program point L451(lines 432 454) the Hoare annotation is: true [2022-02-20 18:08:11,189 INFO L858 garLoopResultBuilder]: For program point L96(lines 96 111) no Hoare annotation was computed. [2022-02-20 18:08:11,189 INFO L854 garLoopResultBuilder]: At program point L414(lines 410 416) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~5#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-02-20 18:08:11,189 INFO L854 garLoopResultBuilder]: At program point L88(line 88) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= |ULTIMATE.start_main_~tmp~5#1| 1))) (or (and (<= 1 ~pumpRunning~0) .cse0 (<= 2 ~waterLevel~0) .cse1 .cse2 (not (= 0 ~systemActive~0))) (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) .cse0 .cse1 (<= 1 ~waterLevel~0) .cse2))) [2022-02-20 18:08:11,189 INFO L854 garLoopResultBuilder]: At program point L113(lines 66 115) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= |ULTIMATE.start_main_~tmp~5#1| 1))) (or (and (<= 1 ~pumpRunning~0) .cse0 (<= 2 ~waterLevel~0) .cse1 .cse2 (not (= 0 ~systemActive~0))) (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) .cse0 .cse1 (<= 1 ~waterLevel~0) .cse2))) [2022-02-20 18:08:11,189 INFO L854 garLoopResultBuilder]: At program point L526(lines 521 529) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-02-20 18:08:11,189 INFO L858 garLoopResultBuilder]: For program point L76(lines 76 82) no Hoare annotation was computed. [2022-02-20 18:08:11,189 INFO L858 garLoopResultBuilder]: For program point L76-1(lines 76 82) no Hoare annotation was computed. [2022-02-20 18:08:11,189 INFO L854 garLoopResultBuilder]: At program point L518(lines 514 520) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-02-20 18:08:11,189 INFO L858 garLoopResultBuilder]: For program point L68(lines 68 72) no Hoare annotation was computed. [2022-02-20 18:08:11,189 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 170 194) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 (< ~waterLevel~0 2) .cse2 .cse3))) [2022-02-20 18:08:11,189 INFO L854 garLoopResultBuilder]: At program point L184(line 184) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~waterLevel~0)) (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~1#1| 0)) (= 0 ~systemActive~0) (not (= ~methAndRunningLastTime~0 0))) [2022-02-20 18:08:11,190 INFO L854 garLoopResultBuilder]: At program point L308(lines 293 311) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~waterLevel~0)) (and .cse0 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)) (and .cse0 (<= 2 ~waterLevel~0)) (= 0 ~systemActive~0) (not (= ~methAndRunningLastTime~0 0)))) [2022-02-20 18:08:11,190 INFO L858 garLoopResultBuilder]: For program point L178(lines 178 186) no Hoare annotation was computed. [2022-02-20 18:08:11,190 INFO L858 garLoopResultBuilder]: For program point L174(lines 174 191) no Hoare annotation was computed. [2022-02-20 18:08:11,190 INFO L858 garLoopResultBuilder]: For program point L302(lines 302 306) no Hoare annotation was computed. [2022-02-20 18:08:11,190 INFO L854 garLoopResultBuilder]: At program point L620(lines 611 624) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~waterLevel~0)) (and .cse0 (<= 2 ~waterLevel~0)) (= 0 ~systemActive~0) (not (= ~methAndRunningLastTime~0 0)) (and (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) .cse0))) [2022-02-20 18:08:11,193 INFO L858 garLoopResultBuilder]: For program point L302-2(lines 302 306) no Hoare annotation was computed. [2022-02-20 18:08:11,193 INFO L854 garLoopResultBuilder]: At program point L226(lines 221 228) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0)) (not (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0) (not (= ~methAndRunningLastTime~0 0))) [2022-02-20 18:08:11,193 INFO L854 garLoopResultBuilder]: At program point L189(line 189) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0) (not (= ~methAndRunningLastTime~0 0))) [2022-02-20 18:08:11,193 INFO L858 garLoopResultBuilder]: For program point L189-1(lines 170 194) no Hoare annotation was computed. [2022-02-20 18:08:11,193 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 170 194) no Hoare annotation was computed. [2022-02-20 18:08:11,193 INFO L858 garLoopResultBuilder]: For program point L615(lines 615 621) no Hoare annotation was computed. [2022-02-20 18:08:11,193 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 546 557) no Hoare annotation was computed. [2022-02-20 18:08:11,193 INFO L858 garLoopResultBuilder]: For program point L550-1(lines 546 557) no Hoare annotation was computed. [2022-02-20 18:08:11,193 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 546 557) the Hoare annotation is: (let ((.cse0 (not (= ~pumpRunning~0 0))) (.cse2 (not (= ~methAndRunningLastTime~0 0))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 (< |old(~waterLevel~0)| 2) .cse1 .cse2) (or .cse0 (not (= |old(~waterLevel~0)| 1)) (= ~waterLevel~0 1) .cse2) (or (not (<= 1 ~pumpRunning~0)) .cse1 (= 0 ~systemActive~0) (not (<= 2 |old(~waterLevel~0)|))))) [2022-02-20 18:08:11,196 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:08:11,197 INFO L180 ceAbstractionStarter]: Computing trace abstraction results [2022-02-20 18:08:11,199 WARN L170 areAnnotationChecker]: deactivatePumpFINAL has no Hoare annotation [2022-02-20 18:08:11,199 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__baseEXIT has no Hoare annotation [2022-02-20 18:08:11,199 WARN L170 areAnnotationChecker]: L562-1 has no Hoare annotation [2022-02-20 18:08:11,199 WARN L170 areAnnotationChecker]: L562-1 has no Hoare annotation [2022-02-20 18:08:11,199 WARN L170 areAnnotationChecker]: isMethaneLevelCriticalFINAL has no Hoare annotation [2022-02-20 18:08:11,199 WARN L170 areAnnotationChecker]: L538 has no Hoare annotation [2022-02-20 18:08:11,199 WARN L170 areAnnotationChecker]: L142-1 has no Hoare annotation [2022-02-20 18:08:11,199 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2022-02-20 18:08:11,199 WARN L170 areAnnotationChecker]: L174 has no Hoare annotation [2022-02-20 18:08:11,199 WARN L170 areAnnotationChecker]: L550-1 has no Hoare annotation [2022-02-20 18:08:11,199 WARN L170 areAnnotationChecker]: L550-1 has no Hoare annotation [2022-02-20 18:08:11,199 WARN L170 areAnnotationChecker]: deactivatePumpFINAL has no Hoare annotation [2022-02-20 18:08:11,199 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__baseEXIT has no Hoare annotation [2022-02-20 18:08:11,200 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__baseEXIT has no Hoare annotation [2022-02-20 18:08:11,200 WARN L170 areAnnotationChecker]: L562-1 has no Hoare annotation [2022-02-20 18:08:11,200 WARN L170 areAnnotationChecker]: isMethaneLevelCriticalFINAL has no Hoare annotation [2022-02-20 18:08:11,200 WARN L170 areAnnotationChecker]: L362-1 has no Hoare annotation [2022-02-20 18:08:11,200 WARN L170 areAnnotationChecker]: L538 has no Hoare annotation [2022-02-20 18:08:11,200 WARN L170 areAnnotationChecker]: L538 has no Hoare annotation [2022-02-20 18:08:11,200 WARN L170 areAnnotationChecker]: L142-1 has no Hoare annotation [2022-02-20 18:08:11,201 WARN L170 areAnnotationChecker]: L142-1 has no Hoare annotation [2022-02-20 18:08:11,201 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2022-02-20 18:08:11,201 WARN L170 areAnnotationChecker]: L174 has no Hoare annotation [2022-02-20 18:08:11,201 WARN L170 areAnnotationChecker]: L174 has no Hoare annotation [2022-02-20 18:08:11,201 WARN L170 areAnnotationChecker]: L550-1 has no Hoare annotation [2022-02-20 18:08:11,201 WARN L170 areAnnotationChecker]: deactivatePumpEXIT has no Hoare annotation [2022-02-20 18:08:11,201 WARN L170 areAnnotationChecker]: deactivatePumpEXIT has no Hoare annotation [2022-02-20 18:08:11,201 WARN L170 areAnnotationChecker]: L189-1 has no Hoare annotation [2022-02-20 18:08:11,201 WARN L170 areAnnotationChecker]: changeMethaneLevelEXIT has no Hoare annotation [2022-02-20 18:08:11,201 WARN L170 areAnnotationChecker]: isMethaneLevelCriticalEXIT has no Hoare annotation [2022-02-20 18:08:11,201 WARN L170 areAnnotationChecker]: L362-1 has no Hoare annotation [2022-02-20 18:08:11,201 WARN L170 areAnnotationChecker]: L142-1 has no Hoare annotation [2022-02-20 18:08:11,201 WARN L170 areAnnotationChecker]: L200 has no Hoare annotation [2022-02-20 18:08:11,201 WARN L170 areAnnotationChecker]: L200 has no Hoare annotation [2022-02-20 18:08:11,201 WARN L170 areAnnotationChecker]: L149-1 has no Hoare annotation [2022-02-20 18:08:11,201 WARN L170 areAnnotationChecker]: L615 has no Hoare annotation [2022-02-20 18:08:11,201 WARN L170 areAnnotationChecker]: L615 has no Hoare annotation [2022-02-20 18:08:11,201 WARN L170 areAnnotationChecker]: L189-1 has no Hoare annotation [2022-02-20 18:08:11,202 WARN L170 areAnnotationChecker]: waterRiseEXIT has no Hoare annotation [2022-02-20 18:08:11,202 WARN L170 areAnnotationChecker]: L149-1 has no Hoare annotation [2022-02-20 18:08:11,202 WARN L170 areAnnotationChecker]: L335-1 has no Hoare annotation [2022-02-20 18:08:11,202 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__highWaterSensorEXIT has no Hoare annotation [2022-02-20 18:08:11,202 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__highWaterSensorEXIT has no Hoare annotation [2022-02-20 18:08:11,202 WARN L170 areAnnotationChecker]: L86-1 has no Hoare annotation [2022-02-20 18:08:11,202 WARN L170 areAnnotationChecker]: L472-1 has no Hoare annotation [2022-02-20 18:08:11,202 WARN L170 areAnnotationChecker]: L367 has no Hoare annotation [2022-02-20 18:08:11,202 WARN L170 areAnnotationChecker]: L321 has no Hoare annotation [2022-02-20 18:08:11,202 WARN L170 areAnnotationChecker]: L472-1 has no Hoare annotation [2022-02-20 18:08:11,203 WARN L170 areAnnotationChecker]: L302 has no Hoare annotation [2022-02-20 18:08:11,203 WARN L170 areAnnotationChecker]: L76-1 has no Hoare annotation [2022-02-20 18:08:11,203 WARN L170 areAnnotationChecker]: L96 has no Hoare annotation [2022-02-20 18:08:11,203 WARN L170 areAnnotationChecker]: L96 has no Hoare annotation [2022-02-20 18:08:11,204 WARN L170 areAnnotationChecker]: L474 has no Hoare annotation [2022-02-20 18:08:11,204 WARN L170 areAnnotationChecker]: L474 has no Hoare annotation [2022-02-20 18:08:11,204 WARN L170 areAnnotationChecker]: cleanupEXIT has no Hoare annotation [2022-02-20 18:08:11,204 WARN L170 areAnnotationChecker]: L367 has no Hoare annotation [2022-02-20 18:08:11,204 WARN L170 areAnnotationChecker]: L321 has no Hoare annotation [2022-02-20 18:08:11,204 WARN L170 areAnnotationChecker]: L321 has no Hoare annotation [2022-02-20 18:08:11,204 WARN L170 areAnnotationChecker]: L442 has no Hoare annotation [2022-02-20 18:08:11,204 WARN L170 areAnnotationChecker]: L302 has no Hoare annotation [2022-02-20 18:08:11,204 WARN L170 areAnnotationChecker]: L302 has no Hoare annotation [2022-02-20 18:08:11,204 WARN L170 areAnnotationChecker]: L86 has no Hoare annotation [2022-02-20 18:08:11,204 WARN L170 areAnnotationChecker]: L86 has no Hoare annotation [2022-02-20 18:08:11,206 WARN L170 areAnnotationChecker]: L104 has no Hoare annotation [2022-02-20 18:08:11,206 WARN L170 areAnnotationChecker]: L104 has no Hoare annotation [2022-02-20 18:08:11,206 WARN L170 areAnnotationChecker]: L478 has no Hoare annotation [2022-02-20 18:08:11,206 WARN L170 areAnnotationChecker]: timeShiftFINAL has no Hoare annotation [2022-02-20 18:08:11,206 WARN L170 areAnnotationChecker]: cleanupEXIT has no Hoare annotation [2022-02-20 18:08:11,207 WARN L170 areAnnotationChecker]: L370 has no Hoare annotation [2022-02-20 18:08:11,207 WARN L170 areAnnotationChecker]: L370 has no Hoare annotation [2022-02-20 18:08:11,207 WARN L170 areAnnotationChecker]: L321-2 has no Hoare annotation [2022-02-20 18:08:11,207 WARN L170 areAnnotationChecker]: L442 has no Hoare annotation [2022-02-20 18:08:11,207 WARN L170 areAnnotationChecker]: L442 has no Hoare annotation [2022-02-20 18:08:11,207 WARN L170 areAnnotationChecker]: L302-2 has no Hoare annotation [2022-02-20 18:08:11,207 WARN L170 areAnnotationChecker]: L86-1 has no Hoare annotation [2022-02-20 18:08:11,208 WARN L170 areAnnotationChecker]: L67 has no Hoare annotation [2022-02-20 18:08:11,208 WARN L170 areAnnotationChecker]: L335 has no Hoare annotation [2022-02-20 18:08:11,208 WARN L170 areAnnotationChecker]: L335 has no Hoare annotation [2022-02-20 18:08:11,208 WARN L170 areAnnotationChecker]: L478 has no Hoare annotation [2022-02-20 18:08:11,208 WARN L170 areAnnotationChecker]: L478 has no Hoare annotation [2022-02-20 18:08:11,208 WARN L170 areAnnotationChecker]: timeShiftFINAL has no Hoare annotation [2022-02-20 18:08:11,208 WARN L170 areAnnotationChecker]: L377 has no Hoare annotation [2022-02-20 18:08:11,209 WARN L170 areAnnotationChecker]: L204 has no Hoare annotation [2022-02-20 18:08:11,209 WARN L170 areAnnotationChecker]: L442-2 has no Hoare annotation [2022-02-20 18:08:11,209 WARN L170 areAnnotationChecker]: L178 has no Hoare annotation [2022-02-20 18:08:11,209 WARN L170 areAnnotationChecker]: L67 has no Hoare annotation [2022-02-20 18:08:11,209 WARN L170 areAnnotationChecker]: L67 has no Hoare annotation [2022-02-20 18:08:11,210 WARN L170 areAnnotationChecker]: L335-1 has no Hoare annotation [2022-02-20 18:08:11,210 WARN L170 areAnnotationChecker]: L479 has no Hoare annotation [2022-02-20 18:08:11,210 WARN L170 areAnnotationChecker]: L479 has no Hoare annotation [2022-02-20 18:08:11,210 WARN L170 areAnnotationChecker]: timeShiftEXIT has no Hoare annotation [2022-02-20 18:08:11,210 WARN L170 areAnnotationChecker]: timeShiftEXIT has no Hoare annotation [2022-02-20 18:08:11,210 WARN L170 areAnnotationChecker]: timeShiftEXIT has no Hoare annotation [2022-02-20 18:08:11,210 WARN L170 areAnnotationChecker]: L442-2 has no Hoare annotation [2022-02-20 18:08:11,210 WARN L170 areAnnotationChecker]: L377 has no Hoare annotation [2022-02-20 18:08:11,210 WARN L170 areAnnotationChecker]: L204 has no Hoare annotation [2022-02-20 18:08:11,210 WARN L170 areAnnotationChecker]: L204 has no Hoare annotation [2022-02-20 18:08:11,211 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2022-02-20 18:08:11,211 WARN L170 areAnnotationChecker]: L178 has no Hoare annotation [2022-02-20 18:08:11,211 WARN L170 areAnnotationChecker]: L178 has no Hoare annotation [2022-02-20 18:08:11,211 WARN L170 areAnnotationChecker]: L68 has no Hoare annotation [2022-02-20 18:08:11,211 WARN L170 areAnnotationChecker]: L1005 has no Hoare annotation [2022-02-20 18:08:11,211 WARN L170 areAnnotationChecker]: L1005 has no Hoare annotation [2022-02-20 18:08:11,212 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2022-02-20 18:08:11,212 WARN L170 areAnnotationChecker]: L189-1 has no Hoare annotation [2022-02-20 18:08:11,212 WARN L170 areAnnotationChecker]: L189-1 has no Hoare annotation [2022-02-20 18:08:11,212 WARN L170 areAnnotationChecker]: L76 has no Hoare annotation [2022-02-20 18:08:11,212 WARN L170 areAnnotationChecker]: L76 has no Hoare annotation [2022-02-20 18:08:11,213 WARN L170 areAnnotationChecker]: L76-1 has no Hoare annotation [2022-02-20 18:08:11,214 INFO L163 areAnnotationChecker]: CFG has 26 edges. 26 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. 0 times interpolants missing. [2022-02-20 18:08:11,249 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 20.02 06:08:11 BoogieIcfgContainer [2022-02-20 18:08:11,249 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-02-20 18:08:11,252 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-02-20 18:08:11,253 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-02-20 18:08:11,253 INFO L275 PluginConnector]: Witness Printer initialized [2022-02-20 18:08:11,253 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.02 06:07:58" (3/4) ... [2022-02-20 18:08:11,255 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-02-20 18:08:11,258 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-02-20 18:08:11,259 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-02-20 18:08:11,259 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-02-20 18:08:11,259 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-02-20 18:08:11,259 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-02-20 18:08:11,259 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-02-20 18:08:11,259 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-02-20 18:08:11,259 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-02-20 18:08:11,269 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 51 nodes and edges [2022-02-20 18:08:11,270 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-02-20 18:08:11,270 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-02-20 18:08:11,270 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-02-20 18:08:11,271 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-02-20 18:08:11,271 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-02-20 18:08:11,271 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-02-20 18:08:11,289 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) [2022-02-20 18:08:11,290 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) [2022-02-20 18:08:11,290 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) [2022-02-20 18:08:11,290 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((1 <= pumpRunning && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) || (((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && splverifierCounter == 0) && 1 <= waterLevel) && tmp == 1) [2022-02-20 18:08:11,291 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 <= \old(pumpRunning)) || (pumpRunning == \old(pumpRunning) && 1 <= waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(0 == systemActive))) && ((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) [2022-02-20 18:08:11,292 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || ((1 <= pumpRunning && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(2 <= \old(waterLevel))) && ((((((\result == 0 && pumpRunning == 0) && tmp == 0) && 1 <= waterLevel) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel == 1)) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) [2022-02-20 18:08:11,293 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((1 <= pumpRunning && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && splverifierCounter == 0) && 1 <= waterLevel) && tmp == 1) && !(0 == systemActive)) [2022-02-20 18:08:11,293 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) || !(0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || 0 == systemActive)) && (((!(1 <= \old(pumpRunning)) || (((((\result == 0 && pumpRunning == 0) && methAndRunningLastTime == 0) && tmp == 0) && 1 <= waterLevel) && !(0 == systemActive))) || 0 == systemActive) || !(2 <= \old(waterLevel))) [2022-02-20 18:08:11,293 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && \result == 1) && splverifierCounter == 0) && 1 <= waterLevel) && tmp == 1) && 0 == systemActive [2022-02-20 18:08:11,293 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || ((1 <= pumpRunning && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || \old(waterLevel) < 2) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel)) && ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 0) && waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1))) && (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && (((!(1 <= \old(pumpRunning)) || ((((\result == 0 && pumpRunning == 0) && \result == 0) && tmp == 0) && 1 <= waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel))) [2022-02-20 18:08:11,293 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(0 == systemActive)) && ((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel)))) && (((!(1 <= \old(pumpRunning)) || ((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel))) [2022-02-20 18:08:11,293 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) || (1 <= \result && pumpRunning == 0) [2022-02-20 18:08:11,293 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(0 == systemActive)) && (((!(1 <= \old(pumpRunning)) || 0 == systemActive) || (((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= \result) && tmp == 0) && 1 <= waterLevel) && 1 <= tmp___0)) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) [2022-02-20 18:08:11,294 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel)))) && ((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(2 <= \old(waterLevel))) [2022-02-20 18:08:11,294 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) || !(methAndRunningLastTime == 0) [2022-02-20 18:08:11,294 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 <= waterLevel)) || 0 == systemActive) || !(methAndRunningLastTime == 0) [2022-02-20 18:08:11,322 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2022-02-20 18:08:11,322 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-02-20 18:08:11,324 INFO L158 Benchmark]: Toolchain (without parser) took 13696.35ms. Allocated memory was 127.9MB in the beginning and 264.2MB in the end (delta: 136.3MB). Free memory was 90.2MB in the beginning and 217.1MB in the end (delta: -126.9MB). Peak memory consumption was 7.5MB. Max. memory is 16.1GB. [2022-02-20 18:08:11,324 INFO L158 Benchmark]: CDTParser took 0.21ms. Allocated memory is still 127.9MB. Free memory was 98.8MB in the beginning and 98.7MB in the end (delta: 24.7kB). There was no memory consumed. Max. memory is 16.1GB. [2022-02-20 18:08:11,324 INFO L158 Benchmark]: CACSL2BoogieTranslator took 426.04ms. Allocated memory is still 127.9MB. Free memory was 90.0MB in the beginning and 89.3MB in the end (delta: 731.7kB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2022-02-20 18:08:11,324 INFO L158 Benchmark]: Boogie Procedure Inliner took 53.50ms. Allocated memory is still 127.9MB. Free memory was 89.3MB in the beginning and 86.8MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-02-20 18:08:11,325 INFO L158 Benchmark]: Boogie Preprocessor took 34.94ms. Allocated memory is still 127.9MB. Free memory was 86.8MB in the beginning and 85.0MB in the end (delta: 1.9MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-02-20 18:08:11,325 INFO L158 Benchmark]: RCFGBuilder took 443.90ms. Allocated memory is still 127.9MB. Free memory was 85.0MB in the beginning and 63.7MB in the end (delta: 21.2MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. [2022-02-20 18:08:11,326 INFO L158 Benchmark]: TraceAbstraction took 12659.21ms. Allocated memory was 127.9MB in the beginning and 264.2MB in the end (delta: 136.3MB). Free memory was 63.2MB in the beginning and 222.3MB in the end (delta: -159.1MB). Peak memory consumption was 119.0MB. Max. memory is 16.1GB. [2022-02-20 18:08:11,326 INFO L158 Benchmark]: Witness Printer took 70.05ms. Allocated memory is still 264.2MB. Free memory was 222.3MB in the beginning and 217.1MB in the end (delta: 5.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-02-20 18:08:11,327 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - AssertionsEnabledResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.21ms. Allocated memory is still 127.9MB. Free memory was 98.8MB in the beginning and 98.7MB in the end (delta: 24.7kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 426.04ms. Allocated memory is still 127.9MB. Free memory was 90.0MB in the beginning and 89.3MB in the end (delta: 731.7kB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 53.50ms. Allocated memory is still 127.9MB. Free memory was 89.3MB in the beginning and 86.8MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 34.94ms. Allocated memory is still 127.9MB. Free memory was 86.8MB in the beginning and 85.0MB in the end (delta: 1.9MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 443.90ms. Allocated memory is still 127.9MB. Free memory was 85.0MB in the beginning and 63.7MB in the end (delta: 21.2MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. * TraceAbstraction took 12659.21ms. Allocated memory was 127.9MB in the beginning and 264.2MB in the end (delta: 136.3MB). Free memory was 63.2MB in the beginning and 222.3MB in the end (delta: -159.1MB). Peak memory consumption was 119.0MB. Max. memory is 16.1GB. * Witness Printer took 70.05ms. Allocated memory is still 264.2MB. Free memory was 222.3MB in the beginning and 217.1MB in the end (delta: 5.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 1005]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 96 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 12.6s, OverallIterations: 12, TraceHistogramMax: 2, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 5.6s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 2.7s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1234 SdHoareTripleChecker+Valid, 0.6s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1209 mSDsluCounter, 3660 SdHoareTripleChecker+Invalid, 0.6s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2256 mSDsCounter, 282 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 668 IncrementalHoareTripleChecker+Invalid, 950 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 282 mSolverCounterUnsat, 1404 mSDtfsCounter, 668 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 429 GetRequests, 353 SyntacticMatches, 2 SemanticMatches, 74 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 48 ImplicationChecksByTransitivity, 0.3s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=584occurred in iteration=9, InterpolantAutomatonStates: 64, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.7s AutomataMinimizationTime, 12 MinimizatonAttempts, 164 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 44 LocationsWithAnnotation, 1157 PreInvPairs, 1297 NumberOfFragments, 1477 HoareAnnotationTreeSize, 1157 FomulaSimplifications, 474 FormulaSimplificationTreeSizeReduction, 0.5s HoareSimplificationTime, 44 FomulaSimplificationsInter, 8056 FormulaSimplificationTreeSizeReductionInter, 2.0s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 1.7s InterpolantComputationTime, 888 NumberOfCodeBlocks, 888 NumberOfCodeBlocksAsserted, 15 NumberOfCheckSat, 873 ConstructedInterpolants, 0 QuantifiedInterpolants, 1402 SizeOfPredicates, 8 NumberOfNonLiveVariables, 1391 ConjunctsInSsa, 20 ConjunctsInUnsatCore, 15 InterpolantComputations, 12 PerfectInterpolantSequences, 177/184 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 346]: Loop Invariant Derived loop invariant: (((((1 <= pumpRunning && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && splverifierCounter == 0) && 1 <= waterLevel) && tmp == 1) && !(0 == systemActive)) - InvariantResult [Line: 56]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 507]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 312]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(0 == systemActive)) && (((!(1 <= \old(pumpRunning)) || 0 == systemActive) || (((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= \result) && tmp == 0) && 1 <= waterLevel) && 1 <= tmp___0)) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) - InvariantResult [Line: 611]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) || (1 <= \result && pumpRunning == 0) - InvariantResult [Line: 410]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 466]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) || !(0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || 0 == systemActive)) && (((!(1 <= \old(pumpRunning)) || (((((\result == 0 && pumpRunning == 0) && methAndRunningLastTime == 0) && tmp == 0) && 1 <= waterLevel) && !(0 == systemActive))) || 0 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 221]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 <= waterLevel)) || 0 == systemActive) || !(methAndRunningLastTime == 0) - InvariantResult [Line: 458]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 248]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || ((1 <= pumpRunning && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || \old(waterLevel) < 2) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel)) && ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 0) && waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1))) && (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && (((!(1 <= \old(pumpRunning)) || ((((\result == 0 && pumpRunning == 0) && \result == 0) && tmp == 0) && 1 <= waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 293]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) || !(methAndRunningLastTime == 0) - InvariantResult [Line: 514]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 196]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || ((1 <= pumpRunning && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(2 <= \old(waterLevel))) && ((((((\result == 0 && pumpRunning == 0) && tmp == 0) && 1 <= waterLevel) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel == 1)) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) - InvariantResult [Line: 331]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && \result == 1) && splverifierCounter == 0) && 1 <= waterLevel) && tmp == 1) && 0 == systemActive - InvariantResult [Line: 625]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(0 == systemActive)) && ((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel)))) && (((!(1 <= \old(pumpRunning)) || ((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 366]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 534]: Loop Invariant Derived loop invariant: (((((!(1 <= \old(pumpRunning)) || (pumpRunning == \old(pumpRunning) && 1 <= waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(0 == systemActive))) && ((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) - InvariantResult [Line: 521]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 1001]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel)))) && ((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 66]: Loop Invariant Derived loop invariant: (((((1 <= pumpRunning && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) || (((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && splverifierCounter == 0) && 1 <= waterLevel) && tmp == 1) - InvariantResult [Line: 65]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 356]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 418]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 432]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2022-02-20 18:08:11,365 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE