./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec2_product64.cil.c --full-output -ea --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 03d7b7b3 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -ea -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec2_product64.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 59d05b45c2855b02eb92cf6428285b3e4820a09d46d6a6d0a0748347de3adbb6 --- Real Ultimate output --- This is Ultimate 0.2.2-dev-03d7b7b [2022-02-20 18:08:16,298 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-02-20 18:08:16,300 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-02-20 18:08:16,325 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-02-20 18:08:16,325 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-02-20 18:08:16,326 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-02-20 18:08:16,327 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-02-20 18:08:16,329 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-02-20 18:08:16,330 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-02-20 18:08:16,331 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-02-20 18:08:16,332 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-02-20 18:08:16,333 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-02-20 18:08:16,333 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-02-20 18:08:16,334 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-02-20 18:08:16,335 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-02-20 18:08:16,336 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-02-20 18:08:16,336 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-02-20 18:08:16,337 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-02-20 18:08:16,339 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-02-20 18:08:16,341 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-02-20 18:08:16,346 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-02-20 18:08:16,347 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-02-20 18:08:16,348 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-02-20 18:08:16,355 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-02-20 18:08:16,357 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-02-20 18:08:16,358 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-02-20 18:08:16,358 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-02-20 18:08:16,359 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-02-20 18:08:16,359 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-02-20 18:08:16,360 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-02-20 18:08:16,360 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-02-20 18:08:16,361 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-02-20 18:08:16,362 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-02-20 18:08:16,363 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-02-20 18:08:16,363 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-02-20 18:08:16,364 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-02-20 18:08:16,364 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-02-20 18:08:16,365 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-02-20 18:08:16,365 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-02-20 18:08:16,366 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-02-20 18:08:16,366 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-02-20 18:08:16,367 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-02-20 18:08:16,396 INFO L113 SettingsManager]: Loading preferences was successful [2022-02-20 18:08:16,396 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-02-20 18:08:16,397 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-02-20 18:08:16,397 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-02-20 18:08:16,398 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-02-20 18:08:16,398 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-02-20 18:08:16,399 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-02-20 18:08:16,399 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-02-20 18:08:16,399 INFO L138 SettingsManager]: * Use SBE=true [2022-02-20 18:08:16,399 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-02-20 18:08:16,400 INFO L138 SettingsManager]: * sizeof long=4 [2022-02-20 18:08:16,400 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-02-20 18:08:16,400 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-02-20 18:08:16,400 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-02-20 18:08:16,401 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-02-20 18:08:16,401 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-02-20 18:08:16,401 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-02-20 18:08:16,401 INFO L138 SettingsManager]: * sizeof long double=12 [2022-02-20 18:08:16,401 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-02-20 18:08:16,402 INFO L138 SettingsManager]: * Use constant arrays=true [2022-02-20 18:08:16,402 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-02-20 18:08:16,402 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-02-20 18:08:16,402 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-02-20 18:08:16,403 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-02-20 18:08:16,403 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-02-20 18:08:16,403 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-02-20 18:08:16,403 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-02-20 18:08:16,404 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-02-20 18:08:16,404 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-02-20 18:08:16,404 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-02-20 18:08:16,404 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2022-02-20 18:08:16,405 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-02-20 18:08:16,405 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-02-20 18:08:16,405 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 59d05b45c2855b02eb92cf6428285b3e4820a09d46d6a6d0a0748347de3adbb6 [2022-02-20 18:08:16,611 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-02-20 18:08:16,630 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-02-20 18:08:16,632 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-02-20 18:08:16,633 INFO L271 PluginConnector]: Initializing CDTParser... [2022-02-20 18:08:16,634 INFO L275 PluginConnector]: CDTParser initialized [2022-02-20 18:08:16,635 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec2_product64.cil.c [2022-02-20 18:08:16,697 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/cc7a3d735/08aeb64384894394b451181524817bd4/FLAG4809cac3a [2022-02-20 18:08:17,086 INFO L306 CDTParser]: Found 1 translation units. [2022-02-20 18:08:17,099 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product64.cil.c [2022-02-20 18:08:17,122 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/cc7a3d735/08aeb64384894394b451181524817bd4/FLAG4809cac3a [2022-02-20 18:08:17,134 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/cc7a3d735/08aeb64384894394b451181524817bd4 [2022-02-20 18:08:17,136 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-02-20 18:08:17,139 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-02-20 18:08:17,143 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-02-20 18:08:17,143 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-02-20 18:08:17,146 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-02-20 18:08:17,150 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.02 06:08:17" (1/1) ... [2022-02-20 18:08:17,151 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@47e7d200 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:08:17, skipping insertion in model container [2022-02-20 18:08:17,151 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.02 06:08:17" (1/1) ... [2022-02-20 18:08:17,157 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-02-20 18:08:17,194 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-02-20 18:08:17,411 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product64.cil.c[6823,6836] [2022-02-20 18:08:17,489 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-02-20 18:08:17,511 INFO L203 MainTranslator]: Completed pre-run [2022-02-20 18:08:17,545 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product64.cil.c[6823,6836] [2022-02-20 18:08:17,603 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-02-20 18:08:17,617 INFO L208 MainTranslator]: Completed translation [2022-02-20 18:08:17,618 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:08:17 WrapperNode [2022-02-20 18:08:17,618 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-02-20 18:08:17,619 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-02-20 18:08:17,619 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-02-20 18:08:17,619 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-02-20 18:08:17,628 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:08:17" (1/1) ... [2022-02-20 18:08:17,648 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:08:17" (1/1) ... [2022-02-20 18:08:17,677 INFO L137 Inliner]: procedures = 60, calls = 164, calls flagged for inlining = 25, calls inlined = 22, statements flattened = 284 [2022-02-20 18:08:17,677 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-02-20 18:08:17,678 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-02-20 18:08:17,678 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-02-20 18:08:17,678 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-02-20 18:08:17,684 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:08:17" (1/1) ... [2022-02-20 18:08:17,684 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:08:17" (1/1) ... [2022-02-20 18:08:17,686 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:08:17" (1/1) ... [2022-02-20 18:08:17,699 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:08:17" (1/1) ... [2022-02-20 18:08:17,704 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:08:17" (1/1) ... [2022-02-20 18:08:17,710 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:08:17" (1/1) ... [2022-02-20 18:08:17,711 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:08:17" (1/1) ... [2022-02-20 18:08:17,713 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-02-20 18:08:17,714 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-02-20 18:08:17,714 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-02-20 18:08:17,714 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-02-20 18:08:17,715 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:08:17" (1/1) ... [2022-02-20 18:08:17,720 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-02-20 18:08:17,728 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-20 18:08:17,739 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-02-20 18:08:17,741 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-02-20 18:08:17,764 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-02-20 18:08:17,764 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-02-20 18:08:17,764 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-02-20 18:08:17,765 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-02-20 18:08:17,765 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-02-20 18:08:17,765 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-02-20 18:08:17,765 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-02-20 18:08:17,765 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-02-20 18:08:17,765 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-02-20 18:08:17,766 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-02-20 18:08:17,766 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-02-20 18:08:17,766 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-02-20 18:08:17,766 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-02-20 18:08:17,766 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2022-02-20 18:08:17,766 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2022-02-20 18:08:17,766 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2022-02-20 18:08:17,767 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2022-02-20 18:08:17,767 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-02-20 18:08:17,767 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-02-20 18:08:17,767 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-02-20 18:08:17,768 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-02-20 18:08:17,768 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-02-20 18:08:17,768 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-02-20 18:08:17,768 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-02-20 18:08:17,846 INFO L234 CfgBuilder]: Building ICFG [2022-02-20 18:08:17,848 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-02-20 18:08:18,197 INFO L275 CfgBuilder]: Performing block encoding [2022-02-20 18:08:18,204 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-02-20 18:08:18,204 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-02-20 18:08:18,206 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.02 06:08:18 BoogieIcfgContainer [2022-02-20 18:08:18,206 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-02-20 18:08:18,207 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-02-20 18:08:18,207 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-02-20 18:08:18,210 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-02-20 18:08:18,210 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 20.02 06:08:17" (1/3) ... [2022-02-20 18:08:18,211 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3e853cc8 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.02 06:08:18, skipping insertion in model container [2022-02-20 18:08:18,211 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:08:17" (2/3) ... [2022-02-20 18:08:18,211 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3e853cc8 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.02 06:08:18, skipping insertion in model container [2022-02-20 18:08:18,211 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.02 06:08:18" (3/3) ... [2022-02-20 18:08:18,212 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product64.cil.c [2022-02-20 18:08:18,216 INFO L205 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-02-20 18:08:18,216 INFO L164 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-02-20 18:08:18,257 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-02-20 18:08:18,267 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2022-02-20 18:08:18,268 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-02-20 18:08:18,296 INFO L276 IsEmpty]: Start isEmpty. Operand has 115 states, 84 states have (on average 1.369047619047619) internal successors, (115), 95 states have internal predecessors, (115), 19 states have call successors, (19), 10 states have call predecessors, (19), 10 states have return successors, (19), 14 states have call predecessors, (19), 19 states have call successors, (19) [2022-02-20 18:08:18,305 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-02-20 18:08:18,306 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:08:18,306 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:08:18,307 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:08:18,311 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:08:18,311 INFO L85 PathProgramCache]: Analyzing trace with hash 2099245654, now seen corresponding path program 1 times [2022-02-20 18:08:18,319 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:08:18,319 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [412921543] [2022-02-20 18:08:18,319 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:08:18,321 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:08:18,442 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:18,530 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-02-20 18:08:18,532 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:18,549 INFO L290 TraceCheckUtils]: 0: Hoare triple {118#true} havoc ~retValue_acc~6;~retValue_acc~6 := ~methaneLevelCritical~0;#res := ~retValue_acc~6; {118#true} is VALID [2022-02-20 18:08:18,550 INFO L290 TraceCheckUtils]: 1: Hoare triple {118#true} assume true; {118#true} is VALID [2022-02-20 18:08:18,550 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {118#true} {119#false} #298#return; {119#false} is VALID [2022-02-20 18:08:18,551 INFO L290 TraceCheckUtils]: 0: Hoare triple {118#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(13, 12);call #Ultimate.allocInit(7, 13);call write~init~int(44, 13, 0, 1);call write~init~int(77, 13, 1, 1);call write~init~int(101, 13, 2, 1);call write~init~int(116, 13, 3, 1);call write~init~int(104, 13, 4, 1);call write~init~int(58, 13, 5, 1);call write~init~int(0, 13, 6, 1);call #Ultimate.allocInit(5, 14);call write~init~int(67, 14, 0, 1);call write~init~int(82, 14, 1, 1);call write~init~int(73, 14, 2, 1);call write~init~int(84, 14, 3, 1);call write~init~int(0, 14, 4, 1);call #Ultimate.allocInit(3, 15);call write~init~int(79, 15, 0, 1);call write~init~int(75, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(41, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~pumpRunning~0 := 0;~systemActive~0 := 1;~methAndRunningLastTime~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0; {118#true} is VALID [2022-02-20 18:08:18,551 INFO L290 TraceCheckUtils]: 1: Hoare triple {118#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret31#1, main_~retValue_acc~10#1, main_~tmp~8#1;havoc main_~retValue_acc~10#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; {118#true} is VALID [2022-02-20 18:08:18,552 INFO L290 TraceCheckUtils]: 2: Hoare triple {118#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {118#true} is VALID [2022-02-20 18:08:18,552 INFO L290 TraceCheckUtils]: 3: Hoare triple {118#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {118#true} is VALID [2022-02-20 18:08:18,552 INFO L290 TraceCheckUtils]: 4: Hoare triple {118#true} main_#t~ret31#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret31#1 && main_#t~ret31#1 <= 2147483647;main_~tmp~8#1 := main_#t~ret31#1;havoc main_#t~ret31#1; {118#true} is VALID [2022-02-20 18:08:18,552 INFO L290 TraceCheckUtils]: 5: Hoare triple {118#true} assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; {118#true} is VALID [2022-02-20 18:08:18,552 INFO L290 TraceCheckUtils]: 6: Hoare triple {118#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0; {118#true} is VALID [2022-02-20 18:08:18,553 INFO L290 TraceCheckUtils]: 7: Hoare triple {118#true} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet20#1, test_#t~nondet21#1, test_#t~nondet22#1, test_#t~nondet23#1, test_~splverifierCounter~0#1, test_~tmp~6#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~6#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {118#true} is VALID [2022-02-20 18:08:18,553 INFO L290 TraceCheckUtils]: 8: Hoare triple {118#true} assume !true; {119#false} is VALID [2022-02-20 18:08:18,554 INFO L272 TraceCheckUtils]: 9: Hoare triple {119#false} call cleanup(); {119#false} is VALID [2022-02-20 18:08:18,554 INFO L290 TraceCheckUtils]: 10: Hoare triple {119#false} havoc ~i~0;havoc ~__cil_tmp2~0; {119#false} is VALID [2022-02-20 18:08:18,554 INFO L272 TraceCheckUtils]: 11: Hoare triple {119#false} call timeShift(); {119#false} is VALID [2022-02-20 18:08:18,554 INFO L290 TraceCheckUtils]: 12: Hoare triple {119#false} assume !(0 != ~pumpRunning~0); {119#false} is VALID [2022-02-20 18:08:18,554 INFO L290 TraceCheckUtils]: 13: Hoare triple {119#false} assume !(0 != ~systemActive~0); {119#false} is VALID [2022-02-20 18:08:18,555 INFO L290 TraceCheckUtils]: 14: Hoare triple {119#false} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret24#1, __utac_acc__Specification2_spec__2_#t~ret25#1, __utac_acc__Specification2_spec__2_~tmp~7#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~7#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {119#false} is VALID [2022-02-20 18:08:18,555 INFO L272 TraceCheckUtils]: 15: Hoare triple {119#false} call __utac_acc__Specification2_spec__2_#t~ret24#1 := isMethaneLevelCritical(); {118#true} is VALID [2022-02-20 18:08:18,555 INFO L290 TraceCheckUtils]: 16: Hoare triple {118#true} havoc ~retValue_acc~6;~retValue_acc~6 := ~methaneLevelCritical~0;#res := ~retValue_acc~6; {118#true} is VALID [2022-02-20 18:08:18,555 INFO L290 TraceCheckUtils]: 17: Hoare triple {118#true} assume true; {118#true} is VALID [2022-02-20 18:08:18,556 INFO L284 TraceCheckUtils]: 18: Hoare quadruple {118#true} {119#false} #298#return; {119#false} is VALID [2022-02-20 18:08:18,556 INFO L290 TraceCheckUtils]: 19: Hoare triple {119#false} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret24#1 && __utac_acc__Specification2_spec__2_#t~ret24#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~7#1 := __utac_acc__Specification2_spec__2_#t~ret24#1;havoc __utac_acc__Specification2_spec__2_#t~ret24#1; {119#false} is VALID [2022-02-20 18:08:18,556 INFO L290 TraceCheckUtils]: 20: Hoare triple {119#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~7#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~3#1;havoc isPumpRunning_~retValue_acc~3#1;isPumpRunning_~retValue_acc~3#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~3#1; {119#false} is VALID [2022-02-20 18:08:18,556 INFO L290 TraceCheckUtils]: 21: Hoare triple {119#false} __utac_acc__Specification2_spec__2_#t~ret25#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret25#1 && __utac_acc__Specification2_spec__2_#t~ret25#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret25#1;havoc __utac_acc__Specification2_spec__2_#t~ret25#1; {119#false} is VALID [2022-02-20 18:08:18,556 INFO L290 TraceCheckUtils]: 22: Hoare triple {119#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {119#false} is VALID [2022-02-20 18:08:18,557 INFO L290 TraceCheckUtils]: 23: Hoare triple {119#false} assume 0 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {119#false} is VALID [2022-02-20 18:08:18,557 INFO L290 TraceCheckUtils]: 24: Hoare triple {119#false} assume !false; {119#false} is VALID [2022-02-20 18:08:18,557 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:08:18,558 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:08:18,558 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [412921543] [2022-02-20 18:08:18,559 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [412921543] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:08:18,559 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:08:18,559 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-02-20 18:08:18,561 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1042547721] [2022-02-20 18:08:18,563 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:08:18,568 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2022-02-20 18:08:18,569 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:08:18,572 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:08:18,610 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 25 edges. 25 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:18,611 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-02-20 18:08:18,611 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:08:18,630 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-02-20 18:08:18,631 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-02-20 18:08:18,636 INFO L87 Difference]: Start difference. First operand has 115 states, 84 states have (on average 1.369047619047619) internal successors, (115), 95 states have internal predecessors, (115), 19 states have call successors, (19), 10 states have call predecessors, (19), 10 states have return successors, (19), 14 states have call predecessors, (19), 19 states have call successors, (19) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:08:18,795 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:18,795 INFO L93 Difference]: Finished difference Result 221 states and 300 transitions. [2022-02-20 18:08:18,796 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-02-20 18:08:18,796 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2022-02-20 18:08:18,796 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:08:18,797 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:08:18,808 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 300 transitions. [2022-02-20 18:08:18,809 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:08:18,816 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 300 transitions. [2022-02-20 18:08:18,816 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states and 300 transitions. [2022-02-20 18:08:19,054 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 300 edges. 300 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:19,062 INFO L225 Difference]: With dead ends: 221 [2022-02-20 18:08:19,062 INFO L226 Difference]: Without dead ends: 106 [2022-02-20 18:08:19,065 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-02-20 18:08:19,067 INFO L933 BasicCegarLoop]: 147 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 147 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:08:19,067 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 147 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:08:19,078 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 106 states. [2022-02-20 18:08:19,091 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 106 to 106. [2022-02-20 18:08:19,091 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:08:19,092 INFO L82 GeneralOperation]: Start isEquivalent. First operand 106 states. Second operand has 106 states, 77 states have (on average 1.3116883116883118) internal successors, (101), 87 states have internal predecessors, (101), 19 states have call successors, (19), 10 states have call predecessors, (19), 9 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) [2022-02-20 18:08:19,093 INFO L74 IsIncluded]: Start isIncluded. First operand 106 states. Second operand has 106 states, 77 states have (on average 1.3116883116883118) internal successors, (101), 87 states have internal predecessors, (101), 19 states have call successors, (19), 10 states have call predecessors, (19), 9 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) [2022-02-20 18:08:19,093 INFO L87 Difference]: Start difference. First operand 106 states. Second operand has 106 states, 77 states have (on average 1.3116883116883118) internal successors, (101), 87 states have internal predecessors, (101), 19 states have call successors, (19), 10 states have call predecessors, (19), 9 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) [2022-02-20 18:08:19,099 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:19,099 INFO L93 Difference]: Finished difference Result 106 states and 138 transitions. [2022-02-20 18:08:19,099 INFO L276 IsEmpty]: Start isEmpty. Operand 106 states and 138 transitions. [2022-02-20 18:08:19,100 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:19,100 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:19,101 INFO L74 IsIncluded]: Start isIncluded. First operand has 106 states, 77 states have (on average 1.3116883116883118) internal successors, (101), 87 states have internal predecessors, (101), 19 states have call successors, (19), 10 states have call predecessors, (19), 9 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) Second operand 106 states. [2022-02-20 18:08:19,101 INFO L87 Difference]: Start difference. First operand has 106 states, 77 states have (on average 1.3116883116883118) internal successors, (101), 87 states have internal predecessors, (101), 19 states have call successors, (19), 10 states have call predecessors, (19), 9 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) Second operand 106 states. [2022-02-20 18:08:19,106 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:19,106 INFO L93 Difference]: Finished difference Result 106 states and 138 transitions. [2022-02-20 18:08:19,106 INFO L276 IsEmpty]: Start isEmpty. Operand 106 states and 138 transitions. [2022-02-20 18:08:19,107 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:19,107 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:19,108 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:08:19,108 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:08:19,108 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 106 states, 77 states have (on average 1.3116883116883118) internal successors, (101), 87 states have internal predecessors, (101), 19 states have call successors, (19), 10 states have call predecessors, (19), 9 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) [2022-02-20 18:08:19,112 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 106 states to 106 states and 138 transitions. [2022-02-20 18:08:19,113 INFO L78 Accepts]: Start accepts. Automaton has 106 states and 138 transitions. Word has length 25 [2022-02-20 18:08:19,113 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:08:19,113 INFO L470 AbstractCegarLoop]: Abstraction has 106 states and 138 transitions. [2022-02-20 18:08:19,113 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:08:19,113 INFO L276 IsEmpty]: Start isEmpty. Operand 106 states and 138 transitions. [2022-02-20 18:08:19,115 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-02-20 18:08:19,115 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:08:19,115 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:08:19,115 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-02-20 18:08:19,115 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:08:19,116 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:08:19,116 INFO L85 PathProgramCache]: Analyzing trace with hash -298822754, now seen corresponding path program 1 times [2022-02-20 18:08:19,116 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:08:19,116 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1811860572] [2022-02-20 18:08:19,116 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:08:19,116 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:08:19,156 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:19,180 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-02-20 18:08:19,181 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:19,183 INFO L290 TraceCheckUtils]: 0: Hoare triple {812#true} havoc ~retValue_acc~6;~retValue_acc~6 := ~methaneLevelCritical~0;#res := ~retValue_acc~6; {812#true} is VALID [2022-02-20 18:08:19,183 INFO L290 TraceCheckUtils]: 1: Hoare triple {812#true} assume true; {812#true} is VALID [2022-02-20 18:08:19,183 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {812#true} {813#false} #298#return; {813#false} is VALID [2022-02-20 18:08:19,183 INFO L290 TraceCheckUtils]: 0: Hoare triple {812#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(13, 12);call #Ultimate.allocInit(7, 13);call write~init~int(44, 13, 0, 1);call write~init~int(77, 13, 1, 1);call write~init~int(101, 13, 2, 1);call write~init~int(116, 13, 3, 1);call write~init~int(104, 13, 4, 1);call write~init~int(58, 13, 5, 1);call write~init~int(0, 13, 6, 1);call #Ultimate.allocInit(5, 14);call write~init~int(67, 14, 0, 1);call write~init~int(82, 14, 1, 1);call write~init~int(73, 14, 2, 1);call write~init~int(84, 14, 3, 1);call write~init~int(0, 14, 4, 1);call #Ultimate.allocInit(3, 15);call write~init~int(79, 15, 0, 1);call write~init~int(75, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(41, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~pumpRunning~0 := 0;~systemActive~0 := 1;~methAndRunningLastTime~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0; {812#true} is VALID [2022-02-20 18:08:19,184 INFO L290 TraceCheckUtils]: 1: Hoare triple {812#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret31#1, main_~retValue_acc~10#1, main_~tmp~8#1;havoc main_~retValue_acc~10#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; {812#true} is VALID [2022-02-20 18:08:19,184 INFO L290 TraceCheckUtils]: 2: Hoare triple {812#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {812#true} is VALID [2022-02-20 18:08:19,184 INFO L290 TraceCheckUtils]: 3: Hoare triple {812#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {812#true} is VALID [2022-02-20 18:08:19,184 INFO L290 TraceCheckUtils]: 4: Hoare triple {812#true} main_#t~ret31#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret31#1 && main_#t~ret31#1 <= 2147483647;main_~tmp~8#1 := main_#t~ret31#1;havoc main_#t~ret31#1; {812#true} is VALID [2022-02-20 18:08:19,184 INFO L290 TraceCheckUtils]: 5: Hoare triple {812#true} assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; {812#true} is VALID [2022-02-20 18:08:19,184 INFO L290 TraceCheckUtils]: 6: Hoare triple {812#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0; {812#true} is VALID [2022-02-20 18:08:19,184 INFO L290 TraceCheckUtils]: 7: Hoare triple {812#true} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet20#1, test_#t~nondet21#1, test_#t~nondet22#1, test_#t~nondet23#1, test_~splverifierCounter~0#1, test_~tmp~6#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~6#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {814#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} is VALID [2022-02-20 18:08:19,185 INFO L290 TraceCheckUtils]: 8: Hoare triple {814#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} assume !false; {814#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} is VALID [2022-02-20 18:08:19,185 INFO L290 TraceCheckUtils]: 9: Hoare triple {814#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} assume !(test_~splverifierCounter~0#1 < 4); {813#false} is VALID [2022-02-20 18:08:19,185 INFO L272 TraceCheckUtils]: 10: Hoare triple {813#false} call cleanup(); {813#false} is VALID [2022-02-20 18:08:19,185 INFO L290 TraceCheckUtils]: 11: Hoare triple {813#false} havoc ~i~0;havoc ~__cil_tmp2~0; {813#false} is VALID [2022-02-20 18:08:19,186 INFO L272 TraceCheckUtils]: 12: Hoare triple {813#false} call timeShift(); {813#false} is VALID [2022-02-20 18:08:19,186 INFO L290 TraceCheckUtils]: 13: Hoare triple {813#false} assume !(0 != ~pumpRunning~0); {813#false} is VALID [2022-02-20 18:08:19,186 INFO L290 TraceCheckUtils]: 14: Hoare triple {813#false} assume !(0 != ~systemActive~0); {813#false} is VALID [2022-02-20 18:08:19,186 INFO L290 TraceCheckUtils]: 15: Hoare triple {813#false} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret24#1, __utac_acc__Specification2_spec__2_#t~ret25#1, __utac_acc__Specification2_spec__2_~tmp~7#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~7#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {813#false} is VALID [2022-02-20 18:08:19,186 INFO L272 TraceCheckUtils]: 16: Hoare triple {813#false} call __utac_acc__Specification2_spec__2_#t~ret24#1 := isMethaneLevelCritical(); {812#true} is VALID [2022-02-20 18:08:19,186 INFO L290 TraceCheckUtils]: 17: Hoare triple {812#true} havoc ~retValue_acc~6;~retValue_acc~6 := ~methaneLevelCritical~0;#res := ~retValue_acc~6; {812#true} is VALID [2022-02-20 18:08:19,186 INFO L290 TraceCheckUtils]: 18: Hoare triple {812#true} assume true; {812#true} is VALID [2022-02-20 18:08:19,186 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {812#true} {813#false} #298#return; {813#false} is VALID [2022-02-20 18:08:19,186 INFO L290 TraceCheckUtils]: 20: Hoare triple {813#false} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret24#1 && __utac_acc__Specification2_spec__2_#t~ret24#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~7#1 := __utac_acc__Specification2_spec__2_#t~ret24#1;havoc __utac_acc__Specification2_spec__2_#t~ret24#1; {813#false} is VALID [2022-02-20 18:08:19,187 INFO L290 TraceCheckUtils]: 21: Hoare triple {813#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~7#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~3#1;havoc isPumpRunning_~retValue_acc~3#1;isPumpRunning_~retValue_acc~3#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~3#1; {813#false} is VALID [2022-02-20 18:08:19,187 INFO L290 TraceCheckUtils]: 22: Hoare triple {813#false} __utac_acc__Specification2_spec__2_#t~ret25#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret25#1 && __utac_acc__Specification2_spec__2_#t~ret25#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret25#1;havoc __utac_acc__Specification2_spec__2_#t~ret25#1; {813#false} is VALID [2022-02-20 18:08:19,187 INFO L290 TraceCheckUtils]: 23: Hoare triple {813#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {813#false} is VALID [2022-02-20 18:08:19,187 INFO L290 TraceCheckUtils]: 24: Hoare triple {813#false} assume 0 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {813#false} is VALID [2022-02-20 18:08:19,187 INFO L290 TraceCheckUtils]: 25: Hoare triple {813#false} assume !false; {813#false} is VALID [2022-02-20 18:08:19,187 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:08:19,187 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:08:19,187 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1811860572] [2022-02-20 18:08:19,188 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1811860572] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:08:19,188 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:08:19,188 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-02-20 18:08:19,188 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [417865187] [2022-02-20 18:08:19,188 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:08:19,189 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2022-02-20 18:08:19,189 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:08:19,189 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:08:19,206 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 26 edges. 26 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:19,206 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-02-20 18:08:19,206 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:08:19,207 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-02-20 18:08:19,207 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:08:19,207 INFO L87 Difference]: Start difference. First operand 106 states and 138 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:08:19,298 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:19,299 INFO L93 Difference]: Finished difference Result 172 states and 224 transitions. [2022-02-20 18:08:19,299 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-02-20 18:08:19,299 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2022-02-20 18:08:19,299 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:08:19,299 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:08:19,302 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 224 transitions. [2022-02-20 18:08:19,302 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:08:19,305 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 224 transitions. [2022-02-20 18:08:19,305 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 224 transitions. [2022-02-20 18:08:19,459 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 224 edges. 224 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:19,461 INFO L225 Difference]: With dead ends: 172 [2022-02-20 18:08:19,461 INFO L226 Difference]: Without dead ends: 97 [2022-02-20 18:08:19,462 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:08:19,463 INFO L933 BasicCegarLoop]: 125 mSDtfsCounter, 17 mSDsluCounter, 103 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 228 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:08:19,463 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [21 Valid, 228 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:08:19,464 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 97 states. [2022-02-20 18:08:19,468 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 97 to 97. [2022-02-20 18:08:19,468 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:08:19,469 INFO L82 GeneralOperation]: Start isEquivalent. First operand 97 states. Second operand has 97 states, 71 states have (on average 1.323943661971831) internal successors, (94), 81 states have internal predecessors, (94), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2022-02-20 18:08:19,469 INFO L74 IsIncluded]: Start isIncluded. First operand 97 states. Second operand has 97 states, 71 states have (on average 1.323943661971831) internal successors, (94), 81 states have internal predecessors, (94), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2022-02-20 18:08:19,469 INFO L87 Difference]: Start difference. First operand 97 states. Second operand has 97 states, 71 states have (on average 1.323943661971831) internal successors, (94), 81 states have internal predecessors, (94), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2022-02-20 18:08:19,472 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:19,472 INFO L93 Difference]: Finished difference Result 97 states and 126 transitions. [2022-02-20 18:08:19,472 INFO L276 IsEmpty]: Start isEmpty. Operand 97 states and 126 transitions. [2022-02-20 18:08:19,473 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:19,473 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:19,474 INFO L74 IsIncluded]: Start isIncluded. First operand has 97 states, 71 states have (on average 1.323943661971831) internal successors, (94), 81 states have internal predecessors, (94), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) Second operand 97 states. [2022-02-20 18:08:19,474 INFO L87 Difference]: Start difference. First operand has 97 states, 71 states have (on average 1.323943661971831) internal successors, (94), 81 states have internal predecessors, (94), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) Second operand 97 states. [2022-02-20 18:08:19,477 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:19,477 INFO L93 Difference]: Finished difference Result 97 states and 126 transitions. [2022-02-20 18:08:19,477 INFO L276 IsEmpty]: Start isEmpty. Operand 97 states and 126 transitions. [2022-02-20 18:08:19,477 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:19,477 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:19,477 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:08:19,477 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:08:19,478 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 97 states, 71 states have (on average 1.323943661971831) internal successors, (94), 81 states have internal predecessors, (94), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2022-02-20 18:08:19,480 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 97 states to 97 states and 126 transitions. [2022-02-20 18:08:19,480 INFO L78 Accepts]: Start accepts. Automaton has 97 states and 126 transitions. Word has length 26 [2022-02-20 18:08:19,480 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:08:19,481 INFO L470 AbstractCegarLoop]: Abstraction has 97 states and 126 transitions. [2022-02-20 18:08:19,481 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:08:19,481 INFO L276 IsEmpty]: Start isEmpty. Operand 97 states and 126 transitions. [2022-02-20 18:08:19,481 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-02-20 18:08:19,481 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:08:19,481 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:08:19,482 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-02-20 18:08:19,482 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:08:19,482 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:08:19,482 INFO L85 PathProgramCache]: Analyzing trace with hash -1504880537, now seen corresponding path program 1 times [2022-02-20 18:08:19,482 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:08:19,482 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1436686836] [2022-02-20 18:08:19,482 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:08:19,483 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:08:19,515 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:19,546 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-02-20 18:08:19,549 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:19,551 INFO L290 TraceCheckUtils]: 0: Hoare triple {1403#true} havoc ~retValue_acc~6;~retValue_acc~6 := ~methaneLevelCritical~0;#res := ~retValue_acc~6; {1403#true} is VALID [2022-02-20 18:08:19,551 INFO L290 TraceCheckUtils]: 1: Hoare triple {1403#true} assume true; {1403#true} is VALID [2022-02-20 18:08:19,551 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1403#true} {1404#false} #298#return; {1404#false} is VALID [2022-02-20 18:08:19,551 INFO L290 TraceCheckUtils]: 0: Hoare triple {1403#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(13, 12);call #Ultimate.allocInit(7, 13);call write~init~int(44, 13, 0, 1);call write~init~int(77, 13, 1, 1);call write~init~int(101, 13, 2, 1);call write~init~int(116, 13, 3, 1);call write~init~int(104, 13, 4, 1);call write~init~int(58, 13, 5, 1);call write~init~int(0, 13, 6, 1);call #Ultimate.allocInit(5, 14);call write~init~int(67, 14, 0, 1);call write~init~int(82, 14, 1, 1);call write~init~int(73, 14, 2, 1);call write~init~int(84, 14, 3, 1);call write~init~int(0, 14, 4, 1);call #Ultimate.allocInit(3, 15);call write~init~int(79, 15, 0, 1);call write~init~int(75, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(41, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~pumpRunning~0 := 0;~systemActive~0 := 1;~methAndRunningLastTime~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0; {1403#true} is VALID [2022-02-20 18:08:19,552 INFO L290 TraceCheckUtils]: 1: Hoare triple {1403#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret31#1, main_~retValue_acc~10#1, main_~tmp~8#1;havoc main_~retValue_acc~10#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; {1403#true} is VALID [2022-02-20 18:08:19,552 INFO L290 TraceCheckUtils]: 2: Hoare triple {1403#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {1403#true} is VALID [2022-02-20 18:08:19,552 INFO L290 TraceCheckUtils]: 3: Hoare triple {1403#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {1405#(= |ULTIMATE.start_valid_product_#res#1| 1)} is VALID [2022-02-20 18:08:19,552 INFO L290 TraceCheckUtils]: 4: Hoare triple {1405#(= |ULTIMATE.start_valid_product_#res#1| 1)} main_#t~ret31#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret31#1 && main_#t~ret31#1 <= 2147483647;main_~tmp~8#1 := main_#t~ret31#1;havoc main_#t~ret31#1; {1406#(= |ULTIMATE.start_main_~tmp~8#1| 1)} is VALID [2022-02-20 18:08:19,553 INFO L290 TraceCheckUtils]: 5: Hoare triple {1406#(= |ULTIMATE.start_main_~tmp~8#1| 1)} assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; {1403#true} is VALID [2022-02-20 18:08:19,553 INFO L290 TraceCheckUtils]: 6: Hoare triple {1403#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0; {1403#true} is VALID [2022-02-20 18:08:19,553 INFO L290 TraceCheckUtils]: 7: Hoare triple {1403#true} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet20#1, test_#t~nondet21#1, test_#t~nondet22#1, test_#t~nondet23#1, test_~splverifierCounter~0#1, test_~tmp~6#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~6#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {1403#true} is VALID [2022-02-20 18:08:19,553 INFO L290 TraceCheckUtils]: 8: Hoare triple {1403#true} assume !false; {1403#true} is VALID [2022-02-20 18:08:19,553 INFO L290 TraceCheckUtils]: 9: Hoare triple {1403#true} assume test_~splverifierCounter~0#1 < 4; {1403#true} is VALID [2022-02-20 18:08:19,553 INFO L290 TraceCheckUtils]: 10: Hoare triple {1403#true} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp~6#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {1403#true} is VALID [2022-02-20 18:08:19,553 INFO L290 TraceCheckUtils]: 11: Hoare triple {1403#true} assume !(0 != test_~tmp~6#1); {1403#true} is VALID [2022-02-20 18:08:19,553 INFO L290 TraceCheckUtils]: 12: Hoare triple {1403#true} assume -2147483648 <= test_#t~nondet21#1 && test_#t~nondet21#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet21#1;havoc test_#t~nondet21#1; {1403#true} is VALID [2022-02-20 18:08:19,553 INFO L290 TraceCheckUtils]: 13: Hoare triple {1403#true} assume !(0 != test_~tmp___0~2#1); {1403#true} is VALID [2022-02-20 18:08:19,554 INFO L290 TraceCheckUtils]: 14: Hoare triple {1403#true} assume -2147483648 <= test_#t~nondet22#1 && test_#t~nondet22#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {1403#true} is VALID [2022-02-20 18:08:19,554 INFO L290 TraceCheckUtils]: 15: Hoare triple {1403#true} assume 0 != test_~tmp___2~0#1;assume { :begin_inline_startSystem } true;~systemActive~0 := 1; {1407#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:08:19,554 INFO L290 TraceCheckUtils]: 16: Hoare triple {1407#(not (= 0 ~systemActive~0))} assume { :end_inline_startSystem } true; {1407#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:08:19,555 INFO L272 TraceCheckUtils]: 17: Hoare triple {1407#(not (= 0 ~systemActive~0))} call timeShift(); {1407#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:08:19,556 INFO L290 TraceCheckUtils]: 18: Hoare triple {1407#(not (= 0 ~systemActive~0))} assume !(0 != ~pumpRunning~0); {1407#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:08:19,556 INFO L290 TraceCheckUtils]: 19: Hoare triple {1407#(not (= 0 ~systemActive~0))} assume !(0 != ~systemActive~0); {1404#false} is VALID [2022-02-20 18:08:19,557 INFO L290 TraceCheckUtils]: 20: Hoare triple {1404#false} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret24#1, __utac_acc__Specification2_spec__2_#t~ret25#1, __utac_acc__Specification2_spec__2_~tmp~7#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~7#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {1404#false} is VALID [2022-02-20 18:08:19,557 INFO L272 TraceCheckUtils]: 21: Hoare triple {1404#false} call __utac_acc__Specification2_spec__2_#t~ret24#1 := isMethaneLevelCritical(); {1403#true} is VALID [2022-02-20 18:08:19,557 INFO L290 TraceCheckUtils]: 22: Hoare triple {1403#true} havoc ~retValue_acc~6;~retValue_acc~6 := ~methaneLevelCritical~0;#res := ~retValue_acc~6; {1403#true} is VALID [2022-02-20 18:08:19,557 INFO L290 TraceCheckUtils]: 23: Hoare triple {1403#true} assume true; {1403#true} is VALID [2022-02-20 18:08:19,558 INFO L284 TraceCheckUtils]: 24: Hoare quadruple {1403#true} {1404#false} #298#return; {1404#false} is VALID [2022-02-20 18:08:19,559 INFO L290 TraceCheckUtils]: 25: Hoare triple {1404#false} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret24#1 && __utac_acc__Specification2_spec__2_#t~ret24#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~7#1 := __utac_acc__Specification2_spec__2_#t~ret24#1;havoc __utac_acc__Specification2_spec__2_#t~ret24#1; {1404#false} is VALID [2022-02-20 18:08:19,559 INFO L290 TraceCheckUtils]: 26: Hoare triple {1404#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~7#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~3#1;havoc isPumpRunning_~retValue_acc~3#1;isPumpRunning_~retValue_acc~3#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~3#1; {1404#false} is VALID [2022-02-20 18:08:19,559 INFO L290 TraceCheckUtils]: 27: Hoare triple {1404#false} __utac_acc__Specification2_spec__2_#t~ret25#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret25#1 && __utac_acc__Specification2_spec__2_#t~ret25#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret25#1;havoc __utac_acc__Specification2_spec__2_#t~ret25#1; {1404#false} is VALID [2022-02-20 18:08:19,559 INFO L290 TraceCheckUtils]: 28: Hoare triple {1404#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {1404#false} is VALID [2022-02-20 18:08:19,559 INFO L290 TraceCheckUtils]: 29: Hoare triple {1404#false} assume 0 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {1404#false} is VALID [2022-02-20 18:08:19,560 INFO L290 TraceCheckUtils]: 30: Hoare triple {1404#false} assume !false; {1404#false} is VALID [2022-02-20 18:08:19,560 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:08:19,561 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:08:19,561 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1436686836] [2022-02-20 18:08:19,561 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1436686836] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:08:19,562 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:08:19,562 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-02-20 18:08:19,562 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [269372930] [2022-02-20 18:08:19,562 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:08:19,564 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31 [2022-02-20 18:08:19,564 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:08:19,564 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:08:19,593 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 31 edges. 31 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:19,593 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-02-20 18:08:19,594 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:08:19,594 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-02-20 18:08:19,594 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-02-20 18:08:19,595 INFO L87 Difference]: Start difference. First operand 97 states and 126 transitions. Second operand has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:08:19,941 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:19,941 INFO L93 Difference]: Finished difference Result 229 states and 301 transitions. [2022-02-20 18:08:19,942 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-02-20 18:08:19,942 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31 [2022-02-20 18:08:19,942 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:08:19,942 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:08:19,945 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 301 transitions. [2022-02-20 18:08:19,945 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:08:19,948 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 301 transitions. [2022-02-20 18:08:19,963 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states and 301 transitions. [2022-02-20 18:08:20,243 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 301 edges. 301 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:20,246 INFO L225 Difference]: With dead ends: 229 [2022-02-20 18:08:20,248 INFO L226 Difference]: Without dead ends: 140 [2022-02-20 18:08:20,248 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-02-20 18:08:20,249 INFO L933 BasicCegarLoop]: 138 mSDtfsCounter, 191 mSDsluCounter, 276 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 21 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 191 SdHoareTripleChecker+Valid, 414 SdHoareTripleChecker+Invalid, 33 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 21 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:08:20,263 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [191 Valid, 414 Invalid, 33 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [21 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:08:20,264 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 140 states. [2022-02-20 18:08:20,271 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 140 to 137. [2022-02-20 18:08:20,271 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:08:20,272 INFO L82 GeneralOperation]: Start isEquivalent. First operand 140 states. Second operand has 137 states, 101 states have (on average 1.3465346534653466) internal successors, (136), 114 states have internal predecessors, (136), 21 states have call successors, (21), 14 states have call predecessors, (21), 14 states have return successors, (22), 15 states have call predecessors, (22), 21 states have call successors, (22) [2022-02-20 18:08:20,272 INFO L74 IsIncluded]: Start isIncluded. First operand 140 states. Second operand has 137 states, 101 states have (on average 1.3465346534653466) internal successors, (136), 114 states have internal predecessors, (136), 21 states have call successors, (21), 14 states have call predecessors, (21), 14 states have return successors, (22), 15 states have call predecessors, (22), 21 states have call successors, (22) [2022-02-20 18:08:20,273 INFO L87 Difference]: Start difference. First operand 140 states. Second operand has 137 states, 101 states have (on average 1.3465346534653466) internal successors, (136), 114 states have internal predecessors, (136), 21 states have call successors, (21), 14 states have call predecessors, (21), 14 states have return successors, (22), 15 states have call predecessors, (22), 21 states have call successors, (22) [2022-02-20 18:08:20,276 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:20,276 INFO L93 Difference]: Finished difference Result 140 states and 181 transitions. [2022-02-20 18:08:20,277 INFO L276 IsEmpty]: Start isEmpty. Operand 140 states and 181 transitions. [2022-02-20 18:08:20,277 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:20,277 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:20,277 INFO L74 IsIncluded]: Start isIncluded. First operand has 137 states, 101 states have (on average 1.3465346534653466) internal successors, (136), 114 states have internal predecessors, (136), 21 states have call successors, (21), 14 states have call predecessors, (21), 14 states have return successors, (22), 15 states have call predecessors, (22), 21 states have call successors, (22) Second operand 140 states. [2022-02-20 18:08:20,278 INFO L87 Difference]: Start difference. First operand has 137 states, 101 states have (on average 1.3465346534653466) internal successors, (136), 114 states have internal predecessors, (136), 21 states have call successors, (21), 14 states have call predecessors, (21), 14 states have return successors, (22), 15 states have call predecessors, (22), 21 states have call successors, (22) Second operand 140 states. [2022-02-20 18:08:20,282 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:20,282 INFO L93 Difference]: Finished difference Result 140 states and 181 transitions. [2022-02-20 18:08:20,282 INFO L276 IsEmpty]: Start isEmpty. Operand 140 states and 181 transitions. [2022-02-20 18:08:20,282 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:20,282 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:20,283 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:08:20,283 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:08:20,299 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 137 states, 101 states have (on average 1.3465346534653466) internal successors, (136), 114 states have internal predecessors, (136), 21 states have call successors, (21), 14 states have call predecessors, (21), 14 states have return successors, (22), 15 states have call predecessors, (22), 21 states have call successors, (22) [2022-02-20 18:08:20,304 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 137 states to 137 states and 179 transitions. [2022-02-20 18:08:20,304 INFO L78 Accepts]: Start accepts. Automaton has 137 states and 179 transitions. Word has length 31 [2022-02-20 18:08:20,304 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:08:20,304 INFO L470 AbstractCegarLoop]: Abstraction has 137 states and 179 transitions. [2022-02-20 18:08:20,304 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:08:20,304 INFO L276 IsEmpty]: Start isEmpty. Operand 137 states and 179 transitions. [2022-02-20 18:08:20,305 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2022-02-20 18:08:20,305 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:08:20,305 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:08:20,305 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-02-20 18:08:20,305 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:08:20,306 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:08:20,306 INFO L85 PathProgramCache]: Analyzing trace with hash -1902279984, now seen corresponding path program 1 times [2022-02-20 18:08:20,306 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:08:20,306 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2129191775] [2022-02-20 18:08:20,306 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:08:20,306 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:08:20,352 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:20,413 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-02-20 18:08:20,415 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:20,428 INFO L290 TraceCheckUtils]: 0: Hoare triple {2219#true} havoc ~retValue_acc~6;~retValue_acc~6 := ~methaneLevelCritical~0;#res := ~retValue_acc~6; {2219#true} is VALID [2022-02-20 18:08:20,429 INFO L290 TraceCheckUtils]: 1: Hoare triple {2219#true} assume true; {2219#true} is VALID [2022-02-20 18:08:20,429 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {2219#true} {2221#(= ~pumpRunning~0 0)} #298#return; {2221#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:20,430 INFO L290 TraceCheckUtils]: 0: Hoare triple {2219#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(13, 12);call #Ultimate.allocInit(7, 13);call write~init~int(44, 13, 0, 1);call write~init~int(77, 13, 1, 1);call write~init~int(101, 13, 2, 1);call write~init~int(116, 13, 3, 1);call write~init~int(104, 13, 4, 1);call write~init~int(58, 13, 5, 1);call write~init~int(0, 13, 6, 1);call #Ultimate.allocInit(5, 14);call write~init~int(67, 14, 0, 1);call write~init~int(82, 14, 1, 1);call write~init~int(73, 14, 2, 1);call write~init~int(84, 14, 3, 1);call write~init~int(0, 14, 4, 1);call #Ultimate.allocInit(3, 15);call write~init~int(79, 15, 0, 1);call write~init~int(75, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(41, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~pumpRunning~0 := 0;~systemActive~0 := 1;~methAndRunningLastTime~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0; {2221#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:20,430 INFO L290 TraceCheckUtils]: 1: Hoare triple {2221#(= ~pumpRunning~0 0)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret31#1, main_~retValue_acc~10#1, main_~tmp~8#1;havoc main_~retValue_acc~10#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; {2221#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:20,430 INFO L290 TraceCheckUtils]: 2: Hoare triple {2221#(= ~pumpRunning~0 0)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {2221#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:20,431 INFO L290 TraceCheckUtils]: 3: Hoare triple {2221#(= ~pumpRunning~0 0)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {2221#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:20,431 INFO L290 TraceCheckUtils]: 4: Hoare triple {2221#(= ~pumpRunning~0 0)} main_#t~ret31#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret31#1 && main_#t~ret31#1 <= 2147483647;main_~tmp~8#1 := main_#t~ret31#1;havoc main_#t~ret31#1; {2221#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:20,432 INFO L290 TraceCheckUtils]: 5: Hoare triple {2221#(= ~pumpRunning~0 0)} assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; {2221#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:20,432 INFO L290 TraceCheckUtils]: 6: Hoare triple {2221#(= ~pumpRunning~0 0)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0; {2221#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:20,432 INFO L290 TraceCheckUtils]: 7: Hoare triple {2221#(= ~pumpRunning~0 0)} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet20#1, test_#t~nondet21#1, test_#t~nondet22#1, test_#t~nondet23#1, test_~splverifierCounter~0#1, test_~tmp~6#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~6#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {2221#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:20,433 INFO L290 TraceCheckUtils]: 8: Hoare triple {2221#(= ~pumpRunning~0 0)} assume !false; {2221#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:20,433 INFO L290 TraceCheckUtils]: 9: Hoare triple {2221#(= ~pumpRunning~0 0)} assume test_~splverifierCounter~0#1 < 4; {2221#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:20,433 INFO L290 TraceCheckUtils]: 10: Hoare triple {2221#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp~6#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {2221#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:20,434 INFO L290 TraceCheckUtils]: 11: Hoare triple {2221#(= ~pumpRunning~0 0)} assume !(0 != test_~tmp~6#1); {2221#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:20,434 INFO L290 TraceCheckUtils]: 12: Hoare triple {2221#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet21#1 && test_#t~nondet21#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet21#1;havoc test_#t~nondet21#1; {2221#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:20,435 INFO L290 TraceCheckUtils]: 13: Hoare triple {2221#(= ~pumpRunning~0 0)} assume !(0 != test_~tmp___0~2#1); {2221#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:20,435 INFO L290 TraceCheckUtils]: 14: Hoare triple {2221#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet22#1 && test_#t~nondet22#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {2221#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:20,435 INFO L290 TraceCheckUtils]: 15: Hoare triple {2221#(= ~pumpRunning~0 0)} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet23#1 && test_#t~nondet23#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet23#1;havoc test_#t~nondet23#1; {2221#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:20,436 INFO L290 TraceCheckUtils]: 16: Hoare triple {2221#(= ~pumpRunning~0 0)} assume 0 != test_~tmp___1~0#1;assume { :begin_inline_stopSystem } true; {2221#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:20,436 INFO L290 TraceCheckUtils]: 17: Hoare triple {2221#(= ~pumpRunning~0 0)} assume !(0 != ~pumpRunning~0); {2221#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:20,436 INFO L290 TraceCheckUtils]: 18: Hoare triple {2221#(= ~pumpRunning~0 0)} ~systemActive~0 := 0; {2221#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:20,437 INFO L290 TraceCheckUtils]: 19: Hoare triple {2221#(= ~pumpRunning~0 0)} assume { :end_inline_stopSystem } true; {2221#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:20,437 INFO L272 TraceCheckUtils]: 20: Hoare triple {2221#(= ~pumpRunning~0 0)} call timeShift(); {2221#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:20,438 INFO L290 TraceCheckUtils]: 21: Hoare triple {2221#(= ~pumpRunning~0 0)} assume !(0 != ~pumpRunning~0); {2221#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:20,438 INFO L290 TraceCheckUtils]: 22: Hoare triple {2221#(= ~pumpRunning~0 0)} assume !(0 != ~systemActive~0); {2221#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:20,438 INFO L290 TraceCheckUtils]: 23: Hoare triple {2221#(= ~pumpRunning~0 0)} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret24#1, __utac_acc__Specification2_spec__2_#t~ret25#1, __utac_acc__Specification2_spec__2_~tmp~7#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~7#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {2221#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:20,438 INFO L272 TraceCheckUtils]: 24: Hoare triple {2221#(= ~pumpRunning~0 0)} call __utac_acc__Specification2_spec__2_#t~ret24#1 := isMethaneLevelCritical(); {2219#true} is VALID [2022-02-20 18:08:20,438 INFO L290 TraceCheckUtils]: 25: Hoare triple {2219#true} havoc ~retValue_acc~6;~retValue_acc~6 := ~methaneLevelCritical~0;#res := ~retValue_acc~6; {2219#true} is VALID [2022-02-20 18:08:20,439 INFO L290 TraceCheckUtils]: 26: Hoare triple {2219#true} assume true; {2219#true} is VALID [2022-02-20 18:08:20,439 INFO L284 TraceCheckUtils]: 27: Hoare quadruple {2219#true} {2221#(= ~pumpRunning~0 0)} #298#return; {2221#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:20,439 INFO L290 TraceCheckUtils]: 28: Hoare triple {2221#(= ~pumpRunning~0 0)} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret24#1 && __utac_acc__Specification2_spec__2_#t~ret24#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~7#1 := __utac_acc__Specification2_spec__2_#t~ret24#1;havoc __utac_acc__Specification2_spec__2_#t~ret24#1; {2221#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:20,440 INFO L290 TraceCheckUtils]: 29: Hoare triple {2221#(= ~pumpRunning~0 0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp~7#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~3#1;havoc isPumpRunning_~retValue_acc~3#1;isPumpRunning_~retValue_acc~3#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~3#1; {2225#(= |timeShift_isPumpRunning_#res#1| 0)} is VALID [2022-02-20 18:08:20,440 INFO L290 TraceCheckUtils]: 30: Hoare triple {2225#(= |timeShift_isPumpRunning_#res#1| 0)} __utac_acc__Specification2_spec__2_#t~ret25#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret25#1 && __utac_acc__Specification2_spec__2_#t~ret25#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret25#1;havoc __utac_acc__Specification2_spec__2_#t~ret25#1; {2226#(= |timeShift___utac_acc__Specification2_spec__2_~tmp___0~3#1| 0)} is VALID [2022-02-20 18:08:20,441 INFO L290 TraceCheckUtils]: 31: Hoare triple {2226#(= |timeShift___utac_acc__Specification2_spec__2_~tmp___0~3#1| 0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {2220#false} is VALID [2022-02-20 18:08:20,441 INFO L290 TraceCheckUtils]: 32: Hoare triple {2220#false} assume 0 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {2220#false} is VALID [2022-02-20 18:08:20,441 INFO L290 TraceCheckUtils]: 33: Hoare triple {2220#false} assume !false; {2220#false} is VALID [2022-02-20 18:08:20,441 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:08:20,441 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:08:20,441 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2129191775] [2022-02-20 18:08:20,442 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2129191775] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:08:20,442 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:08:20,442 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-02-20 18:08:20,442 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1843956091] [2022-02-20 18:08:20,442 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:08:20,442 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 34 [2022-02-20 18:08:20,442 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:08:20,443 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:08:20,480 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 34 edges. 34 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:20,480 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-02-20 18:08:20,481 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:08:20,481 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-02-20 18:08:20,481 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-02-20 18:08:20,481 INFO L87 Difference]: Start difference. First operand 137 states and 179 transitions. Second operand has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:08:20,846 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:20,846 INFO L93 Difference]: Finished difference Result 320 states and 430 transitions. [2022-02-20 18:08:20,847 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-02-20 18:08:20,847 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 34 [2022-02-20 18:08:20,848 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:08:20,849 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:08:20,854 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 325 transitions. [2022-02-20 18:08:20,854 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:08:20,859 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 325 transitions. [2022-02-20 18:08:20,860 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states and 325 transitions. [2022-02-20 18:08:21,055 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 325 edges. 325 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:21,062 INFO L225 Difference]: With dead ends: 320 [2022-02-20 18:08:21,062 INFO L226 Difference]: Without dead ends: 191 [2022-02-20 18:08:21,063 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-02-20 18:08:21,071 INFO L933 BasicCegarLoop]: 131 mSDtfsCounter, 76 mSDsluCounter, 345 mSDsCounter, 0 mSdLazyCounter, 31 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 76 SdHoareTripleChecker+Valid, 476 SdHoareTripleChecker+Invalid, 43 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 31 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:08:21,073 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [76 Valid, 476 Invalid, 43 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 31 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:08:21,074 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 191 states. [2022-02-20 18:08:21,087 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 191 to 181. [2022-02-20 18:08:21,090 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:08:21,090 INFO L82 GeneralOperation]: Start isEquivalent. First operand 191 states. Second operand has 181 states, 134 states have (on average 1.2761194029850746) internal successors, (171), 146 states have internal predecessors, (171), 25 states have call successors, (25), 21 states have call predecessors, (25), 21 states have return successors, (33), 23 states have call predecessors, (33), 25 states have call successors, (33) [2022-02-20 18:08:21,091 INFO L74 IsIncluded]: Start isIncluded. First operand 191 states. Second operand has 181 states, 134 states have (on average 1.2761194029850746) internal successors, (171), 146 states have internal predecessors, (171), 25 states have call successors, (25), 21 states have call predecessors, (25), 21 states have return successors, (33), 23 states have call predecessors, (33), 25 states have call successors, (33) [2022-02-20 18:08:21,091 INFO L87 Difference]: Start difference. First operand 191 states. Second operand has 181 states, 134 states have (on average 1.2761194029850746) internal successors, (171), 146 states have internal predecessors, (171), 25 states have call successors, (25), 21 states have call predecessors, (25), 21 states have return successors, (33), 23 states have call predecessors, (33), 25 states have call successors, (33) [2022-02-20 18:08:21,097 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:21,097 INFO L93 Difference]: Finished difference Result 191 states and 243 transitions. [2022-02-20 18:08:21,097 INFO L276 IsEmpty]: Start isEmpty. Operand 191 states and 243 transitions. [2022-02-20 18:08:21,099 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:21,099 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:21,100 INFO L74 IsIncluded]: Start isIncluded. First operand has 181 states, 134 states have (on average 1.2761194029850746) internal successors, (171), 146 states have internal predecessors, (171), 25 states have call successors, (25), 21 states have call predecessors, (25), 21 states have return successors, (33), 23 states have call predecessors, (33), 25 states have call successors, (33) Second operand 191 states. [2022-02-20 18:08:21,101 INFO L87 Difference]: Start difference. First operand has 181 states, 134 states have (on average 1.2761194029850746) internal successors, (171), 146 states have internal predecessors, (171), 25 states have call successors, (25), 21 states have call predecessors, (25), 21 states have return successors, (33), 23 states have call predecessors, (33), 25 states have call successors, (33) Second operand 191 states. [2022-02-20 18:08:21,120 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:21,120 INFO L93 Difference]: Finished difference Result 191 states and 243 transitions. [2022-02-20 18:08:21,120 INFO L276 IsEmpty]: Start isEmpty. Operand 191 states and 243 transitions. [2022-02-20 18:08:21,121 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:21,121 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:21,121 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:08:21,121 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:08:21,123 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 181 states, 134 states have (on average 1.2761194029850746) internal successors, (171), 146 states have internal predecessors, (171), 25 states have call successors, (25), 21 states have call predecessors, (25), 21 states have return successors, (33), 23 states have call predecessors, (33), 25 states have call successors, (33) [2022-02-20 18:08:21,127 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 181 states to 181 states and 229 transitions. [2022-02-20 18:08:21,127 INFO L78 Accepts]: Start accepts. Automaton has 181 states and 229 transitions. Word has length 34 [2022-02-20 18:08:21,127 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:08:21,128 INFO L470 AbstractCegarLoop]: Abstraction has 181 states and 229 transitions. [2022-02-20 18:08:21,128 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:08:21,128 INFO L276 IsEmpty]: Start isEmpty. Operand 181 states and 229 transitions. [2022-02-20 18:08:21,130 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 63 [2022-02-20 18:08:21,131 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:08:21,131 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:08:21,131 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-02-20 18:08:21,131 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:08:21,132 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:08:21,132 INFO L85 PathProgramCache]: Analyzing trace with hash 269763792, now seen corresponding path program 1 times [2022-02-20 18:08:21,132 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:08:21,132 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1885667575] [2022-02-20 18:08:21,132 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:08:21,132 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:08:21,155 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:21,177 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-02-20 18:08:21,184 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:21,192 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-02-20 18:08:21,198 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:21,215 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:08:21,218 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:21,220 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:08:21,221 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:21,223 INFO L290 TraceCheckUtils]: 0: Hoare triple {3317#true} havoc ~retValue_acc~6;~retValue_acc~6 := ~methaneLevelCritical~0;#res := ~retValue_acc~6; {3317#true} is VALID [2022-02-20 18:08:21,223 INFO L290 TraceCheckUtils]: 1: Hoare triple {3317#true} assume true; {3317#true} is VALID [2022-02-20 18:08:21,223 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {3317#true} {3317#true} #316#return; {3317#true} is VALID [2022-02-20 18:08:21,223 INFO L290 TraceCheckUtils]: 0: Hoare triple {3317#true} havoc ~retValue_acc~2; {3317#true} is VALID [2022-02-20 18:08:21,223 INFO L272 TraceCheckUtils]: 1: Hoare triple {3317#true} call #t~ret9 := isMethaneLevelCritical(); {3317#true} is VALID [2022-02-20 18:08:21,224 INFO L290 TraceCheckUtils]: 2: Hoare triple {3317#true} havoc ~retValue_acc~6;~retValue_acc~6 := ~methaneLevelCritical~0;#res := ~retValue_acc~6; {3317#true} is VALID [2022-02-20 18:08:21,224 INFO L290 TraceCheckUtils]: 3: Hoare triple {3317#true} assume true; {3317#true} is VALID [2022-02-20 18:08:21,224 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {3317#true} {3317#true} #316#return; {3317#true} is VALID [2022-02-20 18:08:21,224 INFO L290 TraceCheckUtils]: 5: Hoare triple {3317#true} assume -2147483648 <= #t~ret9 && #t~ret9 <= 2147483647;~retValue_acc~2 := #t~ret9;havoc #t~ret9;#res := ~retValue_acc~2; {3317#true} is VALID [2022-02-20 18:08:21,224 INFO L290 TraceCheckUtils]: 6: Hoare triple {3317#true} assume true; {3317#true} is VALID [2022-02-20 18:08:21,225 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {3317#true} {3318#false} #310#return; {3318#false} is VALID [2022-02-20 18:08:21,225 INFO L290 TraceCheckUtils]: 0: Hoare triple {3350#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {3317#true} is VALID [2022-02-20 18:08:21,225 INFO L290 TraceCheckUtils]: 1: Hoare triple {3317#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret18#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {3317#true} is VALID [2022-02-20 18:08:21,225 INFO L290 TraceCheckUtils]: 2: Hoare triple {3317#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~8#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {3317#true} is VALID [2022-02-20 18:08:21,225 INFO L290 TraceCheckUtils]: 3: Hoare triple {3317#true} isHighWaterLevel_#t~ret18#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret18#1 && isHighWaterLevel_#t~ret18#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret18#1;havoc isHighWaterLevel_#t~ret18#1; {3317#true} is VALID [2022-02-20 18:08:21,226 INFO L290 TraceCheckUtils]: 4: Hoare triple {3317#true} assume 0 != isHighWaterLevel_~tmp~4#1;isHighWaterLevel_~tmp___0~0#1 := 0; {3374#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0)} is VALID [2022-02-20 18:08:21,226 INFO L290 TraceCheckUtils]: 5: Hoare triple {3374#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0)} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {3375#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)} is VALID [2022-02-20 18:08:21,227 INFO L290 TraceCheckUtils]: 6: Hoare triple {3375#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {3376#(= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 0)} is VALID [2022-02-20 18:08:21,227 INFO L290 TraceCheckUtils]: 7: Hoare triple {3376#(= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 0)} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret8#1, activatePump_~tmp~3#1;havoc activatePump_~tmp~3#1; {3318#false} is VALID [2022-02-20 18:08:21,227 INFO L272 TraceCheckUtils]: 8: Hoare triple {3318#false} call activatePump_#t~ret8#1 := isMethaneAlarm(); {3317#true} is VALID [2022-02-20 18:08:21,228 INFO L290 TraceCheckUtils]: 9: Hoare triple {3317#true} havoc ~retValue_acc~2; {3317#true} is VALID [2022-02-20 18:08:21,228 INFO L272 TraceCheckUtils]: 10: Hoare triple {3317#true} call #t~ret9 := isMethaneLevelCritical(); {3317#true} is VALID [2022-02-20 18:08:21,228 INFO L290 TraceCheckUtils]: 11: Hoare triple {3317#true} havoc ~retValue_acc~6;~retValue_acc~6 := ~methaneLevelCritical~0;#res := ~retValue_acc~6; {3317#true} is VALID [2022-02-20 18:08:21,228 INFO L290 TraceCheckUtils]: 12: Hoare triple {3317#true} assume true; {3317#true} is VALID [2022-02-20 18:08:21,229 INFO L284 TraceCheckUtils]: 13: Hoare quadruple {3317#true} {3317#true} #316#return; {3317#true} is VALID [2022-02-20 18:08:21,229 INFO L290 TraceCheckUtils]: 14: Hoare triple {3317#true} assume -2147483648 <= #t~ret9 && #t~ret9 <= 2147483647;~retValue_acc~2 := #t~ret9;havoc #t~ret9;#res := ~retValue_acc~2; {3317#true} is VALID [2022-02-20 18:08:21,229 INFO L290 TraceCheckUtils]: 15: Hoare triple {3317#true} assume true; {3317#true} is VALID [2022-02-20 18:08:21,229 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {3317#true} {3318#false} #310#return; {3318#false} is VALID [2022-02-20 18:08:21,229 INFO L290 TraceCheckUtils]: 17: Hoare triple {3318#false} assume -2147483648 <= activatePump_#t~ret8#1 && activatePump_#t~ret8#1 <= 2147483647;activatePump_~tmp~3#1 := activatePump_#t~ret8#1;havoc activatePump_#t~ret8#1; {3318#false} is VALID [2022-02-20 18:08:21,229 INFO L290 TraceCheckUtils]: 18: Hoare triple {3318#false} assume !(0 != activatePump_~tmp~3#1);assume { :begin_inline_activatePump__wrappee__lowWaterSensor } true;~pumpRunning~0 := 1; {3318#false} is VALID [2022-02-20 18:08:21,230 INFO L290 TraceCheckUtils]: 19: Hoare triple {3318#false} assume { :end_inline_activatePump__wrappee__lowWaterSensor } true; {3318#false} is VALID [2022-02-20 18:08:21,230 INFO L290 TraceCheckUtils]: 20: Hoare triple {3318#false} assume { :end_inline_activatePump } true; {3318#false} is VALID [2022-02-20 18:08:21,230 INFO L290 TraceCheckUtils]: 21: Hoare triple {3318#false} assume true; {3318#false} is VALID [2022-02-20 18:08:21,230 INFO L284 TraceCheckUtils]: 22: Hoare quadruple {3318#false} {3317#true} #284#return; {3318#false} is VALID [2022-02-20 18:08:21,230 INFO L290 TraceCheckUtils]: 0: Hoare triple {3350#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {3317#true} is VALID [2022-02-20 18:08:21,231 INFO L290 TraceCheckUtils]: 1: Hoare triple {3317#true} assume !(0 != ~pumpRunning~0); {3317#true} is VALID [2022-02-20 18:08:21,231 INFO L272 TraceCheckUtils]: 2: Hoare triple {3317#true} call processEnvironment__wrappee__highWaterSensor(); {3350#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:21,231 INFO L290 TraceCheckUtils]: 3: Hoare triple {3350#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {3317#true} is VALID [2022-02-20 18:08:21,231 INFO L290 TraceCheckUtils]: 4: Hoare triple {3317#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret18#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {3317#true} is VALID [2022-02-20 18:08:21,232 INFO L290 TraceCheckUtils]: 5: Hoare triple {3317#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~8#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {3317#true} is VALID [2022-02-20 18:08:21,232 INFO L290 TraceCheckUtils]: 6: Hoare triple {3317#true} isHighWaterLevel_#t~ret18#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret18#1 && isHighWaterLevel_#t~ret18#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret18#1;havoc isHighWaterLevel_#t~ret18#1; {3317#true} is VALID [2022-02-20 18:08:21,232 INFO L290 TraceCheckUtils]: 7: Hoare triple {3317#true} assume 0 != isHighWaterLevel_~tmp~4#1;isHighWaterLevel_~tmp___0~0#1 := 0; {3374#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0)} is VALID [2022-02-20 18:08:21,233 INFO L290 TraceCheckUtils]: 8: Hoare triple {3374#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0)} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {3375#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)} is VALID [2022-02-20 18:08:21,233 INFO L290 TraceCheckUtils]: 9: Hoare triple {3375#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {3376#(= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 0)} is VALID [2022-02-20 18:08:21,233 INFO L290 TraceCheckUtils]: 10: Hoare triple {3376#(= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 0)} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret8#1, activatePump_~tmp~3#1;havoc activatePump_~tmp~3#1; {3318#false} is VALID [2022-02-20 18:08:21,233 INFO L272 TraceCheckUtils]: 11: Hoare triple {3318#false} call activatePump_#t~ret8#1 := isMethaneAlarm(); {3317#true} is VALID [2022-02-20 18:08:21,234 INFO L290 TraceCheckUtils]: 12: Hoare triple {3317#true} havoc ~retValue_acc~2; {3317#true} is VALID [2022-02-20 18:08:21,234 INFO L272 TraceCheckUtils]: 13: Hoare triple {3317#true} call #t~ret9 := isMethaneLevelCritical(); {3317#true} is VALID [2022-02-20 18:08:21,234 INFO L290 TraceCheckUtils]: 14: Hoare triple {3317#true} havoc ~retValue_acc~6;~retValue_acc~6 := ~methaneLevelCritical~0;#res := ~retValue_acc~6; {3317#true} is VALID [2022-02-20 18:08:21,234 INFO L290 TraceCheckUtils]: 15: Hoare triple {3317#true} assume true; {3317#true} is VALID [2022-02-20 18:08:21,234 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {3317#true} {3317#true} #316#return; {3317#true} is VALID [2022-02-20 18:08:21,234 INFO L290 TraceCheckUtils]: 17: Hoare triple {3317#true} assume -2147483648 <= #t~ret9 && #t~ret9 <= 2147483647;~retValue_acc~2 := #t~ret9;havoc #t~ret9;#res := ~retValue_acc~2; {3317#true} is VALID [2022-02-20 18:08:21,235 INFO L290 TraceCheckUtils]: 18: Hoare triple {3317#true} assume true; {3317#true} is VALID [2022-02-20 18:08:21,235 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {3317#true} {3318#false} #310#return; {3318#false} is VALID [2022-02-20 18:08:21,235 INFO L290 TraceCheckUtils]: 20: Hoare triple {3318#false} assume -2147483648 <= activatePump_#t~ret8#1 && activatePump_#t~ret8#1 <= 2147483647;activatePump_~tmp~3#1 := activatePump_#t~ret8#1;havoc activatePump_#t~ret8#1; {3318#false} is VALID [2022-02-20 18:08:21,235 INFO L290 TraceCheckUtils]: 21: Hoare triple {3318#false} assume !(0 != activatePump_~tmp~3#1);assume { :begin_inline_activatePump__wrappee__lowWaterSensor } true;~pumpRunning~0 := 1; {3318#false} is VALID [2022-02-20 18:08:21,235 INFO L290 TraceCheckUtils]: 22: Hoare triple {3318#false} assume { :end_inline_activatePump__wrappee__lowWaterSensor } true; {3318#false} is VALID [2022-02-20 18:08:21,236 INFO L290 TraceCheckUtils]: 23: Hoare triple {3318#false} assume { :end_inline_activatePump } true; {3318#false} is VALID [2022-02-20 18:08:21,236 INFO L290 TraceCheckUtils]: 24: Hoare triple {3318#false} assume true; {3318#false} is VALID [2022-02-20 18:08:21,236 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {3318#false} {3317#true} #284#return; {3318#false} is VALID [2022-02-20 18:08:21,236 INFO L290 TraceCheckUtils]: 26: Hoare triple {3318#false} assume true; {3318#false} is VALID [2022-02-20 18:08:21,236 INFO L284 TraceCheckUtils]: 27: Hoare quadruple {3318#false} {3317#true} #296#return; {3318#false} is VALID [2022-02-20 18:08:21,237 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2022-02-20 18:08:21,238 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:21,240 INFO L290 TraceCheckUtils]: 0: Hoare triple {3317#true} havoc ~retValue_acc~6;~retValue_acc~6 := ~methaneLevelCritical~0;#res := ~retValue_acc~6; {3317#true} is VALID [2022-02-20 18:08:21,240 INFO L290 TraceCheckUtils]: 1: Hoare triple {3317#true} assume true; {3317#true} is VALID [2022-02-20 18:08:21,240 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {3317#true} {3318#false} #298#return; {3318#false} is VALID [2022-02-20 18:08:21,240 INFO L290 TraceCheckUtils]: 0: Hoare triple {3317#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(13, 12);call #Ultimate.allocInit(7, 13);call write~init~int(44, 13, 0, 1);call write~init~int(77, 13, 1, 1);call write~init~int(101, 13, 2, 1);call write~init~int(116, 13, 3, 1);call write~init~int(104, 13, 4, 1);call write~init~int(58, 13, 5, 1);call write~init~int(0, 13, 6, 1);call #Ultimate.allocInit(5, 14);call write~init~int(67, 14, 0, 1);call write~init~int(82, 14, 1, 1);call write~init~int(73, 14, 2, 1);call write~init~int(84, 14, 3, 1);call write~init~int(0, 14, 4, 1);call #Ultimate.allocInit(3, 15);call write~init~int(79, 15, 0, 1);call write~init~int(75, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(41, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~pumpRunning~0 := 0;~systemActive~0 := 1;~methAndRunningLastTime~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0; {3317#true} is VALID [2022-02-20 18:08:21,241 INFO L290 TraceCheckUtils]: 1: Hoare triple {3317#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret31#1, main_~retValue_acc~10#1, main_~tmp~8#1;havoc main_~retValue_acc~10#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; {3317#true} is VALID [2022-02-20 18:08:21,241 INFO L290 TraceCheckUtils]: 2: Hoare triple {3317#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {3317#true} is VALID [2022-02-20 18:08:21,241 INFO L290 TraceCheckUtils]: 3: Hoare triple {3317#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {3317#true} is VALID [2022-02-20 18:08:21,241 INFO L290 TraceCheckUtils]: 4: Hoare triple {3317#true} main_#t~ret31#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret31#1 && main_#t~ret31#1 <= 2147483647;main_~tmp~8#1 := main_#t~ret31#1;havoc main_#t~ret31#1; {3317#true} is VALID [2022-02-20 18:08:21,241 INFO L290 TraceCheckUtils]: 5: Hoare triple {3317#true} assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; {3317#true} is VALID [2022-02-20 18:08:21,241 INFO L290 TraceCheckUtils]: 6: Hoare triple {3317#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0; {3317#true} is VALID [2022-02-20 18:08:21,241 INFO L290 TraceCheckUtils]: 7: Hoare triple {3317#true} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet20#1, test_#t~nondet21#1, test_#t~nondet22#1, test_#t~nondet23#1, test_~splverifierCounter~0#1, test_~tmp~6#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~6#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {3317#true} is VALID [2022-02-20 18:08:21,242 INFO L290 TraceCheckUtils]: 8: Hoare triple {3317#true} assume !false; {3317#true} is VALID [2022-02-20 18:08:21,242 INFO L290 TraceCheckUtils]: 9: Hoare triple {3317#true} assume test_~splverifierCounter~0#1 < 4; {3317#true} is VALID [2022-02-20 18:08:21,242 INFO L290 TraceCheckUtils]: 10: Hoare triple {3317#true} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp~6#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {3317#true} is VALID [2022-02-20 18:08:21,242 INFO L290 TraceCheckUtils]: 11: Hoare triple {3317#true} assume !(0 != test_~tmp~6#1); {3317#true} is VALID [2022-02-20 18:08:21,242 INFO L290 TraceCheckUtils]: 12: Hoare triple {3317#true} assume -2147483648 <= test_#t~nondet21#1 && test_#t~nondet21#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet21#1;havoc test_#t~nondet21#1; {3317#true} is VALID [2022-02-20 18:08:21,242 INFO L290 TraceCheckUtils]: 13: Hoare triple {3317#true} assume !(0 != test_~tmp___0~2#1); {3317#true} is VALID [2022-02-20 18:08:21,242 INFO L290 TraceCheckUtils]: 14: Hoare triple {3317#true} assume -2147483648 <= test_#t~nondet22#1 && test_#t~nondet22#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {3317#true} is VALID [2022-02-20 18:08:21,243 INFO L290 TraceCheckUtils]: 15: Hoare triple {3317#true} assume 0 != test_~tmp___2~0#1;assume { :begin_inline_startSystem } true;~systemActive~0 := 1; {3317#true} is VALID [2022-02-20 18:08:21,243 INFO L290 TraceCheckUtils]: 16: Hoare triple {3317#true} assume { :end_inline_startSystem } true; {3317#true} is VALID [2022-02-20 18:08:21,243 INFO L272 TraceCheckUtils]: 17: Hoare triple {3317#true} call timeShift(); {3317#true} is VALID [2022-02-20 18:08:21,243 INFO L290 TraceCheckUtils]: 18: Hoare triple {3317#true} assume !(0 != ~pumpRunning~0); {3317#true} is VALID [2022-02-20 18:08:21,243 INFO L290 TraceCheckUtils]: 19: Hoare triple {3317#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret7#1, processEnvironment_~tmp~2#1;havoc processEnvironment_~tmp~2#1; {3317#true} is VALID [2022-02-20 18:08:21,243 INFO L290 TraceCheckUtils]: 20: Hoare triple {3317#true} assume !(0 != ~pumpRunning~0); {3317#true} is VALID [2022-02-20 18:08:21,244 INFO L272 TraceCheckUtils]: 21: Hoare triple {3317#true} call processEnvironment__wrappee__methaneQuery(); {3350#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:21,244 INFO L290 TraceCheckUtils]: 22: Hoare triple {3350#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {3317#true} is VALID [2022-02-20 18:08:21,244 INFO L290 TraceCheckUtils]: 23: Hoare triple {3317#true} assume !(0 != ~pumpRunning~0); {3317#true} is VALID [2022-02-20 18:08:21,244 INFO L272 TraceCheckUtils]: 24: Hoare triple {3317#true} call processEnvironment__wrappee__highWaterSensor(); {3350#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:21,245 INFO L290 TraceCheckUtils]: 25: Hoare triple {3350#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {3317#true} is VALID [2022-02-20 18:08:21,245 INFO L290 TraceCheckUtils]: 26: Hoare triple {3317#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret18#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {3317#true} is VALID [2022-02-20 18:08:21,245 INFO L290 TraceCheckUtils]: 27: Hoare triple {3317#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~8#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {3317#true} is VALID [2022-02-20 18:08:21,245 INFO L290 TraceCheckUtils]: 28: Hoare triple {3317#true} isHighWaterLevel_#t~ret18#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret18#1 && isHighWaterLevel_#t~ret18#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret18#1;havoc isHighWaterLevel_#t~ret18#1; {3317#true} is VALID [2022-02-20 18:08:21,245 INFO L290 TraceCheckUtils]: 29: Hoare triple {3317#true} assume 0 != isHighWaterLevel_~tmp~4#1;isHighWaterLevel_~tmp___0~0#1 := 0; {3374#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0)} is VALID [2022-02-20 18:08:21,246 INFO L290 TraceCheckUtils]: 30: Hoare triple {3374#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0)} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {3375#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)} is VALID [2022-02-20 18:08:21,246 INFO L290 TraceCheckUtils]: 31: Hoare triple {3375#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {3376#(= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 0)} is VALID [2022-02-20 18:08:21,246 INFO L290 TraceCheckUtils]: 32: Hoare triple {3376#(= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 0)} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret8#1, activatePump_~tmp~3#1;havoc activatePump_~tmp~3#1; {3318#false} is VALID [2022-02-20 18:08:21,247 INFO L272 TraceCheckUtils]: 33: Hoare triple {3318#false} call activatePump_#t~ret8#1 := isMethaneAlarm(); {3317#true} is VALID [2022-02-20 18:08:21,247 INFO L290 TraceCheckUtils]: 34: Hoare triple {3317#true} havoc ~retValue_acc~2; {3317#true} is VALID [2022-02-20 18:08:21,247 INFO L272 TraceCheckUtils]: 35: Hoare triple {3317#true} call #t~ret9 := isMethaneLevelCritical(); {3317#true} is VALID [2022-02-20 18:08:21,247 INFO L290 TraceCheckUtils]: 36: Hoare triple {3317#true} havoc ~retValue_acc~6;~retValue_acc~6 := ~methaneLevelCritical~0;#res := ~retValue_acc~6; {3317#true} is VALID [2022-02-20 18:08:21,247 INFO L290 TraceCheckUtils]: 37: Hoare triple {3317#true} assume true; {3317#true} is VALID [2022-02-20 18:08:21,247 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {3317#true} {3317#true} #316#return; {3317#true} is VALID [2022-02-20 18:08:21,247 INFO L290 TraceCheckUtils]: 39: Hoare triple {3317#true} assume -2147483648 <= #t~ret9 && #t~ret9 <= 2147483647;~retValue_acc~2 := #t~ret9;havoc #t~ret9;#res := ~retValue_acc~2; {3317#true} is VALID [2022-02-20 18:08:21,248 INFO L290 TraceCheckUtils]: 40: Hoare triple {3317#true} assume true; {3317#true} is VALID [2022-02-20 18:08:21,248 INFO L284 TraceCheckUtils]: 41: Hoare quadruple {3317#true} {3318#false} #310#return; {3318#false} is VALID [2022-02-20 18:08:21,248 INFO L290 TraceCheckUtils]: 42: Hoare triple {3318#false} assume -2147483648 <= activatePump_#t~ret8#1 && activatePump_#t~ret8#1 <= 2147483647;activatePump_~tmp~3#1 := activatePump_#t~ret8#1;havoc activatePump_#t~ret8#1; {3318#false} is VALID [2022-02-20 18:08:21,248 INFO L290 TraceCheckUtils]: 43: Hoare triple {3318#false} assume !(0 != activatePump_~tmp~3#1);assume { :begin_inline_activatePump__wrappee__lowWaterSensor } true;~pumpRunning~0 := 1; {3318#false} is VALID [2022-02-20 18:08:21,248 INFO L290 TraceCheckUtils]: 44: Hoare triple {3318#false} assume { :end_inline_activatePump__wrappee__lowWaterSensor } true; {3318#false} is VALID [2022-02-20 18:08:21,248 INFO L290 TraceCheckUtils]: 45: Hoare triple {3318#false} assume { :end_inline_activatePump } true; {3318#false} is VALID [2022-02-20 18:08:21,248 INFO L290 TraceCheckUtils]: 46: Hoare triple {3318#false} assume true; {3318#false} is VALID [2022-02-20 18:08:21,248 INFO L284 TraceCheckUtils]: 47: Hoare quadruple {3318#false} {3317#true} #284#return; {3318#false} is VALID [2022-02-20 18:08:21,249 INFO L290 TraceCheckUtils]: 48: Hoare triple {3318#false} assume true; {3318#false} is VALID [2022-02-20 18:08:21,249 INFO L284 TraceCheckUtils]: 49: Hoare quadruple {3318#false} {3317#true} #296#return; {3318#false} is VALID [2022-02-20 18:08:21,249 INFO L290 TraceCheckUtils]: 50: Hoare triple {3318#false} assume { :end_inline_processEnvironment } true; {3318#false} is VALID [2022-02-20 18:08:21,249 INFO L290 TraceCheckUtils]: 51: Hoare triple {3318#false} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret24#1, __utac_acc__Specification2_spec__2_#t~ret25#1, __utac_acc__Specification2_spec__2_~tmp~7#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~7#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {3318#false} is VALID [2022-02-20 18:08:21,249 INFO L272 TraceCheckUtils]: 52: Hoare triple {3318#false} call __utac_acc__Specification2_spec__2_#t~ret24#1 := isMethaneLevelCritical(); {3317#true} is VALID [2022-02-20 18:08:21,249 INFO L290 TraceCheckUtils]: 53: Hoare triple {3317#true} havoc ~retValue_acc~6;~retValue_acc~6 := ~methaneLevelCritical~0;#res := ~retValue_acc~6; {3317#true} is VALID [2022-02-20 18:08:21,249 INFO L290 TraceCheckUtils]: 54: Hoare triple {3317#true} assume true; {3317#true} is VALID [2022-02-20 18:08:21,250 INFO L284 TraceCheckUtils]: 55: Hoare quadruple {3317#true} {3318#false} #298#return; {3318#false} is VALID [2022-02-20 18:08:21,250 INFO L290 TraceCheckUtils]: 56: Hoare triple {3318#false} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret24#1 && __utac_acc__Specification2_spec__2_#t~ret24#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~7#1 := __utac_acc__Specification2_spec__2_#t~ret24#1;havoc __utac_acc__Specification2_spec__2_#t~ret24#1; {3318#false} is VALID [2022-02-20 18:08:21,250 INFO L290 TraceCheckUtils]: 57: Hoare triple {3318#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~7#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~3#1;havoc isPumpRunning_~retValue_acc~3#1;isPumpRunning_~retValue_acc~3#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~3#1; {3318#false} is VALID [2022-02-20 18:08:21,250 INFO L290 TraceCheckUtils]: 58: Hoare triple {3318#false} __utac_acc__Specification2_spec__2_#t~ret25#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret25#1 && __utac_acc__Specification2_spec__2_#t~ret25#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret25#1;havoc __utac_acc__Specification2_spec__2_#t~ret25#1; {3318#false} is VALID [2022-02-20 18:08:21,250 INFO L290 TraceCheckUtils]: 59: Hoare triple {3318#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {3318#false} is VALID [2022-02-20 18:08:21,250 INFO L290 TraceCheckUtils]: 60: Hoare triple {3318#false} assume 0 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {3318#false} is VALID [2022-02-20 18:08:21,250 INFO L290 TraceCheckUtils]: 61: Hoare triple {3318#false} assume !false; {3318#false} is VALID [2022-02-20 18:08:21,251 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-02-20 18:08:21,251 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:08:21,251 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1885667575] [2022-02-20 18:08:21,251 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1885667575] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:08:21,251 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:08:21,252 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-02-20 18:08:21,252 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [738070612] [2022-02-20 18:08:21,252 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:08:21,252 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 5 states have internal predecessors, (49), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 62 [2022-02-20 18:08:21,253 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:08:21,253 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 5 states have internal predecessors, (49), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-02-20 18:08:21,282 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 60 edges. 60 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:21,283 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-02-20 18:08:21,283 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:08:21,283 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-02-20 18:08:21,283 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-02-20 18:08:21,284 INFO L87 Difference]: Start difference. First operand 181 states and 229 transitions. Second operand has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 5 states have internal predecessors, (49), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-02-20 18:08:21,684 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:21,684 INFO L93 Difference]: Finished difference Result 391 states and 510 transitions. [2022-02-20 18:08:21,685 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-02-20 18:08:21,685 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 5 states have internal predecessors, (49), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 62 [2022-02-20 18:08:21,685 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:08:21,685 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 5 states have internal predecessors, (49), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-02-20 18:08:21,688 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 284 transitions. [2022-02-20 18:08:21,688 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 5 states have internal predecessors, (49), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-02-20 18:08:21,692 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 284 transitions. [2022-02-20 18:08:21,692 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 284 transitions. [2022-02-20 18:08:21,870 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 284 edges. 284 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:21,874 INFO L225 Difference]: With dead ends: 391 [2022-02-20 18:08:21,874 INFO L226 Difference]: Without dead ends: 218 [2022-02-20 18:08:21,875 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-02-20 18:08:21,878 INFO L933 BasicCegarLoop]: 110 mSDtfsCounter, 77 mSDsluCounter, 319 mSDsCounter, 0 mSdLazyCounter, 159 mSolverCounterSat, 28 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 82 SdHoareTripleChecker+Valid, 429 SdHoareTripleChecker+Invalid, 187 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 28 IncrementalHoareTripleChecker+Valid, 159 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-02-20 18:08:21,878 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [82 Valid, 429 Invalid, 187 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [28 Valid, 159 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-02-20 18:08:21,879 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 218 states. [2022-02-20 18:08:21,897 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 218 to 211. [2022-02-20 18:08:21,897 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:08:21,898 INFO L82 GeneralOperation]: Start isEquivalent. First operand 218 states. Second operand has 211 states, 157 states have (on average 1.2611464968152866) internal successors, (198), 169 states have internal predecessors, (198), 27 states have call successors, (27), 21 states have call predecessors, (27), 26 states have return successors, (40), 29 states have call predecessors, (40), 27 states have call successors, (40) [2022-02-20 18:08:21,899 INFO L74 IsIncluded]: Start isIncluded. First operand 218 states. Second operand has 211 states, 157 states have (on average 1.2611464968152866) internal successors, (198), 169 states have internal predecessors, (198), 27 states have call successors, (27), 21 states have call predecessors, (27), 26 states have return successors, (40), 29 states have call predecessors, (40), 27 states have call successors, (40) [2022-02-20 18:08:21,900 INFO L87 Difference]: Start difference. First operand 218 states. Second operand has 211 states, 157 states have (on average 1.2611464968152866) internal successors, (198), 169 states have internal predecessors, (198), 27 states have call successors, (27), 21 states have call predecessors, (27), 26 states have return successors, (40), 29 states have call predecessors, (40), 27 states have call successors, (40) [2022-02-20 18:08:21,917 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:21,918 INFO L93 Difference]: Finished difference Result 218 states and 274 transitions. [2022-02-20 18:08:21,918 INFO L276 IsEmpty]: Start isEmpty. Operand 218 states and 274 transitions. [2022-02-20 18:08:21,918 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:21,918 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:21,919 INFO L74 IsIncluded]: Start isIncluded. First operand has 211 states, 157 states have (on average 1.2611464968152866) internal successors, (198), 169 states have internal predecessors, (198), 27 states have call successors, (27), 21 states have call predecessors, (27), 26 states have return successors, (40), 29 states have call predecessors, (40), 27 states have call successors, (40) Second operand 218 states. [2022-02-20 18:08:21,919 INFO L87 Difference]: Start difference. First operand has 211 states, 157 states have (on average 1.2611464968152866) internal successors, (198), 169 states have internal predecessors, (198), 27 states have call successors, (27), 21 states have call predecessors, (27), 26 states have return successors, (40), 29 states have call predecessors, (40), 27 states have call successors, (40) Second operand 218 states. [2022-02-20 18:08:21,925 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:21,925 INFO L93 Difference]: Finished difference Result 218 states and 274 transitions. [2022-02-20 18:08:21,925 INFO L276 IsEmpty]: Start isEmpty. Operand 218 states and 274 transitions. [2022-02-20 18:08:21,925 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:21,926 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:21,926 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:08:21,926 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:08:21,926 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 211 states, 157 states have (on average 1.2611464968152866) internal successors, (198), 169 states have internal predecessors, (198), 27 states have call successors, (27), 21 states have call predecessors, (27), 26 states have return successors, (40), 29 states have call predecessors, (40), 27 states have call successors, (40) [2022-02-20 18:08:21,930 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 211 states to 211 states and 265 transitions. [2022-02-20 18:08:21,930 INFO L78 Accepts]: Start accepts. Automaton has 211 states and 265 transitions. Word has length 62 [2022-02-20 18:08:21,932 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:08:21,932 INFO L470 AbstractCegarLoop]: Abstraction has 211 states and 265 transitions. [2022-02-20 18:08:21,932 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 5 states have internal predecessors, (49), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-02-20 18:08:21,932 INFO L276 IsEmpty]: Start isEmpty. Operand 211 states and 265 transitions. [2022-02-20 18:08:21,933 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2022-02-20 18:08:21,933 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:08:21,934 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:08:21,934 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-02-20 18:08:21,934 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:08:21,934 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:08:21,934 INFO L85 PathProgramCache]: Analyzing trace with hash -541555383, now seen corresponding path program 1 times [2022-02-20 18:08:21,936 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:08:21,936 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2141623345] [2022-02-20 18:08:21,936 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:08:21,936 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:08:21,965 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:21,980 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-02-20 18:08:21,986 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:21,990 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-02-20 18:08:21,994 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:21,998 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:08:21,999 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:22,001 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:08:22,002 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:22,004 INFO L290 TraceCheckUtils]: 0: Hoare triple {4669#true} havoc ~retValue_acc~6;~retValue_acc~6 := ~methaneLevelCritical~0;#res := ~retValue_acc~6; {4669#true} is VALID [2022-02-20 18:08:22,004 INFO L290 TraceCheckUtils]: 1: Hoare triple {4669#true} assume true; {4669#true} is VALID [2022-02-20 18:08:22,004 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {4669#true} {4669#true} #316#return; {4669#true} is VALID [2022-02-20 18:08:22,004 INFO L290 TraceCheckUtils]: 0: Hoare triple {4669#true} havoc ~retValue_acc~2; {4669#true} is VALID [2022-02-20 18:08:22,004 INFO L272 TraceCheckUtils]: 1: Hoare triple {4669#true} call #t~ret9 := isMethaneLevelCritical(); {4669#true} is VALID [2022-02-20 18:08:22,004 INFO L290 TraceCheckUtils]: 2: Hoare triple {4669#true} havoc ~retValue_acc~6;~retValue_acc~6 := ~methaneLevelCritical~0;#res := ~retValue_acc~6; {4669#true} is VALID [2022-02-20 18:08:22,005 INFO L290 TraceCheckUtils]: 3: Hoare triple {4669#true} assume true; {4669#true} is VALID [2022-02-20 18:08:22,005 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {4669#true} {4669#true} #316#return; {4669#true} is VALID [2022-02-20 18:08:22,005 INFO L290 TraceCheckUtils]: 5: Hoare triple {4669#true} assume -2147483648 <= #t~ret9 && #t~ret9 <= 2147483647;~retValue_acc~2 := #t~ret9;havoc #t~ret9;#res := ~retValue_acc~2; {4669#true} is VALID [2022-02-20 18:08:22,005 INFO L290 TraceCheckUtils]: 6: Hoare triple {4669#true} assume true; {4669#true} is VALID [2022-02-20 18:08:22,005 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {4669#true} {4669#true} #310#return; {4669#true} is VALID [2022-02-20 18:08:22,005 INFO L290 TraceCheckUtils]: 0: Hoare triple {4703#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {4669#true} is VALID [2022-02-20 18:08:22,005 INFO L290 TraceCheckUtils]: 1: Hoare triple {4669#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret18#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {4669#true} is VALID [2022-02-20 18:08:22,005 INFO L290 TraceCheckUtils]: 2: Hoare triple {4669#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~8#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {4669#true} is VALID [2022-02-20 18:08:22,006 INFO L290 TraceCheckUtils]: 3: Hoare triple {4669#true} isHighWaterLevel_#t~ret18#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret18#1 && isHighWaterLevel_#t~ret18#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret18#1;havoc isHighWaterLevel_#t~ret18#1; {4669#true} is VALID [2022-02-20 18:08:22,006 INFO L290 TraceCheckUtils]: 4: Hoare triple {4669#true} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1; {4669#true} is VALID [2022-02-20 18:08:22,006 INFO L290 TraceCheckUtils]: 5: Hoare triple {4669#true} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {4669#true} is VALID [2022-02-20 18:08:22,006 INFO L290 TraceCheckUtils]: 6: Hoare triple {4669#true} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {4669#true} is VALID [2022-02-20 18:08:22,006 INFO L290 TraceCheckUtils]: 7: Hoare triple {4669#true} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret8#1, activatePump_~tmp~3#1;havoc activatePump_~tmp~3#1; {4669#true} is VALID [2022-02-20 18:08:22,006 INFO L272 TraceCheckUtils]: 8: Hoare triple {4669#true} call activatePump_#t~ret8#1 := isMethaneAlarm(); {4669#true} is VALID [2022-02-20 18:08:22,006 INFO L290 TraceCheckUtils]: 9: Hoare triple {4669#true} havoc ~retValue_acc~2; {4669#true} is VALID [2022-02-20 18:08:22,007 INFO L272 TraceCheckUtils]: 10: Hoare triple {4669#true} call #t~ret9 := isMethaneLevelCritical(); {4669#true} is VALID [2022-02-20 18:08:22,007 INFO L290 TraceCheckUtils]: 11: Hoare triple {4669#true} havoc ~retValue_acc~6;~retValue_acc~6 := ~methaneLevelCritical~0;#res := ~retValue_acc~6; {4669#true} is VALID [2022-02-20 18:08:22,007 INFO L290 TraceCheckUtils]: 12: Hoare triple {4669#true} assume true; {4669#true} is VALID [2022-02-20 18:08:22,007 INFO L284 TraceCheckUtils]: 13: Hoare quadruple {4669#true} {4669#true} #316#return; {4669#true} is VALID [2022-02-20 18:08:22,007 INFO L290 TraceCheckUtils]: 14: Hoare triple {4669#true} assume -2147483648 <= #t~ret9 && #t~ret9 <= 2147483647;~retValue_acc~2 := #t~ret9;havoc #t~ret9;#res := ~retValue_acc~2; {4669#true} is VALID [2022-02-20 18:08:22,007 INFO L290 TraceCheckUtils]: 15: Hoare triple {4669#true} assume true; {4669#true} is VALID [2022-02-20 18:08:22,007 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {4669#true} {4669#true} #310#return; {4669#true} is VALID [2022-02-20 18:08:22,008 INFO L290 TraceCheckUtils]: 17: Hoare triple {4669#true} assume -2147483648 <= activatePump_#t~ret8#1 && activatePump_#t~ret8#1 <= 2147483647;activatePump_~tmp~3#1 := activatePump_#t~ret8#1;havoc activatePump_#t~ret8#1; {4669#true} is VALID [2022-02-20 18:08:22,008 INFO L290 TraceCheckUtils]: 18: Hoare triple {4669#true} assume !(0 != activatePump_~tmp~3#1);assume { :begin_inline_activatePump__wrappee__lowWaterSensor } true;~pumpRunning~0 := 1; {4669#true} is VALID [2022-02-20 18:08:22,008 INFO L290 TraceCheckUtils]: 19: Hoare triple {4669#true} assume { :end_inline_activatePump__wrappee__lowWaterSensor } true; {4669#true} is VALID [2022-02-20 18:08:22,008 INFO L290 TraceCheckUtils]: 20: Hoare triple {4669#true} assume { :end_inline_activatePump } true; {4669#true} is VALID [2022-02-20 18:08:22,008 INFO L290 TraceCheckUtils]: 21: Hoare triple {4669#true} assume true; {4669#true} is VALID [2022-02-20 18:08:22,008 INFO L284 TraceCheckUtils]: 22: Hoare quadruple {4669#true} {4669#true} #284#return; {4669#true} is VALID [2022-02-20 18:08:22,008 INFO L290 TraceCheckUtils]: 0: Hoare triple {4703#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {4669#true} is VALID [2022-02-20 18:08:22,009 INFO L290 TraceCheckUtils]: 1: Hoare triple {4669#true} assume !(0 != ~pumpRunning~0); {4669#true} is VALID [2022-02-20 18:08:22,009 INFO L272 TraceCheckUtils]: 2: Hoare triple {4669#true} call processEnvironment__wrappee__highWaterSensor(); {4703#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:22,009 INFO L290 TraceCheckUtils]: 3: Hoare triple {4703#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {4669#true} is VALID [2022-02-20 18:08:22,009 INFO L290 TraceCheckUtils]: 4: Hoare triple {4669#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret18#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {4669#true} is VALID [2022-02-20 18:08:22,010 INFO L290 TraceCheckUtils]: 5: Hoare triple {4669#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~8#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {4669#true} is VALID [2022-02-20 18:08:22,010 INFO L290 TraceCheckUtils]: 6: Hoare triple {4669#true} isHighWaterLevel_#t~ret18#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret18#1 && isHighWaterLevel_#t~ret18#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret18#1;havoc isHighWaterLevel_#t~ret18#1; {4669#true} is VALID [2022-02-20 18:08:22,010 INFO L290 TraceCheckUtils]: 7: Hoare triple {4669#true} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1; {4669#true} is VALID [2022-02-20 18:08:22,010 INFO L290 TraceCheckUtils]: 8: Hoare triple {4669#true} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {4669#true} is VALID [2022-02-20 18:08:22,010 INFO L290 TraceCheckUtils]: 9: Hoare triple {4669#true} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {4669#true} is VALID [2022-02-20 18:08:22,010 INFO L290 TraceCheckUtils]: 10: Hoare triple {4669#true} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret8#1, activatePump_~tmp~3#1;havoc activatePump_~tmp~3#1; {4669#true} is VALID [2022-02-20 18:08:22,010 INFO L272 TraceCheckUtils]: 11: Hoare triple {4669#true} call activatePump_#t~ret8#1 := isMethaneAlarm(); {4669#true} is VALID [2022-02-20 18:08:22,010 INFO L290 TraceCheckUtils]: 12: Hoare triple {4669#true} havoc ~retValue_acc~2; {4669#true} is VALID [2022-02-20 18:08:22,011 INFO L272 TraceCheckUtils]: 13: Hoare triple {4669#true} call #t~ret9 := isMethaneLevelCritical(); {4669#true} is VALID [2022-02-20 18:08:22,011 INFO L290 TraceCheckUtils]: 14: Hoare triple {4669#true} havoc ~retValue_acc~6;~retValue_acc~6 := ~methaneLevelCritical~0;#res := ~retValue_acc~6; {4669#true} is VALID [2022-02-20 18:08:22,011 INFO L290 TraceCheckUtils]: 15: Hoare triple {4669#true} assume true; {4669#true} is VALID [2022-02-20 18:08:22,011 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {4669#true} {4669#true} #316#return; {4669#true} is VALID [2022-02-20 18:08:22,011 INFO L290 TraceCheckUtils]: 17: Hoare triple {4669#true} assume -2147483648 <= #t~ret9 && #t~ret9 <= 2147483647;~retValue_acc~2 := #t~ret9;havoc #t~ret9;#res := ~retValue_acc~2; {4669#true} is VALID [2022-02-20 18:08:22,011 INFO L290 TraceCheckUtils]: 18: Hoare triple {4669#true} assume true; {4669#true} is VALID [2022-02-20 18:08:22,011 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {4669#true} {4669#true} #310#return; {4669#true} is VALID [2022-02-20 18:08:22,011 INFO L290 TraceCheckUtils]: 20: Hoare triple {4669#true} assume -2147483648 <= activatePump_#t~ret8#1 && activatePump_#t~ret8#1 <= 2147483647;activatePump_~tmp~3#1 := activatePump_#t~ret8#1;havoc activatePump_#t~ret8#1; {4669#true} is VALID [2022-02-20 18:08:22,012 INFO L290 TraceCheckUtils]: 21: Hoare triple {4669#true} assume !(0 != activatePump_~tmp~3#1);assume { :begin_inline_activatePump__wrappee__lowWaterSensor } true;~pumpRunning~0 := 1; {4669#true} is VALID [2022-02-20 18:08:22,012 INFO L290 TraceCheckUtils]: 22: Hoare triple {4669#true} assume { :end_inline_activatePump__wrappee__lowWaterSensor } true; {4669#true} is VALID [2022-02-20 18:08:22,012 INFO L290 TraceCheckUtils]: 23: Hoare triple {4669#true} assume { :end_inline_activatePump } true; {4669#true} is VALID [2022-02-20 18:08:22,012 INFO L290 TraceCheckUtils]: 24: Hoare triple {4669#true} assume true; {4669#true} is VALID [2022-02-20 18:08:22,012 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {4669#true} {4669#true} #284#return; {4669#true} is VALID [2022-02-20 18:08:22,012 INFO L290 TraceCheckUtils]: 26: Hoare triple {4669#true} assume true; {4669#true} is VALID [2022-02-20 18:08:22,012 INFO L284 TraceCheckUtils]: 27: Hoare quadruple {4669#true} {4670#false} #296#return; {4670#false} is VALID [2022-02-20 18:08:22,013 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2022-02-20 18:08:22,014 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:22,015 INFO L290 TraceCheckUtils]: 0: Hoare triple {4669#true} havoc ~retValue_acc~6;~retValue_acc~6 := ~methaneLevelCritical~0;#res := ~retValue_acc~6; {4669#true} is VALID [2022-02-20 18:08:22,016 INFO L290 TraceCheckUtils]: 1: Hoare triple {4669#true} assume true; {4669#true} is VALID [2022-02-20 18:08:22,016 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {4669#true} {4670#false} #298#return; {4670#false} is VALID [2022-02-20 18:08:22,016 INFO L290 TraceCheckUtils]: 0: Hoare triple {4669#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(13, 12);call #Ultimate.allocInit(7, 13);call write~init~int(44, 13, 0, 1);call write~init~int(77, 13, 1, 1);call write~init~int(101, 13, 2, 1);call write~init~int(116, 13, 3, 1);call write~init~int(104, 13, 4, 1);call write~init~int(58, 13, 5, 1);call write~init~int(0, 13, 6, 1);call #Ultimate.allocInit(5, 14);call write~init~int(67, 14, 0, 1);call write~init~int(82, 14, 1, 1);call write~init~int(73, 14, 2, 1);call write~init~int(84, 14, 3, 1);call write~init~int(0, 14, 4, 1);call #Ultimate.allocInit(3, 15);call write~init~int(79, 15, 0, 1);call write~init~int(75, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(41, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~pumpRunning~0 := 0;~systemActive~0 := 1;~methAndRunningLastTime~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0; {4669#true} is VALID [2022-02-20 18:08:22,016 INFO L290 TraceCheckUtils]: 1: Hoare triple {4669#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret31#1, main_~retValue_acc~10#1, main_~tmp~8#1;havoc main_~retValue_acc~10#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; {4669#true} is VALID [2022-02-20 18:08:22,016 INFO L290 TraceCheckUtils]: 2: Hoare triple {4669#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {4669#true} is VALID [2022-02-20 18:08:22,017 INFO L290 TraceCheckUtils]: 3: Hoare triple {4669#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {4669#true} is VALID [2022-02-20 18:08:22,017 INFO L290 TraceCheckUtils]: 4: Hoare triple {4669#true} main_#t~ret31#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret31#1 && main_#t~ret31#1 <= 2147483647;main_~tmp~8#1 := main_#t~ret31#1;havoc main_#t~ret31#1; {4669#true} is VALID [2022-02-20 18:08:22,017 INFO L290 TraceCheckUtils]: 5: Hoare triple {4669#true} assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; {4669#true} is VALID [2022-02-20 18:08:22,017 INFO L290 TraceCheckUtils]: 6: Hoare triple {4669#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0; {4669#true} is VALID [2022-02-20 18:08:22,017 INFO L290 TraceCheckUtils]: 7: Hoare triple {4669#true} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet20#1, test_#t~nondet21#1, test_#t~nondet22#1, test_#t~nondet23#1, test_~splverifierCounter~0#1, test_~tmp~6#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~6#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {4669#true} is VALID [2022-02-20 18:08:22,017 INFO L290 TraceCheckUtils]: 8: Hoare triple {4669#true} assume !false; {4669#true} is VALID [2022-02-20 18:08:22,017 INFO L290 TraceCheckUtils]: 9: Hoare triple {4669#true} assume test_~splverifierCounter~0#1 < 4; {4669#true} is VALID [2022-02-20 18:08:22,018 INFO L290 TraceCheckUtils]: 10: Hoare triple {4669#true} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp~6#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {4669#true} is VALID [2022-02-20 18:08:22,018 INFO L290 TraceCheckUtils]: 11: Hoare triple {4669#true} assume !(0 != test_~tmp~6#1); {4669#true} is VALID [2022-02-20 18:08:22,018 INFO L290 TraceCheckUtils]: 12: Hoare triple {4669#true} assume -2147483648 <= test_#t~nondet21#1 && test_#t~nondet21#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet21#1;havoc test_#t~nondet21#1; {4669#true} is VALID [2022-02-20 18:08:22,018 INFO L290 TraceCheckUtils]: 13: Hoare triple {4669#true} assume !(0 != test_~tmp___0~2#1); {4669#true} is VALID [2022-02-20 18:08:22,018 INFO L290 TraceCheckUtils]: 14: Hoare triple {4669#true} assume -2147483648 <= test_#t~nondet22#1 && test_#t~nondet22#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {4669#true} is VALID [2022-02-20 18:08:22,018 INFO L290 TraceCheckUtils]: 15: Hoare triple {4669#true} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet23#1 && test_#t~nondet23#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet23#1;havoc test_#t~nondet23#1; {4669#true} is VALID [2022-02-20 18:08:22,018 INFO L290 TraceCheckUtils]: 16: Hoare triple {4669#true} assume 0 != test_~tmp___1~0#1;assume { :begin_inline_stopSystem } true; {4669#true} is VALID [2022-02-20 18:08:22,018 INFO L290 TraceCheckUtils]: 17: Hoare triple {4669#true} assume !(0 != ~pumpRunning~0); {4669#true} is VALID [2022-02-20 18:08:22,019 INFO L290 TraceCheckUtils]: 18: Hoare triple {4669#true} ~systemActive~0 := 0; {4671#(= 0 ~systemActive~0)} is VALID [2022-02-20 18:08:22,019 INFO L290 TraceCheckUtils]: 19: Hoare triple {4671#(= 0 ~systemActive~0)} assume { :end_inline_stopSystem } true; {4671#(= 0 ~systemActive~0)} is VALID [2022-02-20 18:08:22,020 INFO L272 TraceCheckUtils]: 20: Hoare triple {4671#(= 0 ~systemActive~0)} call timeShift(); {4671#(= 0 ~systemActive~0)} is VALID [2022-02-20 18:08:22,020 INFO L290 TraceCheckUtils]: 21: Hoare triple {4671#(= 0 ~systemActive~0)} assume !(0 != ~pumpRunning~0); {4671#(= 0 ~systemActive~0)} is VALID [2022-02-20 18:08:22,020 INFO L290 TraceCheckUtils]: 22: Hoare triple {4671#(= 0 ~systemActive~0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret7#1, processEnvironment_~tmp~2#1;havoc processEnvironment_~tmp~2#1; {4670#false} is VALID [2022-02-20 18:08:22,020 INFO L290 TraceCheckUtils]: 23: Hoare triple {4670#false} assume !(0 != ~pumpRunning~0); {4670#false} is VALID [2022-02-20 18:08:22,020 INFO L272 TraceCheckUtils]: 24: Hoare triple {4670#false} call processEnvironment__wrappee__methaneQuery(); {4703#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:22,021 INFO L290 TraceCheckUtils]: 25: Hoare triple {4703#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {4669#true} is VALID [2022-02-20 18:08:22,021 INFO L290 TraceCheckUtils]: 26: Hoare triple {4669#true} assume !(0 != ~pumpRunning~0); {4669#true} is VALID [2022-02-20 18:08:22,021 INFO L272 TraceCheckUtils]: 27: Hoare triple {4669#true} call processEnvironment__wrappee__highWaterSensor(); {4703#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:22,021 INFO L290 TraceCheckUtils]: 28: Hoare triple {4703#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {4669#true} is VALID [2022-02-20 18:08:22,021 INFO L290 TraceCheckUtils]: 29: Hoare triple {4669#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret18#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {4669#true} is VALID [2022-02-20 18:08:22,021 INFO L290 TraceCheckUtils]: 30: Hoare triple {4669#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~8#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {4669#true} is VALID [2022-02-20 18:08:22,022 INFO L290 TraceCheckUtils]: 31: Hoare triple {4669#true} isHighWaterLevel_#t~ret18#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret18#1 && isHighWaterLevel_#t~ret18#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret18#1;havoc isHighWaterLevel_#t~ret18#1; {4669#true} is VALID [2022-02-20 18:08:22,022 INFO L290 TraceCheckUtils]: 32: Hoare triple {4669#true} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1; {4669#true} is VALID [2022-02-20 18:08:22,022 INFO L290 TraceCheckUtils]: 33: Hoare triple {4669#true} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {4669#true} is VALID [2022-02-20 18:08:22,022 INFO L290 TraceCheckUtils]: 34: Hoare triple {4669#true} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {4669#true} is VALID [2022-02-20 18:08:22,022 INFO L290 TraceCheckUtils]: 35: Hoare triple {4669#true} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret8#1, activatePump_~tmp~3#1;havoc activatePump_~tmp~3#1; {4669#true} is VALID [2022-02-20 18:08:22,022 INFO L272 TraceCheckUtils]: 36: Hoare triple {4669#true} call activatePump_#t~ret8#1 := isMethaneAlarm(); {4669#true} is VALID [2022-02-20 18:08:22,022 INFO L290 TraceCheckUtils]: 37: Hoare triple {4669#true} havoc ~retValue_acc~2; {4669#true} is VALID [2022-02-20 18:08:22,022 INFO L272 TraceCheckUtils]: 38: Hoare triple {4669#true} call #t~ret9 := isMethaneLevelCritical(); {4669#true} is VALID [2022-02-20 18:08:22,023 INFO L290 TraceCheckUtils]: 39: Hoare triple {4669#true} havoc ~retValue_acc~6;~retValue_acc~6 := ~methaneLevelCritical~0;#res := ~retValue_acc~6; {4669#true} is VALID [2022-02-20 18:08:22,023 INFO L290 TraceCheckUtils]: 40: Hoare triple {4669#true} assume true; {4669#true} is VALID [2022-02-20 18:08:22,023 INFO L284 TraceCheckUtils]: 41: Hoare quadruple {4669#true} {4669#true} #316#return; {4669#true} is VALID [2022-02-20 18:08:22,023 INFO L290 TraceCheckUtils]: 42: Hoare triple {4669#true} assume -2147483648 <= #t~ret9 && #t~ret9 <= 2147483647;~retValue_acc~2 := #t~ret9;havoc #t~ret9;#res := ~retValue_acc~2; {4669#true} is VALID [2022-02-20 18:08:22,023 INFO L290 TraceCheckUtils]: 43: Hoare triple {4669#true} assume true; {4669#true} is VALID [2022-02-20 18:08:22,023 INFO L284 TraceCheckUtils]: 44: Hoare quadruple {4669#true} {4669#true} #310#return; {4669#true} is VALID [2022-02-20 18:08:22,023 INFO L290 TraceCheckUtils]: 45: Hoare triple {4669#true} assume -2147483648 <= activatePump_#t~ret8#1 && activatePump_#t~ret8#1 <= 2147483647;activatePump_~tmp~3#1 := activatePump_#t~ret8#1;havoc activatePump_#t~ret8#1; {4669#true} is VALID [2022-02-20 18:08:22,023 INFO L290 TraceCheckUtils]: 46: Hoare triple {4669#true} assume !(0 != activatePump_~tmp~3#1);assume { :begin_inline_activatePump__wrappee__lowWaterSensor } true;~pumpRunning~0 := 1; {4669#true} is VALID [2022-02-20 18:08:22,024 INFO L290 TraceCheckUtils]: 47: Hoare triple {4669#true} assume { :end_inline_activatePump__wrappee__lowWaterSensor } true; {4669#true} is VALID [2022-02-20 18:08:22,024 INFO L290 TraceCheckUtils]: 48: Hoare triple {4669#true} assume { :end_inline_activatePump } true; {4669#true} is VALID [2022-02-20 18:08:22,024 INFO L290 TraceCheckUtils]: 49: Hoare triple {4669#true} assume true; {4669#true} is VALID [2022-02-20 18:08:22,024 INFO L284 TraceCheckUtils]: 50: Hoare quadruple {4669#true} {4669#true} #284#return; {4669#true} is VALID [2022-02-20 18:08:22,024 INFO L290 TraceCheckUtils]: 51: Hoare triple {4669#true} assume true; {4669#true} is VALID [2022-02-20 18:08:22,024 INFO L284 TraceCheckUtils]: 52: Hoare quadruple {4669#true} {4670#false} #296#return; {4670#false} is VALID [2022-02-20 18:08:22,024 INFO L290 TraceCheckUtils]: 53: Hoare triple {4670#false} assume { :end_inline_processEnvironment } true; {4670#false} is VALID [2022-02-20 18:08:22,024 INFO L290 TraceCheckUtils]: 54: Hoare triple {4670#false} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret24#1, __utac_acc__Specification2_spec__2_#t~ret25#1, __utac_acc__Specification2_spec__2_~tmp~7#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~7#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {4670#false} is VALID [2022-02-20 18:08:22,025 INFO L272 TraceCheckUtils]: 55: Hoare triple {4670#false} call __utac_acc__Specification2_spec__2_#t~ret24#1 := isMethaneLevelCritical(); {4669#true} is VALID [2022-02-20 18:08:22,025 INFO L290 TraceCheckUtils]: 56: Hoare triple {4669#true} havoc ~retValue_acc~6;~retValue_acc~6 := ~methaneLevelCritical~0;#res := ~retValue_acc~6; {4669#true} is VALID [2022-02-20 18:08:22,025 INFO L290 TraceCheckUtils]: 57: Hoare triple {4669#true} assume true; {4669#true} is VALID [2022-02-20 18:08:22,025 INFO L284 TraceCheckUtils]: 58: Hoare quadruple {4669#true} {4670#false} #298#return; {4670#false} is VALID [2022-02-20 18:08:22,025 INFO L290 TraceCheckUtils]: 59: Hoare triple {4670#false} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret24#1 && __utac_acc__Specification2_spec__2_#t~ret24#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~7#1 := __utac_acc__Specification2_spec__2_#t~ret24#1;havoc __utac_acc__Specification2_spec__2_#t~ret24#1; {4670#false} is VALID [2022-02-20 18:08:22,025 INFO L290 TraceCheckUtils]: 60: Hoare triple {4670#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~7#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~3#1;havoc isPumpRunning_~retValue_acc~3#1;isPumpRunning_~retValue_acc~3#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~3#1; {4670#false} is VALID [2022-02-20 18:08:22,025 INFO L290 TraceCheckUtils]: 61: Hoare triple {4670#false} __utac_acc__Specification2_spec__2_#t~ret25#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret25#1 && __utac_acc__Specification2_spec__2_#t~ret25#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret25#1;havoc __utac_acc__Specification2_spec__2_#t~ret25#1; {4670#false} is VALID [2022-02-20 18:08:22,025 INFO L290 TraceCheckUtils]: 62: Hoare triple {4670#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {4670#false} is VALID [2022-02-20 18:08:22,026 INFO L290 TraceCheckUtils]: 63: Hoare triple {4670#false} assume 0 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {4670#false} is VALID [2022-02-20 18:08:22,026 INFO L290 TraceCheckUtils]: 64: Hoare triple {4670#false} assume !false; {4670#false} is VALID [2022-02-20 18:08:22,026 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-02-20 18:08:22,026 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:08:22,026 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2141623345] [2022-02-20 18:08:22,026 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2141623345] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:08:22,027 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:08:22,027 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-02-20 18:08:22,027 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [711506885] [2022-02-20 18:08:22,027 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:08:22,027 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 13.0) internal successors, (52), 3 states have internal predecessors, (52), 3 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 65 [2022-02-20 18:08:22,028 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:08:22,028 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 4 states, 4 states have (on average 13.0) internal successors, (52), 3 states have internal predecessors, (52), 3 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-02-20 18:08:22,062 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 63 edges. 63 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:22,062 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-02-20 18:08:22,062 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:08:22,063 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-02-20 18:08:22,063 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-02-20 18:08:22,063 INFO L87 Difference]: Start difference. First operand 211 states and 265 transitions. Second operand has 4 states, 4 states have (on average 13.0) internal successors, (52), 3 states have internal predecessors, (52), 3 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-02-20 18:08:22,330 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:22,331 INFO L93 Difference]: Finished difference Result 418 states and 525 transitions. [2022-02-20 18:08:22,331 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-02-20 18:08:22,331 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 13.0) internal successors, (52), 3 states have internal predecessors, (52), 3 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 65 [2022-02-20 18:08:22,331 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:08:22,332 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4 states, 4 states have (on average 13.0) internal successors, (52), 3 states have internal predecessors, (52), 3 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-02-20 18:08:22,334 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 309 transitions. [2022-02-20 18:08:22,334 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4 states, 4 states have (on average 13.0) internal successors, (52), 3 states have internal predecessors, (52), 3 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-02-20 18:08:22,336 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 309 transitions. [2022-02-20 18:08:22,337 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 309 transitions. [2022-02-20 18:08:22,514 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 309 edges. 309 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:22,518 INFO L225 Difference]: With dead ends: 418 [2022-02-20 18:08:22,518 INFO L226 Difference]: Without dead ends: 215 [2022-02-20 18:08:22,519 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-02-20 18:08:22,519 INFO L933 BasicCegarLoop]: 139 mSDtfsCounter, 106 mSDsluCounter, 154 mSDsCounter, 0 mSdLazyCounter, 81 mSolverCounterSat, 24 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 115 SdHoareTripleChecker+Valid, 293 SdHoareTripleChecker+Invalid, 105 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 24 IncrementalHoareTripleChecker+Valid, 81 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-02-20 18:08:22,519 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [115 Valid, 293 Invalid, 105 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [24 Valid, 81 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-02-20 18:08:22,521 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 215 states. [2022-02-20 18:08:22,549 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 215 to 211. [2022-02-20 18:08:22,550 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:08:22,550 INFO L82 GeneralOperation]: Start isEquivalent. First operand 215 states. Second operand has 211 states, 157 states have (on average 1.2547770700636942) internal successors, (197), 169 states have internal predecessors, (197), 27 states have call successors, (27), 21 states have call predecessors, (27), 26 states have return successors, (38), 29 states have call predecessors, (38), 27 states have call successors, (38) [2022-02-20 18:08:22,551 INFO L74 IsIncluded]: Start isIncluded. First operand 215 states. Second operand has 211 states, 157 states have (on average 1.2547770700636942) internal successors, (197), 169 states have internal predecessors, (197), 27 states have call successors, (27), 21 states have call predecessors, (27), 26 states have return successors, (38), 29 states have call predecessors, (38), 27 states have call successors, (38) [2022-02-20 18:08:22,551 INFO L87 Difference]: Start difference. First operand 215 states. Second operand has 211 states, 157 states have (on average 1.2547770700636942) internal successors, (197), 169 states have internal predecessors, (197), 27 states have call successors, (27), 21 states have call predecessors, (27), 26 states have return successors, (38), 29 states have call predecessors, (38), 27 states have call successors, (38) [2022-02-20 18:08:22,555 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:22,555 INFO L93 Difference]: Finished difference Result 215 states and 265 transitions. [2022-02-20 18:08:22,555 INFO L276 IsEmpty]: Start isEmpty. Operand 215 states and 265 transitions. [2022-02-20 18:08:22,556 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:22,556 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:22,556 INFO L74 IsIncluded]: Start isIncluded. First operand has 211 states, 157 states have (on average 1.2547770700636942) internal successors, (197), 169 states have internal predecessors, (197), 27 states have call successors, (27), 21 states have call predecessors, (27), 26 states have return successors, (38), 29 states have call predecessors, (38), 27 states have call successors, (38) Second operand 215 states. [2022-02-20 18:08:22,557 INFO L87 Difference]: Start difference. First operand has 211 states, 157 states have (on average 1.2547770700636942) internal successors, (197), 169 states have internal predecessors, (197), 27 states have call successors, (27), 21 states have call predecessors, (27), 26 states have return successors, (38), 29 states have call predecessors, (38), 27 states have call successors, (38) Second operand 215 states. [2022-02-20 18:08:22,560 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:22,560 INFO L93 Difference]: Finished difference Result 215 states and 265 transitions. [2022-02-20 18:08:22,561 INFO L276 IsEmpty]: Start isEmpty. Operand 215 states and 265 transitions. [2022-02-20 18:08:22,561 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:22,561 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:22,561 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:08:22,561 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:08:22,562 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 211 states, 157 states have (on average 1.2547770700636942) internal successors, (197), 169 states have internal predecessors, (197), 27 states have call successors, (27), 21 states have call predecessors, (27), 26 states have return successors, (38), 29 states have call predecessors, (38), 27 states have call successors, (38) [2022-02-20 18:08:22,565 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 211 states to 211 states and 262 transitions. [2022-02-20 18:08:22,565 INFO L78 Accepts]: Start accepts. Automaton has 211 states and 262 transitions. Word has length 65 [2022-02-20 18:08:22,566 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:08:22,566 INFO L470 AbstractCegarLoop]: Abstraction has 211 states and 262 transitions. [2022-02-20 18:08:22,566 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 13.0) internal successors, (52), 3 states have internal predecessors, (52), 3 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-02-20 18:08:22,566 INFO L276 IsEmpty]: Start isEmpty. Operand 211 states and 262 transitions. [2022-02-20 18:08:22,567 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 63 [2022-02-20 18:08:22,567 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:08:22,567 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:08:22,568 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-02-20 18:08:22,568 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:08:22,568 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:08:22,568 INFO L85 PathProgramCache]: Analyzing trace with hash 197377234, now seen corresponding path program 1 times [2022-02-20 18:08:22,568 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:08:22,569 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1138252697] [2022-02-20 18:08:22,569 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:08:22,569 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:08:22,597 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:22,627 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-02-20 18:08:22,635 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:22,645 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-02-20 18:08:22,653 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:22,669 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:08:22,672 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:22,674 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:08:22,675 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:22,679 INFO L290 TraceCheckUtils]: 0: Hoare triple {6043#true} havoc ~retValue_acc~6;~retValue_acc~6 := ~methaneLevelCritical~0;#res := ~retValue_acc~6; {6043#true} is VALID [2022-02-20 18:08:22,679 INFO L290 TraceCheckUtils]: 1: Hoare triple {6043#true} assume true; {6043#true} is VALID [2022-02-20 18:08:22,679 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {6043#true} {6043#true} #316#return; {6043#true} is VALID [2022-02-20 18:08:22,679 INFO L290 TraceCheckUtils]: 0: Hoare triple {6043#true} havoc ~retValue_acc~2; {6043#true} is VALID [2022-02-20 18:08:22,679 INFO L272 TraceCheckUtils]: 1: Hoare triple {6043#true} call #t~ret9 := isMethaneLevelCritical(); {6043#true} is VALID [2022-02-20 18:08:22,679 INFO L290 TraceCheckUtils]: 2: Hoare triple {6043#true} havoc ~retValue_acc~6;~retValue_acc~6 := ~methaneLevelCritical~0;#res := ~retValue_acc~6; {6043#true} is VALID [2022-02-20 18:08:22,679 INFO L290 TraceCheckUtils]: 3: Hoare triple {6043#true} assume true; {6043#true} is VALID [2022-02-20 18:08:22,680 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {6043#true} {6043#true} #316#return; {6043#true} is VALID [2022-02-20 18:08:22,680 INFO L290 TraceCheckUtils]: 5: Hoare triple {6043#true} assume -2147483648 <= #t~ret9 && #t~ret9 <= 2147483647;~retValue_acc~2 := #t~ret9;havoc #t~ret9;#res := ~retValue_acc~2; {6043#true} is VALID [2022-02-20 18:08:22,680 INFO L290 TraceCheckUtils]: 6: Hoare triple {6043#true} assume true; {6043#true} is VALID [2022-02-20 18:08:22,680 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {6043#true} {6044#false} #310#return; {6044#false} is VALID [2022-02-20 18:08:22,680 INFO L290 TraceCheckUtils]: 0: Hoare triple {6078#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {6043#true} is VALID [2022-02-20 18:08:22,680 INFO L290 TraceCheckUtils]: 1: Hoare triple {6043#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret18#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {6043#true} is VALID [2022-02-20 18:08:22,681 INFO L290 TraceCheckUtils]: 2: Hoare triple {6043#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~8#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {6102#(<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|)} is VALID [2022-02-20 18:08:22,681 INFO L290 TraceCheckUtils]: 3: Hoare triple {6102#(<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|)} isHighWaterLevel_#t~ret18#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret18#1 && isHighWaterLevel_#t~ret18#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret18#1;havoc isHighWaterLevel_#t~ret18#1; {6103#(<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~4#1|)} is VALID [2022-02-20 18:08:22,681 INFO L290 TraceCheckUtils]: 4: Hoare triple {6103#(<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~4#1|)} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1; {6044#false} is VALID [2022-02-20 18:08:22,682 INFO L290 TraceCheckUtils]: 5: Hoare triple {6044#false} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {6044#false} is VALID [2022-02-20 18:08:22,682 INFO L290 TraceCheckUtils]: 6: Hoare triple {6044#false} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {6044#false} is VALID [2022-02-20 18:08:22,682 INFO L290 TraceCheckUtils]: 7: Hoare triple {6044#false} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret8#1, activatePump_~tmp~3#1;havoc activatePump_~tmp~3#1; {6044#false} is VALID [2022-02-20 18:08:22,682 INFO L272 TraceCheckUtils]: 8: Hoare triple {6044#false} call activatePump_#t~ret8#1 := isMethaneAlarm(); {6043#true} is VALID [2022-02-20 18:08:22,682 INFO L290 TraceCheckUtils]: 9: Hoare triple {6043#true} havoc ~retValue_acc~2; {6043#true} is VALID [2022-02-20 18:08:22,682 INFO L272 TraceCheckUtils]: 10: Hoare triple {6043#true} call #t~ret9 := isMethaneLevelCritical(); {6043#true} is VALID [2022-02-20 18:08:22,682 INFO L290 TraceCheckUtils]: 11: Hoare triple {6043#true} havoc ~retValue_acc~6;~retValue_acc~6 := ~methaneLevelCritical~0;#res := ~retValue_acc~6; {6043#true} is VALID [2022-02-20 18:08:22,682 INFO L290 TraceCheckUtils]: 12: Hoare triple {6043#true} assume true; {6043#true} is VALID [2022-02-20 18:08:22,683 INFO L284 TraceCheckUtils]: 13: Hoare quadruple {6043#true} {6043#true} #316#return; {6043#true} is VALID [2022-02-20 18:08:22,683 INFO L290 TraceCheckUtils]: 14: Hoare triple {6043#true} assume -2147483648 <= #t~ret9 && #t~ret9 <= 2147483647;~retValue_acc~2 := #t~ret9;havoc #t~ret9;#res := ~retValue_acc~2; {6043#true} is VALID [2022-02-20 18:08:22,683 INFO L290 TraceCheckUtils]: 15: Hoare triple {6043#true} assume true; {6043#true} is VALID [2022-02-20 18:08:22,683 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {6043#true} {6044#false} #310#return; {6044#false} is VALID [2022-02-20 18:08:22,683 INFO L290 TraceCheckUtils]: 17: Hoare triple {6044#false} assume -2147483648 <= activatePump_#t~ret8#1 && activatePump_#t~ret8#1 <= 2147483647;activatePump_~tmp~3#1 := activatePump_#t~ret8#1;havoc activatePump_#t~ret8#1; {6044#false} is VALID [2022-02-20 18:08:22,683 INFO L290 TraceCheckUtils]: 18: Hoare triple {6044#false} assume !(0 != activatePump_~tmp~3#1);assume { :begin_inline_activatePump__wrappee__lowWaterSensor } true;~pumpRunning~0 := 1; {6044#false} is VALID [2022-02-20 18:08:22,683 INFO L290 TraceCheckUtils]: 19: Hoare triple {6044#false} assume { :end_inline_activatePump__wrappee__lowWaterSensor } true; {6044#false} is VALID [2022-02-20 18:08:22,683 INFO L290 TraceCheckUtils]: 20: Hoare triple {6044#false} assume { :end_inline_activatePump } true; {6044#false} is VALID [2022-02-20 18:08:22,684 INFO L290 TraceCheckUtils]: 21: Hoare triple {6044#false} assume true; {6044#false} is VALID [2022-02-20 18:08:22,684 INFO L284 TraceCheckUtils]: 22: Hoare quadruple {6044#false} {6043#true} #284#return; {6044#false} is VALID [2022-02-20 18:08:22,684 INFO L290 TraceCheckUtils]: 0: Hoare triple {6078#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {6043#true} is VALID [2022-02-20 18:08:22,684 INFO L290 TraceCheckUtils]: 1: Hoare triple {6043#true} assume !(0 != ~pumpRunning~0); {6043#true} is VALID [2022-02-20 18:08:22,684 INFO L272 TraceCheckUtils]: 2: Hoare triple {6043#true} call processEnvironment__wrappee__highWaterSensor(); {6078#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:22,684 INFO L290 TraceCheckUtils]: 3: Hoare triple {6078#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {6043#true} is VALID [2022-02-20 18:08:22,685 INFO L290 TraceCheckUtils]: 4: Hoare triple {6043#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret18#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {6043#true} is VALID [2022-02-20 18:08:22,685 INFO L290 TraceCheckUtils]: 5: Hoare triple {6043#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~8#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {6102#(<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|)} is VALID [2022-02-20 18:08:22,685 INFO L290 TraceCheckUtils]: 6: Hoare triple {6102#(<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|)} isHighWaterLevel_#t~ret18#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret18#1 && isHighWaterLevel_#t~ret18#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret18#1;havoc isHighWaterLevel_#t~ret18#1; {6103#(<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~4#1|)} is VALID [2022-02-20 18:08:22,686 INFO L290 TraceCheckUtils]: 7: Hoare triple {6103#(<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~4#1|)} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1; {6044#false} is VALID [2022-02-20 18:08:22,686 INFO L290 TraceCheckUtils]: 8: Hoare triple {6044#false} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {6044#false} is VALID [2022-02-20 18:08:22,686 INFO L290 TraceCheckUtils]: 9: Hoare triple {6044#false} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {6044#false} is VALID [2022-02-20 18:08:22,686 INFO L290 TraceCheckUtils]: 10: Hoare triple {6044#false} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret8#1, activatePump_~tmp~3#1;havoc activatePump_~tmp~3#1; {6044#false} is VALID [2022-02-20 18:08:22,686 INFO L272 TraceCheckUtils]: 11: Hoare triple {6044#false} call activatePump_#t~ret8#1 := isMethaneAlarm(); {6043#true} is VALID [2022-02-20 18:08:22,686 INFO L290 TraceCheckUtils]: 12: Hoare triple {6043#true} havoc ~retValue_acc~2; {6043#true} is VALID [2022-02-20 18:08:22,686 INFO L272 TraceCheckUtils]: 13: Hoare triple {6043#true} call #t~ret9 := isMethaneLevelCritical(); {6043#true} is VALID [2022-02-20 18:08:22,687 INFO L290 TraceCheckUtils]: 14: Hoare triple {6043#true} havoc ~retValue_acc~6;~retValue_acc~6 := ~methaneLevelCritical~0;#res := ~retValue_acc~6; {6043#true} is VALID [2022-02-20 18:08:22,687 INFO L290 TraceCheckUtils]: 15: Hoare triple {6043#true} assume true; {6043#true} is VALID [2022-02-20 18:08:22,687 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {6043#true} {6043#true} #316#return; {6043#true} is VALID [2022-02-20 18:08:22,687 INFO L290 TraceCheckUtils]: 17: Hoare triple {6043#true} assume -2147483648 <= #t~ret9 && #t~ret9 <= 2147483647;~retValue_acc~2 := #t~ret9;havoc #t~ret9;#res := ~retValue_acc~2; {6043#true} is VALID [2022-02-20 18:08:22,687 INFO L290 TraceCheckUtils]: 18: Hoare triple {6043#true} assume true; {6043#true} is VALID [2022-02-20 18:08:22,687 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {6043#true} {6044#false} #310#return; {6044#false} is VALID [2022-02-20 18:08:22,687 INFO L290 TraceCheckUtils]: 20: Hoare triple {6044#false} assume -2147483648 <= activatePump_#t~ret8#1 && activatePump_#t~ret8#1 <= 2147483647;activatePump_~tmp~3#1 := activatePump_#t~ret8#1;havoc activatePump_#t~ret8#1; {6044#false} is VALID [2022-02-20 18:08:22,687 INFO L290 TraceCheckUtils]: 21: Hoare triple {6044#false} assume !(0 != activatePump_~tmp~3#1);assume { :begin_inline_activatePump__wrappee__lowWaterSensor } true;~pumpRunning~0 := 1; {6044#false} is VALID [2022-02-20 18:08:22,687 INFO L290 TraceCheckUtils]: 22: Hoare triple {6044#false} assume { :end_inline_activatePump__wrappee__lowWaterSensor } true; {6044#false} is VALID [2022-02-20 18:08:22,688 INFO L290 TraceCheckUtils]: 23: Hoare triple {6044#false} assume { :end_inline_activatePump } true; {6044#false} is VALID [2022-02-20 18:08:22,688 INFO L290 TraceCheckUtils]: 24: Hoare triple {6044#false} assume true; {6044#false} is VALID [2022-02-20 18:08:22,688 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {6044#false} {6043#true} #284#return; {6044#false} is VALID [2022-02-20 18:08:22,688 INFO L290 TraceCheckUtils]: 26: Hoare triple {6044#false} assume true; {6044#false} is VALID [2022-02-20 18:08:22,688 INFO L284 TraceCheckUtils]: 27: Hoare quadruple {6044#false} {6043#true} #296#return; {6044#false} is VALID [2022-02-20 18:08:22,689 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2022-02-20 18:08:22,691 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:22,693 INFO L290 TraceCheckUtils]: 0: Hoare triple {6043#true} havoc ~retValue_acc~6;~retValue_acc~6 := ~methaneLevelCritical~0;#res := ~retValue_acc~6; {6043#true} is VALID [2022-02-20 18:08:22,693 INFO L290 TraceCheckUtils]: 1: Hoare triple {6043#true} assume true; {6043#true} is VALID [2022-02-20 18:08:22,693 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {6043#true} {6044#false} #298#return; {6044#false} is VALID [2022-02-20 18:08:22,693 INFO L290 TraceCheckUtils]: 0: Hoare triple {6043#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(13, 12);call #Ultimate.allocInit(7, 13);call write~init~int(44, 13, 0, 1);call write~init~int(77, 13, 1, 1);call write~init~int(101, 13, 2, 1);call write~init~int(116, 13, 3, 1);call write~init~int(104, 13, 4, 1);call write~init~int(58, 13, 5, 1);call write~init~int(0, 13, 6, 1);call #Ultimate.allocInit(5, 14);call write~init~int(67, 14, 0, 1);call write~init~int(82, 14, 1, 1);call write~init~int(73, 14, 2, 1);call write~init~int(84, 14, 3, 1);call write~init~int(0, 14, 4, 1);call #Ultimate.allocInit(3, 15);call write~init~int(79, 15, 0, 1);call write~init~int(75, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(41, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~pumpRunning~0 := 0;~systemActive~0 := 1;~methAndRunningLastTime~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0; {6043#true} is VALID [2022-02-20 18:08:22,694 INFO L290 TraceCheckUtils]: 1: Hoare triple {6043#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret31#1, main_~retValue_acc~10#1, main_~tmp~8#1;havoc main_~retValue_acc~10#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; {6043#true} is VALID [2022-02-20 18:08:22,694 INFO L290 TraceCheckUtils]: 2: Hoare triple {6043#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {6043#true} is VALID [2022-02-20 18:08:22,694 INFO L290 TraceCheckUtils]: 3: Hoare triple {6043#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {6045#(= |ULTIMATE.start_valid_product_#res#1| 1)} is VALID [2022-02-20 18:08:22,695 INFO L290 TraceCheckUtils]: 4: Hoare triple {6045#(= |ULTIMATE.start_valid_product_#res#1| 1)} main_#t~ret31#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret31#1 && main_#t~ret31#1 <= 2147483647;main_~tmp~8#1 := main_#t~ret31#1;havoc main_#t~ret31#1; {6046#(= |ULTIMATE.start_main_~tmp~8#1| 1)} is VALID [2022-02-20 18:08:22,695 INFO L290 TraceCheckUtils]: 5: Hoare triple {6046#(= |ULTIMATE.start_main_~tmp~8#1| 1)} assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; {6043#true} is VALID [2022-02-20 18:08:22,695 INFO L290 TraceCheckUtils]: 6: Hoare triple {6043#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0; {6043#true} is VALID [2022-02-20 18:08:22,695 INFO L290 TraceCheckUtils]: 7: Hoare triple {6043#true} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet20#1, test_#t~nondet21#1, test_#t~nondet22#1, test_#t~nondet23#1, test_~splverifierCounter~0#1, test_~tmp~6#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~6#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {6043#true} is VALID [2022-02-20 18:08:22,695 INFO L290 TraceCheckUtils]: 8: Hoare triple {6043#true} assume !false; {6043#true} is VALID [2022-02-20 18:08:22,695 INFO L290 TraceCheckUtils]: 9: Hoare triple {6043#true} assume test_~splverifierCounter~0#1 < 4; {6043#true} is VALID [2022-02-20 18:08:22,695 INFO L290 TraceCheckUtils]: 10: Hoare triple {6043#true} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp~6#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {6043#true} is VALID [2022-02-20 18:08:22,695 INFO L290 TraceCheckUtils]: 11: Hoare triple {6043#true} assume !(0 != test_~tmp~6#1); {6043#true} is VALID [2022-02-20 18:08:22,696 INFO L290 TraceCheckUtils]: 12: Hoare triple {6043#true} assume -2147483648 <= test_#t~nondet21#1 && test_#t~nondet21#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet21#1;havoc test_#t~nondet21#1; {6043#true} is VALID [2022-02-20 18:08:22,696 INFO L290 TraceCheckUtils]: 13: Hoare triple {6043#true} assume !(0 != test_~tmp___0~2#1); {6043#true} is VALID [2022-02-20 18:08:22,696 INFO L290 TraceCheckUtils]: 14: Hoare triple {6043#true} assume -2147483648 <= test_#t~nondet22#1 && test_#t~nondet22#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {6043#true} is VALID [2022-02-20 18:08:22,696 INFO L290 TraceCheckUtils]: 15: Hoare triple {6043#true} assume 0 != test_~tmp___2~0#1;assume { :begin_inline_startSystem } true;~systemActive~0 := 1; {6043#true} is VALID [2022-02-20 18:08:22,696 INFO L290 TraceCheckUtils]: 16: Hoare triple {6043#true} assume { :end_inline_startSystem } true; {6043#true} is VALID [2022-02-20 18:08:22,696 INFO L272 TraceCheckUtils]: 17: Hoare triple {6043#true} call timeShift(); {6043#true} is VALID [2022-02-20 18:08:22,696 INFO L290 TraceCheckUtils]: 18: Hoare triple {6043#true} assume !(0 != ~pumpRunning~0); {6043#true} is VALID [2022-02-20 18:08:22,696 INFO L290 TraceCheckUtils]: 19: Hoare triple {6043#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret7#1, processEnvironment_~tmp~2#1;havoc processEnvironment_~tmp~2#1; {6043#true} is VALID [2022-02-20 18:08:22,696 INFO L290 TraceCheckUtils]: 20: Hoare triple {6043#true} assume !(0 != ~pumpRunning~0); {6043#true} is VALID [2022-02-20 18:08:22,697 INFO L272 TraceCheckUtils]: 21: Hoare triple {6043#true} call processEnvironment__wrappee__methaneQuery(); {6078#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:22,697 INFO L290 TraceCheckUtils]: 22: Hoare triple {6078#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {6043#true} is VALID [2022-02-20 18:08:22,697 INFO L290 TraceCheckUtils]: 23: Hoare triple {6043#true} assume !(0 != ~pumpRunning~0); {6043#true} is VALID [2022-02-20 18:08:22,697 INFO L272 TraceCheckUtils]: 24: Hoare triple {6043#true} call processEnvironment__wrappee__highWaterSensor(); {6078#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:22,698 INFO L290 TraceCheckUtils]: 25: Hoare triple {6078#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {6043#true} is VALID [2022-02-20 18:08:22,698 INFO L290 TraceCheckUtils]: 26: Hoare triple {6043#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret18#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {6043#true} is VALID [2022-02-20 18:08:22,698 INFO L290 TraceCheckUtils]: 27: Hoare triple {6043#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~8#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {6102#(<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|)} is VALID [2022-02-20 18:08:22,699 INFO L290 TraceCheckUtils]: 28: Hoare triple {6102#(<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|)} isHighWaterLevel_#t~ret18#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret18#1 && isHighWaterLevel_#t~ret18#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret18#1;havoc isHighWaterLevel_#t~ret18#1; {6103#(<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~4#1|)} is VALID [2022-02-20 18:08:22,699 INFO L290 TraceCheckUtils]: 29: Hoare triple {6103#(<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~4#1|)} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1; {6044#false} is VALID [2022-02-20 18:08:22,699 INFO L290 TraceCheckUtils]: 30: Hoare triple {6044#false} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {6044#false} is VALID [2022-02-20 18:08:22,699 INFO L290 TraceCheckUtils]: 31: Hoare triple {6044#false} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {6044#false} is VALID [2022-02-20 18:08:22,699 INFO L290 TraceCheckUtils]: 32: Hoare triple {6044#false} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret8#1, activatePump_~tmp~3#1;havoc activatePump_~tmp~3#1; {6044#false} is VALID [2022-02-20 18:08:22,699 INFO L272 TraceCheckUtils]: 33: Hoare triple {6044#false} call activatePump_#t~ret8#1 := isMethaneAlarm(); {6043#true} is VALID [2022-02-20 18:08:22,700 INFO L290 TraceCheckUtils]: 34: Hoare triple {6043#true} havoc ~retValue_acc~2; {6043#true} is VALID [2022-02-20 18:08:22,700 INFO L272 TraceCheckUtils]: 35: Hoare triple {6043#true} call #t~ret9 := isMethaneLevelCritical(); {6043#true} is VALID [2022-02-20 18:08:22,700 INFO L290 TraceCheckUtils]: 36: Hoare triple {6043#true} havoc ~retValue_acc~6;~retValue_acc~6 := ~methaneLevelCritical~0;#res := ~retValue_acc~6; {6043#true} is VALID [2022-02-20 18:08:22,700 INFO L290 TraceCheckUtils]: 37: Hoare triple {6043#true} assume true; {6043#true} is VALID [2022-02-20 18:08:22,700 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {6043#true} {6043#true} #316#return; {6043#true} is VALID [2022-02-20 18:08:22,700 INFO L290 TraceCheckUtils]: 39: Hoare triple {6043#true} assume -2147483648 <= #t~ret9 && #t~ret9 <= 2147483647;~retValue_acc~2 := #t~ret9;havoc #t~ret9;#res := ~retValue_acc~2; {6043#true} is VALID [2022-02-20 18:08:22,700 INFO L290 TraceCheckUtils]: 40: Hoare triple {6043#true} assume true; {6043#true} is VALID [2022-02-20 18:08:22,700 INFO L284 TraceCheckUtils]: 41: Hoare quadruple {6043#true} {6044#false} #310#return; {6044#false} is VALID [2022-02-20 18:08:22,700 INFO L290 TraceCheckUtils]: 42: Hoare triple {6044#false} assume -2147483648 <= activatePump_#t~ret8#1 && activatePump_#t~ret8#1 <= 2147483647;activatePump_~tmp~3#1 := activatePump_#t~ret8#1;havoc activatePump_#t~ret8#1; {6044#false} is VALID [2022-02-20 18:08:22,701 INFO L290 TraceCheckUtils]: 43: Hoare triple {6044#false} assume !(0 != activatePump_~tmp~3#1);assume { :begin_inline_activatePump__wrappee__lowWaterSensor } true;~pumpRunning~0 := 1; {6044#false} is VALID [2022-02-20 18:08:22,701 INFO L290 TraceCheckUtils]: 44: Hoare triple {6044#false} assume { :end_inline_activatePump__wrappee__lowWaterSensor } true; {6044#false} is VALID [2022-02-20 18:08:22,701 INFO L290 TraceCheckUtils]: 45: Hoare triple {6044#false} assume { :end_inline_activatePump } true; {6044#false} is VALID [2022-02-20 18:08:22,701 INFO L290 TraceCheckUtils]: 46: Hoare triple {6044#false} assume true; {6044#false} is VALID [2022-02-20 18:08:22,701 INFO L284 TraceCheckUtils]: 47: Hoare quadruple {6044#false} {6043#true} #284#return; {6044#false} is VALID [2022-02-20 18:08:22,701 INFO L290 TraceCheckUtils]: 48: Hoare triple {6044#false} assume true; {6044#false} is VALID [2022-02-20 18:08:22,703 INFO L284 TraceCheckUtils]: 49: Hoare quadruple {6044#false} {6043#true} #296#return; {6044#false} is VALID [2022-02-20 18:08:22,704 INFO L290 TraceCheckUtils]: 50: Hoare triple {6044#false} assume { :end_inline_processEnvironment } true; {6044#false} is VALID [2022-02-20 18:08:22,704 INFO L290 TraceCheckUtils]: 51: Hoare triple {6044#false} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret24#1, __utac_acc__Specification2_spec__2_#t~ret25#1, __utac_acc__Specification2_spec__2_~tmp~7#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~7#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {6044#false} is VALID [2022-02-20 18:08:22,705 INFO L272 TraceCheckUtils]: 52: Hoare triple {6044#false} call __utac_acc__Specification2_spec__2_#t~ret24#1 := isMethaneLevelCritical(); {6043#true} is VALID [2022-02-20 18:08:22,705 INFO L290 TraceCheckUtils]: 53: Hoare triple {6043#true} havoc ~retValue_acc~6;~retValue_acc~6 := ~methaneLevelCritical~0;#res := ~retValue_acc~6; {6043#true} is VALID [2022-02-20 18:08:22,705 INFO L290 TraceCheckUtils]: 54: Hoare triple {6043#true} assume true; {6043#true} is VALID [2022-02-20 18:08:22,706 INFO L284 TraceCheckUtils]: 55: Hoare quadruple {6043#true} {6044#false} #298#return; {6044#false} is VALID [2022-02-20 18:08:22,706 INFO L290 TraceCheckUtils]: 56: Hoare triple {6044#false} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret24#1 && __utac_acc__Specification2_spec__2_#t~ret24#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~7#1 := __utac_acc__Specification2_spec__2_#t~ret24#1;havoc __utac_acc__Specification2_spec__2_#t~ret24#1; {6044#false} is VALID [2022-02-20 18:08:22,706 INFO L290 TraceCheckUtils]: 57: Hoare triple {6044#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~7#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~3#1;havoc isPumpRunning_~retValue_acc~3#1;isPumpRunning_~retValue_acc~3#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~3#1; {6044#false} is VALID [2022-02-20 18:08:22,707 INFO L290 TraceCheckUtils]: 58: Hoare triple {6044#false} __utac_acc__Specification2_spec__2_#t~ret25#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret25#1 && __utac_acc__Specification2_spec__2_#t~ret25#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret25#1;havoc __utac_acc__Specification2_spec__2_#t~ret25#1; {6044#false} is VALID [2022-02-20 18:08:22,708 INFO L290 TraceCheckUtils]: 59: Hoare triple {6044#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {6044#false} is VALID [2022-02-20 18:08:22,708 INFO L290 TraceCheckUtils]: 60: Hoare triple {6044#false} assume 0 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {6044#false} is VALID [2022-02-20 18:08:22,710 INFO L290 TraceCheckUtils]: 61: Hoare triple {6044#false} assume !false; {6044#false} is VALID [2022-02-20 18:08:22,711 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-02-20 18:08:22,711 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:08:22,711 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1138252697] [2022-02-20 18:08:22,711 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1138252697] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:08:22,711 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:08:22,711 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-02-20 18:08:22,712 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [881170734] [2022-02-20 18:08:22,712 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:08:22,713 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 7.0) internal successors, (49), 6 states have internal predecessors, (49), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 62 [2022-02-20 18:08:22,713 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:08:22,713 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 7 states, 7 states have (on average 7.0) internal successors, (49), 6 states have internal predecessors, (49), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-02-20 18:08:22,742 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 60 edges. 60 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:22,742 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-02-20 18:08:22,742 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:08:22,742 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-02-20 18:08:22,742 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-02-20 18:08:22,743 INFO L87 Difference]: Start difference. First operand 211 states and 262 transitions. Second operand has 7 states, 7 states have (on average 7.0) internal successors, (49), 6 states have internal predecessors, (49), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-02-20 18:08:23,229 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:23,229 INFO L93 Difference]: Finished difference Result 424 states and 540 transitions. [2022-02-20 18:08:23,229 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-02-20 18:08:23,229 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 7.0) internal successors, (49), 6 states have internal predecessors, (49), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 62 [2022-02-20 18:08:23,230 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:08:23,230 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 7.0) internal successors, (49), 6 states have internal predecessors, (49), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-02-20 18:08:23,233 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 283 transitions. [2022-02-20 18:08:23,233 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 7.0) internal successors, (49), 6 states have internal predecessors, (49), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-02-20 18:08:23,235 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 283 transitions. [2022-02-20 18:08:23,235 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 283 transitions. [2022-02-20 18:08:23,409 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 283 edges. 283 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:23,413 INFO L225 Difference]: With dead ends: 424 [2022-02-20 18:08:23,413 INFO L226 Difference]: Without dead ends: 221 [2022-02-20 18:08:23,414 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 15 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=25, Invalid=65, Unknown=0, NotChecked=0, Total=90 [2022-02-20 18:08:23,415 INFO L933 BasicCegarLoop]: 108 mSDtfsCounter, 124 mSDsluCounter, 359 mSDsCounter, 0 mSdLazyCounter, 199 mSolverCounterSat, 34 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 130 SdHoareTripleChecker+Valid, 467 SdHoareTripleChecker+Invalid, 233 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 34 IncrementalHoareTripleChecker+Valid, 199 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-02-20 18:08:23,415 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [130 Valid, 467 Invalid, 233 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [34 Valid, 199 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-02-20 18:08:23,416 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 221 states. [2022-02-20 18:08:23,424 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 221 to 213. [2022-02-20 18:08:23,425 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:08:23,425 INFO L82 GeneralOperation]: Start isEquivalent. First operand 221 states. Second operand has 213 states, 159 states have (on average 1.251572327044025) internal successors, (199), 171 states have internal predecessors, (199), 27 states have call successors, (27), 21 states have call predecessors, (27), 26 states have return successors, (38), 29 states have call predecessors, (38), 27 states have call successors, (38) [2022-02-20 18:08:23,426 INFO L74 IsIncluded]: Start isIncluded. First operand 221 states. Second operand has 213 states, 159 states have (on average 1.251572327044025) internal successors, (199), 171 states have internal predecessors, (199), 27 states have call successors, (27), 21 states have call predecessors, (27), 26 states have return successors, (38), 29 states have call predecessors, (38), 27 states have call successors, (38) [2022-02-20 18:08:23,426 INFO L87 Difference]: Start difference. First operand 221 states. Second operand has 213 states, 159 states have (on average 1.251572327044025) internal successors, (199), 171 states have internal predecessors, (199), 27 states have call successors, (27), 21 states have call predecessors, (27), 26 states have return successors, (38), 29 states have call predecessors, (38), 27 states have call successors, (38) [2022-02-20 18:08:23,430 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:23,431 INFO L93 Difference]: Finished difference Result 221 states and 273 transitions. [2022-02-20 18:08:23,431 INFO L276 IsEmpty]: Start isEmpty. Operand 221 states and 273 transitions. [2022-02-20 18:08:23,431 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:23,431 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:23,432 INFO L74 IsIncluded]: Start isIncluded. First operand has 213 states, 159 states have (on average 1.251572327044025) internal successors, (199), 171 states have internal predecessors, (199), 27 states have call successors, (27), 21 states have call predecessors, (27), 26 states have return successors, (38), 29 states have call predecessors, (38), 27 states have call successors, (38) Second operand 221 states. [2022-02-20 18:08:23,432 INFO L87 Difference]: Start difference. First operand has 213 states, 159 states have (on average 1.251572327044025) internal successors, (199), 171 states have internal predecessors, (199), 27 states have call successors, (27), 21 states have call predecessors, (27), 26 states have return successors, (38), 29 states have call predecessors, (38), 27 states have call successors, (38) Second operand 221 states. [2022-02-20 18:08:23,436 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:23,436 INFO L93 Difference]: Finished difference Result 221 states and 273 transitions. [2022-02-20 18:08:23,436 INFO L276 IsEmpty]: Start isEmpty. Operand 221 states and 273 transitions. [2022-02-20 18:08:23,437 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:23,437 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:23,437 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:08:23,437 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:08:23,438 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 213 states, 159 states have (on average 1.251572327044025) internal successors, (199), 171 states have internal predecessors, (199), 27 states have call successors, (27), 21 states have call predecessors, (27), 26 states have return successors, (38), 29 states have call predecessors, (38), 27 states have call successors, (38) [2022-02-20 18:08:23,443 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 213 states to 213 states and 264 transitions. [2022-02-20 18:08:23,443 INFO L78 Accepts]: Start accepts. Automaton has 213 states and 264 transitions. Word has length 62 [2022-02-20 18:08:23,444 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:08:23,444 INFO L470 AbstractCegarLoop]: Abstraction has 213 states and 264 transitions. [2022-02-20 18:08:23,444 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 7.0) internal successors, (49), 6 states have internal predecessors, (49), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-02-20 18:08:23,444 INFO L276 IsEmpty]: Start isEmpty. Operand 213 states and 264 transitions. [2022-02-20 18:08:23,445 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 63 [2022-02-20 18:08:23,445 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:08:23,445 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:08:23,445 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-02-20 18:08:23,446 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:08:23,446 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:08:23,446 INFO L85 PathProgramCache]: Analyzing trace with hash -646628268, now seen corresponding path program 1 times [2022-02-20 18:08:23,446 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:08:23,447 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [218108038] [2022-02-20 18:08:23,447 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:08:23,447 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:08:23,468 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:23,494 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-02-20 18:08:23,499 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:23,506 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-02-20 18:08:23,510 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:23,518 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:08:23,520 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:23,522 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:08:23,523 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:23,524 INFO L290 TraceCheckUtils]: 0: Hoare triple {7448#true} havoc ~retValue_acc~6;~retValue_acc~6 := ~methaneLevelCritical~0;#res := ~retValue_acc~6; {7448#true} is VALID [2022-02-20 18:08:23,525 INFO L290 TraceCheckUtils]: 1: Hoare triple {7448#true} assume true; {7448#true} is VALID [2022-02-20 18:08:23,525 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {7448#true} {7448#true} #316#return; {7448#true} is VALID [2022-02-20 18:08:23,525 INFO L290 TraceCheckUtils]: 0: Hoare triple {7448#true} havoc ~retValue_acc~2; {7448#true} is VALID [2022-02-20 18:08:23,525 INFO L272 TraceCheckUtils]: 1: Hoare triple {7448#true} call #t~ret9 := isMethaneLevelCritical(); {7448#true} is VALID [2022-02-20 18:08:23,525 INFO L290 TraceCheckUtils]: 2: Hoare triple {7448#true} havoc ~retValue_acc~6;~retValue_acc~6 := ~methaneLevelCritical~0;#res := ~retValue_acc~6; {7448#true} is VALID [2022-02-20 18:08:23,525 INFO L290 TraceCheckUtils]: 3: Hoare triple {7448#true} assume true; {7448#true} is VALID [2022-02-20 18:08:23,525 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {7448#true} {7448#true} #316#return; {7448#true} is VALID [2022-02-20 18:08:23,525 INFO L290 TraceCheckUtils]: 5: Hoare triple {7448#true} assume -2147483648 <= #t~ret9 && #t~ret9 <= 2147483647;~retValue_acc~2 := #t~ret9;havoc #t~ret9;#res := ~retValue_acc~2; {7448#true} is VALID [2022-02-20 18:08:23,526 INFO L290 TraceCheckUtils]: 6: Hoare triple {7448#true} assume true; {7448#true} is VALID [2022-02-20 18:08:23,526 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {7448#true} {7506#(<= 2 ~waterLevel~0)} #310#return; {7506#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:23,526 INFO L290 TraceCheckUtils]: 0: Hoare triple {7482#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {7448#true} is VALID [2022-02-20 18:08:23,526 INFO L290 TraceCheckUtils]: 1: Hoare triple {7448#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret18#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {7448#true} is VALID [2022-02-20 18:08:23,527 INFO L290 TraceCheckUtils]: 2: Hoare triple {7448#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {7506#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:23,527 INFO L290 TraceCheckUtils]: 3: Hoare triple {7506#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret18#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret18#1 && isHighWaterLevel_#t~ret18#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret18#1;havoc isHighWaterLevel_#t~ret18#1; {7506#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:23,527 INFO L290 TraceCheckUtils]: 4: Hoare triple {7506#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1; {7506#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:23,528 INFO L290 TraceCheckUtils]: 5: Hoare triple {7506#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {7506#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:23,528 INFO L290 TraceCheckUtils]: 6: Hoare triple {7506#(<= 2 ~waterLevel~0)} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {7506#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:23,528 INFO L290 TraceCheckUtils]: 7: Hoare triple {7506#(<= 2 ~waterLevel~0)} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret8#1, activatePump_~tmp~3#1;havoc activatePump_~tmp~3#1; {7506#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:23,528 INFO L272 TraceCheckUtils]: 8: Hoare triple {7506#(<= 2 ~waterLevel~0)} call activatePump_#t~ret8#1 := isMethaneAlarm(); {7448#true} is VALID [2022-02-20 18:08:23,528 INFO L290 TraceCheckUtils]: 9: Hoare triple {7448#true} havoc ~retValue_acc~2; {7448#true} is VALID [2022-02-20 18:08:23,528 INFO L272 TraceCheckUtils]: 10: Hoare triple {7448#true} call #t~ret9 := isMethaneLevelCritical(); {7448#true} is VALID [2022-02-20 18:08:23,529 INFO L290 TraceCheckUtils]: 11: Hoare triple {7448#true} havoc ~retValue_acc~6;~retValue_acc~6 := ~methaneLevelCritical~0;#res := ~retValue_acc~6; {7448#true} is VALID [2022-02-20 18:08:23,529 INFO L290 TraceCheckUtils]: 12: Hoare triple {7448#true} assume true; {7448#true} is VALID [2022-02-20 18:08:23,529 INFO L284 TraceCheckUtils]: 13: Hoare quadruple {7448#true} {7448#true} #316#return; {7448#true} is VALID [2022-02-20 18:08:23,529 INFO L290 TraceCheckUtils]: 14: Hoare triple {7448#true} assume -2147483648 <= #t~ret9 && #t~ret9 <= 2147483647;~retValue_acc~2 := #t~ret9;havoc #t~ret9;#res := ~retValue_acc~2; {7448#true} is VALID [2022-02-20 18:08:23,529 INFO L290 TraceCheckUtils]: 15: Hoare triple {7448#true} assume true; {7448#true} is VALID [2022-02-20 18:08:23,529 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {7448#true} {7506#(<= 2 ~waterLevel~0)} #310#return; {7506#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:23,530 INFO L290 TraceCheckUtils]: 17: Hoare triple {7506#(<= 2 ~waterLevel~0)} assume -2147483648 <= activatePump_#t~ret8#1 && activatePump_#t~ret8#1 <= 2147483647;activatePump_~tmp~3#1 := activatePump_#t~ret8#1;havoc activatePump_#t~ret8#1; {7506#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:23,530 INFO L290 TraceCheckUtils]: 18: Hoare triple {7506#(<= 2 ~waterLevel~0)} assume !(0 != activatePump_~tmp~3#1);assume { :begin_inline_activatePump__wrappee__lowWaterSensor } true;~pumpRunning~0 := 1; {7506#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:23,530 INFO L290 TraceCheckUtils]: 19: Hoare triple {7506#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump__wrappee__lowWaterSensor } true; {7506#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:23,530 INFO L290 TraceCheckUtils]: 20: Hoare triple {7506#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump } true; {7506#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:23,531 INFO L290 TraceCheckUtils]: 21: Hoare triple {7506#(<= 2 ~waterLevel~0)} assume true; {7506#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:23,531 INFO L284 TraceCheckUtils]: 22: Hoare quadruple {7506#(<= 2 ~waterLevel~0)} {7448#true} #284#return; {7506#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:23,531 INFO L290 TraceCheckUtils]: 0: Hoare triple {7482#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {7448#true} is VALID [2022-02-20 18:08:23,531 INFO L290 TraceCheckUtils]: 1: Hoare triple {7448#true} assume !(0 != ~pumpRunning~0); {7448#true} is VALID [2022-02-20 18:08:23,532 INFO L272 TraceCheckUtils]: 2: Hoare triple {7448#true} call processEnvironment__wrappee__highWaterSensor(); {7482#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:23,532 INFO L290 TraceCheckUtils]: 3: Hoare triple {7482#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {7448#true} is VALID [2022-02-20 18:08:23,532 INFO L290 TraceCheckUtils]: 4: Hoare triple {7448#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret18#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {7448#true} is VALID [2022-02-20 18:08:23,532 INFO L290 TraceCheckUtils]: 5: Hoare triple {7448#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {7506#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:23,533 INFO L290 TraceCheckUtils]: 6: Hoare triple {7506#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret18#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret18#1 && isHighWaterLevel_#t~ret18#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret18#1;havoc isHighWaterLevel_#t~ret18#1; {7506#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:23,533 INFO L290 TraceCheckUtils]: 7: Hoare triple {7506#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1; {7506#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:23,533 INFO L290 TraceCheckUtils]: 8: Hoare triple {7506#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {7506#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:23,533 INFO L290 TraceCheckUtils]: 9: Hoare triple {7506#(<= 2 ~waterLevel~0)} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {7506#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:23,534 INFO L290 TraceCheckUtils]: 10: Hoare triple {7506#(<= 2 ~waterLevel~0)} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret8#1, activatePump_~tmp~3#1;havoc activatePump_~tmp~3#1; {7506#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:23,534 INFO L272 TraceCheckUtils]: 11: Hoare triple {7506#(<= 2 ~waterLevel~0)} call activatePump_#t~ret8#1 := isMethaneAlarm(); {7448#true} is VALID [2022-02-20 18:08:23,534 INFO L290 TraceCheckUtils]: 12: Hoare triple {7448#true} havoc ~retValue_acc~2; {7448#true} is VALID [2022-02-20 18:08:23,534 INFO L272 TraceCheckUtils]: 13: Hoare triple {7448#true} call #t~ret9 := isMethaneLevelCritical(); {7448#true} is VALID [2022-02-20 18:08:23,534 INFO L290 TraceCheckUtils]: 14: Hoare triple {7448#true} havoc ~retValue_acc~6;~retValue_acc~6 := ~methaneLevelCritical~0;#res := ~retValue_acc~6; {7448#true} is VALID [2022-02-20 18:08:23,534 INFO L290 TraceCheckUtils]: 15: Hoare triple {7448#true} assume true; {7448#true} is VALID [2022-02-20 18:08:23,534 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {7448#true} {7448#true} #316#return; {7448#true} is VALID [2022-02-20 18:08:23,534 INFO L290 TraceCheckUtils]: 17: Hoare triple {7448#true} assume -2147483648 <= #t~ret9 && #t~ret9 <= 2147483647;~retValue_acc~2 := #t~ret9;havoc #t~ret9;#res := ~retValue_acc~2; {7448#true} is VALID [2022-02-20 18:08:23,535 INFO L290 TraceCheckUtils]: 18: Hoare triple {7448#true} assume true; {7448#true} is VALID [2022-02-20 18:08:23,535 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {7448#true} {7506#(<= 2 ~waterLevel~0)} #310#return; {7506#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:23,535 INFO L290 TraceCheckUtils]: 20: Hoare triple {7506#(<= 2 ~waterLevel~0)} assume -2147483648 <= activatePump_#t~ret8#1 && activatePump_#t~ret8#1 <= 2147483647;activatePump_~tmp~3#1 := activatePump_#t~ret8#1;havoc activatePump_#t~ret8#1; {7506#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:23,536 INFO L290 TraceCheckUtils]: 21: Hoare triple {7506#(<= 2 ~waterLevel~0)} assume !(0 != activatePump_~tmp~3#1);assume { :begin_inline_activatePump__wrappee__lowWaterSensor } true;~pumpRunning~0 := 1; {7506#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:23,536 INFO L290 TraceCheckUtils]: 22: Hoare triple {7506#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump__wrappee__lowWaterSensor } true; {7506#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:23,536 INFO L290 TraceCheckUtils]: 23: Hoare triple {7506#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump } true; {7506#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:23,536 INFO L290 TraceCheckUtils]: 24: Hoare triple {7506#(<= 2 ~waterLevel~0)} assume true; {7506#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:23,537 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {7506#(<= 2 ~waterLevel~0)} {7448#true} #284#return; {7506#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:23,537 INFO L290 TraceCheckUtils]: 26: Hoare triple {7506#(<= 2 ~waterLevel~0)} assume true; {7506#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:23,537 INFO L284 TraceCheckUtils]: 27: Hoare quadruple {7506#(<= 2 ~waterLevel~0)} {7450#(= ~waterLevel~0 1)} #296#return; {7449#false} is VALID [2022-02-20 18:08:23,538 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2022-02-20 18:08:23,538 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:23,543 INFO L290 TraceCheckUtils]: 0: Hoare triple {7448#true} havoc ~retValue_acc~6;~retValue_acc~6 := ~methaneLevelCritical~0;#res := ~retValue_acc~6; {7448#true} is VALID [2022-02-20 18:08:23,543 INFO L290 TraceCheckUtils]: 1: Hoare triple {7448#true} assume true; {7448#true} is VALID [2022-02-20 18:08:23,543 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {7448#true} {7449#false} #298#return; {7449#false} is VALID [2022-02-20 18:08:23,544 INFO L290 TraceCheckUtils]: 0: Hoare triple {7448#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(13, 12);call #Ultimate.allocInit(7, 13);call write~init~int(44, 13, 0, 1);call write~init~int(77, 13, 1, 1);call write~init~int(101, 13, 2, 1);call write~init~int(116, 13, 3, 1);call write~init~int(104, 13, 4, 1);call write~init~int(58, 13, 5, 1);call write~init~int(0, 13, 6, 1);call #Ultimate.allocInit(5, 14);call write~init~int(67, 14, 0, 1);call write~init~int(82, 14, 1, 1);call write~init~int(73, 14, 2, 1);call write~init~int(84, 14, 3, 1);call write~init~int(0, 14, 4, 1);call #Ultimate.allocInit(3, 15);call write~init~int(79, 15, 0, 1);call write~init~int(75, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(41, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~pumpRunning~0 := 0;~systemActive~0 := 1;~methAndRunningLastTime~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0; {7450#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:23,544 INFO L290 TraceCheckUtils]: 1: Hoare triple {7450#(= ~waterLevel~0 1)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret31#1, main_~retValue_acc~10#1, main_~tmp~8#1;havoc main_~retValue_acc~10#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; {7450#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:23,544 INFO L290 TraceCheckUtils]: 2: Hoare triple {7450#(= ~waterLevel~0 1)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {7450#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:23,545 INFO L290 TraceCheckUtils]: 3: Hoare triple {7450#(= ~waterLevel~0 1)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {7450#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:23,545 INFO L290 TraceCheckUtils]: 4: Hoare triple {7450#(= ~waterLevel~0 1)} main_#t~ret31#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret31#1 && main_#t~ret31#1 <= 2147483647;main_~tmp~8#1 := main_#t~ret31#1;havoc main_#t~ret31#1; {7450#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:23,545 INFO L290 TraceCheckUtils]: 5: Hoare triple {7450#(= ~waterLevel~0 1)} assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; {7450#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:23,545 INFO L290 TraceCheckUtils]: 6: Hoare triple {7450#(= ~waterLevel~0 1)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0; {7450#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:23,546 INFO L290 TraceCheckUtils]: 7: Hoare triple {7450#(= ~waterLevel~0 1)} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet20#1, test_#t~nondet21#1, test_#t~nondet22#1, test_#t~nondet23#1, test_~splverifierCounter~0#1, test_~tmp~6#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~6#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {7450#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:23,546 INFO L290 TraceCheckUtils]: 8: Hoare triple {7450#(= ~waterLevel~0 1)} assume !false; {7450#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:23,546 INFO L290 TraceCheckUtils]: 9: Hoare triple {7450#(= ~waterLevel~0 1)} assume test_~splverifierCounter~0#1 < 4; {7450#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:23,546 INFO L290 TraceCheckUtils]: 10: Hoare triple {7450#(= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp~6#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {7450#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:23,547 INFO L290 TraceCheckUtils]: 11: Hoare triple {7450#(= ~waterLevel~0 1)} assume !(0 != test_~tmp~6#1); {7450#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:23,547 INFO L290 TraceCheckUtils]: 12: Hoare triple {7450#(= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet21#1 && test_#t~nondet21#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet21#1;havoc test_#t~nondet21#1; {7450#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:23,547 INFO L290 TraceCheckUtils]: 13: Hoare triple {7450#(= ~waterLevel~0 1)} assume !(0 != test_~tmp___0~2#1); {7450#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:23,547 INFO L290 TraceCheckUtils]: 14: Hoare triple {7450#(= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet22#1 && test_#t~nondet22#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {7450#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:23,548 INFO L290 TraceCheckUtils]: 15: Hoare triple {7450#(= ~waterLevel~0 1)} assume 0 != test_~tmp___2~0#1;assume { :begin_inline_startSystem } true;~systemActive~0 := 1; {7450#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:23,548 INFO L290 TraceCheckUtils]: 16: Hoare triple {7450#(= ~waterLevel~0 1)} assume { :end_inline_startSystem } true; {7450#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:23,548 INFO L272 TraceCheckUtils]: 17: Hoare triple {7450#(= ~waterLevel~0 1)} call timeShift(); {7450#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:23,549 INFO L290 TraceCheckUtils]: 18: Hoare triple {7450#(= ~waterLevel~0 1)} assume !(0 != ~pumpRunning~0); {7450#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:23,549 INFO L290 TraceCheckUtils]: 19: Hoare triple {7450#(= ~waterLevel~0 1)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret7#1, processEnvironment_~tmp~2#1;havoc processEnvironment_~tmp~2#1; {7450#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:23,549 INFO L290 TraceCheckUtils]: 20: Hoare triple {7450#(= ~waterLevel~0 1)} assume !(0 != ~pumpRunning~0); {7450#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:23,549 INFO L272 TraceCheckUtils]: 21: Hoare triple {7450#(= ~waterLevel~0 1)} call processEnvironment__wrappee__methaneQuery(); {7482#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:23,550 INFO L290 TraceCheckUtils]: 22: Hoare triple {7482#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {7448#true} is VALID [2022-02-20 18:08:23,550 INFO L290 TraceCheckUtils]: 23: Hoare triple {7448#true} assume !(0 != ~pumpRunning~0); {7448#true} is VALID [2022-02-20 18:08:23,550 INFO L272 TraceCheckUtils]: 24: Hoare triple {7448#true} call processEnvironment__wrappee__highWaterSensor(); {7482#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:23,550 INFO L290 TraceCheckUtils]: 25: Hoare triple {7482#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {7448#true} is VALID [2022-02-20 18:08:23,550 INFO L290 TraceCheckUtils]: 26: Hoare triple {7448#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret18#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {7448#true} is VALID [2022-02-20 18:08:23,551 INFO L290 TraceCheckUtils]: 27: Hoare triple {7448#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {7506#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:23,551 INFO L290 TraceCheckUtils]: 28: Hoare triple {7506#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret18#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret18#1 && isHighWaterLevel_#t~ret18#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret18#1;havoc isHighWaterLevel_#t~ret18#1; {7506#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:23,551 INFO L290 TraceCheckUtils]: 29: Hoare triple {7506#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1; {7506#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:23,551 INFO L290 TraceCheckUtils]: 30: Hoare triple {7506#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {7506#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:23,552 INFO L290 TraceCheckUtils]: 31: Hoare triple {7506#(<= 2 ~waterLevel~0)} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {7506#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:23,552 INFO L290 TraceCheckUtils]: 32: Hoare triple {7506#(<= 2 ~waterLevel~0)} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret8#1, activatePump_~tmp~3#1;havoc activatePump_~tmp~3#1; {7506#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:23,552 INFO L272 TraceCheckUtils]: 33: Hoare triple {7506#(<= 2 ~waterLevel~0)} call activatePump_#t~ret8#1 := isMethaneAlarm(); {7448#true} is VALID [2022-02-20 18:08:23,552 INFO L290 TraceCheckUtils]: 34: Hoare triple {7448#true} havoc ~retValue_acc~2; {7448#true} is VALID [2022-02-20 18:08:23,552 INFO L272 TraceCheckUtils]: 35: Hoare triple {7448#true} call #t~ret9 := isMethaneLevelCritical(); {7448#true} is VALID [2022-02-20 18:08:23,552 INFO L290 TraceCheckUtils]: 36: Hoare triple {7448#true} havoc ~retValue_acc~6;~retValue_acc~6 := ~methaneLevelCritical~0;#res := ~retValue_acc~6; {7448#true} is VALID [2022-02-20 18:08:23,552 INFO L290 TraceCheckUtils]: 37: Hoare triple {7448#true} assume true; {7448#true} is VALID [2022-02-20 18:08:23,553 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {7448#true} {7448#true} #316#return; {7448#true} is VALID [2022-02-20 18:08:23,553 INFO L290 TraceCheckUtils]: 39: Hoare triple {7448#true} assume -2147483648 <= #t~ret9 && #t~ret9 <= 2147483647;~retValue_acc~2 := #t~ret9;havoc #t~ret9;#res := ~retValue_acc~2; {7448#true} is VALID [2022-02-20 18:08:23,553 INFO L290 TraceCheckUtils]: 40: Hoare triple {7448#true} assume true; {7448#true} is VALID [2022-02-20 18:08:23,553 INFO L284 TraceCheckUtils]: 41: Hoare quadruple {7448#true} {7506#(<= 2 ~waterLevel~0)} #310#return; {7506#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:23,553 INFO L290 TraceCheckUtils]: 42: Hoare triple {7506#(<= 2 ~waterLevel~0)} assume -2147483648 <= activatePump_#t~ret8#1 && activatePump_#t~ret8#1 <= 2147483647;activatePump_~tmp~3#1 := activatePump_#t~ret8#1;havoc activatePump_#t~ret8#1; {7506#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:23,554 INFO L290 TraceCheckUtils]: 43: Hoare triple {7506#(<= 2 ~waterLevel~0)} assume !(0 != activatePump_~tmp~3#1);assume { :begin_inline_activatePump__wrappee__lowWaterSensor } true;~pumpRunning~0 := 1; {7506#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:23,554 INFO L290 TraceCheckUtils]: 44: Hoare triple {7506#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump__wrappee__lowWaterSensor } true; {7506#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:23,554 INFO L290 TraceCheckUtils]: 45: Hoare triple {7506#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump } true; {7506#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:23,554 INFO L290 TraceCheckUtils]: 46: Hoare triple {7506#(<= 2 ~waterLevel~0)} assume true; {7506#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:23,555 INFO L284 TraceCheckUtils]: 47: Hoare quadruple {7506#(<= 2 ~waterLevel~0)} {7448#true} #284#return; {7506#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:23,555 INFO L290 TraceCheckUtils]: 48: Hoare triple {7506#(<= 2 ~waterLevel~0)} assume true; {7506#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:23,556 INFO L284 TraceCheckUtils]: 49: Hoare quadruple {7506#(<= 2 ~waterLevel~0)} {7450#(= ~waterLevel~0 1)} #296#return; {7449#false} is VALID [2022-02-20 18:08:23,556 INFO L290 TraceCheckUtils]: 50: Hoare triple {7449#false} assume { :end_inline_processEnvironment } true; {7449#false} is VALID [2022-02-20 18:08:23,556 INFO L290 TraceCheckUtils]: 51: Hoare triple {7449#false} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret24#1, __utac_acc__Specification2_spec__2_#t~ret25#1, __utac_acc__Specification2_spec__2_~tmp~7#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~7#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {7449#false} is VALID [2022-02-20 18:08:23,556 INFO L272 TraceCheckUtils]: 52: Hoare triple {7449#false} call __utac_acc__Specification2_spec__2_#t~ret24#1 := isMethaneLevelCritical(); {7448#true} is VALID [2022-02-20 18:08:23,556 INFO L290 TraceCheckUtils]: 53: Hoare triple {7448#true} havoc ~retValue_acc~6;~retValue_acc~6 := ~methaneLevelCritical~0;#res := ~retValue_acc~6; {7448#true} is VALID [2022-02-20 18:08:23,556 INFO L290 TraceCheckUtils]: 54: Hoare triple {7448#true} assume true; {7448#true} is VALID [2022-02-20 18:08:23,556 INFO L284 TraceCheckUtils]: 55: Hoare quadruple {7448#true} {7449#false} #298#return; {7449#false} is VALID [2022-02-20 18:08:23,556 INFO L290 TraceCheckUtils]: 56: Hoare triple {7449#false} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret24#1 && __utac_acc__Specification2_spec__2_#t~ret24#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~7#1 := __utac_acc__Specification2_spec__2_#t~ret24#1;havoc __utac_acc__Specification2_spec__2_#t~ret24#1; {7449#false} is VALID [2022-02-20 18:08:23,556 INFO L290 TraceCheckUtils]: 57: Hoare triple {7449#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~7#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~3#1;havoc isPumpRunning_~retValue_acc~3#1;isPumpRunning_~retValue_acc~3#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~3#1; {7449#false} is VALID [2022-02-20 18:08:23,557 INFO L290 TraceCheckUtils]: 58: Hoare triple {7449#false} __utac_acc__Specification2_spec__2_#t~ret25#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret25#1 && __utac_acc__Specification2_spec__2_#t~ret25#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret25#1;havoc __utac_acc__Specification2_spec__2_#t~ret25#1; {7449#false} is VALID [2022-02-20 18:08:23,557 INFO L290 TraceCheckUtils]: 59: Hoare triple {7449#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {7449#false} is VALID [2022-02-20 18:08:23,557 INFO L290 TraceCheckUtils]: 60: Hoare triple {7449#false} assume 0 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {7449#false} is VALID [2022-02-20 18:08:23,557 INFO L290 TraceCheckUtils]: 61: Hoare triple {7449#false} assume !false; {7449#false} is VALID [2022-02-20 18:08:23,557 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-02-20 18:08:23,557 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:08:23,557 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [218108038] [2022-02-20 18:08:23,558 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [218108038] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:08:23,558 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:08:23,558 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-02-20 18:08:23,558 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [265947134] [2022-02-20 18:08:23,558 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:08:23,558 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.8) internal successors, (49), 4 states have internal predecessors, (49), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 62 [2022-02-20 18:08:23,559 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:08:23,559 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 5 states, 5 states have (on average 9.8) internal successors, (49), 4 states have internal predecessors, (49), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2022-02-20 18:08:23,589 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 60 edges. 60 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:23,590 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-02-20 18:08:23,590 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:08:23,590 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-02-20 18:08:23,590 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-02-20 18:08:23,591 INFO L87 Difference]: Start difference. First operand 213 states and 264 transitions. Second operand has 5 states, 5 states have (on average 9.8) internal successors, (49), 4 states have internal predecessors, (49), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2022-02-20 18:08:24,157 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:24,157 INFO L93 Difference]: Finished difference Result 621 states and 797 transitions. [2022-02-20 18:08:24,157 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-02-20 18:08:24,158 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.8) internal successors, (49), 4 states have internal predecessors, (49), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 62 [2022-02-20 18:08:24,158 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:08:24,158 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 9.8) internal successors, (49), 4 states have internal predecessors, (49), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2022-02-20 18:08:24,162 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 444 transitions. [2022-02-20 18:08:24,162 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 9.8) internal successors, (49), 4 states have internal predecessors, (49), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2022-02-20 18:08:24,166 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 444 transitions. [2022-02-20 18:08:24,166 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 444 transitions. [2022-02-20 18:08:24,410 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 444 edges. 444 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:24,420 INFO L225 Difference]: With dead ends: 621 [2022-02-20 18:08:24,420 INFO L226 Difference]: Without dead ends: 416 [2022-02-20 18:08:24,421 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 12 SyntacticMatches, 2 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-02-20 18:08:24,421 INFO L933 BasicCegarLoop]: 166 mSDtfsCounter, 247 mSDsluCounter, 207 mSDsCounter, 0 mSdLazyCounter, 186 mSolverCounterSat, 79 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 255 SdHoareTripleChecker+Valid, 373 SdHoareTripleChecker+Invalid, 265 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 79 IncrementalHoareTripleChecker+Valid, 186 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-02-20 18:08:24,421 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [255 Valid, 373 Invalid, 265 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [79 Valid, 186 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-02-20 18:08:24,422 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 416 states. [2022-02-20 18:08:24,458 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 416 to 414. [2022-02-20 18:08:24,458 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:08:24,459 INFO L82 GeneralOperation]: Start isEquivalent. First operand 416 states. Second operand has 414 states, 310 states have (on average 1.229032258064516) internal successors, (381), 330 states have internal predecessors, (381), 53 states have call successors, (53), 48 states have call predecessors, (53), 50 states have return successors, (80), 53 states have call predecessors, (80), 53 states have call successors, (80) [2022-02-20 18:08:24,460 INFO L74 IsIncluded]: Start isIncluded. First operand 416 states. Second operand has 414 states, 310 states have (on average 1.229032258064516) internal successors, (381), 330 states have internal predecessors, (381), 53 states have call successors, (53), 48 states have call predecessors, (53), 50 states have return successors, (80), 53 states have call predecessors, (80), 53 states have call successors, (80) [2022-02-20 18:08:24,460 INFO L87 Difference]: Start difference. First operand 416 states. Second operand has 414 states, 310 states have (on average 1.229032258064516) internal successors, (381), 330 states have internal predecessors, (381), 53 states have call successors, (53), 48 states have call predecessors, (53), 50 states have return successors, (80), 53 states have call predecessors, (80), 53 states have call successors, (80) [2022-02-20 18:08:24,469 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:24,469 INFO L93 Difference]: Finished difference Result 416 states and 515 transitions. [2022-02-20 18:08:24,469 INFO L276 IsEmpty]: Start isEmpty. Operand 416 states and 515 transitions. [2022-02-20 18:08:24,470 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:24,470 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:24,471 INFO L74 IsIncluded]: Start isIncluded. First operand has 414 states, 310 states have (on average 1.229032258064516) internal successors, (381), 330 states have internal predecessors, (381), 53 states have call successors, (53), 48 states have call predecessors, (53), 50 states have return successors, (80), 53 states have call predecessors, (80), 53 states have call successors, (80) Second operand 416 states. [2022-02-20 18:08:24,472 INFO L87 Difference]: Start difference. First operand has 414 states, 310 states have (on average 1.229032258064516) internal successors, (381), 330 states have internal predecessors, (381), 53 states have call successors, (53), 48 states have call predecessors, (53), 50 states have return successors, (80), 53 states have call predecessors, (80), 53 states have call successors, (80) Second operand 416 states. [2022-02-20 18:08:24,481 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:24,481 INFO L93 Difference]: Finished difference Result 416 states and 515 transitions. [2022-02-20 18:08:24,481 INFO L276 IsEmpty]: Start isEmpty. Operand 416 states and 515 transitions. [2022-02-20 18:08:24,482 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:24,482 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:24,482 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:08:24,482 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:08:24,483 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 414 states, 310 states have (on average 1.229032258064516) internal successors, (381), 330 states have internal predecessors, (381), 53 states have call successors, (53), 48 states have call predecessors, (53), 50 states have return successors, (80), 53 states have call predecessors, (80), 53 states have call successors, (80) [2022-02-20 18:08:24,492 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 414 states to 414 states and 514 transitions. [2022-02-20 18:08:24,493 INFO L78 Accepts]: Start accepts. Automaton has 414 states and 514 transitions. Word has length 62 [2022-02-20 18:08:24,493 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:08:24,493 INFO L470 AbstractCegarLoop]: Abstraction has 414 states and 514 transitions. [2022-02-20 18:08:24,493 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.8) internal successors, (49), 4 states have internal predecessors, (49), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2022-02-20 18:08:24,493 INFO L276 IsEmpty]: Start isEmpty. Operand 414 states and 514 transitions. [2022-02-20 18:08:24,494 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2022-02-20 18:08:24,494 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:08:24,494 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:08:24,494 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-02-20 18:08:24,494 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:08:24,495 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:08:24,495 INFO L85 PathProgramCache]: Analyzing trace with hash -938683346, now seen corresponding path program 1 times [2022-02-20 18:08:24,495 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:08:24,495 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1333869136] [2022-02-20 18:08:24,495 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:08:24,495 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:08:24,508 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:24,533 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-02-20 18:08:24,534 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:24,539 INFO L290 TraceCheckUtils]: 0: Hoare triple {9828#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {9789#true} is VALID [2022-02-20 18:08:24,539 INFO L290 TraceCheckUtils]: 1: Hoare triple {9789#true} assume true; {9789#true} is VALID [2022-02-20 18:08:24,539 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {9789#true} {9789#true} #300#return; {9789#true} is VALID [2022-02-20 18:08:24,543 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-02-20 18:08:24,546 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:24,551 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-02-20 18:08:24,555 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:24,583 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:08:24,585 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:24,597 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:08:24,598 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:24,605 INFO L290 TraceCheckUtils]: 0: Hoare triple {9789#true} havoc ~retValue_acc~6;~retValue_acc~6 := ~methaneLevelCritical~0;#res := ~retValue_acc~6; {9868#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:24,606 INFO L290 TraceCheckUtils]: 1: Hoare triple {9868#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} assume true; {9868#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:24,606 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {9868#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} {9789#true} #316#return; {9866#(= ~methaneLevelCritical~0 |isMethaneAlarm_#t~ret9|)} is VALID [2022-02-20 18:08:24,606 INFO L290 TraceCheckUtils]: 0: Hoare triple {9789#true} havoc ~retValue_acc~2; {9789#true} is VALID [2022-02-20 18:08:24,606 INFO L272 TraceCheckUtils]: 1: Hoare triple {9789#true} call #t~ret9 := isMethaneLevelCritical(); {9789#true} is VALID [2022-02-20 18:08:24,607 INFO L290 TraceCheckUtils]: 2: Hoare triple {9789#true} havoc ~retValue_acc~6;~retValue_acc~6 := ~methaneLevelCritical~0;#res := ~retValue_acc~6; {9868#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:24,607 INFO L290 TraceCheckUtils]: 3: Hoare triple {9868#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} assume true; {9868#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:24,608 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {9868#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} {9789#true} #316#return; {9866#(= ~methaneLevelCritical~0 |isMethaneAlarm_#t~ret9|)} is VALID [2022-02-20 18:08:24,608 INFO L290 TraceCheckUtils]: 5: Hoare triple {9866#(= ~methaneLevelCritical~0 |isMethaneAlarm_#t~ret9|)} assume -2147483648 <= #t~ret9 && #t~ret9 <= 2147483647;~retValue_acc~2 := #t~ret9;havoc #t~ret9;#res := ~retValue_acc~2; {9867#(= |isMethaneAlarm_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:24,608 INFO L290 TraceCheckUtils]: 6: Hoare triple {9867#(= |isMethaneAlarm_#res| ~methaneLevelCritical~0)} assume true; {9867#(= |isMethaneAlarm_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:24,609 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {9867#(= |isMethaneAlarm_#res| ~methaneLevelCritical~0)} {9789#true} #310#return; {9861#(or (= ~methaneLevelCritical~0 0) (= |processEnvironment__wrappee__highWaterSensor_activatePump_#t~ret8#1| ~methaneLevelCritical~0))} is VALID [2022-02-20 18:08:24,609 INFO L290 TraceCheckUtils]: 0: Hoare triple {9829#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {9789#true} is VALID [2022-02-20 18:08:24,609 INFO L290 TraceCheckUtils]: 1: Hoare triple {9789#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret18#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {9789#true} is VALID [2022-02-20 18:08:24,609 INFO L290 TraceCheckUtils]: 2: Hoare triple {9789#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {9789#true} is VALID [2022-02-20 18:08:24,609 INFO L290 TraceCheckUtils]: 3: Hoare triple {9789#true} isHighWaterLevel_#t~ret18#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret18#1 && isHighWaterLevel_#t~ret18#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret18#1;havoc isHighWaterLevel_#t~ret18#1; {9789#true} is VALID [2022-02-20 18:08:24,609 INFO L290 TraceCheckUtils]: 4: Hoare triple {9789#true} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1; {9789#true} is VALID [2022-02-20 18:08:24,609 INFO L290 TraceCheckUtils]: 5: Hoare triple {9789#true} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {9789#true} is VALID [2022-02-20 18:08:24,610 INFO L290 TraceCheckUtils]: 6: Hoare triple {9789#true} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {9789#true} is VALID [2022-02-20 18:08:24,610 INFO L290 TraceCheckUtils]: 7: Hoare triple {9789#true} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret8#1, activatePump_~tmp~3#1;havoc activatePump_~tmp~3#1; {9789#true} is VALID [2022-02-20 18:08:24,610 INFO L272 TraceCheckUtils]: 8: Hoare triple {9789#true} call activatePump_#t~ret8#1 := isMethaneAlarm(); {9789#true} is VALID [2022-02-20 18:08:24,610 INFO L290 TraceCheckUtils]: 9: Hoare triple {9789#true} havoc ~retValue_acc~2; {9789#true} is VALID [2022-02-20 18:08:24,610 INFO L272 TraceCheckUtils]: 10: Hoare triple {9789#true} call #t~ret9 := isMethaneLevelCritical(); {9789#true} is VALID [2022-02-20 18:08:24,610 INFO L290 TraceCheckUtils]: 11: Hoare triple {9789#true} havoc ~retValue_acc~6;~retValue_acc~6 := ~methaneLevelCritical~0;#res := ~retValue_acc~6; {9868#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:24,611 INFO L290 TraceCheckUtils]: 12: Hoare triple {9868#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} assume true; {9868#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:24,611 INFO L284 TraceCheckUtils]: 13: Hoare quadruple {9868#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} {9789#true} #316#return; {9866#(= ~methaneLevelCritical~0 |isMethaneAlarm_#t~ret9|)} is VALID [2022-02-20 18:08:24,613 INFO L290 TraceCheckUtils]: 14: Hoare triple {9866#(= ~methaneLevelCritical~0 |isMethaneAlarm_#t~ret9|)} assume -2147483648 <= #t~ret9 && #t~ret9 <= 2147483647;~retValue_acc~2 := #t~ret9;havoc #t~ret9;#res := ~retValue_acc~2; {9867#(= |isMethaneAlarm_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:24,613 INFO L290 TraceCheckUtils]: 15: Hoare triple {9867#(= |isMethaneAlarm_#res| ~methaneLevelCritical~0)} assume true; {9867#(= |isMethaneAlarm_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:24,614 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {9867#(= |isMethaneAlarm_#res| ~methaneLevelCritical~0)} {9789#true} #310#return; {9861#(or (= ~methaneLevelCritical~0 0) (= |processEnvironment__wrappee__highWaterSensor_activatePump_#t~ret8#1| ~methaneLevelCritical~0))} is VALID [2022-02-20 18:08:24,614 INFO L290 TraceCheckUtils]: 17: Hoare triple {9861#(or (= ~methaneLevelCritical~0 0) (= |processEnvironment__wrappee__highWaterSensor_activatePump_#t~ret8#1| ~methaneLevelCritical~0))} assume -2147483648 <= activatePump_#t~ret8#1 && activatePump_#t~ret8#1 <= 2147483647;activatePump_~tmp~3#1 := activatePump_#t~ret8#1;havoc activatePump_#t~ret8#1; {9862#(or (= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~3#1|) (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:08:24,615 INFO L290 TraceCheckUtils]: 18: Hoare triple {9862#(or (= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~3#1|) (= ~methaneLevelCritical~0 0))} assume !(0 != activatePump_~tmp~3#1);assume { :begin_inline_activatePump__wrappee__lowWaterSensor } true;~pumpRunning~0 := 1; {9822#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:24,615 INFO L290 TraceCheckUtils]: 19: Hoare triple {9822#(= ~methaneLevelCritical~0 0)} assume { :end_inline_activatePump__wrappee__lowWaterSensor } true; {9822#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:24,615 INFO L290 TraceCheckUtils]: 20: Hoare triple {9822#(= ~methaneLevelCritical~0 0)} assume { :end_inline_activatePump } true; {9822#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:24,615 INFO L290 TraceCheckUtils]: 21: Hoare triple {9822#(= ~methaneLevelCritical~0 0)} assume true; {9822#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:24,616 INFO L284 TraceCheckUtils]: 22: Hoare quadruple {9822#(= ~methaneLevelCritical~0 0)} {9789#true} #284#return; {9822#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:24,616 INFO L290 TraceCheckUtils]: 0: Hoare triple {9829#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {9789#true} is VALID [2022-02-20 18:08:24,616 INFO L290 TraceCheckUtils]: 1: Hoare triple {9789#true} assume !(0 != ~pumpRunning~0); {9789#true} is VALID [2022-02-20 18:08:24,616 INFO L272 TraceCheckUtils]: 2: Hoare triple {9789#true} call processEnvironment__wrappee__highWaterSensor(); {9829#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:24,616 INFO L290 TraceCheckUtils]: 3: Hoare triple {9829#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {9789#true} is VALID [2022-02-20 18:08:24,616 INFO L290 TraceCheckUtils]: 4: Hoare triple {9789#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret18#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {9789#true} is VALID [2022-02-20 18:08:24,617 INFO L290 TraceCheckUtils]: 5: Hoare triple {9789#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {9789#true} is VALID [2022-02-20 18:08:24,617 INFO L290 TraceCheckUtils]: 6: Hoare triple {9789#true} isHighWaterLevel_#t~ret18#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret18#1 && isHighWaterLevel_#t~ret18#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret18#1;havoc isHighWaterLevel_#t~ret18#1; {9789#true} is VALID [2022-02-20 18:08:24,617 INFO L290 TraceCheckUtils]: 7: Hoare triple {9789#true} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1; {9789#true} is VALID [2022-02-20 18:08:24,617 INFO L290 TraceCheckUtils]: 8: Hoare triple {9789#true} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {9789#true} is VALID [2022-02-20 18:08:24,617 INFO L290 TraceCheckUtils]: 9: Hoare triple {9789#true} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {9789#true} is VALID [2022-02-20 18:08:24,617 INFO L290 TraceCheckUtils]: 10: Hoare triple {9789#true} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret8#1, activatePump_~tmp~3#1;havoc activatePump_~tmp~3#1; {9789#true} is VALID [2022-02-20 18:08:24,617 INFO L272 TraceCheckUtils]: 11: Hoare triple {9789#true} call activatePump_#t~ret8#1 := isMethaneAlarm(); {9789#true} is VALID [2022-02-20 18:08:24,617 INFO L290 TraceCheckUtils]: 12: Hoare triple {9789#true} havoc ~retValue_acc~2; {9789#true} is VALID [2022-02-20 18:08:24,617 INFO L272 TraceCheckUtils]: 13: Hoare triple {9789#true} call #t~ret9 := isMethaneLevelCritical(); {9789#true} is VALID [2022-02-20 18:08:24,618 INFO L290 TraceCheckUtils]: 14: Hoare triple {9789#true} havoc ~retValue_acc~6;~retValue_acc~6 := ~methaneLevelCritical~0;#res := ~retValue_acc~6; {9868#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:24,618 INFO L290 TraceCheckUtils]: 15: Hoare triple {9868#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} assume true; {9868#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:24,618 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {9868#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} {9789#true} #316#return; {9866#(= ~methaneLevelCritical~0 |isMethaneAlarm_#t~ret9|)} is VALID [2022-02-20 18:08:24,619 INFO L290 TraceCheckUtils]: 17: Hoare triple {9866#(= ~methaneLevelCritical~0 |isMethaneAlarm_#t~ret9|)} assume -2147483648 <= #t~ret9 && #t~ret9 <= 2147483647;~retValue_acc~2 := #t~ret9;havoc #t~ret9;#res := ~retValue_acc~2; {9867#(= |isMethaneAlarm_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:24,619 INFO L290 TraceCheckUtils]: 18: Hoare triple {9867#(= |isMethaneAlarm_#res| ~methaneLevelCritical~0)} assume true; {9867#(= |isMethaneAlarm_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:24,619 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {9867#(= |isMethaneAlarm_#res| ~methaneLevelCritical~0)} {9789#true} #310#return; {9861#(or (= ~methaneLevelCritical~0 0) (= |processEnvironment__wrappee__highWaterSensor_activatePump_#t~ret8#1| ~methaneLevelCritical~0))} is VALID [2022-02-20 18:08:24,620 INFO L290 TraceCheckUtils]: 20: Hoare triple {9861#(or (= ~methaneLevelCritical~0 0) (= |processEnvironment__wrappee__highWaterSensor_activatePump_#t~ret8#1| ~methaneLevelCritical~0))} assume -2147483648 <= activatePump_#t~ret8#1 && activatePump_#t~ret8#1 <= 2147483647;activatePump_~tmp~3#1 := activatePump_#t~ret8#1;havoc activatePump_#t~ret8#1; {9862#(or (= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~3#1|) (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:08:24,620 INFO L290 TraceCheckUtils]: 21: Hoare triple {9862#(or (= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~3#1|) (= ~methaneLevelCritical~0 0))} assume !(0 != activatePump_~tmp~3#1);assume { :begin_inline_activatePump__wrappee__lowWaterSensor } true;~pumpRunning~0 := 1; {9822#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:24,620 INFO L290 TraceCheckUtils]: 22: Hoare triple {9822#(= ~methaneLevelCritical~0 0)} assume { :end_inline_activatePump__wrappee__lowWaterSensor } true; {9822#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:24,621 INFO L290 TraceCheckUtils]: 23: Hoare triple {9822#(= ~methaneLevelCritical~0 0)} assume { :end_inline_activatePump } true; {9822#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:24,621 INFO L290 TraceCheckUtils]: 24: Hoare triple {9822#(= ~methaneLevelCritical~0 0)} assume true; {9822#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:24,621 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {9822#(= ~methaneLevelCritical~0 0)} {9789#true} #284#return; {9822#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:24,621 INFO L290 TraceCheckUtils]: 26: Hoare triple {9822#(= ~methaneLevelCritical~0 0)} assume true; {9822#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:24,622 INFO L284 TraceCheckUtils]: 27: Hoare quadruple {9822#(= ~methaneLevelCritical~0 0)} {9789#true} #296#return; {9822#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:24,622 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-02-20 18:08:24,623 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:24,626 INFO L290 TraceCheckUtils]: 0: Hoare triple {9789#true} havoc ~retValue_acc~6;~retValue_acc~6 := ~methaneLevelCritical~0;#res := ~retValue_acc~6; {9868#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:24,626 INFO L290 TraceCheckUtils]: 1: Hoare triple {9868#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} assume true; {9868#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:24,626 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {9868#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} {9822#(= ~methaneLevelCritical~0 0)} #298#return; {9826#(= |timeShift___utac_acc__Specification2_spec__2_#t~ret24#1| 0)} is VALID [2022-02-20 18:08:24,626 INFO L290 TraceCheckUtils]: 0: Hoare triple {9789#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(13, 12);call #Ultimate.allocInit(7, 13);call write~init~int(44, 13, 0, 1);call write~init~int(77, 13, 1, 1);call write~init~int(101, 13, 2, 1);call write~init~int(116, 13, 3, 1);call write~init~int(104, 13, 4, 1);call write~init~int(58, 13, 5, 1);call write~init~int(0, 13, 6, 1);call #Ultimate.allocInit(5, 14);call write~init~int(67, 14, 0, 1);call write~init~int(82, 14, 1, 1);call write~init~int(73, 14, 2, 1);call write~init~int(84, 14, 3, 1);call write~init~int(0, 14, 4, 1);call #Ultimate.allocInit(3, 15);call write~init~int(79, 15, 0, 1);call write~init~int(75, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(41, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~pumpRunning~0 := 0;~systemActive~0 := 1;~methAndRunningLastTime~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0; {9789#true} is VALID [2022-02-20 18:08:24,627 INFO L290 TraceCheckUtils]: 1: Hoare triple {9789#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret31#1, main_~retValue_acc~10#1, main_~tmp~8#1;havoc main_~retValue_acc~10#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; {9789#true} is VALID [2022-02-20 18:08:24,627 INFO L290 TraceCheckUtils]: 2: Hoare triple {9789#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {9789#true} is VALID [2022-02-20 18:08:24,627 INFO L290 TraceCheckUtils]: 3: Hoare triple {9789#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {9789#true} is VALID [2022-02-20 18:08:24,627 INFO L290 TraceCheckUtils]: 4: Hoare triple {9789#true} main_#t~ret31#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret31#1 && main_#t~ret31#1 <= 2147483647;main_~tmp~8#1 := main_#t~ret31#1;havoc main_#t~ret31#1; {9789#true} is VALID [2022-02-20 18:08:24,627 INFO L290 TraceCheckUtils]: 5: Hoare triple {9789#true} assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; {9789#true} is VALID [2022-02-20 18:08:24,627 INFO L290 TraceCheckUtils]: 6: Hoare triple {9789#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0; {9789#true} is VALID [2022-02-20 18:08:24,627 INFO L290 TraceCheckUtils]: 7: Hoare triple {9789#true} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet20#1, test_#t~nondet21#1, test_#t~nondet22#1, test_#t~nondet23#1, test_~splverifierCounter~0#1, test_~tmp~6#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~6#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {9789#true} is VALID [2022-02-20 18:08:24,627 INFO L290 TraceCheckUtils]: 8: Hoare triple {9789#true} assume !false; {9789#true} is VALID [2022-02-20 18:08:24,627 INFO L290 TraceCheckUtils]: 9: Hoare triple {9789#true} assume test_~splverifierCounter~0#1 < 4; {9789#true} is VALID [2022-02-20 18:08:24,628 INFO L290 TraceCheckUtils]: 10: Hoare triple {9789#true} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp~6#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {9789#true} is VALID [2022-02-20 18:08:24,628 INFO L290 TraceCheckUtils]: 11: Hoare triple {9789#true} assume 0 != test_~tmp~6#1; {9789#true} is VALID [2022-02-20 18:08:24,638 INFO L272 TraceCheckUtils]: 12: Hoare triple {9789#true} call waterRise(); {9828#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:08:24,638 INFO L290 TraceCheckUtils]: 13: Hoare triple {9828#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {9789#true} is VALID [2022-02-20 18:08:24,639 INFO L290 TraceCheckUtils]: 14: Hoare triple {9789#true} assume true; {9789#true} is VALID [2022-02-20 18:08:24,639 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {9789#true} {9789#true} #300#return; {9789#true} is VALID [2022-02-20 18:08:24,639 INFO L290 TraceCheckUtils]: 16: Hoare triple {9789#true} assume -2147483648 <= test_#t~nondet21#1 && test_#t~nondet21#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet21#1;havoc test_#t~nondet21#1; {9789#true} is VALID [2022-02-20 18:08:24,639 INFO L290 TraceCheckUtils]: 17: Hoare triple {9789#true} assume !(0 != test_~tmp___0~2#1); {9789#true} is VALID [2022-02-20 18:08:24,639 INFO L290 TraceCheckUtils]: 18: Hoare triple {9789#true} assume -2147483648 <= test_#t~nondet22#1 && test_#t~nondet22#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {9789#true} is VALID [2022-02-20 18:08:24,639 INFO L290 TraceCheckUtils]: 19: Hoare triple {9789#true} assume 0 != test_~tmp___2~0#1;assume { :begin_inline_startSystem } true;~systemActive~0 := 1; {9789#true} is VALID [2022-02-20 18:08:24,639 INFO L290 TraceCheckUtils]: 20: Hoare triple {9789#true} assume { :end_inline_startSystem } true; {9789#true} is VALID [2022-02-20 18:08:24,639 INFO L272 TraceCheckUtils]: 21: Hoare triple {9789#true} call timeShift(); {9789#true} is VALID [2022-02-20 18:08:24,639 INFO L290 TraceCheckUtils]: 22: Hoare triple {9789#true} assume !(0 != ~pumpRunning~0); {9789#true} is VALID [2022-02-20 18:08:24,640 INFO L290 TraceCheckUtils]: 23: Hoare triple {9789#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret7#1, processEnvironment_~tmp~2#1;havoc processEnvironment_~tmp~2#1; {9789#true} is VALID [2022-02-20 18:08:24,640 INFO L290 TraceCheckUtils]: 24: Hoare triple {9789#true} assume !(0 != ~pumpRunning~0); {9789#true} is VALID [2022-02-20 18:08:24,640 INFO L272 TraceCheckUtils]: 25: Hoare triple {9789#true} call processEnvironment__wrappee__methaneQuery(); {9829#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:24,640 INFO L290 TraceCheckUtils]: 26: Hoare triple {9829#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {9789#true} is VALID [2022-02-20 18:08:24,640 INFO L290 TraceCheckUtils]: 27: Hoare triple {9789#true} assume !(0 != ~pumpRunning~0); {9789#true} is VALID [2022-02-20 18:08:24,640 INFO L272 TraceCheckUtils]: 28: Hoare triple {9789#true} call processEnvironment__wrappee__highWaterSensor(); {9829#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:24,641 INFO L290 TraceCheckUtils]: 29: Hoare triple {9829#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {9789#true} is VALID [2022-02-20 18:08:24,641 INFO L290 TraceCheckUtils]: 30: Hoare triple {9789#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret18#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {9789#true} is VALID [2022-02-20 18:08:24,641 INFO L290 TraceCheckUtils]: 31: Hoare triple {9789#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {9789#true} is VALID [2022-02-20 18:08:24,641 INFO L290 TraceCheckUtils]: 32: Hoare triple {9789#true} isHighWaterLevel_#t~ret18#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret18#1 && isHighWaterLevel_#t~ret18#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret18#1;havoc isHighWaterLevel_#t~ret18#1; {9789#true} is VALID [2022-02-20 18:08:24,641 INFO L290 TraceCheckUtils]: 33: Hoare triple {9789#true} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1; {9789#true} is VALID [2022-02-20 18:08:24,641 INFO L290 TraceCheckUtils]: 34: Hoare triple {9789#true} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {9789#true} is VALID [2022-02-20 18:08:24,641 INFO L290 TraceCheckUtils]: 35: Hoare triple {9789#true} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {9789#true} is VALID [2022-02-20 18:08:24,641 INFO L290 TraceCheckUtils]: 36: Hoare triple {9789#true} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret8#1, activatePump_~tmp~3#1;havoc activatePump_~tmp~3#1; {9789#true} is VALID [2022-02-20 18:08:24,641 INFO L272 TraceCheckUtils]: 37: Hoare triple {9789#true} call activatePump_#t~ret8#1 := isMethaneAlarm(); {9789#true} is VALID [2022-02-20 18:08:24,642 INFO L290 TraceCheckUtils]: 38: Hoare triple {9789#true} havoc ~retValue_acc~2; {9789#true} is VALID [2022-02-20 18:08:24,642 INFO L272 TraceCheckUtils]: 39: Hoare triple {9789#true} call #t~ret9 := isMethaneLevelCritical(); {9789#true} is VALID [2022-02-20 18:08:24,642 INFO L290 TraceCheckUtils]: 40: Hoare triple {9789#true} havoc ~retValue_acc~6;~retValue_acc~6 := ~methaneLevelCritical~0;#res := ~retValue_acc~6; {9868#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:24,642 INFO L290 TraceCheckUtils]: 41: Hoare triple {9868#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} assume true; {9868#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:24,643 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {9868#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} {9789#true} #316#return; {9866#(= ~methaneLevelCritical~0 |isMethaneAlarm_#t~ret9|)} is VALID [2022-02-20 18:08:24,643 INFO L290 TraceCheckUtils]: 43: Hoare triple {9866#(= ~methaneLevelCritical~0 |isMethaneAlarm_#t~ret9|)} assume -2147483648 <= #t~ret9 && #t~ret9 <= 2147483647;~retValue_acc~2 := #t~ret9;havoc #t~ret9;#res := ~retValue_acc~2; {9867#(= |isMethaneAlarm_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:24,643 INFO L290 TraceCheckUtils]: 44: Hoare triple {9867#(= |isMethaneAlarm_#res| ~methaneLevelCritical~0)} assume true; {9867#(= |isMethaneAlarm_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:24,644 INFO L284 TraceCheckUtils]: 45: Hoare quadruple {9867#(= |isMethaneAlarm_#res| ~methaneLevelCritical~0)} {9789#true} #310#return; {9861#(or (= ~methaneLevelCritical~0 0) (= |processEnvironment__wrappee__highWaterSensor_activatePump_#t~ret8#1| ~methaneLevelCritical~0))} is VALID [2022-02-20 18:08:24,644 INFO L290 TraceCheckUtils]: 46: Hoare triple {9861#(or (= ~methaneLevelCritical~0 0) (= |processEnvironment__wrappee__highWaterSensor_activatePump_#t~ret8#1| ~methaneLevelCritical~0))} assume -2147483648 <= activatePump_#t~ret8#1 && activatePump_#t~ret8#1 <= 2147483647;activatePump_~tmp~3#1 := activatePump_#t~ret8#1;havoc activatePump_#t~ret8#1; {9862#(or (= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~3#1|) (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:08:24,644 INFO L290 TraceCheckUtils]: 47: Hoare triple {9862#(or (= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~3#1|) (= ~methaneLevelCritical~0 0))} assume !(0 != activatePump_~tmp~3#1);assume { :begin_inline_activatePump__wrappee__lowWaterSensor } true;~pumpRunning~0 := 1; {9822#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:24,645 INFO L290 TraceCheckUtils]: 48: Hoare triple {9822#(= ~methaneLevelCritical~0 0)} assume { :end_inline_activatePump__wrappee__lowWaterSensor } true; {9822#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:24,645 INFO L290 TraceCheckUtils]: 49: Hoare triple {9822#(= ~methaneLevelCritical~0 0)} assume { :end_inline_activatePump } true; {9822#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:24,645 INFO L290 TraceCheckUtils]: 50: Hoare triple {9822#(= ~methaneLevelCritical~0 0)} assume true; {9822#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:24,645 INFO L284 TraceCheckUtils]: 51: Hoare quadruple {9822#(= ~methaneLevelCritical~0 0)} {9789#true} #284#return; {9822#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:24,646 INFO L290 TraceCheckUtils]: 52: Hoare triple {9822#(= ~methaneLevelCritical~0 0)} assume true; {9822#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:24,646 INFO L284 TraceCheckUtils]: 53: Hoare quadruple {9822#(= ~methaneLevelCritical~0 0)} {9789#true} #296#return; {9822#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:24,646 INFO L290 TraceCheckUtils]: 54: Hoare triple {9822#(= ~methaneLevelCritical~0 0)} assume { :end_inline_processEnvironment } true; {9822#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:24,646 INFO L290 TraceCheckUtils]: 55: Hoare triple {9822#(= ~methaneLevelCritical~0 0)} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret24#1, __utac_acc__Specification2_spec__2_#t~ret25#1, __utac_acc__Specification2_spec__2_~tmp~7#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~7#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {9822#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:24,647 INFO L272 TraceCheckUtils]: 56: Hoare triple {9822#(= ~methaneLevelCritical~0 0)} call __utac_acc__Specification2_spec__2_#t~ret24#1 := isMethaneLevelCritical(); {9789#true} is VALID [2022-02-20 18:08:24,647 INFO L290 TraceCheckUtils]: 57: Hoare triple {9789#true} havoc ~retValue_acc~6;~retValue_acc~6 := ~methaneLevelCritical~0;#res := ~retValue_acc~6; {9868#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:24,647 INFO L290 TraceCheckUtils]: 58: Hoare triple {9868#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} assume true; {9868#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:24,648 INFO L284 TraceCheckUtils]: 59: Hoare quadruple {9868#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} {9822#(= ~methaneLevelCritical~0 0)} #298#return; {9826#(= |timeShift___utac_acc__Specification2_spec__2_#t~ret24#1| 0)} is VALID [2022-02-20 18:08:24,648 INFO L290 TraceCheckUtils]: 60: Hoare triple {9826#(= |timeShift___utac_acc__Specification2_spec__2_#t~ret24#1| 0)} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret24#1 && __utac_acc__Specification2_spec__2_#t~ret24#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~7#1 := __utac_acc__Specification2_spec__2_#t~ret24#1;havoc __utac_acc__Specification2_spec__2_#t~ret24#1; {9827#(= |timeShift___utac_acc__Specification2_spec__2_~tmp~7#1| 0)} is VALID [2022-02-20 18:08:24,648 INFO L290 TraceCheckUtils]: 61: Hoare triple {9827#(= |timeShift___utac_acc__Specification2_spec__2_~tmp~7#1| 0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp~7#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~3#1;havoc isPumpRunning_~retValue_acc~3#1;isPumpRunning_~retValue_acc~3#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~3#1; {9790#false} is VALID [2022-02-20 18:08:24,648 INFO L290 TraceCheckUtils]: 62: Hoare triple {9790#false} __utac_acc__Specification2_spec__2_#t~ret25#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret25#1 && __utac_acc__Specification2_spec__2_#t~ret25#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret25#1;havoc __utac_acc__Specification2_spec__2_#t~ret25#1; {9790#false} is VALID [2022-02-20 18:08:24,648 INFO L290 TraceCheckUtils]: 63: Hoare triple {9790#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {9790#false} is VALID [2022-02-20 18:08:24,648 INFO L290 TraceCheckUtils]: 64: Hoare triple {9790#false} assume 0 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {9790#false} is VALID [2022-02-20 18:08:24,649 INFO L290 TraceCheckUtils]: 65: Hoare triple {9790#false} assume !false; {9790#false} is VALID [2022-02-20 18:08:24,649 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-02-20 18:08:24,649 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:08:24,649 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1333869136] [2022-02-20 18:08:24,649 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1333869136] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:08:24,649 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:08:24,649 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-02-20 18:08:24,650 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [463509214] [2022-02-20 18:08:24,650 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:08:24,650 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 4.25) internal successors, (51), 7 states have internal predecessors, (51), 2 states have call successors, (7), 3 states have call predecessors, (7), 4 states have return successors, (6), 5 states have call predecessors, (6), 2 states have call successors, (6) Word has length 66 [2022-02-20 18:08:24,650 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:08:24,650 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 12 states, 12 states have (on average 4.25) internal successors, (51), 7 states have internal predecessors, (51), 2 states have call successors, (7), 3 states have call predecessors, (7), 4 states have return successors, (6), 5 states have call predecessors, (6), 2 states have call successors, (6) [2022-02-20 18:08:24,680 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 64 edges. 64 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:24,680 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-02-20 18:08:24,680 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:08:24,680 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-02-20 18:08:24,681 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=109, Unknown=0, NotChecked=0, Total=132 [2022-02-20 18:08:24,681 INFO L87 Difference]: Start difference. First operand 414 states and 514 transitions. Second operand has 12 states, 12 states have (on average 4.25) internal successors, (51), 7 states have internal predecessors, (51), 2 states have call successors, (7), 3 states have call predecessors, (7), 4 states have return successors, (6), 5 states have call predecessors, (6), 2 states have call successors, (6) [2022-02-20 18:08:26,980 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:26,981 INFO L93 Difference]: Finished difference Result 1325 states and 1713 transitions. [2022-02-20 18:08:26,981 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2022-02-20 18:08:26,981 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 4.25) internal successors, (51), 7 states have internal predecessors, (51), 2 states have call successors, (7), 3 states have call predecessors, (7), 4 states have return successors, (6), 5 states have call predecessors, (6), 2 states have call successors, (6) Word has length 66 [2022-02-20 18:08:26,982 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:08:26,982 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 4.25) internal successors, (51), 7 states have internal predecessors, (51), 2 states have call successors, (7), 3 states have call predecessors, (7), 4 states have return successors, (6), 5 states have call predecessors, (6), 2 states have call successors, (6) [2022-02-20 18:08:26,988 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29 states to 29 states and 498 transitions. [2022-02-20 18:08:26,988 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 12 states have (on average 4.25) internal successors, (51), 7 states have internal predecessors, (51), 2 states have call successors, (7), 3 states have call predecessors, (7), 4 states have return successors, (6), 5 states have call predecessors, (6), 2 states have call successors, (6) [2022-02-20 18:08:26,993 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29 states to 29 states and 498 transitions. [2022-02-20 18:08:26,993 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 29 states and 498 transitions. [2022-02-20 18:08:27,360 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 498 edges. 498 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:27,403 INFO L225 Difference]: With dead ends: 1325 [2022-02-20 18:08:27,404 INFO L226 Difference]: Without dead ends: 919 [2022-02-20 18:08:27,405 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 49 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 257 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=229, Invalid=961, Unknown=0, NotChecked=0, Total=1190 [2022-02-20 18:08:27,406 INFO L933 BasicCegarLoop]: 119 mSDtfsCounter, 479 mSDsluCounter, 471 mSDsCounter, 0 mSdLazyCounter, 926 mSolverCounterSat, 270 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 488 SdHoareTripleChecker+Valid, 590 SdHoareTripleChecker+Invalid, 1196 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 270 IncrementalHoareTripleChecker+Valid, 926 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2022-02-20 18:08:27,407 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [488 Valid, 590 Invalid, 1196 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [270 Valid, 926 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2022-02-20 18:08:27,407 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 919 states. [2022-02-20 18:08:27,494 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 919 to 861. [2022-02-20 18:08:27,494 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:08:27,496 INFO L82 GeneralOperation]: Start isEquivalent. First operand 919 states. Second operand has 861 states, 634 states have (on average 1.1987381703470033) internal successors, (760), 682 states have internal predecessors, (760), 119 states have call successors, (119), 94 states have call predecessors, (119), 107 states have return successors, (203), 118 states have call predecessors, (203), 119 states have call successors, (203) [2022-02-20 18:08:27,510 INFO L74 IsIncluded]: Start isIncluded. First operand 919 states. Second operand has 861 states, 634 states have (on average 1.1987381703470033) internal successors, (760), 682 states have internal predecessors, (760), 119 states have call successors, (119), 94 states have call predecessors, (119), 107 states have return successors, (203), 118 states have call predecessors, (203), 119 states have call successors, (203) [2022-02-20 18:08:27,514 INFO L87 Difference]: Start difference. First operand 919 states. Second operand has 861 states, 634 states have (on average 1.1987381703470033) internal successors, (760), 682 states have internal predecessors, (760), 119 states have call successors, (119), 94 states have call predecessors, (119), 107 states have return successors, (203), 118 states have call predecessors, (203), 119 states have call successors, (203) [2022-02-20 18:08:27,551 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:27,551 INFO L93 Difference]: Finished difference Result 919 states and 1154 transitions. [2022-02-20 18:08:27,552 INFO L276 IsEmpty]: Start isEmpty. Operand 919 states and 1154 transitions. [2022-02-20 18:08:27,554 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:27,554 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:27,556 INFO L74 IsIncluded]: Start isIncluded. First operand has 861 states, 634 states have (on average 1.1987381703470033) internal successors, (760), 682 states have internal predecessors, (760), 119 states have call successors, (119), 94 states have call predecessors, (119), 107 states have return successors, (203), 118 states have call predecessors, (203), 119 states have call successors, (203) Second operand 919 states. [2022-02-20 18:08:27,557 INFO L87 Difference]: Start difference. First operand has 861 states, 634 states have (on average 1.1987381703470033) internal successors, (760), 682 states have internal predecessors, (760), 119 states have call successors, (119), 94 states have call predecessors, (119), 107 states have return successors, (203), 118 states have call predecessors, (203), 119 states have call successors, (203) Second operand 919 states. [2022-02-20 18:08:27,592 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:27,593 INFO L93 Difference]: Finished difference Result 919 states and 1154 transitions. [2022-02-20 18:08:27,593 INFO L276 IsEmpty]: Start isEmpty. Operand 919 states and 1154 transitions. [2022-02-20 18:08:27,595 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:27,595 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:27,595 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:08:27,596 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:08:27,598 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 861 states, 634 states have (on average 1.1987381703470033) internal successors, (760), 682 states have internal predecessors, (760), 119 states have call successors, (119), 94 states have call predecessors, (119), 107 states have return successors, (203), 118 states have call predecessors, (203), 119 states have call successors, (203) [2022-02-20 18:08:27,633 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 861 states to 861 states and 1082 transitions. [2022-02-20 18:08:27,634 INFO L78 Accepts]: Start accepts. Automaton has 861 states and 1082 transitions. Word has length 66 [2022-02-20 18:08:27,634 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:08:27,634 INFO L470 AbstractCegarLoop]: Abstraction has 861 states and 1082 transitions. [2022-02-20 18:08:27,635 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 4.25) internal successors, (51), 7 states have internal predecessors, (51), 2 states have call successors, (7), 3 states have call predecessors, (7), 4 states have return successors, (6), 5 states have call predecessors, (6), 2 states have call successors, (6) [2022-02-20 18:08:27,635 INFO L276 IsEmpty]: Start isEmpty. Operand 861 states and 1082 transitions. [2022-02-20 18:08:27,640 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 126 [2022-02-20 18:08:27,640 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:08:27,641 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:08:27,641 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-02-20 18:08:27,641 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:08:27,642 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:08:27,642 INFO L85 PathProgramCache]: Analyzing trace with hash 1166861276, now seen corresponding path program 1 times [2022-02-20 18:08:27,642 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:08:27,642 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1729655876] [2022-02-20 18:08:27,642 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:08:27,642 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:08:27,672 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:27,726 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-02-20 18:08:27,727 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:27,729 INFO L290 TraceCheckUtils]: 0: Hoare triple {14857#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {14773#true} is VALID [2022-02-20 18:08:27,729 INFO L290 TraceCheckUtils]: 1: Hoare triple {14773#true} assume true; {14773#true} is VALID [2022-02-20 18:08:27,729 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {14773#true} {14773#true} #300#return; {14773#true} is VALID [2022-02-20 18:08:27,736 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-02-20 18:08:27,757 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:27,766 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-02-20 18:08:27,769 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:27,773 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-02-20 18:08:27,776 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:27,781 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:08:27,782 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:27,784 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:08:27,785 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:27,787 INFO L290 TraceCheckUtils]: 0: Hoare triple {14773#true} havoc ~retValue_acc~6;~retValue_acc~6 := ~methaneLevelCritical~0;#res := ~retValue_acc~6; {14773#true} is VALID [2022-02-20 18:08:27,787 INFO L290 TraceCheckUtils]: 1: Hoare triple {14773#true} assume true; {14773#true} is VALID [2022-02-20 18:08:27,787 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {14773#true} {14773#true} #316#return; {14773#true} is VALID [2022-02-20 18:08:27,787 INFO L290 TraceCheckUtils]: 0: Hoare triple {14773#true} havoc ~retValue_acc~2; {14773#true} is VALID [2022-02-20 18:08:27,787 INFO L272 TraceCheckUtils]: 1: Hoare triple {14773#true} call #t~ret9 := isMethaneLevelCritical(); {14773#true} is VALID [2022-02-20 18:08:27,787 INFO L290 TraceCheckUtils]: 2: Hoare triple {14773#true} havoc ~retValue_acc~6;~retValue_acc~6 := ~methaneLevelCritical~0;#res := ~retValue_acc~6; {14773#true} is VALID [2022-02-20 18:08:27,788 INFO L290 TraceCheckUtils]: 3: Hoare triple {14773#true} assume true; {14773#true} is VALID [2022-02-20 18:08:27,788 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {14773#true} {14773#true} #316#return; {14773#true} is VALID [2022-02-20 18:08:27,788 INFO L290 TraceCheckUtils]: 5: Hoare triple {14773#true} assume -2147483648 <= #t~ret9 && #t~ret9 <= 2147483647;~retValue_acc~2 := #t~ret9;havoc #t~ret9;#res := ~retValue_acc~2; {14773#true} is VALID [2022-02-20 18:08:27,788 INFO L290 TraceCheckUtils]: 6: Hoare triple {14773#true} assume true; {14773#true} is VALID [2022-02-20 18:08:27,788 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {14773#true} {14773#true} #310#return; {14773#true} is VALID [2022-02-20 18:08:27,788 INFO L290 TraceCheckUtils]: 0: Hoare triple {14890#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {14773#true} is VALID [2022-02-20 18:08:27,788 INFO L290 TraceCheckUtils]: 1: Hoare triple {14773#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret18#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {14773#true} is VALID [2022-02-20 18:08:27,788 INFO L290 TraceCheckUtils]: 2: Hoare triple {14773#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {14773#true} is VALID [2022-02-20 18:08:27,789 INFO L290 TraceCheckUtils]: 3: Hoare triple {14773#true} isHighWaterLevel_#t~ret18#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret18#1 && isHighWaterLevel_#t~ret18#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret18#1;havoc isHighWaterLevel_#t~ret18#1; {14773#true} is VALID [2022-02-20 18:08:27,789 INFO L290 TraceCheckUtils]: 4: Hoare triple {14773#true} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1; {14773#true} is VALID [2022-02-20 18:08:27,789 INFO L290 TraceCheckUtils]: 5: Hoare triple {14773#true} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {14773#true} is VALID [2022-02-20 18:08:27,789 INFO L290 TraceCheckUtils]: 6: Hoare triple {14773#true} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {14773#true} is VALID [2022-02-20 18:08:27,789 INFO L290 TraceCheckUtils]: 7: Hoare triple {14773#true} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret8#1, activatePump_~tmp~3#1;havoc activatePump_~tmp~3#1; {14773#true} is VALID [2022-02-20 18:08:27,789 INFO L272 TraceCheckUtils]: 8: Hoare triple {14773#true} call activatePump_#t~ret8#1 := isMethaneAlarm(); {14773#true} is VALID [2022-02-20 18:08:27,789 INFO L290 TraceCheckUtils]: 9: Hoare triple {14773#true} havoc ~retValue_acc~2; {14773#true} is VALID [2022-02-20 18:08:27,789 INFO L272 TraceCheckUtils]: 10: Hoare triple {14773#true} call #t~ret9 := isMethaneLevelCritical(); {14773#true} is VALID [2022-02-20 18:08:27,789 INFO L290 TraceCheckUtils]: 11: Hoare triple {14773#true} havoc ~retValue_acc~6;~retValue_acc~6 := ~methaneLevelCritical~0;#res := ~retValue_acc~6; {14773#true} is VALID [2022-02-20 18:08:27,790 INFO L290 TraceCheckUtils]: 12: Hoare triple {14773#true} assume true; {14773#true} is VALID [2022-02-20 18:08:27,790 INFO L284 TraceCheckUtils]: 13: Hoare quadruple {14773#true} {14773#true} #316#return; {14773#true} is VALID [2022-02-20 18:08:27,790 INFO L290 TraceCheckUtils]: 14: Hoare triple {14773#true} assume -2147483648 <= #t~ret9 && #t~ret9 <= 2147483647;~retValue_acc~2 := #t~ret9;havoc #t~ret9;#res := ~retValue_acc~2; {14773#true} is VALID [2022-02-20 18:08:27,790 INFO L290 TraceCheckUtils]: 15: Hoare triple {14773#true} assume true; {14773#true} is VALID [2022-02-20 18:08:27,790 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {14773#true} {14773#true} #310#return; {14773#true} is VALID [2022-02-20 18:08:27,796 INFO L290 TraceCheckUtils]: 17: Hoare triple {14773#true} assume -2147483648 <= activatePump_#t~ret8#1 && activatePump_#t~ret8#1 <= 2147483647;activatePump_~tmp~3#1 := activatePump_#t~ret8#1;havoc activatePump_#t~ret8#1; {14773#true} is VALID [2022-02-20 18:08:27,796 INFO L290 TraceCheckUtils]: 18: Hoare triple {14773#true} assume !(0 != activatePump_~tmp~3#1);assume { :begin_inline_activatePump__wrappee__lowWaterSensor } true;~pumpRunning~0 := 1; {14773#true} is VALID [2022-02-20 18:08:27,796 INFO L290 TraceCheckUtils]: 19: Hoare triple {14773#true} assume { :end_inline_activatePump__wrappee__lowWaterSensor } true; {14773#true} is VALID [2022-02-20 18:08:27,797 INFO L290 TraceCheckUtils]: 20: Hoare triple {14773#true} assume { :end_inline_activatePump } true; {14773#true} is VALID [2022-02-20 18:08:27,797 INFO L290 TraceCheckUtils]: 21: Hoare triple {14773#true} assume true; {14773#true} is VALID [2022-02-20 18:08:27,797 INFO L284 TraceCheckUtils]: 22: Hoare quadruple {14773#true} {14773#true} #284#return; {14773#true} is VALID [2022-02-20 18:08:27,797 INFO L290 TraceCheckUtils]: 0: Hoare triple {14890#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {14773#true} is VALID [2022-02-20 18:08:27,797 INFO L290 TraceCheckUtils]: 1: Hoare triple {14773#true} assume !(0 != ~pumpRunning~0); {14773#true} is VALID [2022-02-20 18:08:27,798 INFO L272 TraceCheckUtils]: 2: Hoare triple {14773#true} call processEnvironment__wrappee__highWaterSensor(); {14890#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:27,798 INFO L290 TraceCheckUtils]: 3: Hoare triple {14890#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {14773#true} is VALID [2022-02-20 18:08:27,798 INFO L290 TraceCheckUtils]: 4: Hoare triple {14773#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret18#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {14773#true} is VALID [2022-02-20 18:08:27,798 INFO L290 TraceCheckUtils]: 5: Hoare triple {14773#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {14773#true} is VALID [2022-02-20 18:08:27,798 INFO L290 TraceCheckUtils]: 6: Hoare triple {14773#true} isHighWaterLevel_#t~ret18#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret18#1 && isHighWaterLevel_#t~ret18#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret18#1;havoc isHighWaterLevel_#t~ret18#1; {14773#true} is VALID [2022-02-20 18:08:27,798 INFO L290 TraceCheckUtils]: 7: Hoare triple {14773#true} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1; {14773#true} is VALID [2022-02-20 18:08:27,798 INFO L290 TraceCheckUtils]: 8: Hoare triple {14773#true} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {14773#true} is VALID [2022-02-20 18:08:27,798 INFO L290 TraceCheckUtils]: 9: Hoare triple {14773#true} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {14773#true} is VALID [2022-02-20 18:08:27,798 INFO L290 TraceCheckUtils]: 10: Hoare triple {14773#true} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret8#1, activatePump_~tmp~3#1;havoc activatePump_~tmp~3#1; {14773#true} is VALID [2022-02-20 18:08:27,798 INFO L272 TraceCheckUtils]: 11: Hoare triple {14773#true} call activatePump_#t~ret8#1 := isMethaneAlarm(); {14773#true} is VALID [2022-02-20 18:08:27,799 INFO L290 TraceCheckUtils]: 12: Hoare triple {14773#true} havoc ~retValue_acc~2; {14773#true} is VALID [2022-02-20 18:08:27,799 INFO L272 TraceCheckUtils]: 13: Hoare triple {14773#true} call #t~ret9 := isMethaneLevelCritical(); {14773#true} is VALID [2022-02-20 18:08:27,799 INFO L290 TraceCheckUtils]: 14: Hoare triple {14773#true} havoc ~retValue_acc~6;~retValue_acc~6 := ~methaneLevelCritical~0;#res := ~retValue_acc~6; {14773#true} is VALID [2022-02-20 18:08:27,799 INFO L290 TraceCheckUtils]: 15: Hoare triple {14773#true} assume true; {14773#true} is VALID [2022-02-20 18:08:27,799 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {14773#true} {14773#true} #316#return; {14773#true} is VALID [2022-02-20 18:08:27,799 INFO L290 TraceCheckUtils]: 17: Hoare triple {14773#true} assume -2147483648 <= #t~ret9 && #t~ret9 <= 2147483647;~retValue_acc~2 := #t~ret9;havoc #t~ret9;#res := ~retValue_acc~2; {14773#true} is VALID [2022-02-20 18:08:27,799 INFO L290 TraceCheckUtils]: 18: Hoare triple {14773#true} assume true; {14773#true} is VALID [2022-02-20 18:08:27,799 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {14773#true} {14773#true} #310#return; {14773#true} is VALID [2022-02-20 18:08:27,799 INFO L290 TraceCheckUtils]: 20: Hoare triple {14773#true} assume -2147483648 <= activatePump_#t~ret8#1 && activatePump_#t~ret8#1 <= 2147483647;activatePump_~tmp~3#1 := activatePump_#t~ret8#1;havoc activatePump_#t~ret8#1; {14773#true} is VALID [2022-02-20 18:08:27,800 INFO L290 TraceCheckUtils]: 21: Hoare triple {14773#true} assume !(0 != activatePump_~tmp~3#1);assume { :begin_inline_activatePump__wrappee__lowWaterSensor } true;~pumpRunning~0 := 1; {14773#true} is VALID [2022-02-20 18:08:27,800 INFO L290 TraceCheckUtils]: 22: Hoare triple {14773#true} assume { :end_inline_activatePump__wrappee__lowWaterSensor } true; {14773#true} is VALID [2022-02-20 18:08:27,800 INFO L290 TraceCheckUtils]: 23: Hoare triple {14773#true} assume { :end_inline_activatePump } true; {14773#true} is VALID [2022-02-20 18:08:27,800 INFO L290 TraceCheckUtils]: 24: Hoare triple {14773#true} assume true; {14773#true} is VALID [2022-02-20 18:08:27,800 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {14773#true} {14773#true} #284#return; {14773#true} is VALID [2022-02-20 18:08:27,800 INFO L290 TraceCheckUtils]: 26: Hoare triple {14773#true} assume true; {14773#true} is VALID [2022-02-20 18:08:27,800 INFO L284 TraceCheckUtils]: 27: Hoare quadruple {14773#true} {14773#true} #296#return; {14773#true} is VALID [2022-02-20 18:08:27,802 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-02-20 18:08:27,802 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:27,804 INFO L290 TraceCheckUtils]: 0: Hoare triple {14773#true} havoc ~retValue_acc~6;~retValue_acc~6 := ~methaneLevelCritical~0;#res := ~retValue_acc~6; {14773#true} is VALID [2022-02-20 18:08:27,804 INFO L290 TraceCheckUtils]: 1: Hoare triple {14773#true} assume true; {14773#true} is VALID [2022-02-20 18:08:27,805 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {14773#true} {14773#true} #298#return; {14773#true} is VALID [2022-02-20 18:08:27,805 INFO L290 TraceCheckUtils]: 0: Hoare triple {14858#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0) (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))} assume !(0 != ~pumpRunning~0); {14773#true} is VALID [2022-02-20 18:08:27,805 INFO L290 TraceCheckUtils]: 1: Hoare triple {14773#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret7#1, processEnvironment_~tmp~2#1;havoc processEnvironment_~tmp~2#1; {14773#true} is VALID [2022-02-20 18:08:27,805 INFO L290 TraceCheckUtils]: 2: Hoare triple {14773#true} assume !(0 != ~pumpRunning~0); {14773#true} is VALID [2022-02-20 18:08:27,805 INFO L272 TraceCheckUtils]: 3: Hoare triple {14773#true} call processEnvironment__wrappee__methaneQuery(); {14890#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:27,805 INFO L290 TraceCheckUtils]: 4: Hoare triple {14890#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {14773#true} is VALID [2022-02-20 18:08:27,806 INFO L290 TraceCheckUtils]: 5: Hoare triple {14773#true} assume !(0 != ~pumpRunning~0); {14773#true} is VALID [2022-02-20 18:08:27,806 INFO L272 TraceCheckUtils]: 6: Hoare triple {14773#true} call processEnvironment__wrappee__highWaterSensor(); {14890#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:27,806 INFO L290 TraceCheckUtils]: 7: Hoare triple {14890#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {14773#true} is VALID [2022-02-20 18:08:27,806 INFO L290 TraceCheckUtils]: 8: Hoare triple {14773#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret18#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {14773#true} is VALID [2022-02-20 18:08:27,806 INFO L290 TraceCheckUtils]: 9: Hoare triple {14773#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {14773#true} is VALID [2022-02-20 18:08:27,806 INFO L290 TraceCheckUtils]: 10: Hoare triple {14773#true} isHighWaterLevel_#t~ret18#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret18#1 && isHighWaterLevel_#t~ret18#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret18#1;havoc isHighWaterLevel_#t~ret18#1; {14773#true} is VALID [2022-02-20 18:08:27,806 INFO L290 TraceCheckUtils]: 11: Hoare triple {14773#true} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1; {14773#true} is VALID [2022-02-20 18:08:27,807 INFO L290 TraceCheckUtils]: 12: Hoare triple {14773#true} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {14773#true} is VALID [2022-02-20 18:08:27,807 INFO L290 TraceCheckUtils]: 13: Hoare triple {14773#true} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {14773#true} is VALID [2022-02-20 18:08:27,807 INFO L290 TraceCheckUtils]: 14: Hoare triple {14773#true} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret8#1, activatePump_~tmp~3#1;havoc activatePump_~tmp~3#1; {14773#true} is VALID [2022-02-20 18:08:27,807 INFO L272 TraceCheckUtils]: 15: Hoare triple {14773#true} call activatePump_#t~ret8#1 := isMethaneAlarm(); {14773#true} is VALID [2022-02-20 18:08:27,807 INFO L290 TraceCheckUtils]: 16: Hoare triple {14773#true} havoc ~retValue_acc~2; {14773#true} is VALID [2022-02-20 18:08:27,807 INFO L272 TraceCheckUtils]: 17: Hoare triple {14773#true} call #t~ret9 := isMethaneLevelCritical(); {14773#true} is VALID [2022-02-20 18:08:27,807 INFO L290 TraceCheckUtils]: 18: Hoare triple {14773#true} havoc ~retValue_acc~6;~retValue_acc~6 := ~methaneLevelCritical~0;#res := ~retValue_acc~6; {14773#true} is VALID [2022-02-20 18:08:27,807 INFO L290 TraceCheckUtils]: 19: Hoare triple {14773#true} assume true; {14773#true} is VALID [2022-02-20 18:08:27,807 INFO L284 TraceCheckUtils]: 20: Hoare quadruple {14773#true} {14773#true} #316#return; {14773#true} is VALID [2022-02-20 18:08:27,808 INFO L290 TraceCheckUtils]: 21: Hoare triple {14773#true} assume -2147483648 <= #t~ret9 && #t~ret9 <= 2147483647;~retValue_acc~2 := #t~ret9;havoc #t~ret9;#res := ~retValue_acc~2; {14773#true} is VALID [2022-02-20 18:08:27,808 INFO L290 TraceCheckUtils]: 22: Hoare triple {14773#true} assume true; {14773#true} is VALID [2022-02-20 18:08:27,808 INFO L284 TraceCheckUtils]: 23: Hoare quadruple {14773#true} {14773#true} #310#return; {14773#true} is VALID [2022-02-20 18:08:27,808 INFO L290 TraceCheckUtils]: 24: Hoare triple {14773#true} assume -2147483648 <= activatePump_#t~ret8#1 && activatePump_#t~ret8#1 <= 2147483647;activatePump_~tmp~3#1 := activatePump_#t~ret8#1;havoc activatePump_#t~ret8#1; {14773#true} is VALID [2022-02-20 18:08:27,808 INFO L290 TraceCheckUtils]: 25: Hoare triple {14773#true} assume !(0 != activatePump_~tmp~3#1);assume { :begin_inline_activatePump__wrappee__lowWaterSensor } true;~pumpRunning~0 := 1; {14773#true} is VALID [2022-02-20 18:08:27,808 INFO L290 TraceCheckUtils]: 26: Hoare triple {14773#true} assume { :end_inline_activatePump__wrappee__lowWaterSensor } true; {14773#true} is VALID [2022-02-20 18:08:27,808 INFO L290 TraceCheckUtils]: 27: Hoare triple {14773#true} assume { :end_inline_activatePump } true; {14773#true} is VALID [2022-02-20 18:08:27,808 INFO L290 TraceCheckUtils]: 28: Hoare triple {14773#true} assume true; {14773#true} is VALID [2022-02-20 18:08:27,808 INFO L284 TraceCheckUtils]: 29: Hoare quadruple {14773#true} {14773#true} #284#return; {14773#true} is VALID [2022-02-20 18:08:27,809 INFO L290 TraceCheckUtils]: 30: Hoare triple {14773#true} assume true; {14773#true} is VALID [2022-02-20 18:08:27,809 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {14773#true} {14773#true} #296#return; {14773#true} is VALID [2022-02-20 18:08:27,809 INFO L290 TraceCheckUtils]: 32: Hoare triple {14773#true} assume { :end_inline_processEnvironment } true; {14773#true} is VALID [2022-02-20 18:08:27,809 INFO L290 TraceCheckUtils]: 33: Hoare triple {14773#true} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret24#1, __utac_acc__Specification2_spec__2_#t~ret25#1, __utac_acc__Specification2_spec__2_~tmp~7#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~7#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {14773#true} is VALID [2022-02-20 18:08:27,809 INFO L272 TraceCheckUtils]: 34: Hoare triple {14773#true} call __utac_acc__Specification2_spec__2_#t~ret24#1 := isMethaneLevelCritical(); {14773#true} is VALID [2022-02-20 18:08:27,809 INFO L290 TraceCheckUtils]: 35: Hoare triple {14773#true} havoc ~retValue_acc~6;~retValue_acc~6 := ~methaneLevelCritical~0;#res := ~retValue_acc~6; {14773#true} is VALID [2022-02-20 18:08:27,809 INFO L290 TraceCheckUtils]: 36: Hoare triple {14773#true} assume true; {14773#true} is VALID [2022-02-20 18:08:27,809 INFO L284 TraceCheckUtils]: 37: Hoare quadruple {14773#true} {14773#true} #298#return; {14773#true} is VALID [2022-02-20 18:08:27,809 INFO L290 TraceCheckUtils]: 38: Hoare triple {14773#true} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret24#1 && __utac_acc__Specification2_spec__2_#t~ret24#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~7#1 := __utac_acc__Specification2_spec__2_#t~ret24#1;havoc __utac_acc__Specification2_spec__2_#t~ret24#1; {14773#true} is VALID [2022-02-20 18:08:27,810 INFO L290 TraceCheckUtils]: 39: Hoare triple {14773#true} assume !(0 != __utac_acc__Specification2_spec__2_~tmp~7#1);~methAndRunningLastTime~0 := 0; {14773#true} is VALID [2022-02-20 18:08:27,810 INFO L290 TraceCheckUtils]: 40: Hoare triple {14773#true} assume { :end_inline___utac_acc__Specification2_spec__2 } true; {14773#true} is VALID [2022-02-20 18:08:27,810 INFO L290 TraceCheckUtils]: 41: Hoare triple {14773#true} assume true; {14773#true} is VALID [2022-02-20 18:08:27,810 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {14773#true} {14773#true} #306#return; {14773#true} is VALID [2022-02-20 18:08:27,816 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2022-02-20 18:08:27,818 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:27,829 INFO L290 TraceCheckUtils]: 0: Hoare triple {14925#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {14926#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:27,830 INFO L290 TraceCheckUtils]: 1: Hoare triple {14926#(<= 1 ~methaneLevelCritical~0)} assume true; {14926#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:27,830 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {14926#(<= 1 ~methaneLevelCritical~0)} {14773#true} #302#return; {14826#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:08:27,830 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 84 [2022-02-20 18:08:27,837 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:27,877 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:08:27,880 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:27,891 INFO L290 TraceCheckUtils]: 0: Hoare triple {14773#true} havoc ~retValue_acc~6;~retValue_acc~6 := ~methaneLevelCritical~0;#res := ~retValue_acc~6; {14932#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:27,891 INFO L290 TraceCheckUtils]: 1: Hoare triple {14932#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} assume true; {14932#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:27,892 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {14932#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} {14773#true} #316#return; {14930#(or (= ~methaneLevelCritical~0 0) (not (= |isMethaneAlarm_#t~ret9| 0)))} is VALID [2022-02-20 18:08:27,892 INFO L290 TraceCheckUtils]: 0: Hoare triple {14773#true} havoc ~retValue_acc~2; {14773#true} is VALID [2022-02-20 18:08:27,892 INFO L272 TraceCheckUtils]: 1: Hoare triple {14773#true} call #t~ret9 := isMethaneLevelCritical(); {14773#true} is VALID [2022-02-20 18:08:27,892 INFO L290 TraceCheckUtils]: 2: Hoare triple {14773#true} havoc ~retValue_acc~6;~retValue_acc~6 := ~methaneLevelCritical~0;#res := ~retValue_acc~6; {14932#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:27,893 INFO L290 TraceCheckUtils]: 3: Hoare triple {14932#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} assume true; {14932#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:27,893 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {14932#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} {14773#true} #316#return; {14930#(or (= ~methaneLevelCritical~0 0) (not (= |isMethaneAlarm_#t~ret9| 0)))} is VALID [2022-02-20 18:08:27,893 INFO L290 TraceCheckUtils]: 5: Hoare triple {14930#(or (= ~methaneLevelCritical~0 0) (not (= |isMethaneAlarm_#t~ret9| 0)))} assume -2147483648 <= #t~ret9 && #t~ret9 <= 2147483647;~retValue_acc~2 := #t~ret9;havoc #t~ret9;#res := ~retValue_acc~2; {14931#(or (= ~methaneLevelCritical~0 0) (<= (+ |isMethaneAlarm_#res| 1) 0) (<= 1 |isMethaneAlarm_#res|))} is VALID [2022-02-20 18:08:27,894 INFO L290 TraceCheckUtils]: 6: Hoare triple {14931#(or (= ~methaneLevelCritical~0 0) (<= (+ |isMethaneAlarm_#res| 1) 0) (<= 1 |isMethaneAlarm_#res|))} assume true; {14931#(or (= ~methaneLevelCritical~0 0) (<= (+ |isMethaneAlarm_#res| 1) 0) (<= 1 |isMethaneAlarm_#res|))} is VALID [2022-02-20 18:08:27,894 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {14931#(or (= ~methaneLevelCritical~0 0) (<= (+ |isMethaneAlarm_#res| 1) 0) (<= 1 |isMethaneAlarm_#res|))} {14826#(not (= ~methaneLevelCritical~0 0))} #290#return; {14835#(not (= |timeShift_processEnvironment_#t~ret7#1| 0))} is VALID [2022-02-20 18:08:27,894 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 95 [2022-02-20 18:08:27,898 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:27,903 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-02-20 18:08:27,905 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:27,907 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-02-20 18:08:27,907 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:27,908 INFO L290 TraceCheckUtils]: 0: Hoare triple {14773#true} assume true; {14773#true} is VALID [2022-02-20 18:08:27,908 INFO L284 TraceCheckUtils]: 1: Hoare quadruple {14773#true} {14773#true} #314#return; {14773#true} is VALID [2022-02-20 18:08:27,909 INFO L290 TraceCheckUtils]: 0: Hoare triple {14890#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {14773#true} is VALID [2022-02-20 18:08:27,909 INFO L290 TraceCheckUtils]: 1: Hoare triple {14773#true} assume !(0 == ~pumpRunning~0); {14773#true} is VALID [2022-02-20 18:08:27,909 INFO L272 TraceCheckUtils]: 2: Hoare triple {14773#true} call processEnvironment__wrappee__base(); {14773#true} is VALID [2022-02-20 18:08:27,909 INFO L290 TraceCheckUtils]: 3: Hoare triple {14773#true} assume true; {14773#true} is VALID [2022-02-20 18:08:27,909 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {14773#true} {14773#true} #314#return; {14773#true} is VALID [2022-02-20 18:08:27,909 INFO L290 TraceCheckUtils]: 5: Hoare triple {14773#true} assume true; {14773#true} is VALID [2022-02-20 18:08:27,909 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {14773#true} {14773#true} #282#return; {14773#true} is VALID [2022-02-20 18:08:27,909 INFO L290 TraceCheckUtils]: 0: Hoare triple {14890#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {14773#true} is VALID [2022-02-20 18:08:27,910 INFO L290 TraceCheckUtils]: 1: Hoare triple {14773#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret19#1, isLowWaterLevel_~retValue_acc~5#1, isLowWaterLevel_~tmp~5#1, isLowWaterLevel_~tmp___0~1#1;havoc isLowWaterLevel_~retValue_acc~5#1;havoc isLowWaterLevel_~tmp~5#1;havoc isLowWaterLevel_~tmp___0~1#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;isLowWaterSensorDry_~retValue_acc~9#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~9#1; {14773#true} is VALID [2022-02-20 18:08:27,910 INFO L290 TraceCheckUtils]: 2: Hoare triple {14773#true} isLowWaterLevel_#t~ret19#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret19#1 && isLowWaterLevel_#t~ret19#1 <= 2147483647;isLowWaterLevel_~tmp~5#1 := isLowWaterLevel_#t~ret19#1;havoc isLowWaterLevel_#t~ret19#1; {14773#true} is VALID [2022-02-20 18:08:27,910 INFO L290 TraceCheckUtils]: 3: Hoare triple {14773#true} assume 0 != isLowWaterLevel_~tmp~5#1;isLowWaterLevel_~tmp___0~1#1 := 0; {14773#true} is VALID [2022-02-20 18:08:27,910 INFO L290 TraceCheckUtils]: 4: Hoare triple {14773#true} isLowWaterLevel_~retValue_acc~5#1 := isLowWaterLevel_~tmp___0~1#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~5#1; {14773#true} is VALID [2022-02-20 18:08:27,910 INFO L290 TraceCheckUtils]: 5: Hoare triple {14773#true} #t~ret6#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= #t~ret6#1 && #t~ret6#1 <= 2147483647;~tmp~1#1 := #t~ret6#1;havoc #t~ret6#1; {14773#true} is VALID [2022-02-20 18:08:27,910 INFO L290 TraceCheckUtils]: 6: Hoare triple {14773#true} assume !(0 != ~tmp~1#1); {14773#true} is VALID [2022-02-20 18:08:27,911 INFO L272 TraceCheckUtils]: 7: Hoare triple {14773#true} call processEnvironment__wrappee__highWaterSensor(); {14890#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:27,911 INFO L290 TraceCheckUtils]: 8: Hoare triple {14890#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {14773#true} is VALID [2022-02-20 18:08:27,911 INFO L290 TraceCheckUtils]: 9: Hoare triple {14773#true} assume !(0 == ~pumpRunning~0); {14773#true} is VALID [2022-02-20 18:08:27,911 INFO L272 TraceCheckUtils]: 10: Hoare triple {14773#true} call processEnvironment__wrappee__base(); {14773#true} is VALID [2022-02-20 18:08:27,911 INFO L290 TraceCheckUtils]: 11: Hoare triple {14773#true} assume true; {14773#true} is VALID [2022-02-20 18:08:27,911 INFO L284 TraceCheckUtils]: 12: Hoare quadruple {14773#true} {14773#true} #314#return; {14773#true} is VALID [2022-02-20 18:08:27,912 INFO L290 TraceCheckUtils]: 13: Hoare triple {14773#true} assume true; {14773#true} is VALID [2022-02-20 18:08:27,912 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {14773#true} {14773#true} #282#return; {14773#true} is VALID [2022-02-20 18:08:27,912 INFO L290 TraceCheckUtils]: 15: Hoare triple {14773#true} assume true; {14773#true} is VALID [2022-02-20 18:08:27,912 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {14773#true} {14774#false} #294#return; {14774#false} is VALID [2022-02-20 18:08:27,912 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 115 [2022-02-20 18:08:27,915 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:27,918 INFO L290 TraceCheckUtils]: 0: Hoare triple {14773#true} havoc ~retValue_acc~6;~retValue_acc~6 := ~methaneLevelCritical~0;#res := ~retValue_acc~6; {14773#true} is VALID [2022-02-20 18:08:27,919 INFO L290 TraceCheckUtils]: 1: Hoare triple {14773#true} assume true; {14773#true} is VALID [2022-02-20 18:08:27,919 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {14773#true} {14774#false} #298#return; {14774#false} is VALID [2022-02-20 18:08:27,919 INFO L290 TraceCheckUtils]: 0: Hoare triple {14773#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(13, 12);call #Ultimate.allocInit(7, 13);call write~init~int(44, 13, 0, 1);call write~init~int(77, 13, 1, 1);call write~init~int(101, 13, 2, 1);call write~init~int(116, 13, 3, 1);call write~init~int(104, 13, 4, 1);call write~init~int(58, 13, 5, 1);call write~init~int(0, 13, 6, 1);call #Ultimate.allocInit(5, 14);call write~init~int(67, 14, 0, 1);call write~init~int(82, 14, 1, 1);call write~init~int(73, 14, 2, 1);call write~init~int(84, 14, 3, 1);call write~init~int(0, 14, 4, 1);call #Ultimate.allocInit(3, 15);call write~init~int(79, 15, 0, 1);call write~init~int(75, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(41, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~pumpRunning~0 := 0;~systemActive~0 := 1;~methAndRunningLastTime~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0; {14773#true} is VALID [2022-02-20 18:08:27,919 INFO L290 TraceCheckUtils]: 1: Hoare triple {14773#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret31#1, main_~retValue_acc~10#1, main_~tmp~8#1;havoc main_~retValue_acc~10#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; {14773#true} is VALID [2022-02-20 18:08:27,919 INFO L290 TraceCheckUtils]: 2: Hoare triple {14773#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {14773#true} is VALID [2022-02-20 18:08:27,920 INFO L290 TraceCheckUtils]: 3: Hoare triple {14773#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {14775#(= |ULTIMATE.start_valid_product_#res#1| 1)} is VALID [2022-02-20 18:08:27,920 INFO L290 TraceCheckUtils]: 4: Hoare triple {14775#(= |ULTIMATE.start_valid_product_#res#1| 1)} main_#t~ret31#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret31#1 && main_#t~ret31#1 <= 2147483647;main_~tmp~8#1 := main_#t~ret31#1;havoc main_#t~ret31#1; {14776#(= |ULTIMATE.start_main_~tmp~8#1| 1)} is VALID [2022-02-20 18:08:27,920 INFO L290 TraceCheckUtils]: 5: Hoare triple {14776#(= |ULTIMATE.start_main_~tmp~8#1| 1)} assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; {14773#true} is VALID [2022-02-20 18:08:27,920 INFO L290 TraceCheckUtils]: 6: Hoare triple {14773#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0; {14773#true} is VALID [2022-02-20 18:08:27,920 INFO L290 TraceCheckUtils]: 7: Hoare triple {14773#true} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet20#1, test_#t~nondet21#1, test_#t~nondet22#1, test_#t~nondet23#1, test_~splverifierCounter~0#1, test_~tmp~6#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~6#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {14773#true} is VALID [2022-02-20 18:08:27,920 INFO L290 TraceCheckUtils]: 8: Hoare triple {14773#true} assume !false; {14773#true} is VALID [2022-02-20 18:08:27,920 INFO L290 TraceCheckUtils]: 9: Hoare triple {14773#true} assume test_~splverifierCounter~0#1 < 4; {14773#true} is VALID [2022-02-20 18:08:27,921 INFO L290 TraceCheckUtils]: 10: Hoare triple {14773#true} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp~6#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {14773#true} is VALID [2022-02-20 18:08:27,921 INFO L290 TraceCheckUtils]: 11: Hoare triple {14773#true} assume 0 != test_~tmp~6#1; {14773#true} is VALID [2022-02-20 18:08:27,921 INFO L272 TraceCheckUtils]: 12: Hoare triple {14773#true} call waterRise(); {14857#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:08:27,921 INFO L290 TraceCheckUtils]: 13: Hoare triple {14857#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {14773#true} is VALID [2022-02-20 18:08:27,921 INFO L290 TraceCheckUtils]: 14: Hoare triple {14773#true} assume true; {14773#true} is VALID [2022-02-20 18:08:27,921 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {14773#true} {14773#true} #300#return; {14773#true} is VALID [2022-02-20 18:08:27,921 INFO L290 TraceCheckUtils]: 16: Hoare triple {14773#true} assume -2147483648 <= test_#t~nondet21#1 && test_#t~nondet21#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet21#1;havoc test_#t~nondet21#1; {14773#true} is VALID [2022-02-20 18:08:27,922 INFO L290 TraceCheckUtils]: 17: Hoare triple {14773#true} assume !(0 != test_~tmp___0~2#1); {14773#true} is VALID [2022-02-20 18:08:27,922 INFO L290 TraceCheckUtils]: 18: Hoare triple {14773#true} assume -2147483648 <= test_#t~nondet22#1 && test_#t~nondet22#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {14773#true} is VALID [2022-02-20 18:08:27,922 INFO L290 TraceCheckUtils]: 19: Hoare triple {14773#true} assume 0 != test_~tmp___2~0#1;assume { :begin_inline_startSystem } true;~systemActive~0 := 1; {14773#true} is VALID [2022-02-20 18:08:27,922 INFO L290 TraceCheckUtils]: 20: Hoare triple {14773#true} assume { :end_inline_startSystem } true; {14773#true} is VALID [2022-02-20 18:08:27,922 INFO L272 TraceCheckUtils]: 21: Hoare triple {14773#true} call timeShift(); {14858#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0) (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))} is VALID [2022-02-20 18:08:27,922 INFO L290 TraceCheckUtils]: 22: Hoare triple {14858#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0) (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))} assume !(0 != ~pumpRunning~0); {14773#true} is VALID [2022-02-20 18:08:27,922 INFO L290 TraceCheckUtils]: 23: Hoare triple {14773#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret7#1, processEnvironment_~tmp~2#1;havoc processEnvironment_~tmp~2#1; {14773#true} is VALID [2022-02-20 18:08:27,923 INFO L290 TraceCheckUtils]: 24: Hoare triple {14773#true} assume !(0 != ~pumpRunning~0); {14773#true} is VALID [2022-02-20 18:08:27,923 INFO L272 TraceCheckUtils]: 25: Hoare triple {14773#true} call processEnvironment__wrappee__methaneQuery(); {14890#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:27,923 INFO L290 TraceCheckUtils]: 26: Hoare triple {14890#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {14773#true} is VALID [2022-02-20 18:08:27,923 INFO L290 TraceCheckUtils]: 27: Hoare triple {14773#true} assume !(0 != ~pumpRunning~0); {14773#true} is VALID [2022-02-20 18:08:27,923 INFO L272 TraceCheckUtils]: 28: Hoare triple {14773#true} call processEnvironment__wrappee__highWaterSensor(); {14890#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:27,924 INFO L290 TraceCheckUtils]: 29: Hoare triple {14890#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {14773#true} is VALID [2022-02-20 18:08:27,924 INFO L290 TraceCheckUtils]: 30: Hoare triple {14773#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret18#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {14773#true} is VALID [2022-02-20 18:08:27,924 INFO L290 TraceCheckUtils]: 31: Hoare triple {14773#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {14773#true} is VALID [2022-02-20 18:08:27,924 INFO L290 TraceCheckUtils]: 32: Hoare triple {14773#true} isHighWaterLevel_#t~ret18#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret18#1 && isHighWaterLevel_#t~ret18#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret18#1;havoc isHighWaterLevel_#t~ret18#1; {14773#true} is VALID [2022-02-20 18:08:27,924 INFO L290 TraceCheckUtils]: 33: Hoare triple {14773#true} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1; {14773#true} is VALID [2022-02-20 18:08:27,924 INFO L290 TraceCheckUtils]: 34: Hoare triple {14773#true} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {14773#true} is VALID [2022-02-20 18:08:27,924 INFO L290 TraceCheckUtils]: 35: Hoare triple {14773#true} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {14773#true} is VALID [2022-02-20 18:08:27,924 INFO L290 TraceCheckUtils]: 36: Hoare triple {14773#true} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret8#1, activatePump_~tmp~3#1;havoc activatePump_~tmp~3#1; {14773#true} is VALID [2022-02-20 18:08:27,924 INFO L272 TraceCheckUtils]: 37: Hoare triple {14773#true} call activatePump_#t~ret8#1 := isMethaneAlarm(); {14773#true} is VALID [2022-02-20 18:08:27,924 INFO L290 TraceCheckUtils]: 38: Hoare triple {14773#true} havoc ~retValue_acc~2; {14773#true} is VALID [2022-02-20 18:08:27,925 INFO L272 TraceCheckUtils]: 39: Hoare triple {14773#true} call #t~ret9 := isMethaneLevelCritical(); {14773#true} is VALID [2022-02-20 18:08:27,925 INFO L290 TraceCheckUtils]: 40: Hoare triple {14773#true} havoc ~retValue_acc~6;~retValue_acc~6 := ~methaneLevelCritical~0;#res := ~retValue_acc~6; {14773#true} is VALID [2022-02-20 18:08:27,925 INFO L290 TraceCheckUtils]: 41: Hoare triple {14773#true} assume true; {14773#true} is VALID [2022-02-20 18:08:27,925 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {14773#true} {14773#true} #316#return; {14773#true} is VALID [2022-02-20 18:08:27,925 INFO L290 TraceCheckUtils]: 43: Hoare triple {14773#true} assume -2147483648 <= #t~ret9 && #t~ret9 <= 2147483647;~retValue_acc~2 := #t~ret9;havoc #t~ret9;#res := ~retValue_acc~2; {14773#true} is VALID [2022-02-20 18:08:27,925 INFO L290 TraceCheckUtils]: 44: Hoare triple {14773#true} assume true; {14773#true} is VALID [2022-02-20 18:08:27,925 INFO L284 TraceCheckUtils]: 45: Hoare quadruple {14773#true} {14773#true} #310#return; {14773#true} is VALID [2022-02-20 18:08:27,925 INFO L290 TraceCheckUtils]: 46: Hoare triple {14773#true} assume -2147483648 <= activatePump_#t~ret8#1 && activatePump_#t~ret8#1 <= 2147483647;activatePump_~tmp~3#1 := activatePump_#t~ret8#1;havoc activatePump_#t~ret8#1; {14773#true} is VALID [2022-02-20 18:08:27,925 INFO L290 TraceCheckUtils]: 47: Hoare triple {14773#true} assume !(0 != activatePump_~tmp~3#1);assume { :begin_inline_activatePump__wrappee__lowWaterSensor } true;~pumpRunning~0 := 1; {14773#true} is VALID [2022-02-20 18:08:27,926 INFO L290 TraceCheckUtils]: 48: Hoare triple {14773#true} assume { :end_inline_activatePump__wrappee__lowWaterSensor } true; {14773#true} is VALID [2022-02-20 18:08:27,926 INFO L290 TraceCheckUtils]: 49: Hoare triple {14773#true} assume { :end_inline_activatePump } true; {14773#true} is VALID [2022-02-20 18:08:27,926 INFO L290 TraceCheckUtils]: 50: Hoare triple {14773#true} assume true; {14773#true} is VALID [2022-02-20 18:08:27,926 INFO L284 TraceCheckUtils]: 51: Hoare quadruple {14773#true} {14773#true} #284#return; {14773#true} is VALID [2022-02-20 18:08:27,926 INFO L290 TraceCheckUtils]: 52: Hoare triple {14773#true} assume true; {14773#true} is VALID [2022-02-20 18:08:27,926 INFO L284 TraceCheckUtils]: 53: Hoare quadruple {14773#true} {14773#true} #296#return; {14773#true} is VALID [2022-02-20 18:08:27,926 INFO L290 TraceCheckUtils]: 54: Hoare triple {14773#true} assume { :end_inline_processEnvironment } true; {14773#true} is VALID [2022-02-20 18:08:27,926 INFO L290 TraceCheckUtils]: 55: Hoare triple {14773#true} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret24#1, __utac_acc__Specification2_spec__2_#t~ret25#1, __utac_acc__Specification2_spec__2_~tmp~7#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~7#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {14773#true} is VALID [2022-02-20 18:08:27,926 INFO L272 TraceCheckUtils]: 56: Hoare triple {14773#true} call __utac_acc__Specification2_spec__2_#t~ret24#1 := isMethaneLevelCritical(); {14773#true} is VALID [2022-02-20 18:08:27,927 INFO L290 TraceCheckUtils]: 57: Hoare triple {14773#true} havoc ~retValue_acc~6;~retValue_acc~6 := ~methaneLevelCritical~0;#res := ~retValue_acc~6; {14773#true} is VALID [2022-02-20 18:08:27,927 INFO L290 TraceCheckUtils]: 58: Hoare triple {14773#true} assume true; {14773#true} is VALID [2022-02-20 18:08:27,927 INFO L284 TraceCheckUtils]: 59: Hoare quadruple {14773#true} {14773#true} #298#return; {14773#true} is VALID [2022-02-20 18:08:27,927 INFO L290 TraceCheckUtils]: 60: Hoare triple {14773#true} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret24#1 && __utac_acc__Specification2_spec__2_#t~ret24#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~7#1 := __utac_acc__Specification2_spec__2_#t~ret24#1;havoc __utac_acc__Specification2_spec__2_#t~ret24#1; {14773#true} is VALID [2022-02-20 18:08:27,927 INFO L290 TraceCheckUtils]: 61: Hoare triple {14773#true} assume !(0 != __utac_acc__Specification2_spec__2_~tmp~7#1);~methAndRunningLastTime~0 := 0; {14773#true} is VALID [2022-02-20 18:08:27,927 INFO L290 TraceCheckUtils]: 62: Hoare triple {14773#true} assume { :end_inline___utac_acc__Specification2_spec__2 } true; {14773#true} is VALID [2022-02-20 18:08:27,927 INFO L290 TraceCheckUtils]: 63: Hoare triple {14773#true} assume true; {14773#true} is VALID [2022-02-20 18:08:27,927 INFO L284 TraceCheckUtils]: 64: Hoare quadruple {14773#true} {14773#true} #306#return; {14773#true} is VALID [2022-02-20 18:08:27,927 INFO L290 TraceCheckUtils]: 65: Hoare triple {14773#true} assume !false; {14773#true} is VALID [2022-02-20 18:08:27,927 INFO L290 TraceCheckUtils]: 66: Hoare triple {14773#true} assume test_~splverifierCounter~0#1 < 4; {14773#true} is VALID [2022-02-20 18:08:27,928 INFO L290 TraceCheckUtils]: 67: Hoare triple {14773#true} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp~6#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {14773#true} is VALID [2022-02-20 18:08:27,928 INFO L290 TraceCheckUtils]: 68: Hoare triple {14773#true} assume !(0 != test_~tmp~6#1); {14773#true} is VALID [2022-02-20 18:08:27,928 INFO L290 TraceCheckUtils]: 69: Hoare triple {14773#true} assume -2147483648 <= test_#t~nondet21#1 && test_#t~nondet21#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet21#1;havoc test_#t~nondet21#1; {14773#true} is VALID [2022-02-20 18:08:27,928 INFO L290 TraceCheckUtils]: 70: Hoare triple {14773#true} assume 0 != test_~tmp___0~2#1; {14773#true} is VALID [2022-02-20 18:08:27,928 INFO L272 TraceCheckUtils]: 71: Hoare triple {14773#true} call changeMethaneLevel(); {14925#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:27,929 INFO L290 TraceCheckUtils]: 72: Hoare triple {14925#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {14926#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:27,929 INFO L290 TraceCheckUtils]: 73: Hoare triple {14926#(<= 1 ~methaneLevelCritical~0)} assume true; {14926#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:27,929 INFO L284 TraceCheckUtils]: 74: Hoare quadruple {14926#(<= 1 ~methaneLevelCritical~0)} {14773#true} #302#return; {14826#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:08:27,930 INFO L290 TraceCheckUtils]: 75: Hoare triple {14826#(not (= ~methaneLevelCritical~0 0))} assume -2147483648 <= test_#t~nondet22#1 && test_#t~nondet22#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {14826#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:08:27,930 INFO L290 TraceCheckUtils]: 76: Hoare triple {14826#(not (= ~methaneLevelCritical~0 0))} assume 0 != test_~tmp___2~0#1;assume { :begin_inline_startSystem } true;~systemActive~0 := 1; {14826#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:08:27,930 INFO L290 TraceCheckUtils]: 77: Hoare triple {14826#(not (= ~methaneLevelCritical~0 0))} assume { :end_inline_startSystem } true; {14826#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:08:27,930 INFO L272 TraceCheckUtils]: 78: Hoare triple {14826#(not (= ~methaneLevelCritical~0 0))} call timeShift(); {14826#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:08:27,931 INFO L290 TraceCheckUtils]: 79: Hoare triple {14826#(not (= ~methaneLevelCritical~0 0))} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {14826#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:08:27,931 INFO L290 TraceCheckUtils]: 80: Hoare triple {14826#(not (= ~methaneLevelCritical~0 0))} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {14826#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:08:27,931 INFO L290 TraceCheckUtils]: 81: Hoare triple {14826#(not (= ~methaneLevelCritical~0 0))} assume { :end_inline_lowerWaterLevel } true; {14826#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:08:27,932 INFO L290 TraceCheckUtils]: 82: Hoare triple {14826#(not (= ~methaneLevelCritical~0 0))} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret7#1, processEnvironment_~tmp~2#1;havoc processEnvironment_~tmp~2#1; {14826#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:08:27,932 INFO L290 TraceCheckUtils]: 83: Hoare triple {14826#(not (= ~methaneLevelCritical~0 0))} assume 0 != ~pumpRunning~0; {14826#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:08:27,932 INFO L272 TraceCheckUtils]: 84: Hoare triple {14826#(not (= ~methaneLevelCritical~0 0))} call processEnvironment_#t~ret7#1 := isMethaneAlarm(); {14773#true} is VALID [2022-02-20 18:08:27,932 INFO L290 TraceCheckUtils]: 85: Hoare triple {14773#true} havoc ~retValue_acc~2; {14773#true} is VALID [2022-02-20 18:08:27,932 INFO L272 TraceCheckUtils]: 86: Hoare triple {14773#true} call #t~ret9 := isMethaneLevelCritical(); {14773#true} is VALID [2022-02-20 18:08:27,933 INFO L290 TraceCheckUtils]: 87: Hoare triple {14773#true} havoc ~retValue_acc~6;~retValue_acc~6 := ~methaneLevelCritical~0;#res := ~retValue_acc~6; {14932#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:27,933 INFO L290 TraceCheckUtils]: 88: Hoare triple {14932#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} assume true; {14932#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:27,933 INFO L284 TraceCheckUtils]: 89: Hoare quadruple {14932#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} {14773#true} #316#return; {14930#(or (= ~methaneLevelCritical~0 0) (not (= |isMethaneAlarm_#t~ret9| 0)))} is VALID [2022-02-20 18:08:27,934 INFO L290 TraceCheckUtils]: 90: Hoare triple {14930#(or (= ~methaneLevelCritical~0 0) (not (= |isMethaneAlarm_#t~ret9| 0)))} assume -2147483648 <= #t~ret9 && #t~ret9 <= 2147483647;~retValue_acc~2 := #t~ret9;havoc #t~ret9;#res := ~retValue_acc~2; {14931#(or (= ~methaneLevelCritical~0 0) (<= (+ |isMethaneAlarm_#res| 1) 0) (<= 1 |isMethaneAlarm_#res|))} is VALID [2022-02-20 18:08:27,934 INFO L290 TraceCheckUtils]: 91: Hoare triple {14931#(or (= ~methaneLevelCritical~0 0) (<= (+ |isMethaneAlarm_#res| 1) 0) (<= 1 |isMethaneAlarm_#res|))} assume true; {14931#(or (= ~methaneLevelCritical~0 0) (<= (+ |isMethaneAlarm_#res| 1) 0) (<= 1 |isMethaneAlarm_#res|))} is VALID [2022-02-20 18:08:27,935 INFO L284 TraceCheckUtils]: 92: Hoare quadruple {14931#(or (= ~methaneLevelCritical~0 0) (<= (+ |isMethaneAlarm_#res| 1) 0) (<= 1 |isMethaneAlarm_#res|))} {14826#(not (= ~methaneLevelCritical~0 0))} #290#return; {14835#(not (= |timeShift_processEnvironment_#t~ret7#1| 0))} is VALID [2022-02-20 18:08:27,936 INFO L290 TraceCheckUtils]: 93: Hoare triple {14835#(not (= |timeShift_processEnvironment_#t~ret7#1| 0))} assume -2147483648 <= processEnvironment_#t~ret7#1 && processEnvironment_#t~ret7#1 <= 2147483647;processEnvironment_~tmp~2#1 := processEnvironment_#t~ret7#1;havoc processEnvironment_#t~ret7#1; {14836#(not (= |timeShift_processEnvironment_~tmp~2#1| 0))} is VALID [2022-02-20 18:08:27,936 INFO L290 TraceCheckUtils]: 94: Hoare triple {14836#(not (= |timeShift_processEnvironment_~tmp~2#1| 0))} assume !(0 != processEnvironment_~tmp~2#1); {14774#false} is VALID [2022-02-20 18:08:27,936 INFO L272 TraceCheckUtils]: 95: Hoare triple {14774#false} call processEnvironment__wrappee__methaneQuery(); {14890#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:27,937 INFO L290 TraceCheckUtils]: 96: Hoare triple {14890#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {14773#true} is VALID [2022-02-20 18:08:27,937 INFO L290 TraceCheckUtils]: 97: Hoare triple {14773#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret19#1, isLowWaterLevel_~retValue_acc~5#1, isLowWaterLevel_~tmp~5#1, isLowWaterLevel_~tmp___0~1#1;havoc isLowWaterLevel_~retValue_acc~5#1;havoc isLowWaterLevel_~tmp~5#1;havoc isLowWaterLevel_~tmp___0~1#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;isLowWaterSensorDry_~retValue_acc~9#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~9#1; {14773#true} is VALID [2022-02-20 18:08:27,937 INFO L290 TraceCheckUtils]: 98: Hoare triple {14773#true} isLowWaterLevel_#t~ret19#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret19#1 && isLowWaterLevel_#t~ret19#1 <= 2147483647;isLowWaterLevel_~tmp~5#1 := isLowWaterLevel_#t~ret19#1;havoc isLowWaterLevel_#t~ret19#1; {14773#true} is VALID [2022-02-20 18:08:27,937 INFO L290 TraceCheckUtils]: 99: Hoare triple {14773#true} assume 0 != isLowWaterLevel_~tmp~5#1;isLowWaterLevel_~tmp___0~1#1 := 0; {14773#true} is VALID [2022-02-20 18:08:27,937 INFO L290 TraceCheckUtils]: 100: Hoare triple {14773#true} isLowWaterLevel_~retValue_acc~5#1 := isLowWaterLevel_~tmp___0~1#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~5#1; {14773#true} is VALID [2022-02-20 18:08:27,937 INFO L290 TraceCheckUtils]: 101: Hoare triple {14773#true} #t~ret6#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= #t~ret6#1 && #t~ret6#1 <= 2147483647;~tmp~1#1 := #t~ret6#1;havoc #t~ret6#1; {14773#true} is VALID [2022-02-20 18:08:27,937 INFO L290 TraceCheckUtils]: 102: Hoare triple {14773#true} assume !(0 != ~tmp~1#1); {14773#true} is VALID [2022-02-20 18:08:27,938 INFO L272 TraceCheckUtils]: 103: Hoare triple {14773#true} call processEnvironment__wrappee__highWaterSensor(); {14890#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:27,938 INFO L290 TraceCheckUtils]: 104: Hoare triple {14890#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {14773#true} is VALID [2022-02-20 18:08:27,938 INFO L290 TraceCheckUtils]: 105: Hoare triple {14773#true} assume !(0 == ~pumpRunning~0); {14773#true} is VALID [2022-02-20 18:08:27,938 INFO L272 TraceCheckUtils]: 106: Hoare triple {14773#true} call processEnvironment__wrappee__base(); {14773#true} is VALID [2022-02-20 18:08:27,938 INFO L290 TraceCheckUtils]: 107: Hoare triple {14773#true} assume true; {14773#true} is VALID [2022-02-20 18:08:27,938 INFO L284 TraceCheckUtils]: 108: Hoare quadruple {14773#true} {14773#true} #314#return; {14773#true} is VALID [2022-02-20 18:08:27,938 INFO L290 TraceCheckUtils]: 109: Hoare triple {14773#true} assume true; {14773#true} is VALID [2022-02-20 18:08:27,938 INFO L284 TraceCheckUtils]: 110: Hoare quadruple {14773#true} {14773#true} #282#return; {14773#true} is VALID [2022-02-20 18:08:27,938 INFO L290 TraceCheckUtils]: 111: Hoare triple {14773#true} assume true; {14773#true} is VALID [2022-02-20 18:08:27,939 INFO L284 TraceCheckUtils]: 112: Hoare quadruple {14773#true} {14774#false} #294#return; {14774#false} is VALID [2022-02-20 18:08:27,939 INFO L290 TraceCheckUtils]: 113: Hoare triple {14774#false} assume { :end_inline_processEnvironment } true; {14774#false} is VALID [2022-02-20 18:08:27,939 INFO L290 TraceCheckUtils]: 114: Hoare triple {14774#false} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret24#1, __utac_acc__Specification2_spec__2_#t~ret25#1, __utac_acc__Specification2_spec__2_~tmp~7#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~7#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {14774#false} is VALID [2022-02-20 18:08:27,939 INFO L272 TraceCheckUtils]: 115: Hoare triple {14774#false} call __utac_acc__Specification2_spec__2_#t~ret24#1 := isMethaneLevelCritical(); {14773#true} is VALID [2022-02-20 18:08:27,939 INFO L290 TraceCheckUtils]: 116: Hoare triple {14773#true} havoc ~retValue_acc~6;~retValue_acc~6 := ~methaneLevelCritical~0;#res := ~retValue_acc~6; {14773#true} is VALID [2022-02-20 18:08:27,939 INFO L290 TraceCheckUtils]: 117: Hoare triple {14773#true} assume true; {14773#true} is VALID [2022-02-20 18:08:27,939 INFO L284 TraceCheckUtils]: 118: Hoare quadruple {14773#true} {14774#false} #298#return; {14774#false} is VALID [2022-02-20 18:08:27,939 INFO L290 TraceCheckUtils]: 119: Hoare triple {14774#false} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret24#1 && __utac_acc__Specification2_spec__2_#t~ret24#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~7#1 := __utac_acc__Specification2_spec__2_#t~ret24#1;havoc __utac_acc__Specification2_spec__2_#t~ret24#1; {14774#false} is VALID [2022-02-20 18:08:27,939 INFO L290 TraceCheckUtils]: 120: Hoare triple {14774#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~7#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~3#1;havoc isPumpRunning_~retValue_acc~3#1;isPumpRunning_~retValue_acc~3#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~3#1; {14774#false} is VALID [2022-02-20 18:08:27,939 INFO L290 TraceCheckUtils]: 121: Hoare triple {14774#false} __utac_acc__Specification2_spec__2_#t~ret25#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret25#1 && __utac_acc__Specification2_spec__2_#t~ret25#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret25#1;havoc __utac_acc__Specification2_spec__2_#t~ret25#1; {14774#false} is VALID [2022-02-20 18:08:27,940 INFO L290 TraceCheckUtils]: 122: Hoare triple {14774#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {14774#false} is VALID [2022-02-20 18:08:27,940 INFO L290 TraceCheckUtils]: 123: Hoare triple {14774#false} assume 0 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {14774#false} is VALID [2022-02-20 18:08:27,940 INFO L290 TraceCheckUtils]: 124: Hoare triple {14774#false} assume !false; {14774#false} is VALID [2022-02-20 18:08:27,940 INFO L134 CoverageAnalysis]: Checked inductivity of 49 backedges. 18 proven. 3 refuted. 0 times theorem prover too weak. 28 trivial. 0 not checked. [2022-02-20 18:08:27,941 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:08:27,941 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1729655876] [2022-02-20 18:08:27,941 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1729655876] provided 0 perfect and 1 imperfect interpolant sequences [2022-02-20 18:08:27,941 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1835888942] [2022-02-20 18:08:27,941 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:08:27,941 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-02-20 18:08:27,941 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-20 18:08:27,944 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-02-20 18:08:27,978 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-02-20 18:08:28,043 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:28,046 INFO L263 TraceCheckSpWp]: Trace formula consists of 542 conjuncts, 9 conjunts are in the unsatisfiable core [2022-02-20 18:08:28,071 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:28,076 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 18:08:28,542 INFO L290 TraceCheckUtils]: 0: Hoare triple {14773#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(13, 12);call #Ultimate.allocInit(7, 13);call write~init~int(44, 13, 0, 1);call write~init~int(77, 13, 1, 1);call write~init~int(101, 13, 2, 1);call write~init~int(116, 13, 3, 1);call write~init~int(104, 13, 4, 1);call write~init~int(58, 13, 5, 1);call write~init~int(0, 13, 6, 1);call #Ultimate.allocInit(5, 14);call write~init~int(67, 14, 0, 1);call write~init~int(82, 14, 1, 1);call write~init~int(73, 14, 2, 1);call write~init~int(84, 14, 3, 1);call write~init~int(0, 14, 4, 1);call #Ultimate.allocInit(3, 15);call write~init~int(79, 15, 0, 1);call write~init~int(75, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(41, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~pumpRunning~0 := 0;~systemActive~0 := 1;~methAndRunningLastTime~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0; {14773#true} is VALID [2022-02-20 18:08:28,542 INFO L290 TraceCheckUtils]: 1: Hoare triple {14773#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret31#1, main_~retValue_acc~10#1, main_~tmp~8#1;havoc main_~retValue_acc~10#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; {14773#true} is VALID [2022-02-20 18:08:28,542 INFO L290 TraceCheckUtils]: 2: Hoare triple {14773#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {14773#true} is VALID [2022-02-20 18:08:28,542 INFO L290 TraceCheckUtils]: 3: Hoare triple {14773#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {14773#true} is VALID [2022-02-20 18:08:28,542 INFO L290 TraceCheckUtils]: 4: Hoare triple {14773#true} main_#t~ret31#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret31#1 && main_#t~ret31#1 <= 2147483647;main_~tmp~8#1 := main_#t~ret31#1;havoc main_#t~ret31#1; {14773#true} is VALID [2022-02-20 18:08:28,543 INFO L290 TraceCheckUtils]: 5: Hoare triple {14773#true} assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; {14773#true} is VALID [2022-02-20 18:08:28,543 INFO L290 TraceCheckUtils]: 6: Hoare triple {14773#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0; {14773#true} is VALID [2022-02-20 18:08:28,543 INFO L290 TraceCheckUtils]: 7: Hoare triple {14773#true} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet20#1, test_#t~nondet21#1, test_#t~nondet22#1, test_#t~nondet23#1, test_~splverifierCounter~0#1, test_~tmp~6#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~6#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {14773#true} is VALID [2022-02-20 18:08:28,543 INFO L290 TraceCheckUtils]: 8: Hoare triple {14773#true} assume !false; {14773#true} is VALID [2022-02-20 18:08:28,543 INFO L290 TraceCheckUtils]: 9: Hoare triple {14773#true} assume test_~splverifierCounter~0#1 < 4; {14773#true} is VALID [2022-02-20 18:08:28,543 INFO L290 TraceCheckUtils]: 10: Hoare triple {14773#true} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp~6#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {14773#true} is VALID [2022-02-20 18:08:28,543 INFO L290 TraceCheckUtils]: 11: Hoare triple {14773#true} assume 0 != test_~tmp~6#1; {14773#true} is VALID [2022-02-20 18:08:28,543 INFO L272 TraceCheckUtils]: 12: Hoare triple {14773#true} call waterRise(); {14773#true} is VALID [2022-02-20 18:08:28,543 INFO L290 TraceCheckUtils]: 13: Hoare triple {14773#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {14773#true} is VALID [2022-02-20 18:08:28,544 INFO L290 TraceCheckUtils]: 14: Hoare triple {14773#true} assume true; {14773#true} is VALID [2022-02-20 18:08:28,544 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {14773#true} {14773#true} #300#return; {14773#true} is VALID [2022-02-20 18:08:28,544 INFO L290 TraceCheckUtils]: 16: Hoare triple {14773#true} assume -2147483648 <= test_#t~nondet21#1 && test_#t~nondet21#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet21#1;havoc test_#t~nondet21#1; {14773#true} is VALID [2022-02-20 18:08:28,544 INFO L290 TraceCheckUtils]: 17: Hoare triple {14773#true} assume !(0 != test_~tmp___0~2#1); {14773#true} is VALID [2022-02-20 18:08:28,544 INFO L290 TraceCheckUtils]: 18: Hoare triple {14773#true} assume -2147483648 <= test_#t~nondet22#1 && test_#t~nondet22#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {14773#true} is VALID [2022-02-20 18:08:28,544 INFO L290 TraceCheckUtils]: 19: Hoare triple {14773#true} assume 0 != test_~tmp___2~0#1;assume { :begin_inline_startSystem } true;~systemActive~0 := 1; {14773#true} is VALID [2022-02-20 18:08:28,544 INFO L290 TraceCheckUtils]: 20: Hoare triple {14773#true} assume { :end_inline_startSystem } true; {14773#true} is VALID [2022-02-20 18:08:28,544 INFO L272 TraceCheckUtils]: 21: Hoare triple {14773#true} call timeShift(); {14773#true} is VALID [2022-02-20 18:08:28,545 INFO L290 TraceCheckUtils]: 22: Hoare triple {14773#true} assume !(0 != ~pumpRunning~0); {14773#true} is VALID [2022-02-20 18:08:28,545 INFO L290 TraceCheckUtils]: 23: Hoare triple {14773#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret7#1, processEnvironment_~tmp~2#1;havoc processEnvironment_~tmp~2#1; {14773#true} is VALID [2022-02-20 18:08:28,545 INFO L290 TraceCheckUtils]: 24: Hoare triple {14773#true} assume !(0 != ~pumpRunning~0); {14773#true} is VALID [2022-02-20 18:08:28,545 INFO L272 TraceCheckUtils]: 25: Hoare triple {14773#true} call processEnvironment__wrappee__methaneQuery(); {14773#true} is VALID [2022-02-20 18:08:28,545 INFO L290 TraceCheckUtils]: 26: Hoare triple {14773#true} havoc ~tmp~1#1; {14773#true} is VALID [2022-02-20 18:08:28,545 INFO L290 TraceCheckUtils]: 27: Hoare triple {14773#true} assume !(0 != ~pumpRunning~0); {14773#true} is VALID [2022-02-20 18:08:28,545 INFO L272 TraceCheckUtils]: 28: Hoare triple {14773#true} call processEnvironment__wrappee__highWaterSensor(); {14773#true} is VALID [2022-02-20 18:08:28,545 INFO L290 TraceCheckUtils]: 29: Hoare triple {14773#true} havoc ~tmp~0#1; {14773#true} is VALID [2022-02-20 18:08:28,546 INFO L290 TraceCheckUtils]: 30: Hoare triple {14773#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret18#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {14773#true} is VALID [2022-02-20 18:08:28,546 INFO L290 TraceCheckUtils]: 31: Hoare triple {14773#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {14773#true} is VALID [2022-02-20 18:08:28,546 INFO L290 TraceCheckUtils]: 32: Hoare triple {14773#true} isHighWaterLevel_#t~ret18#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret18#1 && isHighWaterLevel_#t~ret18#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret18#1;havoc isHighWaterLevel_#t~ret18#1; {14773#true} is VALID [2022-02-20 18:08:28,546 INFO L290 TraceCheckUtils]: 33: Hoare triple {14773#true} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1; {14773#true} is VALID [2022-02-20 18:08:28,546 INFO L290 TraceCheckUtils]: 34: Hoare triple {14773#true} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {14773#true} is VALID [2022-02-20 18:08:28,546 INFO L290 TraceCheckUtils]: 35: Hoare triple {14773#true} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {14773#true} is VALID [2022-02-20 18:08:28,546 INFO L290 TraceCheckUtils]: 36: Hoare triple {14773#true} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret8#1, activatePump_~tmp~3#1;havoc activatePump_~tmp~3#1; {14773#true} is VALID [2022-02-20 18:08:28,546 INFO L272 TraceCheckUtils]: 37: Hoare triple {14773#true} call activatePump_#t~ret8#1 := isMethaneAlarm(); {14773#true} is VALID [2022-02-20 18:08:28,547 INFO L290 TraceCheckUtils]: 38: Hoare triple {14773#true} havoc ~retValue_acc~2; {14773#true} is VALID [2022-02-20 18:08:28,547 INFO L272 TraceCheckUtils]: 39: Hoare triple {14773#true} call #t~ret9 := isMethaneLevelCritical(); {14773#true} is VALID [2022-02-20 18:08:28,547 INFO L290 TraceCheckUtils]: 40: Hoare triple {14773#true} havoc ~retValue_acc~6;~retValue_acc~6 := ~methaneLevelCritical~0;#res := ~retValue_acc~6; {14773#true} is VALID [2022-02-20 18:08:28,547 INFO L290 TraceCheckUtils]: 41: Hoare triple {14773#true} assume true; {14773#true} is VALID [2022-02-20 18:08:28,547 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {14773#true} {14773#true} #316#return; {14773#true} is VALID [2022-02-20 18:08:28,547 INFO L290 TraceCheckUtils]: 43: Hoare triple {14773#true} assume -2147483648 <= #t~ret9 && #t~ret9 <= 2147483647;~retValue_acc~2 := #t~ret9;havoc #t~ret9;#res := ~retValue_acc~2; {14773#true} is VALID [2022-02-20 18:08:28,547 INFO L290 TraceCheckUtils]: 44: Hoare triple {14773#true} assume true; {14773#true} is VALID [2022-02-20 18:08:28,547 INFO L284 TraceCheckUtils]: 45: Hoare quadruple {14773#true} {14773#true} #310#return; {14773#true} is VALID [2022-02-20 18:08:28,547 INFO L290 TraceCheckUtils]: 46: Hoare triple {14773#true} assume -2147483648 <= activatePump_#t~ret8#1 && activatePump_#t~ret8#1 <= 2147483647;activatePump_~tmp~3#1 := activatePump_#t~ret8#1;havoc activatePump_#t~ret8#1; {14773#true} is VALID [2022-02-20 18:08:28,548 INFO L290 TraceCheckUtils]: 47: Hoare triple {14773#true} assume !(0 != activatePump_~tmp~3#1);assume { :begin_inline_activatePump__wrappee__lowWaterSensor } true;~pumpRunning~0 := 1; {14773#true} is VALID [2022-02-20 18:08:28,548 INFO L290 TraceCheckUtils]: 48: Hoare triple {14773#true} assume { :end_inline_activatePump__wrappee__lowWaterSensor } true; {14773#true} is VALID [2022-02-20 18:08:28,548 INFO L290 TraceCheckUtils]: 49: Hoare triple {14773#true} assume { :end_inline_activatePump } true; {14773#true} is VALID [2022-02-20 18:08:28,548 INFO L290 TraceCheckUtils]: 50: Hoare triple {14773#true} assume true; {14773#true} is VALID [2022-02-20 18:08:28,548 INFO L284 TraceCheckUtils]: 51: Hoare quadruple {14773#true} {14773#true} #284#return; {14773#true} is VALID [2022-02-20 18:08:28,548 INFO L290 TraceCheckUtils]: 52: Hoare triple {14773#true} assume true; {14773#true} is VALID [2022-02-20 18:08:28,548 INFO L284 TraceCheckUtils]: 53: Hoare quadruple {14773#true} {14773#true} #296#return; {14773#true} is VALID [2022-02-20 18:08:28,548 INFO L290 TraceCheckUtils]: 54: Hoare triple {14773#true} assume { :end_inline_processEnvironment } true; {14773#true} is VALID [2022-02-20 18:08:28,548 INFO L290 TraceCheckUtils]: 55: Hoare triple {14773#true} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret24#1, __utac_acc__Specification2_spec__2_#t~ret25#1, __utac_acc__Specification2_spec__2_~tmp~7#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~7#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {14773#true} is VALID [2022-02-20 18:08:28,548 INFO L272 TraceCheckUtils]: 56: Hoare triple {14773#true} call __utac_acc__Specification2_spec__2_#t~ret24#1 := isMethaneLevelCritical(); {14773#true} is VALID [2022-02-20 18:08:28,549 INFO L290 TraceCheckUtils]: 57: Hoare triple {14773#true} havoc ~retValue_acc~6;~retValue_acc~6 := ~methaneLevelCritical~0;#res := ~retValue_acc~6; {14773#true} is VALID [2022-02-20 18:08:28,549 INFO L290 TraceCheckUtils]: 58: Hoare triple {14773#true} assume true; {14773#true} is VALID [2022-02-20 18:08:28,549 INFO L284 TraceCheckUtils]: 59: Hoare quadruple {14773#true} {14773#true} #298#return; {14773#true} is VALID [2022-02-20 18:08:28,549 INFO L290 TraceCheckUtils]: 60: Hoare triple {14773#true} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret24#1 && __utac_acc__Specification2_spec__2_#t~ret24#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~7#1 := __utac_acc__Specification2_spec__2_#t~ret24#1;havoc __utac_acc__Specification2_spec__2_#t~ret24#1; {14773#true} is VALID [2022-02-20 18:08:28,549 INFO L290 TraceCheckUtils]: 61: Hoare triple {14773#true} assume !(0 != __utac_acc__Specification2_spec__2_~tmp~7#1);~methAndRunningLastTime~0 := 0; {14773#true} is VALID [2022-02-20 18:08:28,549 INFO L290 TraceCheckUtils]: 62: Hoare triple {14773#true} assume { :end_inline___utac_acc__Specification2_spec__2 } true; {14773#true} is VALID [2022-02-20 18:08:28,549 INFO L290 TraceCheckUtils]: 63: Hoare triple {14773#true} assume true; {14773#true} is VALID [2022-02-20 18:08:28,549 INFO L284 TraceCheckUtils]: 64: Hoare quadruple {14773#true} {14773#true} #306#return; {14773#true} is VALID [2022-02-20 18:08:28,550 INFO L290 TraceCheckUtils]: 65: Hoare triple {14773#true} assume !false; {14773#true} is VALID [2022-02-20 18:08:28,550 INFO L290 TraceCheckUtils]: 66: Hoare triple {14773#true} assume test_~splverifierCounter~0#1 < 4; {14773#true} is VALID [2022-02-20 18:08:28,550 INFO L290 TraceCheckUtils]: 67: Hoare triple {14773#true} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp~6#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {14773#true} is VALID [2022-02-20 18:08:28,550 INFO L290 TraceCheckUtils]: 68: Hoare triple {14773#true} assume !(0 != test_~tmp~6#1); {14773#true} is VALID [2022-02-20 18:08:28,550 INFO L290 TraceCheckUtils]: 69: Hoare triple {14773#true} assume -2147483648 <= test_#t~nondet21#1 && test_#t~nondet21#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet21#1;havoc test_#t~nondet21#1; {14773#true} is VALID [2022-02-20 18:08:28,550 INFO L290 TraceCheckUtils]: 70: Hoare triple {14773#true} assume 0 != test_~tmp___0~2#1; {14773#true} is VALID [2022-02-20 18:08:28,550 INFO L272 TraceCheckUtils]: 71: Hoare triple {14773#true} call changeMethaneLevel(); {14773#true} is VALID [2022-02-20 18:08:28,551 INFO L290 TraceCheckUtils]: 72: Hoare triple {14773#true} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {14926#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:28,551 INFO L290 TraceCheckUtils]: 73: Hoare triple {14926#(<= 1 ~methaneLevelCritical~0)} assume true; {14926#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:28,551 INFO L284 TraceCheckUtils]: 74: Hoare quadruple {14926#(<= 1 ~methaneLevelCritical~0)} {14773#true} #302#return; {14926#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:28,552 INFO L290 TraceCheckUtils]: 75: Hoare triple {14926#(<= 1 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet22#1 && test_#t~nondet22#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {14926#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:28,552 INFO L290 TraceCheckUtils]: 76: Hoare triple {14926#(<= 1 ~methaneLevelCritical~0)} assume 0 != test_~tmp___2~0#1;assume { :begin_inline_startSystem } true;~systemActive~0 := 1; {14926#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:28,552 INFO L290 TraceCheckUtils]: 77: Hoare triple {14926#(<= 1 ~methaneLevelCritical~0)} assume { :end_inline_startSystem } true; {14926#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:28,553 INFO L272 TraceCheckUtils]: 78: Hoare triple {14926#(<= 1 ~methaneLevelCritical~0)} call timeShift(); {14926#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:28,553 INFO L290 TraceCheckUtils]: 79: Hoare triple {14926#(<= 1 ~methaneLevelCritical~0)} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {14926#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:28,553 INFO L290 TraceCheckUtils]: 80: Hoare triple {14926#(<= 1 ~methaneLevelCritical~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {14926#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:28,553 INFO L290 TraceCheckUtils]: 81: Hoare triple {14926#(<= 1 ~methaneLevelCritical~0)} assume { :end_inline_lowerWaterLevel } true; {14926#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:28,554 INFO L290 TraceCheckUtils]: 82: Hoare triple {14926#(<= 1 ~methaneLevelCritical~0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret7#1, processEnvironment_~tmp~2#1;havoc processEnvironment_~tmp~2#1; {14926#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:28,554 INFO L290 TraceCheckUtils]: 83: Hoare triple {14926#(<= 1 ~methaneLevelCritical~0)} assume 0 != ~pumpRunning~0; {14926#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:28,554 INFO L272 TraceCheckUtils]: 84: Hoare triple {14926#(<= 1 ~methaneLevelCritical~0)} call processEnvironment_#t~ret7#1 := isMethaneAlarm(); {14926#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:28,555 INFO L290 TraceCheckUtils]: 85: Hoare triple {14926#(<= 1 ~methaneLevelCritical~0)} havoc ~retValue_acc~2; {14926#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:28,555 INFO L272 TraceCheckUtils]: 86: Hoare triple {14926#(<= 1 ~methaneLevelCritical~0)} call #t~ret9 := isMethaneLevelCritical(); {14926#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:28,555 INFO L290 TraceCheckUtils]: 87: Hoare triple {14926#(<= 1 ~methaneLevelCritical~0)} havoc ~retValue_acc~6;~retValue_acc~6 := ~methaneLevelCritical~0;#res := ~retValue_acc~6; {15206#(and (<= ~methaneLevelCritical~0 |isMethaneLevelCritical_#res|) (<= 1 ~methaneLevelCritical~0))} is VALID [2022-02-20 18:08:28,556 INFO L290 TraceCheckUtils]: 88: Hoare triple {15206#(and (<= ~methaneLevelCritical~0 |isMethaneLevelCritical_#res|) (<= 1 ~methaneLevelCritical~0))} assume true; {15206#(and (<= ~methaneLevelCritical~0 |isMethaneLevelCritical_#res|) (<= 1 ~methaneLevelCritical~0))} is VALID [2022-02-20 18:08:28,556 INFO L284 TraceCheckUtils]: 89: Hoare quadruple {15206#(and (<= ~methaneLevelCritical~0 |isMethaneLevelCritical_#res|) (<= 1 ~methaneLevelCritical~0))} {14926#(<= 1 ~methaneLevelCritical~0)} #316#return; {15213#(and (<= ~methaneLevelCritical~0 |isMethaneAlarm_#t~ret9|) (<= 1 ~methaneLevelCritical~0))} is VALID [2022-02-20 18:08:28,557 INFO L290 TraceCheckUtils]: 90: Hoare triple {15213#(and (<= ~methaneLevelCritical~0 |isMethaneAlarm_#t~ret9|) (<= 1 ~methaneLevelCritical~0))} assume -2147483648 <= #t~ret9 && #t~ret9 <= 2147483647;~retValue_acc~2 := #t~ret9;havoc #t~ret9;#res := ~retValue_acc~2; {15217#(and (<= 1 ~methaneLevelCritical~0) (<= ~methaneLevelCritical~0 |isMethaneAlarm_#res|))} is VALID [2022-02-20 18:08:28,557 INFO L290 TraceCheckUtils]: 91: Hoare triple {15217#(and (<= 1 ~methaneLevelCritical~0) (<= ~methaneLevelCritical~0 |isMethaneAlarm_#res|))} assume true; {15217#(and (<= 1 ~methaneLevelCritical~0) (<= ~methaneLevelCritical~0 |isMethaneAlarm_#res|))} is VALID [2022-02-20 18:08:28,558 INFO L284 TraceCheckUtils]: 92: Hoare quadruple {15217#(and (<= 1 ~methaneLevelCritical~0) (<= ~methaneLevelCritical~0 |isMethaneAlarm_#res|))} {14926#(<= 1 ~methaneLevelCritical~0)} #290#return; {15224#(<= 1 |timeShift_processEnvironment_#t~ret7#1|)} is VALID [2022-02-20 18:08:28,558 INFO L290 TraceCheckUtils]: 93: Hoare triple {15224#(<= 1 |timeShift_processEnvironment_#t~ret7#1|)} assume -2147483648 <= processEnvironment_#t~ret7#1 && processEnvironment_#t~ret7#1 <= 2147483647;processEnvironment_~tmp~2#1 := processEnvironment_#t~ret7#1;havoc processEnvironment_#t~ret7#1; {15228#(<= 1 |timeShift_processEnvironment_~tmp~2#1|)} is VALID [2022-02-20 18:08:28,558 INFO L290 TraceCheckUtils]: 94: Hoare triple {15228#(<= 1 |timeShift_processEnvironment_~tmp~2#1|)} assume !(0 != processEnvironment_~tmp~2#1); {14774#false} is VALID [2022-02-20 18:08:28,558 INFO L272 TraceCheckUtils]: 95: Hoare triple {14774#false} call processEnvironment__wrappee__methaneQuery(); {14774#false} is VALID [2022-02-20 18:08:28,559 INFO L290 TraceCheckUtils]: 96: Hoare triple {14774#false} havoc ~tmp~1#1; {14774#false} is VALID [2022-02-20 18:08:28,559 INFO L290 TraceCheckUtils]: 97: Hoare triple {14774#false} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret19#1, isLowWaterLevel_~retValue_acc~5#1, isLowWaterLevel_~tmp~5#1, isLowWaterLevel_~tmp___0~1#1;havoc isLowWaterLevel_~retValue_acc~5#1;havoc isLowWaterLevel_~tmp~5#1;havoc isLowWaterLevel_~tmp___0~1#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;isLowWaterSensorDry_~retValue_acc~9#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~9#1; {14774#false} is VALID [2022-02-20 18:08:28,559 INFO L290 TraceCheckUtils]: 98: Hoare triple {14774#false} isLowWaterLevel_#t~ret19#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret19#1 && isLowWaterLevel_#t~ret19#1 <= 2147483647;isLowWaterLevel_~tmp~5#1 := isLowWaterLevel_#t~ret19#1;havoc isLowWaterLevel_#t~ret19#1; {14774#false} is VALID [2022-02-20 18:08:28,559 INFO L290 TraceCheckUtils]: 99: Hoare triple {14774#false} assume 0 != isLowWaterLevel_~tmp~5#1;isLowWaterLevel_~tmp___0~1#1 := 0; {14774#false} is VALID [2022-02-20 18:08:28,559 INFO L290 TraceCheckUtils]: 100: Hoare triple {14774#false} isLowWaterLevel_~retValue_acc~5#1 := isLowWaterLevel_~tmp___0~1#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~5#1; {14774#false} is VALID [2022-02-20 18:08:28,559 INFO L290 TraceCheckUtils]: 101: Hoare triple {14774#false} #t~ret6#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= #t~ret6#1 && #t~ret6#1 <= 2147483647;~tmp~1#1 := #t~ret6#1;havoc #t~ret6#1; {14774#false} is VALID [2022-02-20 18:08:28,559 INFO L290 TraceCheckUtils]: 102: Hoare triple {14774#false} assume !(0 != ~tmp~1#1); {14774#false} is VALID [2022-02-20 18:08:28,559 INFO L272 TraceCheckUtils]: 103: Hoare triple {14774#false} call processEnvironment__wrappee__highWaterSensor(); {14774#false} is VALID [2022-02-20 18:08:28,559 INFO L290 TraceCheckUtils]: 104: Hoare triple {14774#false} havoc ~tmp~0#1; {14774#false} is VALID [2022-02-20 18:08:28,560 INFO L290 TraceCheckUtils]: 105: Hoare triple {14774#false} assume !(0 == ~pumpRunning~0); {14774#false} is VALID [2022-02-20 18:08:28,560 INFO L272 TraceCheckUtils]: 106: Hoare triple {14774#false} call processEnvironment__wrappee__base(); {14774#false} is VALID [2022-02-20 18:08:28,560 INFO L290 TraceCheckUtils]: 107: Hoare triple {14774#false} assume true; {14774#false} is VALID [2022-02-20 18:08:28,560 INFO L284 TraceCheckUtils]: 108: Hoare quadruple {14774#false} {14774#false} #314#return; {14774#false} is VALID [2022-02-20 18:08:28,560 INFO L290 TraceCheckUtils]: 109: Hoare triple {14774#false} assume true; {14774#false} is VALID [2022-02-20 18:08:28,560 INFO L284 TraceCheckUtils]: 110: Hoare quadruple {14774#false} {14774#false} #282#return; {14774#false} is VALID [2022-02-20 18:08:28,560 INFO L290 TraceCheckUtils]: 111: Hoare triple {14774#false} assume true; {14774#false} is VALID [2022-02-20 18:08:28,560 INFO L284 TraceCheckUtils]: 112: Hoare quadruple {14774#false} {14774#false} #294#return; {14774#false} is VALID [2022-02-20 18:08:28,560 INFO L290 TraceCheckUtils]: 113: Hoare triple {14774#false} assume { :end_inline_processEnvironment } true; {14774#false} is VALID [2022-02-20 18:08:28,561 INFO L290 TraceCheckUtils]: 114: Hoare triple {14774#false} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret24#1, __utac_acc__Specification2_spec__2_#t~ret25#1, __utac_acc__Specification2_spec__2_~tmp~7#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~7#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {14774#false} is VALID [2022-02-20 18:08:28,561 INFO L272 TraceCheckUtils]: 115: Hoare triple {14774#false} call __utac_acc__Specification2_spec__2_#t~ret24#1 := isMethaneLevelCritical(); {14774#false} is VALID [2022-02-20 18:08:28,561 INFO L290 TraceCheckUtils]: 116: Hoare triple {14774#false} havoc ~retValue_acc~6;~retValue_acc~6 := ~methaneLevelCritical~0;#res := ~retValue_acc~6; {14774#false} is VALID [2022-02-20 18:08:28,561 INFO L290 TraceCheckUtils]: 117: Hoare triple {14774#false} assume true; {14774#false} is VALID [2022-02-20 18:08:28,561 INFO L284 TraceCheckUtils]: 118: Hoare quadruple {14774#false} {14774#false} #298#return; {14774#false} is VALID [2022-02-20 18:08:28,561 INFO L290 TraceCheckUtils]: 119: Hoare triple {14774#false} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret24#1 && __utac_acc__Specification2_spec__2_#t~ret24#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~7#1 := __utac_acc__Specification2_spec__2_#t~ret24#1;havoc __utac_acc__Specification2_spec__2_#t~ret24#1; {14774#false} is VALID [2022-02-20 18:08:28,561 INFO L290 TraceCheckUtils]: 120: Hoare triple {14774#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~7#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~3#1;havoc isPumpRunning_~retValue_acc~3#1;isPumpRunning_~retValue_acc~3#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~3#1; {14774#false} is VALID [2022-02-20 18:08:28,561 INFO L290 TraceCheckUtils]: 121: Hoare triple {14774#false} __utac_acc__Specification2_spec__2_#t~ret25#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret25#1 && __utac_acc__Specification2_spec__2_#t~ret25#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret25#1;havoc __utac_acc__Specification2_spec__2_#t~ret25#1; {14774#false} is VALID [2022-02-20 18:08:28,561 INFO L290 TraceCheckUtils]: 122: Hoare triple {14774#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {14774#false} is VALID [2022-02-20 18:08:28,562 INFO L290 TraceCheckUtils]: 123: Hoare triple {14774#false} assume 0 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {14774#false} is VALID [2022-02-20 18:08:28,562 INFO L290 TraceCheckUtils]: 124: Hoare triple {14774#false} assume !false; {14774#false} is VALID [2022-02-20 18:08:28,562 INFO L134 CoverageAnalysis]: Checked inductivity of 49 backedges. 40 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-02-20 18:08:28,562 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-02-20 18:08:28,562 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1835888942] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:08:28,562 INFO L191 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-02-20 18:08:28,563 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [15] total 20 [2022-02-20 18:08:28,563 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1271871404] [2022-02-20 18:08:28,563 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:08:28,563 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 11.25) internal successors, (90), 6 states have internal predecessors, (90), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) Word has length 125 [2022-02-20 18:08:28,564 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:08:28,564 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 8 states, 8 states have (on average 11.25) internal successors, (90), 6 states have internal predecessors, (90), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) [2022-02-20 18:08:28,642 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 119 edges. 119 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:28,642 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-02-20 18:08:28,642 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:08:28,643 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-02-20 18:08:28,643 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=50, Invalid=330, Unknown=0, NotChecked=0, Total=380 [2022-02-20 18:08:28,643 INFO L87 Difference]: Start difference. First operand 861 states and 1082 transitions. Second operand has 8 states, 8 states have (on average 11.25) internal successors, (90), 6 states have internal predecessors, (90), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) [2022-02-20 18:08:29,665 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:29,665 INFO L93 Difference]: Finished difference Result 1922 states and 2405 transitions. [2022-02-20 18:08:29,665 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-02-20 18:08:29,666 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 11.25) internal successors, (90), 6 states have internal predecessors, (90), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) Word has length 125 [2022-02-20 18:08:29,666 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:08:29,666 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 11.25) internal successors, (90), 6 states have internal predecessors, (90), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) [2022-02-20 18:08:29,668 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 347 transitions. [2022-02-20 18:08:29,669 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 11.25) internal successors, (90), 6 states have internal predecessors, (90), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) [2022-02-20 18:08:29,671 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 347 transitions. [2022-02-20 18:08:29,671 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states and 347 transitions. [2022-02-20 18:08:29,935 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 347 edges. 347 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:29,936 INFO L225 Difference]: With dead ends: 1922 [2022-02-20 18:08:29,936 INFO L226 Difference]: Without dead ends: 0 [2022-02-20 18:08:29,939 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 165 GetRequests, 145 SyntacticMatches, 0 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 43 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=62, Invalid=400, Unknown=0, NotChecked=0, Total=462 [2022-02-20 18:08:29,939 INFO L933 BasicCegarLoop]: 217 mSDtfsCounter, 83 mSDsluCounter, 867 mSDsCounter, 0 mSdLazyCounter, 125 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 87 SdHoareTripleChecker+Valid, 1084 SdHoareTripleChecker+Invalid, 132 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 125 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-02-20 18:08:29,940 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [87 Valid, 1084 Invalid, 132 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 125 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-02-20 18:08:29,940 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-02-20 18:08:29,940 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-02-20 18:08:29,940 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:08:29,940 INFO L82 GeneralOperation]: Start isEquivalent. First operand 0 states. Second operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:08:29,940 INFO L74 IsIncluded]: Start isIncluded. First operand 0 states. Second operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:08:29,940 INFO L87 Difference]: Start difference. First operand 0 states. Second operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:08:29,941 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:29,941 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2022-02-20 18:08:29,941 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-02-20 18:08:29,941 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:29,941 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:29,941 INFO L74 IsIncluded]: Start isIncluded. First operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand 0 states. [2022-02-20 18:08:29,941 INFO L87 Difference]: Start difference. First operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand 0 states. [2022-02-20 18:08:29,941 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:29,941 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2022-02-20 18:08:29,942 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-02-20 18:08:29,942 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:29,942 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:29,942 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:08:29,942 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:08:29,942 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:08:29,942 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-02-20 18:08:29,942 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 125 [2022-02-20 18:08:29,942 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:08:29,943 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-02-20 18:08:29,943 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 11.25) internal successors, (90), 6 states have internal predecessors, (90), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) [2022-02-20 18:08:29,943 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-02-20 18:08:29,943 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:29,945 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-02-20 18:08:29,975 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-02-20 18:08:30,162 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-02-20 18:08:30,164 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-02-20 18:08:33,404 INFO L854 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 238 245) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse1) (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1))) [2022-02-20 18:08:33,404 INFO L858 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 238 245) no Hoare annotation was computed. [2022-02-20 18:08:33,405 INFO L858 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 238 245) no Hoare annotation was computed. [2022-02-20 18:08:33,405 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 128 134) no Hoare annotation was computed. [2022-02-20 18:08:33,405 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 128 134) the Hoare annotation is: true [2022-02-20 18:08:33,405 INFO L854 garLoopResultBuilder]: At program point L176(line 176) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2))) [2022-02-20 18:08:33,405 INFO L854 garLoopResultBuilder]: At program point L172(line 172) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2))) [2022-02-20 18:08:33,405 INFO L858 garLoopResultBuilder]: For program point L170(lines 170 178) no Hoare annotation was computed. [2022-02-20 18:08:33,406 INFO L854 garLoopResultBuilder]: At program point L583(lines 578 586) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2))) [2022-02-20 18:08:33,414 INFO L858 garLoopResultBuilder]: For program point L166(lines 166 183) no Hoare annotation was computed. [2022-02-20 18:08:33,415 INFO L854 garLoopResultBuilder]: At program point L181(line 181) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= ~methaneLevelCritical~0 0)) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse1))) [2022-02-20 18:08:33,415 INFO L858 garLoopResultBuilder]: For program point L181-1(lines 162 186) no Hoare annotation was computed. [2022-02-20 18:08:33,415 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 162 186) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (not (<= 1 ~methaneLevelCritical~0)) .cse0) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) .cse0))) [2022-02-20 18:08:33,415 INFO L854 garLoopResultBuilder]: At program point L336(lines 321 339) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2))) [2022-02-20 18:08:33,415 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 162 186) no Hoare annotation was computed. [2022-02-20 18:08:33,415 INFO L858 garLoopResultBuilder]: For program point L330(lines 330 334) no Hoare annotation was computed. [2022-02-20 18:08:33,415 INFO L858 garLoopResultBuilder]: For program point L330-2(lines 330 334) no Hoare annotation was computed. [2022-02-20 18:08:33,415 INFO L854 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 511 522) the Hoare annotation is: (let ((.cse0 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse2 (not (= ~pumpRunning~0 0)))) (and (or .cse0 .cse1 (= 0 ~systemActive~0)) (or .cse0 .cse2 .cse1) (or (<= 1 ~methaneLevelCritical~0) .cse2 (not (<= 1 |old(~methaneLevelCritical~0)|))))) [2022-02-20 18:08:33,415 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 511 522) no Hoare annotation was computed. [2022-02-20 18:08:33,416 INFO L858 garLoopResultBuilder]: For program point L515-1(lines 511 522) no Hoare annotation was computed. [2022-02-20 18:08:33,416 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 589 618) no Hoare annotation was computed. [2022-02-20 18:08:33,416 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 589 618) the Hoare annotation is: true [2022-02-20 18:08:33,416 INFO L858 garLoopResultBuilder]: For program point L603(lines 603 607) no Hoare annotation was computed. [2022-02-20 18:08:33,416 INFO L861 garLoopResultBuilder]: At program point L603-1(lines 603 607) the Hoare annotation is: true [2022-02-20 18:08:33,416 INFO L858 garLoopResultBuilder]: For program point L600(line 600) no Hoare annotation was computed. [2022-02-20 18:08:33,416 INFO L861 garLoopResultBuilder]: At program point L599-2(lines 599 613) the Hoare annotation is: true [2022-02-20 18:08:33,416 INFO L861 garLoopResultBuilder]: At program point L595(line 595) the Hoare annotation is: true [2022-02-20 18:08:33,416 INFO L858 garLoopResultBuilder]: For program point L595-1(line 595) no Hoare annotation was computed. [2022-02-20 18:08:33,416 INFO L861 garLoopResultBuilder]: At program point L614(lines 589 618) the Hoare annotation is: true [2022-02-20 18:08:33,417 INFO L858 garLoopResultBuilder]: For program point L610(line 610) no Hoare annotation was computed. [2022-02-20 18:08:33,417 INFO L861 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 523 531) the Hoare annotation is: true [2022-02-20 18:08:33,417 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 523 531) no Hoare annotation was computed. [2022-02-20 18:08:33,417 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 523 531) no Hoare annotation was computed. [2022-02-20 18:08:33,417 INFO L858 garLoopResultBuilder]: For program point L192(lines 192 209) no Hoare annotation was computed. [2022-02-20 18:08:33,417 INFO L858 garLoopResultBuilder]: For program point L440(line 440) no Hoare annotation was computed. [2022-02-20 18:08:33,417 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 104 127) no Hoare annotation was computed. [2022-02-20 18:08:33,417 INFO L854 garLoopResultBuilder]: At program point L441(lines 436 443) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 .cse1) (or .cse2 .cse3) (or .cse2 .cse0) (or .cse3 .cse1))) [2022-02-20 18:08:33,417 INFO L858 garLoopResultBuilder]: For program point L115-1(lines 115 121) no Hoare annotation was computed. [2022-02-20 18:08:33,417 INFO L858 garLoopResultBuilder]: For program point L466(lines 466 476) no Hoare annotation was computed. [2022-02-20 18:08:33,418 INFO L858 garLoopResultBuilder]: For program point L462(lines 462 479) no Hoare annotation was computed. [2022-02-20 18:08:33,418 INFO L854 garLoopResultBuilder]: At program point L462-1(lines 454 482) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0))) (let ((.cse4 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~7#1| 0)) (.cse2 (not .cse3)) (.cse1 (= ~pumpRunning~0 0)) (.cse0 (not (<= 1 ~methaneLevelCritical~0))) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse7 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 (and .cse1 .cse2) .cse3) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse4) .cse5 (and (<= 2 ~waterLevel~0) .cse4) (and .cse1 .cse4 .cse2) .cse3) (or .cse6 .cse5 (and .cse1 .cse4) .cse2) (or .cse6 .cse1 .cse0) (or .cse6 .cse0 .cse7) (or .cse6 .cse5 .cse7)))) [2022-02-20 18:08:33,418 INFO L858 garLoopResultBuilder]: For program point L491(lines 491 495) no Hoare annotation was computed. [2022-02-20 18:08:33,418 INFO L854 garLoopResultBuilder]: At program point L202(line 202) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 .cse1) (or .cse2 .cse3) (or .cse2 .cse0) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse3 .cse1))) [2022-02-20 18:08:33,418 INFO L854 garLoopResultBuilder]: At program point L491-2(lines 487 498) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 .cse1) (or .cse2 .cse3 .cse4) (or .cse0 .cse3) (or .cse2 .cse1 .cse4))) [2022-02-20 18:08:33,418 INFO L854 garLoopResultBuilder]: At program point L198(line 198) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 .cse1) (or .cse0 .cse2) (or .cse2 (and .cse3 (<= 1 |timeShift_processEnvironment_~tmp~2#1|)) .cse4) (or .cse3 .cse1 .cse4))) [2022-02-20 18:08:33,418 INFO L854 garLoopResultBuilder]: At program point L194(line 194) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 .cse1) (or .cse2 .cse3 .cse4) (or .cse0 .cse3) (or .cse2 .cse1 .cse4))) [2022-02-20 18:08:33,418 INFO L858 garLoopResultBuilder]: For program point L194-1(line 194) no Hoare annotation was computed. [2022-02-20 18:08:33,419 INFO L858 garLoopResultBuilder]: For program point L467(lines 467 473) no Hoare annotation was computed. [2022-02-20 18:08:33,419 INFO L854 garLoopResultBuilder]: At program point L207(line 207) the Hoare annotation is: (let ((.cse2 (= 0 ~systemActive~0))) (let ((.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse0 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not .cse2))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse1 .cse2) (or .cse4 .cse0 .cse5) (or .cse4 .cse3 .cse5)))) [2022-02-20 18:08:33,419 INFO L854 garLoopResultBuilder]: At program point L207-1(lines 188 212) the Hoare annotation is: (let ((.cse6 (= 0 ~systemActive~0))) (let ((.cse2 (not .cse6)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (= ~pumpRunning~0 0)) (.cse3 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 (and .cse1 .cse2) .cse3) (or .cse4 .cse5 .cse6) (or .cse0 .cse5 .cse2) (or .cse0 .cse5 .cse1) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse4 (<= 2 ~waterLevel~0) .cse3 .cse6)))) [2022-02-20 18:08:33,419 INFO L858 garLoopResultBuilder]: For program point L108-1(lines 107 126) no Hoare annotation was computed. [2022-02-20 18:08:33,419 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 104 127) the Hoare annotation is: (let ((.cse6 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (and (= ~pumpRunning~0 0) .cse6)) (.cse0 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse6)) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse4 .cse5) (or .cse3 .cse4 .cse0) (or .cse5 .cse1 .cse2)))) [2022-02-20 18:08:33,419 INFO L854 garLoopResultBuilder]: At program point L460(line 460) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 0)) (.cse6 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse1 (and .cse4 .cse6)) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 (not .cse3)) (or .cse4 .cse5 .cse3) (or .cse0 .cse1 .cse5) (or .cse0 .cse2 .cse6) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse4 (<= 2 ~waterLevel~0) .cse2 .cse3)))) [2022-02-20 18:08:33,419 INFO L858 garLoopResultBuilder]: For program point L460-1(line 460) no Hoare annotation was computed. [2022-02-20 18:08:33,419 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 104 127) no Hoare annotation was computed. [2022-02-20 18:08:33,420 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 440) no Hoare annotation was computed. [2022-02-20 18:08:33,435 INFO L854 garLoopResultBuilder]: At program point L262(lines 257 265) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse5 (= 0 ~systemActive~0))) (and (or .cse0 .cse1) (or (and .cse2 .cse3) .cse4 .cse5) (or .cse0 .cse4 (and .cse2 .cse3 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse1 .cse5))) [2022-02-20 18:08:33,435 INFO L858 garLoopResultBuilder]: For program point L196(lines 196 204) no Hoare annotation was computed. [2022-02-20 18:08:33,435 INFO L858 garLoopResultBuilder]: For program point L671(lines 671 678) no Hoare annotation was computed. [2022-02-20 18:08:33,435 INFO L858 garLoopResultBuilder]: For program point L415(lines 415 421) no Hoare annotation was computed. [2022-02-20 18:08:33,436 INFO L854 garLoopResultBuilder]: At program point L415-2(lines 407 422) the Hoare annotation is: (let ((.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~8#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse6 .cse2 .cse3 .cse4) (and .cse6 .cse2 .cse3 .cse4 .cse5))) [2022-02-20 18:08:33,437 INFO L858 garLoopResultBuilder]: For program point L671-2(lines 671 678) no Hoare annotation was computed. [2022-02-20 18:08:33,437 INFO L858 garLoopResultBuilder]: For program point L378(lines 377 426) no Hoare annotation was computed. [2022-02-20 18:08:33,437 INFO L858 garLoopResultBuilder]: For program point L407(lines 407 422) no Hoare annotation was computed. [2022-02-20 18:08:33,437 INFO L854 garLoopResultBuilder]: At program point L399(line 399) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse4 (= ~methaneLevelCritical~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~8#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse1 .cse2 .cse3) (and .cse4 .cse1 .cse2 .cse3 (not (= 0 ~systemActive~0))))) [2022-02-20 18:08:33,437 INFO L854 garLoopResultBuilder]: At program point L424(lines 377 426) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse4 (= ~methaneLevelCritical~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~8#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse1 .cse2 .cse3) (and .cse4 .cse1 .cse2 .cse3 (not (= 0 ~systemActive~0))))) [2022-02-20 18:08:33,437 INFO L861 garLoopResultBuilder]: At program point L680(lines 661 683) the Hoare annotation is: true [2022-02-20 18:08:33,437 INFO L854 garLoopResultBuilder]: At program point L647(lines 643 649) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~8#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-02-20 18:08:33,437 INFO L858 garLoopResultBuilder]: For program point L387(lines 387 393) no Hoare annotation was computed. [2022-02-20 18:08:33,437 INFO L858 garLoopResultBuilder]: For program point L387-1(lines 387 393) no Hoare annotation was computed. [2022-02-20 18:08:33,438 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-02-20 18:08:33,438 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-02-20 18:08:33,438 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-02-20 18:08:33,438 INFO L858 garLoopResultBuilder]: For program point L379(lines 379 383) no Hoare annotation was computed. [2022-02-20 18:08:33,438 INFO L854 garLoopResultBuilder]: At program point L346(line 346) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_main_~tmp~8#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and (<= 1 ~methaneLevelCritical~0) .cse0 .cse1 .cse2 .cse3) (and (= ~methaneLevelCritical~0 0) .cse0 .cse1 .cse2 .cse3))) [2022-02-20 18:08:33,438 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-02-20 18:08:33,438 INFO L854 garLoopResultBuilder]: At program point L83(lines 78 86) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-02-20 18:08:33,439 INFO L861 garLoopResultBuilder]: At program point L430(lines 367 434) the Hoare annotation is: true [2022-02-20 18:08:33,439 INFO L858 garLoopResultBuilder]: For program point L397(lines 397 403) no Hoare annotation was computed. [2022-02-20 18:08:33,439 INFO L858 garLoopResultBuilder]: For program point L397-1(lines 397 403) no Hoare annotation was computed. [2022-02-20 18:08:33,439 INFO L854 garLoopResultBuilder]: At program point L75(lines 71 77) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-02-20 18:08:33,439 INFO L854 garLoopResultBuilder]: At program point L360(lines 355 362) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_main_~tmp~8#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and (<= 1 ~methaneLevelCritical~0) .cse0 .cse1 .cse2 .cse3) (and (= ~methaneLevelCritical~0 0) .cse0 .cse1 .cse2 .cse3))) [2022-02-20 18:08:33,439 INFO L854 garLoopResultBuilder]: At program point L389(line 389) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse4 (= ~methaneLevelCritical~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~8#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse1 .cse2 .cse3) (and .cse4 .cse1 .cse2 .cse3 (not (= 0 ~systemActive~0))))) [2022-02-20 18:08:33,439 INFO L854 garLoopResultBuilder]: At program point L451(lines 446 453) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~8#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-02-20 18:08:33,439 INFO L854 garLoopResultBuilder]: At program point L352(lines 340 354) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~8#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= 0 ~systemActive~0))) (or (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse1 .cse2 .cse3 .cse4) (and .cse0 (= ~methaneLevelCritical~0 0) .cse1 .cse2 .cse3 .cse4))) [2022-02-20 18:08:33,439 INFO L858 garLoopResultBuilder]: For program point L344(lines 344 350) no Hoare annotation was computed. [2022-02-20 18:08:33,440 INFO L858 garLoopResultBuilder]: For program point L344-1(lines 344 350) no Hoare annotation was computed. [2022-02-20 18:08:33,440 INFO L861 garLoopResultBuilder]: At program point L658(lines 650 660) the Hoare annotation is: true [2022-02-20 18:08:33,440 INFO L854 garLoopResultBuilder]: At program point L427(lines 376 428) the Hoare annotation is: false [2022-02-20 18:08:33,440 INFO L854 garLoopResultBuilder]: At program point L68(lines 64 70) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-02-20 18:08:33,440 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 136 160) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (not (<= 1 ~methaneLevelCritical~0)) .cse0) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) .cse0))) [2022-02-20 18:08:33,440 INFO L854 garLoopResultBuilder]: At program point L155(line 155) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2))) [2022-02-20 18:08:33,440 INFO L858 garLoopResultBuilder]: For program point L155-1(lines 136 160) no Hoare annotation was computed. [2022-02-20 18:08:33,440 INFO L858 garLoopResultBuilder]: For program point L568(lines 568 574) no Hoare annotation was computed. [2022-02-20 18:08:33,441 INFO L858 garLoopResultBuilder]: For program point L228(lines 228 234) no Hoare annotation was computed. [2022-02-20 18:08:33,441 INFO L854 garLoopResultBuilder]: At program point L226(line 226) the Hoare annotation is: (let ((.cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) (<= 2 ~waterLevel~0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse1))) [2022-02-20 18:08:33,441 INFO L854 garLoopResultBuilder]: At program point L228-2(lines 221 237) the Hoare annotation is: (let ((.cse1 (= 0 ~systemActive~0)) (.cse0 (<= 2 ~waterLevel~0))) (and (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~methaneLevelCritical~0)) .cse1 (and (= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~3#1|) (= ~pumpRunning~0 0) .cse0)))) [2022-02-20 18:08:33,441 INFO L858 garLoopResultBuilder]: For program point L226-1(line 226) no Hoare annotation was computed. [2022-02-20 18:08:33,441 INFO L854 garLoopResultBuilder]: At program point L573(lines 564 577) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= ~pumpRunning~0 0))) (let ((.cse0 (and .cse2 .cse3 (<= 2 ~waterLevel~0))) (.cse4 (= 0 ~systemActive~0)) (.cse1 (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|))) (and (or .cse0 (and .cse1 .cse2 .cse3) (not (= ~methaneLevelCritical~0 0)) .cse4) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse4 (and .cse1 .cse3))))) [2022-02-20 18:08:33,441 INFO L854 garLoopResultBuilder]: At program point L317(lines 302 320) the Hoare annotation is: (let ((.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (= ~pumpRunning~0 0))) (let ((.cse0 (and .cse3 .cse4 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0))) (.cse1 (and .cse3 .cse4 (<= 2 ~waterLevel~0))) (.cse2 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2) (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2)))) [2022-02-20 18:08:33,441 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 136 160) no Hoare annotation was computed. [2022-02-20 18:08:33,441 INFO L854 garLoopResultBuilder]: At program point L218(lines 213 220) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~methaneLevelCritical~0)) .cse0) (or (<= 2 ~waterLevel~0) (not (= ~methaneLevelCritical~0 0)) .cse0))) [2022-02-20 18:08:33,442 INFO L858 garLoopResultBuilder]: For program point L311(lines 311 315) no Hoare annotation was computed. [2022-02-20 18:08:33,442 INFO L854 garLoopResultBuilder]: At program point L150(line 150) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (let ((.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 0) (not .cse0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~methaneLevelCritical~0)) .cse0 .cse1) (or (not (= ~methaneLevelCritical~0 0)) .cse0 .cse1)))) [2022-02-20 18:08:33,442 INFO L858 garLoopResultBuilder]: For program point L311-2(lines 311 315) no Hoare annotation was computed. [2022-02-20 18:08:33,442 INFO L858 garLoopResultBuilder]: For program point L144(lines 144 152) no Hoare annotation was computed. [2022-02-20 18:08:33,442 INFO L858 garLoopResultBuilder]: For program point L140(lines 140 157) no Hoare annotation was computed. [2022-02-20 18:08:33,442 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 499 510) no Hoare annotation was computed. [2022-02-20 18:08:33,442 INFO L858 garLoopResultBuilder]: For program point L503-1(lines 499 510) no Hoare annotation was computed. [2022-02-20 18:08:33,442 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 499 510) the Hoare annotation is: (let ((.cse2 (not (= ~pumpRunning~0 0))) (.cse0 (not (= ~methaneLevelCritical~0 0))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 .cse1 (= 0 ~systemActive~0)) (or .cse2 (not (<= 1 ~methaneLevelCritical~0)) .cse1) (or .cse2 .cse0 .cse1))) [2022-02-20 18:08:33,442 INFO L861 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 246 256) the Hoare annotation is: true [2022-02-20 18:08:33,442 INFO L861 garLoopResultBuilder]: At program point L251(line 251) the Hoare annotation is: true [2022-02-20 18:08:33,443 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 246 256) no Hoare annotation was computed. [2022-02-20 18:08:33,443 INFO L858 garLoopResultBuilder]: For program point L251-1(line 251) no Hoare annotation was computed. [2022-02-20 18:08:33,443 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 246 256) no Hoare annotation was computed. [2022-02-20 18:08:33,449 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:08:33,450 INFO L180 ceAbstractionStarter]: Computing trace abstraction results [2022-02-20 18:08:33,452 WARN L170 areAnnotationChecker]: deactivatePumpFINAL has no Hoare annotation [2022-02-20 18:08:33,452 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__baseEXIT has no Hoare annotation [2022-02-20 18:08:33,452 WARN L170 areAnnotationChecker]: L515-1 has no Hoare annotation [2022-02-20 18:08:33,452 WARN L170 areAnnotationChecker]: L515-1 has no Hoare annotation [2022-02-20 18:08:33,452 WARN L170 areAnnotationChecker]: isMethaneLevelCriticalFINAL has no Hoare annotation [2022-02-20 18:08:33,452 WARN L170 areAnnotationChecker]: L491 has no Hoare annotation [2022-02-20 18:08:33,452 WARN L170 areAnnotationChecker]: L108-1 has no Hoare annotation [2022-02-20 18:08:33,453 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2022-02-20 18:08:33,453 WARN L170 areAnnotationChecker]: L140 has no Hoare annotation [2022-02-20 18:08:33,453 WARN L170 areAnnotationChecker]: L503-1 has no Hoare annotation [2022-02-20 18:08:33,453 WARN L170 areAnnotationChecker]: L503-1 has no Hoare annotation [2022-02-20 18:08:33,453 WARN L170 areAnnotationChecker]: L166 has no Hoare annotation [2022-02-20 18:08:33,453 WARN L170 areAnnotationChecker]: deactivatePumpFINAL has no Hoare annotation [2022-02-20 18:08:33,453 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__baseEXIT has no Hoare annotation [2022-02-20 18:08:33,453 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__baseEXIT has no Hoare annotation [2022-02-20 18:08:33,453 WARN L170 areAnnotationChecker]: L515-1 has no Hoare annotation [2022-02-20 18:08:33,453 WARN L170 areAnnotationChecker]: L595-1 has no Hoare annotation [2022-02-20 18:08:33,459 WARN L170 areAnnotationChecker]: isMethaneLevelCriticalFINAL has no Hoare annotation [2022-02-20 18:08:33,460 WARN L170 areAnnotationChecker]: L491 has no Hoare annotation [2022-02-20 18:08:33,460 WARN L170 areAnnotationChecker]: L491 has no Hoare annotation [2022-02-20 18:08:33,460 WARN L170 areAnnotationChecker]: L108-1 has no Hoare annotation [2022-02-20 18:08:33,460 WARN L170 areAnnotationChecker]: L108-1 has no Hoare annotation [2022-02-20 18:08:33,460 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2022-02-20 18:08:33,460 WARN L170 areAnnotationChecker]: L140 has no Hoare annotation [2022-02-20 18:08:33,460 WARN L170 areAnnotationChecker]: L140 has no Hoare annotation [2022-02-20 18:08:33,460 WARN L170 areAnnotationChecker]: L503-1 has no Hoare annotation [2022-02-20 18:08:33,460 WARN L170 areAnnotationChecker]: L166 has no Hoare annotation [2022-02-20 18:08:33,460 WARN L170 areAnnotationChecker]: L166 has no Hoare annotation [2022-02-20 18:08:33,460 WARN L170 areAnnotationChecker]: L251-1 has no Hoare annotation [2022-02-20 18:08:33,460 WARN L170 areAnnotationChecker]: deactivatePumpEXIT has no Hoare annotation [2022-02-20 18:08:33,461 WARN L170 areAnnotationChecker]: deactivatePumpEXIT has no Hoare annotation [2022-02-20 18:08:33,461 WARN L170 areAnnotationChecker]: deactivatePumpEXIT has no Hoare annotation [2022-02-20 18:08:33,461 WARN L170 areAnnotationChecker]: L155-1 has no Hoare annotation [2022-02-20 18:08:33,461 WARN L170 areAnnotationChecker]: changeMethaneLevelEXIT has no Hoare annotation [2022-02-20 18:08:33,461 WARN L170 areAnnotationChecker]: L595-1 has no Hoare annotation [2022-02-20 18:08:33,461 WARN L170 areAnnotationChecker]: isMethaneLevelCriticalEXIT has no Hoare annotation [2022-02-20 18:08:33,461 WARN L170 areAnnotationChecker]: isMethaneLevelCriticalEXIT has no Hoare annotation [2022-02-20 18:08:33,461 WARN L170 areAnnotationChecker]: L108-1 has no Hoare annotation [2022-02-20 18:08:33,461 WARN L170 areAnnotationChecker]: L192 has no Hoare annotation [2022-02-20 18:08:33,461 WARN L170 areAnnotationChecker]: L192 has no Hoare annotation [2022-02-20 18:08:33,461 WARN L170 areAnnotationChecker]: L115-1 has no Hoare annotation [2022-02-20 18:08:33,462 WARN L170 areAnnotationChecker]: L568 has no Hoare annotation [2022-02-20 18:08:33,462 WARN L170 areAnnotationChecker]: L568 has no Hoare annotation [2022-02-20 18:08:33,462 WARN L170 areAnnotationChecker]: L155-1 has no Hoare annotation [2022-02-20 18:08:33,462 WARN L170 areAnnotationChecker]: waterRiseEXIT has no Hoare annotation [2022-02-20 18:08:33,462 WARN L170 areAnnotationChecker]: L330 has no Hoare annotation [2022-02-20 18:08:33,462 WARN L170 areAnnotationChecker]: L181-1 has no Hoare annotation [2022-02-20 18:08:33,463 WARN L170 areAnnotationChecker]: L251-1 has no Hoare annotation [2022-02-20 18:08:33,463 WARN L170 areAnnotationChecker]: L181-1 has no Hoare annotation [2022-02-20 18:08:33,463 WARN L170 areAnnotationChecker]: L115-1 has no Hoare annotation [2022-02-20 18:08:33,463 WARN L170 areAnnotationChecker]: L344-1 has no Hoare annotation [2022-02-20 18:08:33,463 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__highWaterSensorEXIT has no Hoare annotation [2022-02-20 18:08:33,463 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__highWaterSensorEXIT has no Hoare annotation [2022-02-20 18:08:33,463 WARN L170 areAnnotationChecker]: L397-1 has no Hoare annotation [2022-02-20 18:08:33,463 WARN L170 areAnnotationChecker]: L600 has no Hoare annotation [2022-02-20 18:08:33,463 WARN L170 areAnnotationChecker]: L460-1 has no Hoare annotation [2022-02-20 18:08:33,463 WARN L170 areAnnotationChecker]: L194-1 has no Hoare annotation [2022-02-20 18:08:33,464 WARN L170 areAnnotationChecker]: L460-1 has no Hoare annotation [2022-02-20 18:08:33,465 WARN L170 areAnnotationChecker]: L311 has no Hoare annotation [2022-02-20 18:08:33,465 WARN L170 areAnnotationChecker]: L387-1 has no Hoare annotation [2022-02-20 18:08:33,465 WARN L170 areAnnotationChecker]: L330 has no Hoare annotation [2022-02-20 18:08:33,465 WARN L170 areAnnotationChecker]: L330 has no Hoare annotation [2022-02-20 18:08:33,465 WARN L170 areAnnotationChecker]: isMethaneAlarmFINAL has no Hoare annotation [2022-02-20 18:08:33,465 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__methaneQueryEXIT has no Hoare annotation [2022-02-20 18:08:33,465 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__methaneQueryEXIT has no Hoare annotation [2022-02-20 18:08:33,466 WARN L170 areAnnotationChecker]: L407 has no Hoare annotation [2022-02-20 18:08:33,466 WARN L170 areAnnotationChecker]: L407 has no Hoare annotation [2022-02-20 18:08:33,466 WARN L170 areAnnotationChecker]: cleanupEXIT has no Hoare annotation [2022-02-20 18:08:33,466 WARN L170 areAnnotationChecker]: L600 has no Hoare annotation [2022-02-20 18:08:33,466 WARN L170 areAnnotationChecker]: L462 has no Hoare annotation [2022-02-20 18:08:33,466 WARN L170 areAnnotationChecker]: L462 has no Hoare annotation [2022-02-20 18:08:33,467 WARN L170 areAnnotationChecker]: L194-1 has no Hoare annotation [2022-02-20 18:08:33,467 WARN L170 areAnnotationChecker]: L671 has no Hoare annotation [2022-02-20 18:08:33,467 WARN L170 areAnnotationChecker]: L311 has no Hoare annotation [2022-02-20 18:08:33,467 WARN L170 areAnnotationChecker]: L311 has no Hoare annotation [2022-02-20 18:08:33,467 WARN L170 areAnnotationChecker]: L397 has no Hoare annotation [2022-02-20 18:08:33,467 WARN L170 areAnnotationChecker]: L397 has no Hoare annotation [2022-02-20 18:08:33,467 WARN L170 areAnnotationChecker]: L330-2 has no Hoare annotation [2022-02-20 18:08:33,467 WARN L170 areAnnotationChecker]: isMethaneAlarmEXIT has no Hoare annotation [2022-02-20 18:08:33,467 WARN L170 areAnnotationChecker]: isMethaneAlarmEXIT has no Hoare annotation [2022-02-20 18:08:33,469 WARN L170 areAnnotationChecker]: L415 has no Hoare annotation [2022-02-20 18:08:33,469 WARN L170 areAnnotationChecker]: L415 has no Hoare annotation [2022-02-20 18:08:33,469 WARN L170 areAnnotationChecker]: cleanupEXIT has no Hoare annotation [2022-02-20 18:08:33,469 WARN L170 areAnnotationChecker]: L603 has no Hoare annotation [2022-02-20 18:08:33,469 WARN L170 areAnnotationChecker]: L603 has no Hoare annotation [2022-02-20 18:08:33,469 WARN L170 areAnnotationChecker]: L466 has no Hoare annotation [2022-02-20 18:08:33,469 WARN L170 areAnnotationChecker]: timeShiftFINAL has no Hoare annotation [2022-02-20 18:08:33,469 WARN L170 areAnnotationChecker]: L196 has no Hoare annotation [2022-02-20 18:08:33,469 WARN L170 areAnnotationChecker]: L196 has no Hoare annotation [2022-02-20 18:08:33,470 WARN L170 areAnnotationChecker]: L671 has no Hoare annotation [2022-02-20 18:08:33,470 WARN L170 areAnnotationChecker]: L671 has no Hoare annotation [2022-02-20 18:08:33,470 WARN L170 areAnnotationChecker]: L311-2 has no Hoare annotation [2022-02-20 18:08:33,470 WARN L170 areAnnotationChecker]: L397-1 has no Hoare annotation [2022-02-20 18:08:33,471 WARN L170 areAnnotationChecker]: L170 has no Hoare annotation [2022-02-20 18:08:33,471 WARN L170 areAnnotationChecker]: L226-1 has no Hoare annotation [2022-02-20 18:08:33,472 WARN L170 areAnnotationChecker]: L378 has no Hoare annotation [2022-02-20 18:08:33,472 WARN L170 areAnnotationChecker]: L344 has no Hoare annotation [2022-02-20 18:08:33,472 WARN L170 areAnnotationChecker]: L344 has no Hoare annotation [2022-02-20 18:08:33,472 WARN L170 areAnnotationChecker]: L610 has no Hoare annotation [2022-02-20 18:08:33,473 WARN L170 areAnnotationChecker]: L466 has no Hoare annotation [2022-02-20 18:08:33,473 WARN L170 areAnnotationChecker]: L466 has no Hoare annotation [2022-02-20 18:08:33,473 WARN L170 areAnnotationChecker]: timeShiftFINAL has no Hoare annotation [2022-02-20 18:08:33,474 WARN L170 areAnnotationChecker]: L671-2 has no Hoare annotation [2022-02-20 18:08:33,474 WARN L170 areAnnotationChecker]: L144 has no Hoare annotation [2022-02-20 18:08:33,474 WARN L170 areAnnotationChecker]: L170 has no Hoare annotation [2022-02-20 18:08:33,475 WARN L170 areAnnotationChecker]: L170 has no Hoare annotation [2022-02-20 18:08:33,475 WARN L170 areAnnotationChecker]: L228 has no Hoare annotation [2022-02-20 18:08:33,475 WARN L170 areAnnotationChecker]: L228 has no Hoare annotation [2022-02-20 18:08:33,475 WARN L170 areAnnotationChecker]: L378 has no Hoare annotation [2022-02-20 18:08:33,475 WARN L170 areAnnotationChecker]: L378 has no Hoare annotation [2022-02-20 18:08:33,475 WARN L170 areAnnotationChecker]: L344-1 has no Hoare annotation [2022-02-20 18:08:33,476 WARN L170 areAnnotationChecker]: L671-2 has no Hoare annotation [2022-02-20 18:08:33,476 WARN L170 areAnnotationChecker]: L610 has no Hoare annotation [2022-02-20 18:08:33,476 WARN L170 areAnnotationChecker]: L467 has no Hoare annotation [2022-02-20 18:08:33,476 WARN L170 areAnnotationChecker]: L467 has no Hoare annotation [2022-02-20 18:08:33,476 WARN L170 areAnnotationChecker]: timeShiftEXIT has no Hoare annotation [2022-02-20 18:08:33,476 WARN L170 areAnnotationChecker]: timeShiftEXIT has no Hoare annotation [2022-02-20 18:08:33,476 WARN L170 areAnnotationChecker]: timeShiftEXIT has no Hoare annotation [2022-02-20 18:08:33,477 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2022-02-20 18:08:33,477 WARN L170 areAnnotationChecker]: L144 has no Hoare annotation [2022-02-20 18:08:33,477 WARN L170 areAnnotationChecker]: L144 has no Hoare annotation [2022-02-20 18:08:33,477 WARN L170 areAnnotationChecker]: L181-1 has no Hoare annotation [2022-02-20 18:08:33,477 WARN L170 areAnnotationChecker]: L181-1 has no Hoare annotation [2022-02-20 18:08:33,478 WARN L170 areAnnotationChecker]: L155-1 has no Hoare annotation [2022-02-20 18:08:33,479 WARN L170 areAnnotationChecker]: L379 has no Hoare annotation [2022-02-20 18:08:33,479 WARN L170 areAnnotationChecker]: L440 has no Hoare annotation [2022-02-20 18:08:33,479 WARN L170 areAnnotationChecker]: L440 has no Hoare annotation [2022-02-20 18:08:33,479 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2022-02-20 18:08:33,479 WARN L170 areAnnotationChecker]: L226-1 has no Hoare annotation [2022-02-20 18:08:33,479 WARN L170 areAnnotationChecker]: L155-1 has no Hoare annotation [2022-02-20 18:08:33,479 WARN L170 areAnnotationChecker]: L387 has no Hoare annotation [2022-02-20 18:08:33,479 WARN L170 areAnnotationChecker]: L387 has no Hoare annotation [2022-02-20 18:08:33,480 WARN L170 areAnnotationChecker]: L387-1 has no Hoare annotation [2022-02-20 18:08:33,481 INFO L163 areAnnotationChecker]: CFG has 34 edges. 34 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. 0 times interpolants missing. [2022-02-20 18:08:33,497 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 20.02 06:08:33 BoogieIcfgContainer [2022-02-20 18:08:33,497 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-02-20 18:08:33,497 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-02-20 18:08:33,498 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-02-20 18:08:33,498 INFO L275 PluginConnector]: Witness Printer initialized [2022-02-20 18:08:33,498 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.02 06:08:18" (3/4) ... [2022-02-20 18:08:33,500 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-02-20 18:08:33,503 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-02-20 18:08:33,503 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-02-20 18:08:33,503 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-02-20 18:08:33,503 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-02-20 18:08:33,503 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-02-20 18:08:33,503 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-02-20 18:08:33,504 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-02-20 18:08:33,504 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-02-20 18:08:33,504 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2022-02-20 18:08:33,504 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2022-02-20 18:08:33,509 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 52 nodes and edges [2022-02-20 18:08:33,509 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-02-20 18:08:33,510 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-02-20 18:08:33,510 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-02-20 18:08:33,511 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-02-20 18:08:33,511 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-02-20 18:08:33,511 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-02-20 18:08:33,525 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) [2022-02-20 18:08:33,525 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) [2022-02-20 18:08:33,525 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) [2022-02-20 18:08:33,526 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) || ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0)) || ((((methaneLevelCritical == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) [2022-02-20 18:08:33,526 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && ((pumpRunning == \old(pumpRunning) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical))) && ((pumpRunning == \old(pumpRunning) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-02-20 18:08:33,526 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || (\old(waterLevel) == waterLevel && !(0 == systemActive))) || !(methaneLevelCritical == 0)) && ((pumpRunning == 0 || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || \old(waterLevel) == waterLevel)) && ((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-02-20 18:08:33,527 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((1 <= methaneLevelCritical && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) || ((((methaneLevelCritical == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) [2022-02-20 18:08:33,527 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(1 <= methaneLevelCritical) || (pumpRunning == 0 && !(0 == systemActive))) || 0 == systemActive) && (((((pumpRunning == \old(pumpRunning) && tmp == 0) || !(methaneLevelCritical == 0)) || (2 <= waterLevel && tmp == 0)) || ((pumpRunning == 0 && tmp == 0) && !(0 == systemActive))) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && tmp == 0)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || \old(waterLevel) == waterLevel)) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || \old(waterLevel) == waterLevel) [2022-02-20 18:08:33,528 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 0 == systemActive) || (((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 0 == systemActive) [2022-02-20 18:08:33,528 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && (((pumpRunning == 0 && \result == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel))) && (!(methaneLevelCritical == 0) || 0 == systemActive) [2022-02-20 18:08:33,528 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((2 <= waterLevel || !(methaneLevelCritical == 0)) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || ((methaneLevelCritical == tmp && pumpRunning == 0) && 2 <= waterLevel)) [2022-02-20 18:08:33,528 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) && ((2 <= waterLevel || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-02-20 18:08:33,528 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((pumpRunning == \old(pumpRunning) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-02-20 18:08:33,528 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) || ((1 <= \result && pumpRunning == \old(pumpRunning)) && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || (1 <= \result && pumpRunning == 0)) [2022-02-20 18:08:33,529 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 <= methaneLevelCritical) || 0 == systemActive) && (!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0))) && (!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical))) && (!(methaneLevelCritical == 0) || 0 == systemActive) [2022-02-20 18:08:33,529 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((pumpRunning == \old(pumpRunning) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-02-20 18:08:33,529 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0) && tmp___0 == 0)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) && ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0) && tmp___0 == 0) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-02-20 18:08:33,542 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2022-02-20 18:08:33,542 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-02-20 18:08:33,543 INFO L158 Benchmark]: Toolchain (without parser) took 16403.93ms. Allocated memory was 94.4MB in the beginning and 287.3MB in the end (delta: 192.9MB). Free memory was 62.1MB in the beginning and 133.8MB in the end (delta: -71.7MB). Peak memory consumption was 120.4MB. Max. memory is 16.1GB. [2022-02-20 18:08:33,543 INFO L158 Benchmark]: CDTParser took 0.18ms. Allocated memory is still 94.4MB. Free memory is still 50.6MB. There was no memory consumed. Max. memory is 16.1GB. [2022-02-20 18:08:33,543 INFO L158 Benchmark]: CACSL2BoogieTranslator took 475.54ms. Allocated memory is still 94.4MB. Free memory was 61.9MB in the beginning and 58.2MB in the end (delta: 3.7MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2022-02-20 18:08:33,543 INFO L158 Benchmark]: Boogie Procedure Inliner took 58.31ms. Allocated memory is still 94.4MB. Free memory was 58.2MB in the beginning and 55.2MB in the end (delta: 3.0MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-02-20 18:08:33,543 INFO L158 Benchmark]: Boogie Preprocessor took 35.54ms. Allocated memory is still 94.4MB. Free memory was 55.2MB in the beginning and 53.4MB in the end (delta: 1.8MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-02-20 18:08:33,544 INFO L158 Benchmark]: RCFGBuilder took 492.30ms. Allocated memory was 94.4MB in the beginning and 134.2MB in the end (delta: 39.8MB). Free memory was 53.4MB in the beginning and 97.0MB in the end (delta: -43.6MB). Peak memory consumption was 15.1MB. Max. memory is 16.1GB. [2022-02-20 18:08:33,544 INFO L158 Benchmark]: TraceAbstraction took 15290.03ms. Allocated memory was 134.2MB in the beginning and 287.3MB in the end (delta: 153.1MB). Free memory was 97.0MB in the beginning and 140.1MB in the end (delta: -43.2MB). Peak memory consumption was 156.8MB. Max. memory is 16.1GB. [2022-02-20 18:08:33,544 INFO L158 Benchmark]: Witness Printer took 44.44ms. Allocated memory is still 287.3MB. Free memory was 140.1MB in the beginning and 133.8MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-02-20 18:08:33,545 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - AssertionsEnabledResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.18ms. Allocated memory is still 94.4MB. Free memory is still 50.6MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 475.54ms. Allocated memory is still 94.4MB. Free memory was 61.9MB in the beginning and 58.2MB in the end (delta: 3.7MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 58.31ms. Allocated memory is still 94.4MB. Free memory was 58.2MB in the beginning and 55.2MB in the end (delta: 3.0MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 35.54ms. Allocated memory is still 94.4MB. Free memory was 55.2MB in the beginning and 53.4MB in the end (delta: 1.8MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 492.30ms. Allocated memory was 94.4MB in the beginning and 134.2MB in the end (delta: 39.8MB). Free memory was 53.4MB in the beginning and 97.0MB in the end (delta: -43.6MB). Peak memory consumption was 15.1MB. Max. memory is 16.1GB. * TraceAbstraction took 15290.03ms. Allocated memory was 134.2MB in the beginning and 287.3MB in the end (delta: 153.1MB). Free memory was 97.0MB in the beginning and 140.1MB in the end (delta: -43.2MB). Peak memory consumption was 156.8MB. Max. memory is 16.1GB. * Witness Printer took 44.44ms. Allocated memory is still 287.3MB. Free memory was 140.1MB in the beginning and 133.8MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 440]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 11 procedures, 115 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 15.2s, OverallIterations: 10, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 8.6s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 3.2s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1445 SdHoareTripleChecker+Valid, 1.6s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1400 mSDsluCounter, 4501 SdHoareTripleChecker+Invalid, 1.6s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3101 mSDsCounter, 475 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1720 IncrementalHoareTripleChecker+Invalid, 2195 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 475 mSolverCounterUnsat, 1400 mSDtfsCounter, 1720 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 323 GetRequests, 232 SyntacticMatches, 2 SemanticMatches, 89 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 308 ImplicationChecksByTransitivity, 0.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=861occurred in iteration=9, InterpolantAutomatonStates: 80, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.6s AutomataMinimizationTime, 10 MinimizatonAttempts, 92 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 53 LocationsWithAnnotation, 1686 PreInvPairs, 2091 NumberOfFragments, 1689 HoareAnnotationTreeSize, 1686 FomulaSimplifications, 3694 FormulaSimplificationTreeSizeReduction, 0.4s HoareSimplificationTime, 53 FomulaSimplificationsInter, 14513 FormulaSimplificationTreeSizeReductionInter, 2.5s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 1.6s InterpolantComputationTime, 683 NumberOfCodeBlocks, 683 NumberOfCodeBlocksAsserted, 11 NumberOfCheckSat, 672 ConstructedInterpolants, 0 QuantifiedInterpolants, 1072 SizeOfPredicates, 3 NumberOfNonLiveVariables, 542 ConjunctsInSsa, 9 ConjunctsInUnsatCore, 11 InterpolantComputations, 10 PerfectInterpolantSequences, 110/113 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 340]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 0 == systemActive) || (((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 0 == systemActive) - InvariantResult [Line: 564]: Loop Invariant Derived loop invariant: (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) || ((1 <= \result && pumpRunning == \old(pumpRunning)) && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || (1 <= \result && pumpRunning == 0)) - InvariantResult [Line: 213]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) && ((2 <= waterLevel || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 377]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) || ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0)) || ((((methaneLevelCritical == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) - InvariantResult [Line: 487]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && ((pumpRunning == \old(pumpRunning) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical))) && ((pumpRunning == \old(pumpRunning) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 188]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || (\old(waterLevel) == waterLevel && !(0 == systemActive))) || !(methaneLevelCritical == 0)) && ((pumpRunning == 0 || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || \old(waterLevel) == waterLevel)) && ((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 599]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 436]: Loop Invariant Derived loop invariant: (((!(1 <= methaneLevelCritical) || 0 == systemActive) && (!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0))) && (!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical))) && (!(methaneLevelCritical == 0) || 0 == systemActive) - InvariantResult [Line: 367]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 355]: Loop Invariant Derived loop invariant: ((((1 <= methaneLevelCritical && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) || ((((methaneLevelCritical == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) - InvariantResult [Line: 376]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 589]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 578]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((pumpRunning == \old(pumpRunning) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 78]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 643]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 661]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 221]: Loop Invariant Derived loop invariant: ((2 <= waterLevel || !(methaneLevelCritical == 0)) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || ((methaneLevelCritical == tmp && pumpRunning == 0) && 2 <= waterLevel)) - InvariantResult [Line: 64]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 257]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && (((pumpRunning == 0 && \result == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel))) && (!(methaneLevelCritical == 0) || 0 == systemActive) - InvariantResult [Line: 650]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 321]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((pumpRunning == \old(pumpRunning) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 302]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0) && tmp___0 == 0)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) && ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0) && tmp___0 == 0) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 71]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 454]: Loop Invariant Derived loop invariant: ((((((!(1 <= methaneLevelCritical) || (pumpRunning == 0 && !(0 == systemActive))) || 0 == systemActive) && (((((pumpRunning == \old(pumpRunning) && tmp == 0) || !(methaneLevelCritical == 0)) || (2 <= waterLevel && tmp == 0)) || ((pumpRunning == 0 && tmp == 0) && !(0 == systemActive))) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && tmp == 0)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || \old(waterLevel) == waterLevel)) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || \old(waterLevel) == waterLevel) - InvariantResult [Line: 446]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) RESULT: Ultimate proved your program to be correct! [2022-02-20 18:08:33,588 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE