./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec2_productSimulator.cil.c --full-output -ea --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 03d7b7b3 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -ea -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec2_productSimulator.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 4f3466b08a64c7fddf78a299dda71b27bda6ead813da06152b5ee1cea2f1c203 --- Real Ultimate output --- This is Ultimate 0.2.2-dev-03d7b7b [2022-02-20 18:08:16,998 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-02-20 18:08:17,000 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-02-20 18:08:17,023 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-02-20 18:08:17,023 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-02-20 18:08:17,026 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-02-20 18:08:17,029 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-02-20 18:08:17,030 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-02-20 18:08:17,032 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-02-20 18:08:17,032 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-02-20 18:08:17,033 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-02-20 18:08:17,035 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-02-20 18:08:17,035 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-02-20 18:08:17,039 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-02-20 18:08:17,041 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-02-20 18:08:17,041 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-02-20 18:08:17,042 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-02-20 18:08:17,042 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-02-20 18:08:17,043 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-02-20 18:08:17,044 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-02-20 18:08:17,045 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-02-20 18:08:17,047 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-02-20 18:08:17,048 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-02-20 18:08:17,049 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-02-20 18:08:17,051 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-02-20 18:08:17,054 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-02-20 18:08:17,054 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-02-20 18:08:17,055 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-02-20 18:08:17,056 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-02-20 18:08:17,056 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-02-20 18:08:17,057 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-02-20 18:08:17,057 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-02-20 18:08:17,058 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-02-20 18:08:17,059 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-02-20 18:08:17,059 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-02-20 18:08:17,060 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-02-20 18:08:17,061 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-02-20 18:08:17,061 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-02-20 18:08:17,061 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-02-20 18:08:17,062 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-02-20 18:08:17,062 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-02-20 18:08:17,063 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-02-20 18:08:17,078 INFO L113 SettingsManager]: Loading preferences was successful [2022-02-20 18:08:17,078 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-02-20 18:08:17,078 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-02-20 18:08:17,079 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-02-20 18:08:17,079 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-02-20 18:08:17,079 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-02-20 18:08:17,080 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-02-20 18:08:17,080 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-02-20 18:08:17,080 INFO L138 SettingsManager]: * Use SBE=true [2022-02-20 18:08:17,080 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-02-20 18:08:17,080 INFO L138 SettingsManager]: * sizeof long=4 [2022-02-20 18:08:17,080 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-02-20 18:08:17,080 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-02-20 18:08:17,081 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-02-20 18:08:17,081 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-02-20 18:08:17,081 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-02-20 18:08:17,081 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-02-20 18:08:17,081 INFO L138 SettingsManager]: * sizeof long double=12 [2022-02-20 18:08:17,081 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-02-20 18:08:17,081 INFO L138 SettingsManager]: * Use constant arrays=true [2022-02-20 18:08:17,082 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-02-20 18:08:17,082 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-02-20 18:08:17,082 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-02-20 18:08:17,082 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-02-20 18:08:17,082 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-02-20 18:08:17,083 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-02-20 18:08:17,083 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-02-20 18:08:17,084 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-02-20 18:08:17,084 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-02-20 18:08:17,084 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-02-20 18:08:17,084 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2022-02-20 18:08:17,084 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-02-20 18:08:17,085 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-02-20 18:08:17,085 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 4f3466b08a64c7fddf78a299dda71b27bda6ead813da06152b5ee1cea2f1c203 [2022-02-20 18:08:17,265 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-02-20 18:08:17,282 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-02-20 18:08:17,284 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-02-20 18:08:17,285 INFO L271 PluginConnector]: Initializing CDTParser... [2022-02-20 18:08:17,285 INFO L275 PluginConnector]: CDTParser initialized [2022-02-20 18:08:17,286 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec2_productSimulator.cil.c [2022-02-20 18:08:17,329 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/dad099e3f/c99ca61a0f8f44f783dcb08e1ff08aae/FLAGecab740e1 [2022-02-20 18:08:17,673 INFO L306 CDTParser]: Found 1 translation units. [2022-02-20 18:08:17,673 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_productSimulator.cil.c [2022-02-20 18:08:17,682 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/dad099e3f/c99ca61a0f8f44f783dcb08e1ff08aae/FLAGecab740e1 [2022-02-20 18:08:18,065 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/dad099e3f/c99ca61a0f8f44f783dcb08e1ff08aae [2022-02-20 18:08:18,075 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-02-20 18:08:18,076 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-02-20 18:08:18,081 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-02-20 18:08:18,081 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-02-20 18:08:18,083 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-02-20 18:08:18,084 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.02 06:08:18" (1/1) ... [2022-02-20 18:08:18,085 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@1607b8e1 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:08:18, skipping insertion in model container [2022-02-20 18:08:18,085 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.02 06:08:18" (1/1) ... [2022-02-20 18:08:18,090 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-02-20 18:08:18,113 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-02-20 18:08:18,386 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_productSimulator.cil.c[20836,20849] [2022-02-20 18:08:18,393 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-02-20 18:08:18,399 INFO L203 MainTranslator]: Completed pre-run [2022-02-20 18:08:18,442 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_productSimulator.cil.c[20836,20849] [2022-02-20 18:08:18,444 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-02-20 18:08:18,463 INFO L208 MainTranslator]: Completed translation [2022-02-20 18:08:18,463 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:08:18 WrapperNode [2022-02-20 18:08:18,463 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-02-20 18:08:18,464 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-02-20 18:08:18,465 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-02-20 18:08:18,465 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-02-20 18:08:18,469 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:08:18" (1/1) ... [2022-02-20 18:08:18,480 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:08:18" (1/1) ... [2022-02-20 18:08:18,507 INFO L137 Inliner]: procedures = 64, calls = 178, calls flagged for inlining = 28, calls inlined = 25, statements flattened = 338 [2022-02-20 18:08:18,508 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-02-20 18:08:18,508 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-02-20 18:08:18,508 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-02-20 18:08:18,509 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-02-20 18:08:18,514 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:08:18" (1/1) ... [2022-02-20 18:08:18,514 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:08:18" (1/1) ... [2022-02-20 18:08:18,516 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:08:18" (1/1) ... [2022-02-20 18:08:18,516 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:08:18" (1/1) ... [2022-02-20 18:08:18,521 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:08:18" (1/1) ... [2022-02-20 18:08:18,538 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:08:18" (1/1) ... [2022-02-20 18:08:18,539 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:08:18" (1/1) ... [2022-02-20 18:08:18,541 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-02-20 18:08:18,542 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-02-20 18:08:18,542 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-02-20 18:08:18,542 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-02-20 18:08:18,542 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:08:18" (1/1) ... [2022-02-20 18:08:18,547 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-02-20 18:08:18,554 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-20 18:08:18,563 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-02-20 18:08:18,579 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-02-20 18:08:18,592 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-02-20 18:08:18,593 INFO L130 BoogieDeclarations]: Found specification of procedure activatePump__before__methaneQuery [2022-02-20 18:08:18,593 INFO L138 BoogieDeclarations]: Found implementation of procedure activatePump__before__methaneQuery [2022-02-20 18:08:18,593 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-02-20 18:08:18,593 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-02-20 18:08:18,593 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-02-20 18:08:18,593 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-02-20 18:08:18,593 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-02-20 18:08:18,593 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-02-20 18:08:18,594 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__before__highWaterSensor [2022-02-20 18:08:18,594 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__before__highWaterSensor [2022-02-20 18:08:18,594 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-02-20 18:08:18,594 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-02-20 18:08:18,594 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__before__methaneAlarm [2022-02-20 18:08:18,594 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__before__methaneAlarm [2022-02-20 18:08:18,594 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__before__lowWaterSensor [2022-02-20 18:08:18,595 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__before__lowWaterSensor [2022-02-20 18:08:18,595 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2022-02-20 18:08:18,595 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2022-02-20 18:08:18,595 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-02-20 18:08:18,595 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-02-20 18:08:18,595 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-02-20 18:08:18,595 INFO L130 BoogieDeclarations]: Found specification of procedure select_one [2022-02-20 18:08:18,595 INFO L138 BoogieDeclarations]: Found implementation of procedure select_one [2022-02-20 18:08:18,596 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-02-20 18:08:18,596 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-02-20 18:08:18,596 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-02-20 18:08:18,596 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-02-20 18:08:18,648 INFO L234 CfgBuilder]: Building ICFG [2022-02-20 18:08:18,649 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-02-20 18:08:19,053 INFO L275 CfgBuilder]: Performing block encoding [2022-02-20 18:08:19,059 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-02-20 18:08:19,059 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-02-20 18:08:19,060 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.02 06:08:19 BoogieIcfgContainer [2022-02-20 18:08:19,060 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-02-20 18:08:19,062 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-02-20 18:08:19,062 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-02-20 18:08:19,065 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-02-20 18:08:19,065 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 20.02 06:08:18" (1/3) ... [2022-02-20 18:08:19,066 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@16354366 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.02 06:08:19, skipping insertion in model container [2022-02-20 18:08:19,066 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:08:18" (2/3) ... [2022-02-20 18:08:19,066 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@16354366 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.02 06:08:19, skipping insertion in model container [2022-02-20 18:08:19,066 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.02 06:08:19" (3/3) ... [2022-02-20 18:08:19,067 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec2_productSimulator.cil.c [2022-02-20 18:08:19,071 INFO L205 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-02-20 18:08:19,071 INFO L164 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-02-20 18:08:19,109 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-02-20 18:08:19,116 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2022-02-20 18:08:19,116 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-02-20 18:08:19,153 INFO L276 IsEmpty]: Start isEmpty. Operand has 145 states, 101 states have (on average 1.3663366336633664) internal successors, (138), 117 states have internal predecessors, (138), 30 states have call successors, (30), 12 states have call predecessors, (30), 12 states have return successors, (30), 25 states have call predecessors, (30), 30 states have call successors, (30) [2022-02-20 18:08:19,160 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-02-20 18:08:19,160 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:08:19,161 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:08:19,161 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:08:19,164 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:08:19,164 INFO L85 PathProgramCache]: Analyzing trace with hash -733132601, now seen corresponding path program 1 times [2022-02-20 18:08:19,171 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:08:19,172 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [457367232] [2022-02-20 18:08:19,172 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:08:19,173 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:08:19,321 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:19,404 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-02-20 18:08:19,410 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:19,428 INFO L290 TraceCheckUtils]: 0: Hoare triple {148#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {148#true} is VALID [2022-02-20 18:08:19,428 INFO L290 TraceCheckUtils]: 1: Hoare triple {148#true} assume true; {148#true} is VALID [2022-02-20 18:08:19,428 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {148#true} {148#true} #363#return; {148#true} is VALID [2022-02-20 18:08:19,429 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:08:19,434 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:19,437 INFO L290 TraceCheckUtils]: 0: Hoare triple {148#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {148#true} is VALID [2022-02-20 18:08:19,437 INFO L290 TraceCheckUtils]: 1: Hoare triple {148#true} assume true; {148#true} is VALID [2022-02-20 18:08:19,438 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {148#true} {148#true} #365#return; {148#true} is VALID [2022-02-20 18:08:19,438 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-02-20 18:08:19,439 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:19,442 INFO L290 TraceCheckUtils]: 0: Hoare triple {148#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {148#true} is VALID [2022-02-20 18:08:19,442 INFO L290 TraceCheckUtils]: 1: Hoare triple {148#true} assume true; {148#true} is VALID [2022-02-20 18:08:19,442 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {148#true} {148#true} #367#return; {148#true} is VALID [2022-02-20 18:08:19,442 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:08:19,449 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:19,457 INFO L290 TraceCheckUtils]: 0: Hoare triple {148#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {148#true} is VALID [2022-02-20 18:08:19,458 INFO L290 TraceCheckUtils]: 1: Hoare triple {148#true} assume true; {148#true} is VALID [2022-02-20 18:08:19,458 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {148#true} {148#true} #369#return; {148#true} is VALID [2022-02-20 18:08:19,458 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-02-20 18:08:19,461 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:19,467 INFO L290 TraceCheckUtils]: 0: Hoare triple {148#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {148#true} is VALID [2022-02-20 18:08:19,467 INFO L290 TraceCheckUtils]: 1: Hoare triple {148#true} assume true; {148#true} is VALID [2022-02-20 18:08:19,467 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {148#true} {148#true} #371#return; {148#true} is VALID [2022-02-20 18:08:19,467 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-02-20 18:08:19,469 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:19,471 INFO L290 TraceCheckUtils]: 0: Hoare triple {148#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {148#true} is VALID [2022-02-20 18:08:19,472 INFO L290 TraceCheckUtils]: 1: Hoare triple {148#true} assume true; {148#true} is VALID [2022-02-20 18:08:19,472 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {148#true} {148#true} #373#return; {148#true} is VALID [2022-02-20 18:08:19,472 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2022-02-20 18:08:19,473 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:19,475 INFO L290 TraceCheckUtils]: 0: Hoare triple {148#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {148#true} is VALID [2022-02-20 18:08:19,476 INFO L290 TraceCheckUtils]: 1: Hoare triple {148#true} assume true; {148#true} is VALID [2022-02-20 18:08:19,476 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {148#true} {149#false} #361#return; {149#false} is VALID [2022-02-20 18:08:19,476 INFO L290 TraceCheckUtils]: 0: Hoare triple {148#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(38, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(13, 9);call #Ultimate.allocInit(3, 10);call write~init~int(79, 10, 0, 1);call write~init~int(110, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(4, 11);call write~init~int(79, 11, 0, 1);call write~init~int(102, 11, 1, 1);call write~init~int(102, 11, 2, 1);call write~init~int(0, 11, 3, 1);call #Ultimate.allocInit(7, 12);call write~init~int(44, 12, 0, 1);call write~init~int(80, 12, 1, 1);call write~init~int(117, 12, 2, 1);call write~init~int(109, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(3, 13);call write~init~int(79, 13, 0, 1);call write~init~int(110, 13, 1, 1);call write~init~int(0, 13, 2, 1);call #Ultimate.allocInit(4, 14);call write~init~int(79, 14, 0, 1);call write~init~int(102, 14, 1, 1);call write~init~int(102, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(3, 15);call write~init~int(41, 15, 0, 1);call write~init~int(32, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(10, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~__SELECTED_FEATURE_base~0 := 0;~__SELECTED_FEATURE_highWaterSensor~0 := 0;~__SELECTED_FEATURE_lowWaterSensor~0 := 0;~__SELECTED_FEATURE_methaneQuery~0 := 0;~__SELECTED_FEATURE_methaneAlarm~0 := 0;~__SELECTED_FEATURE_stopCommand~0 := 0;~__SELECTED_FEATURE_startCommand~0 := 0;~__GUIDSL_ROOT_PRODUCTION~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4;~methAndRunningLastTime~0 := 0;~head~0.base, ~head~0.offset := 0, 0; {148#true} is VALID [2022-02-20 18:08:19,477 INFO L290 TraceCheckUtils]: 1: Hoare triple {148#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret24#1, main_~retValue_acc~8#1, main_~tmp~6#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~6#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1; {148#true} is VALID [2022-02-20 18:08:19,477 INFO L290 TraceCheckUtils]: 2: Hoare triple {148#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret55#1, select_features_#t~ret56#1, select_features_#t~ret57#1, select_features_#t~ret58#1, select_features_#t~ret59#1, select_features_#t~ret60#1;~__SELECTED_FEATURE_base~0 := 1; {148#true} is VALID [2022-02-20 18:08:19,477 INFO L272 TraceCheckUtils]: 3: Hoare triple {148#true} call select_features_#t~ret55#1 := select_one(); {148#true} is VALID [2022-02-20 18:08:19,477 INFO L290 TraceCheckUtils]: 4: Hoare triple {148#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {148#true} is VALID [2022-02-20 18:08:19,477 INFO L290 TraceCheckUtils]: 5: Hoare triple {148#true} assume true; {148#true} is VALID [2022-02-20 18:08:19,478 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {148#true} {148#true} #363#return; {148#true} is VALID [2022-02-20 18:08:19,478 INFO L290 TraceCheckUtils]: 7: Hoare triple {148#true} assume -2147483648 <= select_features_#t~ret55#1 && select_features_#t~ret55#1 <= 2147483647;~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret55#1;havoc select_features_#t~ret55#1; {148#true} is VALID [2022-02-20 18:08:19,478 INFO L272 TraceCheckUtils]: 8: Hoare triple {148#true} call select_features_#t~ret56#1 := select_one(); {148#true} is VALID [2022-02-20 18:08:19,478 INFO L290 TraceCheckUtils]: 9: Hoare triple {148#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {148#true} is VALID [2022-02-20 18:08:19,478 INFO L290 TraceCheckUtils]: 10: Hoare triple {148#true} assume true; {148#true} is VALID [2022-02-20 18:08:19,479 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {148#true} {148#true} #365#return; {148#true} is VALID [2022-02-20 18:08:19,479 INFO L290 TraceCheckUtils]: 12: Hoare triple {148#true} assume -2147483648 <= select_features_#t~ret56#1 && select_features_#t~ret56#1 <= 2147483647;~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret56#1;havoc select_features_#t~ret56#1; {148#true} is VALID [2022-02-20 18:08:19,479 INFO L272 TraceCheckUtils]: 13: Hoare triple {148#true} call select_features_#t~ret57#1 := select_one(); {148#true} is VALID [2022-02-20 18:08:19,479 INFO L290 TraceCheckUtils]: 14: Hoare triple {148#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {148#true} is VALID [2022-02-20 18:08:19,479 INFO L290 TraceCheckUtils]: 15: Hoare triple {148#true} assume true; {148#true} is VALID [2022-02-20 18:08:19,480 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {148#true} {148#true} #367#return; {148#true} is VALID [2022-02-20 18:08:19,480 INFO L290 TraceCheckUtils]: 17: Hoare triple {148#true} assume -2147483648 <= select_features_#t~ret57#1 && select_features_#t~ret57#1 <= 2147483647;~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret57#1;havoc select_features_#t~ret57#1; {148#true} is VALID [2022-02-20 18:08:19,480 INFO L272 TraceCheckUtils]: 18: Hoare triple {148#true} call select_features_#t~ret58#1 := select_one(); {148#true} is VALID [2022-02-20 18:08:19,481 INFO L290 TraceCheckUtils]: 19: Hoare triple {148#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {148#true} is VALID [2022-02-20 18:08:19,481 INFO L290 TraceCheckUtils]: 20: Hoare triple {148#true} assume true; {148#true} is VALID [2022-02-20 18:08:19,482 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {148#true} {148#true} #369#return; {148#true} is VALID [2022-02-20 18:08:19,483 INFO L290 TraceCheckUtils]: 22: Hoare triple {148#true} assume -2147483648 <= select_features_#t~ret58#1 && select_features_#t~ret58#1 <= 2147483647;~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret58#1;havoc select_features_#t~ret58#1; {148#true} is VALID [2022-02-20 18:08:19,483 INFO L272 TraceCheckUtils]: 23: Hoare triple {148#true} call select_features_#t~ret59#1 := select_one(); {148#true} is VALID [2022-02-20 18:08:19,483 INFO L290 TraceCheckUtils]: 24: Hoare triple {148#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {148#true} is VALID [2022-02-20 18:08:19,484 INFO L290 TraceCheckUtils]: 25: Hoare triple {148#true} assume true; {148#true} is VALID [2022-02-20 18:08:19,484 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {148#true} {148#true} #371#return; {148#true} is VALID [2022-02-20 18:08:19,487 INFO L290 TraceCheckUtils]: 27: Hoare triple {148#true} assume -2147483648 <= select_features_#t~ret59#1 && select_features_#t~ret59#1 <= 2147483647;~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret59#1;havoc select_features_#t~ret59#1; {148#true} is VALID [2022-02-20 18:08:19,487 INFO L272 TraceCheckUtils]: 28: Hoare triple {148#true} call select_features_#t~ret60#1 := select_one(); {148#true} is VALID [2022-02-20 18:08:19,487 INFO L290 TraceCheckUtils]: 29: Hoare triple {148#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {148#true} is VALID [2022-02-20 18:08:19,487 INFO L290 TraceCheckUtils]: 30: Hoare triple {148#true} assume true; {148#true} is VALID [2022-02-20 18:08:19,488 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {148#true} {148#true} #373#return; {148#true} is VALID [2022-02-20 18:08:19,488 INFO L290 TraceCheckUtils]: 32: Hoare triple {148#true} assume -2147483648 <= select_features_#t~ret60#1 && select_features_#t~ret60#1 <= 2147483647;~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret60#1;havoc select_features_#t~ret60#1; {148#true} is VALID [2022-02-20 18:08:19,488 INFO L290 TraceCheckUtils]: 33: Hoare triple {148#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~13#1;havoc valid_product_~retValue_acc~13#1;valid_product_~retValue_acc~13#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~13#1; {148#true} is VALID [2022-02-20 18:08:19,488 INFO L290 TraceCheckUtils]: 34: Hoare triple {148#true} main_#t~ret24#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret24#1 && main_#t~ret24#1 <= 2147483647;main_~tmp~6#1 := main_#t~ret24#1;havoc main_#t~ret24#1; {148#true} is VALID [2022-02-20 18:08:19,488 INFO L290 TraceCheckUtils]: 35: Hoare triple {148#true} assume 0 != main_~tmp~6#1;assume { :begin_inline_setup } true; {148#true} is VALID [2022-02-20 18:08:19,489 INFO L290 TraceCheckUtils]: 36: Hoare triple {148#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0; {148#true} is VALID [2022-02-20 18:08:19,489 INFO L290 TraceCheckUtils]: 37: Hoare triple {148#true} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet25#1, test_#t~nondet26#1, test_#t~nondet27#1, test_#t~nondet28#1, test_~splverifierCounter~0#1, test_~tmp~7#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~7#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {148#true} is VALID [2022-02-20 18:08:19,491 INFO L290 TraceCheckUtils]: 38: Hoare triple {148#true} assume !true; {149#false} is VALID [2022-02-20 18:08:19,491 INFO L272 TraceCheckUtils]: 39: Hoare triple {149#false} call cleanup(); {149#false} is VALID [2022-02-20 18:08:19,491 INFO L290 TraceCheckUtils]: 40: Hoare triple {149#false} havoc ~i~0;havoc ~__cil_tmp2~0; {149#false} is VALID [2022-02-20 18:08:19,491 INFO L272 TraceCheckUtils]: 41: Hoare triple {149#false} call timeShift(); {149#false} is VALID [2022-02-20 18:08:19,492 INFO L290 TraceCheckUtils]: 42: Hoare triple {149#false} assume !(0 != ~pumpRunning~0); {149#false} is VALID [2022-02-20 18:08:19,492 INFO L290 TraceCheckUtils]: 43: Hoare triple {149#false} assume !(0 != ~systemActive~0); {149#false} is VALID [2022-02-20 18:08:19,492 INFO L290 TraceCheckUtils]: 44: Hoare triple {149#false} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret29#1, __utac_acc__Specification2_spec__2_#t~ret30#1, __utac_acc__Specification2_spec__2_~tmp~8#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~8#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {149#false} is VALID [2022-02-20 18:08:19,493 INFO L272 TraceCheckUtils]: 45: Hoare triple {149#false} call __utac_acc__Specification2_spec__2_#t~ret29#1 := isMethaneLevelCritical(); {148#true} is VALID [2022-02-20 18:08:19,493 INFO L290 TraceCheckUtils]: 46: Hoare triple {148#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {148#true} is VALID [2022-02-20 18:08:19,493 INFO L290 TraceCheckUtils]: 47: Hoare triple {148#true} assume true; {148#true} is VALID [2022-02-20 18:08:19,493 INFO L284 TraceCheckUtils]: 48: Hoare quadruple {148#true} {149#false} #361#return; {149#false} is VALID [2022-02-20 18:08:19,493 INFO L290 TraceCheckUtils]: 49: Hoare triple {149#false} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret29#1 && __utac_acc__Specification2_spec__2_#t~ret29#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~8#1 := __utac_acc__Specification2_spec__2_#t~ret29#1;havoc __utac_acc__Specification2_spec__2_#t~ret29#1; {149#false} is VALID [2022-02-20 18:08:19,494 INFO L290 TraceCheckUtils]: 50: Hoare triple {149#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~8#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~5#1;havoc isPumpRunning_~retValue_acc~5#1;isPumpRunning_~retValue_acc~5#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~5#1; {149#false} is VALID [2022-02-20 18:08:19,494 INFO L290 TraceCheckUtils]: 51: Hoare triple {149#false} __utac_acc__Specification2_spec__2_#t~ret30#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret30#1 && __utac_acc__Specification2_spec__2_#t~ret30#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret30#1;havoc __utac_acc__Specification2_spec__2_#t~ret30#1; {149#false} is VALID [2022-02-20 18:08:19,498 INFO L290 TraceCheckUtils]: 52: Hoare triple {149#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {149#false} is VALID [2022-02-20 18:08:19,498 INFO L290 TraceCheckUtils]: 53: Hoare triple {149#false} assume 0 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {149#false} is VALID [2022-02-20 18:08:19,499 INFO L290 TraceCheckUtils]: 54: Hoare triple {149#false} assume !false; {149#false} is VALID [2022-02-20 18:08:19,499 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-02-20 18:08:19,500 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:08:19,500 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [457367232] [2022-02-20 18:08:19,501 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [457367232] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:08:19,501 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:08:19,501 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-02-20 18:08:19,502 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1232974531] [2022-02-20 18:08:19,503 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:08:19,506 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 14.5) internal successors, (29), 2 states have internal predecessors, (29), 2 states have call successors, (9), 2 states have call predecessors, (9), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 55 [2022-02-20 18:08:19,508 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:08:19,511 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 2 states, 2 states have (on average 14.5) internal successors, (29), 2 states have internal predecessors, (29), 2 states have call successors, (9), 2 states have call predecessors, (9), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:08:19,555 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 45 edges. 45 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:19,555 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-02-20 18:08:19,556 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:08:19,572 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-02-20 18:08:19,573 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-02-20 18:08:19,578 INFO L87 Difference]: Start difference. First operand has 145 states, 101 states have (on average 1.3663366336633664) internal successors, (138), 117 states have internal predecessors, (138), 30 states have call successors, (30), 12 states have call predecessors, (30), 12 states have return successors, (30), 25 states have call predecessors, (30), 30 states have call successors, (30) Second operand has 2 states, 2 states have (on average 14.5) internal successors, (29), 2 states have internal predecessors, (29), 2 states have call successors, (9), 2 states have call predecessors, (9), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:08:19,754 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:19,754 INFO L93 Difference]: Finished difference Result 266 states and 370 transitions. [2022-02-20 18:08:19,755 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-02-20 18:08:19,756 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 14.5) internal successors, (29), 2 states have internal predecessors, (29), 2 states have call successors, (9), 2 states have call predecessors, (9), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 55 [2022-02-20 18:08:19,756 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:08:19,757 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2 states, 2 states have (on average 14.5) internal successors, (29), 2 states have internal predecessors, (29), 2 states have call successors, (9), 2 states have call predecessors, (9), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:08:19,778 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 370 transitions. [2022-02-20 18:08:19,779 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2 states, 2 states have (on average 14.5) internal successors, (29), 2 states have internal predecessors, (29), 2 states have call successors, (9), 2 states have call predecessors, (9), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:08:19,792 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 370 transitions. [2022-02-20 18:08:19,793 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states and 370 transitions. [2022-02-20 18:08:20,025 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 370 edges. 370 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:20,041 INFO L225 Difference]: With dead ends: 266 [2022-02-20 18:08:20,041 INFO L226 Difference]: Without dead ends: 136 [2022-02-20 18:08:20,046 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-02-20 18:08:20,049 INFO L933 BasicCegarLoop]: 192 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 192 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:08:20,050 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 192 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:08:20,063 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 136 states. [2022-02-20 18:08:20,081 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 136 to 136. [2022-02-20 18:08:20,081 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:08:20,082 INFO L82 GeneralOperation]: Start isEquivalent. First operand 136 states. Second operand has 136 states, 94 states have (on average 1.3191489361702127) internal successors, (124), 109 states have internal predecessors, (124), 30 states have call successors, (30), 12 states have call predecessors, (30), 11 states have return successors, (29), 24 states have call predecessors, (29), 29 states have call successors, (29) [2022-02-20 18:08:20,083 INFO L74 IsIncluded]: Start isIncluded. First operand 136 states. Second operand has 136 states, 94 states have (on average 1.3191489361702127) internal successors, (124), 109 states have internal predecessors, (124), 30 states have call successors, (30), 12 states have call predecessors, (30), 11 states have return successors, (29), 24 states have call predecessors, (29), 29 states have call successors, (29) [2022-02-20 18:08:20,084 INFO L87 Difference]: Start difference. First operand 136 states. Second operand has 136 states, 94 states have (on average 1.3191489361702127) internal successors, (124), 109 states have internal predecessors, (124), 30 states have call successors, (30), 12 states have call predecessors, (30), 11 states have return successors, (29), 24 states have call predecessors, (29), 29 states have call successors, (29) [2022-02-20 18:08:20,090 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:20,090 INFO L93 Difference]: Finished difference Result 136 states and 183 transitions. [2022-02-20 18:08:20,090 INFO L276 IsEmpty]: Start isEmpty. Operand 136 states and 183 transitions. [2022-02-20 18:08:20,092 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:20,093 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:20,093 INFO L74 IsIncluded]: Start isIncluded. First operand has 136 states, 94 states have (on average 1.3191489361702127) internal successors, (124), 109 states have internal predecessors, (124), 30 states have call successors, (30), 12 states have call predecessors, (30), 11 states have return successors, (29), 24 states have call predecessors, (29), 29 states have call successors, (29) Second operand 136 states. [2022-02-20 18:08:20,094 INFO L87 Difference]: Start difference. First operand has 136 states, 94 states have (on average 1.3191489361702127) internal successors, (124), 109 states have internal predecessors, (124), 30 states have call successors, (30), 12 states have call predecessors, (30), 11 states have return successors, (29), 24 states have call predecessors, (29), 29 states have call successors, (29) Second operand 136 states. [2022-02-20 18:08:20,103 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:20,103 INFO L93 Difference]: Finished difference Result 136 states and 183 transitions. [2022-02-20 18:08:20,103 INFO L276 IsEmpty]: Start isEmpty. Operand 136 states and 183 transitions. [2022-02-20 18:08:20,105 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:20,105 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:20,105 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:08:20,106 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:08:20,106 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 136 states, 94 states have (on average 1.3191489361702127) internal successors, (124), 109 states have internal predecessors, (124), 30 states have call successors, (30), 12 states have call predecessors, (30), 11 states have return successors, (29), 24 states have call predecessors, (29), 29 states have call successors, (29) [2022-02-20 18:08:20,111 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 136 states to 136 states and 183 transitions. [2022-02-20 18:08:20,112 INFO L78 Accepts]: Start accepts. Automaton has 136 states and 183 transitions. Word has length 55 [2022-02-20 18:08:20,112 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:08:20,112 INFO L470 AbstractCegarLoop]: Abstraction has 136 states and 183 transitions. [2022-02-20 18:08:20,113 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 14.5) internal successors, (29), 2 states have internal predecessors, (29), 2 states have call successors, (9), 2 states have call predecessors, (9), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:08:20,113 INFO L276 IsEmpty]: Start isEmpty. Operand 136 states and 183 transitions. [2022-02-20 18:08:20,115 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-02-20 18:08:20,115 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:08:20,115 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:08:20,115 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-02-20 18:08:20,116 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:08:20,116 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:08:20,116 INFO L85 PathProgramCache]: Analyzing trace with hash -878158854, now seen corresponding path program 1 times [2022-02-20 18:08:20,116 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:08:20,116 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [901443150] [2022-02-20 18:08:20,116 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:08:20,117 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:08:20,159 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:20,186 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-02-20 18:08:20,189 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:20,192 INFO L290 TraceCheckUtils]: 0: Hoare triple {1036#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {1036#true} is VALID [2022-02-20 18:08:20,192 INFO L290 TraceCheckUtils]: 1: Hoare triple {1036#true} assume true; {1036#true} is VALID [2022-02-20 18:08:20,192 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1036#true} {1036#true} #363#return; {1036#true} is VALID [2022-02-20 18:08:20,192 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:08:20,194 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:20,197 INFO L290 TraceCheckUtils]: 0: Hoare triple {1036#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {1036#true} is VALID [2022-02-20 18:08:20,197 INFO L290 TraceCheckUtils]: 1: Hoare triple {1036#true} assume true; {1036#true} is VALID [2022-02-20 18:08:20,197 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1036#true} {1036#true} #365#return; {1036#true} is VALID [2022-02-20 18:08:20,197 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-02-20 18:08:20,199 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:20,201 INFO L290 TraceCheckUtils]: 0: Hoare triple {1036#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {1036#true} is VALID [2022-02-20 18:08:20,202 INFO L290 TraceCheckUtils]: 1: Hoare triple {1036#true} assume true; {1036#true} is VALID [2022-02-20 18:08:20,202 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1036#true} {1036#true} #367#return; {1036#true} is VALID [2022-02-20 18:08:20,202 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:08:20,204 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:20,206 INFO L290 TraceCheckUtils]: 0: Hoare triple {1036#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {1036#true} is VALID [2022-02-20 18:08:20,207 INFO L290 TraceCheckUtils]: 1: Hoare triple {1036#true} assume true; {1036#true} is VALID [2022-02-20 18:08:20,207 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1036#true} {1036#true} #369#return; {1036#true} is VALID [2022-02-20 18:08:20,207 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-02-20 18:08:20,209 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:20,211 INFO L290 TraceCheckUtils]: 0: Hoare triple {1036#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {1036#true} is VALID [2022-02-20 18:08:20,212 INFO L290 TraceCheckUtils]: 1: Hoare triple {1036#true} assume true; {1036#true} is VALID [2022-02-20 18:08:20,212 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1036#true} {1036#true} #371#return; {1036#true} is VALID [2022-02-20 18:08:20,212 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-02-20 18:08:20,215 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:20,225 INFO L290 TraceCheckUtils]: 0: Hoare triple {1036#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {1036#true} is VALID [2022-02-20 18:08:20,225 INFO L290 TraceCheckUtils]: 1: Hoare triple {1036#true} assume true; {1036#true} is VALID [2022-02-20 18:08:20,225 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1036#true} {1036#true} #373#return; {1036#true} is VALID [2022-02-20 18:08:20,226 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2022-02-20 18:08:20,227 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:20,238 INFO L290 TraceCheckUtils]: 0: Hoare triple {1036#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {1036#true} is VALID [2022-02-20 18:08:20,238 INFO L290 TraceCheckUtils]: 1: Hoare triple {1036#true} assume true; {1036#true} is VALID [2022-02-20 18:08:20,239 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1036#true} {1037#false} #361#return; {1037#false} is VALID [2022-02-20 18:08:20,239 INFO L290 TraceCheckUtils]: 0: Hoare triple {1036#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(38, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(13, 9);call #Ultimate.allocInit(3, 10);call write~init~int(79, 10, 0, 1);call write~init~int(110, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(4, 11);call write~init~int(79, 11, 0, 1);call write~init~int(102, 11, 1, 1);call write~init~int(102, 11, 2, 1);call write~init~int(0, 11, 3, 1);call #Ultimate.allocInit(7, 12);call write~init~int(44, 12, 0, 1);call write~init~int(80, 12, 1, 1);call write~init~int(117, 12, 2, 1);call write~init~int(109, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(3, 13);call write~init~int(79, 13, 0, 1);call write~init~int(110, 13, 1, 1);call write~init~int(0, 13, 2, 1);call #Ultimate.allocInit(4, 14);call write~init~int(79, 14, 0, 1);call write~init~int(102, 14, 1, 1);call write~init~int(102, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(3, 15);call write~init~int(41, 15, 0, 1);call write~init~int(32, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(10, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~__SELECTED_FEATURE_base~0 := 0;~__SELECTED_FEATURE_highWaterSensor~0 := 0;~__SELECTED_FEATURE_lowWaterSensor~0 := 0;~__SELECTED_FEATURE_methaneQuery~0 := 0;~__SELECTED_FEATURE_methaneAlarm~0 := 0;~__SELECTED_FEATURE_stopCommand~0 := 0;~__SELECTED_FEATURE_startCommand~0 := 0;~__GUIDSL_ROOT_PRODUCTION~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4;~methAndRunningLastTime~0 := 0;~head~0.base, ~head~0.offset := 0, 0; {1036#true} is VALID [2022-02-20 18:08:20,239 INFO L290 TraceCheckUtils]: 1: Hoare triple {1036#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret24#1, main_~retValue_acc~8#1, main_~tmp~6#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~6#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1; {1036#true} is VALID [2022-02-20 18:08:20,239 INFO L290 TraceCheckUtils]: 2: Hoare triple {1036#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret55#1, select_features_#t~ret56#1, select_features_#t~ret57#1, select_features_#t~ret58#1, select_features_#t~ret59#1, select_features_#t~ret60#1;~__SELECTED_FEATURE_base~0 := 1; {1036#true} is VALID [2022-02-20 18:08:20,239 INFO L272 TraceCheckUtils]: 3: Hoare triple {1036#true} call select_features_#t~ret55#1 := select_one(); {1036#true} is VALID [2022-02-20 18:08:20,240 INFO L290 TraceCheckUtils]: 4: Hoare triple {1036#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {1036#true} is VALID [2022-02-20 18:08:20,240 INFO L290 TraceCheckUtils]: 5: Hoare triple {1036#true} assume true; {1036#true} is VALID [2022-02-20 18:08:20,240 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {1036#true} {1036#true} #363#return; {1036#true} is VALID [2022-02-20 18:08:20,240 INFO L290 TraceCheckUtils]: 7: Hoare triple {1036#true} assume -2147483648 <= select_features_#t~ret55#1 && select_features_#t~ret55#1 <= 2147483647;~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret55#1;havoc select_features_#t~ret55#1; {1036#true} is VALID [2022-02-20 18:08:20,240 INFO L272 TraceCheckUtils]: 8: Hoare triple {1036#true} call select_features_#t~ret56#1 := select_one(); {1036#true} is VALID [2022-02-20 18:08:20,240 INFO L290 TraceCheckUtils]: 9: Hoare triple {1036#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {1036#true} is VALID [2022-02-20 18:08:20,241 INFO L290 TraceCheckUtils]: 10: Hoare triple {1036#true} assume true; {1036#true} is VALID [2022-02-20 18:08:20,241 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {1036#true} {1036#true} #365#return; {1036#true} is VALID [2022-02-20 18:08:20,241 INFO L290 TraceCheckUtils]: 12: Hoare triple {1036#true} assume -2147483648 <= select_features_#t~ret56#1 && select_features_#t~ret56#1 <= 2147483647;~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret56#1;havoc select_features_#t~ret56#1; {1036#true} is VALID [2022-02-20 18:08:20,241 INFO L272 TraceCheckUtils]: 13: Hoare triple {1036#true} call select_features_#t~ret57#1 := select_one(); {1036#true} is VALID [2022-02-20 18:08:20,241 INFO L290 TraceCheckUtils]: 14: Hoare triple {1036#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {1036#true} is VALID [2022-02-20 18:08:20,241 INFO L290 TraceCheckUtils]: 15: Hoare triple {1036#true} assume true; {1036#true} is VALID [2022-02-20 18:08:20,242 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {1036#true} {1036#true} #367#return; {1036#true} is VALID [2022-02-20 18:08:20,242 INFO L290 TraceCheckUtils]: 17: Hoare triple {1036#true} assume -2147483648 <= select_features_#t~ret57#1 && select_features_#t~ret57#1 <= 2147483647;~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret57#1;havoc select_features_#t~ret57#1; {1036#true} is VALID [2022-02-20 18:08:20,242 INFO L272 TraceCheckUtils]: 18: Hoare triple {1036#true} call select_features_#t~ret58#1 := select_one(); {1036#true} is VALID [2022-02-20 18:08:20,242 INFO L290 TraceCheckUtils]: 19: Hoare triple {1036#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {1036#true} is VALID [2022-02-20 18:08:20,242 INFO L290 TraceCheckUtils]: 20: Hoare triple {1036#true} assume true; {1036#true} is VALID [2022-02-20 18:08:20,243 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {1036#true} {1036#true} #369#return; {1036#true} is VALID [2022-02-20 18:08:20,243 INFO L290 TraceCheckUtils]: 22: Hoare triple {1036#true} assume -2147483648 <= select_features_#t~ret58#1 && select_features_#t~ret58#1 <= 2147483647;~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret58#1;havoc select_features_#t~ret58#1; {1036#true} is VALID [2022-02-20 18:08:20,243 INFO L272 TraceCheckUtils]: 23: Hoare triple {1036#true} call select_features_#t~ret59#1 := select_one(); {1036#true} is VALID [2022-02-20 18:08:20,243 INFO L290 TraceCheckUtils]: 24: Hoare triple {1036#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {1036#true} is VALID [2022-02-20 18:08:20,243 INFO L290 TraceCheckUtils]: 25: Hoare triple {1036#true} assume true; {1036#true} is VALID [2022-02-20 18:08:20,244 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {1036#true} {1036#true} #371#return; {1036#true} is VALID [2022-02-20 18:08:20,244 INFO L290 TraceCheckUtils]: 27: Hoare triple {1036#true} assume -2147483648 <= select_features_#t~ret59#1 && select_features_#t~ret59#1 <= 2147483647;~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret59#1;havoc select_features_#t~ret59#1; {1036#true} is VALID [2022-02-20 18:08:20,244 INFO L272 TraceCheckUtils]: 28: Hoare triple {1036#true} call select_features_#t~ret60#1 := select_one(); {1036#true} is VALID [2022-02-20 18:08:20,244 INFO L290 TraceCheckUtils]: 29: Hoare triple {1036#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {1036#true} is VALID [2022-02-20 18:08:20,244 INFO L290 TraceCheckUtils]: 30: Hoare triple {1036#true} assume true; {1036#true} is VALID [2022-02-20 18:08:20,244 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {1036#true} {1036#true} #373#return; {1036#true} is VALID [2022-02-20 18:08:20,245 INFO L290 TraceCheckUtils]: 32: Hoare triple {1036#true} assume -2147483648 <= select_features_#t~ret60#1 && select_features_#t~ret60#1 <= 2147483647;~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret60#1;havoc select_features_#t~ret60#1; {1036#true} is VALID [2022-02-20 18:08:20,245 INFO L290 TraceCheckUtils]: 33: Hoare triple {1036#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~13#1;havoc valid_product_~retValue_acc~13#1;valid_product_~retValue_acc~13#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~13#1; {1036#true} is VALID [2022-02-20 18:08:20,245 INFO L290 TraceCheckUtils]: 34: Hoare triple {1036#true} main_#t~ret24#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret24#1 && main_#t~ret24#1 <= 2147483647;main_~tmp~6#1 := main_#t~ret24#1;havoc main_#t~ret24#1; {1036#true} is VALID [2022-02-20 18:08:20,245 INFO L290 TraceCheckUtils]: 35: Hoare triple {1036#true} assume 0 != main_~tmp~6#1;assume { :begin_inline_setup } true; {1036#true} is VALID [2022-02-20 18:08:20,245 INFO L290 TraceCheckUtils]: 36: Hoare triple {1036#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0; {1036#true} is VALID [2022-02-20 18:08:20,246 INFO L290 TraceCheckUtils]: 37: Hoare triple {1036#true} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet25#1, test_#t~nondet26#1, test_#t~nondet27#1, test_#t~nondet28#1, test_~splverifierCounter~0#1, test_~tmp~7#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~7#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {1056#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} is VALID [2022-02-20 18:08:20,246 INFO L290 TraceCheckUtils]: 38: Hoare triple {1056#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} assume !false; {1056#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} is VALID [2022-02-20 18:08:20,247 INFO L290 TraceCheckUtils]: 39: Hoare triple {1056#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} assume !(test_~splverifierCounter~0#1 < 4); {1037#false} is VALID [2022-02-20 18:08:20,247 INFO L272 TraceCheckUtils]: 40: Hoare triple {1037#false} call cleanup(); {1037#false} is VALID [2022-02-20 18:08:20,247 INFO L290 TraceCheckUtils]: 41: Hoare triple {1037#false} havoc ~i~0;havoc ~__cil_tmp2~0; {1037#false} is VALID [2022-02-20 18:08:20,247 INFO L272 TraceCheckUtils]: 42: Hoare triple {1037#false} call timeShift(); {1037#false} is VALID [2022-02-20 18:08:20,247 INFO L290 TraceCheckUtils]: 43: Hoare triple {1037#false} assume !(0 != ~pumpRunning~0); {1037#false} is VALID [2022-02-20 18:08:20,248 INFO L290 TraceCheckUtils]: 44: Hoare triple {1037#false} assume !(0 != ~systemActive~0); {1037#false} is VALID [2022-02-20 18:08:20,248 INFO L290 TraceCheckUtils]: 45: Hoare triple {1037#false} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret29#1, __utac_acc__Specification2_spec__2_#t~ret30#1, __utac_acc__Specification2_spec__2_~tmp~8#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~8#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {1037#false} is VALID [2022-02-20 18:08:20,248 INFO L272 TraceCheckUtils]: 46: Hoare triple {1037#false} call __utac_acc__Specification2_spec__2_#t~ret29#1 := isMethaneLevelCritical(); {1036#true} is VALID [2022-02-20 18:08:20,248 INFO L290 TraceCheckUtils]: 47: Hoare triple {1036#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {1036#true} is VALID [2022-02-20 18:08:20,248 INFO L290 TraceCheckUtils]: 48: Hoare triple {1036#true} assume true; {1036#true} is VALID [2022-02-20 18:08:20,249 INFO L284 TraceCheckUtils]: 49: Hoare quadruple {1036#true} {1037#false} #361#return; {1037#false} is VALID [2022-02-20 18:08:20,249 INFO L290 TraceCheckUtils]: 50: Hoare triple {1037#false} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret29#1 && __utac_acc__Specification2_spec__2_#t~ret29#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~8#1 := __utac_acc__Specification2_spec__2_#t~ret29#1;havoc __utac_acc__Specification2_spec__2_#t~ret29#1; {1037#false} is VALID [2022-02-20 18:08:20,249 INFO L290 TraceCheckUtils]: 51: Hoare triple {1037#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~8#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~5#1;havoc isPumpRunning_~retValue_acc~5#1;isPumpRunning_~retValue_acc~5#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~5#1; {1037#false} is VALID [2022-02-20 18:08:20,249 INFO L290 TraceCheckUtils]: 52: Hoare triple {1037#false} __utac_acc__Specification2_spec__2_#t~ret30#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret30#1 && __utac_acc__Specification2_spec__2_#t~ret30#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret30#1;havoc __utac_acc__Specification2_spec__2_#t~ret30#1; {1037#false} is VALID [2022-02-20 18:08:20,249 INFO L290 TraceCheckUtils]: 53: Hoare triple {1037#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {1037#false} is VALID [2022-02-20 18:08:20,249 INFO L290 TraceCheckUtils]: 54: Hoare triple {1037#false} assume 0 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {1037#false} is VALID [2022-02-20 18:08:20,250 INFO L290 TraceCheckUtils]: 55: Hoare triple {1037#false} assume !false; {1037#false} is VALID [2022-02-20 18:08:20,250 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-02-20 18:08:20,250 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:08:20,250 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [901443150] [2022-02-20 18:08:20,251 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [901443150] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:08:20,251 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:08:20,251 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-02-20 18:08:20,251 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1834670370] [2022-02-20 18:08:20,251 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:08:20,252 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (9), 2 states have call predecessors, (9), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 56 [2022-02-20 18:08:20,253 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:08:20,253 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (9), 2 states have call predecessors, (9), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:08:20,280 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 46 edges. 46 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:20,281 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-02-20 18:08:20,281 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:08:20,281 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-02-20 18:08:20,282 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:08:20,282 INFO L87 Difference]: Start difference. First operand 136 states and 183 transitions. Second operand has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (9), 2 states have call predecessors, (9), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:08:20,432 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:20,432 INFO L93 Difference]: Finished difference Result 215 states and 290 transitions. [2022-02-20 18:08:20,432 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-02-20 18:08:20,433 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (9), 2 states have call predecessors, (9), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 56 [2022-02-20 18:08:20,433 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:08:20,433 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (9), 2 states have call predecessors, (9), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:08:20,437 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 290 transitions. [2022-02-20 18:08:20,437 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (9), 2 states have call predecessors, (9), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:08:20,441 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 290 transitions. [2022-02-20 18:08:20,441 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 290 transitions. [2022-02-20 18:08:20,620 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 290 edges. 290 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:20,622 INFO L225 Difference]: With dead ends: 215 [2022-02-20 18:08:20,622 INFO L226 Difference]: Without dead ends: 127 [2022-02-20 18:08:20,623 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:08:20,624 INFO L933 BasicCegarLoop]: 170 mSDtfsCounter, 21 mSDsluCounter, 144 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 25 SdHoareTripleChecker+Valid, 314 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:08:20,624 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [25 Valid, 314 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:08:20,625 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 127 states. [2022-02-20 18:08:20,630 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 127 to 127. [2022-02-20 18:08:20,631 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:08:20,631 INFO L82 GeneralOperation]: Start isEquivalent. First operand 127 states. Second operand has 127 states, 88 states have (on average 1.3295454545454546) internal successors, (117), 103 states have internal predecessors, (117), 27 states have call successors, (27), 11 states have call predecessors, (27), 11 states have return successors, (27), 22 states have call predecessors, (27), 27 states have call successors, (27) [2022-02-20 18:08:20,632 INFO L74 IsIncluded]: Start isIncluded. First operand 127 states. Second operand has 127 states, 88 states have (on average 1.3295454545454546) internal successors, (117), 103 states have internal predecessors, (117), 27 states have call successors, (27), 11 states have call predecessors, (27), 11 states have return successors, (27), 22 states have call predecessors, (27), 27 states have call successors, (27) [2022-02-20 18:08:20,632 INFO L87 Difference]: Start difference. First operand 127 states. Second operand has 127 states, 88 states have (on average 1.3295454545454546) internal successors, (117), 103 states have internal predecessors, (117), 27 states have call successors, (27), 11 states have call predecessors, (27), 11 states have return successors, (27), 22 states have call predecessors, (27), 27 states have call successors, (27) [2022-02-20 18:08:20,636 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:20,636 INFO L93 Difference]: Finished difference Result 127 states and 171 transitions. [2022-02-20 18:08:20,636 INFO L276 IsEmpty]: Start isEmpty. Operand 127 states and 171 transitions. [2022-02-20 18:08:20,637 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:20,637 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:20,638 INFO L74 IsIncluded]: Start isIncluded. First operand has 127 states, 88 states have (on average 1.3295454545454546) internal successors, (117), 103 states have internal predecessors, (117), 27 states have call successors, (27), 11 states have call predecessors, (27), 11 states have return successors, (27), 22 states have call predecessors, (27), 27 states have call successors, (27) Second operand 127 states. [2022-02-20 18:08:20,638 INFO L87 Difference]: Start difference. First operand has 127 states, 88 states have (on average 1.3295454545454546) internal successors, (117), 103 states have internal predecessors, (117), 27 states have call successors, (27), 11 states have call predecessors, (27), 11 states have return successors, (27), 22 states have call predecessors, (27), 27 states have call successors, (27) Second operand 127 states. [2022-02-20 18:08:20,642 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:20,642 INFO L93 Difference]: Finished difference Result 127 states and 171 transitions. [2022-02-20 18:08:20,642 INFO L276 IsEmpty]: Start isEmpty. Operand 127 states and 171 transitions. [2022-02-20 18:08:20,643 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:20,643 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:20,643 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:08:20,643 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:08:20,643 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 127 states, 88 states have (on average 1.3295454545454546) internal successors, (117), 103 states have internal predecessors, (117), 27 states have call successors, (27), 11 states have call predecessors, (27), 11 states have return successors, (27), 22 states have call predecessors, (27), 27 states have call successors, (27) [2022-02-20 18:08:20,647 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 127 states to 127 states and 171 transitions. [2022-02-20 18:08:20,647 INFO L78 Accepts]: Start accepts. Automaton has 127 states and 171 transitions. Word has length 56 [2022-02-20 18:08:20,647 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:08:20,647 INFO L470 AbstractCegarLoop]: Abstraction has 127 states and 171 transitions. [2022-02-20 18:08:20,647 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (9), 2 states have call predecessors, (9), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:08:20,648 INFO L276 IsEmpty]: Start isEmpty. Operand 127 states and 171 transitions. [2022-02-20 18:08:20,648 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2022-02-20 18:08:20,648 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:08:20,649 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:08:20,649 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-02-20 18:08:20,649 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:08:20,649 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:08:20,649 INFO L85 PathProgramCache]: Analyzing trace with hash -696247410, now seen corresponding path program 1 times [2022-02-20 18:08:20,649 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:08:20,649 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2102711713] [2022-02-20 18:08:20,650 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:08:20,650 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:08:20,676 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:20,704 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-02-20 18:08:20,708 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:20,711 INFO L290 TraceCheckUtils]: 0: Hoare triple {1819#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {1819#true} is VALID [2022-02-20 18:08:20,712 INFO L290 TraceCheckUtils]: 1: Hoare triple {1819#true} assume true; {1819#true} is VALID [2022-02-20 18:08:20,712 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1819#true} {1821#(= 1 ~systemActive~0)} #363#return; {1821#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:20,712 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:08:20,714 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:20,717 INFO L290 TraceCheckUtils]: 0: Hoare triple {1819#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {1819#true} is VALID [2022-02-20 18:08:20,717 INFO L290 TraceCheckUtils]: 1: Hoare triple {1819#true} assume true; {1819#true} is VALID [2022-02-20 18:08:20,718 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1819#true} {1821#(= 1 ~systemActive~0)} #365#return; {1821#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:20,718 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-02-20 18:08:20,720 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:20,722 INFO L290 TraceCheckUtils]: 0: Hoare triple {1819#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {1819#true} is VALID [2022-02-20 18:08:20,722 INFO L290 TraceCheckUtils]: 1: Hoare triple {1819#true} assume true; {1819#true} is VALID [2022-02-20 18:08:20,723 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1819#true} {1821#(= 1 ~systemActive~0)} #367#return; {1821#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:20,723 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:08:20,725 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:20,727 INFO L290 TraceCheckUtils]: 0: Hoare triple {1819#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {1819#true} is VALID [2022-02-20 18:08:20,728 INFO L290 TraceCheckUtils]: 1: Hoare triple {1819#true} assume true; {1819#true} is VALID [2022-02-20 18:08:20,728 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1819#true} {1821#(= 1 ~systemActive~0)} #369#return; {1821#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:20,728 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-02-20 18:08:20,731 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:20,735 INFO L290 TraceCheckUtils]: 0: Hoare triple {1819#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {1819#true} is VALID [2022-02-20 18:08:20,736 INFO L290 TraceCheckUtils]: 1: Hoare triple {1819#true} assume true; {1819#true} is VALID [2022-02-20 18:08:20,736 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1819#true} {1821#(= 1 ~systemActive~0)} #371#return; {1821#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:20,736 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-02-20 18:08:20,739 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:20,743 INFO L290 TraceCheckUtils]: 0: Hoare triple {1819#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {1819#true} is VALID [2022-02-20 18:08:20,744 INFO L290 TraceCheckUtils]: 1: Hoare triple {1819#true} assume true; {1819#true} is VALID [2022-02-20 18:08:20,744 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1819#true} {1821#(= 1 ~systemActive~0)} #373#return; {1821#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:20,744 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2022-02-20 18:08:20,745 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:20,747 INFO L290 TraceCheckUtils]: 0: Hoare triple {1819#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {1819#true} is VALID [2022-02-20 18:08:20,748 INFO L290 TraceCheckUtils]: 1: Hoare triple {1819#true} assume true; {1819#true} is VALID [2022-02-20 18:08:20,748 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1819#true} {1820#false} #361#return; {1820#false} is VALID [2022-02-20 18:08:20,750 INFO L290 TraceCheckUtils]: 0: Hoare triple {1819#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(38, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(13, 9);call #Ultimate.allocInit(3, 10);call write~init~int(79, 10, 0, 1);call write~init~int(110, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(4, 11);call write~init~int(79, 11, 0, 1);call write~init~int(102, 11, 1, 1);call write~init~int(102, 11, 2, 1);call write~init~int(0, 11, 3, 1);call #Ultimate.allocInit(7, 12);call write~init~int(44, 12, 0, 1);call write~init~int(80, 12, 1, 1);call write~init~int(117, 12, 2, 1);call write~init~int(109, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(3, 13);call write~init~int(79, 13, 0, 1);call write~init~int(110, 13, 1, 1);call write~init~int(0, 13, 2, 1);call #Ultimate.allocInit(4, 14);call write~init~int(79, 14, 0, 1);call write~init~int(102, 14, 1, 1);call write~init~int(102, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(3, 15);call write~init~int(41, 15, 0, 1);call write~init~int(32, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(10, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~__SELECTED_FEATURE_base~0 := 0;~__SELECTED_FEATURE_highWaterSensor~0 := 0;~__SELECTED_FEATURE_lowWaterSensor~0 := 0;~__SELECTED_FEATURE_methaneQuery~0 := 0;~__SELECTED_FEATURE_methaneAlarm~0 := 0;~__SELECTED_FEATURE_stopCommand~0 := 0;~__SELECTED_FEATURE_startCommand~0 := 0;~__GUIDSL_ROOT_PRODUCTION~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4;~methAndRunningLastTime~0 := 0;~head~0.base, ~head~0.offset := 0, 0; {1821#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:20,750 INFO L290 TraceCheckUtils]: 1: Hoare triple {1821#(= 1 ~systemActive~0)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret24#1, main_~retValue_acc~8#1, main_~tmp~6#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~6#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1; {1821#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:20,750 INFO L290 TraceCheckUtils]: 2: Hoare triple {1821#(= 1 ~systemActive~0)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret55#1, select_features_#t~ret56#1, select_features_#t~ret57#1, select_features_#t~ret58#1, select_features_#t~ret59#1, select_features_#t~ret60#1;~__SELECTED_FEATURE_base~0 := 1; {1821#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:20,751 INFO L272 TraceCheckUtils]: 3: Hoare triple {1821#(= 1 ~systemActive~0)} call select_features_#t~ret55#1 := select_one(); {1819#true} is VALID [2022-02-20 18:08:20,751 INFO L290 TraceCheckUtils]: 4: Hoare triple {1819#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {1819#true} is VALID [2022-02-20 18:08:20,751 INFO L290 TraceCheckUtils]: 5: Hoare triple {1819#true} assume true; {1819#true} is VALID [2022-02-20 18:08:20,751 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {1819#true} {1821#(= 1 ~systemActive~0)} #363#return; {1821#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:20,752 INFO L290 TraceCheckUtils]: 7: Hoare triple {1821#(= 1 ~systemActive~0)} assume -2147483648 <= select_features_#t~ret55#1 && select_features_#t~ret55#1 <= 2147483647;~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret55#1;havoc select_features_#t~ret55#1; {1821#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:20,752 INFO L272 TraceCheckUtils]: 8: Hoare triple {1821#(= 1 ~systemActive~0)} call select_features_#t~ret56#1 := select_one(); {1819#true} is VALID [2022-02-20 18:08:20,752 INFO L290 TraceCheckUtils]: 9: Hoare triple {1819#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {1819#true} is VALID [2022-02-20 18:08:20,752 INFO L290 TraceCheckUtils]: 10: Hoare triple {1819#true} assume true; {1819#true} is VALID [2022-02-20 18:08:20,753 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {1819#true} {1821#(= 1 ~systemActive~0)} #365#return; {1821#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:20,753 INFO L290 TraceCheckUtils]: 12: Hoare triple {1821#(= 1 ~systemActive~0)} assume -2147483648 <= select_features_#t~ret56#1 && select_features_#t~ret56#1 <= 2147483647;~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret56#1;havoc select_features_#t~ret56#1; {1821#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:20,753 INFO L272 TraceCheckUtils]: 13: Hoare triple {1821#(= 1 ~systemActive~0)} call select_features_#t~ret57#1 := select_one(); {1819#true} is VALID [2022-02-20 18:08:20,754 INFO L290 TraceCheckUtils]: 14: Hoare triple {1819#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {1819#true} is VALID [2022-02-20 18:08:20,754 INFO L290 TraceCheckUtils]: 15: Hoare triple {1819#true} assume true; {1819#true} is VALID [2022-02-20 18:08:20,754 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {1819#true} {1821#(= 1 ~systemActive~0)} #367#return; {1821#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:20,755 INFO L290 TraceCheckUtils]: 17: Hoare triple {1821#(= 1 ~systemActive~0)} assume -2147483648 <= select_features_#t~ret57#1 && select_features_#t~ret57#1 <= 2147483647;~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret57#1;havoc select_features_#t~ret57#1; {1821#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:20,755 INFO L272 TraceCheckUtils]: 18: Hoare triple {1821#(= 1 ~systemActive~0)} call select_features_#t~ret58#1 := select_one(); {1819#true} is VALID [2022-02-20 18:08:20,755 INFO L290 TraceCheckUtils]: 19: Hoare triple {1819#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {1819#true} is VALID [2022-02-20 18:08:20,755 INFO L290 TraceCheckUtils]: 20: Hoare triple {1819#true} assume true; {1819#true} is VALID [2022-02-20 18:08:20,755 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {1819#true} {1821#(= 1 ~systemActive~0)} #369#return; {1821#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:20,756 INFO L290 TraceCheckUtils]: 22: Hoare triple {1821#(= 1 ~systemActive~0)} assume -2147483648 <= select_features_#t~ret58#1 && select_features_#t~ret58#1 <= 2147483647;~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret58#1;havoc select_features_#t~ret58#1; {1821#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:20,756 INFO L272 TraceCheckUtils]: 23: Hoare triple {1821#(= 1 ~systemActive~0)} call select_features_#t~ret59#1 := select_one(); {1819#true} is VALID [2022-02-20 18:08:20,756 INFO L290 TraceCheckUtils]: 24: Hoare triple {1819#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {1819#true} is VALID [2022-02-20 18:08:20,756 INFO L290 TraceCheckUtils]: 25: Hoare triple {1819#true} assume true; {1819#true} is VALID [2022-02-20 18:08:20,757 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {1819#true} {1821#(= 1 ~systemActive~0)} #371#return; {1821#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:20,757 INFO L290 TraceCheckUtils]: 27: Hoare triple {1821#(= 1 ~systemActive~0)} assume -2147483648 <= select_features_#t~ret59#1 && select_features_#t~ret59#1 <= 2147483647;~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret59#1;havoc select_features_#t~ret59#1; {1821#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:20,757 INFO L272 TraceCheckUtils]: 28: Hoare triple {1821#(= 1 ~systemActive~0)} call select_features_#t~ret60#1 := select_one(); {1819#true} is VALID [2022-02-20 18:08:20,758 INFO L290 TraceCheckUtils]: 29: Hoare triple {1819#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {1819#true} is VALID [2022-02-20 18:08:20,758 INFO L290 TraceCheckUtils]: 30: Hoare triple {1819#true} assume true; {1819#true} is VALID [2022-02-20 18:08:20,758 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {1819#true} {1821#(= 1 ~systemActive~0)} #373#return; {1821#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:20,759 INFO L290 TraceCheckUtils]: 32: Hoare triple {1821#(= 1 ~systemActive~0)} assume -2147483648 <= select_features_#t~ret60#1 && select_features_#t~ret60#1 <= 2147483647;~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret60#1;havoc select_features_#t~ret60#1; {1821#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:20,759 INFO L290 TraceCheckUtils]: 33: Hoare triple {1821#(= 1 ~systemActive~0)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~13#1;havoc valid_product_~retValue_acc~13#1;valid_product_~retValue_acc~13#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~13#1; {1821#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:20,759 INFO L290 TraceCheckUtils]: 34: Hoare triple {1821#(= 1 ~systemActive~0)} main_#t~ret24#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret24#1 && main_#t~ret24#1 <= 2147483647;main_~tmp~6#1 := main_#t~ret24#1;havoc main_#t~ret24#1; {1821#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:20,760 INFO L290 TraceCheckUtils]: 35: Hoare triple {1821#(= 1 ~systemActive~0)} assume 0 != main_~tmp~6#1;assume { :begin_inline_setup } true; {1821#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:20,760 INFO L290 TraceCheckUtils]: 36: Hoare triple {1821#(= 1 ~systemActive~0)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0; {1821#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:20,760 INFO L290 TraceCheckUtils]: 37: Hoare triple {1821#(= 1 ~systemActive~0)} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet25#1, test_#t~nondet26#1, test_#t~nondet27#1, test_#t~nondet28#1, test_~splverifierCounter~0#1, test_~tmp~7#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~7#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {1821#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:20,761 INFO L290 TraceCheckUtils]: 38: Hoare triple {1821#(= 1 ~systemActive~0)} assume !false; {1821#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:20,761 INFO L290 TraceCheckUtils]: 39: Hoare triple {1821#(= 1 ~systemActive~0)} assume test_~splverifierCounter~0#1 < 4; {1821#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:20,762 INFO L290 TraceCheckUtils]: 40: Hoare triple {1821#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet25#1 && test_#t~nondet25#1 <= 2147483647;test_~tmp~7#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {1821#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:20,762 INFO L290 TraceCheckUtils]: 41: Hoare triple {1821#(= 1 ~systemActive~0)} assume !(0 != test_~tmp~7#1); {1821#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:20,762 INFO L290 TraceCheckUtils]: 42: Hoare triple {1821#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {1821#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:20,763 INFO L290 TraceCheckUtils]: 43: Hoare triple {1821#(= 1 ~systemActive~0)} assume !(0 != test_~tmp___0~2#1); {1821#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:20,763 INFO L290 TraceCheckUtils]: 44: Hoare triple {1821#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {1821#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:20,764 INFO L290 TraceCheckUtils]: 45: Hoare triple {1821#(= 1 ~systemActive~0)} assume 0 != test_~tmp___2~0#1; {1821#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:20,764 INFO L290 TraceCheckUtils]: 46: Hoare triple {1821#(= 1 ~systemActive~0)} assume !(0 != ~__SELECTED_FEATURE_startCommand~0); {1821#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:20,764 INFO L272 TraceCheckUtils]: 47: Hoare triple {1821#(= 1 ~systemActive~0)} call timeShift(); {1821#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:20,765 INFO L290 TraceCheckUtils]: 48: Hoare triple {1821#(= 1 ~systemActive~0)} assume !(0 != ~pumpRunning~0); {1821#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:20,765 INFO L290 TraceCheckUtils]: 49: Hoare triple {1821#(= 1 ~systemActive~0)} assume !(0 != ~systemActive~0); {1820#false} is VALID [2022-02-20 18:08:20,765 INFO L290 TraceCheckUtils]: 50: Hoare triple {1820#false} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret29#1, __utac_acc__Specification2_spec__2_#t~ret30#1, __utac_acc__Specification2_spec__2_~tmp~8#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~8#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {1820#false} is VALID [2022-02-20 18:08:20,765 INFO L272 TraceCheckUtils]: 51: Hoare triple {1820#false} call __utac_acc__Specification2_spec__2_#t~ret29#1 := isMethaneLevelCritical(); {1819#true} is VALID [2022-02-20 18:08:20,765 INFO L290 TraceCheckUtils]: 52: Hoare triple {1819#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {1819#true} is VALID [2022-02-20 18:08:20,766 INFO L290 TraceCheckUtils]: 53: Hoare triple {1819#true} assume true; {1819#true} is VALID [2022-02-20 18:08:20,766 INFO L284 TraceCheckUtils]: 54: Hoare quadruple {1819#true} {1820#false} #361#return; {1820#false} is VALID [2022-02-20 18:08:20,766 INFO L290 TraceCheckUtils]: 55: Hoare triple {1820#false} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret29#1 && __utac_acc__Specification2_spec__2_#t~ret29#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~8#1 := __utac_acc__Specification2_spec__2_#t~ret29#1;havoc __utac_acc__Specification2_spec__2_#t~ret29#1; {1820#false} is VALID [2022-02-20 18:08:20,766 INFO L290 TraceCheckUtils]: 56: Hoare triple {1820#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~8#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~5#1;havoc isPumpRunning_~retValue_acc~5#1;isPumpRunning_~retValue_acc~5#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~5#1; {1820#false} is VALID [2022-02-20 18:08:20,766 INFO L290 TraceCheckUtils]: 57: Hoare triple {1820#false} __utac_acc__Specification2_spec__2_#t~ret30#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret30#1 && __utac_acc__Specification2_spec__2_#t~ret30#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret30#1;havoc __utac_acc__Specification2_spec__2_#t~ret30#1; {1820#false} is VALID [2022-02-20 18:08:20,766 INFO L290 TraceCheckUtils]: 58: Hoare triple {1820#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {1820#false} is VALID [2022-02-20 18:08:20,767 INFO L290 TraceCheckUtils]: 59: Hoare triple {1820#false} assume 0 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {1820#false} is VALID [2022-02-20 18:08:20,767 INFO L290 TraceCheckUtils]: 60: Hoare triple {1820#false} assume !false; {1820#false} is VALID [2022-02-20 18:08:20,767 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-02-20 18:08:20,767 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:08:20,768 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2102711713] [2022-02-20 18:08:20,768 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2102711713] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:08:20,768 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:08:20,768 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-02-20 18:08:20,768 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1268078375] [2022-02-20 18:08:20,768 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:08:20,769 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 12.0) internal successors, (36), 3 states have internal predecessors, (36), 2 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 61 [2022-02-20 18:08:20,769 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:08:20,769 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 3 states, 3 states have (on average 12.0) internal successors, (36), 3 states have internal predecessors, (36), 2 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:08:20,799 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 51 edges. 51 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:20,799 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-02-20 18:08:20,799 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:08:20,800 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-02-20 18:08:20,800 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:08:20,800 INFO L87 Difference]: Start difference. First operand 127 states and 171 transitions. Second operand has 3 states, 3 states have (on average 12.0) internal successors, (36), 3 states have internal predecessors, (36), 2 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:08:21,081 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:21,081 INFO L93 Difference]: Finished difference Result 333 states and 456 transitions. [2022-02-20 18:08:21,082 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-02-20 18:08:21,082 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 12.0) internal successors, (36), 3 states have internal predecessors, (36), 2 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 61 [2022-02-20 18:08:21,082 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:08:21,082 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 12.0) internal successors, (36), 3 states have internal predecessors, (36), 2 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:08:21,088 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 456 transitions. [2022-02-20 18:08:21,089 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 12.0) internal successors, (36), 3 states have internal predecessors, (36), 2 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:08:21,094 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 456 transitions. [2022-02-20 18:08:21,095 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 456 transitions. [2022-02-20 18:08:21,376 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 456 edges. 456 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:21,381 INFO L225 Difference]: With dead ends: 333 [2022-02-20 18:08:21,381 INFO L226 Difference]: Without dead ends: 229 [2022-02-20 18:08:21,382 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 15 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:08:21,383 INFO L933 BasicCegarLoop]: 210 mSDtfsCounter, 136 mSDsluCounter, 138 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 136 SdHoareTripleChecker+Valid, 348 SdHoareTripleChecker+Invalid, 6 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:08:21,383 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [136 Valid, 348 Invalid, 6 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:08:21,384 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 229 states. [2022-02-20 18:08:21,395 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 229 to 226. [2022-02-20 18:08:21,395 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:08:21,396 INFO L82 GeneralOperation]: Start isEquivalent. First operand 229 states. Second operand has 226 states, 156 states have (on average 1.3653846153846154) internal successors, (213), 185 states have internal predecessors, (213), 48 states have call successors, (48), 21 states have call predecessors, (48), 21 states have return successors, (48), 37 states have call predecessors, (48), 48 states have call successors, (48) [2022-02-20 18:08:21,396 INFO L74 IsIncluded]: Start isIncluded. First operand 229 states. Second operand has 226 states, 156 states have (on average 1.3653846153846154) internal successors, (213), 185 states have internal predecessors, (213), 48 states have call successors, (48), 21 states have call predecessors, (48), 21 states have return successors, (48), 37 states have call predecessors, (48), 48 states have call successors, (48) [2022-02-20 18:08:21,397 INFO L87 Difference]: Start difference. First operand 229 states. Second operand has 226 states, 156 states have (on average 1.3653846153846154) internal successors, (213), 185 states have internal predecessors, (213), 48 states have call successors, (48), 21 states have call predecessors, (48), 21 states have return successors, (48), 37 states have call predecessors, (48), 48 states have call successors, (48) [2022-02-20 18:08:21,403 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:21,404 INFO L93 Difference]: Finished difference Result 229 states and 311 transitions. [2022-02-20 18:08:21,404 INFO L276 IsEmpty]: Start isEmpty. Operand 229 states and 311 transitions. [2022-02-20 18:08:21,405 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:21,405 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:21,405 INFO L74 IsIncluded]: Start isIncluded. First operand has 226 states, 156 states have (on average 1.3653846153846154) internal successors, (213), 185 states have internal predecessors, (213), 48 states have call successors, (48), 21 states have call predecessors, (48), 21 states have return successors, (48), 37 states have call predecessors, (48), 48 states have call successors, (48) Second operand 229 states. [2022-02-20 18:08:21,406 INFO L87 Difference]: Start difference. First operand has 226 states, 156 states have (on average 1.3653846153846154) internal successors, (213), 185 states have internal predecessors, (213), 48 states have call successors, (48), 21 states have call predecessors, (48), 21 states have return successors, (48), 37 states have call predecessors, (48), 48 states have call successors, (48) Second operand 229 states. [2022-02-20 18:08:21,412 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:21,415 INFO L93 Difference]: Finished difference Result 229 states and 311 transitions. [2022-02-20 18:08:21,415 INFO L276 IsEmpty]: Start isEmpty. Operand 229 states and 311 transitions. [2022-02-20 18:08:21,416 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:21,416 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:21,416 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:08:21,416 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:08:21,417 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 226 states, 156 states have (on average 1.3653846153846154) internal successors, (213), 185 states have internal predecessors, (213), 48 states have call successors, (48), 21 states have call predecessors, (48), 21 states have return successors, (48), 37 states have call predecessors, (48), 48 states have call successors, (48) [2022-02-20 18:08:21,423 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 226 states to 226 states and 309 transitions. [2022-02-20 18:08:21,424 INFO L78 Accepts]: Start accepts. Automaton has 226 states and 309 transitions. Word has length 61 [2022-02-20 18:08:21,424 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:08:21,424 INFO L470 AbstractCegarLoop]: Abstraction has 226 states and 309 transitions. [2022-02-20 18:08:21,424 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 12.0) internal successors, (36), 3 states have internal predecessors, (36), 2 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:08:21,425 INFO L276 IsEmpty]: Start isEmpty. Operand 226 states and 309 transitions. [2022-02-20 18:08:21,426 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2022-02-20 18:08:21,426 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:08:21,426 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:08:21,426 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-02-20 18:08:21,426 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:08:21,427 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:08:21,427 INFO L85 PathProgramCache]: Analyzing trace with hash 1929049426, now seen corresponding path program 1 times [2022-02-20 18:08:21,427 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:08:21,427 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [762455919] [2022-02-20 18:08:21,427 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:08:21,427 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:08:21,460 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:21,518 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-02-20 18:08:21,520 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:21,524 INFO L290 TraceCheckUtils]: 0: Hoare triple {3117#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {3117#true} is VALID [2022-02-20 18:08:21,524 INFO L290 TraceCheckUtils]: 1: Hoare triple {3117#true} assume true; {3117#true} is VALID [2022-02-20 18:08:21,525 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {3117#true} {3119#(= ~pumpRunning~0 0)} #363#return; {3119#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:21,525 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:08:21,531 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:21,534 INFO L290 TraceCheckUtils]: 0: Hoare triple {3117#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {3117#true} is VALID [2022-02-20 18:08:21,535 INFO L290 TraceCheckUtils]: 1: Hoare triple {3117#true} assume true; {3117#true} is VALID [2022-02-20 18:08:21,535 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {3117#true} {3119#(= ~pumpRunning~0 0)} #365#return; {3119#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:21,535 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-02-20 18:08:21,540 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:21,544 INFO L290 TraceCheckUtils]: 0: Hoare triple {3117#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {3117#true} is VALID [2022-02-20 18:08:21,545 INFO L290 TraceCheckUtils]: 1: Hoare triple {3117#true} assume true; {3117#true} is VALID [2022-02-20 18:08:21,545 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {3117#true} {3119#(= ~pumpRunning~0 0)} #367#return; {3119#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:21,545 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:08:21,549 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:21,556 INFO L290 TraceCheckUtils]: 0: Hoare triple {3117#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {3117#true} is VALID [2022-02-20 18:08:21,557 INFO L290 TraceCheckUtils]: 1: Hoare triple {3117#true} assume true; {3117#true} is VALID [2022-02-20 18:08:21,557 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {3117#true} {3119#(= ~pumpRunning~0 0)} #369#return; {3119#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:21,557 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-02-20 18:08:21,559 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:21,580 INFO L290 TraceCheckUtils]: 0: Hoare triple {3117#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {3117#true} is VALID [2022-02-20 18:08:21,580 INFO L290 TraceCheckUtils]: 1: Hoare triple {3117#true} assume true; {3117#true} is VALID [2022-02-20 18:08:21,581 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {3117#true} {3119#(= ~pumpRunning~0 0)} #371#return; {3119#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:21,581 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-02-20 18:08:21,583 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:21,585 INFO L290 TraceCheckUtils]: 0: Hoare triple {3117#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {3117#true} is VALID [2022-02-20 18:08:21,585 INFO L290 TraceCheckUtils]: 1: Hoare triple {3117#true} assume true; {3117#true} is VALID [2022-02-20 18:08:21,586 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {3117#true} {3119#(= ~pumpRunning~0 0)} #373#return; {3119#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:21,586 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2022-02-20 18:08:21,587 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:21,588 INFO L290 TraceCheckUtils]: 0: Hoare triple {3117#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {3117#true} is VALID [2022-02-20 18:08:21,588 INFO L290 TraceCheckUtils]: 1: Hoare triple {3117#true} assume true; {3117#true} is VALID [2022-02-20 18:08:21,589 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {3117#true} {3119#(= ~pumpRunning~0 0)} #361#return; {3119#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:21,589 INFO L290 TraceCheckUtils]: 0: Hoare triple {3117#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(38, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(13, 9);call #Ultimate.allocInit(3, 10);call write~init~int(79, 10, 0, 1);call write~init~int(110, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(4, 11);call write~init~int(79, 11, 0, 1);call write~init~int(102, 11, 1, 1);call write~init~int(102, 11, 2, 1);call write~init~int(0, 11, 3, 1);call #Ultimate.allocInit(7, 12);call write~init~int(44, 12, 0, 1);call write~init~int(80, 12, 1, 1);call write~init~int(117, 12, 2, 1);call write~init~int(109, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(3, 13);call write~init~int(79, 13, 0, 1);call write~init~int(110, 13, 1, 1);call write~init~int(0, 13, 2, 1);call #Ultimate.allocInit(4, 14);call write~init~int(79, 14, 0, 1);call write~init~int(102, 14, 1, 1);call write~init~int(102, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(3, 15);call write~init~int(41, 15, 0, 1);call write~init~int(32, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(10, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~__SELECTED_FEATURE_base~0 := 0;~__SELECTED_FEATURE_highWaterSensor~0 := 0;~__SELECTED_FEATURE_lowWaterSensor~0 := 0;~__SELECTED_FEATURE_methaneQuery~0 := 0;~__SELECTED_FEATURE_methaneAlarm~0 := 0;~__SELECTED_FEATURE_stopCommand~0 := 0;~__SELECTED_FEATURE_startCommand~0 := 0;~__GUIDSL_ROOT_PRODUCTION~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4;~methAndRunningLastTime~0 := 0;~head~0.base, ~head~0.offset := 0, 0; {3119#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:21,590 INFO L290 TraceCheckUtils]: 1: Hoare triple {3119#(= ~pumpRunning~0 0)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret24#1, main_~retValue_acc~8#1, main_~tmp~6#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~6#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1; {3119#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:21,590 INFO L290 TraceCheckUtils]: 2: Hoare triple {3119#(= ~pumpRunning~0 0)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret55#1, select_features_#t~ret56#1, select_features_#t~ret57#1, select_features_#t~ret58#1, select_features_#t~ret59#1, select_features_#t~ret60#1;~__SELECTED_FEATURE_base~0 := 1; {3119#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:21,590 INFO L272 TraceCheckUtils]: 3: Hoare triple {3119#(= ~pumpRunning~0 0)} call select_features_#t~ret55#1 := select_one(); {3117#true} is VALID [2022-02-20 18:08:21,590 INFO L290 TraceCheckUtils]: 4: Hoare triple {3117#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {3117#true} is VALID [2022-02-20 18:08:21,590 INFO L290 TraceCheckUtils]: 5: Hoare triple {3117#true} assume true; {3117#true} is VALID [2022-02-20 18:08:21,591 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {3117#true} {3119#(= ~pumpRunning~0 0)} #363#return; {3119#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:21,591 INFO L290 TraceCheckUtils]: 7: Hoare triple {3119#(= ~pumpRunning~0 0)} assume -2147483648 <= select_features_#t~ret55#1 && select_features_#t~ret55#1 <= 2147483647;~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret55#1;havoc select_features_#t~ret55#1; {3119#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:21,591 INFO L272 TraceCheckUtils]: 8: Hoare triple {3119#(= ~pumpRunning~0 0)} call select_features_#t~ret56#1 := select_one(); {3117#true} is VALID [2022-02-20 18:08:21,591 INFO L290 TraceCheckUtils]: 9: Hoare triple {3117#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {3117#true} is VALID [2022-02-20 18:08:21,591 INFO L290 TraceCheckUtils]: 10: Hoare triple {3117#true} assume true; {3117#true} is VALID [2022-02-20 18:08:21,592 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {3117#true} {3119#(= ~pumpRunning~0 0)} #365#return; {3119#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:21,592 INFO L290 TraceCheckUtils]: 12: Hoare triple {3119#(= ~pumpRunning~0 0)} assume -2147483648 <= select_features_#t~ret56#1 && select_features_#t~ret56#1 <= 2147483647;~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret56#1;havoc select_features_#t~ret56#1; {3119#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:21,592 INFO L272 TraceCheckUtils]: 13: Hoare triple {3119#(= ~pumpRunning~0 0)} call select_features_#t~ret57#1 := select_one(); {3117#true} is VALID [2022-02-20 18:08:21,592 INFO L290 TraceCheckUtils]: 14: Hoare triple {3117#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {3117#true} is VALID [2022-02-20 18:08:21,593 INFO L290 TraceCheckUtils]: 15: Hoare triple {3117#true} assume true; {3117#true} is VALID [2022-02-20 18:08:21,593 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {3117#true} {3119#(= ~pumpRunning~0 0)} #367#return; {3119#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:21,593 INFO L290 TraceCheckUtils]: 17: Hoare triple {3119#(= ~pumpRunning~0 0)} assume -2147483648 <= select_features_#t~ret57#1 && select_features_#t~ret57#1 <= 2147483647;~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret57#1;havoc select_features_#t~ret57#1; {3119#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:21,593 INFO L272 TraceCheckUtils]: 18: Hoare triple {3119#(= ~pumpRunning~0 0)} call select_features_#t~ret58#1 := select_one(); {3117#true} is VALID [2022-02-20 18:08:21,594 INFO L290 TraceCheckUtils]: 19: Hoare triple {3117#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {3117#true} is VALID [2022-02-20 18:08:21,594 INFO L290 TraceCheckUtils]: 20: Hoare triple {3117#true} assume true; {3117#true} is VALID [2022-02-20 18:08:21,594 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {3117#true} {3119#(= ~pumpRunning~0 0)} #369#return; {3119#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:21,594 INFO L290 TraceCheckUtils]: 22: Hoare triple {3119#(= ~pumpRunning~0 0)} assume -2147483648 <= select_features_#t~ret58#1 && select_features_#t~ret58#1 <= 2147483647;~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret58#1;havoc select_features_#t~ret58#1; {3119#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:21,595 INFO L272 TraceCheckUtils]: 23: Hoare triple {3119#(= ~pumpRunning~0 0)} call select_features_#t~ret59#1 := select_one(); {3117#true} is VALID [2022-02-20 18:08:21,595 INFO L290 TraceCheckUtils]: 24: Hoare triple {3117#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {3117#true} is VALID [2022-02-20 18:08:21,595 INFO L290 TraceCheckUtils]: 25: Hoare triple {3117#true} assume true; {3117#true} is VALID [2022-02-20 18:08:21,595 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {3117#true} {3119#(= ~pumpRunning~0 0)} #371#return; {3119#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:21,596 INFO L290 TraceCheckUtils]: 27: Hoare triple {3119#(= ~pumpRunning~0 0)} assume -2147483648 <= select_features_#t~ret59#1 && select_features_#t~ret59#1 <= 2147483647;~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret59#1;havoc select_features_#t~ret59#1; {3119#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:21,596 INFO L272 TraceCheckUtils]: 28: Hoare triple {3119#(= ~pumpRunning~0 0)} call select_features_#t~ret60#1 := select_one(); {3117#true} is VALID [2022-02-20 18:08:21,596 INFO L290 TraceCheckUtils]: 29: Hoare triple {3117#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {3117#true} is VALID [2022-02-20 18:08:21,596 INFO L290 TraceCheckUtils]: 30: Hoare triple {3117#true} assume true; {3117#true} is VALID [2022-02-20 18:08:21,596 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {3117#true} {3119#(= ~pumpRunning~0 0)} #373#return; {3119#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:21,597 INFO L290 TraceCheckUtils]: 32: Hoare triple {3119#(= ~pumpRunning~0 0)} assume -2147483648 <= select_features_#t~ret60#1 && select_features_#t~ret60#1 <= 2147483647;~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret60#1;havoc select_features_#t~ret60#1; {3119#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:21,597 INFO L290 TraceCheckUtils]: 33: Hoare triple {3119#(= ~pumpRunning~0 0)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~13#1;havoc valid_product_~retValue_acc~13#1;valid_product_~retValue_acc~13#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~13#1; {3119#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:21,597 INFO L290 TraceCheckUtils]: 34: Hoare triple {3119#(= ~pumpRunning~0 0)} main_#t~ret24#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret24#1 && main_#t~ret24#1 <= 2147483647;main_~tmp~6#1 := main_#t~ret24#1;havoc main_#t~ret24#1; {3119#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:21,598 INFO L290 TraceCheckUtils]: 35: Hoare triple {3119#(= ~pumpRunning~0 0)} assume 0 != main_~tmp~6#1;assume { :begin_inline_setup } true; {3119#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:21,598 INFO L290 TraceCheckUtils]: 36: Hoare triple {3119#(= ~pumpRunning~0 0)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0; {3119#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:21,598 INFO L290 TraceCheckUtils]: 37: Hoare triple {3119#(= ~pumpRunning~0 0)} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet25#1, test_#t~nondet26#1, test_#t~nondet27#1, test_#t~nondet28#1, test_~splverifierCounter~0#1, test_~tmp~7#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~7#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {3119#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:21,598 INFO L290 TraceCheckUtils]: 38: Hoare triple {3119#(= ~pumpRunning~0 0)} assume !false; {3119#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:21,599 INFO L290 TraceCheckUtils]: 39: Hoare triple {3119#(= ~pumpRunning~0 0)} assume test_~splverifierCounter~0#1 < 4; {3119#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:21,599 INFO L290 TraceCheckUtils]: 40: Hoare triple {3119#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet25#1 && test_#t~nondet25#1 <= 2147483647;test_~tmp~7#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {3119#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:21,599 INFO L290 TraceCheckUtils]: 41: Hoare triple {3119#(= ~pumpRunning~0 0)} assume !(0 != test_~tmp~7#1); {3119#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:21,600 INFO L290 TraceCheckUtils]: 42: Hoare triple {3119#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {3119#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:21,600 INFO L290 TraceCheckUtils]: 43: Hoare triple {3119#(= ~pumpRunning~0 0)} assume !(0 != test_~tmp___0~2#1); {3119#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:21,600 INFO L290 TraceCheckUtils]: 44: Hoare triple {3119#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {3119#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:21,601 INFO L290 TraceCheckUtils]: 45: Hoare triple {3119#(= ~pumpRunning~0 0)} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet28#1 && test_#t~nondet28#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet28#1;havoc test_#t~nondet28#1; {3119#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:21,601 INFO L290 TraceCheckUtils]: 46: Hoare triple {3119#(= ~pumpRunning~0 0)} assume 0 != test_~tmp___1~0#1; {3119#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:21,601 INFO L290 TraceCheckUtils]: 47: Hoare triple {3119#(= ~pumpRunning~0 0)} assume 0 != ~__SELECTED_FEATURE_stopCommand~0;assume { :begin_inline_stopSystem } true; {3119#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:21,602 INFO L290 TraceCheckUtils]: 48: Hoare triple {3119#(= ~pumpRunning~0 0)} assume !(0 != ~pumpRunning~0); {3119#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:21,602 INFO L290 TraceCheckUtils]: 49: Hoare triple {3119#(= ~pumpRunning~0 0)} ~systemActive~0 := 0; {3119#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:21,602 INFO L290 TraceCheckUtils]: 50: Hoare triple {3119#(= ~pumpRunning~0 0)} assume { :end_inline_stopSystem } true; {3119#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:21,603 INFO L272 TraceCheckUtils]: 51: Hoare triple {3119#(= ~pumpRunning~0 0)} call timeShift(); {3119#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:21,603 INFO L290 TraceCheckUtils]: 52: Hoare triple {3119#(= ~pumpRunning~0 0)} assume !(0 != ~pumpRunning~0); {3119#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:21,603 INFO L290 TraceCheckUtils]: 53: Hoare triple {3119#(= ~pumpRunning~0 0)} assume !(0 != ~systemActive~0); {3119#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:21,603 INFO L290 TraceCheckUtils]: 54: Hoare triple {3119#(= ~pumpRunning~0 0)} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret29#1, __utac_acc__Specification2_spec__2_#t~ret30#1, __utac_acc__Specification2_spec__2_~tmp~8#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~8#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {3119#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:21,604 INFO L272 TraceCheckUtils]: 55: Hoare triple {3119#(= ~pumpRunning~0 0)} call __utac_acc__Specification2_spec__2_#t~ret29#1 := isMethaneLevelCritical(); {3117#true} is VALID [2022-02-20 18:08:21,604 INFO L290 TraceCheckUtils]: 56: Hoare triple {3117#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {3117#true} is VALID [2022-02-20 18:08:21,604 INFO L290 TraceCheckUtils]: 57: Hoare triple {3117#true} assume true; {3117#true} is VALID [2022-02-20 18:08:21,604 INFO L284 TraceCheckUtils]: 58: Hoare quadruple {3117#true} {3119#(= ~pumpRunning~0 0)} #361#return; {3119#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:21,605 INFO L290 TraceCheckUtils]: 59: Hoare triple {3119#(= ~pumpRunning~0 0)} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret29#1 && __utac_acc__Specification2_spec__2_#t~ret29#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~8#1 := __utac_acc__Specification2_spec__2_#t~ret29#1;havoc __utac_acc__Specification2_spec__2_#t~ret29#1; {3119#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:08:21,605 INFO L290 TraceCheckUtils]: 60: Hoare triple {3119#(= ~pumpRunning~0 0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp~8#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~5#1;havoc isPumpRunning_~retValue_acc~5#1;isPumpRunning_~retValue_acc~5#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~5#1; {3141#(= |timeShift_isPumpRunning_#res#1| 0)} is VALID [2022-02-20 18:08:21,605 INFO L290 TraceCheckUtils]: 61: Hoare triple {3141#(= |timeShift_isPumpRunning_#res#1| 0)} __utac_acc__Specification2_spec__2_#t~ret30#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret30#1 && __utac_acc__Specification2_spec__2_#t~ret30#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret30#1;havoc __utac_acc__Specification2_spec__2_#t~ret30#1; {3142#(= |timeShift___utac_acc__Specification2_spec__2_~tmp___0~3#1| 0)} is VALID [2022-02-20 18:08:21,606 INFO L290 TraceCheckUtils]: 62: Hoare triple {3142#(= |timeShift___utac_acc__Specification2_spec__2_~tmp___0~3#1| 0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {3118#false} is VALID [2022-02-20 18:08:21,606 INFO L290 TraceCheckUtils]: 63: Hoare triple {3118#false} assume 0 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {3118#false} is VALID [2022-02-20 18:08:21,606 INFO L290 TraceCheckUtils]: 64: Hoare triple {3118#false} assume !false; {3118#false} is VALID [2022-02-20 18:08:21,606 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-02-20 18:08:21,607 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:08:21,607 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [762455919] [2022-02-20 18:08:21,607 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [762455919] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:08:21,610 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:08:21,610 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-02-20 18:08:21,611 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1589205469] [2022-02-20 18:08:21,611 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:08:21,611 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 5 states have internal predecessors, (40), 1 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (7), 1 states have call predecessors, (7), 1 states have call successors, (7) Word has length 65 [2022-02-20 18:08:21,611 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:08:21,611 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 5 states, 5 states have (on average 8.0) internal successors, (40), 5 states have internal predecessors, (40), 1 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (7), 1 states have call predecessors, (7), 1 states have call successors, (7) [2022-02-20 18:08:21,650 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 55 edges. 55 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:21,650 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-02-20 18:08:21,650 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:08:21,650 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-02-20 18:08:21,650 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-02-20 18:08:21,651 INFO L87 Difference]: Start difference. First operand 226 states and 309 transitions. Second operand has 5 states, 5 states have (on average 8.0) internal successors, (40), 5 states have internal predecessors, (40), 1 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (7), 1 states have call predecessors, (7), 1 states have call successors, (7) [2022-02-20 18:08:21,999 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:22,000 INFO L93 Difference]: Finished difference Result 564 states and 802 transitions. [2022-02-20 18:08:22,000 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-02-20 18:08:22,000 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 5 states have internal predecessors, (40), 1 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (7), 1 states have call predecessors, (7), 1 states have call successors, (7) Word has length 65 [2022-02-20 18:08:22,000 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:08:22,000 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 8.0) internal successors, (40), 5 states have internal predecessors, (40), 1 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (7), 1 states have call predecessors, (7), 1 states have call successors, (7) [2022-02-20 18:08:22,005 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 421 transitions. [2022-02-20 18:08:22,005 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 8.0) internal successors, (40), 5 states have internal predecessors, (40), 1 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (7), 1 states have call predecessors, (7), 1 states have call successors, (7) [2022-02-20 18:08:22,011 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 421 transitions. [2022-02-20 18:08:22,011 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states and 421 transitions. [2022-02-20 18:08:22,318 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 421 edges. 421 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:22,329 INFO L225 Difference]: With dead ends: 564 [2022-02-20 18:08:22,329 INFO L226 Difference]: Without dead ends: 361 [2022-02-20 18:08:22,330 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-02-20 18:08:22,331 INFO L933 BasicCegarLoop]: 183 mSDtfsCounter, 108 mSDsluCounter, 472 mSDsCounter, 0 mSdLazyCounter, 31 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 108 SdHoareTripleChecker+Valid, 655 SdHoareTripleChecker+Invalid, 43 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 31 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:08:22,332 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [108 Valid, 655 Invalid, 43 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 31 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:08:22,332 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 361 states. [2022-02-20 18:08:22,351 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 361 to 348. [2022-02-20 18:08:22,351 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:08:22,352 INFO L82 GeneralOperation]: Start isEquivalent. First operand 361 states. Second operand has 348 states, 246 states have (on average 1.3333333333333333) internal successors, (328), 279 states have internal predecessors, (328), 64 states have call successors, (64), 37 states have call predecessors, (64), 37 states have return successors, (84), 59 states have call predecessors, (84), 64 states have call successors, (84) [2022-02-20 18:08:22,353 INFO L74 IsIncluded]: Start isIncluded. First operand 361 states. Second operand has 348 states, 246 states have (on average 1.3333333333333333) internal successors, (328), 279 states have internal predecessors, (328), 64 states have call successors, (64), 37 states have call predecessors, (64), 37 states have return successors, (84), 59 states have call predecessors, (84), 64 states have call successors, (84) [2022-02-20 18:08:22,354 INFO L87 Difference]: Start difference. First operand 361 states. Second operand has 348 states, 246 states have (on average 1.3333333333333333) internal successors, (328), 279 states have internal predecessors, (328), 64 states have call successors, (64), 37 states have call predecessors, (64), 37 states have return successors, (84), 59 states have call predecessors, (84), 64 states have call successors, (84) [2022-02-20 18:08:22,366 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:22,366 INFO L93 Difference]: Finished difference Result 361 states and 493 transitions. [2022-02-20 18:08:22,366 INFO L276 IsEmpty]: Start isEmpty. Operand 361 states and 493 transitions. [2022-02-20 18:08:22,367 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:22,367 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:22,368 INFO L74 IsIncluded]: Start isIncluded. First operand has 348 states, 246 states have (on average 1.3333333333333333) internal successors, (328), 279 states have internal predecessors, (328), 64 states have call successors, (64), 37 states have call predecessors, (64), 37 states have return successors, (84), 59 states have call predecessors, (84), 64 states have call successors, (84) Second operand 361 states. [2022-02-20 18:08:22,369 INFO L87 Difference]: Start difference. First operand has 348 states, 246 states have (on average 1.3333333333333333) internal successors, (328), 279 states have internal predecessors, (328), 64 states have call successors, (64), 37 states have call predecessors, (64), 37 states have return successors, (84), 59 states have call predecessors, (84), 64 states have call successors, (84) Second operand 361 states. [2022-02-20 18:08:22,379 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:22,379 INFO L93 Difference]: Finished difference Result 361 states and 493 transitions. [2022-02-20 18:08:22,380 INFO L276 IsEmpty]: Start isEmpty. Operand 361 states and 493 transitions. [2022-02-20 18:08:22,380 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:22,381 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:22,381 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:08:22,381 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:08:22,382 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 348 states, 246 states have (on average 1.3333333333333333) internal successors, (328), 279 states have internal predecessors, (328), 64 states have call successors, (64), 37 states have call predecessors, (64), 37 states have return successors, (84), 59 states have call predecessors, (84), 64 states have call successors, (84) [2022-02-20 18:08:22,393 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 348 states to 348 states and 476 transitions. [2022-02-20 18:08:22,393 INFO L78 Accepts]: Start accepts. Automaton has 348 states and 476 transitions. Word has length 65 [2022-02-20 18:08:22,393 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:08:22,394 INFO L470 AbstractCegarLoop]: Abstraction has 348 states and 476 transitions. [2022-02-20 18:08:22,394 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 5 states have internal predecessors, (40), 1 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (7), 1 states have call predecessors, (7), 1 states have call successors, (7) [2022-02-20 18:08:22,394 INFO L276 IsEmpty]: Start isEmpty. Operand 348 states and 476 transitions. [2022-02-20 18:08:22,395 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 86 [2022-02-20 18:08:22,395 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:08:22,395 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:08:22,395 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-02-20 18:08:22,395 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:08:22,395 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:08:22,395 INFO L85 PathProgramCache]: Analyzing trace with hash 634419828, now seen corresponding path program 1 times [2022-02-20 18:08:22,396 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:08:22,396 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [682670505] [2022-02-20 18:08:22,396 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:08:22,396 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:08:22,423 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:22,438 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-02-20 18:08:22,440 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:22,442 INFO L290 TraceCheckUtils]: 0: Hoare triple {5189#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {5189#true} is VALID [2022-02-20 18:08:22,442 INFO L290 TraceCheckUtils]: 1: Hoare triple {5189#true} assume true; {5189#true} is VALID [2022-02-20 18:08:22,442 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {5189#true} {5189#true} #363#return; {5189#true} is VALID [2022-02-20 18:08:22,442 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:08:22,443 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:22,446 INFO L290 TraceCheckUtils]: 0: Hoare triple {5189#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {5189#true} is VALID [2022-02-20 18:08:22,446 INFO L290 TraceCheckUtils]: 1: Hoare triple {5189#true} assume true; {5189#true} is VALID [2022-02-20 18:08:22,446 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {5189#true} {5189#true} #365#return; {5189#true} is VALID [2022-02-20 18:08:22,446 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-02-20 18:08:22,447 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:22,449 INFO L290 TraceCheckUtils]: 0: Hoare triple {5189#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {5189#true} is VALID [2022-02-20 18:08:22,449 INFO L290 TraceCheckUtils]: 1: Hoare triple {5189#true} assume true; {5189#true} is VALID [2022-02-20 18:08:22,449 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {5189#true} {5189#true} #367#return; {5189#true} is VALID [2022-02-20 18:08:22,449 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:08:22,450 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:22,452 INFO L290 TraceCheckUtils]: 0: Hoare triple {5189#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {5189#true} is VALID [2022-02-20 18:08:22,452 INFO L290 TraceCheckUtils]: 1: Hoare triple {5189#true} assume true; {5189#true} is VALID [2022-02-20 18:08:22,452 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {5189#true} {5189#true} #369#return; {5189#true} is VALID [2022-02-20 18:08:22,453 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-02-20 18:08:22,454 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:22,456 INFO L290 TraceCheckUtils]: 0: Hoare triple {5189#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {5189#true} is VALID [2022-02-20 18:08:22,456 INFO L290 TraceCheckUtils]: 1: Hoare triple {5189#true} assume true; {5189#true} is VALID [2022-02-20 18:08:22,456 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {5189#true} {5189#true} #371#return; {5189#true} is VALID [2022-02-20 18:08:22,456 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-02-20 18:08:22,457 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:22,459 INFO L290 TraceCheckUtils]: 0: Hoare triple {5189#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {5189#true} is VALID [2022-02-20 18:08:22,459 INFO L290 TraceCheckUtils]: 1: Hoare triple {5189#true} assume true; {5189#true} is VALID [2022-02-20 18:08:22,459 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {5189#true} {5189#true} #373#return; {5189#true} is VALID [2022-02-20 18:08:22,461 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2022-02-20 18:08:22,464 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:22,469 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:08:22,473 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:22,488 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-02-20 18:08:22,489 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:22,491 INFO L290 TraceCheckUtils]: 0: Hoare triple {5233#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {5189#true} is VALID [2022-02-20 18:08:22,491 INFO L290 TraceCheckUtils]: 1: Hoare triple {5189#true} assume true; {5189#true} is VALID [2022-02-20 18:08:22,491 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {5189#true} {5190#false} #339#return; {5190#false} is VALID [2022-02-20 18:08:22,491 INFO L290 TraceCheckUtils]: 0: Hoare triple {5233#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret9#1, processEnvironment__role__highWaterSensor_~tmp~0#1;havoc processEnvironment__role__highWaterSensor_~tmp~0#1; {5189#true} is VALID [2022-02-20 18:08:22,491 INFO L290 TraceCheckUtils]: 1: Hoare triple {5189#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret22#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {5189#true} is VALID [2022-02-20 18:08:22,491 INFO L290 TraceCheckUtils]: 2: Hoare triple {5189#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~2#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {5189#true} is VALID [2022-02-20 18:08:22,492 INFO L290 TraceCheckUtils]: 3: Hoare triple {5189#true} isHighWaterLevel_#t~ret22#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret22#1 && isHighWaterLevel_#t~ret22#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret22#1;havoc isHighWaterLevel_#t~ret22#1; {5189#true} is VALID [2022-02-20 18:08:22,492 INFO L290 TraceCheckUtils]: 4: Hoare triple {5189#true} assume 0 != isHighWaterLevel_~tmp~4#1;isHighWaterLevel_~tmp___0~0#1 := 0; {5251#(= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0)} is VALID [2022-02-20 18:08:22,492 INFO L290 TraceCheckUtils]: 5: Hoare triple {5251#(= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0)} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {5252#(= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_#res#1| 0)} is VALID [2022-02-20 18:08:22,493 INFO L290 TraceCheckUtils]: 6: Hoare triple {5252#(= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_#res#1| 0)} processEnvironment__role__highWaterSensor_#t~ret9#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret9#1 && processEnvironment__role__highWaterSensor_#t~ret9#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~0#1 := processEnvironment__role__highWaterSensor_#t~ret9#1;havoc processEnvironment__role__highWaterSensor_#t~ret9#1; {5253#(= |processEnvironment__before__lowWaterSensor_processEnvironment__role__highWaterSensor_~tmp~0#1| 0)} is VALID [2022-02-20 18:08:22,493 INFO L290 TraceCheckUtils]: 7: Hoare triple {5253#(= |processEnvironment__before__lowWaterSensor_processEnvironment__role__highWaterSensor_~tmp~0#1| 0)} assume 0 != processEnvironment__role__highWaterSensor_~tmp~0#1;assume { :begin_inline_activatePump } true; {5190#false} is VALID [2022-02-20 18:08:22,493 INFO L290 TraceCheckUtils]: 8: Hoare triple {5190#false} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {5190#false} is VALID [2022-02-20 18:08:22,493 INFO L272 TraceCheckUtils]: 9: Hoare triple {5190#false} call activatePump__before__methaneQuery(); {5233#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:22,493 INFO L290 TraceCheckUtils]: 10: Hoare triple {5233#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {5189#true} is VALID [2022-02-20 18:08:22,493 INFO L290 TraceCheckUtils]: 11: Hoare triple {5189#true} assume true; {5189#true} is VALID [2022-02-20 18:08:22,493 INFO L284 TraceCheckUtils]: 12: Hoare quadruple {5189#true} {5190#false} #339#return; {5190#false} is VALID [2022-02-20 18:08:22,494 INFO L290 TraceCheckUtils]: 13: Hoare triple {5190#false} assume { :end_inline_activatePump } true; {5190#false} is VALID [2022-02-20 18:08:22,494 INFO L290 TraceCheckUtils]: 14: Hoare triple {5190#false} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {5190#false} is VALID [2022-02-20 18:08:22,494 INFO L290 TraceCheckUtils]: 15: Hoare triple {5190#false} assume true; {5190#false} is VALID [2022-02-20 18:08:22,494 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {5190#false} {5189#true} #391#return; {5190#false} is VALID [2022-02-20 18:08:22,494 INFO L290 TraceCheckUtils]: 0: Hoare triple {5233#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {5189#true} is VALID [2022-02-20 18:08:22,494 INFO L272 TraceCheckUtils]: 1: Hoare triple {5189#true} call processEnvironment__before__lowWaterSensor(); {5233#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:22,495 INFO L290 TraceCheckUtils]: 2: Hoare triple {5233#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret9#1, processEnvironment__role__highWaterSensor_~tmp~0#1;havoc processEnvironment__role__highWaterSensor_~tmp~0#1; {5189#true} is VALID [2022-02-20 18:08:22,495 INFO L290 TraceCheckUtils]: 3: Hoare triple {5189#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret22#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {5189#true} is VALID [2022-02-20 18:08:22,495 INFO L290 TraceCheckUtils]: 4: Hoare triple {5189#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~2#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {5189#true} is VALID [2022-02-20 18:08:22,495 INFO L290 TraceCheckUtils]: 5: Hoare triple {5189#true} isHighWaterLevel_#t~ret22#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret22#1 && isHighWaterLevel_#t~ret22#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret22#1;havoc isHighWaterLevel_#t~ret22#1; {5189#true} is VALID [2022-02-20 18:08:22,495 INFO L290 TraceCheckUtils]: 6: Hoare triple {5189#true} assume 0 != isHighWaterLevel_~tmp~4#1;isHighWaterLevel_~tmp___0~0#1 := 0; {5251#(= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0)} is VALID [2022-02-20 18:08:22,495 INFO L290 TraceCheckUtils]: 7: Hoare triple {5251#(= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0)} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {5252#(= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_#res#1| 0)} is VALID [2022-02-20 18:08:22,496 INFO L290 TraceCheckUtils]: 8: Hoare triple {5252#(= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_#res#1| 0)} processEnvironment__role__highWaterSensor_#t~ret9#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret9#1 && processEnvironment__role__highWaterSensor_#t~ret9#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~0#1 := processEnvironment__role__highWaterSensor_#t~ret9#1;havoc processEnvironment__role__highWaterSensor_#t~ret9#1; {5253#(= |processEnvironment__before__lowWaterSensor_processEnvironment__role__highWaterSensor_~tmp~0#1| 0)} is VALID [2022-02-20 18:08:22,496 INFO L290 TraceCheckUtils]: 9: Hoare triple {5253#(= |processEnvironment__before__lowWaterSensor_processEnvironment__role__highWaterSensor_~tmp~0#1| 0)} assume 0 != processEnvironment__role__highWaterSensor_~tmp~0#1;assume { :begin_inline_activatePump } true; {5190#false} is VALID [2022-02-20 18:08:22,496 INFO L290 TraceCheckUtils]: 10: Hoare triple {5190#false} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {5190#false} is VALID [2022-02-20 18:08:22,496 INFO L272 TraceCheckUtils]: 11: Hoare triple {5190#false} call activatePump__before__methaneQuery(); {5233#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:22,496 INFO L290 TraceCheckUtils]: 12: Hoare triple {5233#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {5189#true} is VALID [2022-02-20 18:08:22,497 INFO L290 TraceCheckUtils]: 13: Hoare triple {5189#true} assume true; {5189#true} is VALID [2022-02-20 18:08:22,497 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {5189#true} {5190#false} #339#return; {5190#false} is VALID [2022-02-20 18:08:22,497 INFO L290 TraceCheckUtils]: 15: Hoare triple {5190#false} assume { :end_inline_activatePump } true; {5190#false} is VALID [2022-02-20 18:08:22,497 INFO L290 TraceCheckUtils]: 16: Hoare triple {5190#false} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {5190#false} is VALID [2022-02-20 18:08:22,497 INFO L290 TraceCheckUtils]: 17: Hoare triple {5190#false} assume true; {5190#false} is VALID [2022-02-20 18:08:22,497 INFO L284 TraceCheckUtils]: 18: Hoare quadruple {5190#false} {5189#true} #391#return; {5190#false} is VALID [2022-02-20 18:08:22,497 INFO L290 TraceCheckUtils]: 19: Hoare triple {5190#false} assume true; {5190#false} is VALID [2022-02-20 18:08:22,497 INFO L284 TraceCheckUtils]: 20: Hoare quadruple {5190#false} {5189#true} #359#return; {5190#false} is VALID [2022-02-20 18:08:22,497 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 75 [2022-02-20 18:08:22,498 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:22,500 INFO L290 TraceCheckUtils]: 0: Hoare triple {5189#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {5189#true} is VALID [2022-02-20 18:08:22,500 INFO L290 TraceCheckUtils]: 1: Hoare triple {5189#true} assume true; {5189#true} is VALID [2022-02-20 18:08:22,500 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {5189#true} {5190#false} #361#return; {5190#false} is VALID [2022-02-20 18:08:22,500 INFO L290 TraceCheckUtils]: 0: Hoare triple {5189#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(38, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(13, 9);call #Ultimate.allocInit(3, 10);call write~init~int(79, 10, 0, 1);call write~init~int(110, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(4, 11);call write~init~int(79, 11, 0, 1);call write~init~int(102, 11, 1, 1);call write~init~int(102, 11, 2, 1);call write~init~int(0, 11, 3, 1);call #Ultimate.allocInit(7, 12);call write~init~int(44, 12, 0, 1);call write~init~int(80, 12, 1, 1);call write~init~int(117, 12, 2, 1);call write~init~int(109, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(3, 13);call write~init~int(79, 13, 0, 1);call write~init~int(110, 13, 1, 1);call write~init~int(0, 13, 2, 1);call #Ultimate.allocInit(4, 14);call write~init~int(79, 14, 0, 1);call write~init~int(102, 14, 1, 1);call write~init~int(102, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(3, 15);call write~init~int(41, 15, 0, 1);call write~init~int(32, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(10, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~__SELECTED_FEATURE_base~0 := 0;~__SELECTED_FEATURE_highWaterSensor~0 := 0;~__SELECTED_FEATURE_lowWaterSensor~0 := 0;~__SELECTED_FEATURE_methaneQuery~0 := 0;~__SELECTED_FEATURE_methaneAlarm~0 := 0;~__SELECTED_FEATURE_stopCommand~0 := 0;~__SELECTED_FEATURE_startCommand~0 := 0;~__GUIDSL_ROOT_PRODUCTION~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4;~methAndRunningLastTime~0 := 0;~head~0.base, ~head~0.offset := 0, 0; {5189#true} is VALID [2022-02-20 18:08:22,500 INFO L290 TraceCheckUtils]: 1: Hoare triple {5189#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret24#1, main_~retValue_acc~8#1, main_~tmp~6#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~6#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1; {5189#true} is VALID [2022-02-20 18:08:22,500 INFO L290 TraceCheckUtils]: 2: Hoare triple {5189#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret55#1, select_features_#t~ret56#1, select_features_#t~ret57#1, select_features_#t~ret58#1, select_features_#t~ret59#1, select_features_#t~ret60#1;~__SELECTED_FEATURE_base~0 := 1; {5189#true} is VALID [2022-02-20 18:08:22,500 INFO L272 TraceCheckUtils]: 3: Hoare triple {5189#true} call select_features_#t~ret55#1 := select_one(); {5189#true} is VALID [2022-02-20 18:08:22,500 INFO L290 TraceCheckUtils]: 4: Hoare triple {5189#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {5189#true} is VALID [2022-02-20 18:08:22,500 INFO L290 TraceCheckUtils]: 5: Hoare triple {5189#true} assume true; {5189#true} is VALID [2022-02-20 18:08:22,501 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {5189#true} {5189#true} #363#return; {5189#true} is VALID [2022-02-20 18:08:22,501 INFO L290 TraceCheckUtils]: 7: Hoare triple {5189#true} assume -2147483648 <= select_features_#t~ret55#1 && select_features_#t~ret55#1 <= 2147483647;~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret55#1;havoc select_features_#t~ret55#1; {5189#true} is VALID [2022-02-20 18:08:22,501 INFO L272 TraceCheckUtils]: 8: Hoare triple {5189#true} call select_features_#t~ret56#1 := select_one(); {5189#true} is VALID [2022-02-20 18:08:22,501 INFO L290 TraceCheckUtils]: 9: Hoare triple {5189#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {5189#true} is VALID [2022-02-20 18:08:22,501 INFO L290 TraceCheckUtils]: 10: Hoare triple {5189#true} assume true; {5189#true} is VALID [2022-02-20 18:08:22,501 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {5189#true} {5189#true} #365#return; {5189#true} is VALID [2022-02-20 18:08:22,501 INFO L290 TraceCheckUtils]: 12: Hoare triple {5189#true} assume -2147483648 <= select_features_#t~ret56#1 && select_features_#t~ret56#1 <= 2147483647;~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret56#1;havoc select_features_#t~ret56#1; {5189#true} is VALID [2022-02-20 18:08:22,501 INFO L272 TraceCheckUtils]: 13: Hoare triple {5189#true} call select_features_#t~ret57#1 := select_one(); {5189#true} is VALID [2022-02-20 18:08:22,501 INFO L290 TraceCheckUtils]: 14: Hoare triple {5189#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {5189#true} is VALID [2022-02-20 18:08:22,501 INFO L290 TraceCheckUtils]: 15: Hoare triple {5189#true} assume true; {5189#true} is VALID [2022-02-20 18:08:22,501 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {5189#true} {5189#true} #367#return; {5189#true} is VALID [2022-02-20 18:08:22,501 INFO L290 TraceCheckUtils]: 17: Hoare triple {5189#true} assume -2147483648 <= select_features_#t~ret57#1 && select_features_#t~ret57#1 <= 2147483647;~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret57#1;havoc select_features_#t~ret57#1; {5189#true} is VALID [2022-02-20 18:08:22,502 INFO L272 TraceCheckUtils]: 18: Hoare triple {5189#true} call select_features_#t~ret58#1 := select_one(); {5189#true} is VALID [2022-02-20 18:08:22,502 INFO L290 TraceCheckUtils]: 19: Hoare triple {5189#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {5189#true} is VALID [2022-02-20 18:08:22,502 INFO L290 TraceCheckUtils]: 20: Hoare triple {5189#true} assume true; {5189#true} is VALID [2022-02-20 18:08:22,502 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {5189#true} {5189#true} #369#return; {5189#true} is VALID [2022-02-20 18:08:22,502 INFO L290 TraceCheckUtils]: 22: Hoare triple {5189#true} assume -2147483648 <= select_features_#t~ret58#1 && select_features_#t~ret58#1 <= 2147483647;~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret58#1;havoc select_features_#t~ret58#1; {5189#true} is VALID [2022-02-20 18:08:22,502 INFO L272 TraceCheckUtils]: 23: Hoare triple {5189#true} call select_features_#t~ret59#1 := select_one(); {5189#true} is VALID [2022-02-20 18:08:22,502 INFO L290 TraceCheckUtils]: 24: Hoare triple {5189#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {5189#true} is VALID [2022-02-20 18:08:22,502 INFO L290 TraceCheckUtils]: 25: Hoare triple {5189#true} assume true; {5189#true} is VALID [2022-02-20 18:08:22,502 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {5189#true} {5189#true} #371#return; {5189#true} is VALID [2022-02-20 18:08:22,502 INFO L290 TraceCheckUtils]: 27: Hoare triple {5189#true} assume -2147483648 <= select_features_#t~ret59#1 && select_features_#t~ret59#1 <= 2147483647;~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret59#1;havoc select_features_#t~ret59#1; {5189#true} is VALID [2022-02-20 18:08:22,502 INFO L272 TraceCheckUtils]: 28: Hoare triple {5189#true} call select_features_#t~ret60#1 := select_one(); {5189#true} is VALID [2022-02-20 18:08:22,502 INFO L290 TraceCheckUtils]: 29: Hoare triple {5189#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {5189#true} is VALID [2022-02-20 18:08:22,502 INFO L290 TraceCheckUtils]: 30: Hoare triple {5189#true} assume true; {5189#true} is VALID [2022-02-20 18:08:22,503 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {5189#true} {5189#true} #373#return; {5189#true} is VALID [2022-02-20 18:08:22,503 INFO L290 TraceCheckUtils]: 32: Hoare triple {5189#true} assume -2147483648 <= select_features_#t~ret60#1 && select_features_#t~ret60#1 <= 2147483647;~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret60#1;havoc select_features_#t~ret60#1; {5189#true} is VALID [2022-02-20 18:08:22,503 INFO L290 TraceCheckUtils]: 33: Hoare triple {5189#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~13#1;havoc valid_product_~retValue_acc~13#1;valid_product_~retValue_acc~13#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~13#1; {5189#true} is VALID [2022-02-20 18:08:22,503 INFO L290 TraceCheckUtils]: 34: Hoare triple {5189#true} main_#t~ret24#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret24#1 && main_#t~ret24#1 <= 2147483647;main_~tmp~6#1 := main_#t~ret24#1;havoc main_#t~ret24#1; {5189#true} is VALID [2022-02-20 18:08:22,503 INFO L290 TraceCheckUtils]: 35: Hoare triple {5189#true} assume 0 != main_~tmp~6#1;assume { :begin_inline_setup } true; {5189#true} is VALID [2022-02-20 18:08:22,503 INFO L290 TraceCheckUtils]: 36: Hoare triple {5189#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0; {5189#true} is VALID [2022-02-20 18:08:22,503 INFO L290 TraceCheckUtils]: 37: Hoare triple {5189#true} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet25#1, test_#t~nondet26#1, test_#t~nondet27#1, test_#t~nondet28#1, test_~splverifierCounter~0#1, test_~tmp~7#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~7#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {5189#true} is VALID [2022-02-20 18:08:22,503 INFO L290 TraceCheckUtils]: 38: Hoare triple {5189#true} assume !false; {5189#true} is VALID [2022-02-20 18:08:22,503 INFO L290 TraceCheckUtils]: 39: Hoare triple {5189#true} assume test_~splverifierCounter~0#1 < 4; {5189#true} is VALID [2022-02-20 18:08:22,503 INFO L290 TraceCheckUtils]: 40: Hoare triple {5189#true} assume -2147483648 <= test_#t~nondet25#1 && test_#t~nondet25#1 <= 2147483647;test_~tmp~7#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {5189#true} is VALID [2022-02-20 18:08:22,503 INFO L290 TraceCheckUtils]: 41: Hoare triple {5189#true} assume !(0 != test_~tmp~7#1); {5189#true} is VALID [2022-02-20 18:08:22,503 INFO L290 TraceCheckUtils]: 42: Hoare triple {5189#true} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {5189#true} is VALID [2022-02-20 18:08:22,504 INFO L290 TraceCheckUtils]: 43: Hoare triple {5189#true} assume !(0 != test_~tmp___0~2#1); {5189#true} is VALID [2022-02-20 18:08:22,504 INFO L290 TraceCheckUtils]: 44: Hoare triple {5189#true} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {5189#true} is VALID [2022-02-20 18:08:22,504 INFO L290 TraceCheckUtils]: 45: Hoare triple {5189#true} assume 0 != test_~tmp___2~0#1; {5189#true} is VALID [2022-02-20 18:08:22,504 INFO L290 TraceCheckUtils]: 46: Hoare triple {5189#true} assume !(0 != ~__SELECTED_FEATURE_startCommand~0); {5189#true} is VALID [2022-02-20 18:08:22,504 INFO L272 TraceCheckUtils]: 47: Hoare triple {5189#true} call timeShift(); {5189#true} is VALID [2022-02-20 18:08:22,504 INFO L290 TraceCheckUtils]: 48: Hoare triple {5189#true} assume !(0 != ~pumpRunning~0); {5189#true} is VALID [2022-02-20 18:08:22,504 INFO L290 TraceCheckUtils]: 49: Hoare triple {5189#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {5189#true} is VALID [2022-02-20 18:08:22,504 INFO L290 TraceCheckUtils]: 50: Hoare triple {5189#true} assume !(0 != ~__SELECTED_FEATURE_methaneAlarm~0); {5189#true} is VALID [2022-02-20 18:08:22,505 INFO L272 TraceCheckUtils]: 51: Hoare triple {5189#true} call processEnvironment__before__methaneAlarm(); {5233#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:22,505 INFO L290 TraceCheckUtils]: 52: Hoare triple {5233#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {5189#true} is VALID [2022-02-20 18:08:22,505 INFO L272 TraceCheckUtils]: 53: Hoare triple {5189#true} call processEnvironment__before__lowWaterSensor(); {5233#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:22,505 INFO L290 TraceCheckUtils]: 54: Hoare triple {5233#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret9#1, processEnvironment__role__highWaterSensor_~tmp~0#1;havoc processEnvironment__role__highWaterSensor_~tmp~0#1; {5189#true} is VALID [2022-02-20 18:08:22,505 INFO L290 TraceCheckUtils]: 55: Hoare triple {5189#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret22#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {5189#true} is VALID [2022-02-20 18:08:22,505 INFO L290 TraceCheckUtils]: 56: Hoare triple {5189#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~2#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {5189#true} is VALID [2022-02-20 18:08:22,505 INFO L290 TraceCheckUtils]: 57: Hoare triple {5189#true} isHighWaterLevel_#t~ret22#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret22#1 && isHighWaterLevel_#t~ret22#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret22#1;havoc isHighWaterLevel_#t~ret22#1; {5189#true} is VALID [2022-02-20 18:08:22,506 INFO L290 TraceCheckUtils]: 58: Hoare triple {5189#true} assume 0 != isHighWaterLevel_~tmp~4#1;isHighWaterLevel_~tmp___0~0#1 := 0; {5251#(= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0)} is VALID [2022-02-20 18:08:22,506 INFO L290 TraceCheckUtils]: 59: Hoare triple {5251#(= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0)} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {5252#(= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_#res#1| 0)} is VALID [2022-02-20 18:08:22,506 INFO L290 TraceCheckUtils]: 60: Hoare triple {5252#(= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_#res#1| 0)} processEnvironment__role__highWaterSensor_#t~ret9#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret9#1 && processEnvironment__role__highWaterSensor_#t~ret9#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~0#1 := processEnvironment__role__highWaterSensor_#t~ret9#1;havoc processEnvironment__role__highWaterSensor_#t~ret9#1; {5253#(= |processEnvironment__before__lowWaterSensor_processEnvironment__role__highWaterSensor_~tmp~0#1| 0)} is VALID [2022-02-20 18:08:22,507 INFO L290 TraceCheckUtils]: 61: Hoare triple {5253#(= |processEnvironment__before__lowWaterSensor_processEnvironment__role__highWaterSensor_~tmp~0#1| 0)} assume 0 != processEnvironment__role__highWaterSensor_~tmp~0#1;assume { :begin_inline_activatePump } true; {5190#false} is VALID [2022-02-20 18:08:22,507 INFO L290 TraceCheckUtils]: 62: Hoare triple {5190#false} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {5190#false} is VALID [2022-02-20 18:08:22,507 INFO L272 TraceCheckUtils]: 63: Hoare triple {5190#false} call activatePump__before__methaneQuery(); {5233#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:22,507 INFO L290 TraceCheckUtils]: 64: Hoare triple {5233#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {5189#true} is VALID [2022-02-20 18:08:22,507 INFO L290 TraceCheckUtils]: 65: Hoare triple {5189#true} assume true; {5189#true} is VALID [2022-02-20 18:08:22,507 INFO L284 TraceCheckUtils]: 66: Hoare quadruple {5189#true} {5190#false} #339#return; {5190#false} is VALID [2022-02-20 18:08:22,507 INFO L290 TraceCheckUtils]: 67: Hoare triple {5190#false} assume { :end_inline_activatePump } true; {5190#false} is VALID [2022-02-20 18:08:22,507 INFO L290 TraceCheckUtils]: 68: Hoare triple {5190#false} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {5190#false} is VALID [2022-02-20 18:08:22,507 INFO L290 TraceCheckUtils]: 69: Hoare triple {5190#false} assume true; {5190#false} is VALID [2022-02-20 18:08:22,507 INFO L284 TraceCheckUtils]: 70: Hoare quadruple {5190#false} {5189#true} #391#return; {5190#false} is VALID [2022-02-20 18:08:22,507 INFO L290 TraceCheckUtils]: 71: Hoare triple {5190#false} assume true; {5190#false} is VALID [2022-02-20 18:08:22,508 INFO L284 TraceCheckUtils]: 72: Hoare quadruple {5190#false} {5189#true} #359#return; {5190#false} is VALID [2022-02-20 18:08:22,508 INFO L290 TraceCheckUtils]: 73: Hoare triple {5190#false} assume { :end_inline_processEnvironment } true; {5190#false} is VALID [2022-02-20 18:08:22,508 INFO L290 TraceCheckUtils]: 74: Hoare triple {5190#false} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret29#1, __utac_acc__Specification2_spec__2_#t~ret30#1, __utac_acc__Specification2_spec__2_~tmp~8#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~8#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {5190#false} is VALID [2022-02-20 18:08:22,508 INFO L272 TraceCheckUtils]: 75: Hoare triple {5190#false} call __utac_acc__Specification2_spec__2_#t~ret29#1 := isMethaneLevelCritical(); {5189#true} is VALID [2022-02-20 18:08:22,508 INFO L290 TraceCheckUtils]: 76: Hoare triple {5189#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {5189#true} is VALID [2022-02-20 18:08:22,508 INFO L290 TraceCheckUtils]: 77: Hoare triple {5189#true} assume true; {5189#true} is VALID [2022-02-20 18:08:22,508 INFO L284 TraceCheckUtils]: 78: Hoare quadruple {5189#true} {5190#false} #361#return; {5190#false} is VALID [2022-02-20 18:08:22,508 INFO L290 TraceCheckUtils]: 79: Hoare triple {5190#false} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret29#1 && __utac_acc__Specification2_spec__2_#t~ret29#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~8#1 := __utac_acc__Specification2_spec__2_#t~ret29#1;havoc __utac_acc__Specification2_spec__2_#t~ret29#1; {5190#false} is VALID [2022-02-20 18:08:22,508 INFO L290 TraceCheckUtils]: 80: Hoare triple {5190#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~8#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~5#1;havoc isPumpRunning_~retValue_acc~5#1;isPumpRunning_~retValue_acc~5#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~5#1; {5190#false} is VALID [2022-02-20 18:08:22,508 INFO L290 TraceCheckUtils]: 81: Hoare triple {5190#false} __utac_acc__Specification2_spec__2_#t~ret30#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret30#1 && __utac_acc__Specification2_spec__2_#t~ret30#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret30#1;havoc __utac_acc__Specification2_spec__2_#t~ret30#1; {5190#false} is VALID [2022-02-20 18:08:22,508 INFO L290 TraceCheckUtils]: 82: Hoare triple {5190#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {5190#false} is VALID [2022-02-20 18:08:22,509 INFO L290 TraceCheckUtils]: 83: Hoare triple {5190#false} assume 0 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {5190#false} is VALID [2022-02-20 18:08:22,509 INFO L290 TraceCheckUtils]: 84: Hoare triple {5190#false} assume !false; {5190#false} is VALID [2022-02-20 18:08:22,509 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-02-20 18:08:22,509 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:08:22,509 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [682670505] [2022-02-20 18:08:22,509 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [682670505] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:08:22,509 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:08:22,509 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-02-20 18:08:22,509 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1482124233] [2022-02-20 18:08:22,509 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:08:22,510 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 9.0) internal successors, (54), 5 states have internal predecessors, (54), 2 states have call successors, (11), 2 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) Word has length 85 [2022-02-20 18:08:22,510 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:08:22,510 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 9.0) internal successors, (54), 5 states have internal predecessors, (54), 2 states have call successors, (11), 2 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-02-20 18:08:22,549 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 75 edges. 75 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:22,550 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-02-20 18:08:22,550 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:08:22,550 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-02-20 18:08:22,550 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-02-20 18:08:22,550 INFO L87 Difference]: Start difference. First operand 348 states and 476 transitions. Second operand has 6 states, 6 states have (on average 9.0) internal successors, (54), 5 states have internal predecessors, (54), 2 states have call successors, (11), 2 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-02-20 18:08:23,175 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:23,175 INFO L93 Difference]: Finished difference Result 759 states and 1083 transitions. [2022-02-20 18:08:23,175 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-02-20 18:08:23,176 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 9.0) internal successors, (54), 5 states have internal predecessors, (54), 2 states have call successors, (11), 2 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) Word has length 85 [2022-02-20 18:08:23,176 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:08:23,176 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 9.0) internal successors, (54), 5 states have internal predecessors, (54), 2 states have call successors, (11), 2 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-02-20 18:08:23,180 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 366 transitions. [2022-02-20 18:08:23,181 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 9.0) internal successors, (54), 5 states have internal predecessors, (54), 2 states have call successors, (11), 2 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-02-20 18:08:23,184 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 366 transitions. [2022-02-20 18:08:23,184 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 366 transitions. [2022-02-20 18:08:23,421 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 366 edges. 366 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:23,433 INFO L225 Difference]: With dead ends: 759 [2022-02-20 18:08:23,433 INFO L226 Difference]: Without dead ends: 434 [2022-02-20 18:08:23,434 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 31 GetRequests, 23 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-02-20 18:08:23,435 INFO L933 BasicCegarLoop]: 158 mSDtfsCounter, 92 mSDsluCounter, 448 mSDsCounter, 0 mSdLazyCounter, 213 mSolverCounterSat, 40 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 98 SdHoareTripleChecker+Valid, 606 SdHoareTripleChecker+Invalid, 253 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 40 IncrementalHoareTripleChecker+Valid, 213 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-02-20 18:08:23,435 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [98 Valid, 606 Invalid, 253 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [40 Valid, 213 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-02-20 18:08:23,436 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 434 states. [2022-02-20 18:08:23,449 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 434 to 418. [2022-02-20 18:08:23,450 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:08:23,451 INFO L82 GeneralOperation]: Start isEquivalent. First operand 434 states. Second operand has 418 states, 302 states have (on average 1.2980132450331126) internal successors, (392), 335 states have internal predecessors, (392), 68 states have call successors, (68), 37 states have call predecessors, (68), 47 states have return successors, (104), 77 states have call predecessors, (104), 68 states have call successors, (104) [2022-02-20 18:08:23,452 INFO L74 IsIncluded]: Start isIncluded. First operand 434 states. Second operand has 418 states, 302 states have (on average 1.2980132450331126) internal successors, (392), 335 states have internal predecessors, (392), 68 states have call successors, (68), 37 states have call predecessors, (68), 47 states have return successors, (104), 77 states have call predecessors, (104), 68 states have call successors, (104) [2022-02-20 18:08:23,452 INFO L87 Difference]: Start difference. First operand 434 states. Second operand has 418 states, 302 states have (on average 1.2980132450331126) internal successors, (392), 335 states have internal predecessors, (392), 68 states have call successors, (68), 37 states have call predecessors, (68), 47 states have return successors, (104), 77 states have call predecessors, (104), 68 states have call successors, (104) [2022-02-20 18:08:23,464 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:23,464 INFO L93 Difference]: Finished difference Result 434 states and 593 transitions. [2022-02-20 18:08:23,464 INFO L276 IsEmpty]: Start isEmpty. Operand 434 states and 593 transitions. [2022-02-20 18:08:23,466 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:23,466 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:23,467 INFO L74 IsIncluded]: Start isIncluded. First operand has 418 states, 302 states have (on average 1.2980132450331126) internal successors, (392), 335 states have internal predecessors, (392), 68 states have call successors, (68), 37 states have call predecessors, (68), 47 states have return successors, (104), 77 states have call predecessors, (104), 68 states have call successors, (104) Second operand 434 states. [2022-02-20 18:08:23,467 INFO L87 Difference]: Start difference. First operand has 418 states, 302 states have (on average 1.2980132450331126) internal successors, (392), 335 states have internal predecessors, (392), 68 states have call successors, (68), 37 states have call predecessors, (68), 47 states have return successors, (104), 77 states have call predecessors, (104), 68 states have call successors, (104) Second operand 434 states. [2022-02-20 18:08:23,479 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:23,479 INFO L93 Difference]: Finished difference Result 434 states and 593 transitions. [2022-02-20 18:08:23,479 INFO L276 IsEmpty]: Start isEmpty. Operand 434 states and 593 transitions. [2022-02-20 18:08:23,480 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:23,481 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:23,481 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:08:23,481 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:08:23,482 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 418 states, 302 states have (on average 1.2980132450331126) internal successors, (392), 335 states have internal predecessors, (392), 68 states have call successors, (68), 37 states have call predecessors, (68), 47 states have return successors, (104), 77 states have call predecessors, (104), 68 states have call successors, (104) [2022-02-20 18:08:23,493 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 418 states to 418 states and 564 transitions. [2022-02-20 18:08:23,494 INFO L78 Accepts]: Start accepts. Automaton has 418 states and 564 transitions. Word has length 85 [2022-02-20 18:08:23,494 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:08:23,494 INFO L470 AbstractCegarLoop]: Abstraction has 418 states and 564 transitions. [2022-02-20 18:08:23,495 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 9.0) internal successors, (54), 5 states have internal predecessors, (54), 2 states have call successors, (11), 2 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-02-20 18:08:23,495 INFO L276 IsEmpty]: Start isEmpty. Operand 418 states and 564 transitions. [2022-02-20 18:08:23,496 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 86 [2022-02-20 18:08:23,496 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:08:23,496 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:08:23,496 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-02-20 18:08:23,496 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:08:23,497 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:08:23,497 INFO L85 PathProgramCache]: Analyzing trace with hash -1737319434, now seen corresponding path program 1 times [2022-02-20 18:08:23,497 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:08:23,497 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1569303688] [2022-02-20 18:08:23,497 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:08:23,497 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:08:23,520 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:23,537 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-02-20 18:08:23,539 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:23,541 INFO L290 TraceCheckUtils]: 0: Hoare triple {7827#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {7827#true} is VALID [2022-02-20 18:08:23,541 INFO L290 TraceCheckUtils]: 1: Hoare triple {7827#true} assume true; {7827#true} is VALID [2022-02-20 18:08:23,542 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {7827#true} {7829#(= 1 ~systemActive~0)} #363#return; {7829#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:23,542 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:08:23,544 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:23,546 INFO L290 TraceCheckUtils]: 0: Hoare triple {7827#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {7827#true} is VALID [2022-02-20 18:08:23,546 INFO L290 TraceCheckUtils]: 1: Hoare triple {7827#true} assume true; {7827#true} is VALID [2022-02-20 18:08:23,547 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {7827#true} {7829#(= 1 ~systemActive~0)} #365#return; {7829#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:23,547 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-02-20 18:08:23,548 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:23,550 INFO L290 TraceCheckUtils]: 0: Hoare triple {7827#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {7827#true} is VALID [2022-02-20 18:08:23,551 INFO L290 TraceCheckUtils]: 1: Hoare triple {7827#true} assume true; {7827#true} is VALID [2022-02-20 18:08:23,551 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {7827#true} {7829#(= 1 ~systemActive~0)} #367#return; {7829#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:23,551 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:08:23,553 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:23,570 INFO L290 TraceCheckUtils]: 0: Hoare triple {7827#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {7827#true} is VALID [2022-02-20 18:08:23,570 INFO L290 TraceCheckUtils]: 1: Hoare triple {7827#true} assume true; {7827#true} is VALID [2022-02-20 18:08:23,570 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {7827#true} {7829#(= 1 ~systemActive~0)} #369#return; {7829#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:23,570 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-02-20 18:08:23,572 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:23,574 INFO L290 TraceCheckUtils]: 0: Hoare triple {7827#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {7827#true} is VALID [2022-02-20 18:08:23,574 INFO L290 TraceCheckUtils]: 1: Hoare triple {7827#true} assume true; {7827#true} is VALID [2022-02-20 18:08:23,575 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {7827#true} {7829#(= 1 ~systemActive~0)} #371#return; {7829#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:23,575 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-02-20 18:08:23,576 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:23,579 INFO L290 TraceCheckUtils]: 0: Hoare triple {7827#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {7827#true} is VALID [2022-02-20 18:08:23,579 INFO L290 TraceCheckUtils]: 1: Hoare triple {7827#true} assume true; {7827#true} is VALID [2022-02-20 18:08:23,579 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {7827#true} {7829#(= 1 ~systemActive~0)} #373#return; {7829#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:23,581 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2022-02-20 18:08:23,584 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:23,590 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:08:23,595 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:23,618 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-02-20 18:08:23,619 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:23,622 INFO L290 TraceCheckUtils]: 0: Hoare triple {7872#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {7827#true} is VALID [2022-02-20 18:08:23,622 INFO L290 TraceCheckUtils]: 1: Hoare triple {7827#true} assume true; {7827#true} is VALID [2022-02-20 18:08:23,622 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {7827#true} {7828#false} #339#return; {7828#false} is VALID [2022-02-20 18:08:23,622 INFO L290 TraceCheckUtils]: 0: Hoare triple {7872#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret9#1, processEnvironment__role__highWaterSensor_~tmp~0#1;havoc processEnvironment__role__highWaterSensor_~tmp~0#1; {7827#true} is VALID [2022-02-20 18:08:23,622 INFO L290 TraceCheckUtils]: 1: Hoare triple {7827#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret22#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {7827#true} is VALID [2022-02-20 18:08:23,623 INFO L290 TraceCheckUtils]: 2: Hoare triple {7827#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~2#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {7890#(= (+ (- 1) |processEnvironment__before__lowWaterSensor_isHighWaterSensorDry_#res#1|) 0)} is VALID [2022-02-20 18:08:23,623 INFO L290 TraceCheckUtils]: 3: Hoare triple {7890#(= (+ (- 1) |processEnvironment__before__lowWaterSensor_isHighWaterSensorDry_#res#1|) 0)} isHighWaterLevel_#t~ret22#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret22#1 && isHighWaterLevel_#t~ret22#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret22#1;havoc isHighWaterLevel_#t~ret22#1; {7891#(not (= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp~4#1| 0))} is VALID [2022-02-20 18:08:23,624 INFO L290 TraceCheckUtils]: 4: Hoare triple {7891#(not (= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp~4#1| 0))} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1; {7828#false} is VALID [2022-02-20 18:08:23,624 INFO L290 TraceCheckUtils]: 5: Hoare triple {7828#false} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {7828#false} is VALID [2022-02-20 18:08:23,624 INFO L290 TraceCheckUtils]: 6: Hoare triple {7828#false} processEnvironment__role__highWaterSensor_#t~ret9#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret9#1 && processEnvironment__role__highWaterSensor_#t~ret9#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~0#1 := processEnvironment__role__highWaterSensor_#t~ret9#1;havoc processEnvironment__role__highWaterSensor_#t~ret9#1; {7828#false} is VALID [2022-02-20 18:08:23,624 INFO L290 TraceCheckUtils]: 7: Hoare triple {7828#false} assume 0 != processEnvironment__role__highWaterSensor_~tmp~0#1;assume { :begin_inline_activatePump } true; {7828#false} is VALID [2022-02-20 18:08:23,624 INFO L290 TraceCheckUtils]: 8: Hoare triple {7828#false} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {7828#false} is VALID [2022-02-20 18:08:23,624 INFO L272 TraceCheckUtils]: 9: Hoare triple {7828#false} call activatePump__before__methaneQuery(); {7872#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:23,624 INFO L290 TraceCheckUtils]: 10: Hoare triple {7872#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {7827#true} is VALID [2022-02-20 18:08:23,624 INFO L290 TraceCheckUtils]: 11: Hoare triple {7827#true} assume true; {7827#true} is VALID [2022-02-20 18:08:23,624 INFO L284 TraceCheckUtils]: 12: Hoare quadruple {7827#true} {7828#false} #339#return; {7828#false} is VALID [2022-02-20 18:08:23,624 INFO L290 TraceCheckUtils]: 13: Hoare triple {7828#false} assume { :end_inline_activatePump } true; {7828#false} is VALID [2022-02-20 18:08:23,624 INFO L290 TraceCheckUtils]: 14: Hoare triple {7828#false} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {7828#false} is VALID [2022-02-20 18:08:23,629 INFO L290 TraceCheckUtils]: 15: Hoare triple {7828#false} assume true; {7828#false} is VALID [2022-02-20 18:08:23,630 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {7828#false} {7827#true} #391#return; {7828#false} is VALID [2022-02-20 18:08:23,630 INFO L290 TraceCheckUtils]: 0: Hoare triple {7872#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {7827#true} is VALID [2022-02-20 18:08:23,631 INFO L272 TraceCheckUtils]: 1: Hoare triple {7827#true} call processEnvironment__before__lowWaterSensor(); {7872#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:23,631 INFO L290 TraceCheckUtils]: 2: Hoare triple {7872#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret9#1, processEnvironment__role__highWaterSensor_~tmp~0#1;havoc processEnvironment__role__highWaterSensor_~tmp~0#1; {7827#true} is VALID [2022-02-20 18:08:23,631 INFO L290 TraceCheckUtils]: 3: Hoare triple {7827#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret22#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {7827#true} is VALID [2022-02-20 18:08:23,631 INFO L290 TraceCheckUtils]: 4: Hoare triple {7827#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~2#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {7890#(= (+ (- 1) |processEnvironment__before__lowWaterSensor_isHighWaterSensorDry_#res#1|) 0)} is VALID [2022-02-20 18:08:23,632 INFO L290 TraceCheckUtils]: 5: Hoare triple {7890#(= (+ (- 1) |processEnvironment__before__lowWaterSensor_isHighWaterSensorDry_#res#1|) 0)} isHighWaterLevel_#t~ret22#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret22#1 && isHighWaterLevel_#t~ret22#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret22#1;havoc isHighWaterLevel_#t~ret22#1; {7891#(not (= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp~4#1| 0))} is VALID [2022-02-20 18:08:23,632 INFO L290 TraceCheckUtils]: 6: Hoare triple {7891#(not (= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp~4#1| 0))} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1; {7828#false} is VALID [2022-02-20 18:08:23,632 INFO L290 TraceCheckUtils]: 7: Hoare triple {7828#false} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {7828#false} is VALID [2022-02-20 18:08:23,632 INFO L290 TraceCheckUtils]: 8: Hoare triple {7828#false} processEnvironment__role__highWaterSensor_#t~ret9#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret9#1 && processEnvironment__role__highWaterSensor_#t~ret9#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~0#1 := processEnvironment__role__highWaterSensor_#t~ret9#1;havoc processEnvironment__role__highWaterSensor_#t~ret9#1; {7828#false} is VALID [2022-02-20 18:08:23,632 INFO L290 TraceCheckUtils]: 9: Hoare triple {7828#false} assume 0 != processEnvironment__role__highWaterSensor_~tmp~0#1;assume { :begin_inline_activatePump } true; {7828#false} is VALID [2022-02-20 18:08:23,632 INFO L290 TraceCheckUtils]: 10: Hoare triple {7828#false} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {7828#false} is VALID [2022-02-20 18:08:23,632 INFO L272 TraceCheckUtils]: 11: Hoare triple {7828#false} call activatePump__before__methaneQuery(); {7872#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:23,632 INFO L290 TraceCheckUtils]: 12: Hoare triple {7872#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {7827#true} is VALID [2022-02-20 18:08:23,632 INFO L290 TraceCheckUtils]: 13: Hoare triple {7827#true} assume true; {7827#true} is VALID [2022-02-20 18:08:23,632 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {7827#true} {7828#false} #339#return; {7828#false} is VALID [2022-02-20 18:08:23,632 INFO L290 TraceCheckUtils]: 15: Hoare triple {7828#false} assume { :end_inline_activatePump } true; {7828#false} is VALID [2022-02-20 18:08:23,632 INFO L290 TraceCheckUtils]: 16: Hoare triple {7828#false} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {7828#false} is VALID [2022-02-20 18:08:23,633 INFO L290 TraceCheckUtils]: 17: Hoare triple {7828#false} assume true; {7828#false} is VALID [2022-02-20 18:08:23,633 INFO L284 TraceCheckUtils]: 18: Hoare quadruple {7828#false} {7827#true} #391#return; {7828#false} is VALID [2022-02-20 18:08:23,633 INFO L290 TraceCheckUtils]: 19: Hoare triple {7828#false} assume true; {7828#false} is VALID [2022-02-20 18:08:23,633 INFO L284 TraceCheckUtils]: 20: Hoare quadruple {7828#false} {7827#true} #359#return; {7828#false} is VALID [2022-02-20 18:08:23,633 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 75 [2022-02-20 18:08:23,635 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:23,637 INFO L290 TraceCheckUtils]: 0: Hoare triple {7827#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {7827#true} is VALID [2022-02-20 18:08:23,637 INFO L290 TraceCheckUtils]: 1: Hoare triple {7827#true} assume true; {7827#true} is VALID [2022-02-20 18:08:23,637 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {7827#true} {7828#false} #361#return; {7828#false} is VALID [2022-02-20 18:08:23,640 INFO L290 TraceCheckUtils]: 0: Hoare triple {7827#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(38, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(13, 9);call #Ultimate.allocInit(3, 10);call write~init~int(79, 10, 0, 1);call write~init~int(110, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(4, 11);call write~init~int(79, 11, 0, 1);call write~init~int(102, 11, 1, 1);call write~init~int(102, 11, 2, 1);call write~init~int(0, 11, 3, 1);call #Ultimate.allocInit(7, 12);call write~init~int(44, 12, 0, 1);call write~init~int(80, 12, 1, 1);call write~init~int(117, 12, 2, 1);call write~init~int(109, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(3, 13);call write~init~int(79, 13, 0, 1);call write~init~int(110, 13, 1, 1);call write~init~int(0, 13, 2, 1);call #Ultimate.allocInit(4, 14);call write~init~int(79, 14, 0, 1);call write~init~int(102, 14, 1, 1);call write~init~int(102, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(3, 15);call write~init~int(41, 15, 0, 1);call write~init~int(32, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(10, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~__SELECTED_FEATURE_base~0 := 0;~__SELECTED_FEATURE_highWaterSensor~0 := 0;~__SELECTED_FEATURE_lowWaterSensor~0 := 0;~__SELECTED_FEATURE_methaneQuery~0 := 0;~__SELECTED_FEATURE_methaneAlarm~0 := 0;~__SELECTED_FEATURE_stopCommand~0 := 0;~__SELECTED_FEATURE_startCommand~0 := 0;~__GUIDSL_ROOT_PRODUCTION~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4;~methAndRunningLastTime~0 := 0;~head~0.base, ~head~0.offset := 0, 0; {7829#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:23,640 INFO L290 TraceCheckUtils]: 1: Hoare triple {7829#(= 1 ~systemActive~0)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret24#1, main_~retValue_acc~8#1, main_~tmp~6#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~6#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1; {7829#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:23,640 INFO L290 TraceCheckUtils]: 2: Hoare triple {7829#(= 1 ~systemActive~0)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret55#1, select_features_#t~ret56#1, select_features_#t~ret57#1, select_features_#t~ret58#1, select_features_#t~ret59#1, select_features_#t~ret60#1;~__SELECTED_FEATURE_base~0 := 1; {7829#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:23,640 INFO L272 TraceCheckUtils]: 3: Hoare triple {7829#(= 1 ~systemActive~0)} call select_features_#t~ret55#1 := select_one(); {7827#true} is VALID [2022-02-20 18:08:23,640 INFO L290 TraceCheckUtils]: 4: Hoare triple {7827#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {7827#true} is VALID [2022-02-20 18:08:23,641 INFO L290 TraceCheckUtils]: 5: Hoare triple {7827#true} assume true; {7827#true} is VALID [2022-02-20 18:08:23,641 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {7827#true} {7829#(= 1 ~systemActive~0)} #363#return; {7829#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:23,641 INFO L290 TraceCheckUtils]: 7: Hoare triple {7829#(= 1 ~systemActive~0)} assume -2147483648 <= select_features_#t~ret55#1 && select_features_#t~ret55#1 <= 2147483647;~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret55#1;havoc select_features_#t~ret55#1; {7829#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:23,641 INFO L272 TraceCheckUtils]: 8: Hoare triple {7829#(= 1 ~systemActive~0)} call select_features_#t~ret56#1 := select_one(); {7827#true} is VALID [2022-02-20 18:08:23,641 INFO L290 TraceCheckUtils]: 9: Hoare triple {7827#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {7827#true} is VALID [2022-02-20 18:08:23,641 INFO L290 TraceCheckUtils]: 10: Hoare triple {7827#true} assume true; {7827#true} is VALID [2022-02-20 18:08:23,642 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {7827#true} {7829#(= 1 ~systemActive~0)} #365#return; {7829#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:23,642 INFO L290 TraceCheckUtils]: 12: Hoare triple {7829#(= 1 ~systemActive~0)} assume -2147483648 <= select_features_#t~ret56#1 && select_features_#t~ret56#1 <= 2147483647;~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret56#1;havoc select_features_#t~ret56#1; {7829#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:23,642 INFO L272 TraceCheckUtils]: 13: Hoare triple {7829#(= 1 ~systemActive~0)} call select_features_#t~ret57#1 := select_one(); {7827#true} is VALID [2022-02-20 18:08:23,642 INFO L290 TraceCheckUtils]: 14: Hoare triple {7827#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {7827#true} is VALID [2022-02-20 18:08:23,642 INFO L290 TraceCheckUtils]: 15: Hoare triple {7827#true} assume true; {7827#true} is VALID [2022-02-20 18:08:23,643 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {7827#true} {7829#(= 1 ~systemActive~0)} #367#return; {7829#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:23,643 INFO L290 TraceCheckUtils]: 17: Hoare triple {7829#(= 1 ~systemActive~0)} assume -2147483648 <= select_features_#t~ret57#1 && select_features_#t~ret57#1 <= 2147483647;~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret57#1;havoc select_features_#t~ret57#1; {7829#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:23,643 INFO L272 TraceCheckUtils]: 18: Hoare triple {7829#(= 1 ~systemActive~0)} call select_features_#t~ret58#1 := select_one(); {7827#true} is VALID [2022-02-20 18:08:23,643 INFO L290 TraceCheckUtils]: 19: Hoare triple {7827#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {7827#true} is VALID [2022-02-20 18:08:23,643 INFO L290 TraceCheckUtils]: 20: Hoare triple {7827#true} assume true; {7827#true} is VALID [2022-02-20 18:08:23,644 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {7827#true} {7829#(= 1 ~systemActive~0)} #369#return; {7829#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:23,644 INFO L290 TraceCheckUtils]: 22: Hoare triple {7829#(= 1 ~systemActive~0)} assume -2147483648 <= select_features_#t~ret58#1 && select_features_#t~ret58#1 <= 2147483647;~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret58#1;havoc select_features_#t~ret58#1; {7829#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:23,644 INFO L272 TraceCheckUtils]: 23: Hoare triple {7829#(= 1 ~systemActive~0)} call select_features_#t~ret59#1 := select_one(); {7827#true} is VALID [2022-02-20 18:08:23,644 INFO L290 TraceCheckUtils]: 24: Hoare triple {7827#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {7827#true} is VALID [2022-02-20 18:08:23,644 INFO L290 TraceCheckUtils]: 25: Hoare triple {7827#true} assume true; {7827#true} is VALID [2022-02-20 18:08:23,644 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {7827#true} {7829#(= 1 ~systemActive~0)} #371#return; {7829#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:23,645 INFO L290 TraceCheckUtils]: 27: Hoare triple {7829#(= 1 ~systemActive~0)} assume -2147483648 <= select_features_#t~ret59#1 && select_features_#t~ret59#1 <= 2147483647;~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret59#1;havoc select_features_#t~ret59#1; {7829#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:23,645 INFO L272 TraceCheckUtils]: 28: Hoare triple {7829#(= 1 ~systemActive~0)} call select_features_#t~ret60#1 := select_one(); {7827#true} is VALID [2022-02-20 18:08:23,645 INFO L290 TraceCheckUtils]: 29: Hoare triple {7827#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {7827#true} is VALID [2022-02-20 18:08:23,645 INFO L290 TraceCheckUtils]: 30: Hoare triple {7827#true} assume true; {7827#true} is VALID [2022-02-20 18:08:23,645 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {7827#true} {7829#(= 1 ~systemActive~0)} #373#return; {7829#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:23,646 INFO L290 TraceCheckUtils]: 32: Hoare triple {7829#(= 1 ~systemActive~0)} assume -2147483648 <= select_features_#t~ret60#1 && select_features_#t~ret60#1 <= 2147483647;~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret60#1;havoc select_features_#t~ret60#1; {7829#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:23,646 INFO L290 TraceCheckUtils]: 33: Hoare triple {7829#(= 1 ~systemActive~0)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~13#1;havoc valid_product_~retValue_acc~13#1;valid_product_~retValue_acc~13#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~13#1; {7829#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:23,646 INFO L290 TraceCheckUtils]: 34: Hoare triple {7829#(= 1 ~systemActive~0)} main_#t~ret24#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret24#1 && main_#t~ret24#1 <= 2147483647;main_~tmp~6#1 := main_#t~ret24#1;havoc main_#t~ret24#1; {7829#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:23,647 INFO L290 TraceCheckUtils]: 35: Hoare triple {7829#(= 1 ~systemActive~0)} assume 0 != main_~tmp~6#1;assume { :begin_inline_setup } true; {7829#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:23,647 INFO L290 TraceCheckUtils]: 36: Hoare triple {7829#(= 1 ~systemActive~0)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0; {7829#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:23,647 INFO L290 TraceCheckUtils]: 37: Hoare triple {7829#(= 1 ~systemActive~0)} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet25#1, test_#t~nondet26#1, test_#t~nondet27#1, test_#t~nondet28#1, test_~splverifierCounter~0#1, test_~tmp~7#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~7#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {7829#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:23,647 INFO L290 TraceCheckUtils]: 38: Hoare triple {7829#(= 1 ~systemActive~0)} assume !false; {7829#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:23,648 INFO L290 TraceCheckUtils]: 39: Hoare triple {7829#(= 1 ~systemActive~0)} assume test_~splverifierCounter~0#1 < 4; {7829#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:23,648 INFO L290 TraceCheckUtils]: 40: Hoare triple {7829#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet25#1 && test_#t~nondet25#1 <= 2147483647;test_~tmp~7#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {7829#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:23,648 INFO L290 TraceCheckUtils]: 41: Hoare triple {7829#(= 1 ~systemActive~0)} assume !(0 != test_~tmp~7#1); {7829#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:23,649 INFO L290 TraceCheckUtils]: 42: Hoare triple {7829#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {7829#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:23,649 INFO L290 TraceCheckUtils]: 43: Hoare triple {7829#(= 1 ~systemActive~0)} assume !(0 != test_~tmp___0~2#1); {7829#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:23,649 INFO L290 TraceCheckUtils]: 44: Hoare triple {7829#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {7829#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:23,650 INFO L290 TraceCheckUtils]: 45: Hoare triple {7829#(= 1 ~systemActive~0)} assume 0 != test_~tmp___2~0#1; {7829#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:23,650 INFO L290 TraceCheckUtils]: 46: Hoare triple {7829#(= 1 ~systemActive~0)} assume !(0 != ~__SELECTED_FEATURE_startCommand~0); {7829#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:23,650 INFO L272 TraceCheckUtils]: 47: Hoare triple {7829#(= 1 ~systemActive~0)} call timeShift(); {7829#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:23,651 INFO L290 TraceCheckUtils]: 48: Hoare triple {7829#(= 1 ~systemActive~0)} assume !(0 != ~pumpRunning~0); {7829#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:08:23,651 INFO L290 TraceCheckUtils]: 49: Hoare triple {7829#(= 1 ~systemActive~0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {7827#true} is VALID [2022-02-20 18:08:23,651 INFO L290 TraceCheckUtils]: 50: Hoare triple {7827#true} assume !(0 != ~__SELECTED_FEATURE_methaneAlarm~0); {7827#true} is VALID [2022-02-20 18:08:23,651 INFO L272 TraceCheckUtils]: 51: Hoare triple {7827#true} call processEnvironment__before__methaneAlarm(); {7872#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:23,651 INFO L290 TraceCheckUtils]: 52: Hoare triple {7872#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {7827#true} is VALID [2022-02-20 18:08:23,651 INFO L272 TraceCheckUtils]: 53: Hoare triple {7827#true} call processEnvironment__before__lowWaterSensor(); {7872#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:23,651 INFO L290 TraceCheckUtils]: 54: Hoare triple {7872#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret9#1, processEnvironment__role__highWaterSensor_~tmp~0#1;havoc processEnvironment__role__highWaterSensor_~tmp~0#1; {7827#true} is VALID [2022-02-20 18:08:23,652 INFO L290 TraceCheckUtils]: 55: Hoare triple {7827#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret22#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {7827#true} is VALID [2022-02-20 18:08:23,652 INFO L290 TraceCheckUtils]: 56: Hoare triple {7827#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~2#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {7890#(= (+ (- 1) |processEnvironment__before__lowWaterSensor_isHighWaterSensorDry_#res#1|) 0)} is VALID [2022-02-20 18:08:23,652 INFO L290 TraceCheckUtils]: 57: Hoare triple {7890#(= (+ (- 1) |processEnvironment__before__lowWaterSensor_isHighWaterSensorDry_#res#1|) 0)} isHighWaterLevel_#t~ret22#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret22#1 && isHighWaterLevel_#t~ret22#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret22#1;havoc isHighWaterLevel_#t~ret22#1; {7891#(not (= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp~4#1| 0))} is VALID [2022-02-20 18:08:23,653 INFO L290 TraceCheckUtils]: 58: Hoare triple {7891#(not (= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp~4#1| 0))} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1; {7828#false} is VALID [2022-02-20 18:08:23,653 INFO L290 TraceCheckUtils]: 59: Hoare triple {7828#false} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {7828#false} is VALID [2022-02-20 18:08:23,653 INFO L290 TraceCheckUtils]: 60: Hoare triple {7828#false} processEnvironment__role__highWaterSensor_#t~ret9#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret9#1 && processEnvironment__role__highWaterSensor_#t~ret9#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~0#1 := processEnvironment__role__highWaterSensor_#t~ret9#1;havoc processEnvironment__role__highWaterSensor_#t~ret9#1; {7828#false} is VALID [2022-02-20 18:08:23,653 INFO L290 TraceCheckUtils]: 61: Hoare triple {7828#false} assume 0 != processEnvironment__role__highWaterSensor_~tmp~0#1;assume { :begin_inline_activatePump } true; {7828#false} is VALID [2022-02-20 18:08:23,653 INFO L290 TraceCheckUtils]: 62: Hoare triple {7828#false} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {7828#false} is VALID [2022-02-20 18:08:23,653 INFO L272 TraceCheckUtils]: 63: Hoare triple {7828#false} call activatePump__before__methaneQuery(); {7872#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:23,653 INFO L290 TraceCheckUtils]: 64: Hoare triple {7872#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {7827#true} is VALID [2022-02-20 18:08:23,653 INFO L290 TraceCheckUtils]: 65: Hoare triple {7827#true} assume true; {7827#true} is VALID [2022-02-20 18:08:23,653 INFO L284 TraceCheckUtils]: 66: Hoare quadruple {7827#true} {7828#false} #339#return; {7828#false} is VALID [2022-02-20 18:08:23,653 INFO L290 TraceCheckUtils]: 67: Hoare triple {7828#false} assume { :end_inline_activatePump } true; {7828#false} is VALID [2022-02-20 18:08:23,653 INFO L290 TraceCheckUtils]: 68: Hoare triple {7828#false} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {7828#false} is VALID [2022-02-20 18:08:23,653 INFO L290 TraceCheckUtils]: 69: Hoare triple {7828#false} assume true; {7828#false} is VALID [2022-02-20 18:08:23,653 INFO L284 TraceCheckUtils]: 70: Hoare quadruple {7828#false} {7827#true} #391#return; {7828#false} is VALID [2022-02-20 18:08:23,653 INFO L290 TraceCheckUtils]: 71: Hoare triple {7828#false} assume true; {7828#false} is VALID [2022-02-20 18:08:23,653 INFO L284 TraceCheckUtils]: 72: Hoare quadruple {7828#false} {7827#true} #359#return; {7828#false} is VALID [2022-02-20 18:08:23,654 INFO L290 TraceCheckUtils]: 73: Hoare triple {7828#false} assume { :end_inline_processEnvironment } true; {7828#false} is VALID [2022-02-20 18:08:23,654 INFO L290 TraceCheckUtils]: 74: Hoare triple {7828#false} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret29#1, __utac_acc__Specification2_spec__2_#t~ret30#1, __utac_acc__Specification2_spec__2_~tmp~8#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~8#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {7828#false} is VALID [2022-02-20 18:08:23,654 INFO L272 TraceCheckUtils]: 75: Hoare triple {7828#false} call __utac_acc__Specification2_spec__2_#t~ret29#1 := isMethaneLevelCritical(); {7827#true} is VALID [2022-02-20 18:08:23,654 INFO L290 TraceCheckUtils]: 76: Hoare triple {7827#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {7827#true} is VALID [2022-02-20 18:08:23,654 INFO L290 TraceCheckUtils]: 77: Hoare triple {7827#true} assume true; {7827#true} is VALID [2022-02-20 18:08:23,654 INFO L284 TraceCheckUtils]: 78: Hoare quadruple {7827#true} {7828#false} #361#return; {7828#false} is VALID [2022-02-20 18:08:23,654 INFO L290 TraceCheckUtils]: 79: Hoare triple {7828#false} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret29#1 && __utac_acc__Specification2_spec__2_#t~ret29#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~8#1 := __utac_acc__Specification2_spec__2_#t~ret29#1;havoc __utac_acc__Specification2_spec__2_#t~ret29#1; {7828#false} is VALID [2022-02-20 18:08:23,654 INFO L290 TraceCheckUtils]: 80: Hoare triple {7828#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~8#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~5#1;havoc isPumpRunning_~retValue_acc~5#1;isPumpRunning_~retValue_acc~5#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~5#1; {7828#false} is VALID [2022-02-20 18:08:23,654 INFO L290 TraceCheckUtils]: 81: Hoare triple {7828#false} __utac_acc__Specification2_spec__2_#t~ret30#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret30#1 && __utac_acc__Specification2_spec__2_#t~ret30#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret30#1;havoc __utac_acc__Specification2_spec__2_#t~ret30#1; {7828#false} is VALID [2022-02-20 18:08:23,654 INFO L290 TraceCheckUtils]: 82: Hoare triple {7828#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {7828#false} is VALID [2022-02-20 18:08:23,654 INFO L290 TraceCheckUtils]: 83: Hoare triple {7828#false} assume 0 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {7828#false} is VALID [2022-02-20 18:08:23,654 INFO L290 TraceCheckUtils]: 84: Hoare triple {7828#false} assume !false; {7828#false} is VALID [2022-02-20 18:08:23,656 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-02-20 18:08:23,657 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:08:23,657 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1569303688] [2022-02-20 18:08:23,657 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1569303688] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:08:23,657 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:08:23,657 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-02-20 18:08:23,657 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1555877674] [2022-02-20 18:08:23,657 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:08:23,659 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 9.0) internal successors, (54), 5 states have internal predecessors, (54), 3 states have call successors, (11), 3 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 3 states have call successors, (10) Word has length 85 [2022-02-20 18:08:23,659 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:08:23,659 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 9.0) internal successors, (54), 5 states have internal predecessors, (54), 3 states have call successors, (11), 3 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 3 states have call successors, (10) [2022-02-20 18:08:23,702 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 75 edges. 75 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:23,702 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-02-20 18:08:23,702 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:08:23,703 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-02-20 18:08:23,703 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-02-20 18:08:23,704 INFO L87 Difference]: Start difference. First operand 418 states and 564 transitions. Second operand has 6 states, 6 states have (on average 9.0) internal successors, (54), 5 states have internal predecessors, (54), 3 states have call successors, (11), 3 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 3 states have call successors, (10) [2022-02-20 18:08:24,549 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:24,549 INFO L93 Difference]: Finished difference Result 847 states and 1189 transitions. [2022-02-20 18:08:24,550 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-02-20 18:08:24,550 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 9.0) internal successors, (54), 5 states have internal predecessors, (54), 3 states have call successors, (11), 3 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 3 states have call successors, (10) Word has length 85 [2022-02-20 18:08:24,550 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:08:24,550 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 9.0) internal successors, (54), 5 states have internal predecessors, (54), 3 states have call successors, (11), 3 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 3 states have call successors, (10) [2022-02-20 18:08:24,555 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 572 transitions. [2022-02-20 18:08:24,555 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 9.0) internal successors, (54), 5 states have internal predecessors, (54), 3 states have call successors, (11), 3 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 3 states have call successors, (10) [2022-02-20 18:08:24,560 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 572 transitions. [2022-02-20 18:08:24,560 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 11 states and 572 transitions. [2022-02-20 18:08:24,944 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 572 edges. 572 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:24,963 INFO L225 Difference]: With dead ends: 847 [2022-02-20 18:08:24,963 INFO L226 Difference]: Without dead ends: 452 [2022-02-20 18:08:24,964 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 35 GetRequests, 24 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 17 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=54, Invalid=102, Unknown=0, NotChecked=0, Total=156 [2022-02-20 18:08:24,965 INFO L933 BasicCegarLoop]: 173 mSDtfsCounter, 321 mSDsluCounter, 446 mSDsCounter, 0 mSdLazyCounter, 306 mSolverCounterSat, 116 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 332 SdHoareTripleChecker+Valid, 619 SdHoareTripleChecker+Invalid, 422 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 116 IncrementalHoareTripleChecker+Valid, 306 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-02-20 18:08:24,965 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [332 Valid, 619 Invalid, 422 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [116 Valid, 306 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-02-20 18:08:24,966 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 452 states. [2022-02-20 18:08:24,979 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 452 to 422. [2022-02-20 18:08:24,979 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:08:24,980 INFO L82 GeneralOperation]: Start isEquivalent. First operand 452 states. Second operand has 422 states, 306 states have (on average 1.2941176470588236) internal successors, (396), 339 states have internal predecessors, (396), 68 states have call successors, (68), 37 states have call predecessors, (68), 47 states have return successors, (104), 77 states have call predecessors, (104), 68 states have call successors, (104) [2022-02-20 18:08:24,981 INFO L74 IsIncluded]: Start isIncluded. First operand 452 states. Second operand has 422 states, 306 states have (on average 1.2941176470588236) internal successors, (396), 339 states have internal predecessors, (396), 68 states have call successors, (68), 37 states have call predecessors, (68), 47 states have return successors, (104), 77 states have call predecessors, (104), 68 states have call successors, (104) [2022-02-20 18:08:24,981 INFO L87 Difference]: Start difference. First operand 452 states. Second operand has 422 states, 306 states have (on average 1.2941176470588236) internal successors, (396), 339 states have internal predecessors, (396), 68 states have call successors, (68), 37 states have call predecessors, (68), 47 states have return successors, (104), 77 states have call predecessors, (104), 68 states have call successors, (104) [2022-02-20 18:08:24,993 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:24,993 INFO L93 Difference]: Finished difference Result 452 states and 611 transitions. [2022-02-20 18:08:24,993 INFO L276 IsEmpty]: Start isEmpty. Operand 452 states and 611 transitions. [2022-02-20 18:08:24,994 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:24,994 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:24,995 INFO L74 IsIncluded]: Start isIncluded. First operand has 422 states, 306 states have (on average 1.2941176470588236) internal successors, (396), 339 states have internal predecessors, (396), 68 states have call successors, (68), 37 states have call predecessors, (68), 47 states have return successors, (104), 77 states have call predecessors, (104), 68 states have call successors, (104) Second operand 452 states. [2022-02-20 18:08:24,996 INFO L87 Difference]: Start difference. First operand has 422 states, 306 states have (on average 1.2941176470588236) internal successors, (396), 339 states have internal predecessors, (396), 68 states have call successors, (68), 37 states have call predecessors, (68), 47 states have return successors, (104), 77 states have call predecessors, (104), 68 states have call successors, (104) Second operand 452 states. [2022-02-20 18:08:25,008 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:25,008 INFO L93 Difference]: Finished difference Result 452 states and 611 transitions. [2022-02-20 18:08:25,008 INFO L276 IsEmpty]: Start isEmpty. Operand 452 states and 611 transitions. [2022-02-20 18:08:25,009 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:25,009 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:25,009 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:08:25,010 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:08:25,011 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 422 states, 306 states have (on average 1.2941176470588236) internal successors, (396), 339 states have internal predecessors, (396), 68 states have call successors, (68), 37 states have call predecessors, (68), 47 states have return successors, (104), 77 states have call predecessors, (104), 68 states have call successors, (104) [2022-02-20 18:08:25,024 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 422 states to 422 states and 568 transitions. [2022-02-20 18:08:25,024 INFO L78 Accepts]: Start accepts. Automaton has 422 states and 568 transitions. Word has length 85 [2022-02-20 18:08:25,024 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:08:25,024 INFO L470 AbstractCegarLoop]: Abstraction has 422 states and 568 transitions. [2022-02-20 18:08:25,025 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 9.0) internal successors, (54), 5 states have internal predecessors, (54), 3 states have call successors, (11), 3 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 3 states have call successors, (10) [2022-02-20 18:08:25,025 INFO L276 IsEmpty]: Start isEmpty. Operand 422 states and 568 transitions. [2022-02-20 18:08:25,026 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 86 [2022-02-20 18:08:25,026 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:08:25,026 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:08:25,026 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-02-20 18:08:25,026 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:08:25,026 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:08:25,026 INFO L85 PathProgramCache]: Analyzing trace with hash -351116040, now seen corresponding path program 1 times [2022-02-20 18:08:25,027 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:08:25,027 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1940818409] [2022-02-20 18:08:25,027 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:08:25,027 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:08:25,052 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:25,068 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-02-20 18:08:25,069 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:25,078 INFO L290 TraceCheckUtils]: 0: Hoare triple {10636#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {10636#true} is VALID [2022-02-20 18:08:25,078 INFO L290 TraceCheckUtils]: 1: Hoare triple {10636#true} assume true; {10636#true} is VALID [2022-02-20 18:08:25,079 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {10636#true} {10638#(= ~waterLevel~0 1)} #363#return; {10638#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:25,079 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:08:25,081 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:25,086 INFO L290 TraceCheckUtils]: 0: Hoare triple {10636#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {10636#true} is VALID [2022-02-20 18:08:25,087 INFO L290 TraceCheckUtils]: 1: Hoare triple {10636#true} assume true; {10636#true} is VALID [2022-02-20 18:08:25,087 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {10636#true} {10638#(= ~waterLevel~0 1)} #365#return; {10638#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:25,087 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-02-20 18:08:25,089 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:25,091 INFO L290 TraceCheckUtils]: 0: Hoare triple {10636#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {10636#true} is VALID [2022-02-20 18:08:25,091 INFO L290 TraceCheckUtils]: 1: Hoare triple {10636#true} assume true; {10636#true} is VALID [2022-02-20 18:08:25,092 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {10636#true} {10638#(= ~waterLevel~0 1)} #367#return; {10638#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:25,092 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:08:25,093 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:25,095 INFO L290 TraceCheckUtils]: 0: Hoare triple {10636#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {10636#true} is VALID [2022-02-20 18:08:25,095 INFO L290 TraceCheckUtils]: 1: Hoare triple {10636#true} assume true; {10636#true} is VALID [2022-02-20 18:08:25,095 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {10636#true} {10638#(= ~waterLevel~0 1)} #369#return; {10638#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:25,095 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-02-20 18:08:25,097 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:25,099 INFO L290 TraceCheckUtils]: 0: Hoare triple {10636#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {10636#true} is VALID [2022-02-20 18:08:25,099 INFO L290 TraceCheckUtils]: 1: Hoare triple {10636#true} assume true; {10636#true} is VALID [2022-02-20 18:08:25,100 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {10636#true} {10638#(= ~waterLevel~0 1)} #371#return; {10638#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:25,100 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-02-20 18:08:25,103 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:25,106 INFO L290 TraceCheckUtils]: 0: Hoare triple {10636#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {10636#true} is VALID [2022-02-20 18:08:25,108 INFO L290 TraceCheckUtils]: 1: Hoare triple {10636#true} assume true; {10636#true} is VALID [2022-02-20 18:08:25,108 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {10636#true} {10638#(= ~waterLevel~0 1)} #373#return; {10638#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:25,110 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2022-02-20 18:08:25,113 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:25,125 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:08:25,127 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:25,137 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-02-20 18:08:25,139 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:25,142 INFO L290 TraceCheckUtils]: 0: Hoare triple {10681#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {10636#true} is VALID [2022-02-20 18:08:25,142 INFO L290 TraceCheckUtils]: 1: Hoare triple {10636#true} assume true; {10636#true} is VALID [2022-02-20 18:08:25,142 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {10636#true} {10699#(<= 2 ~waterLevel~0)} #339#return; {10699#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:25,142 INFO L290 TraceCheckUtils]: 0: Hoare triple {10681#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret9#1, processEnvironment__role__highWaterSensor_~tmp~0#1;havoc processEnvironment__role__highWaterSensor_~tmp~0#1; {10636#true} is VALID [2022-02-20 18:08:25,143 INFO L290 TraceCheckUtils]: 1: Hoare triple {10636#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret22#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {10636#true} is VALID [2022-02-20 18:08:25,143 INFO L290 TraceCheckUtils]: 2: Hoare triple {10636#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {10699#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:25,143 INFO L290 TraceCheckUtils]: 3: Hoare triple {10699#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret22#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret22#1 && isHighWaterLevel_#t~ret22#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret22#1;havoc isHighWaterLevel_#t~ret22#1; {10699#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:25,144 INFO L290 TraceCheckUtils]: 4: Hoare triple {10699#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1; {10699#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:25,144 INFO L290 TraceCheckUtils]: 5: Hoare triple {10699#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {10699#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:25,144 INFO L290 TraceCheckUtils]: 6: Hoare triple {10699#(<= 2 ~waterLevel~0)} processEnvironment__role__highWaterSensor_#t~ret9#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret9#1 && processEnvironment__role__highWaterSensor_#t~ret9#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~0#1 := processEnvironment__role__highWaterSensor_#t~ret9#1;havoc processEnvironment__role__highWaterSensor_#t~ret9#1; {10699#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:25,144 INFO L290 TraceCheckUtils]: 7: Hoare triple {10699#(<= 2 ~waterLevel~0)} assume 0 != processEnvironment__role__highWaterSensor_~tmp~0#1;assume { :begin_inline_activatePump } true; {10699#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:25,145 INFO L290 TraceCheckUtils]: 8: Hoare triple {10699#(<= 2 ~waterLevel~0)} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {10699#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:25,145 INFO L272 TraceCheckUtils]: 9: Hoare triple {10699#(<= 2 ~waterLevel~0)} call activatePump__before__methaneQuery(); {10681#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:25,145 INFO L290 TraceCheckUtils]: 10: Hoare triple {10681#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {10636#true} is VALID [2022-02-20 18:08:25,145 INFO L290 TraceCheckUtils]: 11: Hoare triple {10636#true} assume true; {10636#true} is VALID [2022-02-20 18:08:25,146 INFO L284 TraceCheckUtils]: 12: Hoare quadruple {10636#true} {10699#(<= 2 ~waterLevel~0)} #339#return; {10699#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:25,146 INFO L290 TraceCheckUtils]: 13: Hoare triple {10699#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump } true; {10699#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:25,146 INFO L290 TraceCheckUtils]: 14: Hoare triple {10699#(<= 2 ~waterLevel~0)} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {10699#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:25,147 INFO L290 TraceCheckUtils]: 15: Hoare triple {10699#(<= 2 ~waterLevel~0)} assume true; {10699#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:25,147 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {10699#(<= 2 ~waterLevel~0)} {10636#true} #391#return; {10699#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:25,147 INFO L290 TraceCheckUtils]: 0: Hoare triple {10681#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {10636#true} is VALID [2022-02-20 18:08:25,148 INFO L272 TraceCheckUtils]: 1: Hoare triple {10636#true} call processEnvironment__before__lowWaterSensor(); {10681#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:25,148 INFO L290 TraceCheckUtils]: 2: Hoare triple {10681#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret9#1, processEnvironment__role__highWaterSensor_~tmp~0#1;havoc processEnvironment__role__highWaterSensor_~tmp~0#1; {10636#true} is VALID [2022-02-20 18:08:25,148 INFO L290 TraceCheckUtils]: 3: Hoare triple {10636#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret22#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {10636#true} is VALID [2022-02-20 18:08:25,148 INFO L290 TraceCheckUtils]: 4: Hoare triple {10636#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {10699#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:25,149 INFO L290 TraceCheckUtils]: 5: Hoare triple {10699#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret22#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret22#1 && isHighWaterLevel_#t~ret22#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret22#1;havoc isHighWaterLevel_#t~ret22#1; {10699#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:25,149 INFO L290 TraceCheckUtils]: 6: Hoare triple {10699#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1; {10699#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:25,149 INFO L290 TraceCheckUtils]: 7: Hoare triple {10699#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {10699#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:25,149 INFO L290 TraceCheckUtils]: 8: Hoare triple {10699#(<= 2 ~waterLevel~0)} processEnvironment__role__highWaterSensor_#t~ret9#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret9#1 && processEnvironment__role__highWaterSensor_#t~ret9#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~0#1 := processEnvironment__role__highWaterSensor_#t~ret9#1;havoc processEnvironment__role__highWaterSensor_#t~ret9#1; {10699#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:25,150 INFO L290 TraceCheckUtils]: 9: Hoare triple {10699#(<= 2 ~waterLevel~0)} assume 0 != processEnvironment__role__highWaterSensor_~tmp~0#1;assume { :begin_inline_activatePump } true; {10699#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:25,150 INFO L290 TraceCheckUtils]: 10: Hoare triple {10699#(<= 2 ~waterLevel~0)} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {10699#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:25,150 INFO L272 TraceCheckUtils]: 11: Hoare triple {10699#(<= 2 ~waterLevel~0)} call activatePump__before__methaneQuery(); {10681#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:25,150 INFO L290 TraceCheckUtils]: 12: Hoare triple {10681#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {10636#true} is VALID [2022-02-20 18:08:25,151 INFO L290 TraceCheckUtils]: 13: Hoare triple {10636#true} assume true; {10636#true} is VALID [2022-02-20 18:08:25,151 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {10636#true} {10699#(<= 2 ~waterLevel~0)} #339#return; {10699#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:25,151 INFO L290 TraceCheckUtils]: 15: Hoare triple {10699#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump } true; {10699#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:25,151 INFO L290 TraceCheckUtils]: 16: Hoare triple {10699#(<= 2 ~waterLevel~0)} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {10699#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:25,152 INFO L290 TraceCheckUtils]: 17: Hoare triple {10699#(<= 2 ~waterLevel~0)} assume true; {10699#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:25,152 INFO L284 TraceCheckUtils]: 18: Hoare quadruple {10699#(<= 2 ~waterLevel~0)} {10636#true} #391#return; {10699#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:25,152 INFO L290 TraceCheckUtils]: 19: Hoare triple {10699#(<= 2 ~waterLevel~0)} assume true; {10699#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:25,153 INFO L284 TraceCheckUtils]: 20: Hoare quadruple {10699#(<= 2 ~waterLevel~0)} {10638#(= ~waterLevel~0 1)} #359#return; {10637#false} is VALID [2022-02-20 18:08:25,153 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 75 [2022-02-20 18:08:25,154 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:25,155 INFO L290 TraceCheckUtils]: 0: Hoare triple {10636#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {10636#true} is VALID [2022-02-20 18:08:25,156 INFO L290 TraceCheckUtils]: 1: Hoare triple {10636#true} assume true; {10636#true} is VALID [2022-02-20 18:08:25,156 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {10636#true} {10637#false} #361#return; {10637#false} is VALID [2022-02-20 18:08:25,156 INFO L290 TraceCheckUtils]: 0: Hoare triple {10636#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(38, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(13, 9);call #Ultimate.allocInit(3, 10);call write~init~int(79, 10, 0, 1);call write~init~int(110, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(4, 11);call write~init~int(79, 11, 0, 1);call write~init~int(102, 11, 1, 1);call write~init~int(102, 11, 2, 1);call write~init~int(0, 11, 3, 1);call #Ultimate.allocInit(7, 12);call write~init~int(44, 12, 0, 1);call write~init~int(80, 12, 1, 1);call write~init~int(117, 12, 2, 1);call write~init~int(109, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(3, 13);call write~init~int(79, 13, 0, 1);call write~init~int(110, 13, 1, 1);call write~init~int(0, 13, 2, 1);call #Ultimate.allocInit(4, 14);call write~init~int(79, 14, 0, 1);call write~init~int(102, 14, 1, 1);call write~init~int(102, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(3, 15);call write~init~int(41, 15, 0, 1);call write~init~int(32, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(10, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~__SELECTED_FEATURE_base~0 := 0;~__SELECTED_FEATURE_highWaterSensor~0 := 0;~__SELECTED_FEATURE_lowWaterSensor~0 := 0;~__SELECTED_FEATURE_methaneQuery~0 := 0;~__SELECTED_FEATURE_methaneAlarm~0 := 0;~__SELECTED_FEATURE_stopCommand~0 := 0;~__SELECTED_FEATURE_startCommand~0 := 0;~__GUIDSL_ROOT_PRODUCTION~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4;~methAndRunningLastTime~0 := 0;~head~0.base, ~head~0.offset := 0, 0; {10638#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:25,156 INFO L290 TraceCheckUtils]: 1: Hoare triple {10638#(= ~waterLevel~0 1)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret24#1, main_~retValue_acc~8#1, main_~tmp~6#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~6#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1; {10638#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:25,157 INFO L290 TraceCheckUtils]: 2: Hoare triple {10638#(= ~waterLevel~0 1)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret55#1, select_features_#t~ret56#1, select_features_#t~ret57#1, select_features_#t~ret58#1, select_features_#t~ret59#1, select_features_#t~ret60#1;~__SELECTED_FEATURE_base~0 := 1; {10638#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:25,157 INFO L272 TraceCheckUtils]: 3: Hoare triple {10638#(= ~waterLevel~0 1)} call select_features_#t~ret55#1 := select_one(); {10636#true} is VALID [2022-02-20 18:08:25,157 INFO L290 TraceCheckUtils]: 4: Hoare triple {10636#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {10636#true} is VALID [2022-02-20 18:08:25,157 INFO L290 TraceCheckUtils]: 5: Hoare triple {10636#true} assume true; {10636#true} is VALID [2022-02-20 18:08:25,158 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {10636#true} {10638#(= ~waterLevel~0 1)} #363#return; {10638#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:25,158 INFO L290 TraceCheckUtils]: 7: Hoare triple {10638#(= ~waterLevel~0 1)} assume -2147483648 <= select_features_#t~ret55#1 && select_features_#t~ret55#1 <= 2147483647;~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret55#1;havoc select_features_#t~ret55#1; {10638#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:25,158 INFO L272 TraceCheckUtils]: 8: Hoare triple {10638#(= ~waterLevel~0 1)} call select_features_#t~ret56#1 := select_one(); {10636#true} is VALID [2022-02-20 18:08:25,158 INFO L290 TraceCheckUtils]: 9: Hoare triple {10636#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {10636#true} is VALID [2022-02-20 18:08:25,158 INFO L290 TraceCheckUtils]: 10: Hoare triple {10636#true} assume true; {10636#true} is VALID [2022-02-20 18:08:25,159 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {10636#true} {10638#(= ~waterLevel~0 1)} #365#return; {10638#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:25,159 INFO L290 TraceCheckUtils]: 12: Hoare triple {10638#(= ~waterLevel~0 1)} assume -2147483648 <= select_features_#t~ret56#1 && select_features_#t~ret56#1 <= 2147483647;~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret56#1;havoc select_features_#t~ret56#1; {10638#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:25,159 INFO L272 TraceCheckUtils]: 13: Hoare triple {10638#(= ~waterLevel~0 1)} call select_features_#t~ret57#1 := select_one(); {10636#true} is VALID [2022-02-20 18:08:25,159 INFO L290 TraceCheckUtils]: 14: Hoare triple {10636#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {10636#true} is VALID [2022-02-20 18:08:25,159 INFO L290 TraceCheckUtils]: 15: Hoare triple {10636#true} assume true; {10636#true} is VALID [2022-02-20 18:08:25,160 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {10636#true} {10638#(= ~waterLevel~0 1)} #367#return; {10638#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:25,160 INFO L290 TraceCheckUtils]: 17: Hoare triple {10638#(= ~waterLevel~0 1)} assume -2147483648 <= select_features_#t~ret57#1 && select_features_#t~ret57#1 <= 2147483647;~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret57#1;havoc select_features_#t~ret57#1; {10638#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:25,160 INFO L272 TraceCheckUtils]: 18: Hoare triple {10638#(= ~waterLevel~0 1)} call select_features_#t~ret58#1 := select_one(); {10636#true} is VALID [2022-02-20 18:08:25,160 INFO L290 TraceCheckUtils]: 19: Hoare triple {10636#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {10636#true} is VALID [2022-02-20 18:08:25,160 INFO L290 TraceCheckUtils]: 20: Hoare triple {10636#true} assume true; {10636#true} is VALID [2022-02-20 18:08:25,161 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {10636#true} {10638#(= ~waterLevel~0 1)} #369#return; {10638#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:25,161 INFO L290 TraceCheckUtils]: 22: Hoare triple {10638#(= ~waterLevel~0 1)} assume -2147483648 <= select_features_#t~ret58#1 && select_features_#t~ret58#1 <= 2147483647;~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret58#1;havoc select_features_#t~ret58#1; {10638#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:25,161 INFO L272 TraceCheckUtils]: 23: Hoare triple {10638#(= ~waterLevel~0 1)} call select_features_#t~ret59#1 := select_one(); {10636#true} is VALID [2022-02-20 18:08:25,161 INFO L290 TraceCheckUtils]: 24: Hoare triple {10636#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {10636#true} is VALID [2022-02-20 18:08:25,161 INFO L290 TraceCheckUtils]: 25: Hoare triple {10636#true} assume true; {10636#true} is VALID [2022-02-20 18:08:25,162 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {10636#true} {10638#(= ~waterLevel~0 1)} #371#return; {10638#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:25,162 INFO L290 TraceCheckUtils]: 27: Hoare triple {10638#(= ~waterLevel~0 1)} assume -2147483648 <= select_features_#t~ret59#1 && select_features_#t~ret59#1 <= 2147483647;~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret59#1;havoc select_features_#t~ret59#1; {10638#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:25,162 INFO L272 TraceCheckUtils]: 28: Hoare triple {10638#(= ~waterLevel~0 1)} call select_features_#t~ret60#1 := select_one(); {10636#true} is VALID [2022-02-20 18:08:25,162 INFO L290 TraceCheckUtils]: 29: Hoare triple {10636#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {10636#true} is VALID [2022-02-20 18:08:25,162 INFO L290 TraceCheckUtils]: 30: Hoare triple {10636#true} assume true; {10636#true} is VALID [2022-02-20 18:08:25,163 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {10636#true} {10638#(= ~waterLevel~0 1)} #373#return; {10638#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:25,163 INFO L290 TraceCheckUtils]: 32: Hoare triple {10638#(= ~waterLevel~0 1)} assume -2147483648 <= select_features_#t~ret60#1 && select_features_#t~ret60#1 <= 2147483647;~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret60#1;havoc select_features_#t~ret60#1; {10638#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:25,163 INFO L290 TraceCheckUtils]: 33: Hoare triple {10638#(= ~waterLevel~0 1)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~13#1;havoc valid_product_~retValue_acc~13#1;valid_product_~retValue_acc~13#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~13#1; {10638#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:25,163 INFO L290 TraceCheckUtils]: 34: Hoare triple {10638#(= ~waterLevel~0 1)} main_#t~ret24#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret24#1 && main_#t~ret24#1 <= 2147483647;main_~tmp~6#1 := main_#t~ret24#1;havoc main_#t~ret24#1; {10638#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:25,164 INFO L290 TraceCheckUtils]: 35: Hoare triple {10638#(= ~waterLevel~0 1)} assume 0 != main_~tmp~6#1;assume { :begin_inline_setup } true; {10638#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:25,164 INFO L290 TraceCheckUtils]: 36: Hoare triple {10638#(= ~waterLevel~0 1)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0; {10638#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:25,164 INFO L290 TraceCheckUtils]: 37: Hoare triple {10638#(= ~waterLevel~0 1)} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet25#1, test_#t~nondet26#1, test_#t~nondet27#1, test_#t~nondet28#1, test_~splverifierCounter~0#1, test_~tmp~7#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~7#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {10638#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:25,165 INFO L290 TraceCheckUtils]: 38: Hoare triple {10638#(= ~waterLevel~0 1)} assume !false; {10638#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:25,165 INFO L290 TraceCheckUtils]: 39: Hoare triple {10638#(= ~waterLevel~0 1)} assume test_~splverifierCounter~0#1 < 4; {10638#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:25,165 INFO L290 TraceCheckUtils]: 40: Hoare triple {10638#(= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet25#1 && test_#t~nondet25#1 <= 2147483647;test_~tmp~7#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {10638#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:25,165 INFO L290 TraceCheckUtils]: 41: Hoare triple {10638#(= ~waterLevel~0 1)} assume !(0 != test_~tmp~7#1); {10638#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:25,166 INFO L290 TraceCheckUtils]: 42: Hoare triple {10638#(= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {10638#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:25,166 INFO L290 TraceCheckUtils]: 43: Hoare triple {10638#(= ~waterLevel~0 1)} assume !(0 != test_~tmp___0~2#1); {10638#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:25,166 INFO L290 TraceCheckUtils]: 44: Hoare triple {10638#(= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {10638#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:25,166 INFO L290 TraceCheckUtils]: 45: Hoare triple {10638#(= ~waterLevel~0 1)} assume 0 != test_~tmp___2~0#1; {10638#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:25,167 INFO L290 TraceCheckUtils]: 46: Hoare triple {10638#(= ~waterLevel~0 1)} assume !(0 != ~__SELECTED_FEATURE_startCommand~0); {10638#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:25,167 INFO L272 TraceCheckUtils]: 47: Hoare triple {10638#(= ~waterLevel~0 1)} call timeShift(); {10638#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:25,167 INFO L290 TraceCheckUtils]: 48: Hoare triple {10638#(= ~waterLevel~0 1)} assume !(0 != ~pumpRunning~0); {10638#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:25,168 INFO L290 TraceCheckUtils]: 49: Hoare triple {10638#(= ~waterLevel~0 1)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {10638#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:25,168 INFO L290 TraceCheckUtils]: 50: Hoare triple {10638#(= ~waterLevel~0 1)} assume !(0 != ~__SELECTED_FEATURE_methaneAlarm~0); {10638#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:08:25,168 INFO L272 TraceCheckUtils]: 51: Hoare triple {10638#(= ~waterLevel~0 1)} call processEnvironment__before__methaneAlarm(); {10681#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:25,168 INFO L290 TraceCheckUtils]: 52: Hoare triple {10681#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {10636#true} is VALID [2022-02-20 18:08:25,169 INFO L272 TraceCheckUtils]: 53: Hoare triple {10636#true} call processEnvironment__before__lowWaterSensor(); {10681#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:25,169 INFO L290 TraceCheckUtils]: 54: Hoare triple {10681#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret9#1, processEnvironment__role__highWaterSensor_~tmp~0#1;havoc processEnvironment__role__highWaterSensor_~tmp~0#1; {10636#true} is VALID [2022-02-20 18:08:25,169 INFO L290 TraceCheckUtils]: 55: Hoare triple {10636#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret22#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {10636#true} is VALID [2022-02-20 18:08:25,169 INFO L290 TraceCheckUtils]: 56: Hoare triple {10636#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {10699#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:25,170 INFO L290 TraceCheckUtils]: 57: Hoare triple {10699#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret22#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret22#1 && isHighWaterLevel_#t~ret22#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret22#1;havoc isHighWaterLevel_#t~ret22#1; {10699#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:25,170 INFO L290 TraceCheckUtils]: 58: Hoare triple {10699#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1; {10699#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:25,170 INFO L290 TraceCheckUtils]: 59: Hoare triple {10699#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {10699#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:25,170 INFO L290 TraceCheckUtils]: 60: Hoare triple {10699#(<= 2 ~waterLevel~0)} processEnvironment__role__highWaterSensor_#t~ret9#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret9#1 && processEnvironment__role__highWaterSensor_#t~ret9#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~0#1 := processEnvironment__role__highWaterSensor_#t~ret9#1;havoc processEnvironment__role__highWaterSensor_#t~ret9#1; {10699#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:25,171 INFO L290 TraceCheckUtils]: 61: Hoare triple {10699#(<= 2 ~waterLevel~0)} assume 0 != processEnvironment__role__highWaterSensor_~tmp~0#1;assume { :begin_inline_activatePump } true; {10699#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:25,171 INFO L290 TraceCheckUtils]: 62: Hoare triple {10699#(<= 2 ~waterLevel~0)} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {10699#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:25,171 INFO L272 TraceCheckUtils]: 63: Hoare triple {10699#(<= 2 ~waterLevel~0)} call activatePump__before__methaneQuery(); {10681#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:25,171 INFO L290 TraceCheckUtils]: 64: Hoare triple {10681#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {10636#true} is VALID [2022-02-20 18:08:25,172 INFO L290 TraceCheckUtils]: 65: Hoare triple {10636#true} assume true; {10636#true} is VALID [2022-02-20 18:08:25,172 INFO L284 TraceCheckUtils]: 66: Hoare quadruple {10636#true} {10699#(<= 2 ~waterLevel~0)} #339#return; {10699#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:25,172 INFO L290 TraceCheckUtils]: 67: Hoare triple {10699#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump } true; {10699#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:25,172 INFO L290 TraceCheckUtils]: 68: Hoare triple {10699#(<= 2 ~waterLevel~0)} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {10699#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:25,173 INFO L290 TraceCheckUtils]: 69: Hoare triple {10699#(<= 2 ~waterLevel~0)} assume true; {10699#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:25,173 INFO L284 TraceCheckUtils]: 70: Hoare quadruple {10699#(<= 2 ~waterLevel~0)} {10636#true} #391#return; {10699#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:25,173 INFO L290 TraceCheckUtils]: 71: Hoare triple {10699#(<= 2 ~waterLevel~0)} assume true; {10699#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:08:25,174 INFO L284 TraceCheckUtils]: 72: Hoare quadruple {10699#(<= 2 ~waterLevel~0)} {10638#(= ~waterLevel~0 1)} #359#return; {10637#false} is VALID [2022-02-20 18:08:25,174 INFO L290 TraceCheckUtils]: 73: Hoare triple {10637#false} assume { :end_inline_processEnvironment } true; {10637#false} is VALID [2022-02-20 18:08:25,174 INFO L290 TraceCheckUtils]: 74: Hoare triple {10637#false} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret29#1, __utac_acc__Specification2_spec__2_#t~ret30#1, __utac_acc__Specification2_spec__2_~tmp~8#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~8#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {10637#false} is VALID [2022-02-20 18:08:25,174 INFO L272 TraceCheckUtils]: 75: Hoare triple {10637#false} call __utac_acc__Specification2_spec__2_#t~ret29#1 := isMethaneLevelCritical(); {10636#true} is VALID [2022-02-20 18:08:25,174 INFO L290 TraceCheckUtils]: 76: Hoare triple {10636#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {10636#true} is VALID [2022-02-20 18:08:25,174 INFO L290 TraceCheckUtils]: 77: Hoare triple {10636#true} assume true; {10636#true} is VALID [2022-02-20 18:08:25,174 INFO L284 TraceCheckUtils]: 78: Hoare quadruple {10636#true} {10637#false} #361#return; {10637#false} is VALID [2022-02-20 18:08:25,174 INFO L290 TraceCheckUtils]: 79: Hoare triple {10637#false} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret29#1 && __utac_acc__Specification2_spec__2_#t~ret29#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~8#1 := __utac_acc__Specification2_spec__2_#t~ret29#1;havoc __utac_acc__Specification2_spec__2_#t~ret29#1; {10637#false} is VALID [2022-02-20 18:08:25,175 INFO L290 TraceCheckUtils]: 80: Hoare triple {10637#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~8#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~5#1;havoc isPumpRunning_~retValue_acc~5#1;isPumpRunning_~retValue_acc~5#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~5#1; {10637#false} is VALID [2022-02-20 18:08:25,175 INFO L290 TraceCheckUtils]: 81: Hoare triple {10637#false} __utac_acc__Specification2_spec__2_#t~ret30#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret30#1 && __utac_acc__Specification2_spec__2_#t~ret30#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret30#1;havoc __utac_acc__Specification2_spec__2_#t~ret30#1; {10637#false} is VALID [2022-02-20 18:08:25,175 INFO L290 TraceCheckUtils]: 82: Hoare triple {10637#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {10637#false} is VALID [2022-02-20 18:08:25,175 INFO L290 TraceCheckUtils]: 83: Hoare triple {10637#false} assume 0 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {10637#false} is VALID [2022-02-20 18:08:25,175 INFO L290 TraceCheckUtils]: 84: Hoare triple {10637#false} assume !false; {10637#false} is VALID [2022-02-20 18:08:25,176 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-02-20 18:08:25,176 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:08:25,176 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1940818409] [2022-02-20 18:08:25,177 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1940818409] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:08:25,177 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:08:25,177 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-02-20 18:08:25,177 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [659973866] [2022-02-20 18:08:25,177 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:08:25,178 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 10.8) internal successors, (54), 4 states have internal predecessors, (54), 4 states have call successors, (11), 3 states have call predecessors, (11), 2 states have return successors, (10), 3 states have call predecessors, (10), 4 states have call successors, (10) Word has length 85 [2022-02-20 18:08:25,178 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:08:25,178 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 5 states, 5 states have (on average 10.8) internal successors, (54), 4 states have internal predecessors, (54), 4 states have call successors, (11), 3 states have call predecessors, (11), 2 states have return successors, (10), 3 states have call predecessors, (10), 4 states have call successors, (10) [2022-02-20 18:08:25,215 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 75 edges. 75 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:25,215 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-02-20 18:08:25,215 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:08:25,216 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-02-20 18:08:25,216 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-02-20 18:08:25,217 INFO L87 Difference]: Start difference. First operand 422 states and 568 transitions. Second operand has 5 states, 5 states have (on average 10.8) internal successors, (54), 4 states have internal predecessors, (54), 4 states have call successors, (11), 3 states have call predecessors, (11), 2 states have return successors, (10), 3 states have call predecessors, (10), 4 states have call successors, (10) [2022-02-20 18:08:26,031 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:26,031 INFO L93 Difference]: Finished difference Result 1132 states and 1594 transitions. [2022-02-20 18:08:26,031 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-02-20 18:08:26,031 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 10.8) internal successors, (54), 4 states have internal predecessors, (54), 4 states have call successors, (11), 3 states have call predecessors, (11), 2 states have return successors, (10), 3 states have call predecessors, (10), 4 states have call successors, (10) Word has length 85 [2022-02-20 18:08:26,031 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:08:26,032 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 10.8) internal successors, (54), 4 states have internal predecessors, (54), 4 states have call successors, (11), 3 states have call predecessors, (11), 2 states have return successors, (10), 3 states have call predecessors, (10), 4 states have call successors, (10) [2022-02-20 18:08:26,037 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 565 transitions. [2022-02-20 18:08:26,037 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 10.8) internal successors, (54), 4 states have internal predecessors, (54), 4 states have call successors, (11), 3 states have call predecessors, (11), 2 states have return successors, (10), 3 states have call predecessors, (10), 4 states have call successors, (10) [2022-02-20 18:08:26,041 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 565 transitions. [2022-02-20 18:08:26,041 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 565 transitions. [2022-02-20 18:08:26,408 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 565 edges. 565 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:26,435 INFO L225 Difference]: With dead ends: 1132 [2022-02-20 18:08:26,435 INFO L226 Difference]: Without dead ends: 733 [2022-02-20 18:08:26,437 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 29 GetRequests, 22 SyntacticMatches, 2 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-02-20 18:08:26,437 INFO L933 BasicCegarLoop]: 223 mSDtfsCounter, 314 mSDsluCounter, 262 mSDsCounter, 0 mSdLazyCounter, 250 mSolverCounterSat, 121 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 323 SdHoareTripleChecker+Valid, 485 SdHoareTripleChecker+Invalid, 371 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 121 IncrementalHoareTripleChecker+Valid, 250 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-02-20 18:08:26,437 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [323 Valid, 485 Invalid, 371 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [121 Valid, 250 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-02-20 18:08:26,438 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 733 states. [2022-02-20 18:08:26,502 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 733 to 726. [2022-02-20 18:08:26,502 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:08:26,504 INFO L82 GeneralOperation]: Start isEquivalent. First operand 733 states. Second operand has 726 states, 530 states have (on average 1.288679245283019) internal successors, (683), 584 states have internal predecessors, (683), 115 states have call successors, (115), 74 states have call predecessors, (115), 80 states have return successors, (193), 122 states have call predecessors, (193), 115 states have call successors, (193) [2022-02-20 18:08:26,505 INFO L74 IsIncluded]: Start isIncluded. First operand 733 states. Second operand has 726 states, 530 states have (on average 1.288679245283019) internal successors, (683), 584 states have internal predecessors, (683), 115 states have call successors, (115), 74 states have call predecessors, (115), 80 states have return successors, (193), 122 states have call predecessors, (193), 115 states have call successors, (193) [2022-02-20 18:08:26,506 INFO L87 Difference]: Start difference. First operand 733 states. Second operand has 726 states, 530 states have (on average 1.288679245283019) internal successors, (683), 584 states have internal predecessors, (683), 115 states have call successors, (115), 74 states have call predecessors, (115), 80 states have return successors, (193), 122 states have call predecessors, (193), 115 states have call successors, (193) [2022-02-20 18:08:26,527 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:26,528 INFO L93 Difference]: Finished difference Result 733 states and 998 transitions. [2022-02-20 18:08:26,528 INFO L276 IsEmpty]: Start isEmpty. Operand 733 states and 998 transitions. [2022-02-20 18:08:26,530 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:26,530 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:26,532 INFO L74 IsIncluded]: Start isIncluded. First operand has 726 states, 530 states have (on average 1.288679245283019) internal successors, (683), 584 states have internal predecessors, (683), 115 states have call successors, (115), 74 states have call predecessors, (115), 80 states have return successors, (193), 122 states have call predecessors, (193), 115 states have call successors, (193) Second operand 733 states. [2022-02-20 18:08:26,533 INFO L87 Difference]: Start difference. First operand has 726 states, 530 states have (on average 1.288679245283019) internal successors, (683), 584 states have internal predecessors, (683), 115 states have call successors, (115), 74 states have call predecessors, (115), 80 states have return successors, (193), 122 states have call predecessors, (193), 115 states have call successors, (193) Second operand 733 states. [2022-02-20 18:08:26,555 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:26,555 INFO L93 Difference]: Finished difference Result 733 states and 998 transitions. [2022-02-20 18:08:26,555 INFO L276 IsEmpty]: Start isEmpty. Operand 733 states and 998 transitions. [2022-02-20 18:08:26,557 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:26,557 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:26,557 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:08:26,557 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:08:26,559 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 726 states, 530 states have (on average 1.288679245283019) internal successors, (683), 584 states have internal predecessors, (683), 115 states have call successors, (115), 74 states have call predecessors, (115), 80 states have return successors, (193), 122 states have call predecessors, (193), 115 states have call successors, (193) [2022-02-20 18:08:26,587 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 726 states to 726 states and 991 transitions. [2022-02-20 18:08:26,588 INFO L78 Accepts]: Start accepts. Automaton has 726 states and 991 transitions. Word has length 85 [2022-02-20 18:08:26,588 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:08:26,588 INFO L470 AbstractCegarLoop]: Abstraction has 726 states and 991 transitions. [2022-02-20 18:08:26,588 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 10.8) internal successors, (54), 4 states have internal predecessors, (54), 4 states have call successors, (11), 3 states have call predecessors, (11), 2 states have return successors, (10), 3 states have call predecessors, (10), 4 states have call successors, (10) [2022-02-20 18:08:26,588 INFO L276 IsEmpty]: Start isEmpty. Operand 726 states and 991 transitions. [2022-02-20 18:08:26,589 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 90 [2022-02-20 18:08:26,590 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:08:26,590 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:08:26,590 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-02-20 18:08:26,590 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:08:26,590 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:08:26,590 INFO L85 PathProgramCache]: Analyzing trace with hash 430610398, now seen corresponding path program 1 times [2022-02-20 18:08:26,590 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:08:26,590 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1432205950] [2022-02-20 18:08:26,590 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:08:26,591 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:08:26,626 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:26,641 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-02-20 18:08:26,642 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:26,644 INFO L290 TraceCheckUtils]: 0: Hoare triple {14830#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {14830#true} is VALID [2022-02-20 18:08:26,644 INFO L290 TraceCheckUtils]: 1: Hoare triple {14830#true} assume true; {14830#true} is VALID [2022-02-20 18:08:26,645 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {14830#true} {14830#true} #363#return; {14830#true} is VALID [2022-02-20 18:08:26,645 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:08:26,646 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:26,647 INFO L290 TraceCheckUtils]: 0: Hoare triple {14830#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {14830#true} is VALID [2022-02-20 18:08:26,647 INFO L290 TraceCheckUtils]: 1: Hoare triple {14830#true} assume true; {14830#true} is VALID [2022-02-20 18:08:26,647 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {14830#true} {14830#true} #365#return; {14830#true} is VALID [2022-02-20 18:08:26,648 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-02-20 18:08:26,649 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:26,655 INFO L290 TraceCheckUtils]: 0: Hoare triple {14830#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {14830#true} is VALID [2022-02-20 18:08:26,656 INFO L290 TraceCheckUtils]: 1: Hoare triple {14830#true} assume true; {14830#true} is VALID [2022-02-20 18:08:26,656 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {14830#true} {14830#true} #367#return; {14830#true} is VALID [2022-02-20 18:08:26,656 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:08:26,657 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:26,659 INFO L290 TraceCheckUtils]: 0: Hoare triple {14830#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {14830#true} is VALID [2022-02-20 18:08:26,659 INFO L290 TraceCheckUtils]: 1: Hoare triple {14830#true} assume true; {14830#true} is VALID [2022-02-20 18:08:26,659 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {14830#true} {14830#true} #369#return; {14830#true} is VALID [2022-02-20 18:08:26,659 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-02-20 18:08:26,661 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:26,662 INFO L290 TraceCheckUtils]: 0: Hoare triple {14830#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {14830#true} is VALID [2022-02-20 18:08:26,662 INFO L290 TraceCheckUtils]: 1: Hoare triple {14830#true} assume true; {14830#true} is VALID [2022-02-20 18:08:26,662 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {14830#true} {14830#true} #371#return; {14830#true} is VALID [2022-02-20 18:08:26,663 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-02-20 18:08:26,664 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:26,666 INFO L290 TraceCheckUtils]: 0: Hoare triple {14830#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {14830#true} is VALID [2022-02-20 18:08:26,667 INFO L290 TraceCheckUtils]: 1: Hoare triple {14830#true} assume true; {14830#true} is VALID [2022-02-20 18:08:26,667 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {14830#true} {14830#true} #373#return; {14830#true} is VALID [2022-02-20 18:08:26,669 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2022-02-20 18:08:26,670 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:26,672 INFO L290 TraceCheckUtils]: 0: Hoare triple {14878#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {14830#true} is VALID [2022-02-20 18:08:26,672 INFO L290 TraceCheckUtils]: 1: Hoare triple {14830#true} assume true; {14830#true} is VALID [2022-02-20 18:08:26,673 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {14830#true} {14850#(= ~methAndRunningLastTime~0 0)} #375#return; {14850#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:08:26,675 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2022-02-20 18:08:26,679 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:26,681 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:08:26,683 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:26,686 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-02-20 18:08:26,687 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:26,688 INFO L290 TraceCheckUtils]: 0: Hoare triple {14879#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {14830#true} is VALID [2022-02-20 18:08:26,688 INFO L290 TraceCheckUtils]: 1: Hoare triple {14830#true} assume true; {14830#true} is VALID [2022-02-20 18:08:26,688 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {14830#true} {14830#true} #339#return; {14830#true} is VALID [2022-02-20 18:08:26,688 INFO L290 TraceCheckUtils]: 0: Hoare triple {14879#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret9#1, processEnvironment__role__highWaterSensor_~tmp~0#1;havoc processEnvironment__role__highWaterSensor_~tmp~0#1; {14830#true} is VALID [2022-02-20 18:08:26,689 INFO L290 TraceCheckUtils]: 1: Hoare triple {14830#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret22#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {14830#true} is VALID [2022-02-20 18:08:26,689 INFO L290 TraceCheckUtils]: 2: Hoare triple {14830#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {14830#true} is VALID [2022-02-20 18:08:26,689 INFO L290 TraceCheckUtils]: 3: Hoare triple {14830#true} isHighWaterLevel_#t~ret22#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret22#1 && isHighWaterLevel_#t~ret22#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret22#1;havoc isHighWaterLevel_#t~ret22#1; {14830#true} is VALID [2022-02-20 18:08:26,689 INFO L290 TraceCheckUtils]: 4: Hoare triple {14830#true} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1; {14830#true} is VALID [2022-02-20 18:08:26,689 INFO L290 TraceCheckUtils]: 5: Hoare triple {14830#true} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {14830#true} is VALID [2022-02-20 18:08:26,689 INFO L290 TraceCheckUtils]: 6: Hoare triple {14830#true} processEnvironment__role__highWaterSensor_#t~ret9#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret9#1 && processEnvironment__role__highWaterSensor_#t~ret9#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~0#1 := processEnvironment__role__highWaterSensor_#t~ret9#1;havoc processEnvironment__role__highWaterSensor_#t~ret9#1; {14830#true} is VALID [2022-02-20 18:08:26,689 INFO L290 TraceCheckUtils]: 7: Hoare triple {14830#true} assume 0 != processEnvironment__role__highWaterSensor_~tmp~0#1;assume { :begin_inline_activatePump } true; {14830#true} is VALID [2022-02-20 18:08:26,689 INFO L290 TraceCheckUtils]: 8: Hoare triple {14830#true} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {14830#true} is VALID [2022-02-20 18:08:26,690 INFO L272 TraceCheckUtils]: 9: Hoare triple {14830#true} call activatePump__before__methaneQuery(); {14879#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:26,690 INFO L290 TraceCheckUtils]: 10: Hoare triple {14879#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {14830#true} is VALID [2022-02-20 18:08:26,690 INFO L290 TraceCheckUtils]: 11: Hoare triple {14830#true} assume true; {14830#true} is VALID [2022-02-20 18:08:26,690 INFO L284 TraceCheckUtils]: 12: Hoare quadruple {14830#true} {14830#true} #339#return; {14830#true} is VALID [2022-02-20 18:08:26,690 INFO L290 TraceCheckUtils]: 13: Hoare triple {14830#true} assume { :end_inline_activatePump } true; {14830#true} is VALID [2022-02-20 18:08:26,690 INFO L290 TraceCheckUtils]: 14: Hoare triple {14830#true} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {14830#true} is VALID [2022-02-20 18:08:26,691 INFO L290 TraceCheckUtils]: 15: Hoare triple {14830#true} assume true; {14830#true} is VALID [2022-02-20 18:08:26,691 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {14830#true} {14830#true} #391#return; {14830#true} is VALID [2022-02-20 18:08:26,691 INFO L290 TraceCheckUtils]: 0: Hoare triple {14879#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {14830#true} is VALID [2022-02-20 18:08:26,691 INFO L272 TraceCheckUtils]: 1: Hoare triple {14830#true} call processEnvironment__before__lowWaterSensor(); {14879#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:26,691 INFO L290 TraceCheckUtils]: 2: Hoare triple {14879#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret9#1, processEnvironment__role__highWaterSensor_~tmp~0#1;havoc processEnvironment__role__highWaterSensor_~tmp~0#1; {14830#true} is VALID [2022-02-20 18:08:26,691 INFO L290 TraceCheckUtils]: 3: Hoare triple {14830#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret22#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {14830#true} is VALID [2022-02-20 18:08:26,692 INFO L290 TraceCheckUtils]: 4: Hoare triple {14830#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {14830#true} is VALID [2022-02-20 18:08:26,692 INFO L290 TraceCheckUtils]: 5: Hoare triple {14830#true} isHighWaterLevel_#t~ret22#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret22#1 && isHighWaterLevel_#t~ret22#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret22#1;havoc isHighWaterLevel_#t~ret22#1; {14830#true} is VALID [2022-02-20 18:08:26,692 INFO L290 TraceCheckUtils]: 6: Hoare triple {14830#true} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1; {14830#true} is VALID [2022-02-20 18:08:26,692 INFO L290 TraceCheckUtils]: 7: Hoare triple {14830#true} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {14830#true} is VALID [2022-02-20 18:08:26,692 INFO L290 TraceCheckUtils]: 8: Hoare triple {14830#true} processEnvironment__role__highWaterSensor_#t~ret9#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret9#1 && processEnvironment__role__highWaterSensor_#t~ret9#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~0#1 := processEnvironment__role__highWaterSensor_#t~ret9#1;havoc processEnvironment__role__highWaterSensor_#t~ret9#1; {14830#true} is VALID [2022-02-20 18:08:26,692 INFO L290 TraceCheckUtils]: 9: Hoare triple {14830#true} assume 0 != processEnvironment__role__highWaterSensor_~tmp~0#1;assume { :begin_inline_activatePump } true; {14830#true} is VALID [2022-02-20 18:08:26,692 INFO L290 TraceCheckUtils]: 10: Hoare triple {14830#true} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {14830#true} is VALID [2022-02-20 18:08:26,693 INFO L272 TraceCheckUtils]: 11: Hoare triple {14830#true} call activatePump__before__methaneQuery(); {14879#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:26,693 INFO L290 TraceCheckUtils]: 12: Hoare triple {14879#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {14830#true} is VALID [2022-02-20 18:08:26,693 INFO L290 TraceCheckUtils]: 13: Hoare triple {14830#true} assume true; {14830#true} is VALID [2022-02-20 18:08:26,693 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {14830#true} {14830#true} #339#return; {14830#true} is VALID [2022-02-20 18:08:26,693 INFO L290 TraceCheckUtils]: 15: Hoare triple {14830#true} assume { :end_inline_activatePump } true; {14830#true} is VALID [2022-02-20 18:08:26,693 INFO L290 TraceCheckUtils]: 16: Hoare triple {14830#true} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {14830#true} is VALID [2022-02-20 18:08:26,693 INFO L290 TraceCheckUtils]: 17: Hoare triple {14830#true} assume true; {14830#true} is VALID [2022-02-20 18:08:26,694 INFO L284 TraceCheckUtils]: 18: Hoare quadruple {14830#true} {14830#true} #391#return; {14830#true} is VALID [2022-02-20 18:08:26,694 INFO L290 TraceCheckUtils]: 19: Hoare triple {14830#true} assume true; {14830#true} is VALID [2022-02-20 18:08:26,694 INFO L284 TraceCheckUtils]: 20: Hoare quadruple {14830#true} {14850#(= ~methAndRunningLastTime~0 0)} #359#return; {14850#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:08:26,694 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 79 [2022-02-20 18:08:26,695 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:26,697 INFO L290 TraceCheckUtils]: 0: Hoare triple {14830#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {14830#true} is VALID [2022-02-20 18:08:26,697 INFO L290 TraceCheckUtils]: 1: Hoare triple {14830#true} assume true; {14830#true} is VALID [2022-02-20 18:08:26,698 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {14830#true} {14850#(= ~methAndRunningLastTime~0 0)} #361#return; {14850#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:08:26,698 INFO L290 TraceCheckUtils]: 0: Hoare triple {14830#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(38, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(13, 9);call #Ultimate.allocInit(3, 10);call write~init~int(79, 10, 0, 1);call write~init~int(110, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(4, 11);call write~init~int(79, 11, 0, 1);call write~init~int(102, 11, 1, 1);call write~init~int(102, 11, 2, 1);call write~init~int(0, 11, 3, 1);call #Ultimate.allocInit(7, 12);call write~init~int(44, 12, 0, 1);call write~init~int(80, 12, 1, 1);call write~init~int(117, 12, 2, 1);call write~init~int(109, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(3, 13);call write~init~int(79, 13, 0, 1);call write~init~int(110, 13, 1, 1);call write~init~int(0, 13, 2, 1);call #Ultimate.allocInit(4, 14);call write~init~int(79, 14, 0, 1);call write~init~int(102, 14, 1, 1);call write~init~int(102, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(3, 15);call write~init~int(41, 15, 0, 1);call write~init~int(32, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(10, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~__SELECTED_FEATURE_base~0 := 0;~__SELECTED_FEATURE_highWaterSensor~0 := 0;~__SELECTED_FEATURE_lowWaterSensor~0 := 0;~__SELECTED_FEATURE_methaneQuery~0 := 0;~__SELECTED_FEATURE_methaneAlarm~0 := 0;~__SELECTED_FEATURE_stopCommand~0 := 0;~__SELECTED_FEATURE_startCommand~0 := 0;~__GUIDSL_ROOT_PRODUCTION~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4;~methAndRunningLastTime~0 := 0;~head~0.base, ~head~0.offset := 0, 0; {14830#true} is VALID [2022-02-20 18:08:26,698 INFO L290 TraceCheckUtils]: 1: Hoare triple {14830#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret24#1, main_~retValue_acc~8#1, main_~tmp~6#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~6#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1; {14830#true} is VALID [2022-02-20 18:08:26,698 INFO L290 TraceCheckUtils]: 2: Hoare triple {14830#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret55#1, select_features_#t~ret56#1, select_features_#t~ret57#1, select_features_#t~ret58#1, select_features_#t~ret59#1, select_features_#t~ret60#1;~__SELECTED_FEATURE_base~0 := 1; {14830#true} is VALID [2022-02-20 18:08:26,698 INFO L272 TraceCheckUtils]: 3: Hoare triple {14830#true} call select_features_#t~ret55#1 := select_one(); {14830#true} is VALID [2022-02-20 18:08:26,698 INFO L290 TraceCheckUtils]: 4: Hoare triple {14830#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {14830#true} is VALID [2022-02-20 18:08:26,698 INFO L290 TraceCheckUtils]: 5: Hoare triple {14830#true} assume true; {14830#true} is VALID [2022-02-20 18:08:26,699 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {14830#true} {14830#true} #363#return; {14830#true} is VALID [2022-02-20 18:08:26,699 INFO L290 TraceCheckUtils]: 7: Hoare triple {14830#true} assume -2147483648 <= select_features_#t~ret55#1 && select_features_#t~ret55#1 <= 2147483647;~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret55#1;havoc select_features_#t~ret55#1; {14830#true} is VALID [2022-02-20 18:08:26,699 INFO L272 TraceCheckUtils]: 8: Hoare triple {14830#true} call select_features_#t~ret56#1 := select_one(); {14830#true} is VALID [2022-02-20 18:08:26,699 INFO L290 TraceCheckUtils]: 9: Hoare triple {14830#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {14830#true} is VALID [2022-02-20 18:08:26,699 INFO L290 TraceCheckUtils]: 10: Hoare triple {14830#true} assume true; {14830#true} is VALID [2022-02-20 18:08:26,699 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {14830#true} {14830#true} #365#return; {14830#true} is VALID [2022-02-20 18:08:26,699 INFO L290 TraceCheckUtils]: 12: Hoare triple {14830#true} assume -2147483648 <= select_features_#t~ret56#1 && select_features_#t~ret56#1 <= 2147483647;~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret56#1;havoc select_features_#t~ret56#1; {14830#true} is VALID [2022-02-20 18:08:26,699 INFO L272 TraceCheckUtils]: 13: Hoare triple {14830#true} call select_features_#t~ret57#1 := select_one(); {14830#true} is VALID [2022-02-20 18:08:26,700 INFO L290 TraceCheckUtils]: 14: Hoare triple {14830#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {14830#true} is VALID [2022-02-20 18:08:26,700 INFO L290 TraceCheckUtils]: 15: Hoare triple {14830#true} assume true; {14830#true} is VALID [2022-02-20 18:08:26,700 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {14830#true} {14830#true} #367#return; {14830#true} is VALID [2022-02-20 18:08:26,700 INFO L290 TraceCheckUtils]: 17: Hoare triple {14830#true} assume -2147483648 <= select_features_#t~ret57#1 && select_features_#t~ret57#1 <= 2147483647;~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret57#1;havoc select_features_#t~ret57#1; {14830#true} is VALID [2022-02-20 18:08:26,700 INFO L272 TraceCheckUtils]: 18: Hoare triple {14830#true} call select_features_#t~ret58#1 := select_one(); {14830#true} is VALID [2022-02-20 18:08:26,700 INFO L290 TraceCheckUtils]: 19: Hoare triple {14830#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {14830#true} is VALID [2022-02-20 18:08:26,700 INFO L290 TraceCheckUtils]: 20: Hoare triple {14830#true} assume true; {14830#true} is VALID [2022-02-20 18:08:26,700 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {14830#true} {14830#true} #369#return; {14830#true} is VALID [2022-02-20 18:08:26,701 INFO L290 TraceCheckUtils]: 22: Hoare triple {14830#true} assume -2147483648 <= select_features_#t~ret58#1 && select_features_#t~ret58#1 <= 2147483647;~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret58#1;havoc select_features_#t~ret58#1; {14830#true} is VALID [2022-02-20 18:08:26,701 INFO L272 TraceCheckUtils]: 23: Hoare triple {14830#true} call select_features_#t~ret59#1 := select_one(); {14830#true} is VALID [2022-02-20 18:08:26,701 INFO L290 TraceCheckUtils]: 24: Hoare triple {14830#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {14830#true} is VALID [2022-02-20 18:08:26,701 INFO L290 TraceCheckUtils]: 25: Hoare triple {14830#true} assume true; {14830#true} is VALID [2022-02-20 18:08:26,701 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {14830#true} {14830#true} #371#return; {14830#true} is VALID [2022-02-20 18:08:26,701 INFO L290 TraceCheckUtils]: 27: Hoare triple {14830#true} assume -2147483648 <= select_features_#t~ret59#1 && select_features_#t~ret59#1 <= 2147483647;~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret59#1;havoc select_features_#t~ret59#1; {14830#true} is VALID [2022-02-20 18:08:26,701 INFO L272 TraceCheckUtils]: 28: Hoare triple {14830#true} call select_features_#t~ret60#1 := select_one(); {14830#true} is VALID [2022-02-20 18:08:26,701 INFO L290 TraceCheckUtils]: 29: Hoare triple {14830#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {14830#true} is VALID [2022-02-20 18:08:26,702 INFO L290 TraceCheckUtils]: 30: Hoare triple {14830#true} assume true; {14830#true} is VALID [2022-02-20 18:08:26,702 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {14830#true} {14830#true} #373#return; {14830#true} is VALID [2022-02-20 18:08:26,702 INFO L290 TraceCheckUtils]: 32: Hoare triple {14830#true} assume -2147483648 <= select_features_#t~ret60#1 && select_features_#t~ret60#1 <= 2147483647;~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret60#1;havoc select_features_#t~ret60#1; {14830#true} is VALID [2022-02-20 18:08:26,702 INFO L290 TraceCheckUtils]: 33: Hoare triple {14830#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~13#1;havoc valid_product_~retValue_acc~13#1;valid_product_~retValue_acc~13#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~13#1; {14830#true} is VALID [2022-02-20 18:08:26,702 INFO L290 TraceCheckUtils]: 34: Hoare triple {14830#true} main_#t~ret24#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret24#1 && main_#t~ret24#1 <= 2147483647;main_~tmp~6#1 := main_#t~ret24#1;havoc main_#t~ret24#1; {14830#true} is VALID [2022-02-20 18:08:26,702 INFO L290 TraceCheckUtils]: 35: Hoare triple {14830#true} assume 0 != main_~tmp~6#1;assume { :begin_inline_setup } true; {14830#true} is VALID [2022-02-20 18:08:26,703 INFO L290 TraceCheckUtils]: 36: Hoare triple {14830#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0; {14850#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:08:26,703 INFO L290 TraceCheckUtils]: 37: Hoare triple {14850#(= ~methAndRunningLastTime~0 0)} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet25#1, test_#t~nondet26#1, test_#t~nondet27#1, test_#t~nondet28#1, test_~splverifierCounter~0#1, test_~tmp~7#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~7#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {14850#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:08:26,703 INFO L290 TraceCheckUtils]: 38: Hoare triple {14850#(= ~methAndRunningLastTime~0 0)} assume !false; {14850#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:08:26,703 INFO L290 TraceCheckUtils]: 39: Hoare triple {14850#(= ~methAndRunningLastTime~0 0)} assume test_~splverifierCounter~0#1 < 4; {14850#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:08:26,704 INFO L290 TraceCheckUtils]: 40: Hoare triple {14850#(= ~methAndRunningLastTime~0 0)} assume -2147483648 <= test_#t~nondet25#1 && test_#t~nondet25#1 <= 2147483647;test_~tmp~7#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {14850#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:08:26,704 INFO L290 TraceCheckUtils]: 41: Hoare triple {14850#(= ~methAndRunningLastTime~0 0)} assume 0 != test_~tmp~7#1; {14850#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:08:26,704 INFO L272 TraceCheckUtils]: 42: Hoare triple {14850#(= ~methAndRunningLastTime~0 0)} call waterRise(); {14878#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:08:26,704 INFO L290 TraceCheckUtils]: 43: Hoare triple {14878#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {14830#true} is VALID [2022-02-20 18:08:26,705 INFO L290 TraceCheckUtils]: 44: Hoare triple {14830#true} assume true; {14830#true} is VALID [2022-02-20 18:08:26,705 INFO L284 TraceCheckUtils]: 45: Hoare quadruple {14830#true} {14850#(= ~methAndRunningLastTime~0 0)} #375#return; {14850#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:08:26,705 INFO L290 TraceCheckUtils]: 46: Hoare triple {14850#(= ~methAndRunningLastTime~0 0)} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {14850#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:08:26,705 INFO L290 TraceCheckUtils]: 47: Hoare triple {14850#(= ~methAndRunningLastTime~0 0)} assume !(0 != test_~tmp___0~2#1); {14850#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:08:26,706 INFO L290 TraceCheckUtils]: 48: Hoare triple {14850#(= ~methAndRunningLastTime~0 0)} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {14850#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:08:26,706 INFO L290 TraceCheckUtils]: 49: Hoare triple {14850#(= ~methAndRunningLastTime~0 0)} assume 0 != test_~tmp___2~0#1; {14850#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:08:26,706 INFO L290 TraceCheckUtils]: 50: Hoare triple {14850#(= ~methAndRunningLastTime~0 0)} assume !(0 != ~__SELECTED_FEATURE_startCommand~0); {14850#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:08:26,706 INFO L272 TraceCheckUtils]: 51: Hoare triple {14850#(= ~methAndRunningLastTime~0 0)} call timeShift(); {14850#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:08:26,707 INFO L290 TraceCheckUtils]: 52: Hoare triple {14850#(= ~methAndRunningLastTime~0 0)} assume !(0 != ~pumpRunning~0); {14850#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:08:26,707 INFO L290 TraceCheckUtils]: 53: Hoare triple {14850#(= ~methAndRunningLastTime~0 0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {14850#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:08:26,707 INFO L290 TraceCheckUtils]: 54: Hoare triple {14850#(= ~methAndRunningLastTime~0 0)} assume !(0 != ~__SELECTED_FEATURE_methaneAlarm~0); {14850#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:08:26,708 INFO L272 TraceCheckUtils]: 55: Hoare triple {14850#(= ~methAndRunningLastTime~0 0)} call processEnvironment__before__methaneAlarm(); {14879#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:26,708 INFO L290 TraceCheckUtils]: 56: Hoare triple {14879#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {14830#true} is VALID [2022-02-20 18:08:26,708 INFO L272 TraceCheckUtils]: 57: Hoare triple {14830#true} call processEnvironment__before__lowWaterSensor(); {14879#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:26,708 INFO L290 TraceCheckUtils]: 58: Hoare triple {14879#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret9#1, processEnvironment__role__highWaterSensor_~tmp~0#1;havoc processEnvironment__role__highWaterSensor_~tmp~0#1; {14830#true} is VALID [2022-02-20 18:08:26,708 INFO L290 TraceCheckUtils]: 59: Hoare triple {14830#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret22#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {14830#true} is VALID [2022-02-20 18:08:26,708 INFO L290 TraceCheckUtils]: 60: Hoare triple {14830#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {14830#true} is VALID [2022-02-20 18:08:26,708 INFO L290 TraceCheckUtils]: 61: Hoare triple {14830#true} isHighWaterLevel_#t~ret22#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret22#1 && isHighWaterLevel_#t~ret22#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret22#1;havoc isHighWaterLevel_#t~ret22#1; {14830#true} is VALID [2022-02-20 18:08:26,709 INFO L290 TraceCheckUtils]: 62: Hoare triple {14830#true} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1; {14830#true} is VALID [2022-02-20 18:08:26,709 INFO L290 TraceCheckUtils]: 63: Hoare triple {14830#true} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {14830#true} is VALID [2022-02-20 18:08:26,709 INFO L290 TraceCheckUtils]: 64: Hoare triple {14830#true} processEnvironment__role__highWaterSensor_#t~ret9#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret9#1 && processEnvironment__role__highWaterSensor_#t~ret9#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~0#1 := processEnvironment__role__highWaterSensor_#t~ret9#1;havoc processEnvironment__role__highWaterSensor_#t~ret9#1; {14830#true} is VALID [2022-02-20 18:08:26,709 INFO L290 TraceCheckUtils]: 65: Hoare triple {14830#true} assume 0 != processEnvironment__role__highWaterSensor_~tmp~0#1;assume { :begin_inline_activatePump } true; {14830#true} is VALID [2022-02-20 18:08:26,709 INFO L290 TraceCheckUtils]: 66: Hoare triple {14830#true} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {14830#true} is VALID [2022-02-20 18:08:26,709 INFO L272 TraceCheckUtils]: 67: Hoare triple {14830#true} call activatePump__before__methaneQuery(); {14879#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:26,710 INFO L290 TraceCheckUtils]: 68: Hoare triple {14879#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {14830#true} is VALID [2022-02-20 18:08:26,710 INFO L290 TraceCheckUtils]: 69: Hoare triple {14830#true} assume true; {14830#true} is VALID [2022-02-20 18:08:26,710 INFO L284 TraceCheckUtils]: 70: Hoare quadruple {14830#true} {14830#true} #339#return; {14830#true} is VALID [2022-02-20 18:08:26,710 INFO L290 TraceCheckUtils]: 71: Hoare triple {14830#true} assume { :end_inline_activatePump } true; {14830#true} is VALID [2022-02-20 18:08:26,710 INFO L290 TraceCheckUtils]: 72: Hoare triple {14830#true} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {14830#true} is VALID [2022-02-20 18:08:26,710 INFO L290 TraceCheckUtils]: 73: Hoare triple {14830#true} assume true; {14830#true} is VALID [2022-02-20 18:08:26,710 INFO L284 TraceCheckUtils]: 74: Hoare quadruple {14830#true} {14830#true} #391#return; {14830#true} is VALID [2022-02-20 18:08:26,710 INFO L290 TraceCheckUtils]: 75: Hoare triple {14830#true} assume true; {14830#true} is VALID [2022-02-20 18:08:26,711 INFO L284 TraceCheckUtils]: 76: Hoare quadruple {14830#true} {14850#(= ~methAndRunningLastTime~0 0)} #359#return; {14850#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:08:26,711 INFO L290 TraceCheckUtils]: 77: Hoare triple {14850#(= ~methAndRunningLastTime~0 0)} assume { :end_inline_processEnvironment } true; {14850#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:08:26,711 INFO L290 TraceCheckUtils]: 78: Hoare triple {14850#(= ~methAndRunningLastTime~0 0)} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret29#1, __utac_acc__Specification2_spec__2_#t~ret30#1, __utac_acc__Specification2_spec__2_~tmp~8#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~8#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {14850#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:08:26,711 INFO L272 TraceCheckUtils]: 79: Hoare triple {14850#(= ~methAndRunningLastTime~0 0)} call __utac_acc__Specification2_spec__2_#t~ret29#1 := isMethaneLevelCritical(); {14830#true} is VALID [2022-02-20 18:08:26,711 INFO L290 TraceCheckUtils]: 80: Hoare triple {14830#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {14830#true} is VALID [2022-02-20 18:08:26,712 INFO L290 TraceCheckUtils]: 81: Hoare triple {14830#true} assume true; {14830#true} is VALID [2022-02-20 18:08:26,712 INFO L284 TraceCheckUtils]: 82: Hoare quadruple {14830#true} {14850#(= ~methAndRunningLastTime~0 0)} #361#return; {14850#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:08:26,712 INFO L290 TraceCheckUtils]: 83: Hoare triple {14850#(= ~methAndRunningLastTime~0 0)} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret29#1 && __utac_acc__Specification2_spec__2_#t~ret29#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~8#1 := __utac_acc__Specification2_spec__2_#t~ret29#1;havoc __utac_acc__Specification2_spec__2_#t~ret29#1; {14850#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:08:26,712 INFO L290 TraceCheckUtils]: 84: Hoare triple {14850#(= ~methAndRunningLastTime~0 0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp~8#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~5#1;havoc isPumpRunning_~retValue_acc~5#1;isPumpRunning_~retValue_acc~5#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~5#1; {14850#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:08:26,713 INFO L290 TraceCheckUtils]: 85: Hoare triple {14850#(= ~methAndRunningLastTime~0 0)} __utac_acc__Specification2_spec__2_#t~ret30#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret30#1 && __utac_acc__Specification2_spec__2_#t~ret30#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret30#1;havoc __utac_acc__Specification2_spec__2_#t~ret30#1; {14850#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:08:26,713 INFO L290 TraceCheckUtils]: 86: Hoare triple {14850#(= ~methAndRunningLastTime~0 0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {14850#(= ~methAndRunningLastTime~0 0)} is VALID [2022-02-20 18:08:26,713 INFO L290 TraceCheckUtils]: 87: Hoare triple {14850#(= ~methAndRunningLastTime~0 0)} assume 0 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {14831#false} is VALID [2022-02-20 18:08:26,713 INFO L290 TraceCheckUtils]: 88: Hoare triple {14831#false} assume !false; {14831#false} is VALID [2022-02-20 18:08:26,714 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-02-20 18:08:26,714 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:08:26,714 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1432205950] [2022-02-20 18:08:26,714 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1432205950] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:08:26,714 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:08:26,714 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-02-20 18:08:26,715 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1456161869] [2022-02-20 18:08:26,715 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:08:26,715 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 11.2) internal successors, (56), 3 states have internal predecessors, (56), 2 states have call successors, (12), 4 states have call predecessors, (12), 1 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) Word has length 89 [2022-02-20 18:08:26,715 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:08:26,716 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 5 states, 5 states have (on average 11.2) internal successors, (56), 3 states have internal predecessors, (56), 2 states have call successors, (12), 4 states have call predecessors, (12), 1 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-02-20 18:08:26,778 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 79 edges. 79 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:26,778 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-02-20 18:08:26,778 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:08:26,778 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-02-20 18:08:26,778 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-02-20 18:08:26,779 INFO L87 Difference]: Start difference. First operand 726 states and 991 transitions. Second operand has 5 states, 5 states have (on average 11.2) internal successors, (56), 3 states have internal predecessors, (56), 2 states have call successors, (12), 4 states have call predecessors, (12), 1 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-02-20 18:08:27,905 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:27,905 INFO L93 Difference]: Finished difference Result 1467 states and 2103 transitions. [2022-02-20 18:08:27,905 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-02-20 18:08:27,906 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 11.2) internal successors, (56), 3 states have internal predecessors, (56), 2 states have call successors, (12), 4 states have call predecessors, (12), 1 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) Word has length 89 [2022-02-20 18:08:27,906 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:08:27,906 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 11.2) internal successors, (56), 3 states have internal predecessors, (56), 2 states have call successors, (12), 4 states have call predecessors, (12), 1 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-02-20 18:08:27,911 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 495 transitions. [2022-02-20 18:08:27,911 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 11.2) internal successors, (56), 3 states have internal predecessors, (56), 2 states have call successors, (12), 4 states have call predecessors, (12), 1 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-02-20 18:08:27,917 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 495 transitions. [2022-02-20 18:08:27,917 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 9 states and 495 transitions. [2022-02-20 18:08:28,259 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 495 edges. 495 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:28,355 INFO L225 Difference]: With dead ends: 1467 [2022-02-20 18:08:28,355 INFO L226 Difference]: Without dead ends: 1465 [2022-02-20 18:08:28,356 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 34 GetRequests, 27 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-02-20 18:08:28,356 INFO L933 BasicCegarLoop]: 162 mSDtfsCounter, 471 mSDsluCounter, 170 mSDsCounter, 0 mSdLazyCounter, 270 mSolverCounterSat, 266 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 482 SdHoareTripleChecker+Valid, 332 SdHoareTripleChecker+Invalid, 536 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 266 IncrementalHoareTripleChecker+Valid, 270 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-02-20 18:08:28,356 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [482 Valid, 332 Invalid, 536 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [266 Valid, 270 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-02-20 18:08:28,358 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1465 states. [2022-02-20 18:08:28,498 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1465 to 1351. [2022-02-20 18:08:28,498 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:08:28,505 INFO L82 GeneralOperation]: Start isEquivalent. First operand 1465 states. Second operand has 1351 states, 981 states have (on average 1.2864424057084607) internal successors, (1262), 1094 states have internal predecessors, (1262), 224 states have call successors, (224), 121 states have call predecessors, (224), 145 states have return successors, (469), 238 states have call predecessors, (469), 224 states have call successors, (469) [2022-02-20 18:08:28,509 INFO L74 IsIncluded]: Start isIncluded. First operand 1465 states. Second operand has 1351 states, 981 states have (on average 1.2864424057084607) internal successors, (1262), 1094 states have internal predecessors, (1262), 224 states have call successors, (224), 121 states have call predecessors, (224), 145 states have return successors, (469), 238 states have call predecessors, (469), 224 states have call successors, (469) [2022-02-20 18:08:28,512 INFO L87 Difference]: Start difference. First operand 1465 states. Second operand has 1351 states, 981 states have (on average 1.2864424057084607) internal successors, (1262), 1094 states have internal predecessors, (1262), 224 states have call successors, (224), 121 states have call predecessors, (224), 145 states have return successors, (469), 238 states have call predecessors, (469), 224 states have call successors, (469) [2022-02-20 18:08:28,579 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:28,580 INFO L93 Difference]: Finished difference Result 1465 states and 2094 transitions. [2022-02-20 18:08:28,580 INFO L276 IsEmpty]: Start isEmpty. Operand 1465 states and 2094 transitions. [2022-02-20 18:08:28,584 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:28,585 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:28,587 INFO L74 IsIncluded]: Start isIncluded. First operand has 1351 states, 981 states have (on average 1.2864424057084607) internal successors, (1262), 1094 states have internal predecessors, (1262), 224 states have call successors, (224), 121 states have call predecessors, (224), 145 states have return successors, (469), 238 states have call predecessors, (469), 224 states have call successors, (469) Second operand 1465 states. [2022-02-20 18:08:28,595 INFO L87 Difference]: Start difference. First operand has 1351 states, 981 states have (on average 1.2864424057084607) internal successors, (1262), 1094 states have internal predecessors, (1262), 224 states have call successors, (224), 121 states have call predecessors, (224), 145 states have return successors, (469), 238 states have call predecessors, (469), 224 states have call successors, (469) Second operand 1465 states. [2022-02-20 18:08:28,668 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:28,668 INFO L93 Difference]: Finished difference Result 1465 states and 2094 transitions. [2022-02-20 18:08:28,668 INFO L276 IsEmpty]: Start isEmpty. Operand 1465 states and 2094 transitions. [2022-02-20 18:08:28,674 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:28,674 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:28,674 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:08:28,674 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:08:28,677 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1351 states, 981 states have (on average 1.2864424057084607) internal successors, (1262), 1094 states have internal predecessors, (1262), 224 states have call successors, (224), 121 states have call predecessors, (224), 145 states have return successors, (469), 238 states have call predecessors, (469), 224 states have call successors, (469) [2022-02-20 18:08:28,766 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1351 states to 1351 states and 1955 transitions. [2022-02-20 18:08:28,767 INFO L78 Accepts]: Start accepts. Automaton has 1351 states and 1955 transitions. Word has length 89 [2022-02-20 18:08:28,767 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:08:28,768 INFO L470 AbstractCegarLoop]: Abstraction has 1351 states and 1955 transitions. [2022-02-20 18:08:28,768 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 11.2) internal successors, (56), 3 states have internal predecessors, (56), 2 states have call successors, (12), 4 states have call predecessors, (12), 1 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-02-20 18:08:28,768 INFO L276 IsEmpty]: Start isEmpty. Operand 1351 states and 1955 transitions. [2022-02-20 18:08:28,772 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 121 [2022-02-20 18:08:28,772 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:08:28,772 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:08:28,772 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-02-20 18:08:28,772 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:08:28,773 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:08:28,773 INFO L85 PathProgramCache]: Analyzing trace with hash 669080672, now seen corresponding path program 1 times [2022-02-20 18:08:28,773 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:08:28,773 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1829798009] [2022-02-20 18:08:28,773 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:08:28,773 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:08:28,800 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:28,814 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-02-20 18:08:28,815 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:28,818 INFO L290 TraceCheckUtils]: 0: Hoare triple {21894#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {21894#true} is VALID [2022-02-20 18:08:28,818 INFO L290 TraceCheckUtils]: 1: Hoare triple {21894#true} assume true; {21894#true} is VALID [2022-02-20 18:08:28,818 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {21894#true} {21894#true} #363#return; {21894#true} is VALID [2022-02-20 18:08:28,818 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:08:28,819 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:28,822 INFO L290 TraceCheckUtils]: 0: Hoare triple {21894#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {21894#true} is VALID [2022-02-20 18:08:28,822 INFO L290 TraceCheckUtils]: 1: Hoare triple {21894#true} assume true; {21894#true} is VALID [2022-02-20 18:08:28,822 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {21894#true} {21894#true} #365#return; {21894#true} is VALID [2022-02-20 18:08:28,822 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-02-20 18:08:28,823 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:28,825 INFO L290 TraceCheckUtils]: 0: Hoare triple {21894#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {21894#true} is VALID [2022-02-20 18:08:28,825 INFO L290 TraceCheckUtils]: 1: Hoare triple {21894#true} assume true; {21894#true} is VALID [2022-02-20 18:08:28,825 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {21894#true} {21894#true} #367#return; {21894#true} is VALID [2022-02-20 18:08:28,825 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:08:28,826 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:28,828 INFO L290 TraceCheckUtils]: 0: Hoare triple {21894#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {21894#true} is VALID [2022-02-20 18:08:28,828 INFO L290 TraceCheckUtils]: 1: Hoare triple {21894#true} assume true; {21894#true} is VALID [2022-02-20 18:08:28,828 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {21894#true} {21894#true} #369#return; {21894#true} is VALID [2022-02-20 18:08:28,828 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-02-20 18:08:28,829 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:28,831 INFO L290 TraceCheckUtils]: 0: Hoare triple {21894#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {21894#true} is VALID [2022-02-20 18:08:28,831 INFO L290 TraceCheckUtils]: 1: Hoare triple {21894#true} assume true; {21894#true} is VALID [2022-02-20 18:08:28,831 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {21894#true} {21894#true} #371#return; {21894#true} is VALID [2022-02-20 18:08:28,831 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-02-20 18:08:28,832 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:28,834 INFO L290 TraceCheckUtils]: 0: Hoare triple {21894#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {21894#true} is VALID [2022-02-20 18:08:28,834 INFO L290 TraceCheckUtils]: 1: Hoare triple {21894#true} assume true; {21894#true} is VALID [2022-02-20 18:08:28,834 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {21894#true} {21894#true} #373#return; {21894#true} is VALID [2022-02-20 18:08:28,836 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2022-02-20 18:08:28,837 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:28,840 INFO L290 TraceCheckUtils]: 0: Hoare triple {21960#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {21894#true} is VALID [2022-02-20 18:08:28,840 INFO L290 TraceCheckUtils]: 1: Hoare triple {21894#true} assume true; {21894#true} is VALID [2022-02-20 18:08:28,840 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {21894#true} {21894#true} #375#return; {21894#true} is VALID [2022-02-20 18:08:28,846 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2022-02-20 18:08:28,851 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:28,864 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-02-20 18:08:28,868 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:28,877 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:08:28,879 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:28,881 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-02-20 18:08:28,883 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:28,885 INFO L290 TraceCheckUtils]: 0: Hoare triple {21987#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {21894#true} is VALID [2022-02-20 18:08:28,885 INFO L290 TraceCheckUtils]: 1: Hoare triple {21894#true} assume true; {21894#true} is VALID [2022-02-20 18:08:28,885 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {21894#true} {21894#true} #339#return; {21894#true} is VALID [2022-02-20 18:08:28,885 INFO L290 TraceCheckUtils]: 0: Hoare triple {21987#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret9#1, processEnvironment__role__highWaterSensor_~tmp~0#1;havoc processEnvironment__role__highWaterSensor_~tmp~0#1; {21894#true} is VALID [2022-02-20 18:08:28,885 INFO L290 TraceCheckUtils]: 1: Hoare triple {21894#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret22#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {21894#true} is VALID [2022-02-20 18:08:28,885 INFO L290 TraceCheckUtils]: 2: Hoare triple {21894#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {21894#true} is VALID [2022-02-20 18:08:28,886 INFO L290 TraceCheckUtils]: 3: Hoare triple {21894#true} isHighWaterLevel_#t~ret22#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret22#1 && isHighWaterLevel_#t~ret22#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret22#1;havoc isHighWaterLevel_#t~ret22#1; {21894#true} is VALID [2022-02-20 18:08:28,886 INFO L290 TraceCheckUtils]: 4: Hoare triple {21894#true} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1; {21894#true} is VALID [2022-02-20 18:08:28,886 INFO L290 TraceCheckUtils]: 5: Hoare triple {21894#true} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {21894#true} is VALID [2022-02-20 18:08:28,886 INFO L290 TraceCheckUtils]: 6: Hoare triple {21894#true} processEnvironment__role__highWaterSensor_#t~ret9#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret9#1 && processEnvironment__role__highWaterSensor_#t~ret9#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~0#1 := processEnvironment__role__highWaterSensor_#t~ret9#1;havoc processEnvironment__role__highWaterSensor_#t~ret9#1; {21894#true} is VALID [2022-02-20 18:08:28,886 INFO L290 TraceCheckUtils]: 7: Hoare triple {21894#true} assume 0 != processEnvironment__role__highWaterSensor_~tmp~0#1;assume { :begin_inline_activatePump } true; {21894#true} is VALID [2022-02-20 18:08:28,886 INFO L290 TraceCheckUtils]: 8: Hoare triple {21894#true} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {21894#true} is VALID [2022-02-20 18:08:28,886 INFO L272 TraceCheckUtils]: 9: Hoare triple {21894#true} call activatePump__before__methaneQuery(); {21987#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:28,886 INFO L290 TraceCheckUtils]: 10: Hoare triple {21987#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {21894#true} is VALID [2022-02-20 18:08:28,886 INFO L290 TraceCheckUtils]: 11: Hoare triple {21894#true} assume true; {21894#true} is VALID [2022-02-20 18:08:28,886 INFO L284 TraceCheckUtils]: 12: Hoare quadruple {21894#true} {21894#true} #339#return; {21894#true} is VALID [2022-02-20 18:08:28,887 INFO L290 TraceCheckUtils]: 13: Hoare triple {21894#true} assume { :end_inline_activatePump } true; {21894#true} is VALID [2022-02-20 18:08:28,887 INFO L290 TraceCheckUtils]: 14: Hoare triple {21894#true} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {21894#true} is VALID [2022-02-20 18:08:28,887 INFO L290 TraceCheckUtils]: 15: Hoare triple {21894#true} assume true; {21894#true} is VALID [2022-02-20 18:08:28,887 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {21894#true} {21894#true} #391#return; {21894#true} is VALID [2022-02-20 18:08:28,887 INFO L290 TraceCheckUtils]: 0: Hoare triple {21987#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {21894#true} is VALID [2022-02-20 18:08:28,887 INFO L272 TraceCheckUtils]: 1: Hoare triple {21894#true} call processEnvironment__before__lowWaterSensor(); {21987#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:28,887 INFO L290 TraceCheckUtils]: 2: Hoare triple {21987#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret9#1, processEnvironment__role__highWaterSensor_~tmp~0#1;havoc processEnvironment__role__highWaterSensor_~tmp~0#1; {21894#true} is VALID [2022-02-20 18:08:28,887 INFO L290 TraceCheckUtils]: 3: Hoare triple {21894#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret22#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {21894#true} is VALID [2022-02-20 18:08:28,887 INFO L290 TraceCheckUtils]: 4: Hoare triple {21894#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {21894#true} is VALID [2022-02-20 18:08:28,888 INFO L290 TraceCheckUtils]: 5: Hoare triple {21894#true} isHighWaterLevel_#t~ret22#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret22#1 && isHighWaterLevel_#t~ret22#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret22#1;havoc isHighWaterLevel_#t~ret22#1; {21894#true} is VALID [2022-02-20 18:08:28,888 INFO L290 TraceCheckUtils]: 6: Hoare triple {21894#true} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1; {21894#true} is VALID [2022-02-20 18:08:28,888 INFO L290 TraceCheckUtils]: 7: Hoare triple {21894#true} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {21894#true} is VALID [2022-02-20 18:08:28,888 INFO L290 TraceCheckUtils]: 8: Hoare triple {21894#true} processEnvironment__role__highWaterSensor_#t~ret9#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret9#1 && processEnvironment__role__highWaterSensor_#t~ret9#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~0#1 := processEnvironment__role__highWaterSensor_#t~ret9#1;havoc processEnvironment__role__highWaterSensor_#t~ret9#1; {21894#true} is VALID [2022-02-20 18:08:28,888 INFO L290 TraceCheckUtils]: 9: Hoare triple {21894#true} assume 0 != processEnvironment__role__highWaterSensor_~tmp~0#1;assume { :begin_inline_activatePump } true; {21894#true} is VALID [2022-02-20 18:08:28,888 INFO L290 TraceCheckUtils]: 10: Hoare triple {21894#true} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {21894#true} is VALID [2022-02-20 18:08:28,888 INFO L272 TraceCheckUtils]: 11: Hoare triple {21894#true} call activatePump__before__methaneQuery(); {21987#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:28,888 INFO L290 TraceCheckUtils]: 12: Hoare triple {21987#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {21894#true} is VALID [2022-02-20 18:08:28,888 INFO L290 TraceCheckUtils]: 13: Hoare triple {21894#true} assume true; {21894#true} is VALID [2022-02-20 18:08:28,888 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {21894#true} {21894#true} #339#return; {21894#true} is VALID [2022-02-20 18:08:28,888 INFO L290 TraceCheckUtils]: 15: Hoare triple {21894#true} assume { :end_inline_activatePump } true; {21894#true} is VALID [2022-02-20 18:08:28,888 INFO L290 TraceCheckUtils]: 16: Hoare triple {21894#true} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {21894#true} is VALID [2022-02-20 18:08:28,889 INFO L290 TraceCheckUtils]: 17: Hoare triple {21894#true} assume true; {21894#true} is VALID [2022-02-20 18:08:28,889 INFO L284 TraceCheckUtils]: 18: Hoare quadruple {21894#true} {21894#true} #391#return; {21894#true} is VALID [2022-02-20 18:08:28,889 INFO L290 TraceCheckUtils]: 19: Hoare triple {21894#true} assume true; {21894#true} is VALID [2022-02-20 18:08:28,889 INFO L284 TraceCheckUtils]: 20: Hoare quadruple {21894#true} {21962#(not (= 0 ~systemActive~0))} #359#return; {21962#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:08:28,889 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-02-20 18:08:28,890 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:28,896 INFO L290 TraceCheckUtils]: 0: Hoare triple {21894#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {21894#true} is VALID [2022-02-20 18:08:28,896 INFO L290 TraceCheckUtils]: 1: Hoare triple {21894#true} assume true; {21894#true} is VALID [2022-02-20 18:08:28,897 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {21894#true} {21962#(not (= 0 ~systemActive~0))} #361#return; {21962#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:08:28,897 INFO L290 TraceCheckUtils]: 0: Hoare triple {21961#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0) (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))} assume !(0 != ~pumpRunning~0); {21894#true} is VALID [2022-02-20 18:08:28,897 INFO L290 TraceCheckUtils]: 1: Hoare triple {21894#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {21962#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:08:28,897 INFO L290 TraceCheckUtils]: 2: Hoare triple {21962#(not (= 0 ~systemActive~0))} assume !(0 != ~__SELECTED_FEATURE_methaneAlarm~0); {21962#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:08:28,898 INFO L272 TraceCheckUtils]: 3: Hoare triple {21962#(not (= 0 ~systemActive~0))} call processEnvironment__before__methaneAlarm(); {21987#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:28,898 INFO L290 TraceCheckUtils]: 4: Hoare triple {21987#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {21894#true} is VALID [2022-02-20 18:08:28,898 INFO L272 TraceCheckUtils]: 5: Hoare triple {21894#true} call processEnvironment__before__lowWaterSensor(); {21987#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:28,898 INFO L290 TraceCheckUtils]: 6: Hoare triple {21987#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret9#1, processEnvironment__role__highWaterSensor_~tmp~0#1;havoc processEnvironment__role__highWaterSensor_~tmp~0#1; {21894#true} is VALID [2022-02-20 18:08:28,898 INFO L290 TraceCheckUtils]: 7: Hoare triple {21894#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret22#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {21894#true} is VALID [2022-02-20 18:08:28,898 INFO L290 TraceCheckUtils]: 8: Hoare triple {21894#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {21894#true} is VALID [2022-02-20 18:08:28,898 INFO L290 TraceCheckUtils]: 9: Hoare triple {21894#true} isHighWaterLevel_#t~ret22#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret22#1 && isHighWaterLevel_#t~ret22#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret22#1;havoc isHighWaterLevel_#t~ret22#1; {21894#true} is VALID [2022-02-20 18:08:28,899 INFO L290 TraceCheckUtils]: 10: Hoare triple {21894#true} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1; {21894#true} is VALID [2022-02-20 18:08:28,899 INFO L290 TraceCheckUtils]: 11: Hoare triple {21894#true} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {21894#true} is VALID [2022-02-20 18:08:28,899 INFO L290 TraceCheckUtils]: 12: Hoare triple {21894#true} processEnvironment__role__highWaterSensor_#t~ret9#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret9#1 && processEnvironment__role__highWaterSensor_#t~ret9#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~0#1 := processEnvironment__role__highWaterSensor_#t~ret9#1;havoc processEnvironment__role__highWaterSensor_#t~ret9#1; {21894#true} is VALID [2022-02-20 18:08:28,899 INFO L290 TraceCheckUtils]: 13: Hoare triple {21894#true} assume 0 != processEnvironment__role__highWaterSensor_~tmp~0#1;assume { :begin_inline_activatePump } true; {21894#true} is VALID [2022-02-20 18:08:28,899 INFO L290 TraceCheckUtils]: 14: Hoare triple {21894#true} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {21894#true} is VALID [2022-02-20 18:08:28,899 INFO L272 TraceCheckUtils]: 15: Hoare triple {21894#true} call activatePump__before__methaneQuery(); {21987#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:28,899 INFO L290 TraceCheckUtils]: 16: Hoare triple {21987#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {21894#true} is VALID [2022-02-20 18:08:28,899 INFO L290 TraceCheckUtils]: 17: Hoare triple {21894#true} assume true; {21894#true} is VALID [2022-02-20 18:08:28,899 INFO L284 TraceCheckUtils]: 18: Hoare quadruple {21894#true} {21894#true} #339#return; {21894#true} is VALID [2022-02-20 18:08:28,899 INFO L290 TraceCheckUtils]: 19: Hoare triple {21894#true} assume { :end_inline_activatePump } true; {21894#true} is VALID [2022-02-20 18:08:28,899 INFO L290 TraceCheckUtils]: 20: Hoare triple {21894#true} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {21894#true} is VALID [2022-02-20 18:08:28,900 INFO L290 TraceCheckUtils]: 21: Hoare triple {21894#true} assume true; {21894#true} is VALID [2022-02-20 18:08:28,900 INFO L284 TraceCheckUtils]: 22: Hoare quadruple {21894#true} {21894#true} #391#return; {21894#true} is VALID [2022-02-20 18:08:28,900 INFO L290 TraceCheckUtils]: 23: Hoare triple {21894#true} assume true; {21894#true} is VALID [2022-02-20 18:08:28,900 INFO L284 TraceCheckUtils]: 24: Hoare quadruple {21894#true} {21962#(not (= 0 ~systemActive~0))} #359#return; {21962#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:08:28,900 INFO L290 TraceCheckUtils]: 25: Hoare triple {21962#(not (= 0 ~systemActive~0))} assume { :end_inline_processEnvironment } true; {21962#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:08:28,901 INFO L290 TraceCheckUtils]: 26: Hoare triple {21962#(not (= 0 ~systemActive~0))} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret29#1, __utac_acc__Specification2_spec__2_#t~ret30#1, __utac_acc__Specification2_spec__2_~tmp~8#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~8#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {21962#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:08:28,901 INFO L272 TraceCheckUtils]: 27: Hoare triple {21962#(not (= 0 ~systemActive~0))} call __utac_acc__Specification2_spec__2_#t~ret29#1 := isMethaneLevelCritical(); {21894#true} is VALID [2022-02-20 18:08:28,901 INFO L290 TraceCheckUtils]: 28: Hoare triple {21894#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {21894#true} is VALID [2022-02-20 18:08:28,901 INFO L290 TraceCheckUtils]: 29: Hoare triple {21894#true} assume true; {21894#true} is VALID [2022-02-20 18:08:28,901 INFO L284 TraceCheckUtils]: 30: Hoare quadruple {21894#true} {21962#(not (= 0 ~systemActive~0))} #361#return; {21962#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:08:28,901 INFO L290 TraceCheckUtils]: 31: Hoare triple {21962#(not (= 0 ~systemActive~0))} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret29#1 && __utac_acc__Specification2_spec__2_#t~ret29#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~8#1 := __utac_acc__Specification2_spec__2_#t~ret29#1;havoc __utac_acc__Specification2_spec__2_#t~ret29#1; {21962#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:08:28,902 INFO L290 TraceCheckUtils]: 32: Hoare triple {21962#(not (= 0 ~systemActive~0))} assume 0 != __utac_acc__Specification2_spec__2_~tmp~8#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~5#1;havoc isPumpRunning_~retValue_acc~5#1;isPumpRunning_~retValue_acc~5#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~5#1; {21962#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:08:28,902 INFO L290 TraceCheckUtils]: 33: Hoare triple {21962#(not (= 0 ~systemActive~0))} __utac_acc__Specification2_spec__2_#t~ret30#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret30#1 && __utac_acc__Specification2_spec__2_#t~ret30#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret30#1;havoc __utac_acc__Specification2_spec__2_#t~ret30#1; {21962#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:08:28,902 INFO L290 TraceCheckUtils]: 34: Hoare triple {21962#(not (= 0 ~systemActive~0))} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {21962#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:08:28,903 INFO L290 TraceCheckUtils]: 35: Hoare triple {21962#(not (= 0 ~systemActive~0))} assume !(0 != ~methAndRunningLastTime~0);~methAndRunningLastTime~0 := 1; {21962#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:08:28,903 INFO L290 TraceCheckUtils]: 36: Hoare triple {21962#(not (= 0 ~systemActive~0))} assume { :end_inline___utac_acc__Specification2_spec__2 } true; {21962#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:08:28,903 INFO L290 TraceCheckUtils]: 37: Hoare triple {21962#(not (= 0 ~systemActive~0))} assume true; {21962#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:08:28,903 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {21962#(not (= 0 ~systemActive~0))} {21917#(= 0 ~systemActive~0)} #381#return; {21895#false} is VALID [2022-02-20 18:08:28,904 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 110 [2022-02-20 18:08:28,904 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:28,906 INFO L290 TraceCheckUtils]: 0: Hoare triple {21894#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {21894#true} is VALID [2022-02-20 18:08:28,906 INFO L290 TraceCheckUtils]: 1: Hoare triple {21894#true} assume true; {21894#true} is VALID [2022-02-20 18:08:28,906 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {21894#true} {21895#false} #361#return; {21895#false} is VALID [2022-02-20 18:08:28,906 INFO L290 TraceCheckUtils]: 0: Hoare triple {21894#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(38, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(13, 9);call #Ultimate.allocInit(3, 10);call write~init~int(79, 10, 0, 1);call write~init~int(110, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(4, 11);call write~init~int(79, 11, 0, 1);call write~init~int(102, 11, 1, 1);call write~init~int(102, 11, 2, 1);call write~init~int(0, 11, 3, 1);call #Ultimate.allocInit(7, 12);call write~init~int(44, 12, 0, 1);call write~init~int(80, 12, 1, 1);call write~init~int(117, 12, 2, 1);call write~init~int(109, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(3, 13);call write~init~int(79, 13, 0, 1);call write~init~int(110, 13, 1, 1);call write~init~int(0, 13, 2, 1);call #Ultimate.allocInit(4, 14);call write~init~int(79, 14, 0, 1);call write~init~int(102, 14, 1, 1);call write~init~int(102, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(3, 15);call write~init~int(41, 15, 0, 1);call write~init~int(32, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(10, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~__SELECTED_FEATURE_base~0 := 0;~__SELECTED_FEATURE_highWaterSensor~0 := 0;~__SELECTED_FEATURE_lowWaterSensor~0 := 0;~__SELECTED_FEATURE_methaneQuery~0 := 0;~__SELECTED_FEATURE_methaneAlarm~0 := 0;~__SELECTED_FEATURE_stopCommand~0 := 0;~__SELECTED_FEATURE_startCommand~0 := 0;~__GUIDSL_ROOT_PRODUCTION~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4;~methAndRunningLastTime~0 := 0;~head~0.base, ~head~0.offset := 0, 0; {21894#true} is VALID [2022-02-20 18:08:28,906 INFO L290 TraceCheckUtils]: 1: Hoare triple {21894#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret24#1, main_~retValue_acc~8#1, main_~tmp~6#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~6#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1; {21894#true} is VALID [2022-02-20 18:08:28,906 INFO L290 TraceCheckUtils]: 2: Hoare triple {21894#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret55#1, select_features_#t~ret56#1, select_features_#t~ret57#1, select_features_#t~ret58#1, select_features_#t~ret59#1, select_features_#t~ret60#1;~__SELECTED_FEATURE_base~0 := 1; {21894#true} is VALID [2022-02-20 18:08:28,906 INFO L272 TraceCheckUtils]: 3: Hoare triple {21894#true} call select_features_#t~ret55#1 := select_one(); {21894#true} is VALID [2022-02-20 18:08:28,906 INFO L290 TraceCheckUtils]: 4: Hoare triple {21894#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {21894#true} is VALID [2022-02-20 18:08:28,906 INFO L290 TraceCheckUtils]: 5: Hoare triple {21894#true} assume true; {21894#true} is VALID [2022-02-20 18:08:28,906 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {21894#true} {21894#true} #363#return; {21894#true} is VALID [2022-02-20 18:08:28,906 INFO L290 TraceCheckUtils]: 7: Hoare triple {21894#true} assume -2147483648 <= select_features_#t~ret55#1 && select_features_#t~ret55#1 <= 2147483647;~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret55#1;havoc select_features_#t~ret55#1; {21894#true} is VALID [2022-02-20 18:08:28,907 INFO L272 TraceCheckUtils]: 8: Hoare triple {21894#true} call select_features_#t~ret56#1 := select_one(); {21894#true} is VALID [2022-02-20 18:08:28,907 INFO L290 TraceCheckUtils]: 9: Hoare triple {21894#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {21894#true} is VALID [2022-02-20 18:08:28,907 INFO L290 TraceCheckUtils]: 10: Hoare triple {21894#true} assume true; {21894#true} is VALID [2022-02-20 18:08:28,907 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {21894#true} {21894#true} #365#return; {21894#true} is VALID [2022-02-20 18:08:28,907 INFO L290 TraceCheckUtils]: 12: Hoare triple {21894#true} assume -2147483648 <= select_features_#t~ret56#1 && select_features_#t~ret56#1 <= 2147483647;~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret56#1;havoc select_features_#t~ret56#1; {21894#true} is VALID [2022-02-20 18:08:28,907 INFO L272 TraceCheckUtils]: 13: Hoare triple {21894#true} call select_features_#t~ret57#1 := select_one(); {21894#true} is VALID [2022-02-20 18:08:28,907 INFO L290 TraceCheckUtils]: 14: Hoare triple {21894#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {21894#true} is VALID [2022-02-20 18:08:28,907 INFO L290 TraceCheckUtils]: 15: Hoare triple {21894#true} assume true; {21894#true} is VALID [2022-02-20 18:08:28,907 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {21894#true} {21894#true} #367#return; {21894#true} is VALID [2022-02-20 18:08:28,907 INFO L290 TraceCheckUtils]: 17: Hoare triple {21894#true} assume -2147483648 <= select_features_#t~ret57#1 && select_features_#t~ret57#1 <= 2147483647;~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret57#1;havoc select_features_#t~ret57#1; {21894#true} is VALID [2022-02-20 18:08:28,907 INFO L272 TraceCheckUtils]: 18: Hoare triple {21894#true} call select_features_#t~ret58#1 := select_one(); {21894#true} is VALID [2022-02-20 18:08:28,907 INFO L290 TraceCheckUtils]: 19: Hoare triple {21894#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {21894#true} is VALID [2022-02-20 18:08:28,907 INFO L290 TraceCheckUtils]: 20: Hoare triple {21894#true} assume true; {21894#true} is VALID [2022-02-20 18:08:28,907 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {21894#true} {21894#true} #369#return; {21894#true} is VALID [2022-02-20 18:08:28,907 INFO L290 TraceCheckUtils]: 22: Hoare triple {21894#true} assume -2147483648 <= select_features_#t~ret58#1 && select_features_#t~ret58#1 <= 2147483647;~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret58#1;havoc select_features_#t~ret58#1; {21894#true} is VALID [2022-02-20 18:08:28,908 INFO L272 TraceCheckUtils]: 23: Hoare triple {21894#true} call select_features_#t~ret59#1 := select_one(); {21894#true} is VALID [2022-02-20 18:08:28,908 INFO L290 TraceCheckUtils]: 24: Hoare triple {21894#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {21894#true} is VALID [2022-02-20 18:08:28,908 INFO L290 TraceCheckUtils]: 25: Hoare triple {21894#true} assume true; {21894#true} is VALID [2022-02-20 18:08:28,908 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {21894#true} {21894#true} #371#return; {21894#true} is VALID [2022-02-20 18:08:28,908 INFO L290 TraceCheckUtils]: 27: Hoare triple {21894#true} assume -2147483648 <= select_features_#t~ret59#1 && select_features_#t~ret59#1 <= 2147483647;~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret59#1;havoc select_features_#t~ret59#1; {21894#true} is VALID [2022-02-20 18:08:28,908 INFO L272 TraceCheckUtils]: 28: Hoare triple {21894#true} call select_features_#t~ret60#1 := select_one(); {21894#true} is VALID [2022-02-20 18:08:28,908 INFO L290 TraceCheckUtils]: 29: Hoare triple {21894#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {21894#true} is VALID [2022-02-20 18:08:28,908 INFO L290 TraceCheckUtils]: 30: Hoare triple {21894#true} assume true; {21894#true} is VALID [2022-02-20 18:08:28,908 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {21894#true} {21894#true} #373#return; {21894#true} is VALID [2022-02-20 18:08:28,908 INFO L290 TraceCheckUtils]: 32: Hoare triple {21894#true} assume -2147483648 <= select_features_#t~ret60#1 && select_features_#t~ret60#1 <= 2147483647;~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret60#1;havoc select_features_#t~ret60#1; {21894#true} is VALID [2022-02-20 18:08:28,908 INFO L290 TraceCheckUtils]: 33: Hoare triple {21894#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~13#1;havoc valid_product_~retValue_acc~13#1;valid_product_~retValue_acc~13#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~13#1; {21894#true} is VALID [2022-02-20 18:08:28,908 INFO L290 TraceCheckUtils]: 34: Hoare triple {21894#true} main_#t~ret24#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret24#1 && main_#t~ret24#1 <= 2147483647;main_~tmp~6#1 := main_#t~ret24#1;havoc main_#t~ret24#1; {21894#true} is VALID [2022-02-20 18:08:28,908 INFO L290 TraceCheckUtils]: 35: Hoare triple {21894#true} assume 0 != main_~tmp~6#1;assume { :begin_inline_setup } true; {21894#true} is VALID [2022-02-20 18:08:28,908 INFO L290 TraceCheckUtils]: 36: Hoare triple {21894#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0; {21894#true} is VALID [2022-02-20 18:08:28,908 INFO L290 TraceCheckUtils]: 37: Hoare triple {21894#true} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet25#1, test_#t~nondet26#1, test_#t~nondet27#1, test_#t~nondet28#1, test_~splverifierCounter~0#1, test_~tmp~7#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~7#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {21894#true} is VALID [2022-02-20 18:08:28,908 INFO L290 TraceCheckUtils]: 38: Hoare triple {21894#true} assume !false; {21894#true} is VALID [2022-02-20 18:08:28,909 INFO L290 TraceCheckUtils]: 39: Hoare triple {21894#true} assume test_~splverifierCounter~0#1 < 4; {21894#true} is VALID [2022-02-20 18:08:28,909 INFO L290 TraceCheckUtils]: 40: Hoare triple {21894#true} assume -2147483648 <= test_#t~nondet25#1 && test_#t~nondet25#1 <= 2147483647;test_~tmp~7#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {21894#true} is VALID [2022-02-20 18:08:28,909 INFO L290 TraceCheckUtils]: 41: Hoare triple {21894#true} assume 0 != test_~tmp~7#1; {21894#true} is VALID [2022-02-20 18:08:28,909 INFO L272 TraceCheckUtils]: 42: Hoare triple {21894#true} call waterRise(); {21960#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:08:28,909 INFO L290 TraceCheckUtils]: 43: Hoare triple {21960#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {21894#true} is VALID [2022-02-20 18:08:28,909 INFO L290 TraceCheckUtils]: 44: Hoare triple {21894#true} assume true; {21894#true} is VALID [2022-02-20 18:08:28,909 INFO L284 TraceCheckUtils]: 45: Hoare quadruple {21894#true} {21894#true} #375#return; {21894#true} is VALID [2022-02-20 18:08:28,909 INFO L290 TraceCheckUtils]: 46: Hoare triple {21894#true} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {21894#true} is VALID [2022-02-20 18:08:28,909 INFO L290 TraceCheckUtils]: 47: Hoare triple {21894#true} assume !(0 != test_~tmp___0~2#1); {21894#true} is VALID [2022-02-20 18:08:28,909 INFO L290 TraceCheckUtils]: 48: Hoare triple {21894#true} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {21894#true} is VALID [2022-02-20 18:08:28,909 INFO L290 TraceCheckUtils]: 49: Hoare triple {21894#true} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet28#1 && test_#t~nondet28#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet28#1;havoc test_#t~nondet28#1; {21894#true} is VALID [2022-02-20 18:08:28,910 INFO L290 TraceCheckUtils]: 50: Hoare triple {21894#true} assume 0 != test_~tmp___1~0#1; {21894#true} is VALID [2022-02-20 18:08:28,910 INFO L290 TraceCheckUtils]: 51: Hoare triple {21894#true} assume 0 != ~__SELECTED_FEATURE_stopCommand~0;assume { :begin_inline_stopSystem } true; {21894#true} is VALID [2022-02-20 18:08:28,910 INFO L290 TraceCheckUtils]: 52: Hoare triple {21894#true} assume !(0 != ~pumpRunning~0); {21894#true} is VALID [2022-02-20 18:08:28,910 INFO L290 TraceCheckUtils]: 53: Hoare triple {21894#true} ~systemActive~0 := 0; {21917#(= 0 ~systemActive~0)} is VALID [2022-02-20 18:08:28,910 INFO L290 TraceCheckUtils]: 54: Hoare triple {21917#(= 0 ~systemActive~0)} assume { :end_inline_stopSystem } true; {21917#(= 0 ~systemActive~0)} is VALID [2022-02-20 18:08:28,911 INFO L272 TraceCheckUtils]: 55: Hoare triple {21917#(= 0 ~systemActive~0)} call timeShift(); {21961#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0) (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))} is VALID [2022-02-20 18:08:28,911 INFO L290 TraceCheckUtils]: 56: Hoare triple {21961#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0) (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))} assume !(0 != ~pumpRunning~0); {21894#true} is VALID [2022-02-20 18:08:28,911 INFO L290 TraceCheckUtils]: 57: Hoare triple {21894#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {21962#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:08:28,911 INFO L290 TraceCheckUtils]: 58: Hoare triple {21962#(not (= 0 ~systemActive~0))} assume !(0 != ~__SELECTED_FEATURE_methaneAlarm~0); {21962#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:08:28,912 INFO L272 TraceCheckUtils]: 59: Hoare triple {21962#(not (= 0 ~systemActive~0))} call processEnvironment__before__methaneAlarm(); {21987#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:28,912 INFO L290 TraceCheckUtils]: 60: Hoare triple {21987#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {21894#true} is VALID [2022-02-20 18:08:28,912 INFO L272 TraceCheckUtils]: 61: Hoare triple {21894#true} call processEnvironment__before__lowWaterSensor(); {21987#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:28,912 INFO L290 TraceCheckUtils]: 62: Hoare triple {21987#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret9#1, processEnvironment__role__highWaterSensor_~tmp~0#1;havoc processEnvironment__role__highWaterSensor_~tmp~0#1; {21894#true} is VALID [2022-02-20 18:08:28,912 INFO L290 TraceCheckUtils]: 63: Hoare triple {21894#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret22#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {21894#true} is VALID [2022-02-20 18:08:28,912 INFO L290 TraceCheckUtils]: 64: Hoare triple {21894#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {21894#true} is VALID [2022-02-20 18:08:28,912 INFO L290 TraceCheckUtils]: 65: Hoare triple {21894#true} isHighWaterLevel_#t~ret22#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret22#1 && isHighWaterLevel_#t~ret22#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret22#1;havoc isHighWaterLevel_#t~ret22#1; {21894#true} is VALID [2022-02-20 18:08:28,912 INFO L290 TraceCheckUtils]: 66: Hoare triple {21894#true} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1; {21894#true} is VALID [2022-02-20 18:08:28,912 INFO L290 TraceCheckUtils]: 67: Hoare triple {21894#true} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {21894#true} is VALID [2022-02-20 18:08:28,912 INFO L290 TraceCheckUtils]: 68: Hoare triple {21894#true} processEnvironment__role__highWaterSensor_#t~ret9#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret9#1 && processEnvironment__role__highWaterSensor_#t~ret9#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~0#1 := processEnvironment__role__highWaterSensor_#t~ret9#1;havoc processEnvironment__role__highWaterSensor_#t~ret9#1; {21894#true} is VALID [2022-02-20 18:08:28,912 INFO L290 TraceCheckUtils]: 69: Hoare triple {21894#true} assume 0 != processEnvironment__role__highWaterSensor_~tmp~0#1;assume { :begin_inline_activatePump } true; {21894#true} is VALID [2022-02-20 18:08:28,913 INFO L290 TraceCheckUtils]: 70: Hoare triple {21894#true} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {21894#true} is VALID [2022-02-20 18:08:28,913 INFO L272 TraceCheckUtils]: 71: Hoare triple {21894#true} call activatePump__before__methaneQuery(); {21987#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:28,913 INFO L290 TraceCheckUtils]: 72: Hoare triple {21987#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {21894#true} is VALID [2022-02-20 18:08:28,913 INFO L290 TraceCheckUtils]: 73: Hoare triple {21894#true} assume true; {21894#true} is VALID [2022-02-20 18:08:28,913 INFO L284 TraceCheckUtils]: 74: Hoare quadruple {21894#true} {21894#true} #339#return; {21894#true} is VALID [2022-02-20 18:08:28,913 INFO L290 TraceCheckUtils]: 75: Hoare triple {21894#true} assume { :end_inline_activatePump } true; {21894#true} is VALID [2022-02-20 18:08:28,913 INFO L290 TraceCheckUtils]: 76: Hoare triple {21894#true} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {21894#true} is VALID [2022-02-20 18:08:28,913 INFO L290 TraceCheckUtils]: 77: Hoare triple {21894#true} assume true; {21894#true} is VALID [2022-02-20 18:08:28,913 INFO L284 TraceCheckUtils]: 78: Hoare quadruple {21894#true} {21894#true} #391#return; {21894#true} is VALID [2022-02-20 18:08:28,913 INFO L290 TraceCheckUtils]: 79: Hoare triple {21894#true} assume true; {21894#true} is VALID [2022-02-20 18:08:28,914 INFO L284 TraceCheckUtils]: 80: Hoare quadruple {21894#true} {21962#(not (= 0 ~systemActive~0))} #359#return; {21962#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:08:28,914 INFO L290 TraceCheckUtils]: 81: Hoare triple {21962#(not (= 0 ~systemActive~0))} assume { :end_inline_processEnvironment } true; {21962#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:08:28,914 INFO L290 TraceCheckUtils]: 82: Hoare triple {21962#(not (= 0 ~systemActive~0))} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret29#1, __utac_acc__Specification2_spec__2_#t~ret30#1, __utac_acc__Specification2_spec__2_~tmp~8#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~8#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {21962#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:08:28,914 INFO L272 TraceCheckUtils]: 83: Hoare triple {21962#(not (= 0 ~systemActive~0))} call __utac_acc__Specification2_spec__2_#t~ret29#1 := isMethaneLevelCritical(); {21894#true} is VALID [2022-02-20 18:08:28,914 INFO L290 TraceCheckUtils]: 84: Hoare triple {21894#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {21894#true} is VALID [2022-02-20 18:08:28,914 INFO L290 TraceCheckUtils]: 85: Hoare triple {21894#true} assume true; {21894#true} is VALID [2022-02-20 18:08:28,915 INFO L284 TraceCheckUtils]: 86: Hoare quadruple {21894#true} {21962#(not (= 0 ~systemActive~0))} #361#return; {21962#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:08:28,915 INFO L290 TraceCheckUtils]: 87: Hoare triple {21962#(not (= 0 ~systemActive~0))} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret29#1 && __utac_acc__Specification2_spec__2_#t~ret29#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~8#1 := __utac_acc__Specification2_spec__2_#t~ret29#1;havoc __utac_acc__Specification2_spec__2_#t~ret29#1; {21962#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:08:28,915 INFO L290 TraceCheckUtils]: 88: Hoare triple {21962#(not (= 0 ~systemActive~0))} assume 0 != __utac_acc__Specification2_spec__2_~tmp~8#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~5#1;havoc isPumpRunning_~retValue_acc~5#1;isPumpRunning_~retValue_acc~5#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~5#1; {21962#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:08:28,916 INFO L290 TraceCheckUtils]: 89: Hoare triple {21962#(not (= 0 ~systemActive~0))} __utac_acc__Specification2_spec__2_#t~ret30#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret30#1 && __utac_acc__Specification2_spec__2_#t~ret30#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret30#1;havoc __utac_acc__Specification2_spec__2_#t~ret30#1; {21962#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:08:28,916 INFO L290 TraceCheckUtils]: 90: Hoare triple {21962#(not (= 0 ~systemActive~0))} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {21962#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:08:28,916 INFO L290 TraceCheckUtils]: 91: Hoare triple {21962#(not (= 0 ~systemActive~0))} assume !(0 != ~methAndRunningLastTime~0);~methAndRunningLastTime~0 := 1; {21962#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:08:28,916 INFO L290 TraceCheckUtils]: 92: Hoare triple {21962#(not (= 0 ~systemActive~0))} assume { :end_inline___utac_acc__Specification2_spec__2 } true; {21962#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:08:28,917 INFO L290 TraceCheckUtils]: 93: Hoare triple {21962#(not (= 0 ~systemActive~0))} assume true; {21962#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:08:28,917 INFO L284 TraceCheckUtils]: 94: Hoare quadruple {21962#(not (= 0 ~systemActive~0))} {21917#(= 0 ~systemActive~0)} #381#return; {21895#false} is VALID [2022-02-20 18:08:28,917 INFO L290 TraceCheckUtils]: 95: Hoare triple {21895#false} assume !false; {21895#false} is VALID [2022-02-20 18:08:28,917 INFO L290 TraceCheckUtils]: 96: Hoare triple {21895#false} assume test_~splverifierCounter~0#1 < 4; {21895#false} is VALID [2022-02-20 18:08:28,917 INFO L290 TraceCheckUtils]: 97: Hoare triple {21895#false} assume -2147483648 <= test_#t~nondet25#1 && test_#t~nondet25#1 <= 2147483647;test_~tmp~7#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {21895#false} is VALID [2022-02-20 18:08:28,917 INFO L290 TraceCheckUtils]: 98: Hoare triple {21895#false} assume !(0 != test_~tmp~7#1); {21895#false} is VALID [2022-02-20 18:08:28,917 INFO L290 TraceCheckUtils]: 99: Hoare triple {21895#false} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {21895#false} is VALID [2022-02-20 18:08:28,917 INFO L290 TraceCheckUtils]: 100: Hoare triple {21895#false} assume !(0 != test_~tmp___0~2#1); {21895#false} is VALID [2022-02-20 18:08:28,917 INFO L290 TraceCheckUtils]: 101: Hoare triple {21895#false} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {21895#false} is VALID [2022-02-20 18:08:28,917 INFO L290 TraceCheckUtils]: 102: Hoare triple {21895#false} assume 0 != test_~tmp___2~0#1; {21895#false} is VALID [2022-02-20 18:08:28,918 INFO L290 TraceCheckUtils]: 103: Hoare triple {21895#false} assume !(0 != ~__SELECTED_FEATURE_startCommand~0); {21895#false} is VALID [2022-02-20 18:08:28,918 INFO L272 TraceCheckUtils]: 104: Hoare triple {21895#false} call timeShift(); {21895#false} is VALID [2022-02-20 18:08:28,918 INFO L290 TraceCheckUtils]: 105: Hoare triple {21895#false} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {21895#false} is VALID [2022-02-20 18:08:28,918 INFO L290 TraceCheckUtils]: 106: Hoare triple {21895#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {21895#false} is VALID [2022-02-20 18:08:28,918 INFO L290 TraceCheckUtils]: 107: Hoare triple {21895#false} assume { :end_inline_lowerWaterLevel } true; {21895#false} is VALID [2022-02-20 18:08:28,918 INFO L290 TraceCheckUtils]: 108: Hoare triple {21895#false} assume !(0 != ~systemActive~0); {21895#false} is VALID [2022-02-20 18:08:28,918 INFO L290 TraceCheckUtils]: 109: Hoare triple {21895#false} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret29#1, __utac_acc__Specification2_spec__2_#t~ret30#1, __utac_acc__Specification2_spec__2_~tmp~8#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~8#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {21895#false} is VALID [2022-02-20 18:08:28,918 INFO L272 TraceCheckUtils]: 110: Hoare triple {21895#false} call __utac_acc__Specification2_spec__2_#t~ret29#1 := isMethaneLevelCritical(); {21894#true} is VALID [2022-02-20 18:08:28,918 INFO L290 TraceCheckUtils]: 111: Hoare triple {21894#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {21894#true} is VALID [2022-02-20 18:08:28,918 INFO L290 TraceCheckUtils]: 112: Hoare triple {21894#true} assume true; {21894#true} is VALID [2022-02-20 18:08:28,918 INFO L284 TraceCheckUtils]: 113: Hoare quadruple {21894#true} {21895#false} #361#return; {21895#false} is VALID [2022-02-20 18:08:28,918 INFO L290 TraceCheckUtils]: 114: Hoare triple {21895#false} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret29#1 && __utac_acc__Specification2_spec__2_#t~ret29#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~8#1 := __utac_acc__Specification2_spec__2_#t~ret29#1;havoc __utac_acc__Specification2_spec__2_#t~ret29#1; {21895#false} is VALID [2022-02-20 18:08:28,918 INFO L290 TraceCheckUtils]: 115: Hoare triple {21895#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~8#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~5#1;havoc isPumpRunning_~retValue_acc~5#1;isPumpRunning_~retValue_acc~5#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~5#1; {21895#false} is VALID [2022-02-20 18:08:28,918 INFO L290 TraceCheckUtils]: 116: Hoare triple {21895#false} __utac_acc__Specification2_spec__2_#t~ret30#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret30#1 && __utac_acc__Specification2_spec__2_#t~ret30#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret30#1;havoc __utac_acc__Specification2_spec__2_#t~ret30#1; {21895#false} is VALID [2022-02-20 18:08:28,918 INFO L290 TraceCheckUtils]: 117: Hoare triple {21895#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {21895#false} is VALID [2022-02-20 18:08:28,918 INFO L290 TraceCheckUtils]: 118: Hoare triple {21895#false} assume 0 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {21895#false} is VALID [2022-02-20 18:08:28,919 INFO L290 TraceCheckUtils]: 119: Hoare triple {21895#false} assume !false; {21895#false} is VALID [2022-02-20 18:08:28,919 INFO L134 CoverageAnalysis]: Checked inductivity of 66 backedges. 18 proven. 0 refuted. 0 times theorem prover too weak. 48 trivial. 0 not checked. [2022-02-20 18:08:28,919 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:08:28,919 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1829798009] [2022-02-20 18:08:28,919 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1829798009] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:08:28,919 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:08:28,919 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-02-20 18:08:28,919 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1542554648] [2022-02-20 18:08:28,920 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:08:28,920 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 11.571428571428571) internal successors, (81), 4 states have internal predecessors, (81), 4 states have call successors, (14), 5 states have call predecessors, (14), 2 states have return successors, (13), 3 states have call predecessors, (13), 4 states have call successors, (13) Word has length 120 [2022-02-20 18:08:28,920 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:08:28,921 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 7 states, 7 states have (on average 11.571428571428571) internal successors, (81), 4 states have internal predecessors, (81), 4 states have call successors, (14), 5 states have call predecessors, (14), 2 states have return successors, (13), 3 states have call predecessors, (13), 4 states have call successors, (13) [2022-02-20 18:08:28,983 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 108 edges. 108 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:28,983 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-02-20 18:08:28,983 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:08:28,983 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-02-20 18:08:28,983 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-02-20 18:08:28,984 INFO L87 Difference]: Start difference. First operand 1351 states and 1955 transitions. Second operand has 7 states, 7 states have (on average 11.571428571428571) internal successors, (81), 4 states have internal predecessors, (81), 4 states have call successors, (14), 5 states have call predecessors, (14), 2 states have return successors, (13), 3 states have call predecessors, (13), 4 states have call successors, (13) [2022-02-20 18:08:30,286 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:30,286 INFO L93 Difference]: Finished difference Result 2165 states and 3111 transitions. [2022-02-20 18:08:30,286 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-02-20 18:08:30,287 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 11.571428571428571) internal successors, (81), 4 states have internal predecessors, (81), 4 states have call successors, (14), 5 states have call predecessors, (14), 2 states have return successors, (13), 3 states have call predecessors, (13), 4 states have call successors, (13) Word has length 120 [2022-02-20 18:08:30,287 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:08:30,287 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 11.571428571428571) internal successors, (81), 4 states have internal predecessors, (81), 4 states have call successors, (14), 5 states have call predecessors, (14), 2 states have return successors, (13), 3 states have call predecessors, (13), 4 states have call successors, (13) [2022-02-20 18:08:30,290 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 449 transitions. [2022-02-20 18:08:30,290 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 11.571428571428571) internal successors, (81), 4 states have internal predecessors, (81), 4 states have call successors, (14), 5 states have call predecessors, (14), 2 states have return successors, (13), 3 states have call predecessors, (13), 4 states have call successors, (13) [2022-02-20 18:08:30,294 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 449 transitions. [2022-02-20 18:08:30,294 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 11 states and 449 transitions. [2022-02-20 18:08:30,601 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 449 edges. 449 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:30,635 INFO L225 Difference]: With dead ends: 2165 [2022-02-20 18:08:30,636 INFO L226 Difference]: Without dead ends: 837 [2022-02-20 18:08:30,639 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 41 GetRequests, 29 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 23 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=55, Invalid=127, Unknown=0, NotChecked=0, Total=182 [2022-02-20 18:08:30,639 INFO L933 BasicCegarLoop]: 196 mSDtfsCounter, 314 mSDsluCounter, 297 mSDsCounter, 0 mSdLazyCounter, 353 mSolverCounterSat, 126 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 329 SdHoareTripleChecker+Valid, 493 SdHoareTripleChecker+Invalid, 479 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 126 IncrementalHoareTripleChecker+Valid, 353 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-02-20 18:08:30,639 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [329 Valid, 493 Invalid, 479 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [126 Valid, 353 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-02-20 18:08:30,640 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 837 states. [2022-02-20 18:08:30,714 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 837 to 794. [2022-02-20 18:08:30,714 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:08:30,715 INFO L82 GeneralOperation]: Start isEquivalent. First operand 837 states. Second operand has 794 states, 582 states have (on average 1.2766323024054982) internal successors, (743), 645 states have internal predecessors, (743), 126 states have call successors, (126), 72 states have call predecessors, (126), 85 states have return successors, (247), 133 states have call predecessors, (247), 126 states have call successors, (247) [2022-02-20 18:08:30,716 INFO L74 IsIncluded]: Start isIncluded. First operand 837 states. Second operand has 794 states, 582 states have (on average 1.2766323024054982) internal successors, (743), 645 states have internal predecessors, (743), 126 states have call successors, (126), 72 states have call predecessors, (126), 85 states have return successors, (247), 133 states have call predecessors, (247), 126 states have call successors, (247) [2022-02-20 18:08:30,717 INFO L87 Difference]: Start difference. First operand 837 states. Second operand has 794 states, 582 states have (on average 1.2766323024054982) internal successors, (743), 645 states have internal predecessors, (743), 126 states have call successors, (126), 72 states have call predecessors, (126), 85 states have return successors, (247), 133 states have call predecessors, (247), 126 states have call successors, (247) [2022-02-20 18:08:30,744 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:30,744 INFO L93 Difference]: Finished difference Result 837 states and 1164 transitions. [2022-02-20 18:08:30,744 INFO L276 IsEmpty]: Start isEmpty. Operand 837 states and 1164 transitions. [2022-02-20 18:08:30,747 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:30,747 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:30,748 INFO L74 IsIncluded]: Start isIncluded. First operand has 794 states, 582 states have (on average 1.2766323024054982) internal successors, (743), 645 states have internal predecessors, (743), 126 states have call successors, (126), 72 states have call predecessors, (126), 85 states have return successors, (247), 133 states have call predecessors, (247), 126 states have call successors, (247) Second operand 837 states. [2022-02-20 18:08:30,749 INFO L87 Difference]: Start difference. First operand has 794 states, 582 states have (on average 1.2766323024054982) internal successors, (743), 645 states have internal predecessors, (743), 126 states have call successors, (126), 72 states have call predecessors, (126), 85 states have return successors, (247), 133 states have call predecessors, (247), 126 states have call successors, (247) Second operand 837 states. [2022-02-20 18:08:30,780 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:30,780 INFO L93 Difference]: Finished difference Result 837 states and 1164 transitions. [2022-02-20 18:08:30,780 INFO L276 IsEmpty]: Start isEmpty. Operand 837 states and 1164 transitions. [2022-02-20 18:08:30,782 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:30,783 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:30,783 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:08:30,783 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:08:30,784 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 794 states, 582 states have (on average 1.2766323024054982) internal successors, (743), 645 states have internal predecessors, (743), 126 states have call successors, (126), 72 states have call predecessors, (126), 85 states have return successors, (247), 133 states have call predecessors, (247), 126 states have call successors, (247) [2022-02-20 18:08:30,827 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 794 states to 794 states and 1116 transitions. [2022-02-20 18:08:30,828 INFO L78 Accepts]: Start accepts. Automaton has 794 states and 1116 transitions. Word has length 120 [2022-02-20 18:08:30,828 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:08:30,828 INFO L470 AbstractCegarLoop]: Abstraction has 794 states and 1116 transitions. [2022-02-20 18:08:30,828 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 11.571428571428571) internal successors, (81), 4 states have internal predecessors, (81), 4 states have call successors, (14), 5 states have call predecessors, (14), 2 states have return successors, (13), 3 states have call predecessors, (13), 4 states have call successors, (13) [2022-02-20 18:08:30,829 INFO L276 IsEmpty]: Start isEmpty. Operand 794 states and 1116 transitions. [2022-02-20 18:08:30,833 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 130 [2022-02-20 18:08:30,833 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:08:30,833 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:08:30,833 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-02-20 18:08:30,834 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:08:30,834 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:08:30,834 INFO L85 PathProgramCache]: Analyzing trace with hash -437136913, now seen corresponding path program 1 times [2022-02-20 18:08:30,834 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:08:30,834 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1167821906] [2022-02-20 18:08:30,835 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:08:30,835 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:08:30,860 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:30,877 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-02-20 18:08:30,878 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:30,880 INFO L290 TraceCheckUtils]: 0: Hoare triple {27930#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {27930#true} is VALID [2022-02-20 18:08:30,880 INFO L290 TraceCheckUtils]: 1: Hoare triple {27930#true} assume true; {27930#true} is VALID [2022-02-20 18:08:30,880 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {27930#true} {27930#true} #363#return; {27930#true} is VALID [2022-02-20 18:08:30,880 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:08:30,881 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:30,883 INFO L290 TraceCheckUtils]: 0: Hoare triple {27930#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {27930#true} is VALID [2022-02-20 18:08:30,883 INFO L290 TraceCheckUtils]: 1: Hoare triple {27930#true} assume true; {27930#true} is VALID [2022-02-20 18:08:30,883 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {27930#true} {27930#true} #365#return; {27930#true} is VALID [2022-02-20 18:08:30,883 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-02-20 18:08:30,884 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:30,886 INFO L290 TraceCheckUtils]: 0: Hoare triple {27930#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {27930#true} is VALID [2022-02-20 18:08:30,886 INFO L290 TraceCheckUtils]: 1: Hoare triple {27930#true} assume true; {27930#true} is VALID [2022-02-20 18:08:30,886 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {27930#true} {27930#true} #367#return; {27930#true} is VALID [2022-02-20 18:08:30,886 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:08:30,887 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:30,890 INFO L290 TraceCheckUtils]: 0: Hoare triple {27930#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {27930#true} is VALID [2022-02-20 18:08:30,891 INFO L290 TraceCheckUtils]: 1: Hoare triple {27930#true} assume true; {27930#true} is VALID [2022-02-20 18:08:30,891 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {27930#true} {27930#true} #369#return; {27930#true} is VALID [2022-02-20 18:08:30,891 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-02-20 18:08:30,892 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:30,894 INFO L290 TraceCheckUtils]: 0: Hoare triple {27930#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {27930#true} is VALID [2022-02-20 18:08:30,894 INFO L290 TraceCheckUtils]: 1: Hoare triple {27930#true} assume true; {27930#true} is VALID [2022-02-20 18:08:30,894 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {27930#true} {27930#true} #371#return; {27930#true} is VALID [2022-02-20 18:08:30,894 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-02-20 18:08:30,895 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:30,897 INFO L290 TraceCheckUtils]: 0: Hoare triple {27930#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {27930#true} is VALID [2022-02-20 18:08:30,897 INFO L290 TraceCheckUtils]: 1: Hoare triple {27930#true} assume true; {27930#true} is VALID [2022-02-20 18:08:30,897 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {27930#true} {27930#true} #373#return; {27930#true} is VALID [2022-02-20 18:08:30,902 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2022-02-20 18:08:30,903 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:30,905 INFO L290 TraceCheckUtils]: 0: Hoare triple {28006#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {27930#true} is VALID [2022-02-20 18:08:30,905 INFO L290 TraceCheckUtils]: 1: Hoare triple {27930#true} assume true; {27930#true} is VALID [2022-02-20 18:08:30,905 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {27930#true} {27930#true} #375#return; {27930#true} is VALID [2022-02-20 18:08:30,912 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2022-02-20 18:08:30,917 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:30,926 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-02-20 18:08:30,929 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:30,933 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:08:30,935 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:30,940 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-02-20 18:08:30,941 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:30,942 INFO L290 TraceCheckUtils]: 0: Hoare triple {28032#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {27930#true} is VALID [2022-02-20 18:08:30,942 INFO L290 TraceCheckUtils]: 1: Hoare triple {27930#true} assume true; {27930#true} is VALID [2022-02-20 18:08:30,943 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {27930#true} {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} #339#return; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:30,943 INFO L290 TraceCheckUtils]: 0: Hoare triple {28032#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret9#1, processEnvironment__role__highWaterSensor_~tmp~0#1;havoc processEnvironment__role__highWaterSensor_~tmp~0#1; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:30,943 INFO L290 TraceCheckUtils]: 1: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret22#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:30,944 INFO L290 TraceCheckUtils]: 2: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:30,944 INFO L290 TraceCheckUtils]: 3: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} isHighWaterLevel_#t~ret22#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret22#1 && isHighWaterLevel_#t~ret22#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret22#1;havoc isHighWaterLevel_#t~ret22#1; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:30,944 INFO L290 TraceCheckUtils]: 4: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:30,944 INFO L290 TraceCheckUtils]: 5: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:30,945 INFO L290 TraceCheckUtils]: 6: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} processEnvironment__role__highWaterSensor_#t~ret9#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret9#1 && processEnvironment__role__highWaterSensor_#t~ret9#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~0#1 := processEnvironment__role__highWaterSensor_#t~ret9#1;havoc processEnvironment__role__highWaterSensor_#t~ret9#1; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:30,945 INFO L290 TraceCheckUtils]: 7: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume 0 != processEnvironment__role__highWaterSensor_~tmp~0#1;assume { :begin_inline_activatePump } true; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:30,945 INFO L290 TraceCheckUtils]: 8: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:30,946 INFO L272 TraceCheckUtils]: 9: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} call activatePump__before__methaneQuery(); {28032#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:30,946 INFO L290 TraceCheckUtils]: 10: Hoare triple {28032#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {27930#true} is VALID [2022-02-20 18:08:30,946 INFO L290 TraceCheckUtils]: 11: Hoare triple {27930#true} assume true; {27930#true} is VALID [2022-02-20 18:08:30,946 INFO L284 TraceCheckUtils]: 12: Hoare quadruple {27930#true} {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} #339#return; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:30,947 INFO L290 TraceCheckUtils]: 13: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume { :end_inline_activatePump } true; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:30,947 INFO L290 TraceCheckUtils]: 14: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:30,947 INFO L290 TraceCheckUtils]: 15: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume true; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:30,947 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} {27930#true} #391#return; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:30,948 INFO L290 TraceCheckUtils]: 0: Hoare triple {28032#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {27930#true} is VALID [2022-02-20 18:08:30,948 INFO L272 TraceCheckUtils]: 1: Hoare triple {27930#true} call processEnvironment__before__lowWaterSensor(); {28032#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:30,948 INFO L290 TraceCheckUtils]: 2: Hoare triple {28032#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret9#1, processEnvironment__role__highWaterSensor_~tmp~0#1;havoc processEnvironment__role__highWaterSensor_~tmp~0#1; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:30,949 INFO L290 TraceCheckUtils]: 3: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret22#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:30,949 INFO L290 TraceCheckUtils]: 4: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:30,949 INFO L290 TraceCheckUtils]: 5: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} isHighWaterLevel_#t~ret22#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret22#1 && isHighWaterLevel_#t~ret22#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret22#1;havoc isHighWaterLevel_#t~ret22#1; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:30,949 INFO L290 TraceCheckUtils]: 6: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:30,950 INFO L290 TraceCheckUtils]: 7: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:30,950 INFO L290 TraceCheckUtils]: 8: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} processEnvironment__role__highWaterSensor_#t~ret9#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret9#1 && processEnvironment__role__highWaterSensor_#t~ret9#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~0#1 := processEnvironment__role__highWaterSensor_#t~ret9#1;havoc processEnvironment__role__highWaterSensor_#t~ret9#1; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:30,950 INFO L290 TraceCheckUtils]: 9: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume 0 != processEnvironment__role__highWaterSensor_~tmp~0#1;assume { :begin_inline_activatePump } true; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:30,951 INFO L290 TraceCheckUtils]: 10: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:30,951 INFO L272 TraceCheckUtils]: 11: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} call activatePump__before__methaneQuery(); {28032#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:30,951 INFO L290 TraceCheckUtils]: 12: Hoare triple {28032#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {27930#true} is VALID [2022-02-20 18:08:30,951 INFO L290 TraceCheckUtils]: 13: Hoare triple {27930#true} assume true; {27930#true} is VALID [2022-02-20 18:08:30,952 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {27930#true} {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} #339#return; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:30,952 INFO L290 TraceCheckUtils]: 15: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume { :end_inline_activatePump } true; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:30,952 INFO L290 TraceCheckUtils]: 16: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:30,952 INFO L290 TraceCheckUtils]: 17: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume true; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:30,953 INFO L284 TraceCheckUtils]: 18: Hoare quadruple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} {27930#true} #391#return; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:30,953 INFO L290 TraceCheckUtils]: 19: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume true; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:30,953 INFO L284 TraceCheckUtils]: 20: Hoare quadruple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} {27930#true} #359#return; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:30,953 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-02-20 18:08:30,954 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:30,957 INFO L290 TraceCheckUtils]: 0: Hoare triple {27930#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {27930#true} is VALID [2022-02-20 18:08:30,958 INFO L290 TraceCheckUtils]: 1: Hoare triple {27930#true} assume true; {27930#true} is VALID [2022-02-20 18:08:30,958 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {27930#true} {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} #361#return; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:30,958 INFO L290 TraceCheckUtils]: 0: Hoare triple {28007#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0) (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))} assume !(0 != ~pumpRunning~0); {27930#true} is VALID [2022-02-20 18:08:30,958 INFO L290 TraceCheckUtils]: 1: Hoare triple {27930#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {27930#true} is VALID [2022-02-20 18:08:30,959 INFO L290 TraceCheckUtils]: 2: Hoare triple {27930#true} assume !(0 != ~__SELECTED_FEATURE_methaneAlarm~0); {27930#true} is VALID [2022-02-20 18:08:30,959 INFO L272 TraceCheckUtils]: 3: Hoare triple {27930#true} call processEnvironment__before__methaneAlarm(); {28032#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:30,959 INFO L290 TraceCheckUtils]: 4: Hoare triple {28032#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {27930#true} is VALID [2022-02-20 18:08:30,959 INFO L272 TraceCheckUtils]: 5: Hoare triple {27930#true} call processEnvironment__before__lowWaterSensor(); {28032#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:30,960 INFO L290 TraceCheckUtils]: 6: Hoare triple {28032#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret9#1, processEnvironment__role__highWaterSensor_~tmp~0#1;havoc processEnvironment__role__highWaterSensor_~tmp~0#1; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:30,960 INFO L290 TraceCheckUtils]: 7: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret22#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:30,960 INFO L290 TraceCheckUtils]: 8: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:30,960 INFO L290 TraceCheckUtils]: 9: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} isHighWaterLevel_#t~ret22#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret22#1 && isHighWaterLevel_#t~ret22#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret22#1;havoc isHighWaterLevel_#t~ret22#1; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:30,961 INFO L290 TraceCheckUtils]: 10: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:30,961 INFO L290 TraceCheckUtils]: 11: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:30,961 INFO L290 TraceCheckUtils]: 12: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} processEnvironment__role__highWaterSensor_#t~ret9#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret9#1 && processEnvironment__role__highWaterSensor_#t~ret9#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~0#1 := processEnvironment__role__highWaterSensor_#t~ret9#1;havoc processEnvironment__role__highWaterSensor_#t~ret9#1; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:30,962 INFO L290 TraceCheckUtils]: 13: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume 0 != processEnvironment__role__highWaterSensor_~tmp~0#1;assume { :begin_inline_activatePump } true; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:30,962 INFO L290 TraceCheckUtils]: 14: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:30,962 INFO L272 TraceCheckUtils]: 15: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} call activatePump__before__methaneQuery(); {28032#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:30,962 INFO L290 TraceCheckUtils]: 16: Hoare triple {28032#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {27930#true} is VALID [2022-02-20 18:08:30,963 INFO L290 TraceCheckUtils]: 17: Hoare triple {27930#true} assume true; {27930#true} is VALID [2022-02-20 18:08:30,963 INFO L284 TraceCheckUtils]: 18: Hoare quadruple {27930#true} {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} #339#return; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:30,963 INFO L290 TraceCheckUtils]: 19: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume { :end_inline_activatePump } true; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:30,963 INFO L290 TraceCheckUtils]: 20: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:30,964 INFO L290 TraceCheckUtils]: 21: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume true; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:30,964 INFO L284 TraceCheckUtils]: 22: Hoare quadruple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} {27930#true} #391#return; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:30,964 INFO L290 TraceCheckUtils]: 23: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume true; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:30,965 INFO L284 TraceCheckUtils]: 24: Hoare quadruple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} {27930#true} #359#return; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:30,965 INFO L290 TraceCheckUtils]: 25: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume { :end_inline_processEnvironment } true; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:30,965 INFO L290 TraceCheckUtils]: 26: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret29#1, __utac_acc__Specification2_spec__2_#t~ret30#1, __utac_acc__Specification2_spec__2_~tmp~8#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~8#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:30,965 INFO L272 TraceCheckUtils]: 27: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} call __utac_acc__Specification2_spec__2_#t~ret29#1 := isMethaneLevelCritical(); {27930#true} is VALID [2022-02-20 18:08:30,965 INFO L290 TraceCheckUtils]: 28: Hoare triple {27930#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {27930#true} is VALID [2022-02-20 18:08:30,965 INFO L290 TraceCheckUtils]: 29: Hoare triple {27930#true} assume true; {27930#true} is VALID [2022-02-20 18:08:30,966 INFO L284 TraceCheckUtils]: 30: Hoare quadruple {27930#true} {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} #361#return; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:30,966 INFO L290 TraceCheckUtils]: 31: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret29#1 && __utac_acc__Specification2_spec__2_#t~ret29#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~8#1 := __utac_acc__Specification2_spec__2_#t~ret29#1;havoc __utac_acc__Specification2_spec__2_#t~ret29#1; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:30,966 INFO L290 TraceCheckUtils]: 32: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume 0 != __utac_acc__Specification2_spec__2_~tmp~8#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~5#1;havoc isPumpRunning_~retValue_acc~5#1;isPumpRunning_~retValue_acc~5#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~5#1; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:30,967 INFO L290 TraceCheckUtils]: 33: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} __utac_acc__Specification2_spec__2_#t~ret30#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret30#1 && __utac_acc__Specification2_spec__2_#t~ret30#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret30#1;havoc __utac_acc__Specification2_spec__2_#t~ret30#1; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:30,967 INFO L290 TraceCheckUtils]: 34: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:30,967 INFO L290 TraceCheckUtils]: 35: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != ~methAndRunningLastTime~0);~methAndRunningLastTime~0 := 1; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:30,967 INFO L290 TraceCheckUtils]: 36: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume { :end_inline___utac_acc__Specification2_spec__2 } true; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:30,968 INFO L290 TraceCheckUtils]: 37: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume true; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:30,968 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} {27930#true} #381#return; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:30,968 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 106 [2022-02-20 18:08:30,969 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:30,990 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:08:30,991 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:30,994 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:08:30,995 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:30,996 INFO L290 TraceCheckUtils]: 0: Hoare triple {27930#true} assume true; {27930#true} is VALID [2022-02-20 18:08:30,996 INFO L284 TraceCheckUtils]: 1: Hoare quadruple {27930#true} {28059#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} #345#return; {28059#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} is VALID [2022-02-20 18:08:30,997 INFO L290 TraceCheckUtils]: 0: Hoare triple {28032#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_highWaterSensor~0); {28059#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} is VALID [2022-02-20 18:08:30,997 INFO L272 TraceCheckUtils]: 1: Hoare triple {28059#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} call processEnvironment__before__highWaterSensor(); {27930#true} is VALID [2022-02-20 18:08:30,997 INFO L290 TraceCheckUtils]: 2: Hoare triple {27930#true} assume true; {27930#true} is VALID [2022-02-20 18:08:30,997 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {27930#true} {28059#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} #345#return; {28059#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} is VALID [2022-02-20 18:08:30,998 INFO L290 TraceCheckUtils]: 4: Hoare triple {28059#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} assume true; {28059#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} is VALID [2022-02-20 18:08:30,998 INFO L284 TraceCheckUtils]: 5: Hoare quadruple {28059#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} {27930#true} #391#return; {28059#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} is VALID [2022-02-20 18:08:30,998 INFO L290 TraceCheckUtils]: 0: Hoare triple {28032#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {27930#true} is VALID [2022-02-20 18:08:30,998 INFO L272 TraceCheckUtils]: 1: Hoare triple {27930#true} call processEnvironment__before__lowWaterSensor(); {28032#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:30,999 INFO L290 TraceCheckUtils]: 2: Hoare triple {28032#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_highWaterSensor~0); {28059#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} is VALID [2022-02-20 18:08:30,999 INFO L272 TraceCheckUtils]: 3: Hoare triple {28059#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} call processEnvironment__before__highWaterSensor(); {27930#true} is VALID [2022-02-20 18:08:30,999 INFO L290 TraceCheckUtils]: 4: Hoare triple {27930#true} assume true; {27930#true} is VALID [2022-02-20 18:08:30,999 INFO L284 TraceCheckUtils]: 5: Hoare quadruple {27930#true} {28059#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} #345#return; {28059#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} is VALID [2022-02-20 18:08:30,999 INFO L290 TraceCheckUtils]: 6: Hoare triple {28059#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} assume true; {28059#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} is VALID [2022-02-20 18:08:31,000 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {28059#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} {27930#true} #391#return; {28059#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} is VALID [2022-02-20 18:08:31,000 INFO L290 TraceCheckUtils]: 8: Hoare triple {28059#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} assume true; {28059#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} is VALID [2022-02-20 18:08:31,000 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {28059#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} #359#return; {27931#false} is VALID [2022-02-20 18:08:31,001 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 119 [2022-02-20 18:08:31,001 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:31,003 INFO L290 TraceCheckUtils]: 0: Hoare triple {27930#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {27930#true} is VALID [2022-02-20 18:08:31,003 INFO L290 TraceCheckUtils]: 1: Hoare triple {27930#true} assume true; {27930#true} is VALID [2022-02-20 18:08:31,003 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {27930#true} {27931#false} #361#return; {27931#false} is VALID [2022-02-20 18:08:31,003 INFO L290 TraceCheckUtils]: 0: Hoare triple {27930#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(38, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(13, 9);call #Ultimate.allocInit(3, 10);call write~init~int(79, 10, 0, 1);call write~init~int(110, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(4, 11);call write~init~int(79, 11, 0, 1);call write~init~int(102, 11, 1, 1);call write~init~int(102, 11, 2, 1);call write~init~int(0, 11, 3, 1);call #Ultimate.allocInit(7, 12);call write~init~int(44, 12, 0, 1);call write~init~int(80, 12, 1, 1);call write~init~int(117, 12, 2, 1);call write~init~int(109, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(3, 13);call write~init~int(79, 13, 0, 1);call write~init~int(110, 13, 1, 1);call write~init~int(0, 13, 2, 1);call #Ultimate.allocInit(4, 14);call write~init~int(79, 14, 0, 1);call write~init~int(102, 14, 1, 1);call write~init~int(102, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(3, 15);call write~init~int(41, 15, 0, 1);call write~init~int(32, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(10, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~__SELECTED_FEATURE_base~0 := 0;~__SELECTED_FEATURE_highWaterSensor~0 := 0;~__SELECTED_FEATURE_lowWaterSensor~0 := 0;~__SELECTED_FEATURE_methaneQuery~0 := 0;~__SELECTED_FEATURE_methaneAlarm~0 := 0;~__SELECTED_FEATURE_stopCommand~0 := 0;~__SELECTED_FEATURE_startCommand~0 := 0;~__GUIDSL_ROOT_PRODUCTION~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4;~methAndRunningLastTime~0 := 0;~head~0.base, ~head~0.offset := 0, 0; {27930#true} is VALID [2022-02-20 18:08:31,003 INFO L290 TraceCheckUtils]: 1: Hoare triple {27930#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret24#1, main_~retValue_acc~8#1, main_~tmp~6#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~6#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1; {27930#true} is VALID [2022-02-20 18:08:31,004 INFO L290 TraceCheckUtils]: 2: Hoare triple {27930#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret55#1, select_features_#t~ret56#1, select_features_#t~ret57#1, select_features_#t~ret58#1, select_features_#t~ret59#1, select_features_#t~ret60#1;~__SELECTED_FEATURE_base~0 := 1; {27930#true} is VALID [2022-02-20 18:08:31,004 INFO L272 TraceCheckUtils]: 3: Hoare triple {27930#true} call select_features_#t~ret55#1 := select_one(); {27930#true} is VALID [2022-02-20 18:08:31,004 INFO L290 TraceCheckUtils]: 4: Hoare triple {27930#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {27930#true} is VALID [2022-02-20 18:08:31,004 INFO L290 TraceCheckUtils]: 5: Hoare triple {27930#true} assume true; {27930#true} is VALID [2022-02-20 18:08:31,004 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {27930#true} {27930#true} #363#return; {27930#true} is VALID [2022-02-20 18:08:31,004 INFO L290 TraceCheckUtils]: 7: Hoare triple {27930#true} assume -2147483648 <= select_features_#t~ret55#1 && select_features_#t~ret55#1 <= 2147483647;~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret55#1;havoc select_features_#t~ret55#1; {27930#true} is VALID [2022-02-20 18:08:31,004 INFO L272 TraceCheckUtils]: 8: Hoare triple {27930#true} call select_features_#t~ret56#1 := select_one(); {27930#true} is VALID [2022-02-20 18:08:31,004 INFO L290 TraceCheckUtils]: 9: Hoare triple {27930#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {27930#true} is VALID [2022-02-20 18:08:31,005 INFO L290 TraceCheckUtils]: 10: Hoare triple {27930#true} assume true; {27930#true} is VALID [2022-02-20 18:08:31,005 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {27930#true} {27930#true} #365#return; {27930#true} is VALID [2022-02-20 18:08:31,005 INFO L290 TraceCheckUtils]: 12: Hoare triple {27930#true} assume -2147483648 <= select_features_#t~ret56#1 && select_features_#t~ret56#1 <= 2147483647;~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret56#1;havoc select_features_#t~ret56#1; {27930#true} is VALID [2022-02-20 18:08:31,005 INFO L272 TraceCheckUtils]: 13: Hoare triple {27930#true} call select_features_#t~ret57#1 := select_one(); {27930#true} is VALID [2022-02-20 18:08:31,005 INFO L290 TraceCheckUtils]: 14: Hoare triple {27930#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {27930#true} is VALID [2022-02-20 18:08:31,005 INFO L290 TraceCheckUtils]: 15: Hoare triple {27930#true} assume true; {27930#true} is VALID [2022-02-20 18:08:31,005 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {27930#true} {27930#true} #367#return; {27930#true} is VALID [2022-02-20 18:08:31,005 INFO L290 TraceCheckUtils]: 17: Hoare triple {27930#true} assume -2147483648 <= select_features_#t~ret57#1 && select_features_#t~ret57#1 <= 2147483647;~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret57#1;havoc select_features_#t~ret57#1; {27930#true} is VALID [2022-02-20 18:08:31,005 INFO L272 TraceCheckUtils]: 18: Hoare triple {27930#true} call select_features_#t~ret58#1 := select_one(); {27930#true} is VALID [2022-02-20 18:08:31,006 INFO L290 TraceCheckUtils]: 19: Hoare triple {27930#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {27930#true} is VALID [2022-02-20 18:08:31,006 INFO L290 TraceCheckUtils]: 20: Hoare triple {27930#true} assume true; {27930#true} is VALID [2022-02-20 18:08:31,006 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {27930#true} {27930#true} #369#return; {27930#true} is VALID [2022-02-20 18:08:31,006 INFO L290 TraceCheckUtils]: 22: Hoare triple {27930#true} assume -2147483648 <= select_features_#t~ret58#1 && select_features_#t~ret58#1 <= 2147483647;~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret58#1;havoc select_features_#t~ret58#1; {27930#true} is VALID [2022-02-20 18:08:31,006 INFO L272 TraceCheckUtils]: 23: Hoare triple {27930#true} call select_features_#t~ret59#1 := select_one(); {27930#true} is VALID [2022-02-20 18:08:31,006 INFO L290 TraceCheckUtils]: 24: Hoare triple {27930#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {27930#true} is VALID [2022-02-20 18:08:31,006 INFO L290 TraceCheckUtils]: 25: Hoare triple {27930#true} assume true; {27930#true} is VALID [2022-02-20 18:08:31,006 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {27930#true} {27930#true} #371#return; {27930#true} is VALID [2022-02-20 18:08:31,007 INFO L290 TraceCheckUtils]: 27: Hoare triple {27930#true} assume -2147483648 <= select_features_#t~ret59#1 && select_features_#t~ret59#1 <= 2147483647;~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret59#1;havoc select_features_#t~ret59#1; {27930#true} is VALID [2022-02-20 18:08:31,007 INFO L272 TraceCheckUtils]: 28: Hoare triple {27930#true} call select_features_#t~ret60#1 := select_one(); {27930#true} is VALID [2022-02-20 18:08:31,007 INFO L290 TraceCheckUtils]: 29: Hoare triple {27930#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {27930#true} is VALID [2022-02-20 18:08:31,007 INFO L290 TraceCheckUtils]: 30: Hoare triple {27930#true} assume true; {27930#true} is VALID [2022-02-20 18:08:31,007 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {27930#true} {27930#true} #373#return; {27930#true} is VALID [2022-02-20 18:08:31,007 INFO L290 TraceCheckUtils]: 32: Hoare triple {27930#true} assume -2147483648 <= select_features_#t~ret60#1 && select_features_#t~ret60#1 <= 2147483647;~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret60#1;havoc select_features_#t~ret60#1; {27930#true} is VALID [2022-02-20 18:08:31,007 INFO L290 TraceCheckUtils]: 33: Hoare triple {27930#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~13#1;havoc valid_product_~retValue_acc~13#1;valid_product_~retValue_acc~13#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~13#1; {27930#true} is VALID [2022-02-20 18:08:31,007 INFO L290 TraceCheckUtils]: 34: Hoare triple {27930#true} main_#t~ret24#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret24#1 && main_#t~ret24#1 <= 2147483647;main_~tmp~6#1 := main_#t~ret24#1;havoc main_#t~ret24#1; {27930#true} is VALID [2022-02-20 18:08:31,008 INFO L290 TraceCheckUtils]: 35: Hoare triple {27930#true} assume 0 != main_~tmp~6#1;assume { :begin_inline_setup } true; {27930#true} is VALID [2022-02-20 18:08:31,008 INFO L290 TraceCheckUtils]: 36: Hoare triple {27930#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0; {27930#true} is VALID [2022-02-20 18:08:31,008 INFO L290 TraceCheckUtils]: 37: Hoare triple {27930#true} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet25#1, test_#t~nondet26#1, test_#t~nondet27#1, test_#t~nondet28#1, test_~splverifierCounter~0#1, test_~tmp~7#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~7#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {27930#true} is VALID [2022-02-20 18:08:31,008 INFO L290 TraceCheckUtils]: 38: Hoare triple {27930#true} assume !false; {27930#true} is VALID [2022-02-20 18:08:31,008 INFO L290 TraceCheckUtils]: 39: Hoare triple {27930#true} assume test_~splverifierCounter~0#1 < 4; {27930#true} is VALID [2022-02-20 18:08:31,008 INFO L290 TraceCheckUtils]: 40: Hoare triple {27930#true} assume -2147483648 <= test_#t~nondet25#1 && test_#t~nondet25#1 <= 2147483647;test_~tmp~7#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {27930#true} is VALID [2022-02-20 18:08:31,008 INFO L290 TraceCheckUtils]: 41: Hoare triple {27930#true} assume 0 != test_~tmp~7#1; {27930#true} is VALID [2022-02-20 18:08:31,009 INFO L272 TraceCheckUtils]: 42: Hoare triple {27930#true} call waterRise(); {28006#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:08:31,009 INFO L290 TraceCheckUtils]: 43: Hoare triple {28006#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {27930#true} is VALID [2022-02-20 18:08:31,009 INFO L290 TraceCheckUtils]: 44: Hoare triple {27930#true} assume true; {27930#true} is VALID [2022-02-20 18:08:31,009 INFO L284 TraceCheckUtils]: 45: Hoare quadruple {27930#true} {27930#true} #375#return; {27930#true} is VALID [2022-02-20 18:08:31,009 INFO L290 TraceCheckUtils]: 46: Hoare triple {27930#true} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {27930#true} is VALID [2022-02-20 18:08:31,009 INFO L290 TraceCheckUtils]: 47: Hoare triple {27930#true} assume !(0 != test_~tmp___0~2#1); {27930#true} is VALID [2022-02-20 18:08:31,010 INFO L290 TraceCheckUtils]: 48: Hoare triple {27930#true} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {27930#true} is VALID [2022-02-20 18:08:31,010 INFO L290 TraceCheckUtils]: 49: Hoare triple {27930#true} assume 0 != test_~tmp___2~0#1; {27930#true} is VALID [2022-02-20 18:08:31,010 INFO L290 TraceCheckUtils]: 50: Hoare triple {27930#true} assume !(0 != ~__SELECTED_FEATURE_startCommand~0); {27930#true} is VALID [2022-02-20 18:08:31,010 INFO L272 TraceCheckUtils]: 51: Hoare triple {27930#true} call timeShift(); {28007#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0) (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))} is VALID [2022-02-20 18:08:31,010 INFO L290 TraceCheckUtils]: 52: Hoare triple {28007#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0) (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))} assume !(0 != ~pumpRunning~0); {27930#true} is VALID [2022-02-20 18:08:31,010 INFO L290 TraceCheckUtils]: 53: Hoare triple {27930#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {27930#true} is VALID [2022-02-20 18:08:31,011 INFO L290 TraceCheckUtils]: 54: Hoare triple {27930#true} assume !(0 != ~__SELECTED_FEATURE_methaneAlarm~0); {27930#true} is VALID [2022-02-20 18:08:31,011 INFO L272 TraceCheckUtils]: 55: Hoare triple {27930#true} call processEnvironment__before__methaneAlarm(); {28032#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:31,011 INFO L290 TraceCheckUtils]: 56: Hoare triple {28032#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {27930#true} is VALID [2022-02-20 18:08:31,011 INFO L272 TraceCheckUtils]: 57: Hoare triple {27930#true} call processEnvironment__before__lowWaterSensor(); {28032#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:31,012 INFO L290 TraceCheckUtils]: 58: Hoare triple {28032#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret9#1, processEnvironment__role__highWaterSensor_~tmp~0#1;havoc processEnvironment__role__highWaterSensor_~tmp~0#1; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,012 INFO L290 TraceCheckUtils]: 59: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret22#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,012 INFO L290 TraceCheckUtils]: 60: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,012 INFO L290 TraceCheckUtils]: 61: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} isHighWaterLevel_#t~ret22#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret22#1 && isHighWaterLevel_#t~ret22#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret22#1;havoc isHighWaterLevel_#t~ret22#1; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,013 INFO L290 TraceCheckUtils]: 62: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,013 INFO L290 TraceCheckUtils]: 63: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,013 INFO L290 TraceCheckUtils]: 64: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} processEnvironment__role__highWaterSensor_#t~ret9#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret9#1 && processEnvironment__role__highWaterSensor_#t~ret9#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~0#1 := processEnvironment__role__highWaterSensor_#t~ret9#1;havoc processEnvironment__role__highWaterSensor_#t~ret9#1; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,014 INFO L290 TraceCheckUtils]: 65: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume 0 != processEnvironment__role__highWaterSensor_~tmp~0#1;assume { :begin_inline_activatePump } true; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,014 INFO L290 TraceCheckUtils]: 66: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,014 INFO L272 TraceCheckUtils]: 67: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} call activatePump__before__methaneQuery(); {28032#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:31,014 INFO L290 TraceCheckUtils]: 68: Hoare triple {28032#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {27930#true} is VALID [2022-02-20 18:08:31,014 INFO L290 TraceCheckUtils]: 69: Hoare triple {27930#true} assume true; {27930#true} is VALID [2022-02-20 18:08:31,015 INFO L284 TraceCheckUtils]: 70: Hoare quadruple {27930#true} {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} #339#return; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,015 INFO L290 TraceCheckUtils]: 71: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume { :end_inline_activatePump } true; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,015 INFO L290 TraceCheckUtils]: 72: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,016 INFO L290 TraceCheckUtils]: 73: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume true; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,016 INFO L284 TraceCheckUtils]: 74: Hoare quadruple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} {27930#true} #391#return; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,016 INFO L290 TraceCheckUtils]: 75: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume true; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,016 INFO L284 TraceCheckUtils]: 76: Hoare quadruple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} {27930#true} #359#return; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,017 INFO L290 TraceCheckUtils]: 77: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume { :end_inline_processEnvironment } true; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,017 INFO L290 TraceCheckUtils]: 78: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret29#1, __utac_acc__Specification2_spec__2_#t~ret30#1, __utac_acc__Specification2_spec__2_~tmp~8#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~8#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,017 INFO L272 TraceCheckUtils]: 79: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} call __utac_acc__Specification2_spec__2_#t~ret29#1 := isMethaneLevelCritical(); {27930#true} is VALID [2022-02-20 18:08:31,017 INFO L290 TraceCheckUtils]: 80: Hoare triple {27930#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {27930#true} is VALID [2022-02-20 18:08:31,017 INFO L290 TraceCheckUtils]: 81: Hoare triple {27930#true} assume true; {27930#true} is VALID [2022-02-20 18:08:31,018 INFO L284 TraceCheckUtils]: 82: Hoare quadruple {27930#true} {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} #361#return; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,018 INFO L290 TraceCheckUtils]: 83: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret29#1 && __utac_acc__Specification2_spec__2_#t~ret29#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~8#1 := __utac_acc__Specification2_spec__2_#t~ret29#1;havoc __utac_acc__Specification2_spec__2_#t~ret29#1; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,018 INFO L290 TraceCheckUtils]: 84: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume 0 != __utac_acc__Specification2_spec__2_~tmp~8#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~5#1;havoc isPumpRunning_~retValue_acc~5#1;isPumpRunning_~retValue_acc~5#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~5#1; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,019 INFO L290 TraceCheckUtils]: 85: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} __utac_acc__Specification2_spec__2_#t~ret30#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret30#1 && __utac_acc__Specification2_spec__2_#t~ret30#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret30#1;havoc __utac_acc__Specification2_spec__2_#t~ret30#1; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,019 INFO L290 TraceCheckUtils]: 86: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,019 INFO L290 TraceCheckUtils]: 87: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != ~methAndRunningLastTime~0);~methAndRunningLastTime~0 := 1; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,019 INFO L290 TraceCheckUtils]: 88: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume { :end_inline___utac_acc__Specification2_spec__2 } true; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,020 INFO L290 TraceCheckUtils]: 89: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume true; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,020 INFO L284 TraceCheckUtils]: 90: Hoare quadruple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} {27930#true} #381#return; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,020 INFO L290 TraceCheckUtils]: 91: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !false; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,020 INFO L290 TraceCheckUtils]: 92: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume test_~splverifierCounter~0#1 < 4; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,021 INFO L290 TraceCheckUtils]: 93: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume -2147483648 <= test_#t~nondet25#1 && test_#t~nondet25#1 <= 2147483647;test_~tmp~7#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,021 INFO L290 TraceCheckUtils]: 94: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != test_~tmp~7#1); {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,021 INFO L290 TraceCheckUtils]: 95: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,022 INFO L290 TraceCheckUtils]: 96: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != test_~tmp___0~2#1); {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,022 INFO L290 TraceCheckUtils]: 97: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,022 INFO L290 TraceCheckUtils]: 98: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume 0 != test_~tmp___2~0#1; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,022 INFO L290 TraceCheckUtils]: 99: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != ~__SELECTED_FEATURE_startCommand~0); {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,023 INFO L272 TraceCheckUtils]: 100: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} call timeShift(); {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,023 INFO L290 TraceCheckUtils]: 101: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,023 INFO L290 TraceCheckUtils]: 102: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,023 INFO L290 TraceCheckUtils]: 103: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume { :end_inline_lowerWaterLevel } true; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,024 INFO L290 TraceCheckUtils]: 104: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,024 INFO L290 TraceCheckUtils]: 105: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != ~__SELECTED_FEATURE_methaneAlarm~0); {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,024 INFO L272 TraceCheckUtils]: 106: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} call processEnvironment__before__methaneAlarm(); {28032#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:31,024 INFO L290 TraceCheckUtils]: 107: Hoare triple {28032#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {27930#true} is VALID [2022-02-20 18:08:31,025 INFO L272 TraceCheckUtils]: 108: Hoare triple {27930#true} call processEnvironment__before__lowWaterSensor(); {28032#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:31,025 INFO L290 TraceCheckUtils]: 109: Hoare triple {28032#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_highWaterSensor~0); {28059#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} is VALID [2022-02-20 18:08:31,025 INFO L272 TraceCheckUtils]: 110: Hoare triple {28059#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} call processEnvironment__before__highWaterSensor(); {27930#true} is VALID [2022-02-20 18:08:31,025 INFO L290 TraceCheckUtils]: 111: Hoare triple {27930#true} assume true; {27930#true} is VALID [2022-02-20 18:08:31,026 INFO L284 TraceCheckUtils]: 112: Hoare quadruple {27930#true} {28059#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} #345#return; {28059#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} is VALID [2022-02-20 18:08:31,026 INFO L290 TraceCheckUtils]: 113: Hoare triple {28059#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} assume true; {28059#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} is VALID [2022-02-20 18:08:31,026 INFO L284 TraceCheckUtils]: 114: Hoare quadruple {28059#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} {27930#true} #391#return; {28059#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} is VALID [2022-02-20 18:08:31,026 INFO L290 TraceCheckUtils]: 115: Hoare triple {28059#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} assume true; {28059#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} is VALID [2022-02-20 18:08:31,027 INFO L284 TraceCheckUtils]: 116: Hoare quadruple {28059#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} #359#return; {27931#false} is VALID [2022-02-20 18:08:31,027 INFO L290 TraceCheckUtils]: 117: Hoare triple {27931#false} assume { :end_inline_processEnvironment } true; {27931#false} is VALID [2022-02-20 18:08:31,027 INFO L290 TraceCheckUtils]: 118: Hoare triple {27931#false} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret29#1, __utac_acc__Specification2_spec__2_#t~ret30#1, __utac_acc__Specification2_spec__2_~tmp~8#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~8#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {27931#false} is VALID [2022-02-20 18:08:31,027 INFO L272 TraceCheckUtils]: 119: Hoare triple {27931#false} call __utac_acc__Specification2_spec__2_#t~ret29#1 := isMethaneLevelCritical(); {27930#true} is VALID [2022-02-20 18:08:31,027 INFO L290 TraceCheckUtils]: 120: Hoare triple {27930#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {27930#true} is VALID [2022-02-20 18:08:31,027 INFO L290 TraceCheckUtils]: 121: Hoare triple {27930#true} assume true; {27930#true} is VALID [2022-02-20 18:08:31,028 INFO L284 TraceCheckUtils]: 122: Hoare quadruple {27930#true} {27931#false} #361#return; {27931#false} is VALID [2022-02-20 18:08:31,028 INFO L290 TraceCheckUtils]: 123: Hoare triple {27931#false} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret29#1 && __utac_acc__Specification2_spec__2_#t~ret29#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~8#1 := __utac_acc__Specification2_spec__2_#t~ret29#1;havoc __utac_acc__Specification2_spec__2_#t~ret29#1; {27931#false} is VALID [2022-02-20 18:08:31,028 INFO L290 TraceCheckUtils]: 124: Hoare triple {27931#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~8#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~5#1;havoc isPumpRunning_~retValue_acc~5#1;isPumpRunning_~retValue_acc~5#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~5#1; {27931#false} is VALID [2022-02-20 18:08:31,028 INFO L290 TraceCheckUtils]: 125: Hoare triple {27931#false} __utac_acc__Specification2_spec__2_#t~ret30#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret30#1 && __utac_acc__Specification2_spec__2_#t~ret30#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret30#1;havoc __utac_acc__Specification2_spec__2_#t~ret30#1; {27931#false} is VALID [2022-02-20 18:08:31,028 INFO L290 TraceCheckUtils]: 126: Hoare triple {27931#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {27931#false} is VALID [2022-02-20 18:08:31,028 INFO L290 TraceCheckUtils]: 127: Hoare triple {27931#false} assume 0 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {27931#false} is VALID [2022-02-20 18:08:31,028 INFO L290 TraceCheckUtils]: 128: Hoare triple {27931#false} assume !false; {27931#false} is VALID [2022-02-20 18:08:31,029 INFO L134 CoverageAnalysis]: Checked inductivity of 77 backedges. 21 proven. 5 refuted. 0 times theorem prover too weak. 51 trivial. 0 not checked. [2022-02-20 18:08:31,029 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:08:31,029 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1167821906] [2022-02-20 18:08:31,029 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1167821906] provided 0 perfect and 1 imperfect interpolant sequences [2022-02-20 18:08:31,029 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1357940751] [2022-02-20 18:08:31,029 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:08:31,030 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-02-20 18:08:31,030 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-20 18:08:31,031 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-02-20 18:08:31,034 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-02-20 18:08:31,148 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:31,151 INFO L263 TraceCheckSpWp]: Trace formula consists of 596 conjuncts, 3 conjunts are in the unsatisfiable core [2022-02-20 18:08:31,202 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:31,207 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 18:08:31,542 INFO L290 TraceCheckUtils]: 0: Hoare triple {27930#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(38, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(13, 9);call #Ultimate.allocInit(3, 10);call write~init~int(79, 10, 0, 1);call write~init~int(110, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(4, 11);call write~init~int(79, 11, 0, 1);call write~init~int(102, 11, 1, 1);call write~init~int(102, 11, 2, 1);call write~init~int(0, 11, 3, 1);call #Ultimate.allocInit(7, 12);call write~init~int(44, 12, 0, 1);call write~init~int(80, 12, 1, 1);call write~init~int(117, 12, 2, 1);call write~init~int(109, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(3, 13);call write~init~int(79, 13, 0, 1);call write~init~int(110, 13, 1, 1);call write~init~int(0, 13, 2, 1);call #Ultimate.allocInit(4, 14);call write~init~int(79, 14, 0, 1);call write~init~int(102, 14, 1, 1);call write~init~int(102, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(3, 15);call write~init~int(41, 15, 0, 1);call write~init~int(32, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(10, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~__SELECTED_FEATURE_base~0 := 0;~__SELECTED_FEATURE_highWaterSensor~0 := 0;~__SELECTED_FEATURE_lowWaterSensor~0 := 0;~__SELECTED_FEATURE_methaneQuery~0 := 0;~__SELECTED_FEATURE_methaneAlarm~0 := 0;~__SELECTED_FEATURE_stopCommand~0 := 0;~__SELECTED_FEATURE_startCommand~0 := 0;~__GUIDSL_ROOT_PRODUCTION~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4;~methAndRunningLastTime~0 := 0;~head~0.base, ~head~0.offset := 0, 0; {27930#true} is VALID [2022-02-20 18:08:31,542 INFO L290 TraceCheckUtils]: 1: Hoare triple {27930#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret24#1, main_~retValue_acc~8#1, main_~tmp~6#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~6#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1; {27930#true} is VALID [2022-02-20 18:08:31,542 INFO L290 TraceCheckUtils]: 2: Hoare triple {27930#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret55#1, select_features_#t~ret56#1, select_features_#t~ret57#1, select_features_#t~ret58#1, select_features_#t~ret59#1, select_features_#t~ret60#1;~__SELECTED_FEATURE_base~0 := 1; {27930#true} is VALID [2022-02-20 18:08:31,542 INFO L272 TraceCheckUtils]: 3: Hoare triple {27930#true} call select_features_#t~ret55#1 := select_one(); {27930#true} is VALID [2022-02-20 18:08:31,542 INFO L290 TraceCheckUtils]: 4: Hoare triple {27930#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {27930#true} is VALID [2022-02-20 18:08:31,542 INFO L290 TraceCheckUtils]: 5: Hoare triple {27930#true} assume true; {27930#true} is VALID [2022-02-20 18:08:31,542 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {27930#true} {27930#true} #363#return; {27930#true} is VALID [2022-02-20 18:08:31,542 INFO L290 TraceCheckUtils]: 7: Hoare triple {27930#true} assume -2147483648 <= select_features_#t~ret55#1 && select_features_#t~ret55#1 <= 2147483647;~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret55#1;havoc select_features_#t~ret55#1; {27930#true} is VALID [2022-02-20 18:08:31,542 INFO L272 TraceCheckUtils]: 8: Hoare triple {27930#true} call select_features_#t~ret56#1 := select_one(); {27930#true} is VALID [2022-02-20 18:08:31,543 INFO L290 TraceCheckUtils]: 9: Hoare triple {27930#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {27930#true} is VALID [2022-02-20 18:08:31,543 INFO L290 TraceCheckUtils]: 10: Hoare triple {27930#true} assume true; {27930#true} is VALID [2022-02-20 18:08:31,543 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {27930#true} {27930#true} #365#return; {27930#true} is VALID [2022-02-20 18:08:31,543 INFO L290 TraceCheckUtils]: 12: Hoare triple {27930#true} assume -2147483648 <= select_features_#t~ret56#1 && select_features_#t~ret56#1 <= 2147483647;~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret56#1;havoc select_features_#t~ret56#1; {27930#true} is VALID [2022-02-20 18:08:31,543 INFO L272 TraceCheckUtils]: 13: Hoare triple {27930#true} call select_features_#t~ret57#1 := select_one(); {27930#true} is VALID [2022-02-20 18:08:31,543 INFO L290 TraceCheckUtils]: 14: Hoare triple {27930#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {27930#true} is VALID [2022-02-20 18:08:31,543 INFO L290 TraceCheckUtils]: 15: Hoare triple {27930#true} assume true; {27930#true} is VALID [2022-02-20 18:08:31,543 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {27930#true} {27930#true} #367#return; {27930#true} is VALID [2022-02-20 18:08:31,543 INFO L290 TraceCheckUtils]: 17: Hoare triple {27930#true} assume -2147483648 <= select_features_#t~ret57#1 && select_features_#t~ret57#1 <= 2147483647;~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret57#1;havoc select_features_#t~ret57#1; {27930#true} is VALID [2022-02-20 18:08:31,543 INFO L272 TraceCheckUtils]: 18: Hoare triple {27930#true} call select_features_#t~ret58#1 := select_one(); {27930#true} is VALID [2022-02-20 18:08:31,543 INFO L290 TraceCheckUtils]: 19: Hoare triple {27930#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {27930#true} is VALID [2022-02-20 18:08:31,543 INFO L290 TraceCheckUtils]: 20: Hoare triple {27930#true} assume true; {27930#true} is VALID [2022-02-20 18:08:31,543 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {27930#true} {27930#true} #369#return; {27930#true} is VALID [2022-02-20 18:08:31,543 INFO L290 TraceCheckUtils]: 22: Hoare triple {27930#true} assume -2147483648 <= select_features_#t~ret58#1 && select_features_#t~ret58#1 <= 2147483647;~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret58#1;havoc select_features_#t~ret58#1; {27930#true} is VALID [2022-02-20 18:08:31,543 INFO L272 TraceCheckUtils]: 23: Hoare triple {27930#true} call select_features_#t~ret59#1 := select_one(); {27930#true} is VALID [2022-02-20 18:08:31,544 INFO L290 TraceCheckUtils]: 24: Hoare triple {27930#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {27930#true} is VALID [2022-02-20 18:08:31,544 INFO L290 TraceCheckUtils]: 25: Hoare triple {27930#true} assume true; {27930#true} is VALID [2022-02-20 18:08:31,544 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {27930#true} {27930#true} #371#return; {27930#true} is VALID [2022-02-20 18:08:31,544 INFO L290 TraceCheckUtils]: 27: Hoare triple {27930#true} assume -2147483648 <= select_features_#t~ret59#1 && select_features_#t~ret59#1 <= 2147483647;~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret59#1;havoc select_features_#t~ret59#1; {27930#true} is VALID [2022-02-20 18:08:31,544 INFO L272 TraceCheckUtils]: 28: Hoare triple {27930#true} call select_features_#t~ret60#1 := select_one(); {27930#true} is VALID [2022-02-20 18:08:31,544 INFO L290 TraceCheckUtils]: 29: Hoare triple {27930#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {27930#true} is VALID [2022-02-20 18:08:31,544 INFO L290 TraceCheckUtils]: 30: Hoare triple {27930#true} assume true; {27930#true} is VALID [2022-02-20 18:08:31,544 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {27930#true} {27930#true} #373#return; {27930#true} is VALID [2022-02-20 18:08:31,544 INFO L290 TraceCheckUtils]: 32: Hoare triple {27930#true} assume -2147483648 <= select_features_#t~ret60#1 && select_features_#t~ret60#1 <= 2147483647;~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret60#1;havoc select_features_#t~ret60#1; {27930#true} is VALID [2022-02-20 18:08:31,544 INFO L290 TraceCheckUtils]: 33: Hoare triple {27930#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~13#1;havoc valid_product_~retValue_acc~13#1;valid_product_~retValue_acc~13#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~13#1; {27930#true} is VALID [2022-02-20 18:08:31,544 INFO L290 TraceCheckUtils]: 34: Hoare triple {27930#true} main_#t~ret24#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret24#1 && main_#t~ret24#1 <= 2147483647;main_~tmp~6#1 := main_#t~ret24#1;havoc main_#t~ret24#1; {27930#true} is VALID [2022-02-20 18:08:31,544 INFO L290 TraceCheckUtils]: 35: Hoare triple {27930#true} assume 0 != main_~tmp~6#1;assume { :begin_inline_setup } true; {27930#true} is VALID [2022-02-20 18:08:31,544 INFO L290 TraceCheckUtils]: 36: Hoare triple {27930#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0; {27930#true} is VALID [2022-02-20 18:08:31,544 INFO L290 TraceCheckUtils]: 37: Hoare triple {27930#true} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet25#1, test_#t~nondet26#1, test_#t~nondet27#1, test_#t~nondet28#1, test_~splverifierCounter~0#1, test_~tmp~7#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~7#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {27930#true} is VALID [2022-02-20 18:08:31,544 INFO L290 TraceCheckUtils]: 38: Hoare triple {27930#true} assume !false; {27930#true} is VALID [2022-02-20 18:08:31,545 INFO L290 TraceCheckUtils]: 39: Hoare triple {27930#true} assume test_~splverifierCounter~0#1 < 4; {27930#true} is VALID [2022-02-20 18:08:31,545 INFO L290 TraceCheckUtils]: 40: Hoare triple {27930#true} assume -2147483648 <= test_#t~nondet25#1 && test_#t~nondet25#1 <= 2147483647;test_~tmp~7#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {27930#true} is VALID [2022-02-20 18:08:31,545 INFO L290 TraceCheckUtils]: 41: Hoare triple {27930#true} assume 0 != test_~tmp~7#1; {27930#true} is VALID [2022-02-20 18:08:31,545 INFO L272 TraceCheckUtils]: 42: Hoare triple {27930#true} call waterRise(); {27930#true} is VALID [2022-02-20 18:08:31,545 INFO L290 TraceCheckUtils]: 43: Hoare triple {27930#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {27930#true} is VALID [2022-02-20 18:08:31,545 INFO L290 TraceCheckUtils]: 44: Hoare triple {27930#true} assume true; {27930#true} is VALID [2022-02-20 18:08:31,545 INFO L284 TraceCheckUtils]: 45: Hoare quadruple {27930#true} {27930#true} #375#return; {27930#true} is VALID [2022-02-20 18:08:31,545 INFO L290 TraceCheckUtils]: 46: Hoare triple {27930#true} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {27930#true} is VALID [2022-02-20 18:08:31,545 INFO L290 TraceCheckUtils]: 47: Hoare triple {27930#true} assume !(0 != test_~tmp___0~2#1); {27930#true} is VALID [2022-02-20 18:08:31,545 INFO L290 TraceCheckUtils]: 48: Hoare triple {27930#true} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {27930#true} is VALID [2022-02-20 18:08:31,545 INFO L290 TraceCheckUtils]: 49: Hoare triple {27930#true} assume 0 != test_~tmp___2~0#1; {27930#true} is VALID [2022-02-20 18:08:31,545 INFO L290 TraceCheckUtils]: 50: Hoare triple {27930#true} assume !(0 != ~__SELECTED_FEATURE_startCommand~0); {27930#true} is VALID [2022-02-20 18:08:31,545 INFO L272 TraceCheckUtils]: 51: Hoare triple {27930#true} call timeShift(); {27930#true} is VALID [2022-02-20 18:08:31,545 INFO L290 TraceCheckUtils]: 52: Hoare triple {27930#true} assume !(0 != ~pumpRunning~0); {27930#true} is VALID [2022-02-20 18:08:31,545 INFO L290 TraceCheckUtils]: 53: Hoare triple {27930#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {27930#true} is VALID [2022-02-20 18:08:31,546 INFO L290 TraceCheckUtils]: 54: Hoare triple {27930#true} assume !(0 != ~__SELECTED_FEATURE_methaneAlarm~0); {27930#true} is VALID [2022-02-20 18:08:31,546 INFO L272 TraceCheckUtils]: 55: Hoare triple {27930#true} call processEnvironment__before__methaneAlarm(); {27930#true} is VALID [2022-02-20 18:08:31,546 INFO L290 TraceCheckUtils]: 56: Hoare triple {27930#true} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {27930#true} is VALID [2022-02-20 18:08:31,546 INFO L272 TraceCheckUtils]: 57: Hoare triple {27930#true} call processEnvironment__before__lowWaterSensor(); {27930#true} is VALID [2022-02-20 18:08:31,546 INFO L290 TraceCheckUtils]: 58: Hoare triple {27930#true} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret9#1, processEnvironment__role__highWaterSensor_~tmp~0#1;havoc processEnvironment__role__highWaterSensor_~tmp~0#1; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,546 INFO L290 TraceCheckUtils]: 59: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret22#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,546 INFO L290 TraceCheckUtils]: 60: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,547 INFO L290 TraceCheckUtils]: 61: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} isHighWaterLevel_#t~ret22#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret22#1 && isHighWaterLevel_#t~ret22#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret22#1;havoc isHighWaterLevel_#t~ret22#1; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,547 INFO L290 TraceCheckUtils]: 62: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,547 INFO L290 TraceCheckUtils]: 63: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,547 INFO L290 TraceCheckUtils]: 64: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} processEnvironment__role__highWaterSensor_#t~ret9#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret9#1 && processEnvironment__role__highWaterSensor_#t~ret9#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~0#1 := processEnvironment__role__highWaterSensor_#t~ret9#1;havoc processEnvironment__role__highWaterSensor_#t~ret9#1; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,548 INFO L290 TraceCheckUtils]: 65: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume 0 != processEnvironment__role__highWaterSensor_~tmp~0#1;assume { :begin_inline_activatePump } true; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,548 INFO L290 TraceCheckUtils]: 66: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,548 INFO L272 TraceCheckUtils]: 67: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} call activatePump__before__methaneQuery(); {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,548 INFO L290 TraceCheckUtils]: 68: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} ~pumpRunning~0 := 1; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,549 INFO L290 TraceCheckUtils]: 69: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume true; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,549 INFO L284 TraceCheckUtils]: 70: Hoare quadruple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} #339#return; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,549 INFO L290 TraceCheckUtils]: 71: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume { :end_inline_activatePump } true; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,549 INFO L290 TraceCheckUtils]: 72: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,550 INFO L290 TraceCheckUtils]: 73: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume true; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,551 INFO L284 TraceCheckUtils]: 74: Hoare quadruple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} {27930#true} #391#return; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,551 INFO L290 TraceCheckUtils]: 75: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume true; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,552 INFO L284 TraceCheckUtils]: 76: Hoare quadruple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} {27930#true} #359#return; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,552 INFO L290 TraceCheckUtils]: 77: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume { :end_inline_processEnvironment } true; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,552 INFO L290 TraceCheckUtils]: 78: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret29#1, __utac_acc__Specification2_spec__2_#t~ret30#1, __utac_acc__Specification2_spec__2_~tmp~8#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~8#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,552 INFO L272 TraceCheckUtils]: 79: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} call __utac_acc__Specification2_spec__2_#t~ret29#1 := isMethaneLevelCritical(); {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,553 INFO L290 TraceCheckUtils]: 80: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,553 INFO L290 TraceCheckUtils]: 81: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume true; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,553 INFO L284 TraceCheckUtils]: 82: Hoare quadruple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} #361#return; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,554 INFO L290 TraceCheckUtils]: 83: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret29#1 && __utac_acc__Specification2_spec__2_#t~ret29#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~8#1 := __utac_acc__Specification2_spec__2_#t~ret29#1;havoc __utac_acc__Specification2_spec__2_#t~ret29#1; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,554 INFO L290 TraceCheckUtils]: 84: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume 0 != __utac_acc__Specification2_spec__2_~tmp~8#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~5#1;havoc isPumpRunning_~retValue_acc~5#1;isPumpRunning_~retValue_acc~5#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~5#1; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,554 INFO L290 TraceCheckUtils]: 85: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} __utac_acc__Specification2_spec__2_#t~ret30#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret30#1 && __utac_acc__Specification2_spec__2_#t~ret30#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret30#1;havoc __utac_acc__Specification2_spec__2_#t~ret30#1; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,555 INFO L290 TraceCheckUtils]: 86: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,555 INFO L290 TraceCheckUtils]: 87: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != ~methAndRunningLastTime~0);~methAndRunningLastTime~0 := 1; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,555 INFO L290 TraceCheckUtils]: 88: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume { :end_inline___utac_acc__Specification2_spec__2 } true; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,555 INFO L290 TraceCheckUtils]: 89: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume true; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,556 INFO L284 TraceCheckUtils]: 90: Hoare quadruple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} {27930#true} #381#return; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,556 INFO L290 TraceCheckUtils]: 91: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !false; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,556 INFO L290 TraceCheckUtils]: 92: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume test_~splverifierCounter~0#1 < 4; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,556 INFO L290 TraceCheckUtils]: 93: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume -2147483648 <= test_#t~nondet25#1 && test_#t~nondet25#1 <= 2147483647;test_~tmp~7#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,557 INFO L290 TraceCheckUtils]: 94: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != test_~tmp~7#1); {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,557 INFO L290 TraceCheckUtils]: 95: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,557 INFO L290 TraceCheckUtils]: 96: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != test_~tmp___0~2#1); {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,558 INFO L290 TraceCheckUtils]: 97: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,558 INFO L290 TraceCheckUtils]: 98: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume 0 != test_~tmp___2~0#1; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,558 INFO L290 TraceCheckUtils]: 99: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != ~__SELECTED_FEATURE_startCommand~0); {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,558 INFO L272 TraceCheckUtils]: 100: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} call timeShift(); {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,559 INFO L290 TraceCheckUtils]: 101: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,559 INFO L290 TraceCheckUtils]: 102: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,559 INFO L290 TraceCheckUtils]: 103: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume { :end_inline_lowerWaterLevel } true; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,559 INFO L290 TraceCheckUtils]: 104: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,560 INFO L290 TraceCheckUtils]: 105: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != ~__SELECTED_FEATURE_methaneAlarm~0); {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,560 INFO L272 TraceCheckUtils]: 106: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} call processEnvironment__before__methaneAlarm(); {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,560 INFO L290 TraceCheckUtils]: 107: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,561 INFO L272 TraceCheckUtils]: 108: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} call processEnvironment__before__lowWaterSensor(); {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:08:31,561 INFO L290 TraceCheckUtils]: 109: Hoare triple {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != ~__SELECTED_FEATURE_highWaterSensor~0); {27931#false} is VALID [2022-02-20 18:08:31,561 INFO L272 TraceCheckUtils]: 110: Hoare triple {27931#false} call processEnvironment__before__highWaterSensor(); {27931#false} is VALID [2022-02-20 18:08:31,561 INFO L290 TraceCheckUtils]: 111: Hoare triple {27931#false} assume true; {27931#false} is VALID [2022-02-20 18:08:31,561 INFO L284 TraceCheckUtils]: 112: Hoare quadruple {27931#false} {27931#false} #345#return; {27931#false} is VALID [2022-02-20 18:08:31,561 INFO L290 TraceCheckUtils]: 113: Hoare triple {27931#false} assume true; {27931#false} is VALID [2022-02-20 18:08:31,561 INFO L284 TraceCheckUtils]: 114: Hoare quadruple {27931#false} {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} #391#return; {27931#false} is VALID [2022-02-20 18:08:31,562 INFO L290 TraceCheckUtils]: 115: Hoare triple {27931#false} assume true; {27931#false} is VALID [2022-02-20 18:08:31,562 INFO L284 TraceCheckUtils]: 116: Hoare quadruple {27931#false} {27992#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} #359#return; {27931#false} is VALID [2022-02-20 18:08:31,562 INFO L290 TraceCheckUtils]: 117: Hoare triple {27931#false} assume { :end_inline_processEnvironment } true; {27931#false} is VALID [2022-02-20 18:08:31,562 INFO L290 TraceCheckUtils]: 118: Hoare triple {27931#false} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret29#1, __utac_acc__Specification2_spec__2_#t~ret30#1, __utac_acc__Specification2_spec__2_~tmp~8#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~8#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {27931#false} is VALID [2022-02-20 18:08:31,562 INFO L272 TraceCheckUtils]: 119: Hoare triple {27931#false} call __utac_acc__Specification2_spec__2_#t~ret29#1 := isMethaneLevelCritical(); {27931#false} is VALID [2022-02-20 18:08:31,562 INFO L290 TraceCheckUtils]: 120: Hoare triple {27931#false} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {27931#false} is VALID [2022-02-20 18:08:31,562 INFO L290 TraceCheckUtils]: 121: Hoare triple {27931#false} assume true; {27931#false} is VALID [2022-02-20 18:08:31,562 INFO L284 TraceCheckUtils]: 122: Hoare quadruple {27931#false} {27931#false} #361#return; {27931#false} is VALID [2022-02-20 18:08:31,563 INFO L290 TraceCheckUtils]: 123: Hoare triple {27931#false} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret29#1 && __utac_acc__Specification2_spec__2_#t~ret29#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~8#1 := __utac_acc__Specification2_spec__2_#t~ret29#1;havoc __utac_acc__Specification2_spec__2_#t~ret29#1; {27931#false} is VALID [2022-02-20 18:08:31,563 INFO L290 TraceCheckUtils]: 124: Hoare triple {27931#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~8#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~5#1;havoc isPumpRunning_~retValue_acc~5#1;isPumpRunning_~retValue_acc~5#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~5#1; {27931#false} is VALID [2022-02-20 18:08:31,563 INFO L290 TraceCheckUtils]: 125: Hoare triple {27931#false} __utac_acc__Specification2_spec__2_#t~ret30#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret30#1 && __utac_acc__Specification2_spec__2_#t~ret30#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret30#1;havoc __utac_acc__Specification2_spec__2_#t~ret30#1; {27931#false} is VALID [2022-02-20 18:08:31,567 INFO L290 TraceCheckUtils]: 126: Hoare triple {27931#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {27931#false} is VALID [2022-02-20 18:08:31,567 INFO L290 TraceCheckUtils]: 127: Hoare triple {27931#false} assume 0 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {27931#false} is VALID [2022-02-20 18:08:31,567 INFO L290 TraceCheckUtils]: 128: Hoare triple {27931#false} assume !false; {27931#false} is VALID [2022-02-20 18:08:31,568 INFO L134 CoverageAnalysis]: Checked inductivity of 77 backedges. 32 proven. 0 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-02-20 18:08:31,568 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-02-20 18:08:31,568 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1357940751] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:08:31,568 INFO L191 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-02-20 18:08:31,568 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [7] total 7 [2022-02-20 18:08:31,568 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1135769804] [2022-02-20 18:08:31,568 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:08:31,569 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 28.666666666666668) internal successors, (86), 3 states have internal predecessors, (86), 3 states have call successors, (17), 3 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 3 states have call successors, (16) Word has length 129 [2022-02-20 18:08:31,569 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:08:31,569 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 3 states, 3 states have (on average 28.666666666666668) internal successors, (86), 3 states have internal predecessors, (86), 3 states have call successors, (17), 3 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 3 states have call successors, (16) [2022-02-20 18:08:31,671 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 119 edges. 119 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:31,672 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-02-20 18:08:31,672 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:08:31,672 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-02-20 18:08:31,672 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-02-20 18:08:31,673 INFO L87 Difference]: Start difference. First operand 794 states and 1116 transitions. Second operand has 3 states, 3 states have (on average 28.666666666666668) internal successors, (86), 3 states have internal predecessors, (86), 3 states have call successors, (17), 3 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 3 states have call successors, (16) [2022-02-20 18:08:32,056 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:32,056 INFO L93 Difference]: Finished difference Result 1740 states and 2495 transitions. [2022-02-20 18:08:32,056 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-02-20 18:08:32,056 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 28.666666666666668) internal successors, (86), 3 states have internal predecessors, (86), 3 states have call successors, (17), 3 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 3 states have call successors, (16) Word has length 129 [2022-02-20 18:08:32,057 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:08:32,057 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 28.666666666666668) internal successors, (86), 3 states have internal predecessors, (86), 3 states have call successors, (17), 3 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 3 states have call successors, (16) [2022-02-20 18:08:32,059 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 396 transitions. [2022-02-20 18:08:32,059 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 28.666666666666668) internal successors, (86), 3 states have internal predecessors, (86), 3 states have call successors, (17), 3 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 3 states have call successors, (16) [2022-02-20 18:08:32,062 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 396 transitions. [2022-02-20 18:08:32,062 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 396 transitions. [2022-02-20 18:08:32,275 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 396 edges. 396 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:32,334 INFO L225 Difference]: With dead ends: 1740 [2022-02-20 18:08:32,335 INFO L226 Difference]: Without dead ends: 969 [2022-02-20 18:08:32,337 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 166 GetRequests, 161 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-02-20 18:08:32,337 INFO L933 BasicCegarLoop]: 243 mSDtfsCounter, 91 mSDsluCounter, 96 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 91 SdHoareTripleChecker+Valid, 339 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:08:32,338 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [91 Valid, 339 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:08:32,339 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 969 states. [2022-02-20 18:08:32,425 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 969 to 969. [2022-02-20 18:08:32,425 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:08:32,427 INFO L82 GeneralOperation]: Start isEquivalent. First operand 969 states. Second operand has 969 states, 716 states have (on average 1.2681564245810055) internal successors, (908), 784 states have internal predecessors, (908), 145 states have call successors, (145), 94 states have call predecessors, (145), 107 states have return successors, (282), 150 states have call predecessors, (282), 145 states have call successors, (282) [2022-02-20 18:08:32,428 INFO L74 IsIncluded]: Start isIncluded. First operand 969 states. Second operand has 969 states, 716 states have (on average 1.2681564245810055) internal successors, (908), 784 states have internal predecessors, (908), 145 states have call successors, (145), 94 states have call predecessors, (145), 107 states have return successors, (282), 150 states have call predecessors, (282), 145 states have call successors, (282) [2022-02-20 18:08:32,429 INFO L87 Difference]: Start difference. First operand 969 states. Second operand has 969 states, 716 states have (on average 1.2681564245810055) internal successors, (908), 784 states have internal predecessors, (908), 145 states have call successors, (145), 94 states have call predecessors, (145), 107 states have return successors, (282), 150 states have call predecessors, (282), 145 states have call successors, (282) [2022-02-20 18:08:32,461 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:32,461 INFO L93 Difference]: Finished difference Result 969 states and 1335 transitions. [2022-02-20 18:08:32,462 INFO L276 IsEmpty]: Start isEmpty. Operand 969 states and 1335 transitions. [2022-02-20 18:08:32,464 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:32,464 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:32,465 INFO L74 IsIncluded]: Start isIncluded. First operand has 969 states, 716 states have (on average 1.2681564245810055) internal successors, (908), 784 states have internal predecessors, (908), 145 states have call successors, (145), 94 states have call predecessors, (145), 107 states have return successors, (282), 150 states have call predecessors, (282), 145 states have call successors, (282) Second operand 969 states. [2022-02-20 18:08:32,466 INFO L87 Difference]: Start difference. First operand has 969 states, 716 states have (on average 1.2681564245810055) internal successors, (908), 784 states have internal predecessors, (908), 145 states have call successors, (145), 94 states have call predecessors, (145), 107 states have return successors, (282), 150 states have call predecessors, (282), 145 states have call successors, (282) Second operand 969 states. [2022-02-20 18:08:32,498 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:32,499 INFO L93 Difference]: Finished difference Result 969 states and 1335 transitions. [2022-02-20 18:08:32,499 INFO L276 IsEmpty]: Start isEmpty. Operand 969 states and 1335 transitions. [2022-02-20 18:08:32,501 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:32,501 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:32,501 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:08:32,502 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:08:32,503 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 969 states, 716 states have (on average 1.2681564245810055) internal successors, (908), 784 states have internal predecessors, (908), 145 states have call successors, (145), 94 states have call predecessors, (145), 107 states have return successors, (282), 150 states have call predecessors, (282), 145 states have call successors, (282) [2022-02-20 18:08:32,547 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 969 states to 969 states and 1335 transitions. [2022-02-20 18:08:32,548 INFO L78 Accepts]: Start accepts. Automaton has 969 states and 1335 transitions. Word has length 129 [2022-02-20 18:08:32,548 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:08:32,548 INFO L470 AbstractCegarLoop]: Abstraction has 969 states and 1335 transitions. [2022-02-20 18:08:32,548 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 28.666666666666668) internal successors, (86), 3 states have internal predecessors, (86), 3 states have call successors, (17), 3 states have call predecessors, (17), 3 states have return successors, (16), 3 states have call predecessors, (16), 3 states have call successors, (16) [2022-02-20 18:08:32,548 INFO L276 IsEmpty]: Start isEmpty. Operand 969 states and 1335 transitions. [2022-02-20 18:08:32,551 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 132 [2022-02-20 18:08:32,551 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:08:32,551 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:08:32,571 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-02-20 18:08:32,769 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-02-20 18:08:32,769 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:08:32,769 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:08:32,769 INFO L85 PathProgramCache]: Analyzing trace with hash -716074893, now seen corresponding path program 1 times [2022-02-20 18:08:32,769 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:08:32,769 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [48222682] [2022-02-20 18:08:32,770 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:08:32,770 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:08:32,800 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:32,815 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-02-20 18:08:32,817 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:32,819 INFO L290 TraceCheckUtils]: 0: Hoare triple {34220#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {34220#true} is VALID [2022-02-20 18:08:32,819 INFO L290 TraceCheckUtils]: 1: Hoare triple {34220#true} assume true; {34220#true} is VALID [2022-02-20 18:08:32,819 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {34220#true} {34222#(= ~methaneLevelCritical~0 0)} #363#return; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:32,819 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:08:32,821 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:32,822 INFO L290 TraceCheckUtils]: 0: Hoare triple {34220#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {34220#true} is VALID [2022-02-20 18:08:32,822 INFO L290 TraceCheckUtils]: 1: Hoare triple {34220#true} assume true; {34220#true} is VALID [2022-02-20 18:08:32,823 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {34220#true} {34222#(= ~methaneLevelCritical~0 0)} #365#return; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:32,823 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-02-20 18:08:32,824 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:32,826 INFO L290 TraceCheckUtils]: 0: Hoare triple {34220#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {34220#true} is VALID [2022-02-20 18:08:32,826 INFO L290 TraceCheckUtils]: 1: Hoare triple {34220#true} assume true; {34220#true} is VALID [2022-02-20 18:08:32,826 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {34220#true} {34222#(= ~methaneLevelCritical~0 0)} #367#return; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:32,826 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:08:32,828 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:32,829 INFO L290 TraceCheckUtils]: 0: Hoare triple {34220#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {34220#true} is VALID [2022-02-20 18:08:32,830 INFO L290 TraceCheckUtils]: 1: Hoare triple {34220#true} assume true; {34220#true} is VALID [2022-02-20 18:08:32,830 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {34220#true} {34222#(= ~methaneLevelCritical~0 0)} #369#return; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:32,830 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-02-20 18:08:32,832 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:32,833 INFO L290 TraceCheckUtils]: 0: Hoare triple {34220#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {34220#true} is VALID [2022-02-20 18:08:32,834 INFO L290 TraceCheckUtils]: 1: Hoare triple {34220#true} assume true; {34220#true} is VALID [2022-02-20 18:08:32,834 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {34220#true} {34222#(= ~methaneLevelCritical~0 0)} #371#return; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:32,834 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-02-20 18:08:32,836 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:32,837 INFO L290 TraceCheckUtils]: 0: Hoare triple {34220#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {34220#true} is VALID [2022-02-20 18:08:32,837 INFO L290 TraceCheckUtils]: 1: Hoare triple {34220#true} assume true; {34220#true} is VALID [2022-02-20 18:08:32,838 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {34220#true} {34222#(= ~methaneLevelCritical~0 0)} #373#return; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:32,840 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2022-02-20 18:08:32,841 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:32,842 INFO L290 TraceCheckUtils]: 0: Hoare triple {34298#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {34220#true} is VALID [2022-02-20 18:08:32,842 INFO L290 TraceCheckUtils]: 1: Hoare triple {34220#true} assume true; {34220#true} is VALID [2022-02-20 18:08:32,843 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {34220#true} {34222#(= ~methaneLevelCritical~0 0)} #375#return; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:32,847 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2022-02-20 18:08:32,852 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:32,872 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-02-20 18:08:32,874 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:32,880 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:08:32,882 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:32,884 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-02-20 18:08:32,885 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:32,886 INFO L290 TraceCheckUtils]: 0: Hoare triple {34327#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {34220#true} is VALID [2022-02-20 18:08:32,886 INFO L290 TraceCheckUtils]: 1: Hoare triple {34220#true} assume true; {34220#true} is VALID [2022-02-20 18:08:32,886 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {34220#true} {34220#true} #339#return; {34220#true} is VALID [2022-02-20 18:08:32,886 INFO L290 TraceCheckUtils]: 0: Hoare triple {34327#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret9#1, processEnvironment__role__highWaterSensor_~tmp~0#1;havoc processEnvironment__role__highWaterSensor_~tmp~0#1; {34220#true} is VALID [2022-02-20 18:08:32,886 INFO L290 TraceCheckUtils]: 1: Hoare triple {34220#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret22#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {34220#true} is VALID [2022-02-20 18:08:32,887 INFO L290 TraceCheckUtils]: 2: Hoare triple {34220#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {34220#true} is VALID [2022-02-20 18:08:32,887 INFO L290 TraceCheckUtils]: 3: Hoare triple {34220#true} isHighWaterLevel_#t~ret22#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret22#1 && isHighWaterLevel_#t~ret22#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret22#1;havoc isHighWaterLevel_#t~ret22#1; {34220#true} is VALID [2022-02-20 18:08:32,887 INFO L290 TraceCheckUtils]: 4: Hoare triple {34220#true} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1; {34220#true} is VALID [2022-02-20 18:08:32,887 INFO L290 TraceCheckUtils]: 5: Hoare triple {34220#true} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {34220#true} is VALID [2022-02-20 18:08:32,887 INFO L290 TraceCheckUtils]: 6: Hoare triple {34220#true} processEnvironment__role__highWaterSensor_#t~ret9#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret9#1 && processEnvironment__role__highWaterSensor_#t~ret9#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~0#1 := processEnvironment__role__highWaterSensor_#t~ret9#1;havoc processEnvironment__role__highWaterSensor_#t~ret9#1; {34220#true} is VALID [2022-02-20 18:08:32,887 INFO L290 TraceCheckUtils]: 7: Hoare triple {34220#true} assume 0 != processEnvironment__role__highWaterSensor_~tmp~0#1;assume { :begin_inline_activatePump } true; {34220#true} is VALID [2022-02-20 18:08:32,887 INFO L290 TraceCheckUtils]: 8: Hoare triple {34220#true} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {34220#true} is VALID [2022-02-20 18:08:32,888 INFO L272 TraceCheckUtils]: 9: Hoare triple {34220#true} call activatePump__before__methaneQuery(); {34327#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:32,888 INFO L290 TraceCheckUtils]: 10: Hoare triple {34327#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {34220#true} is VALID [2022-02-20 18:08:32,888 INFO L290 TraceCheckUtils]: 11: Hoare triple {34220#true} assume true; {34220#true} is VALID [2022-02-20 18:08:32,888 INFO L284 TraceCheckUtils]: 12: Hoare quadruple {34220#true} {34220#true} #339#return; {34220#true} is VALID [2022-02-20 18:08:32,888 INFO L290 TraceCheckUtils]: 13: Hoare triple {34220#true} assume { :end_inline_activatePump } true; {34220#true} is VALID [2022-02-20 18:08:32,888 INFO L290 TraceCheckUtils]: 14: Hoare triple {34220#true} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {34220#true} is VALID [2022-02-20 18:08:32,889 INFO L290 TraceCheckUtils]: 15: Hoare triple {34220#true} assume true; {34220#true} is VALID [2022-02-20 18:08:32,889 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {34220#true} {34220#true} #391#return; {34220#true} is VALID [2022-02-20 18:08:32,889 INFO L290 TraceCheckUtils]: 0: Hoare triple {34327#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {34220#true} is VALID [2022-02-20 18:08:32,889 INFO L272 TraceCheckUtils]: 1: Hoare triple {34220#true} call processEnvironment__before__lowWaterSensor(); {34327#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:32,889 INFO L290 TraceCheckUtils]: 2: Hoare triple {34327#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret9#1, processEnvironment__role__highWaterSensor_~tmp~0#1;havoc processEnvironment__role__highWaterSensor_~tmp~0#1; {34220#true} is VALID [2022-02-20 18:08:32,889 INFO L290 TraceCheckUtils]: 3: Hoare triple {34220#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret22#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {34220#true} is VALID [2022-02-20 18:08:32,890 INFO L290 TraceCheckUtils]: 4: Hoare triple {34220#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {34220#true} is VALID [2022-02-20 18:08:32,890 INFO L290 TraceCheckUtils]: 5: Hoare triple {34220#true} isHighWaterLevel_#t~ret22#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret22#1 && isHighWaterLevel_#t~ret22#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret22#1;havoc isHighWaterLevel_#t~ret22#1; {34220#true} is VALID [2022-02-20 18:08:32,890 INFO L290 TraceCheckUtils]: 6: Hoare triple {34220#true} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1; {34220#true} is VALID [2022-02-20 18:08:32,890 INFO L290 TraceCheckUtils]: 7: Hoare triple {34220#true} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {34220#true} is VALID [2022-02-20 18:08:32,890 INFO L290 TraceCheckUtils]: 8: Hoare triple {34220#true} processEnvironment__role__highWaterSensor_#t~ret9#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret9#1 && processEnvironment__role__highWaterSensor_#t~ret9#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~0#1 := processEnvironment__role__highWaterSensor_#t~ret9#1;havoc processEnvironment__role__highWaterSensor_#t~ret9#1; {34220#true} is VALID [2022-02-20 18:08:32,890 INFO L290 TraceCheckUtils]: 9: Hoare triple {34220#true} assume 0 != processEnvironment__role__highWaterSensor_~tmp~0#1;assume { :begin_inline_activatePump } true; {34220#true} is VALID [2022-02-20 18:08:32,890 INFO L290 TraceCheckUtils]: 10: Hoare triple {34220#true} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {34220#true} is VALID [2022-02-20 18:08:32,891 INFO L272 TraceCheckUtils]: 11: Hoare triple {34220#true} call activatePump__before__methaneQuery(); {34327#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:32,891 INFO L290 TraceCheckUtils]: 12: Hoare triple {34327#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {34220#true} is VALID [2022-02-20 18:08:32,891 INFO L290 TraceCheckUtils]: 13: Hoare triple {34220#true} assume true; {34220#true} is VALID [2022-02-20 18:08:32,891 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {34220#true} {34220#true} #339#return; {34220#true} is VALID [2022-02-20 18:08:32,891 INFO L290 TraceCheckUtils]: 15: Hoare triple {34220#true} assume { :end_inline_activatePump } true; {34220#true} is VALID [2022-02-20 18:08:32,891 INFO L290 TraceCheckUtils]: 16: Hoare triple {34220#true} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {34220#true} is VALID [2022-02-20 18:08:32,891 INFO L290 TraceCheckUtils]: 17: Hoare triple {34220#true} assume true; {34220#true} is VALID [2022-02-20 18:08:32,892 INFO L284 TraceCheckUtils]: 18: Hoare quadruple {34220#true} {34220#true} #391#return; {34220#true} is VALID [2022-02-20 18:08:32,892 INFO L290 TraceCheckUtils]: 19: Hoare triple {34220#true} assume true; {34220#true} is VALID [2022-02-20 18:08:32,892 INFO L284 TraceCheckUtils]: 20: Hoare quadruple {34220#true} {34220#true} #359#return; {34220#true} is VALID [2022-02-20 18:08:32,892 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-02-20 18:08:32,893 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:32,903 INFO L290 TraceCheckUtils]: 0: Hoare triple {34220#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {34348#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:32,904 INFO L290 TraceCheckUtils]: 1: Hoare triple {34348#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} assume true; {34348#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:32,904 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {34348#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} {34220#true} #361#return; {34324#(= |timeShift___utac_acc__Specification2_spec__2_#t~ret29#1| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:32,905 INFO L290 TraceCheckUtils]: 0: Hoare triple {34299#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0) (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))} assume !(0 != ~pumpRunning~0); {34220#true} is VALID [2022-02-20 18:08:32,905 INFO L290 TraceCheckUtils]: 1: Hoare triple {34220#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {34220#true} is VALID [2022-02-20 18:08:32,905 INFO L290 TraceCheckUtils]: 2: Hoare triple {34220#true} assume !(0 != ~__SELECTED_FEATURE_methaneAlarm~0); {34220#true} is VALID [2022-02-20 18:08:32,905 INFO L272 TraceCheckUtils]: 3: Hoare triple {34220#true} call processEnvironment__before__methaneAlarm(); {34327#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:32,905 INFO L290 TraceCheckUtils]: 4: Hoare triple {34327#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {34220#true} is VALID [2022-02-20 18:08:32,906 INFO L272 TraceCheckUtils]: 5: Hoare triple {34220#true} call processEnvironment__before__lowWaterSensor(); {34327#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:32,906 INFO L290 TraceCheckUtils]: 6: Hoare triple {34327#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret9#1, processEnvironment__role__highWaterSensor_~tmp~0#1;havoc processEnvironment__role__highWaterSensor_~tmp~0#1; {34220#true} is VALID [2022-02-20 18:08:32,906 INFO L290 TraceCheckUtils]: 7: Hoare triple {34220#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret22#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {34220#true} is VALID [2022-02-20 18:08:32,906 INFO L290 TraceCheckUtils]: 8: Hoare triple {34220#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {34220#true} is VALID [2022-02-20 18:08:32,907 INFO L290 TraceCheckUtils]: 9: Hoare triple {34220#true} isHighWaterLevel_#t~ret22#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret22#1 && isHighWaterLevel_#t~ret22#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret22#1;havoc isHighWaterLevel_#t~ret22#1; {34220#true} is VALID [2022-02-20 18:08:32,907 INFO L290 TraceCheckUtils]: 10: Hoare triple {34220#true} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1; {34220#true} is VALID [2022-02-20 18:08:32,907 INFO L290 TraceCheckUtils]: 11: Hoare triple {34220#true} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {34220#true} is VALID [2022-02-20 18:08:32,907 INFO L290 TraceCheckUtils]: 12: Hoare triple {34220#true} processEnvironment__role__highWaterSensor_#t~ret9#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret9#1 && processEnvironment__role__highWaterSensor_#t~ret9#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~0#1 := processEnvironment__role__highWaterSensor_#t~ret9#1;havoc processEnvironment__role__highWaterSensor_#t~ret9#1; {34220#true} is VALID [2022-02-20 18:08:32,907 INFO L290 TraceCheckUtils]: 13: Hoare triple {34220#true} assume 0 != processEnvironment__role__highWaterSensor_~tmp~0#1;assume { :begin_inline_activatePump } true; {34220#true} is VALID [2022-02-20 18:08:32,907 INFO L290 TraceCheckUtils]: 14: Hoare triple {34220#true} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {34220#true} is VALID [2022-02-20 18:08:32,907 INFO L272 TraceCheckUtils]: 15: Hoare triple {34220#true} call activatePump__before__methaneQuery(); {34327#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:32,908 INFO L290 TraceCheckUtils]: 16: Hoare triple {34327#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {34220#true} is VALID [2022-02-20 18:08:32,908 INFO L290 TraceCheckUtils]: 17: Hoare triple {34220#true} assume true; {34220#true} is VALID [2022-02-20 18:08:32,908 INFO L284 TraceCheckUtils]: 18: Hoare quadruple {34220#true} {34220#true} #339#return; {34220#true} is VALID [2022-02-20 18:08:32,908 INFO L290 TraceCheckUtils]: 19: Hoare triple {34220#true} assume { :end_inline_activatePump } true; {34220#true} is VALID [2022-02-20 18:08:32,909 INFO L290 TraceCheckUtils]: 20: Hoare triple {34220#true} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {34220#true} is VALID [2022-02-20 18:08:32,909 INFO L290 TraceCheckUtils]: 21: Hoare triple {34220#true} assume true; {34220#true} is VALID [2022-02-20 18:08:32,909 INFO L284 TraceCheckUtils]: 22: Hoare quadruple {34220#true} {34220#true} #391#return; {34220#true} is VALID [2022-02-20 18:08:32,909 INFO L290 TraceCheckUtils]: 23: Hoare triple {34220#true} assume true; {34220#true} is VALID [2022-02-20 18:08:32,909 INFO L284 TraceCheckUtils]: 24: Hoare quadruple {34220#true} {34220#true} #359#return; {34220#true} is VALID [2022-02-20 18:08:32,909 INFO L290 TraceCheckUtils]: 25: Hoare triple {34220#true} assume { :end_inline_processEnvironment } true; {34220#true} is VALID [2022-02-20 18:08:32,909 INFO L290 TraceCheckUtils]: 26: Hoare triple {34220#true} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret29#1, __utac_acc__Specification2_spec__2_#t~ret30#1, __utac_acc__Specification2_spec__2_~tmp~8#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~8#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {34220#true} is VALID [2022-02-20 18:08:32,909 INFO L272 TraceCheckUtils]: 27: Hoare triple {34220#true} call __utac_acc__Specification2_spec__2_#t~ret29#1 := isMethaneLevelCritical(); {34220#true} is VALID [2022-02-20 18:08:32,910 INFO L290 TraceCheckUtils]: 28: Hoare triple {34220#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {34348#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:32,910 INFO L290 TraceCheckUtils]: 29: Hoare triple {34348#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} assume true; {34348#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:32,911 INFO L284 TraceCheckUtils]: 30: Hoare quadruple {34348#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} {34220#true} #361#return; {34324#(= |timeShift___utac_acc__Specification2_spec__2_#t~ret29#1| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:32,911 INFO L290 TraceCheckUtils]: 31: Hoare triple {34324#(= |timeShift___utac_acc__Specification2_spec__2_#t~ret29#1| ~methaneLevelCritical~0)} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret29#1 && __utac_acc__Specification2_spec__2_#t~ret29#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~8#1 := __utac_acc__Specification2_spec__2_#t~ret29#1;havoc __utac_acc__Specification2_spec__2_#t~ret29#1; {34325#(= |timeShift___utac_acc__Specification2_spec__2_~tmp~8#1| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:32,911 INFO L290 TraceCheckUtils]: 32: Hoare triple {34325#(= |timeShift___utac_acc__Specification2_spec__2_~tmp~8#1| ~methaneLevelCritical~0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp~8#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~5#1;havoc isPumpRunning_~retValue_acc~5#1;isPumpRunning_~retValue_acc~5#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~5#1; {34326#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:08:32,912 INFO L290 TraceCheckUtils]: 33: Hoare triple {34326#(not (= ~methaneLevelCritical~0 0))} __utac_acc__Specification2_spec__2_#t~ret30#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret30#1 && __utac_acc__Specification2_spec__2_#t~ret30#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret30#1;havoc __utac_acc__Specification2_spec__2_#t~ret30#1; {34326#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:08:32,912 INFO L290 TraceCheckUtils]: 34: Hoare triple {34326#(not (= ~methaneLevelCritical~0 0))} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {34326#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:08:32,912 INFO L290 TraceCheckUtils]: 35: Hoare triple {34326#(not (= ~methaneLevelCritical~0 0))} assume !(0 != ~methAndRunningLastTime~0);~methAndRunningLastTime~0 := 1; {34326#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:08:32,913 INFO L290 TraceCheckUtils]: 36: Hoare triple {34326#(not (= ~methaneLevelCritical~0 0))} assume { :end_inline___utac_acc__Specification2_spec__2 } true; {34326#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:08:32,913 INFO L290 TraceCheckUtils]: 37: Hoare triple {34326#(not (= ~methaneLevelCritical~0 0))} assume true; {34326#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:08:32,913 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {34326#(not (= ~methaneLevelCritical~0 0))} {34222#(= ~methaneLevelCritical~0 0)} #381#return; {34221#false} is VALID [2022-02-20 18:08:32,913 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 106 [2022-02-20 18:08:32,914 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:32,916 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:08:32,917 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:32,918 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-02-20 18:08:32,919 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:32,920 INFO L290 TraceCheckUtils]: 0: Hoare triple {34220#true} assume true; {34220#true} is VALID [2022-02-20 18:08:32,920 INFO L284 TraceCheckUtils]: 1: Hoare quadruple {34220#true} {34220#true} #343#return; {34220#true} is VALID [2022-02-20 18:08:32,920 INFO L290 TraceCheckUtils]: 0: Hoare triple {34327#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret9#1, processEnvironment__role__highWaterSensor_~tmp~0#1;havoc processEnvironment__role__highWaterSensor_~tmp~0#1; {34220#true} is VALID [2022-02-20 18:08:32,920 INFO L290 TraceCheckUtils]: 1: Hoare triple {34220#true} assume !(0 == ~pumpRunning~0); {34220#true} is VALID [2022-02-20 18:08:32,921 INFO L272 TraceCheckUtils]: 2: Hoare triple {34220#true} call processEnvironment__before__highWaterSensor(); {34220#true} is VALID [2022-02-20 18:08:32,921 INFO L290 TraceCheckUtils]: 3: Hoare triple {34220#true} assume true; {34220#true} is VALID [2022-02-20 18:08:32,921 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {34220#true} {34220#true} #343#return; {34220#true} is VALID [2022-02-20 18:08:32,921 INFO L290 TraceCheckUtils]: 5: Hoare triple {34220#true} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {34220#true} is VALID [2022-02-20 18:08:32,921 INFO L290 TraceCheckUtils]: 6: Hoare triple {34220#true} assume true; {34220#true} is VALID [2022-02-20 18:08:32,921 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {34220#true} {34220#true} #391#return; {34220#true} is VALID [2022-02-20 18:08:32,921 INFO L290 TraceCheckUtils]: 0: Hoare triple {34327#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {34220#true} is VALID [2022-02-20 18:08:32,922 INFO L272 TraceCheckUtils]: 1: Hoare triple {34220#true} call processEnvironment__before__lowWaterSensor(); {34327#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:32,922 INFO L290 TraceCheckUtils]: 2: Hoare triple {34327#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret9#1, processEnvironment__role__highWaterSensor_~tmp~0#1;havoc processEnvironment__role__highWaterSensor_~tmp~0#1; {34220#true} is VALID [2022-02-20 18:08:32,922 INFO L290 TraceCheckUtils]: 3: Hoare triple {34220#true} assume !(0 == ~pumpRunning~0); {34220#true} is VALID [2022-02-20 18:08:32,922 INFO L272 TraceCheckUtils]: 4: Hoare triple {34220#true} call processEnvironment__before__highWaterSensor(); {34220#true} is VALID [2022-02-20 18:08:32,922 INFO L290 TraceCheckUtils]: 5: Hoare triple {34220#true} assume true; {34220#true} is VALID [2022-02-20 18:08:32,922 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {34220#true} {34220#true} #343#return; {34220#true} is VALID [2022-02-20 18:08:32,922 INFO L290 TraceCheckUtils]: 7: Hoare triple {34220#true} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {34220#true} is VALID [2022-02-20 18:08:32,923 INFO L290 TraceCheckUtils]: 8: Hoare triple {34220#true} assume true; {34220#true} is VALID [2022-02-20 18:08:32,923 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {34220#true} {34220#true} #391#return; {34220#true} is VALID [2022-02-20 18:08:32,923 INFO L290 TraceCheckUtils]: 10: Hoare triple {34220#true} assume true; {34220#true} is VALID [2022-02-20 18:08:32,923 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {34220#true} {34221#false} #359#return; {34221#false} is VALID [2022-02-20 18:08:32,923 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 121 [2022-02-20 18:08:32,924 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:32,928 INFO L290 TraceCheckUtils]: 0: Hoare triple {34220#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {34220#true} is VALID [2022-02-20 18:08:32,928 INFO L290 TraceCheckUtils]: 1: Hoare triple {34220#true} assume true; {34220#true} is VALID [2022-02-20 18:08:32,928 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {34220#true} {34221#false} #361#return; {34221#false} is VALID [2022-02-20 18:08:32,929 INFO L290 TraceCheckUtils]: 0: Hoare triple {34220#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(38, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(13, 9);call #Ultimate.allocInit(3, 10);call write~init~int(79, 10, 0, 1);call write~init~int(110, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(4, 11);call write~init~int(79, 11, 0, 1);call write~init~int(102, 11, 1, 1);call write~init~int(102, 11, 2, 1);call write~init~int(0, 11, 3, 1);call #Ultimate.allocInit(7, 12);call write~init~int(44, 12, 0, 1);call write~init~int(80, 12, 1, 1);call write~init~int(117, 12, 2, 1);call write~init~int(109, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(3, 13);call write~init~int(79, 13, 0, 1);call write~init~int(110, 13, 1, 1);call write~init~int(0, 13, 2, 1);call #Ultimate.allocInit(4, 14);call write~init~int(79, 14, 0, 1);call write~init~int(102, 14, 1, 1);call write~init~int(102, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(3, 15);call write~init~int(41, 15, 0, 1);call write~init~int(32, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(10, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~__SELECTED_FEATURE_base~0 := 0;~__SELECTED_FEATURE_highWaterSensor~0 := 0;~__SELECTED_FEATURE_lowWaterSensor~0 := 0;~__SELECTED_FEATURE_methaneQuery~0 := 0;~__SELECTED_FEATURE_methaneAlarm~0 := 0;~__SELECTED_FEATURE_stopCommand~0 := 0;~__SELECTED_FEATURE_startCommand~0 := 0;~__GUIDSL_ROOT_PRODUCTION~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4;~methAndRunningLastTime~0 := 0;~head~0.base, ~head~0.offset := 0, 0; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:32,929 INFO L290 TraceCheckUtils]: 1: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret24#1, main_~retValue_acc~8#1, main_~tmp~6#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~6#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:32,929 INFO L290 TraceCheckUtils]: 2: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret55#1, select_features_#t~ret56#1, select_features_#t~ret57#1, select_features_#t~ret58#1, select_features_#t~ret59#1, select_features_#t~ret60#1;~__SELECTED_FEATURE_base~0 := 1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:32,929 INFO L272 TraceCheckUtils]: 3: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} call select_features_#t~ret55#1 := select_one(); {34220#true} is VALID [2022-02-20 18:08:32,930 INFO L290 TraceCheckUtils]: 4: Hoare triple {34220#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {34220#true} is VALID [2022-02-20 18:08:32,930 INFO L290 TraceCheckUtils]: 5: Hoare triple {34220#true} assume true; {34220#true} is VALID [2022-02-20 18:08:32,930 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {34220#true} {34222#(= ~methaneLevelCritical~0 0)} #363#return; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:32,930 INFO L290 TraceCheckUtils]: 7: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume -2147483648 <= select_features_#t~ret55#1 && select_features_#t~ret55#1 <= 2147483647;~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret55#1;havoc select_features_#t~ret55#1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:32,930 INFO L272 TraceCheckUtils]: 8: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} call select_features_#t~ret56#1 := select_one(); {34220#true} is VALID [2022-02-20 18:08:32,931 INFO L290 TraceCheckUtils]: 9: Hoare triple {34220#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {34220#true} is VALID [2022-02-20 18:08:32,931 INFO L290 TraceCheckUtils]: 10: Hoare triple {34220#true} assume true; {34220#true} is VALID [2022-02-20 18:08:32,931 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {34220#true} {34222#(= ~methaneLevelCritical~0 0)} #365#return; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:32,931 INFO L290 TraceCheckUtils]: 12: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume -2147483648 <= select_features_#t~ret56#1 && select_features_#t~ret56#1 <= 2147483647;~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret56#1;havoc select_features_#t~ret56#1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:32,932 INFO L272 TraceCheckUtils]: 13: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} call select_features_#t~ret57#1 := select_one(); {34220#true} is VALID [2022-02-20 18:08:32,932 INFO L290 TraceCheckUtils]: 14: Hoare triple {34220#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {34220#true} is VALID [2022-02-20 18:08:32,932 INFO L290 TraceCheckUtils]: 15: Hoare triple {34220#true} assume true; {34220#true} is VALID [2022-02-20 18:08:32,932 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {34220#true} {34222#(= ~methaneLevelCritical~0 0)} #367#return; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:32,932 INFO L290 TraceCheckUtils]: 17: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume -2147483648 <= select_features_#t~ret57#1 && select_features_#t~ret57#1 <= 2147483647;~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret57#1;havoc select_features_#t~ret57#1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:32,933 INFO L272 TraceCheckUtils]: 18: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} call select_features_#t~ret58#1 := select_one(); {34220#true} is VALID [2022-02-20 18:08:32,933 INFO L290 TraceCheckUtils]: 19: Hoare triple {34220#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {34220#true} is VALID [2022-02-20 18:08:32,933 INFO L290 TraceCheckUtils]: 20: Hoare triple {34220#true} assume true; {34220#true} is VALID [2022-02-20 18:08:32,933 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {34220#true} {34222#(= ~methaneLevelCritical~0 0)} #369#return; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:32,933 INFO L290 TraceCheckUtils]: 22: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume -2147483648 <= select_features_#t~ret58#1 && select_features_#t~ret58#1 <= 2147483647;~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret58#1;havoc select_features_#t~ret58#1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:32,934 INFO L272 TraceCheckUtils]: 23: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} call select_features_#t~ret59#1 := select_one(); {34220#true} is VALID [2022-02-20 18:08:32,934 INFO L290 TraceCheckUtils]: 24: Hoare triple {34220#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {34220#true} is VALID [2022-02-20 18:08:32,934 INFO L290 TraceCheckUtils]: 25: Hoare triple {34220#true} assume true; {34220#true} is VALID [2022-02-20 18:08:32,934 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {34220#true} {34222#(= ~methaneLevelCritical~0 0)} #371#return; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:32,934 INFO L290 TraceCheckUtils]: 27: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume -2147483648 <= select_features_#t~ret59#1 && select_features_#t~ret59#1 <= 2147483647;~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret59#1;havoc select_features_#t~ret59#1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:32,935 INFO L272 TraceCheckUtils]: 28: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} call select_features_#t~ret60#1 := select_one(); {34220#true} is VALID [2022-02-20 18:08:32,935 INFO L290 TraceCheckUtils]: 29: Hoare triple {34220#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {34220#true} is VALID [2022-02-20 18:08:32,935 INFO L290 TraceCheckUtils]: 30: Hoare triple {34220#true} assume true; {34220#true} is VALID [2022-02-20 18:08:32,935 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {34220#true} {34222#(= ~methaneLevelCritical~0 0)} #373#return; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:32,936 INFO L290 TraceCheckUtils]: 32: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume -2147483648 <= select_features_#t~ret60#1 && select_features_#t~ret60#1 <= 2147483647;~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret60#1;havoc select_features_#t~ret60#1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:32,936 INFO L290 TraceCheckUtils]: 33: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~13#1;havoc valid_product_~retValue_acc~13#1;valid_product_~retValue_acc~13#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~13#1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:32,936 INFO L290 TraceCheckUtils]: 34: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} main_#t~ret24#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret24#1 && main_#t~ret24#1 <= 2147483647;main_~tmp~6#1 := main_#t~ret24#1;havoc main_#t~ret24#1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:32,936 INFO L290 TraceCheckUtils]: 35: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume 0 != main_~tmp~6#1;assume { :begin_inline_setup } true; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:32,937 INFO L290 TraceCheckUtils]: 36: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:32,937 INFO L290 TraceCheckUtils]: 37: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet25#1, test_#t~nondet26#1, test_#t~nondet27#1, test_#t~nondet28#1, test_~splverifierCounter~0#1, test_~tmp~7#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~7#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:32,937 INFO L290 TraceCheckUtils]: 38: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume !false; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:32,938 INFO L290 TraceCheckUtils]: 39: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume test_~splverifierCounter~0#1 < 4; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:32,938 INFO L290 TraceCheckUtils]: 40: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume -2147483648 <= test_#t~nondet25#1 && test_#t~nondet25#1 <= 2147483647;test_~tmp~7#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:32,938 INFO L290 TraceCheckUtils]: 41: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume 0 != test_~tmp~7#1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:32,938 INFO L272 TraceCheckUtils]: 42: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} call waterRise(); {34298#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:08:32,939 INFO L290 TraceCheckUtils]: 43: Hoare triple {34298#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {34220#true} is VALID [2022-02-20 18:08:32,939 INFO L290 TraceCheckUtils]: 44: Hoare triple {34220#true} assume true; {34220#true} is VALID [2022-02-20 18:08:32,939 INFO L284 TraceCheckUtils]: 45: Hoare quadruple {34220#true} {34222#(= ~methaneLevelCritical~0 0)} #375#return; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:32,939 INFO L290 TraceCheckUtils]: 46: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:32,940 INFO L290 TraceCheckUtils]: 47: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume !(0 != test_~tmp___0~2#1); {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:32,940 INFO L290 TraceCheckUtils]: 48: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:32,940 INFO L290 TraceCheckUtils]: 49: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume 0 != test_~tmp___2~0#1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:32,940 INFO L290 TraceCheckUtils]: 50: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume !(0 != ~__SELECTED_FEATURE_startCommand~0); {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:32,941 INFO L272 TraceCheckUtils]: 51: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} call timeShift(); {34299#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0) (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))} is VALID [2022-02-20 18:08:32,941 INFO L290 TraceCheckUtils]: 52: Hoare triple {34299#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0) (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))} assume !(0 != ~pumpRunning~0); {34220#true} is VALID [2022-02-20 18:08:32,941 INFO L290 TraceCheckUtils]: 53: Hoare triple {34220#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {34220#true} is VALID [2022-02-20 18:08:32,941 INFO L290 TraceCheckUtils]: 54: Hoare triple {34220#true} assume !(0 != ~__SELECTED_FEATURE_methaneAlarm~0); {34220#true} is VALID [2022-02-20 18:08:32,942 INFO L272 TraceCheckUtils]: 55: Hoare triple {34220#true} call processEnvironment__before__methaneAlarm(); {34327#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:32,942 INFO L290 TraceCheckUtils]: 56: Hoare triple {34327#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {34220#true} is VALID [2022-02-20 18:08:32,942 INFO L272 TraceCheckUtils]: 57: Hoare triple {34220#true} call processEnvironment__before__lowWaterSensor(); {34327#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:32,942 INFO L290 TraceCheckUtils]: 58: Hoare triple {34327#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret9#1, processEnvironment__role__highWaterSensor_~tmp~0#1;havoc processEnvironment__role__highWaterSensor_~tmp~0#1; {34220#true} is VALID [2022-02-20 18:08:32,942 INFO L290 TraceCheckUtils]: 59: Hoare triple {34220#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret22#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {34220#true} is VALID [2022-02-20 18:08:32,942 INFO L290 TraceCheckUtils]: 60: Hoare triple {34220#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {34220#true} is VALID [2022-02-20 18:08:32,943 INFO L290 TraceCheckUtils]: 61: Hoare triple {34220#true} isHighWaterLevel_#t~ret22#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret22#1 && isHighWaterLevel_#t~ret22#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret22#1;havoc isHighWaterLevel_#t~ret22#1; {34220#true} is VALID [2022-02-20 18:08:32,943 INFO L290 TraceCheckUtils]: 62: Hoare triple {34220#true} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1; {34220#true} is VALID [2022-02-20 18:08:32,943 INFO L290 TraceCheckUtils]: 63: Hoare triple {34220#true} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {34220#true} is VALID [2022-02-20 18:08:32,943 INFO L290 TraceCheckUtils]: 64: Hoare triple {34220#true} processEnvironment__role__highWaterSensor_#t~ret9#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret9#1 && processEnvironment__role__highWaterSensor_#t~ret9#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~0#1 := processEnvironment__role__highWaterSensor_#t~ret9#1;havoc processEnvironment__role__highWaterSensor_#t~ret9#1; {34220#true} is VALID [2022-02-20 18:08:32,943 INFO L290 TraceCheckUtils]: 65: Hoare triple {34220#true} assume 0 != processEnvironment__role__highWaterSensor_~tmp~0#1;assume { :begin_inline_activatePump } true; {34220#true} is VALID [2022-02-20 18:08:32,943 INFO L290 TraceCheckUtils]: 66: Hoare triple {34220#true} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {34220#true} is VALID [2022-02-20 18:08:32,944 INFO L272 TraceCheckUtils]: 67: Hoare triple {34220#true} call activatePump__before__methaneQuery(); {34327#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:32,944 INFO L290 TraceCheckUtils]: 68: Hoare triple {34327#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {34220#true} is VALID [2022-02-20 18:08:32,944 INFO L290 TraceCheckUtils]: 69: Hoare triple {34220#true} assume true; {34220#true} is VALID [2022-02-20 18:08:32,944 INFO L284 TraceCheckUtils]: 70: Hoare quadruple {34220#true} {34220#true} #339#return; {34220#true} is VALID [2022-02-20 18:08:32,944 INFO L290 TraceCheckUtils]: 71: Hoare triple {34220#true} assume { :end_inline_activatePump } true; {34220#true} is VALID [2022-02-20 18:08:32,944 INFO L290 TraceCheckUtils]: 72: Hoare triple {34220#true} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {34220#true} is VALID [2022-02-20 18:08:32,944 INFO L290 TraceCheckUtils]: 73: Hoare triple {34220#true} assume true; {34220#true} is VALID [2022-02-20 18:08:32,944 INFO L284 TraceCheckUtils]: 74: Hoare quadruple {34220#true} {34220#true} #391#return; {34220#true} is VALID [2022-02-20 18:08:32,945 INFO L290 TraceCheckUtils]: 75: Hoare triple {34220#true} assume true; {34220#true} is VALID [2022-02-20 18:08:32,945 INFO L284 TraceCheckUtils]: 76: Hoare quadruple {34220#true} {34220#true} #359#return; {34220#true} is VALID [2022-02-20 18:08:32,945 INFO L290 TraceCheckUtils]: 77: Hoare triple {34220#true} assume { :end_inline_processEnvironment } true; {34220#true} is VALID [2022-02-20 18:08:32,945 INFO L290 TraceCheckUtils]: 78: Hoare triple {34220#true} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret29#1, __utac_acc__Specification2_spec__2_#t~ret30#1, __utac_acc__Specification2_spec__2_~tmp~8#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~8#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {34220#true} is VALID [2022-02-20 18:08:32,945 INFO L272 TraceCheckUtils]: 79: Hoare triple {34220#true} call __utac_acc__Specification2_spec__2_#t~ret29#1 := isMethaneLevelCritical(); {34220#true} is VALID [2022-02-20 18:08:32,945 INFO L290 TraceCheckUtils]: 80: Hoare triple {34220#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {34348#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:32,946 INFO L290 TraceCheckUtils]: 81: Hoare triple {34348#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} assume true; {34348#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:32,946 INFO L284 TraceCheckUtils]: 82: Hoare quadruple {34348#(= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0)} {34220#true} #361#return; {34324#(= |timeShift___utac_acc__Specification2_spec__2_#t~ret29#1| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:32,946 INFO L290 TraceCheckUtils]: 83: Hoare triple {34324#(= |timeShift___utac_acc__Specification2_spec__2_#t~ret29#1| ~methaneLevelCritical~0)} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret29#1 && __utac_acc__Specification2_spec__2_#t~ret29#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~8#1 := __utac_acc__Specification2_spec__2_#t~ret29#1;havoc __utac_acc__Specification2_spec__2_#t~ret29#1; {34325#(= |timeShift___utac_acc__Specification2_spec__2_~tmp~8#1| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:08:32,947 INFO L290 TraceCheckUtils]: 84: Hoare triple {34325#(= |timeShift___utac_acc__Specification2_spec__2_~tmp~8#1| ~methaneLevelCritical~0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp~8#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~5#1;havoc isPumpRunning_~retValue_acc~5#1;isPumpRunning_~retValue_acc~5#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~5#1; {34326#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:08:32,947 INFO L290 TraceCheckUtils]: 85: Hoare triple {34326#(not (= ~methaneLevelCritical~0 0))} __utac_acc__Specification2_spec__2_#t~ret30#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret30#1 && __utac_acc__Specification2_spec__2_#t~ret30#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret30#1;havoc __utac_acc__Specification2_spec__2_#t~ret30#1; {34326#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:08:32,947 INFO L290 TraceCheckUtils]: 86: Hoare triple {34326#(not (= ~methaneLevelCritical~0 0))} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {34326#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:08:32,948 INFO L290 TraceCheckUtils]: 87: Hoare triple {34326#(not (= ~methaneLevelCritical~0 0))} assume !(0 != ~methAndRunningLastTime~0);~methAndRunningLastTime~0 := 1; {34326#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:08:32,948 INFO L290 TraceCheckUtils]: 88: Hoare triple {34326#(not (= ~methaneLevelCritical~0 0))} assume { :end_inline___utac_acc__Specification2_spec__2 } true; {34326#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:08:32,948 INFO L290 TraceCheckUtils]: 89: Hoare triple {34326#(not (= ~methaneLevelCritical~0 0))} assume true; {34326#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:08:32,949 INFO L284 TraceCheckUtils]: 90: Hoare quadruple {34326#(not (= ~methaneLevelCritical~0 0))} {34222#(= ~methaneLevelCritical~0 0)} #381#return; {34221#false} is VALID [2022-02-20 18:08:32,949 INFO L290 TraceCheckUtils]: 91: Hoare triple {34221#false} assume !false; {34221#false} is VALID [2022-02-20 18:08:32,949 INFO L290 TraceCheckUtils]: 92: Hoare triple {34221#false} assume test_~splverifierCounter~0#1 < 4; {34221#false} is VALID [2022-02-20 18:08:32,949 INFO L290 TraceCheckUtils]: 93: Hoare triple {34221#false} assume -2147483648 <= test_#t~nondet25#1 && test_#t~nondet25#1 <= 2147483647;test_~tmp~7#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {34221#false} is VALID [2022-02-20 18:08:32,949 INFO L290 TraceCheckUtils]: 94: Hoare triple {34221#false} assume !(0 != test_~tmp~7#1); {34221#false} is VALID [2022-02-20 18:08:32,949 INFO L290 TraceCheckUtils]: 95: Hoare triple {34221#false} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {34221#false} is VALID [2022-02-20 18:08:32,949 INFO L290 TraceCheckUtils]: 96: Hoare triple {34221#false} assume !(0 != test_~tmp___0~2#1); {34221#false} is VALID [2022-02-20 18:08:32,949 INFO L290 TraceCheckUtils]: 97: Hoare triple {34221#false} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {34221#false} is VALID [2022-02-20 18:08:32,950 INFO L290 TraceCheckUtils]: 98: Hoare triple {34221#false} assume 0 != test_~tmp___2~0#1; {34221#false} is VALID [2022-02-20 18:08:32,950 INFO L290 TraceCheckUtils]: 99: Hoare triple {34221#false} assume !(0 != ~__SELECTED_FEATURE_startCommand~0); {34221#false} is VALID [2022-02-20 18:08:32,950 INFO L272 TraceCheckUtils]: 100: Hoare triple {34221#false} call timeShift(); {34221#false} is VALID [2022-02-20 18:08:32,950 INFO L290 TraceCheckUtils]: 101: Hoare triple {34221#false} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {34221#false} is VALID [2022-02-20 18:08:32,950 INFO L290 TraceCheckUtils]: 102: Hoare triple {34221#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {34221#false} is VALID [2022-02-20 18:08:32,950 INFO L290 TraceCheckUtils]: 103: Hoare triple {34221#false} assume { :end_inline_lowerWaterLevel } true; {34221#false} is VALID [2022-02-20 18:08:32,950 INFO L290 TraceCheckUtils]: 104: Hoare triple {34221#false} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {34221#false} is VALID [2022-02-20 18:08:32,950 INFO L290 TraceCheckUtils]: 105: Hoare triple {34221#false} assume !(0 != ~__SELECTED_FEATURE_methaneAlarm~0); {34221#false} is VALID [2022-02-20 18:08:32,950 INFO L272 TraceCheckUtils]: 106: Hoare triple {34221#false} call processEnvironment__before__methaneAlarm(); {34327#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:32,951 INFO L290 TraceCheckUtils]: 107: Hoare triple {34327#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {34220#true} is VALID [2022-02-20 18:08:32,951 INFO L272 TraceCheckUtils]: 108: Hoare triple {34220#true} call processEnvironment__before__lowWaterSensor(); {34327#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:08:32,951 INFO L290 TraceCheckUtils]: 109: Hoare triple {34327#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret9#1, processEnvironment__role__highWaterSensor_~tmp~0#1;havoc processEnvironment__role__highWaterSensor_~tmp~0#1; {34220#true} is VALID [2022-02-20 18:08:32,951 INFO L290 TraceCheckUtils]: 110: Hoare triple {34220#true} assume !(0 == ~pumpRunning~0); {34220#true} is VALID [2022-02-20 18:08:32,951 INFO L272 TraceCheckUtils]: 111: Hoare triple {34220#true} call processEnvironment__before__highWaterSensor(); {34220#true} is VALID [2022-02-20 18:08:32,951 INFO L290 TraceCheckUtils]: 112: Hoare triple {34220#true} assume true; {34220#true} is VALID [2022-02-20 18:08:32,952 INFO L284 TraceCheckUtils]: 113: Hoare quadruple {34220#true} {34220#true} #343#return; {34220#true} is VALID [2022-02-20 18:08:32,952 INFO L290 TraceCheckUtils]: 114: Hoare triple {34220#true} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {34220#true} is VALID [2022-02-20 18:08:32,952 INFO L290 TraceCheckUtils]: 115: Hoare triple {34220#true} assume true; {34220#true} is VALID [2022-02-20 18:08:32,952 INFO L284 TraceCheckUtils]: 116: Hoare quadruple {34220#true} {34220#true} #391#return; {34220#true} is VALID [2022-02-20 18:08:32,952 INFO L290 TraceCheckUtils]: 117: Hoare triple {34220#true} assume true; {34220#true} is VALID [2022-02-20 18:08:32,952 INFO L284 TraceCheckUtils]: 118: Hoare quadruple {34220#true} {34221#false} #359#return; {34221#false} is VALID [2022-02-20 18:08:32,952 INFO L290 TraceCheckUtils]: 119: Hoare triple {34221#false} assume { :end_inline_processEnvironment } true; {34221#false} is VALID [2022-02-20 18:08:32,952 INFO L290 TraceCheckUtils]: 120: Hoare triple {34221#false} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret29#1, __utac_acc__Specification2_spec__2_#t~ret30#1, __utac_acc__Specification2_spec__2_~tmp~8#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~8#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {34221#false} is VALID [2022-02-20 18:08:32,953 INFO L272 TraceCheckUtils]: 121: Hoare triple {34221#false} call __utac_acc__Specification2_spec__2_#t~ret29#1 := isMethaneLevelCritical(); {34220#true} is VALID [2022-02-20 18:08:32,953 INFO L290 TraceCheckUtils]: 122: Hoare triple {34220#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {34220#true} is VALID [2022-02-20 18:08:32,953 INFO L290 TraceCheckUtils]: 123: Hoare triple {34220#true} assume true; {34220#true} is VALID [2022-02-20 18:08:32,953 INFO L284 TraceCheckUtils]: 124: Hoare quadruple {34220#true} {34221#false} #361#return; {34221#false} is VALID [2022-02-20 18:08:32,953 INFO L290 TraceCheckUtils]: 125: Hoare triple {34221#false} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret29#1 && __utac_acc__Specification2_spec__2_#t~ret29#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~8#1 := __utac_acc__Specification2_spec__2_#t~ret29#1;havoc __utac_acc__Specification2_spec__2_#t~ret29#1; {34221#false} is VALID [2022-02-20 18:08:32,953 INFO L290 TraceCheckUtils]: 126: Hoare triple {34221#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~8#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~5#1;havoc isPumpRunning_~retValue_acc~5#1;isPumpRunning_~retValue_acc~5#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~5#1; {34221#false} is VALID [2022-02-20 18:08:32,953 INFO L290 TraceCheckUtils]: 127: Hoare triple {34221#false} __utac_acc__Specification2_spec__2_#t~ret30#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret30#1 && __utac_acc__Specification2_spec__2_#t~ret30#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret30#1;havoc __utac_acc__Specification2_spec__2_#t~ret30#1; {34221#false} is VALID [2022-02-20 18:08:32,953 INFO L290 TraceCheckUtils]: 128: Hoare triple {34221#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {34221#false} is VALID [2022-02-20 18:08:32,954 INFO L290 TraceCheckUtils]: 129: Hoare triple {34221#false} assume 0 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {34221#false} is VALID [2022-02-20 18:08:32,954 INFO L290 TraceCheckUtils]: 130: Hoare triple {34221#false} assume !false; {34221#false} is VALID [2022-02-20 18:08:32,954 INFO L134 CoverageAnalysis]: Checked inductivity of 79 backedges. 22 proven. 2 refuted. 0 times theorem prover too weak. 55 trivial. 0 not checked. [2022-02-20 18:08:32,954 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:08:32,954 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [48222682] [2022-02-20 18:08:32,954 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [48222682] provided 0 perfect and 1 imperfect interpolant sequences [2022-02-20 18:08:32,955 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1199907621] [2022-02-20 18:08:32,955 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:08:32,955 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-02-20 18:08:32,955 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-20 18:08:32,956 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-02-20 18:08:32,957 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-02-20 18:08:33,072 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:33,074 INFO L263 TraceCheckSpWp]: Trace formula consists of 597 conjuncts, 11 conjunts are in the unsatisfiable core [2022-02-20 18:08:33,117 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:33,119 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 18:08:33,497 INFO L290 TraceCheckUtils]: 0: Hoare triple {34220#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(38, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(13, 9);call #Ultimate.allocInit(3, 10);call write~init~int(79, 10, 0, 1);call write~init~int(110, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(4, 11);call write~init~int(79, 11, 0, 1);call write~init~int(102, 11, 1, 1);call write~init~int(102, 11, 2, 1);call write~init~int(0, 11, 3, 1);call #Ultimate.allocInit(7, 12);call write~init~int(44, 12, 0, 1);call write~init~int(80, 12, 1, 1);call write~init~int(117, 12, 2, 1);call write~init~int(109, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(3, 13);call write~init~int(79, 13, 0, 1);call write~init~int(110, 13, 1, 1);call write~init~int(0, 13, 2, 1);call #Ultimate.allocInit(4, 14);call write~init~int(79, 14, 0, 1);call write~init~int(102, 14, 1, 1);call write~init~int(102, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(3, 15);call write~init~int(41, 15, 0, 1);call write~init~int(32, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(10, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~__SELECTED_FEATURE_base~0 := 0;~__SELECTED_FEATURE_highWaterSensor~0 := 0;~__SELECTED_FEATURE_lowWaterSensor~0 := 0;~__SELECTED_FEATURE_methaneQuery~0 := 0;~__SELECTED_FEATURE_methaneAlarm~0 := 0;~__SELECTED_FEATURE_stopCommand~0 := 0;~__SELECTED_FEATURE_startCommand~0 := 0;~__GUIDSL_ROOT_PRODUCTION~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4;~methAndRunningLastTime~0 := 0;~head~0.base, ~head~0.offset := 0, 0; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,498 INFO L290 TraceCheckUtils]: 1: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret24#1, main_~retValue_acc~8#1, main_~tmp~6#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~6#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,498 INFO L290 TraceCheckUtils]: 2: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret55#1, select_features_#t~ret56#1, select_features_#t~ret57#1, select_features_#t~ret58#1, select_features_#t~ret59#1, select_features_#t~ret60#1;~__SELECTED_FEATURE_base~0 := 1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,498 INFO L272 TraceCheckUtils]: 3: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} call select_features_#t~ret55#1 := select_one(); {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,499 INFO L290 TraceCheckUtils]: 4: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,499 INFO L290 TraceCheckUtils]: 5: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume true; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,499 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {34222#(= ~methaneLevelCritical~0 0)} {34222#(= ~methaneLevelCritical~0 0)} #363#return; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,500 INFO L290 TraceCheckUtils]: 7: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume -2147483648 <= select_features_#t~ret55#1 && select_features_#t~ret55#1 <= 2147483647;~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret55#1;havoc select_features_#t~ret55#1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,500 INFO L272 TraceCheckUtils]: 8: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} call select_features_#t~ret56#1 := select_one(); {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,500 INFO L290 TraceCheckUtils]: 9: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,501 INFO L290 TraceCheckUtils]: 10: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume true; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,501 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {34222#(= ~methaneLevelCritical~0 0)} {34222#(= ~methaneLevelCritical~0 0)} #365#return; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,501 INFO L290 TraceCheckUtils]: 12: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume -2147483648 <= select_features_#t~ret56#1 && select_features_#t~ret56#1 <= 2147483647;~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret56#1;havoc select_features_#t~ret56#1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,502 INFO L272 TraceCheckUtils]: 13: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} call select_features_#t~ret57#1 := select_one(); {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,502 INFO L290 TraceCheckUtils]: 14: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,502 INFO L290 TraceCheckUtils]: 15: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume true; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,502 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {34222#(= ~methaneLevelCritical~0 0)} {34222#(= ~methaneLevelCritical~0 0)} #367#return; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,503 INFO L290 TraceCheckUtils]: 17: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume -2147483648 <= select_features_#t~ret57#1 && select_features_#t~ret57#1 <= 2147483647;~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret57#1;havoc select_features_#t~ret57#1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,503 INFO L272 TraceCheckUtils]: 18: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} call select_features_#t~ret58#1 := select_one(); {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,503 INFO L290 TraceCheckUtils]: 19: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,504 INFO L290 TraceCheckUtils]: 20: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume true; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,504 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {34222#(= ~methaneLevelCritical~0 0)} {34222#(= ~methaneLevelCritical~0 0)} #369#return; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,504 INFO L290 TraceCheckUtils]: 22: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume -2147483648 <= select_features_#t~ret58#1 && select_features_#t~ret58#1 <= 2147483647;~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret58#1;havoc select_features_#t~ret58#1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,505 INFO L272 TraceCheckUtils]: 23: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} call select_features_#t~ret59#1 := select_one(); {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,505 INFO L290 TraceCheckUtils]: 24: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,505 INFO L290 TraceCheckUtils]: 25: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume true; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,506 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {34222#(= ~methaneLevelCritical~0 0)} {34222#(= ~methaneLevelCritical~0 0)} #371#return; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,506 INFO L290 TraceCheckUtils]: 27: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume -2147483648 <= select_features_#t~ret59#1 && select_features_#t~ret59#1 <= 2147483647;~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret59#1;havoc select_features_#t~ret59#1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,506 INFO L272 TraceCheckUtils]: 28: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} call select_features_#t~ret60#1 := select_one(); {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,507 INFO L290 TraceCheckUtils]: 29: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,507 INFO L290 TraceCheckUtils]: 30: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume true; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,507 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {34222#(= ~methaneLevelCritical~0 0)} {34222#(= ~methaneLevelCritical~0 0)} #373#return; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,508 INFO L290 TraceCheckUtils]: 32: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume -2147483648 <= select_features_#t~ret60#1 && select_features_#t~ret60#1 <= 2147483647;~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret60#1;havoc select_features_#t~ret60#1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,508 INFO L290 TraceCheckUtils]: 33: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~13#1;havoc valid_product_~retValue_acc~13#1;valid_product_~retValue_acc~13#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~13#1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,508 INFO L290 TraceCheckUtils]: 34: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} main_#t~ret24#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret24#1 && main_#t~ret24#1 <= 2147483647;main_~tmp~6#1 := main_#t~ret24#1;havoc main_#t~ret24#1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,508 INFO L290 TraceCheckUtils]: 35: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume 0 != main_~tmp~6#1;assume { :begin_inline_setup } true; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,509 INFO L290 TraceCheckUtils]: 36: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,509 INFO L290 TraceCheckUtils]: 37: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet25#1, test_#t~nondet26#1, test_#t~nondet27#1, test_#t~nondet28#1, test_~splverifierCounter~0#1, test_~tmp~7#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~7#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,509 INFO L290 TraceCheckUtils]: 38: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume !false; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,510 INFO L290 TraceCheckUtils]: 39: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume test_~splverifierCounter~0#1 < 4; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,510 INFO L290 TraceCheckUtils]: 40: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume -2147483648 <= test_#t~nondet25#1 && test_#t~nondet25#1 <= 2147483647;test_~tmp~7#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,510 INFO L290 TraceCheckUtils]: 41: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume 0 != test_~tmp~7#1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,510 INFO L272 TraceCheckUtils]: 42: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} call waterRise(); {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,511 INFO L290 TraceCheckUtils]: 43: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,511 INFO L290 TraceCheckUtils]: 44: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume true; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,511 INFO L284 TraceCheckUtils]: 45: Hoare quadruple {34222#(= ~methaneLevelCritical~0 0)} {34222#(= ~methaneLevelCritical~0 0)} #375#return; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,512 INFO L290 TraceCheckUtils]: 46: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,512 INFO L290 TraceCheckUtils]: 47: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume !(0 != test_~tmp___0~2#1); {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,512 INFO L290 TraceCheckUtils]: 48: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,513 INFO L290 TraceCheckUtils]: 49: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume 0 != test_~tmp___2~0#1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,513 INFO L290 TraceCheckUtils]: 50: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume !(0 != ~__SELECTED_FEATURE_startCommand~0); {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,513 INFO L272 TraceCheckUtils]: 51: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} call timeShift(); {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,513 INFO L290 TraceCheckUtils]: 52: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume !(0 != ~pumpRunning~0); {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,514 INFO L290 TraceCheckUtils]: 53: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,514 INFO L290 TraceCheckUtils]: 54: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume !(0 != ~__SELECTED_FEATURE_methaneAlarm~0); {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,514 INFO L272 TraceCheckUtils]: 55: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} call processEnvironment__before__methaneAlarm(); {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,515 INFO L290 TraceCheckUtils]: 56: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,515 INFO L272 TraceCheckUtils]: 57: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} call processEnvironment__before__lowWaterSensor(); {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,515 INFO L290 TraceCheckUtils]: 58: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret9#1, processEnvironment__role__highWaterSensor_~tmp~0#1;havoc processEnvironment__role__highWaterSensor_~tmp~0#1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,516 INFO L290 TraceCheckUtils]: 59: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret22#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,516 INFO L290 TraceCheckUtils]: 60: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,516 INFO L290 TraceCheckUtils]: 61: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} isHighWaterLevel_#t~ret22#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret22#1 && isHighWaterLevel_#t~ret22#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret22#1;havoc isHighWaterLevel_#t~ret22#1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,516 INFO L290 TraceCheckUtils]: 62: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,517 INFO L290 TraceCheckUtils]: 63: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,517 INFO L290 TraceCheckUtils]: 64: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} processEnvironment__role__highWaterSensor_#t~ret9#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret9#1 && processEnvironment__role__highWaterSensor_#t~ret9#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~0#1 := processEnvironment__role__highWaterSensor_#t~ret9#1;havoc processEnvironment__role__highWaterSensor_#t~ret9#1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,517 INFO L290 TraceCheckUtils]: 65: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume 0 != processEnvironment__role__highWaterSensor_~tmp~0#1;assume { :begin_inline_activatePump } true; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,518 INFO L290 TraceCheckUtils]: 66: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,518 INFO L272 TraceCheckUtils]: 67: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} call activatePump__before__methaneQuery(); {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,518 INFO L290 TraceCheckUtils]: 68: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} ~pumpRunning~0 := 1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,519 INFO L290 TraceCheckUtils]: 69: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume true; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,519 INFO L284 TraceCheckUtils]: 70: Hoare quadruple {34222#(= ~methaneLevelCritical~0 0)} {34222#(= ~methaneLevelCritical~0 0)} #339#return; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,519 INFO L290 TraceCheckUtils]: 71: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume { :end_inline_activatePump } true; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,519 INFO L290 TraceCheckUtils]: 72: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,520 INFO L290 TraceCheckUtils]: 73: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume true; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,520 INFO L284 TraceCheckUtils]: 74: Hoare quadruple {34222#(= ~methaneLevelCritical~0 0)} {34222#(= ~methaneLevelCritical~0 0)} #391#return; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,520 INFO L290 TraceCheckUtils]: 75: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume true; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,521 INFO L284 TraceCheckUtils]: 76: Hoare quadruple {34222#(= ~methaneLevelCritical~0 0)} {34222#(= ~methaneLevelCritical~0 0)} #359#return; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,521 INFO L290 TraceCheckUtils]: 77: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume { :end_inline_processEnvironment } true; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,521 INFO L290 TraceCheckUtils]: 78: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret29#1, __utac_acc__Specification2_spec__2_#t~ret30#1, __utac_acc__Specification2_spec__2_~tmp~8#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~8#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,522 INFO L272 TraceCheckUtils]: 79: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} call __utac_acc__Specification2_spec__2_#t~ret29#1 := isMethaneLevelCritical(); {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,522 INFO L290 TraceCheckUtils]: 80: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,522 INFO L290 TraceCheckUtils]: 81: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume true; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,523 INFO L284 TraceCheckUtils]: 82: Hoare quadruple {34222#(= ~methaneLevelCritical~0 0)} {34222#(= ~methaneLevelCritical~0 0)} #361#return; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,523 INFO L290 TraceCheckUtils]: 83: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret29#1 && __utac_acc__Specification2_spec__2_#t~ret29#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~8#1 := __utac_acc__Specification2_spec__2_#t~ret29#1;havoc __utac_acc__Specification2_spec__2_#t~ret29#1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,523 INFO L290 TraceCheckUtils]: 84: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp~8#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~5#1;havoc isPumpRunning_~retValue_acc~5#1;isPumpRunning_~retValue_acc~5#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~5#1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,523 INFO L290 TraceCheckUtils]: 85: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} __utac_acc__Specification2_spec__2_#t~ret30#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret30#1 && __utac_acc__Specification2_spec__2_#t~ret30#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret30#1;havoc __utac_acc__Specification2_spec__2_#t~ret30#1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,524 INFO L290 TraceCheckUtils]: 86: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,524 INFO L290 TraceCheckUtils]: 87: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume !(0 != ~methAndRunningLastTime~0);~methAndRunningLastTime~0 := 1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,524 INFO L290 TraceCheckUtils]: 88: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume { :end_inline___utac_acc__Specification2_spec__2 } true; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,525 INFO L290 TraceCheckUtils]: 89: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume true; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,527 INFO L284 TraceCheckUtils]: 90: Hoare quadruple {34222#(= ~methaneLevelCritical~0 0)} {34222#(= ~methaneLevelCritical~0 0)} #381#return; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,527 INFO L290 TraceCheckUtils]: 91: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume !false; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,527 INFO L290 TraceCheckUtils]: 92: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume test_~splverifierCounter~0#1 < 4; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,528 INFO L290 TraceCheckUtils]: 93: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume -2147483648 <= test_#t~nondet25#1 && test_#t~nondet25#1 <= 2147483647;test_~tmp~7#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,528 INFO L290 TraceCheckUtils]: 94: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume !(0 != test_~tmp~7#1); {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,528 INFO L290 TraceCheckUtils]: 95: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,528 INFO L290 TraceCheckUtils]: 96: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume !(0 != test_~tmp___0~2#1); {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,529 INFO L290 TraceCheckUtils]: 97: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,529 INFO L290 TraceCheckUtils]: 98: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume 0 != test_~tmp___2~0#1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,529 INFO L290 TraceCheckUtils]: 99: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume !(0 != ~__SELECTED_FEATURE_startCommand~0); {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,530 INFO L272 TraceCheckUtils]: 100: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} call timeShift(); {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,530 INFO L290 TraceCheckUtils]: 101: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,530 INFO L290 TraceCheckUtils]: 102: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,530 INFO L290 TraceCheckUtils]: 103: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume { :end_inline_lowerWaterLevel } true; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,531 INFO L290 TraceCheckUtils]: 104: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,531 INFO L290 TraceCheckUtils]: 105: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume !(0 != ~__SELECTED_FEATURE_methaneAlarm~0); {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,531 INFO L272 TraceCheckUtils]: 106: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} call processEnvironment__before__methaneAlarm(); {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,532 INFO L290 TraceCheckUtils]: 107: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,532 INFO L272 TraceCheckUtils]: 108: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} call processEnvironment__before__lowWaterSensor(); {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,532 INFO L290 TraceCheckUtils]: 109: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret9#1, processEnvironment__role__highWaterSensor_~tmp~0#1;havoc processEnvironment__role__highWaterSensor_~tmp~0#1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,533 INFO L290 TraceCheckUtils]: 110: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume !(0 == ~pumpRunning~0); {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,533 INFO L272 TraceCheckUtils]: 111: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} call processEnvironment__before__highWaterSensor(); {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,533 INFO L290 TraceCheckUtils]: 112: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume true; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,534 INFO L284 TraceCheckUtils]: 113: Hoare quadruple {34222#(= ~methaneLevelCritical~0 0)} {34222#(= ~methaneLevelCritical~0 0)} #343#return; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,534 INFO L290 TraceCheckUtils]: 114: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,534 INFO L290 TraceCheckUtils]: 115: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume true; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,535 INFO L284 TraceCheckUtils]: 116: Hoare quadruple {34222#(= ~methaneLevelCritical~0 0)} {34222#(= ~methaneLevelCritical~0 0)} #391#return; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,535 INFO L290 TraceCheckUtils]: 117: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume true; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,535 INFO L284 TraceCheckUtils]: 118: Hoare quadruple {34222#(= ~methaneLevelCritical~0 0)} {34222#(= ~methaneLevelCritical~0 0)} #359#return; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,535 INFO L290 TraceCheckUtils]: 119: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume { :end_inline_processEnvironment } true; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,536 INFO L290 TraceCheckUtils]: 120: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret29#1, __utac_acc__Specification2_spec__2_#t~ret30#1, __utac_acc__Specification2_spec__2_~tmp~8#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~8#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,536 INFO L272 TraceCheckUtils]: 121: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} call __utac_acc__Specification2_spec__2_#t~ret29#1 := isMethaneLevelCritical(); {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,536 INFO L290 TraceCheckUtils]: 122: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {34728#(and (= ~methaneLevelCritical~0 0) (= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0))} is VALID [2022-02-20 18:08:33,537 INFO L290 TraceCheckUtils]: 123: Hoare triple {34728#(and (= ~methaneLevelCritical~0 0) (= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0))} assume true; {34728#(and (= ~methaneLevelCritical~0 0) (= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0))} is VALID [2022-02-20 18:08:33,537 INFO L284 TraceCheckUtils]: 124: Hoare quadruple {34728#(and (= ~methaneLevelCritical~0 0) (= |isMethaneLevelCritical_#res| ~methaneLevelCritical~0))} {34222#(= ~methaneLevelCritical~0 0)} #361#return; {34735#(= |timeShift___utac_acc__Specification2_spec__2_#t~ret29#1| 0)} is VALID [2022-02-20 18:08:33,538 INFO L290 TraceCheckUtils]: 125: Hoare triple {34735#(= |timeShift___utac_acc__Specification2_spec__2_#t~ret29#1| 0)} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret29#1 && __utac_acc__Specification2_spec__2_#t~ret29#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~8#1 := __utac_acc__Specification2_spec__2_#t~ret29#1;havoc __utac_acc__Specification2_spec__2_#t~ret29#1; {34739#(= |timeShift___utac_acc__Specification2_spec__2_~tmp~8#1| 0)} is VALID [2022-02-20 18:08:33,538 INFO L290 TraceCheckUtils]: 126: Hoare triple {34739#(= |timeShift___utac_acc__Specification2_spec__2_~tmp~8#1| 0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp~8#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~5#1;havoc isPumpRunning_~retValue_acc~5#1;isPumpRunning_~retValue_acc~5#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~5#1; {34221#false} is VALID [2022-02-20 18:08:33,538 INFO L290 TraceCheckUtils]: 127: Hoare triple {34221#false} __utac_acc__Specification2_spec__2_#t~ret30#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret30#1 && __utac_acc__Specification2_spec__2_#t~ret30#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret30#1;havoc __utac_acc__Specification2_spec__2_#t~ret30#1; {34221#false} is VALID [2022-02-20 18:08:33,538 INFO L290 TraceCheckUtils]: 128: Hoare triple {34221#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {34221#false} is VALID [2022-02-20 18:08:33,538 INFO L290 TraceCheckUtils]: 129: Hoare triple {34221#false} assume 0 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {34221#false} is VALID [2022-02-20 18:08:33,538 INFO L290 TraceCheckUtils]: 130: Hoare triple {34221#false} assume !false; {34221#false} is VALID [2022-02-20 18:08:33,539 INFO L134 CoverageAnalysis]: Checked inductivity of 79 backedges. 5 proven. 2 refuted. 0 times theorem prover too weak. 72 trivial. 0 not checked. [2022-02-20 18:08:33,539 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-02-20 18:08:33,985 INFO L290 TraceCheckUtils]: 130: Hoare triple {34221#false} assume !false; {34221#false} is VALID [2022-02-20 18:08:33,985 INFO L290 TraceCheckUtils]: 129: Hoare triple {34221#false} assume 0 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {34221#false} is VALID [2022-02-20 18:08:33,985 INFO L290 TraceCheckUtils]: 128: Hoare triple {34221#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {34221#false} is VALID [2022-02-20 18:08:33,985 INFO L290 TraceCheckUtils]: 127: Hoare triple {34221#false} __utac_acc__Specification2_spec__2_#t~ret30#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret30#1 && __utac_acc__Specification2_spec__2_#t~ret30#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret30#1;havoc __utac_acc__Specification2_spec__2_#t~ret30#1; {34221#false} is VALID [2022-02-20 18:08:33,986 INFO L290 TraceCheckUtils]: 126: Hoare triple {34739#(= |timeShift___utac_acc__Specification2_spec__2_~tmp~8#1| 0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp~8#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~5#1;havoc isPumpRunning_~retValue_acc~5#1;isPumpRunning_~retValue_acc~5#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~5#1; {34221#false} is VALID [2022-02-20 18:08:33,986 INFO L290 TraceCheckUtils]: 125: Hoare triple {34735#(= |timeShift___utac_acc__Specification2_spec__2_#t~ret29#1| 0)} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret29#1 && __utac_acc__Specification2_spec__2_#t~ret29#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~8#1 := __utac_acc__Specification2_spec__2_#t~ret29#1;havoc __utac_acc__Specification2_spec__2_#t~ret29#1; {34739#(= |timeShift___utac_acc__Specification2_spec__2_~tmp~8#1| 0)} is VALID [2022-02-20 18:08:33,987 INFO L284 TraceCheckUtils]: 124: Hoare quadruple {34776#(or (not (= ~methaneLevelCritical~0 0)) (= |isMethaneLevelCritical_#res| 0))} {34222#(= ~methaneLevelCritical~0 0)} #361#return; {34735#(= |timeShift___utac_acc__Specification2_spec__2_#t~ret29#1| 0)} is VALID [2022-02-20 18:08:33,987 INFO L290 TraceCheckUtils]: 123: Hoare triple {34776#(or (not (= ~methaneLevelCritical~0 0)) (= |isMethaneLevelCritical_#res| 0))} assume true; {34776#(or (not (= ~methaneLevelCritical~0 0)) (= |isMethaneLevelCritical_#res| 0))} is VALID [2022-02-20 18:08:33,987 INFO L290 TraceCheckUtils]: 122: Hoare triple {34220#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {34776#(or (not (= ~methaneLevelCritical~0 0)) (= |isMethaneLevelCritical_#res| 0))} is VALID [2022-02-20 18:08:33,987 INFO L272 TraceCheckUtils]: 121: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} call __utac_acc__Specification2_spec__2_#t~ret29#1 := isMethaneLevelCritical(); {34220#true} is VALID [2022-02-20 18:08:33,988 INFO L290 TraceCheckUtils]: 120: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret29#1, __utac_acc__Specification2_spec__2_#t~ret30#1, __utac_acc__Specification2_spec__2_~tmp~8#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~8#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,988 INFO L290 TraceCheckUtils]: 119: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume { :end_inline_processEnvironment } true; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,988 INFO L284 TraceCheckUtils]: 118: Hoare quadruple {34220#true} {34222#(= ~methaneLevelCritical~0 0)} #359#return; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,988 INFO L290 TraceCheckUtils]: 117: Hoare triple {34220#true} assume true; {34220#true} is VALID [2022-02-20 18:08:33,988 INFO L284 TraceCheckUtils]: 116: Hoare quadruple {34220#true} {34220#true} #391#return; {34220#true} is VALID [2022-02-20 18:08:33,988 INFO L290 TraceCheckUtils]: 115: Hoare triple {34220#true} assume true; {34220#true} is VALID [2022-02-20 18:08:33,989 INFO L290 TraceCheckUtils]: 114: Hoare triple {34220#true} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {34220#true} is VALID [2022-02-20 18:08:33,989 INFO L284 TraceCheckUtils]: 113: Hoare quadruple {34220#true} {34220#true} #343#return; {34220#true} is VALID [2022-02-20 18:08:33,989 INFO L290 TraceCheckUtils]: 112: Hoare triple {34220#true} assume true; {34220#true} is VALID [2022-02-20 18:08:33,989 INFO L272 TraceCheckUtils]: 111: Hoare triple {34220#true} call processEnvironment__before__highWaterSensor(); {34220#true} is VALID [2022-02-20 18:08:33,989 INFO L290 TraceCheckUtils]: 110: Hoare triple {34220#true} assume !(0 == ~pumpRunning~0); {34220#true} is VALID [2022-02-20 18:08:33,989 INFO L290 TraceCheckUtils]: 109: Hoare triple {34220#true} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret9#1, processEnvironment__role__highWaterSensor_~tmp~0#1;havoc processEnvironment__role__highWaterSensor_~tmp~0#1; {34220#true} is VALID [2022-02-20 18:08:33,989 INFO L272 TraceCheckUtils]: 108: Hoare triple {34220#true} call processEnvironment__before__lowWaterSensor(); {34220#true} is VALID [2022-02-20 18:08:33,989 INFO L290 TraceCheckUtils]: 107: Hoare triple {34220#true} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {34220#true} is VALID [2022-02-20 18:08:33,989 INFO L272 TraceCheckUtils]: 106: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} call processEnvironment__before__methaneAlarm(); {34220#true} is VALID [2022-02-20 18:08:33,994 INFO L290 TraceCheckUtils]: 105: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume !(0 != ~__SELECTED_FEATURE_methaneAlarm~0); {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,995 INFO L290 TraceCheckUtils]: 104: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,995 INFO L290 TraceCheckUtils]: 103: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume { :end_inline_lowerWaterLevel } true; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,995 INFO L290 TraceCheckUtils]: 102: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,996 INFO L290 TraceCheckUtils]: 101: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,996 INFO L272 TraceCheckUtils]: 100: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} call timeShift(); {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,996 INFO L290 TraceCheckUtils]: 99: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume !(0 != ~__SELECTED_FEATURE_startCommand~0); {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,996 INFO L290 TraceCheckUtils]: 98: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume 0 != test_~tmp___2~0#1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,997 INFO L290 TraceCheckUtils]: 97: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,997 INFO L290 TraceCheckUtils]: 96: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume !(0 != test_~tmp___0~2#1); {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,997 INFO L290 TraceCheckUtils]: 95: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,997 INFO L290 TraceCheckUtils]: 94: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume !(0 != test_~tmp~7#1); {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,998 INFO L290 TraceCheckUtils]: 93: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume -2147483648 <= test_#t~nondet25#1 && test_#t~nondet25#1 <= 2147483647;test_~tmp~7#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,998 INFO L290 TraceCheckUtils]: 92: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume test_~splverifierCounter~0#1 < 4; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,998 INFO L290 TraceCheckUtils]: 91: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume !false; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,999 INFO L284 TraceCheckUtils]: 90: Hoare quadruple {34220#true} {34222#(= ~methaneLevelCritical~0 0)} #381#return; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:33,999 INFO L290 TraceCheckUtils]: 89: Hoare triple {34220#true} assume true; {34220#true} is VALID [2022-02-20 18:08:33,999 INFO L290 TraceCheckUtils]: 88: Hoare triple {34220#true} assume { :end_inline___utac_acc__Specification2_spec__2 } true; {34220#true} is VALID [2022-02-20 18:08:33,999 INFO L290 TraceCheckUtils]: 87: Hoare triple {34220#true} assume !(0 != ~methAndRunningLastTime~0);~methAndRunningLastTime~0 := 1; {34220#true} is VALID [2022-02-20 18:08:33,999 INFO L290 TraceCheckUtils]: 86: Hoare triple {34220#true} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {34220#true} is VALID [2022-02-20 18:08:33,999 INFO L290 TraceCheckUtils]: 85: Hoare triple {34220#true} __utac_acc__Specification2_spec__2_#t~ret30#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret30#1 && __utac_acc__Specification2_spec__2_#t~ret30#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret30#1;havoc __utac_acc__Specification2_spec__2_#t~ret30#1; {34220#true} is VALID [2022-02-20 18:08:33,999 INFO L290 TraceCheckUtils]: 84: Hoare triple {34220#true} assume 0 != __utac_acc__Specification2_spec__2_~tmp~8#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~5#1;havoc isPumpRunning_~retValue_acc~5#1;isPumpRunning_~retValue_acc~5#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~5#1; {34220#true} is VALID [2022-02-20 18:08:33,999 INFO L290 TraceCheckUtils]: 83: Hoare triple {34220#true} assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret29#1 && __utac_acc__Specification2_spec__2_#t~ret29#1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~8#1 := __utac_acc__Specification2_spec__2_#t~ret29#1;havoc __utac_acc__Specification2_spec__2_#t~ret29#1; {34220#true} is VALID [2022-02-20 18:08:33,999 INFO L284 TraceCheckUtils]: 82: Hoare quadruple {34220#true} {34220#true} #361#return; {34220#true} is VALID [2022-02-20 18:08:33,999 INFO L290 TraceCheckUtils]: 81: Hoare triple {34220#true} assume true; {34220#true} is VALID [2022-02-20 18:08:33,999 INFO L290 TraceCheckUtils]: 80: Hoare triple {34220#true} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {34220#true} is VALID [2022-02-20 18:08:33,999 INFO L272 TraceCheckUtils]: 79: Hoare triple {34220#true} call __utac_acc__Specification2_spec__2_#t~ret29#1 := isMethaneLevelCritical(); {34220#true} is VALID [2022-02-20 18:08:33,999 INFO L290 TraceCheckUtils]: 78: Hoare triple {34220#true} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret29#1, __utac_acc__Specification2_spec__2_#t~ret30#1, __utac_acc__Specification2_spec__2_~tmp~8#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~8#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {34220#true} is VALID [2022-02-20 18:08:34,000 INFO L290 TraceCheckUtils]: 77: Hoare triple {34220#true} assume { :end_inline_processEnvironment } true; {34220#true} is VALID [2022-02-20 18:08:34,000 INFO L284 TraceCheckUtils]: 76: Hoare quadruple {34220#true} {34220#true} #359#return; {34220#true} is VALID [2022-02-20 18:08:34,000 INFO L290 TraceCheckUtils]: 75: Hoare triple {34220#true} assume true; {34220#true} is VALID [2022-02-20 18:08:34,000 INFO L284 TraceCheckUtils]: 74: Hoare quadruple {34220#true} {34220#true} #391#return; {34220#true} is VALID [2022-02-20 18:08:34,000 INFO L290 TraceCheckUtils]: 73: Hoare triple {34220#true} assume true; {34220#true} is VALID [2022-02-20 18:08:34,000 INFO L290 TraceCheckUtils]: 72: Hoare triple {34220#true} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {34220#true} is VALID [2022-02-20 18:08:34,000 INFO L290 TraceCheckUtils]: 71: Hoare triple {34220#true} assume { :end_inline_activatePump } true; {34220#true} is VALID [2022-02-20 18:08:34,000 INFO L284 TraceCheckUtils]: 70: Hoare quadruple {34220#true} {34220#true} #339#return; {34220#true} is VALID [2022-02-20 18:08:34,001 INFO L290 TraceCheckUtils]: 69: Hoare triple {34220#true} assume true; {34220#true} is VALID [2022-02-20 18:08:34,001 INFO L290 TraceCheckUtils]: 68: Hoare triple {34220#true} ~pumpRunning~0 := 1; {34220#true} is VALID [2022-02-20 18:08:34,001 INFO L272 TraceCheckUtils]: 67: Hoare triple {34220#true} call activatePump__before__methaneQuery(); {34220#true} is VALID [2022-02-20 18:08:34,001 INFO L290 TraceCheckUtils]: 66: Hoare triple {34220#true} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {34220#true} is VALID [2022-02-20 18:08:34,001 INFO L290 TraceCheckUtils]: 65: Hoare triple {34220#true} assume 0 != processEnvironment__role__highWaterSensor_~tmp~0#1;assume { :begin_inline_activatePump } true; {34220#true} is VALID [2022-02-20 18:08:34,001 INFO L290 TraceCheckUtils]: 64: Hoare triple {34220#true} processEnvironment__role__highWaterSensor_#t~ret9#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret9#1 && processEnvironment__role__highWaterSensor_#t~ret9#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~0#1 := processEnvironment__role__highWaterSensor_#t~ret9#1;havoc processEnvironment__role__highWaterSensor_#t~ret9#1; {34220#true} is VALID [2022-02-20 18:08:34,001 INFO L290 TraceCheckUtils]: 63: Hoare triple {34220#true} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {34220#true} is VALID [2022-02-20 18:08:34,001 INFO L290 TraceCheckUtils]: 62: Hoare triple {34220#true} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1; {34220#true} is VALID [2022-02-20 18:08:34,001 INFO L290 TraceCheckUtils]: 61: Hoare triple {34220#true} isHighWaterLevel_#t~ret22#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret22#1 && isHighWaterLevel_#t~ret22#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret22#1;havoc isHighWaterLevel_#t~ret22#1; {34220#true} is VALID [2022-02-20 18:08:34,002 INFO L290 TraceCheckUtils]: 60: Hoare triple {34220#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {34220#true} is VALID [2022-02-20 18:08:34,002 INFO L290 TraceCheckUtils]: 59: Hoare triple {34220#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret22#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {34220#true} is VALID [2022-02-20 18:08:34,002 INFO L290 TraceCheckUtils]: 58: Hoare triple {34220#true} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret9#1, processEnvironment__role__highWaterSensor_~tmp~0#1;havoc processEnvironment__role__highWaterSensor_~tmp~0#1; {34220#true} is VALID [2022-02-20 18:08:34,002 INFO L272 TraceCheckUtils]: 57: Hoare triple {34220#true} call processEnvironment__before__lowWaterSensor(); {34220#true} is VALID [2022-02-20 18:08:34,002 INFO L290 TraceCheckUtils]: 56: Hoare triple {34220#true} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {34220#true} is VALID [2022-02-20 18:08:34,002 INFO L272 TraceCheckUtils]: 55: Hoare triple {34220#true} call processEnvironment__before__methaneAlarm(); {34220#true} is VALID [2022-02-20 18:08:34,002 INFO L290 TraceCheckUtils]: 54: Hoare triple {34220#true} assume !(0 != ~__SELECTED_FEATURE_methaneAlarm~0); {34220#true} is VALID [2022-02-20 18:08:34,002 INFO L290 TraceCheckUtils]: 53: Hoare triple {34220#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {34220#true} is VALID [2022-02-20 18:08:34,003 INFO L290 TraceCheckUtils]: 52: Hoare triple {34220#true} assume !(0 != ~pumpRunning~0); {34220#true} is VALID [2022-02-20 18:08:34,003 INFO L272 TraceCheckUtils]: 51: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} call timeShift(); {34220#true} is VALID [2022-02-20 18:08:34,007 INFO L290 TraceCheckUtils]: 50: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume !(0 != ~__SELECTED_FEATURE_startCommand~0); {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:34,008 INFO L290 TraceCheckUtils]: 49: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume 0 != test_~tmp___2~0#1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:34,008 INFO L290 TraceCheckUtils]: 48: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:34,008 INFO L290 TraceCheckUtils]: 47: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume !(0 != test_~tmp___0~2#1); {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:34,008 INFO L290 TraceCheckUtils]: 46: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:34,009 INFO L284 TraceCheckUtils]: 45: Hoare quadruple {34220#true} {34222#(= ~methaneLevelCritical~0 0)} #375#return; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:34,009 INFO L290 TraceCheckUtils]: 44: Hoare triple {34220#true} assume true; {34220#true} is VALID [2022-02-20 18:08:34,009 INFO L290 TraceCheckUtils]: 43: Hoare triple {34220#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {34220#true} is VALID [2022-02-20 18:08:34,009 INFO L272 TraceCheckUtils]: 42: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} call waterRise(); {34220#true} is VALID [2022-02-20 18:08:34,010 INFO L290 TraceCheckUtils]: 41: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume 0 != test_~tmp~7#1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:34,010 INFO L290 TraceCheckUtils]: 40: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume -2147483648 <= test_#t~nondet25#1 && test_#t~nondet25#1 <= 2147483647;test_~tmp~7#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:34,010 INFO L290 TraceCheckUtils]: 39: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume test_~splverifierCounter~0#1 < 4; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:34,010 INFO L290 TraceCheckUtils]: 38: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume !false; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:34,011 INFO L290 TraceCheckUtils]: 37: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet25#1, test_#t~nondet26#1, test_#t~nondet27#1, test_#t~nondet28#1, test_~splverifierCounter~0#1, test_~tmp~7#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~7#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:34,011 INFO L290 TraceCheckUtils]: 36: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:34,011 INFO L290 TraceCheckUtils]: 35: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume 0 != main_~tmp~6#1;assume { :begin_inline_setup } true; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:34,012 INFO L290 TraceCheckUtils]: 34: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} main_#t~ret24#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret24#1 && main_#t~ret24#1 <= 2147483647;main_~tmp~6#1 := main_#t~ret24#1;havoc main_#t~ret24#1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:34,012 INFO L290 TraceCheckUtils]: 33: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~13#1;havoc valid_product_~retValue_acc~13#1;valid_product_~retValue_acc~13#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~13#1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:34,012 INFO L290 TraceCheckUtils]: 32: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume -2147483648 <= select_features_#t~ret60#1 && select_features_#t~ret60#1 <= 2147483647;~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret60#1;havoc select_features_#t~ret60#1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:34,013 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {34220#true} {34222#(= ~methaneLevelCritical~0 0)} #373#return; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:34,013 INFO L290 TraceCheckUtils]: 30: Hoare triple {34220#true} assume true; {34220#true} is VALID [2022-02-20 18:08:34,013 INFO L290 TraceCheckUtils]: 29: Hoare triple {34220#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {34220#true} is VALID [2022-02-20 18:08:34,013 INFO L272 TraceCheckUtils]: 28: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} call select_features_#t~ret60#1 := select_one(); {34220#true} is VALID [2022-02-20 18:08:34,013 INFO L290 TraceCheckUtils]: 27: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume -2147483648 <= select_features_#t~ret59#1 && select_features_#t~ret59#1 <= 2147483647;~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret59#1;havoc select_features_#t~ret59#1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:34,014 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {34220#true} {34222#(= ~methaneLevelCritical~0 0)} #371#return; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:34,014 INFO L290 TraceCheckUtils]: 25: Hoare triple {34220#true} assume true; {34220#true} is VALID [2022-02-20 18:08:34,014 INFO L290 TraceCheckUtils]: 24: Hoare triple {34220#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {34220#true} is VALID [2022-02-20 18:08:34,014 INFO L272 TraceCheckUtils]: 23: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} call select_features_#t~ret59#1 := select_one(); {34220#true} is VALID [2022-02-20 18:08:34,015 INFO L290 TraceCheckUtils]: 22: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume -2147483648 <= select_features_#t~ret58#1 && select_features_#t~ret58#1 <= 2147483647;~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret58#1;havoc select_features_#t~ret58#1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:34,015 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {34220#true} {34222#(= ~methaneLevelCritical~0 0)} #369#return; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:34,015 INFO L290 TraceCheckUtils]: 20: Hoare triple {34220#true} assume true; {34220#true} is VALID [2022-02-20 18:08:34,015 INFO L290 TraceCheckUtils]: 19: Hoare triple {34220#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {34220#true} is VALID [2022-02-20 18:08:34,015 INFO L272 TraceCheckUtils]: 18: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} call select_features_#t~ret58#1 := select_one(); {34220#true} is VALID [2022-02-20 18:08:34,016 INFO L290 TraceCheckUtils]: 17: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume -2147483648 <= select_features_#t~ret57#1 && select_features_#t~ret57#1 <= 2147483647;~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret57#1;havoc select_features_#t~ret57#1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:34,016 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {34220#true} {34222#(= ~methaneLevelCritical~0 0)} #367#return; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:34,016 INFO L290 TraceCheckUtils]: 15: Hoare triple {34220#true} assume true; {34220#true} is VALID [2022-02-20 18:08:34,016 INFO L290 TraceCheckUtils]: 14: Hoare triple {34220#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {34220#true} is VALID [2022-02-20 18:08:34,017 INFO L272 TraceCheckUtils]: 13: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} call select_features_#t~ret57#1 := select_one(); {34220#true} is VALID [2022-02-20 18:08:34,017 INFO L290 TraceCheckUtils]: 12: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume -2147483648 <= select_features_#t~ret56#1 && select_features_#t~ret56#1 <= 2147483647;~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret56#1;havoc select_features_#t~ret56#1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:34,017 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {34220#true} {34222#(= ~methaneLevelCritical~0 0)} #365#return; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:34,017 INFO L290 TraceCheckUtils]: 10: Hoare triple {34220#true} assume true; {34220#true} is VALID [2022-02-20 18:08:34,017 INFO L290 TraceCheckUtils]: 9: Hoare triple {34220#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {34220#true} is VALID [2022-02-20 18:08:34,018 INFO L272 TraceCheckUtils]: 8: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} call select_features_#t~ret56#1 := select_one(); {34220#true} is VALID [2022-02-20 18:08:34,018 INFO L290 TraceCheckUtils]: 7: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume -2147483648 <= select_features_#t~ret55#1 && select_features_#t~ret55#1 <= 2147483647;~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret55#1;havoc select_features_#t~ret55#1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:34,018 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {34220#true} {34222#(= ~methaneLevelCritical~0 0)} #363#return; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:34,019 INFO L290 TraceCheckUtils]: 5: Hoare triple {34220#true} assume true; {34220#true} is VALID [2022-02-20 18:08:34,019 INFO L290 TraceCheckUtils]: 4: Hoare triple {34220#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {34220#true} is VALID [2022-02-20 18:08:34,019 INFO L272 TraceCheckUtils]: 3: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} call select_features_#t~ret55#1 := select_one(); {34220#true} is VALID [2022-02-20 18:08:34,019 INFO L290 TraceCheckUtils]: 2: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret55#1, select_features_#t~ret56#1, select_features_#t~ret57#1, select_features_#t~ret58#1, select_features_#t~ret59#1, select_features_#t~ret60#1;~__SELECTED_FEATURE_base~0 := 1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:34,019 INFO L290 TraceCheckUtils]: 1: Hoare triple {34222#(= ~methaneLevelCritical~0 0)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret24#1, main_~retValue_acc~8#1, main_~tmp~6#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~6#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:34,020 INFO L290 TraceCheckUtils]: 0: Hoare triple {34220#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(38, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(13, 9);call #Ultimate.allocInit(3, 10);call write~init~int(79, 10, 0, 1);call write~init~int(110, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(4, 11);call write~init~int(79, 11, 0, 1);call write~init~int(102, 11, 1, 1);call write~init~int(102, 11, 2, 1);call write~init~int(0, 11, 3, 1);call #Ultimate.allocInit(7, 12);call write~init~int(44, 12, 0, 1);call write~init~int(80, 12, 1, 1);call write~init~int(117, 12, 2, 1);call write~init~int(109, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(3, 13);call write~init~int(79, 13, 0, 1);call write~init~int(110, 13, 1, 1);call write~init~int(0, 13, 2, 1);call #Ultimate.allocInit(4, 14);call write~init~int(79, 14, 0, 1);call write~init~int(102, 14, 1, 1);call write~init~int(102, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(3, 15);call write~init~int(41, 15, 0, 1);call write~init~int(32, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(10, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~__SELECTED_FEATURE_base~0 := 0;~__SELECTED_FEATURE_highWaterSensor~0 := 0;~__SELECTED_FEATURE_lowWaterSensor~0 := 0;~__SELECTED_FEATURE_methaneQuery~0 := 0;~__SELECTED_FEATURE_methaneAlarm~0 := 0;~__SELECTED_FEATURE_stopCommand~0 := 0;~__SELECTED_FEATURE_startCommand~0 := 0;~__GUIDSL_ROOT_PRODUCTION~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4;~methAndRunningLastTime~0 := 0;~head~0.base, ~head~0.offset := 0, 0; {34222#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:08:34,020 INFO L134 CoverageAnalysis]: Checked inductivity of 79 backedges. 14 proven. 0 refuted. 0 times theorem prover too weak. 65 trivial. 0 not checked. [2022-02-20 18:08:34,020 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1199907621] provided 1 perfect and 1 imperfect interpolant sequences [2022-02-20 18:08:34,020 INFO L191 FreeRefinementEngine]: Found 1 perfect and 2 imperfect interpolant sequences. [2022-02-20 18:08:34,021 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [10, 5] total 14 [2022-02-20 18:08:34,021 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [848826160] [2022-02-20 18:08:34,021 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:08:34,021 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 12.5) internal successors, (75), 5 states have internal predecessors, (75), 2 states have call successors, (16), 2 states have call predecessors, (16), 2 states have return successors, (15), 3 states have call predecessors, (15), 2 states have call successors, (15) Word has length 131 [2022-02-20 18:08:34,022 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:08:34,022 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 12.5) internal successors, (75), 5 states have internal predecessors, (75), 2 states have call successors, (16), 2 states have call predecessors, (16), 2 states have return successors, (15), 3 states have call predecessors, (15), 2 states have call successors, (15) [2022-02-20 18:08:34,096 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 106 edges. 106 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:34,096 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-02-20 18:08:34,097 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:08:34,097 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-02-20 18:08:34,097 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=32, Invalid=150, Unknown=0, NotChecked=0, Total=182 [2022-02-20 18:08:34,097 INFO L87 Difference]: Start difference. First operand 969 states and 1335 transitions. Second operand has 6 states, 6 states have (on average 12.5) internal successors, (75), 5 states have internal predecessors, (75), 2 states have call successors, (16), 2 states have call predecessors, (16), 2 states have return successors, (15), 3 states have call predecessors, (15), 2 states have call successors, (15) [2022-02-20 18:08:35,037 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:35,037 INFO L93 Difference]: Finished difference Result 2824 states and 3996 transitions. [2022-02-20 18:08:35,038 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-02-20 18:08:35,038 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 12.5) internal successors, (75), 5 states have internal predecessors, (75), 2 states have call successors, (16), 2 states have call predecessors, (16), 2 states have return successors, (15), 3 states have call predecessors, (15), 2 states have call successors, (15) Word has length 131 [2022-02-20 18:08:35,038 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:08:35,038 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 12.5) internal successors, (75), 5 states have internal predecessors, (75), 2 states have call successors, (16), 2 states have call predecessors, (16), 2 states have return successors, (15), 3 states have call predecessors, (15), 2 states have call successors, (15) [2022-02-20 18:08:35,041 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 457 transitions. [2022-02-20 18:08:35,041 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 12.5) internal successors, (75), 5 states have internal predecessors, (75), 2 states have call successors, (16), 2 states have call predecessors, (16), 2 states have return successors, (15), 3 states have call predecessors, (15), 2 states have call successors, (15) [2022-02-20 18:08:35,043 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 457 transitions. [2022-02-20 18:08:35,043 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states and 457 transitions. [2022-02-20 18:08:35,291 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 457 edges. 457 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:35,457 INFO L225 Difference]: With dead ends: 2824 [2022-02-20 18:08:35,457 INFO L226 Difference]: Without dead ends: 1878 [2022-02-20 18:08:35,459 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 301 GetRequests, 286 SyntacticMatches, 1 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 24 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=42, Invalid=198, Unknown=0, NotChecked=0, Total=240 [2022-02-20 18:08:35,460 INFO L933 BasicCegarLoop]: 190 mSDtfsCounter, 124 mSDsluCounter, 640 mSDsCounter, 0 mSdLazyCounter, 83 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 126 SdHoareTripleChecker+Valid, 830 SdHoareTripleChecker+Invalid, 89 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 83 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-02-20 18:08:35,460 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [126 Valid, 830 Invalid, 89 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 83 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-02-20 18:08:35,462 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1878 states. [2022-02-20 18:08:35,641 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1878 to 1808. [2022-02-20 18:08:35,641 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:08:35,644 INFO L82 GeneralOperation]: Start isEquivalent. First operand 1878 states. Second operand has 1808 states, 1323 states have (on average 1.2509448223733939) internal successors, (1655), 1456 states have internal predecessors, (1655), 278 states have call successors, (278), 182 states have call predecessors, (278), 206 states have return successors, (548), 282 states have call predecessors, (548), 278 states have call successors, (548) [2022-02-20 18:08:35,646 INFO L74 IsIncluded]: Start isIncluded. First operand 1878 states. Second operand has 1808 states, 1323 states have (on average 1.2509448223733939) internal successors, (1655), 1456 states have internal predecessors, (1655), 278 states have call successors, (278), 182 states have call predecessors, (278), 206 states have return successors, (548), 282 states have call predecessors, (548), 278 states have call successors, (548) [2022-02-20 18:08:35,647 INFO L87 Difference]: Start difference. First operand 1878 states. Second operand has 1808 states, 1323 states have (on average 1.2509448223733939) internal successors, (1655), 1456 states have internal predecessors, (1655), 278 states have call successors, (278), 182 states have call predecessors, (278), 206 states have return successors, (548), 282 states have call predecessors, (548), 278 states have call successors, (548) [2022-02-20 18:08:35,752 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:35,753 INFO L93 Difference]: Finished difference Result 1878 states and 2581 transitions. [2022-02-20 18:08:35,753 INFO L276 IsEmpty]: Start isEmpty. Operand 1878 states and 2581 transitions. [2022-02-20 18:08:35,757 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:35,758 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:35,760 INFO L74 IsIncluded]: Start isIncluded. First operand has 1808 states, 1323 states have (on average 1.2509448223733939) internal successors, (1655), 1456 states have internal predecessors, (1655), 278 states have call successors, (278), 182 states have call predecessors, (278), 206 states have return successors, (548), 282 states have call predecessors, (548), 278 states have call successors, (548) Second operand 1878 states. [2022-02-20 18:08:35,762 INFO L87 Difference]: Start difference. First operand has 1808 states, 1323 states have (on average 1.2509448223733939) internal successors, (1655), 1456 states have internal predecessors, (1655), 278 states have call successors, (278), 182 states have call predecessors, (278), 206 states have return successors, (548), 282 states have call predecessors, (548), 278 states have call successors, (548) Second operand 1878 states. [2022-02-20 18:08:35,894 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:35,894 INFO L93 Difference]: Finished difference Result 1878 states and 2581 transitions. [2022-02-20 18:08:35,895 INFO L276 IsEmpty]: Start isEmpty. Operand 1878 states and 2581 transitions. [2022-02-20 18:08:35,899 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:35,900 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:35,900 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:08:35,900 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:08:35,903 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1808 states, 1323 states have (on average 1.2509448223733939) internal successors, (1655), 1456 states have internal predecessors, (1655), 278 states have call successors, (278), 182 states have call predecessors, (278), 206 states have return successors, (548), 282 states have call predecessors, (548), 278 states have call successors, (548) [2022-02-20 18:08:36,062 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1808 states to 1808 states and 2481 transitions. [2022-02-20 18:08:36,063 INFO L78 Accepts]: Start accepts. Automaton has 1808 states and 2481 transitions. Word has length 131 [2022-02-20 18:08:36,063 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:08:36,063 INFO L470 AbstractCegarLoop]: Abstraction has 1808 states and 2481 transitions. [2022-02-20 18:08:36,063 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 12.5) internal successors, (75), 5 states have internal predecessors, (75), 2 states have call successors, (16), 2 states have call predecessors, (16), 2 states have return successors, (15), 3 states have call predecessors, (15), 2 states have call successors, (15) [2022-02-20 18:08:36,063 INFO L276 IsEmpty]: Start isEmpty. Operand 1808 states and 2481 transitions. [2022-02-20 18:08:36,068 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 136 [2022-02-20 18:08:36,068 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:08:36,068 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:08:36,089 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-02-20 18:08:36,283 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-02-20 18:08:36,283 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:08:36,284 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:08:36,284 INFO L85 PathProgramCache]: Analyzing trace with hash -819425897, now seen corresponding path program 1 times [2022-02-20 18:08:36,284 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:08:36,284 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1606528692] [2022-02-20 18:08:36,284 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:08:36,284 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:08:36,321 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-02-20 18:08:36,321 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-02-20 18:08:36,337 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-02-20 18:08:36,377 INFO L138 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-02-20 18:08:36,378 INFO L628 BasicCegarLoop]: Counterexample is feasible [2022-02-20 18:08:36,378 INFO L764 garLoopResultBuilder]: Registering result UNSAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-02-20 18:08:36,380 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2022-02-20 18:08:36,382 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:08:36,384 INFO L180 ceAbstractionStarter]: Computing trace abstraction results [2022-02-20 18:08:36,437 FATAL L489 DefaultTranslator]: Callstack has procedure call flag but succeeding procedure is empty at [CALL] call #t~ret55 := select_one(); [2022-02-20 18:08:36,438 FATAL L? ?]: The Plugin de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction has thrown an exception: java.lang.AssertionError: callstack broken after backtranslation by InlinerBacktranslator at de.uni_freiburg.informatik.ultimate.boogie.procedureinliner.backtranslation.InlinerBacktranslator.translateProgramExecution(InlinerBacktranslator.java:230) at de.uni_freiburg.informatik.ultimate.core.coreplugin.services.ModelTranslationContainer.translateProgramExecution(ModelTranslationContainer.java:216) at de.uni_freiburg.informatik.ultimate.core.coreplugin.services.ModelTranslationContainer.translateProgramExecution(ModelTranslationContainer.java:225) at de.uni_freiburg.informatik.ultimate.core.coreplugin.services.ModelTranslationContainer.translateProgramExecution(ModelTranslationContainer.java:225) at de.uni_freiburg.informatik.ultimate.core.coreplugin.services.ModelTranslationContainer.translateProgramExecution(ModelTranslationContainer.java:206) at de.uni_freiburg.informatik.ultimate.core.lib.results.CounterExampleResult.getProgramExecutionAsString(CounterExampleResult.java:155) at de.uni_freiburg.informatik.ultimate.core.lib.results.CounterExampleResult.getLongDescription(CounterExampleResult.java:134) at de.uni_freiburg.informatik.ultimate.core.coreplugin.services.ResultService.reportResult(ResultService.java:86) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.CegarLoopResultReporter.reportResult(CegarLoopResultReporter.java:141) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionStarter.reportLocationResults(TraceAbstractionStarter.java:607) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionStarter.runCegarLoops(TraceAbstractionStarter.java:182) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionStarter.(TraceAbstractionStarter.java:156) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver.finish(TraceAbstractionObserver.java:123) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.runObserver(PluginConnector.java:168) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.runTool(PluginConnector.java:151) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.run(PluginConnector.java:128) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.executePluginConnector(ToolchainWalker.java:232) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.processPlugin(ToolchainWalker.java:226) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.walkUnprotected(ToolchainWalker.java:142) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.walk(ToolchainWalker.java:104) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainManager$Toolchain.processToolchain(ToolchainManager.java:320) at de.uni_freiburg.informatik.ultimate.core.coreplugin.toolchain.DefaultToolchainJob.run(DefaultToolchainJob.java:145) at org.eclipse.core.internal.jobs.Worker.run(Worker.java:63) [2022-02-20 18:08:36,444 INFO L158 Benchmark]: Toolchain (without parser) took 18367.88ms. Allocated memory was 94.4MB in the beginning and 237.0MB in the end (delta: 142.6MB). Free memory was 73.8MB in the beginning and 150.5MB in the end (delta: -76.6MB). Peak memory consumption was 65.3MB. Max. memory is 16.1GB. [2022-02-20 18:08:36,444 INFO L158 Benchmark]: CDTParser took 0.17ms. Allocated memory is still 94.4MB. Free memory was 70.6MB in the beginning and 70.5MB in the end (delta: 42.0kB). There was no memory consumed. Max. memory is 16.1GB. [2022-02-20 18:08:36,444 INFO L158 Benchmark]: CACSL2BoogieTranslator took 383.21ms. Allocated memory is still 94.4MB. Free memory was 73.6MB in the beginning and 58.3MB in the end (delta: 15.3MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. [2022-02-20 18:08:36,444 INFO L158 Benchmark]: Boogie Procedure Inliner took 43.62ms. Allocated memory is still 94.4MB. Free memory was 58.3MB in the beginning and 55.0MB in the end (delta: 3.4MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-02-20 18:08:36,445 INFO L158 Benchmark]: Boogie Preprocessor took 32.83ms. Allocated memory is still 94.4MB. Free memory was 55.0MB in the beginning and 53.1MB in the end (delta: 1.9MB). There was no memory consumed. Max. memory is 16.1GB. [2022-02-20 18:08:36,451 INFO L158 Benchmark]: RCFGBuilder took 518.92ms. Allocated memory was 94.4MB in the beginning and 113.2MB in the end (delta: 18.9MB). Free memory was 52.9MB in the beginning and 81.1MB in the end (delta: -28.3MB). Peak memory consumption was 19.7MB. Max. memory is 16.1GB. [2022-02-20 18:08:36,451 INFO L158 Benchmark]: TraceAbstraction took 17381.49ms. Allocated memory was 113.2MB in the beginning and 237.0MB in the end (delta: 123.7MB). Free memory was 80.6MB in the beginning and 150.5MB in the end (delta: -69.8MB). Peak memory consumption was 55.9MB. Max. memory is 16.1GB. [2022-02-20 18:08:36,452 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - AssertionsEnabledResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.17ms. Allocated memory is still 94.4MB. Free memory was 70.6MB in the beginning and 70.5MB in the end (delta: 42.0kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 383.21ms. Allocated memory is still 94.4MB. Free memory was 73.6MB in the beginning and 58.3MB in the end (delta: 15.3MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 43.62ms. Allocated memory is still 94.4MB. Free memory was 58.3MB in the beginning and 55.0MB in the end (delta: 3.4MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 32.83ms. Allocated memory is still 94.4MB. Free memory was 55.0MB in the beginning and 53.1MB in the end (delta: 1.9MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 518.92ms. Allocated memory was 94.4MB in the beginning and 113.2MB in the end (delta: 18.9MB). Free memory was 52.9MB in the beginning and 81.1MB in the end (delta: -28.3MB). Peak memory consumption was 19.7MB. Max. memory is 16.1GB. * TraceAbstraction took 17381.49ms. Allocated memory was 113.2MB in the beginning and 237.0MB in the end (delta: 123.7MB). Free memory was 80.6MB in the beginning and 150.5MB in the end (delta: -69.8MB). Peak memory consumption was 55.9MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - ExceptionOrErrorResult: AssertionError: callstack broken after backtranslation by InlinerBacktranslator de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: AssertionError: callstack broken after backtranslation by InlinerBacktranslator: de.uni_freiburg.informatik.ultimate.boogie.procedureinliner.backtranslation.InlinerBacktranslator.translateProgramExecution(InlinerBacktranslator.java:230) RESULT: Ultimate could not prove your program: Toolchain returned no result. [2022-02-20 18:08:36,481 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis ### Bit-precise run ### Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -ea -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec2_productSimulator.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 4f3466b08a64c7fddf78a299dda71b27bda6ead813da06152b5ee1cea2f1c203 --- Real Ultimate output --- This is Ultimate 0.2.2-dev-03d7b7b [2022-02-20 18:08:38,118 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-02-20 18:08:38,120 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-02-20 18:08:38,147 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-02-20 18:08:38,147 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-02-20 18:08:38,150 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-02-20 18:08:38,153 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-02-20 18:08:38,160 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-02-20 18:08:38,161 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-02-20 18:08:38,161 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-02-20 18:08:38,162 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-02-20 18:08:38,175 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-02-20 18:08:38,175 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-02-20 18:08:38,178 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-02-20 18:08:38,188 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-02-20 18:08:38,189 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-02-20 18:08:38,189 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-02-20 18:08:38,193 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-02-20 18:08:38,194 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-02-20 18:08:38,197 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-02-20 18:08:38,198 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-02-20 18:08:38,200 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-02-20 18:08:38,201 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-02-20 18:08:38,202 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-02-20 18:08:38,204 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-02-20 18:08:38,206 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-02-20 18:08:38,206 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-02-20 18:08:38,207 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-02-20 18:08:38,208 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-02-20 18:08:38,208 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-02-20 18:08:38,208 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-02-20 18:08:38,209 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-02-20 18:08:38,210 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-02-20 18:08:38,210 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-02-20 18:08:38,211 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-02-20 18:08:38,212 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-02-20 18:08:38,212 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-02-20 18:08:38,212 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-02-20 18:08:38,213 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-02-20 18:08:38,213 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-02-20 18:08:38,216 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-02-20 18:08:38,216 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Bitvector.epf [2022-02-20 18:08:38,240 INFO L113 SettingsManager]: Loading preferences was successful [2022-02-20 18:08:38,242 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-02-20 18:08:38,242 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-02-20 18:08:38,243 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-02-20 18:08:38,243 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-02-20 18:08:38,243 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-02-20 18:08:38,244 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-02-20 18:08:38,244 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-02-20 18:08:38,244 INFO L138 SettingsManager]: * Use SBE=true [2022-02-20 18:08:38,245 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-02-20 18:08:38,245 INFO L138 SettingsManager]: * sizeof long=4 [2022-02-20 18:08:38,245 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-02-20 18:08:38,246 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-02-20 18:08:38,246 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-02-20 18:08:38,246 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-02-20 18:08:38,246 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-02-20 18:08:38,246 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-02-20 18:08:38,246 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2022-02-20 18:08:38,247 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2022-02-20 18:08:38,247 INFO L138 SettingsManager]: * sizeof long double=12 [2022-02-20 18:08:38,247 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-02-20 18:08:38,247 INFO L138 SettingsManager]: * Use constant arrays=true [2022-02-20 18:08:38,247 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-02-20 18:08:38,247 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-02-20 18:08:38,248 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-02-20 18:08:38,248 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-02-20 18:08:38,248 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-02-20 18:08:38,248 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-02-20 18:08:38,248 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-02-20 18:08:38,249 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-02-20 18:08:38,249 INFO L138 SettingsManager]: * Trace refinement strategy=WOLF [2022-02-20 18:08:38,249 INFO L138 SettingsManager]: * Command for external solver=cvc4 --incremental --print-success --lang smt [2022-02-20 18:08:38,249 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2022-02-20 18:08:38,249 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-02-20 18:08:38,249 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-02-20 18:08:38,250 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-02-20 18:08:38,250 INFO L138 SettingsManager]: * Logic for external solver=AUFBV WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 4f3466b08a64c7fddf78a299dda71b27bda6ead813da06152b5ee1cea2f1c203 [2022-02-20 18:08:38,556 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-02-20 18:08:38,577 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-02-20 18:08:38,579 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-02-20 18:08:38,580 INFO L271 PluginConnector]: Initializing CDTParser... [2022-02-20 18:08:38,582 INFO L275 PluginConnector]: CDTParser initialized [2022-02-20 18:08:38,583 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec2_productSimulator.cil.c [2022-02-20 18:08:38,640 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/1a0c47f5c/9d27529fcb0143ecb0949df7dce99e3d/FLAGfcb268e56 [2022-02-20 18:08:39,166 INFO L306 CDTParser]: Found 1 translation units. [2022-02-20 18:08:39,167 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_productSimulator.cil.c [2022-02-20 18:08:39,179 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/1a0c47f5c/9d27529fcb0143ecb0949df7dce99e3d/FLAGfcb268e56 [2022-02-20 18:08:39,647 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/1a0c47f5c/9d27529fcb0143ecb0949df7dce99e3d [2022-02-20 18:08:39,649 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-02-20 18:08:39,650 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-02-20 18:08:39,651 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-02-20 18:08:39,651 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-02-20 18:08:39,665 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-02-20 18:08:39,667 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.02 06:08:39" (1/1) ... [2022-02-20 18:08:39,667 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@38253e66 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:08:39, skipping insertion in model container [2022-02-20 18:08:39,675 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.02 06:08:39" (1/1) ... [2022-02-20 18:08:39,681 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-02-20 18:08:39,725 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-02-20 18:08:39,929 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_productSimulator.cil.c[20836,20849] [2022-02-20 18:08:39,936 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-02-20 18:08:39,953 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2022-02-20 18:08:39,969 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-02-20 18:08:40,064 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_productSimulator.cil.c[20836,20849] [2022-02-20 18:08:40,071 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-02-20 18:08:40,078 INFO L203 MainTranslator]: Completed pre-run [2022-02-20 18:08:40,128 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_productSimulator.cil.c[20836,20849] [2022-02-20 18:08:40,130 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-02-20 18:08:40,150 INFO L208 MainTranslator]: Completed translation [2022-02-20 18:08:40,151 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:08:40 WrapperNode [2022-02-20 18:08:40,151 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-02-20 18:08:40,152 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-02-20 18:08:40,152 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-02-20 18:08:40,152 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-02-20 18:08:40,158 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:08:40" (1/1) ... [2022-02-20 18:08:40,189 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:08:40" (1/1) ... [2022-02-20 18:08:40,230 INFO L137 Inliner]: procedures = 66, calls = 178, calls flagged for inlining = 28, calls inlined = 25, statements flattened = 319 [2022-02-20 18:08:40,231 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-02-20 18:08:40,231 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-02-20 18:08:40,232 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-02-20 18:08:40,232 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-02-20 18:08:40,239 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:08:40" (1/1) ... [2022-02-20 18:08:40,239 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:08:40" (1/1) ... [2022-02-20 18:08:40,250 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:08:40" (1/1) ... [2022-02-20 18:08:40,254 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:08:40" (1/1) ... [2022-02-20 18:08:40,262 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:08:40" (1/1) ... [2022-02-20 18:08:40,285 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:08:40" (1/1) ... [2022-02-20 18:08:40,300 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:08:40" (1/1) ... [2022-02-20 18:08:40,302 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-02-20 18:08:40,303 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-02-20 18:08:40,303 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-02-20 18:08:40,303 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-02-20 18:08:40,304 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:08:40" (1/1) ... [2022-02-20 18:08:40,312 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-02-20 18:08:40,320 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-20 18:08:40,330 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-02-20 18:08:40,335 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-02-20 18:08:40,359 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-02-20 18:08:40,359 INFO L130 BoogieDeclarations]: Found specification of procedure activatePump__before__methaneQuery [2022-02-20 18:08:40,360 INFO L138 BoogieDeclarations]: Found implementation of procedure activatePump__before__methaneQuery [2022-02-20 18:08:40,360 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-02-20 18:08:40,360 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-02-20 18:08:40,360 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-02-20 18:08:40,360 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-02-20 18:08:40,360 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-02-20 18:08:40,360 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-02-20 18:08:40,361 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__before__highWaterSensor [2022-02-20 18:08:40,361 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__before__highWaterSensor [2022-02-20 18:08:40,361 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-02-20 18:08:40,361 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-02-20 18:08:40,361 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__before__methaneAlarm [2022-02-20 18:08:40,361 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__before__methaneAlarm [2022-02-20 18:08:40,361 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2022-02-20 18:08:40,361 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__before__lowWaterSensor [2022-02-20 18:08:40,362 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__before__lowWaterSensor [2022-02-20 18:08:40,362 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2022-02-20 18:08:40,362 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2022-02-20 18:08:40,362 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-02-20 18:08:40,362 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-02-20 18:08:40,363 INFO L130 BoogieDeclarations]: Found specification of procedure select_one [2022-02-20 18:08:40,363 INFO L138 BoogieDeclarations]: Found implementation of procedure select_one [2022-02-20 18:08:40,363 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-02-20 18:08:40,363 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-02-20 18:08:40,363 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-02-20 18:08:40,364 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-02-20 18:08:40,451 INFO L234 CfgBuilder]: Building ICFG [2022-02-20 18:08:40,453 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-02-20 18:08:40,753 INFO L275 CfgBuilder]: Performing block encoding [2022-02-20 18:08:40,761 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-02-20 18:08:40,761 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-02-20 18:08:40,763 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.02 06:08:40 BoogieIcfgContainer [2022-02-20 18:08:40,763 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-02-20 18:08:40,765 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-02-20 18:08:40,765 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-02-20 18:08:40,767 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-02-20 18:08:40,767 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 20.02 06:08:39" (1/3) ... [2022-02-20 18:08:40,768 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@632df8ee and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.02 06:08:40, skipping insertion in model container [2022-02-20 18:08:40,768 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:08:40" (2/3) ... [2022-02-20 18:08:40,768 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@632df8ee and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.02 06:08:40, skipping insertion in model container [2022-02-20 18:08:40,769 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.02 06:08:40" (3/3) ... [2022-02-20 18:08:40,770 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec2_productSimulator.cil.c [2022-02-20 18:08:40,774 INFO L205 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-02-20 18:08:40,774 INFO L164 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-02-20 18:08:40,827 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-02-20 18:08:40,838 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2022-02-20 18:08:40,838 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-02-20 18:08:40,859 INFO L276 IsEmpty]: Start isEmpty. Operand has 145 states, 101 states have (on average 1.3663366336633664) internal successors, (138), 117 states have internal predecessors, (138), 30 states have call successors, (30), 12 states have call predecessors, (30), 12 states have return successors, (30), 25 states have call predecessors, (30), 30 states have call successors, (30) [2022-02-20 18:08:40,868 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-02-20 18:08:40,869 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:08:40,870 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:08:40,870 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:08:40,875 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:08:40,876 INFO L85 PathProgramCache]: Analyzing trace with hash -733132601, now seen corresponding path program 1 times [2022-02-20 18:08:40,887 INFO L126 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-02-20 18:08:40,888 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [244958095] [2022-02-20 18:08:40,889 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:08:40,889 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-02-20 18:08:40,890 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-02-20 18:08:40,892 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-02-20 18:08:40,893 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (2)] Waiting until timeout for monitored process [2022-02-20 18:08:41,021 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:41,026 INFO L263 TraceCheckSpWp]: Trace formula consists of 219 conjuncts, 1 conjunts are in the unsatisfiable core [2022-02-20 18:08:41,053 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:41,059 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 18:08:41,249 INFO L290 TraceCheckUtils]: 0: Hoare triple {148#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0bv32, 0bv32;assume 0bv1 == #valid[0bv32];assume ~bvult32(0bv32, #StackHeapBarrier);call #Ultimate.allocInit(2bv32, 1bv32);call write~init~intINTTYPE1(48bv8, 1bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 1bv32, 1bv32, 1bv32);call #Ultimate.allocInit(38bv32, 2bv32);call #Ultimate.allocInit(12bv32, 3bv32);call #Ultimate.allocInit(13bv32, 4bv32);call #Ultimate.allocInit(7bv32, 5bv32);call write~init~intINTTYPE1(44bv8, 5bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(77bv8, 5bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(101bv8, 5bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(116bv8, 5bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(104bv8, 5bv32, 4bv32, 1bv32);call write~init~intINTTYPE1(58bv8, 5bv32, 5bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 5bv32, 6bv32, 1bv32);call #Ultimate.allocInit(5bv32, 6bv32);call write~init~intINTTYPE1(67bv8, 6bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(82bv8, 6bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(73bv8, 6bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(84bv8, 6bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 6bv32, 4bv32, 1bv32);call #Ultimate.allocInit(3bv32, 7bv32);call write~init~intINTTYPE1(79bv8, 7bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(75bv8, 7bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 7bv32, 2bv32, 1bv32);call #Ultimate.allocInit(2bv32, 8bv32);call write~init~intINTTYPE1(41bv8, 8bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 8bv32, 1bv32, 1bv32);call #Ultimate.allocInit(13bv32, 9bv32);call #Ultimate.allocInit(3bv32, 10bv32);call write~init~intINTTYPE1(79bv8, 10bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(110bv8, 10bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 10bv32, 2bv32, 1bv32);call #Ultimate.allocInit(4bv32, 11bv32);call write~init~intINTTYPE1(79bv8, 11bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 11bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 11bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 11bv32, 3bv32, 1bv32);call #Ultimate.allocInit(7bv32, 12bv32);call write~init~intINTTYPE1(44bv8, 12bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(80bv8, 12bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(117bv8, 12bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(109bv8, 12bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(112bv8, 12bv32, 4bv32, 1bv32);call write~init~intINTTYPE1(58bv8, 12bv32, 5bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 12bv32, 6bv32, 1bv32);call #Ultimate.allocInit(3bv32, 13bv32);call write~init~intINTTYPE1(79bv8, 13bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(110bv8, 13bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 13bv32, 2bv32, 1bv32);call #Ultimate.allocInit(4bv32, 14bv32);call write~init~intINTTYPE1(79bv8, 14bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 14bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 14bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 14bv32, 3bv32, 1bv32);call #Ultimate.allocInit(3bv32, 15bv32);call write~init~intINTTYPE1(41bv8, 15bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(32bv8, 15bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 15bv32, 2bv32, 1bv32);call #Ultimate.allocInit(2bv32, 16bv32);call write~init~intINTTYPE1(10bv8, 16bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 16bv32, 1bv32, 1bv32);call #Ultimate.allocInit(30bv32, 17bv32);call #Ultimate.allocInit(9bv32, 18bv32);call #Ultimate.allocInit(21bv32, 19bv32);call #Ultimate.allocInit(30bv32, 20bv32);call #Ultimate.allocInit(9bv32, 21bv32);call #Ultimate.allocInit(21bv32, 22bv32);call #Ultimate.allocInit(30bv32, 23bv32);call #Ultimate.allocInit(9bv32, 24bv32);call #Ultimate.allocInit(25bv32, 25bv32);call #Ultimate.allocInit(30bv32, 26bv32);call #Ultimate.allocInit(9bv32, 27bv32);call #Ultimate.allocInit(25bv32, 28bv32);~__SELECTED_FEATURE_base~0 := 0bv32;~__SELECTED_FEATURE_highWaterSensor~0 := 0bv32;~__SELECTED_FEATURE_lowWaterSensor~0 := 0bv32;~__SELECTED_FEATURE_methaneQuery~0 := 0bv32;~__SELECTED_FEATURE_methaneAlarm~0 := 0bv32;~__SELECTED_FEATURE_stopCommand~0 := 0bv32;~__SELECTED_FEATURE_startCommand~0 := 0bv32;~__GUIDSL_ROOT_PRODUCTION~0 := 0bv32;~waterLevel~0 := 1bv32;~methaneLevelCritical~0 := 0bv32;~pumpRunning~0 := 0bv32;~systemActive~0 := 1bv32;~cleanupTimeShifts~0 := 4bv32;~methAndRunningLastTime~0 := 0bv32;~head~0.base, ~head~0.offset := 0bv32, 0bv32; {148#true} is VALID [2022-02-20 18:08:41,250 INFO L290 TraceCheckUtils]: 1: Hoare triple {148#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret24#1, main_~retValue_acc~8#1, main_~tmp~6#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~6#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1bv32; {148#true} is VALID [2022-02-20 18:08:41,250 INFO L290 TraceCheckUtils]: 2: Hoare triple {148#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret55#1, select_features_#t~ret56#1, select_features_#t~ret57#1, select_features_#t~ret58#1, select_features_#t~ret59#1, select_features_#t~ret60#1;~__SELECTED_FEATURE_base~0 := 1bv32; {148#true} is VALID [2022-02-20 18:08:41,250 INFO L272 TraceCheckUtils]: 3: Hoare triple {148#true} call select_features_#t~ret55#1 := select_one(); {148#true} is VALID [2022-02-20 18:08:41,250 INFO L290 TraceCheckUtils]: 4: Hoare triple {148#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {148#true} is VALID [2022-02-20 18:08:41,251 INFO L290 TraceCheckUtils]: 5: Hoare triple {148#true} assume true; {148#true} is VALID [2022-02-20 18:08:41,251 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {148#true} {148#true} #363#return; {148#true} is VALID [2022-02-20 18:08:41,251 INFO L290 TraceCheckUtils]: 7: Hoare triple {148#true} ~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret55#1;havoc select_features_#t~ret55#1; {148#true} is VALID [2022-02-20 18:08:41,251 INFO L272 TraceCheckUtils]: 8: Hoare triple {148#true} call select_features_#t~ret56#1 := select_one(); {148#true} is VALID [2022-02-20 18:08:41,252 INFO L290 TraceCheckUtils]: 9: Hoare triple {148#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {148#true} is VALID [2022-02-20 18:08:41,252 INFO L290 TraceCheckUtils]: 10: Hoare triple {148#true} assume true; {148#true} is VALID [2022-02-20 18:08:41,252 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {148#true} {148#true} #365#return; {148#true} is VALID [2022-02-20 18:08:41,252 INFO L290 TraceCheckUtils]: 12: Hoare triple {148#true} ~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret56#1;havoc select_features_#t~ret56#1; {148#true} is VALID [2022-02-20 18:08:41,252 INFO L272 TraceCheckUtils]: 13: Hoare triple {148#true} call select_features_#t~ret57#1 := select_one(); {148#true} is VALID [2022-02-20 18:08:41,253 INFO L290 TraceCheckUtils]: 14: Hoare triple {148#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {148#true} is VALID [2022-02-20 18:08:41,253 INFO L290 TraceCheckUtils]: 15: Hoare triple {148#true} assume true; {148#true} is VALID [2022-02-20 18:08:41,253 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {148#true} {148#true} #367#return; {148#true} is VALID [2022-02-20 18:08:41,253 INFO L290 TraceCheckUtils]: 17: Hoare triple {148#true} ~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret57#1;havoc select_features_#t~ret57#1; {148#true} is VALID [2022-02-20 18:08:41,254 INFO L272 TraceCheckUtils]: 18: Hoare triple {148#true} call select_features_#t~ret58#1 := select_one(); {148#true} is VALID [2022-02-20 18:08:41,254 INFO L290 TraceCheckUtils]: 19: Hoare triple {148#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {148#true} is VALID [2022-02-20 18:08:41,254 INFO L290 TraceCheckUtils]: 20: Hoare triple {148#true} assume true; {148#true} is VALID [2022-02-20 18:08:41,254 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {148#true} {148#true} #369#return; {148#true} is VALID [2022-02-20 18:08:41,254 INFO L290 TraceCheckUtils]: 22: Hoare triple {148#true} ~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret58#1;havoc select_features_#t~ret58#1; {148#true} is VALID [2022-02-20 18:08:41,255 INFO L272 TraceCheckUtils]: 23: Hoare triple {148#true} call select_features_#t~ret59#1 := select_one(); {148#true} is VALID [2022-02-20 18:08:41,255 INFO L290 TraceCheckUtils]: 24: Hoare triple {148#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {148#true} is VALID [2022-02-20 18:08:41,255 INFO L290 TraceCheckUtils]: 25: Hoare triple {148#true} assume true; {148#true} is VALID [2022-02-20 18:08:41,255 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {148#true} {148#true} #371#return; {148#true} is VALID [2022-02-20 18:08:41,256 INFO L290 TraceCheckUtils]: 27: Hoare triple {148#true} ~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret59#1;havoc select_features_#t~ret59#1; {148#true} is VALID [2022-02-20 18:08:41,256 INFO L272 TraceCheckUtils]: 28: Hoare triple {148#true} call select_features_#t~ret60#1 := select_one(); {148#true} is VALID [2022-02-20 18:08:41,256 INFO L290 TraceCheckUtils]: 29: Hoare triple {148#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {148#true} is VALID [2022-02-20 18:08:41,256 INFO L290 TraceCheckUtils]: 30: Hoare triple {148#true} assume true; {148#true} is VALID [2022-02-20 18:08:41,256 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {148#true} {148#true} #373#return; {148#true} is VALID [2022-02-20 18:08:41,257 INFO L290 TraceCheckUtils]: 32: Hoare triple {148#true} ~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret60#1;havoc select_features_#t~ret60#1; {148#true} is VALID [2022-02-20 18:08:41,257 INFO L290 TraceCheckUtils]: 33: Hoare triple {148#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~13#1;havoc valid_product_~retValue_acc~13#1;valid_product_~retValue_acc~13#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~13#1; {148#true} is VALID [2022-02-20 18:08:41,257 INFO L290 TraceCheckUtils]: 34: Hoare triple {148#true} main_#t~ret24#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~6#1 := main_#t~ret24#1;havoc main_#t~ret24#1; {148#true} is VALID [2022-02-20 18:08:41,257 INFO L290 TraceCheckUtils]: 35: Hoare triple {148#true} assume 0bv32 != main_~tmp~6#1;assume { :begin_inline_setup } true; {148#true} is VALID [2022-02-20 18:08:41,258 INFO L290 TraceCheckUtils]: 36: Hoare triple {148#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0bv32; {148#true} is VALID [2022-02-20 18:08:41,258 INFO L290 TraceCheckUtils]: 37: Hoare triple {148#true} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet25#1, test_#t~nondet26#1, test_#t~nondet27#1, test_#t~nondet28#1, test_~splverifierCounter~0#1, test_~tmp~7#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~7#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0bv32; {148#true} is VALID [2022-02-20 18:08:41,259 INFO L290 TraceCheckUtils]: 38: Hoare triple {148#true} assume !true; {149#false} is VALID [2022-02-20 18:08:41,259 INFO L272 TraceCheckUtils]: 39: Hoare triple {149#false} call cleanup(); {149#false} is VALID [2022-02-20 18:08:41,259 INFO L290 TraceCheckUtils]: 40: Hoare triple {149#false} havoc ~i~0;havoc ~__cil_tmp2~0; {149#false} is VALID [2022-02-20 18:08:41,259 INFO L272 TraceCheckUtils]: 41: Hoare triple {149#false} call timeShift(); {149#false} is VALID [2022-02-20 18:08:41,260 INFO L290 TraceCheckUtils]: 42: Hoare triple {149#false} assume !(0bv32 != ~pumpRunning~0); {149#false} is VALID [2022-02-20 18:08:41,260 INFO L290 TraceCheckUtils]: 43: Hoare triple {149#false} assume !(0bv32 != ~systemActive~0); {149#false} is VALID [2022-02-20 18:08:41,260 INFO L290 TraceCheckUtils]: 44: Hoare triple {149#false} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret29#1, __utac_acc__Specification2_spec__2_#t~ret30#1, __utac_acc__Specification2_spec__2_~tmp~8#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~8#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {149#false} is VALID [2022-02-20 18:08:41,260 INFO L272 TraceCheckUtils]: 45: Hoare triple {149#false} call __utac_acc__Specification2_spec__2_#t~ret29#1 := isMethaneLevelCritical(); {149#false} is VALID [2022-02-20 18:08:41,261 INFO L290 TraceCheckUtils]: 46: Hoare triple {149#false} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {149#false} is VALID [2022-02-20 18:08:41,261 INFO L290 TraceCheckUtils]: 47: Hoare triple {149#false} assume true; {149#false} is VALID [2022-02-20 18:08:41,261 INFO L284 TraceCheckUtils]: 48: Hoare quadruple {149#false} {149#false} #361#return; {149#false} is VALID [2022-02-20 18:08:41,261 INFO L290 TraceCheckUtils]: 49: Hoare triple {149#false} __utac_acc__Specification2_spec__2_~tmp~8#1 := __utac_acc__Specification2_spec__2_#t~ret29#1;havoc __utac_acc__Specification2_spec__2_#t~ret29#1; {149#false} is VALID [2022-02-20 18:08:41,261 INFO L290 TraceCheckUtils]: 50: Hoare triple {149#false} assume 0bv32 != __utac_acc__Specification2_spec__2_~tmp~8#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~5#1;havoc isPumpRunning_~retValue_acc~5#1;isPumpRunning_~retValue_acc~5#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~5#1; {149#false} is VALID [2022-02-20 18:08:41,262 INFO L290 TraceCheckUtils]: 51: Hoare triple {149#false} __utac_acc__Specification2_spec__2_#t~ret30#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret30#1;havoc __utac_acc__Specification2_spec__2_#t~ret30#1; {149#false} is VALID [2022-02-20 18:08:41,262 INFO L290 TraceCheckUtils]: 52: Hoare triple {149#false} assume 0bv32 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {149#false} is VALID [2022-02-20 18:08:41,262 INFO L290 TraceCheckUtils]: 53: Hoare triple {149#false} assume 0bv32 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {149#false} is VALID [2022-02-20 18:08:41,262 INFO L290 TraceCheckUtils]: 54: Hoare triple {149#false} assume !false; {149#false} is VALID [2022-02-20 18:08:41,263 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-02-20 18:08:41,264 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-02-20 18:08:41,264 INFO L144 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-02-20 18:08:41,264 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [244958095] [2022-02-20 18:08:41,265 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleMathsat [244958095] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:08:41,265 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:08:41,265 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-02-20 18:08:41,267 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1765627025] [2022-02-20 18:08:41,267 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:08:41,277 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 14.5) internal successors, (29), 2 states have internal predecessors, (29), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 55 [2022-02-20 18:08:41,279 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:08:41,282 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 2 states, 2 states have (on average 14.5) internal successors, (29), 2 states have internal predecessors, (29), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:08:41,329 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 45 edges. 45 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:41,329 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-02-20 18:08:41,329 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-02-20 18:08:41,346 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-02-20 18:08:41,346 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-02-20 18:08:41,349 INFO L87 Difference]: Start difference. First operand has 145 states, 101 states have (on average 1.3663366336633664) internal successors, (138), 117 states have internal predecessors, (138), 30 states have call successors, (30), 12 states have call predecessors, (30), 12 states have return successors, (30), 25 states have call predecessors, (30), 30 states have call successors, (30) Second operand has 2 states, 2 states have (on average 14.5) internal successors, (29), 2 states have internal predecessors, (29), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:08:41,497 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:41,497 INFO L93 Difference]: Finished difference Result 266 states and 370 transitions. [2022-02-20 18:08:41,498 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-02-20 18:08:41,498 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 14.5) internal successors, (29), 2 states have internal predecessors, (29), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 55 [2022-02-20 18:08:41,499 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:08:41,500 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2 states, 2 states have (on average 14.5) internal successors, (29), 2 states have internal predecessors, (29), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:08:41,511 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 370 transitions. [2022-02-20 18:08:41,512 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2 states, 2 states have (on average 14.5) internal successors, (29), 2 states have internal predecessors, (29), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:08:41,519 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 370 transitions. [2022-02-20 18:08:41,519 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states and 370 transitions. [2022-02-20 18:08:41,882 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 370 edges. 370 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:41,900 INFO L225 Difference]: With dead ends: 266 [2022-02-20 18:08:41,900 INFO L226 Difference]: Without dead ends: 136 [2022-02-20 18:08:41,906 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 54 GetRequests, 54 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-02-20 18:08:41,909 INFO L933 BasicCegarLoop]: 192 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 192 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:08:41,910 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 192 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:08:41,924 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 136 states. [2022-02-20 18:08:41,954 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 136 to 136. [2022-02-20 18:08:41,954 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:08:41,959 INFO L82 GeneralOperation]: Start isEquivalent. First operand 136 states. Second operand has 136 states, 94 states have (on average 1.3191489361702127) internal successors, (124), 109 states have internal predecessors, (124), 30 states have call successors, (30), 12 states have call predecessors, (30), 11 states have return successors, (29), 24 states have call predecessors, (29), 29 states have call successors, (29) [2022-02-20 18:08:41,962 INFO L74 IsIncluded]: Start isIncluded. First operand 136 states. Second operand has 136 states, 94 states have (on average 1.3191489361702127) internal successors, (124), 109 states have internal predecessors, (124), 30 states have call successors, (30), 12 states have call predecessors, (30), 11 states have return successors, (29), 24 states have call predecessors, (29), 29 states have call successors, (29) [2022-02-20 18:08:41,963 INFO L87 Difference]: Start difference. First operand 136 states. Second operand has 136 states, 94 states have (on average 1.3191489361702127) internal successors, (124), 109 states have internal predecessors, (124), 30 states have call successors, (30), 12 states have call predecessors, (30), 11 states have return successors, (29), 24 states have call predecessors, (29), 29 states have call successors, (29) [2022-02-20 18:08:41,988 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:41,989 INFO L93 Difference]: Finished difference Result 136 states and 183 transitions. [2022-02-20 18:08:41,989 INFO L276 IsEmpty]: Start isEmpty. Operand 136 states and 183 transitions. [2022-02-20 18:08:41,991 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:41,991 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:41,992 INFO L74 IsIncluded]: Start isIncluded. First operand has 136 states, 94 states have (on average 1.3191489361702127) internal successors, (124), 109 states have internal predecessors, (124), 30 states have call successors, (30), 12 states have call predecessors, (30), 11 states have return successors, (29), 24 states have call predecessors, (29), 29 states have call successors, (29) Second operand 136 states. [2022-02-20 18:08:41,993 INFO L87 Difference]: Start difference. First operand has 136 states, 94 states have (on average 1.3191489361702127) internal successors, (124), 109 states have internal predecessors, (124), 30 states have call successors, (30), 12 states have call predecessors, (30), 11 states have return successors, (29), 24 states have call predecessors, (29), 29 states have call successors, (29) Second operand 136 states. [2022-02-20 18:08:41,999 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:41,999 INFO L93 Difference]: Finished difference Result 136 states and 183 transitions. [2022-02-20 18:08:42,000 INFO L276 IsEmpty]: Start isEmpty. Operand 136 states and 183 transitions. [2022-02-20 18:08:42,002 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:42,002 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:42,002 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:08:42,002 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:08:42,003 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 136 states, 94 states have (on average 1.3191489361702127) internal successors, (124), 109 states have internal predecessors, (124), 30 states have call successors, (30), 12 states have call predecessors, (30), 11 states have return successors, (29), 24 states have call predecessors, (29), 29 states have call successors, (29) [2022-02-20 18:08:42,009 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 136 states to 136 states and 183 transitions. [2022-02-20 18:08:42,012 INFO L78 Accepts]: Start accepts. Automaton has 136 states and 183 transitions. Word has length 55 [2022-02-20 18:08:42,013 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:08:42,013 INFO L470 AbstractCegarLoop]: Abstraction has 136 states and 183 transitions. [2022-02-20 18:08:42,013 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 14.5) internal successors, (29), 2 states have internal predecessors, (29), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:08:42,013 INFO L276 IsEmpty]: Start isEmpty. Operand 136 states and 183 transitions. [2022-02-20 18:08:42,016 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-02-20 18:08:42,020 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:08:42,020 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:08:42,035 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (2)] Forceful destruction successful, exit code 0 [2022-02-20 18:08:42,230 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-02-20 18:08:42,230 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:08:42,231 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:08:42,231 INFO L85 PathProgramCache]: Analyzing trace with hash -878158854, now seen corresponding path program 1 times [2022-02-20 18:08:42,231 INFO L126 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-02-20 18:08:42,232 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2146265100] [2022-02-20 18:08:42,232 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:08:42,232 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-02-20 18:08:42,232 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-02-20 18:08:42,233 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-02-20 18:08:42,234 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (3)] Waiting until timeout for monitored process [2022-02-20 18:08:42,313 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:42,316 INFO L263 TraceCheckSpWp]: Trace formula consists of 220 conjuncts, 2 conjunts are in the unsatisfiable core [2022-02-20 18:08:42,345 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:42,346 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 18:08:42,470 INFO L290 TraceCheckUtils]: 0: Hoare triple {1177#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0bv32, 0bv32;assume 0bv1 == #valid[0bv32];assume ~bvult32(0bv32, #StackHeapBarrier);call #Ultimate.allocInit(2bv32, 1bv32);call write~init~intINTTYPE1(48bv8, 1bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 1bv32, 1bv32, 1bv32);call #Ultimate.allocInit(38bv32, 2bv32);call #Ultimate.allocInit(12bv32, 3bv32);call #Ultimate.allocInit(13bv32, 4bv32);call #Ultimate.allocInit(7bv32, 5bv32);call write~init~intINTTYPE1(44bv8, 5bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(77bv8, 5bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(101bv8, 5bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(116bv8, 5bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(104bv8, 5bv32, 4bv32, 1bv32);call write~init~intINTTYPE1(58bv8, 5bv32, 5bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 5bv32, 6bv32, 1bv32);call #Ultimate.allocInit(5bv32, 6bv32);call write~init~intINTTYPE1(67bv8, 6bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(82bv8, 6bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(73bv8, 6bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(84bv8, 6bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 6bv32, 4bv32, 1bv32);call #Ultimate.allocInit(3bv32, 7bv32);call write~init~intINTTYPE1(79bv8, 7bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(75bv8, 7bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 7bv32, 2bv32, 1bv32);call #Ultimate.allocInit(2bv32, 8bv32);call write~init~intINTTYPE1(41bv8, 8bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 8bv32, 1bv32, 1bv32);call #Ultimate.allocInit(13bv32, 9bv32);call #Ultimate.allocInit(3bv32, 10bv32);call write~init~intINTTYPE1(79bv8, 10bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(110bv8, 10bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 10bv32, 2bv32, 1bv32);call #Ultimate.allocInit(4bv32, 11bv32);call write~init~intINTTYPE1(79bv8, 11bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 11bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 11bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 11bv32, 3bv32, 1bv32);call #Ultimate.allocInit(7bv32, 12bv32);call write~init~intINTTYPE1(44bv8, 12bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(80bv8, 12bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(117bv8, 12bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(109bv8, 12bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(112bv8, 12bv32, 4bv32, 1bv32);call write~init~intINTTYPE1(58bv8, 12bv32, 5bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 12bv32, 6bv32, 1bv32);call #Ultimate.allocInit(3bv32, 13bv32);call write~init~intINTTYPE1(79bv8, 13bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(110bv8, 13bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 13bv32, 2bv32, 1bv32);call #Ultimate.allocInit(4bv32, 14bv32);call write~init~intINTTYPE1(79bv8, 14bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 14bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 14bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 14bv32, 3bv32, 1bv32);call #Ultimate.allocInit(3bv32, 15bv32);call write~init~intINTTYPE1(41bv8, 15bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(32bv8, 15bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 15bv32, 2bv32, 1bv32);call #Ultimate.allocInit(2bv32, 16bv32);call write~init~intINTTYPE1(10bv8, 16bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 16bv32, 1bv32, 1bv32);call #Ultimate.allocInit(30bv32, 17bv32);call #Ultimate.allocInit(9bv32, 18bv32);call #Ultimate.allocInit(21bv32, 19bv32);call #Ultimate.allocInit(30bv32, 20bv32);call #Ultimate.allocInit(9bv32, 21bv32);call #Ultimate.allocInit(21bv32, 22bv32);call #Ultimate.allocInit(30bv32, 23bv32);call #Ultimate.allocInit(9bv32, 24bv32);call #Ultimate.allocInit(25bv32, 25bv32);call #Ultimate.allocInit(30bv32, 26bv32);call #Ultimate.allocInit(9bv32, 27bv32);call #Ultimate.allocInit(25bv32, 28bv32);~__SELECTED_FEATURE_base~0 := 0bv32;~__SELECTED_FEATURE_highWaterSensor~0 := 0bv32;~__SELECTED_FEATURE_lowWaterSensor~0 := 0bv32;~__SELECTED_FEATURE_methaneQuery~0 := 0bv32;~__SELECTED_FEATURE_methaneAlarm~0 := 0bv32;~__SELECTED_FEATURE_stopCommand~0 := 0bv32;~__SELECTED_FEATURE_startCommand~0 := 0bv32;~__GUIDSL_ROOT_PRODUCTION~0 := 0bv32;~waterLevel~0 := 1bv32;~methaneLevelCritical~0 := 0bv32;~pumpRunning~0 := 0bv32;~systemActive~0 := 1bv32;~cleanupTimeShifts~0 := 4bv32;~methAndRunningLastTime~0 := 0bv32;~head~0.base, ~head~0.offset := 0bv32, 0bv32; {1177#true} is VALID [2022-02-20 18:08:42,470 INFO L290 TraceCheckUtils]: 1: Hoare triple {1177#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret24#1, main_~retValue_acc~8#1, main_~tmp~6#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~6#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1bv32; {1177#true} is VALID [2022-02-20 18:08:42,471 INFO L290 TraceCheckUtils]: 2: Hoare triple {1177#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret55#1, select_features_#t~ret56#1, select_features_#t~ret57#1, select_features_#t~ret58#1, select_features_#t~ret59#1, select_features_#t~ret60#1;~__SELECTED_FEATURE_base~0 := 1bv32; {1177#true} is VALID [2022-02-20 18:08:42,471 INFO L272 TraceCheckUtils]: 3: Hoare triple {1177#true} call select_features_#t~ret55#1 := select_one(); {1177#true} is VALID [2022-02-20 18:08:42,471 INFO L290 TraceCheckUtils]: 4: Hoare triple {1177#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {1177#true} is VALID [2022-02-20 18:08:42,471 INFO L290 TraceCheckUtils]: 5: Hoare triple {1177#true} assume true; {1177#true} is VALID [2022-02-20 18:08:42,472 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {1177#true} {1177#true} #363#return; {1177#true} is VALID [2022-02-20 18:08:42,472 INFO L290 TraceCheckUtils]: 7: Hoare triple {1177#true} ~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret55#1;havoc select_features_#t~ret55#1; {1177#true} is VALID [2022-02-20 18:08:42,472 INFO L272 TraceCheckUtils]: 8: Hoare triple {1177#true} call select_features_#t~ret56#1 := select_one(); {1177#true} is VALID [2022-02-20 18:08:42,472 INFO L290 TraceCheckUtils]: 9: Hoare triple {1177#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {1177#true} is VALID [2022-02-20 18:08:42,472 INFO L290 TraceCheckUtils]: 10: Hoare triple {1177#true} assume true; {1177#true} is VALID [2022-02-20 18:08:42,473 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {1177#true} {1177#true} #365#return; {1177#true} is VALID [2022-02-20 18:08:42,473 INFO L290 TraceCheckUtils]: 12: Hoare triple {1177#true} ~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret56#1;havoc select_features_#t~ret56#1; {1177#true} is VALID [2022-02-20 18:08:42,473 INFO L272 TraceCheckUtils]: 13: Hoare triple {1177#true} call select_features_#t~ret57#1 := select_one(); {1177#true} is VALID [2022-02-20 18:08:42,473 INFO L290 TraceCheckUtils]: 14: Hoare triple {1177#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {1177#true} is VALID [2022-02-20 18:08:42,473 INFO L290 TraceCheckUtils]: 15: Hoare triple {1177#true} assume true; {1177#true} is VALID [2022-02-20 18:08:42,474 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {1177#true} {1177#true} #367#return; {1177#true} is VALID [2022-02-20 18:08:42,474 INFO L290 TraceCheckUtils]: 17: Hoare triple {1177#true} ~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret57#1;havoc select_features_#t~ret57#1; {1177#true} is VALID [2022-02-20 18:08:42,474 INFO L272 TraceCheckUtils]: 18: Hoare triple {1177#true} call select_features_#t~ret58#1 := select_one(); {1177#true} is VALID [2022-02-20 18:08:42,474 INFO L290 TraceCheckUtils]: 19: Hoare triple {1177#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {1177#true} is VALID [2022-02-20 18:08:42,475 INFO L290 TraceCheckUtils]: 20: Hoare triple {1177#true} assume true; {1177#true} is VALID [2022-02-20 18:08:42,475 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {1177#true} {1177#true} #369#return; {1177#true} is VALID [2022-02-20 18:08:42,475 INFO L290 TraceCheckUtils]: 22: Hoare triple {1177#true} ~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret58#1;havoc select_features_#t~ret58#1; {1177#true} is VALID [2022-02-20 18:08:42,475 INFO L272 TraceCheckUtils]: 23: Hoare triple {1177#true} call select_features_#t~ret59#1 := select_one(); {1177#true} is VALID [2022-02-20 18:08:42,475 INFO L290 TraceCheckUtils]: 24: Hoare triple {1177#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {1177#true} is VALID [2022-02-20 18:08:42,476 INFO L290 TraceCheckUtils]: 25: Hoare triple {1177#true} assume true; {1177#true} is VALID [2022-02-20 18:08:42,476 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {1177#true} {1177#true} #371#return; {1177#true} is VALID [2022-02-20 18:08:42,476 INFO L290 TraceCheckUtils]: 27: Hoare triple {1177#true} ~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret59#1;havoc select_features_#t~ret59#1; {1177#true} is VALID [2022-02-20 18:08:42,476 INFO L272 TraceCheckUtils]: 28: Hoare triple {1177#true} call select_features_#t~ret60#1 := select_one(); {1177#true} is VALID [2022-02-20 18:08:42,476 INFO L290 TraceCheckUtils]: 29: Hoare triple {1177#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {1177#true} is VALID [2022-02-20 18:08:42,476 INFO L290 TraceCheckUtils]: 30: Hoare triple {1177#true} assume true; {1177#true} is VALID [2022-02-20 18:08:42,477 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {1177#true} {1177#true} #373#return; {1177#true} is VALID [2022-02-20 18:08:42,477 INFO L290 TraceCheckUtils]: 32: Hoare triple {1177#true} ~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret60#1;havoc select_features_#t~ret60#1; {1177#true} is VALID [2022-02-20 18:08:42,477 INFO L290 TraceCheckUtils]: 33: Hoare triple {1177#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~13#1;havoc valid_product_~retValue_acc~13#1;valid_product_~retValue_acc~13#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~13#1; {1177#true} is VALID [2022-02-20 18:08:42,477 INFO L290 TraceCheckUtils]: 34: Hoare triple {1177#true} main_#t~ret24#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~6#1 := main_#t~ret24#1;havoc main_#t~ret24#1; {1177#true} is VALID [2022-02-20 18:08:42,477 INFO L290 TraceCheckUtils]: 35: Hoare triple {1177#true} assume 0bv32 != main_~tmp~6#1;assume { :begin_inline_setup } true; {1177#true} is VALID [2022-02-20 18:08:42,478 INFO L290 TraceCheckUtils]: 36: Hoare triple {1177#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0bv32; {1177#true} is VALID [2022-02-20 18:08:42,478 INFO L290 TraceCheckUtils]: 37: Hoare triple {1177#true} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet25#1, test_#t~nondet26#1, test_#t~nondet27#1, test_#t~nondet28#1, test_~splverifierCounter~0#1, test_~tmp~7#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~7#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0bv32; {1293#(= |ULTIMATE.start_test_~splverifierCounter~0#1| (_ bv0 32))} is VALID [2022-02-20 18:08:42,479 INFO L290 TraceCheckUtils]: 38: Hoare triple {1293#(= |ULTIMATE.start_test_~splverifierCounter~0#1| (_ bv0 32))} assume !false; {1293#(= |ULTIMATE.start_test_~splverifierCounter~0#1| (_ bv0 32))} is VALID [2022-02-20 18:08:42,479 INFO L290 TraceCheckUtils]: 39: Hoare triple {1293#(= |ULTIMATE.start_test_~splverifierCounter~0#1| (_ bv0 32))} assume !~bvslt32(test_~splverifierCounter~0#1, 4bv32); {1178#false} is VALID [2022-02-20 18:08:42,480 INFO L272 TraceCheckUtils]: 40: Hoare triple {1178#false} call cleanup(); {1178#false} is VALID [2022-02-20 18:08:42,480 INFO L290 TraceCheckUtils]: 41: Hoare triple {1178#false} havoc ~i~0;havoc ~__cil_tmp2~0; {1178#false} is VALID [2022-02-20 18:08:42,480 INFO L272 TraceCheckUtils]: 42: Hoare triple {1178#false} call timeShift(); {1178#false} is VALID [2022-02-20 18:08:42,480 INFO L290 TraceCheckUtils]: 43: Hoare triple {1178#false} assume !(0bv32 != ~pumpRunning~0); {1178#false} is VALID [2022-02-20 18:08:42,480 INFO L290 TraceCheckUtils]: 44: Hoare triple {1178#false} assume !(0bv32 != ~systemActive~0); {1178#false} is VALID [2022-02-20 18:08:42,480 INFO L290 TraceCheckUtils]: 45: Hoare triple {1178#false} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret29#1, __utac_acc__Specification2_spec__2_#t~ret30#1, __utac_acc__Specification2_spec__2_~tmp~8#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~8#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {1178#false} is VALID [2022-02-20 18:08:42,481 INFO L272 TraceCheckUtils]: 46: Hoare triple {1178#false} call __utac_acc__Specification2_spec__2_#t~ret29#1 := isMethaneLevelCritical(); {1178#false} is VALID [2022-02-20 18:08:42,481 INFO L290 TraceCheckUtils]: 47: Hoare triple {1178#false} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {1178#false} is VALID [2022-02-20 18:08:42,481 INFO L290 TraceCheckUtils]: 48: Hoare triple {1178#false} assume true; {1178#false} is VALID [2022-02-20 18:08:42,481 INFO L284 TraceCheckUtils]: 49: Hoare quadruple {1178#false} {1178#false} #361#return; {1178#false} is VALID [2022-02-20 18:08:42,481 INFO L290 TraceCheckUtils]: 50: Hoare triple {1178#false} __utac_acc__Specification2_spec__2_~tmp~8#1 := __utac_acc__Specification2_spec__2_#t~ret29#1;havoc __utac_acc__Specification2_spec__2_#t~ret29#1; {1178#false} is VALID [2022-02-20 18:08:42,482 INFO L290 TraceCheckUtils]: 51: Hoare triple {1178#false} assume 0bv32 != __utac_acc__Specification2_spec__2_~tmp~8#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~5#1;havoc isPumpRunning_~retValue_acc~5#1;isPumpRunning_~retValue_acc~5#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~5#1; {1178#false} is VALID [2022-02-20 18:08:42,482 INFO L290 TraceCheckUtils]: 52: Hoare triple {1178#false} __utac_acc__Specification2_spec__2_#t~ret30#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret30#1;havoc __utac_acc__Specification2_spec__2_#t~ret30#1; {1178#false} is VALID [2022-02-20 18:08:42,482 INFO L290 TraceCheckUtils]: 53: Hoare triple {1178#false} assume 0bv32 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {1178#false} is VALID [2022-02-20 18:08:42,482 INFO L290 TraceCheckUtils]: 54: Hoare triple {1178#false} assume 0bv32 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {1178#false} is VALID [2022-02-20 18:08:42,482 INFO L290 TraceCheckUtils]: 55: Hoare triple {1178#false} assume !false; {1178#false} is VALID [2022-02-20 18:08:42,483 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-02-20 18:08:42,483 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-02-20 18:08:42,487 INFO L144 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-02-20 18:08:42,487 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [2146265100] [2022-02-20 18:08:42,487 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleMathsat [2146265100] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:08:42,488 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:08:42,488 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-02-20 18:08:42,488 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [571924286] [2022-02-20 18:08:42,488 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:08:42,489 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 56 [2022-02-20 18:08:42,489 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:08:42,490 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:08:42,543 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 46 edges. 46 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:42,544 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-02-20 18:08:42,544 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-02-20 18:08:42,544 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-02-20 18:08:42,544 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:08:42,545 INFO L87 Difference]: Start difference. First operand 136 states and 183 transitions. Second operand has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:08:42,733 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:42,735 INFO L93 Difference]: Finished difference Result 215 states and 290 transitions. [2022-02-20 18:08:42,735 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-02-20 18:08:42,736 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 56 [2022-02-20 18:08:42,736 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:08:42,736 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:08:42,741 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 290 transitions. [2022-02-20 18:08:42,742 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:08:42,748 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 290 transitions. [2022-02-20 18:08:42,748 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 290 transitions. [2022-02-20 18:08:42,975 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 290 edges. 290 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:42,981 INFO L225 Difference]: With dead ends: 215 [2022-02-20 18:08:42,982 INFO L226 Difference]: Without dead ends: 127 [2022-02-20 18:08:42,983 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 55 GetRequests, 54 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:08:42,985 INFO L933 BasicCegarLoop]: 170 mSDtfsCounter, 21 mSDsluCounter, 144 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 25 SdHoareTripleChecker+Valid, 314 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:08:42,986 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [25 Valid, 314 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:08:42,987 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 127 states. [2022-02-20 18:08:43,008 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 127 to 127. [2022-02-20 18:08:43,009 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:08:43,010 INFO L82 GeneralOperation]: Start isEquivalent. First operand 127 states. Second operand has 127 states, 88 states have (on average 1.3295454545454546) internal successors, (117), 103 states have internal predecessors, (117), 27 states have call successors, (27), 11 states have call predecessors, (27), 11 states have return successors, (27), 22 states have call predecessors, (27), 27 states have call successors, (27) [2022-02-20 18:08:43,013 INFO L74 IsIncluded]: Start isIncluded. First operand 127 states. Second operand has 127 states, 88 states have (on average 1.3295454545454546) internal successors, (117), 103 states have internal predecessors, (117), 27 states have call successors, (27), 11 states have call predecessors, (27), 11 states have return successors, (27), 22 states have call predecessors, (27), 27 states have call successors, (27) [2022-02-20 18:08:43,014 INFO L87 Difference]: Start difference. First operand 127 states. Second operand has 127 states, 88 states have (on average 1.3295454545454546) internal successors, (117), 103 states have internal predecessors, (117), 27 states have call successors, (27), 11 states have call predecessors, (27), 11 states have return successors, (27), 22 states have call predecessors, (27), 27 states have call successors, (27) [2022-02-20 18:08:43,026 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:43,027 INFO L93 Difference]: Finished difference Result 127 states and 171 transitions. [2022-02-20 18:08:43,027 INFO L276 IsEmpty]: Start isEmpty. Operand 127 states and 171 transitions. [2022-02-20 18:08:43,028 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:43,028 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:43,029 INFO L74 IsIncluded]: Start isIncluded. First operand has 127 states, 88 states have (on average 1.3295454545454546) internal successors, (117), 103 states have internal predecessors, (117), 27 states have call successors, (27), 11 states have call predecessors, (27), 11 states have return successors, (27), 22 states have call predecessors, (27), 27 states have call successors, (27) Second operand 127 states. [2022-02-20 18:08:43,029 INFO L87 Difference]: Start difference. First operand has 127 states, 88 states have (on average 1.3295454545454546) internal successors, (117), 103 states have internal predecessors, (117), 27 states have call successors, (27), 11 states have call predecessors, (27), 11 states have return successors, (27), 22 states have call predecessors, (27), 27 states have call successors, (27) Second operand 127 states. [2022-02-20 18:08:43,035 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:43,035 INFO L93 Difference]: Finished difference Result 127 states and 171 transitions. [2022-02-20 18:08:43,035 INFO L276 IsEmpty]: Start isEmpty. Operand 127 states and 171 transitions. [2022-02-20 18:08:43,036 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:43,036 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:43,036 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:08:43,036 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:08:43,037 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 127 states, 88 states have (on average 1.3295454545454546) internal successors, (117), 103 states have internal predecessors, (117), 27 states have call successors, (27), 11 states have call predecessors, (27), 11 states have return successors, (27), 22 states have call predecessors, (27), 27 states have call successors, (27) [2022-02-20 18:08:43,044 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 127 states to 127 states and 171 transitions. [2022-02-20 18:08:43,044 INFO L78 Accepts]: Start accepts. Automaton has 127 states and 171 transitions. Word has length 56 [2022-02-20 18:08:43,046 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:08:43,046 INFO L470 AbstractCegarLoop]: Abstraction has 127 states and 171 transitions. [2022-02-20 18:08:43,046 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:08:43,047 INFO L276 IsEmpty]: Start isEmpty. Operand 127 states and 171 transitions. [2022-02-20 18:08:43,049 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2022-02-20 18:08:43,049 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:08:43,050 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:08:43,072 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (3)] Ended with exit code 0 [2022-02-20 18:08:43,259 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-02-20 18:08:43,260 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:08:43,264 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:08:43,264 INFO L85 PathProgramCache]: Analyzing trace with hash -696247410, now seen corresponding path program 1 times [2022-02-20 18:08:43,265 INFO L126 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-02-20 18:08:43,265 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1533757175] [2022-02-20 18:08:43,265 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:08:43,265 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-02-20 18:08:43,266 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-02-20 18:08:43,273 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-02-20 18:08:43,299 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (4)] Waiting until timeout for monitored process [2022-02-20 18:08:43,355 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:43,358 INFO L263 TraceCheckSpWp]: Trace formula consists of 219 conjuncts, 2 conjunts are in the unsatisfiable core [2022-02-20 18:08:43,389 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:43,391 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 18:08:43,565 INFO L290 TraceCheckUtils]: 0: Hoare triple {2104#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0bv32, 0bv32;assume 0bv1 == #valid[0bv32];assume ~bvult32(0bv32, #StackHeapBarrier);call #Ultimate.allocInit(2bv32, 1bv32);call write~init~intINTTYPE1(48bv8, 1bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 1bv32, 1bv32, 1bv32);call #Ultimate.allocInit(38bv32, 2bv32);call #Ultimate.allocInit(12bv32, 3bv32);call #Ultimate.allocInit(13bv32, 4bv32);call #Ultimate.allocInit(7bv32, 5bv32);call write~init~intINTTYPE1(44bv8, 5bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(77bv8, 5bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(101bv8, 5bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(116bv8, 5bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(104bv8, 5bv32, 4bv32, 1bv32);call write~init~intINTTYPE1(58bv8, 5bv32, 5bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 5bv32, 6bv32, 1bv32);call #Ultimate.allocInit(5bv32, 6bv32);call write~init~intINTTYPE1(67bv8, 6bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(82bv8, 6bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(73bv8, 6bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(84bv8, 6bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 6bv32, 4bv32, 1bv32);call #Ultimate.allocInit(3bv32, 7bv32);call write~init~intINTTYPE1(79bv8, 7bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(75bv8, 7bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 7bv32, 2bv32, 1bv32);call #Ultimate.allocInit(2bv32, 8bv32);call write~init~intINTTYPE1(41bv8, 8bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 8bv32, 1bv32, 1bv32);call #Ultimate.allocInit(13bv32, 9bv32);call #Ultimate.allocInit(3bv32, 10bv32);call write~init~intINTTYPE1(79bv8, 10bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(110bv8, 10bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 10bv32, 2bv32, 1bv32);call #Ultimate.allocInit(4bv32, 11bv32);call write~init~intINTTYPE1(79bv8, 11bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 11bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 11bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 11bv32, 3bv32, 1bv32);call #Ultimate.allocInit(7bv32, 12bv32);call write~init~intINTTYPE1(44bv8, 12bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(80bv8, 12bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(117bv8, 12bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(109bv8, 12bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(112bv8, 12bv32, 4bv32, 1bv32);call write~init~intINTTYPE1(58bv8, 12bv32, 5bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 12bv32, 6bv32, 1bv32);call #Ultimate.allocInit(3bv32, 13bv32);call write~init~intINTTYPE1(79bv8, 13bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(110bv8, 13bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 13bv32, 2bv32, 1bv32);call #Ultimate.allocInit(4bv32, 14bv32);call write~init~intINTTYPE1(79bv8, 14bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 14bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 14bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 14bv32, 3bv32, 1bv32);call #Ultimate.allocInit(3bv32, 15bv32);call write~init~intINTTYPE1(41bv8, 15bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(32bv8, 15bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 15bv32, 2bv32, 1bv32);call #Ultimate.allocInit(2bv32, 16bv32);call write~init~intINTTYPE1(10bv8, 16bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 16bv32, 1bv32, 1bv32);call #Ultimate.allocInit(30bv32, 17bv32);call #Ultimate.allocInit(9bv32, 18bv32);call #Ultimate.allocInit(21bv32, 19bv32);call #Ultimate.allocInit(30bv32, 20bv32);call #Ultimate.allocInit(9bv32, 21bv32);call #Ultimate.allocInit(21bv32, 22bv32);call #Ultimate.allocInit(30bv32, 23bv32);call #Ultimate.allocInit(9bv32, 24bv32);call #Ultimate.allocInit(25bv32, 25bv32);call #Ultimate.allocInit(30bv32, 26bv32);call #Ultimate.allocInit(9bv32, 27bv32);call #Ultimate.allocInit(25bv32, 28bv32);~__SELECTED_FEATURE_base~0 := 0bv32;~__SELECTED_FEATURE_highWaterSensor~0 := 0bv32;~__SELECTED_FEATURE_lowWaterSensor~0 := 0bv32;~__SELECTED_FEATURE_methaneQuery~0 := 0bv32;~__SELECTED_FEATURE_methaneAlarm~0 := 0bv32;~__SELECTED_FEATURE_stopCommand~0 := 0bv32;~__SELECTED_FEATURE_startCommand~0 := 0bv32;~__GUIDSL_ROOT_PRODUCTION~0 := 0bv32;~waterLevel~0 := 1bv32;~methaneLevelCritical~0 := 0bv32;~pumpRunning~0 := 0bv32;~systemActive~0 := 1bv32;~cleanupTimeShifts~0 := 4bv32;~methAndRunningLastTime~0 := 0bv32;~head~0.base, ~head~0.offset := 0bv32, 0bv32; {2109#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:08:43,565 INFO L290 TraceCheckUtils]: 1: Hoare triple {2109#(= ~systemActive~0 (_ bv1 32))} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret24#1, main_~retValue_acc~8#1, main_~tmp~6#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~6#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1bv32; {2109#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:08:43,576 INFO L290 TraceCheckUtils]: 2: Hoare triple {2109#(= ~systemActive~0 (_ bv1 32))} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret55#1, select_features_#t~ret56#1, select_features_#t~ret57#1, select_features_#t~ret58#1, select_features_#t~ret59#1, select_features_#t~ret60#1;~__SELECTED_FEATURE_base~0 := 1bv32; {2109#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:08:43,576 INFO L272 TraceCheckUtils]: 3: Hoare triple {2109#(= ~systemActive~0 (_ bv1 32))} call select_features_#t~ret55#1 := select_one(); {2109#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:08:43,577 INFO L290 TraceCheckUtils]: 4: Hoare triple {2109#(= ~systemActive~0 (_ bv1 32))} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {2109#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:08:43,577 INFO L290 TraceCheckUtils]: 5: Hoare triple {2109#(= ~systemActive~0 (_ bv1 32))} assume true; {2109#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:08:43,578 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {2109#(= ~systemActive~0 (_ bv1 32))} {2109#(= ~systemActive~0 (_ bv1 32))} #363#return; {2109#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:08:43,578 INFO L290 TraceCheckUtils]: 7: Hoare triple {2109#(= ~systemActive~0 (_ bv1 32))} ~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret55#1;havoc select_features_#t~ret55#1; {2109#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:08:43,579 INFO L272 TraceCheckUtils]: 8: Hoare triple {2109#(= ~systemActive~0 (_ bv1 32))} call select_features_#t~ret56#1 := select_one(); {2109#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:08:43,579 INFO L290 TraceCheckUtils]: 9: Hoare triple {2109#(= ~systemActive~0 (_ bv1 32))} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {2109#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:08:43,580 INFO L290 TraceCheckUtils]: 10: Hoare triple {2109#(= ~systemActive~0 (_ bv1 32))} assume true; {2109#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:08:43,580 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {2109#(= ~systemActive~0 (_ bv1 32))} {2109#(= ~systemActive~0 (_ bv1 32))} #365#return; {2109#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:08:43,581 INFO L290 TraceCheckUtils]: 12: Hoare triple {2109#(= ~systemActive~0 (_ bv1 32))} ~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret56#1;havoc select_features_#t~ret56#1; {2109#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:08:43,581 INFO L272 TraceCheckUtils]: 13: Hoare triple {2109#(= ~systemActive~0 (_ bv1 32))} call select_features_#t~ret57#1 := select_one(); {2109#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:08:43,582 INFO L290 TraceCheckUtils]: 14: Hoare triple {2109#(= ~systemActive~0 (_ bv1 32))} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {2109#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:08:43,582 INFO L290 TraceCheckUtils]: 15: Hoare triple {2109#(= ~systemActive~0 (_ bv1 32))} assume true; {2109#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:08:43,583 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {2109#(= ~systemActive~0 (_ bv1 32))} {2109#(= ~systemActive~0 (_ bv1 32))} #367#return; {2109#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:08:43,583 INFO L290 TraceCheckUtils]: 17: Hoare triple {2109#(= ~systemActive~0 (_ bv1 32))} ~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret57#1;havoc select_features_#t~ret57#1; {2109#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:08:43,583 INFO L272 TraceCheckUtils]: 18: Hoare triple {2109#(= ~systemActive~0 (_ bv1 32))} call select_features_#t~ret58#1 := select_one(); {2109#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:08:43,584 INFO L290 TraceCheckUtils]: 19: Hoare triple {2109#(= ~systemActive~0 (_ bv1 32))} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {2109#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:08:43,584 INFO L290 TraceCheckUtils]: 20: Hoare triple {2109#(= ~systemActive~0 (_ bv1 32))} assume true; {2109#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:08:43,585 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {2109#(= ~systemActive~0 (_ bv1 32))} {2109#(= ~systemActive~0 (_ bv1 32))} #369#return; {2109#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:08:43,585 INFO L290 TraceCheckUtils]: 22: Hoare triple {2109#(= ~systemActive~0 (_ bv1 32))} ~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret58#1;havoc select_features_#t~ret58#1; {2109#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:08:43,586 INFO L272 TraceCheckUtils]: 23: Hoare triple {2109#(= ~systemActive~0 (_ bv1 32))} call select_features_#t~ret59#1 := select_one(); {2109#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:08:43,586 INFO L290 TraceCheckUtils]: 24: Hoare triple {2109#(= ~systemActive~0 (_ bv1 32))} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {2109#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:08:43,587 INFO L290 TraceCheckUtils]: 25: Hoare triple {2109#(= ~systemActive~0 (_ bv1 32))} assume true; {2109#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:08:43,587 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {2109#(= ~systemActive~0 (_ bv1 32))} {2109#(= ~systemActive~0 (_ bv1 32))} #371#return; {2109#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:08:43,588 INFO L290 TraceCheckUtils]: 27: Hoare triple {2109#(= ~systemActive~0 (_ bv1 32))} ~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret59#1;havoc select_features_#t~ret59#1; {2109#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:08:43,588 INFO L272 TraceCheckUtils]: 28: Hoare triple {2109#(= ~systemActive~0 (_ bv1 32))} call select_features_#t~ret60#1 := select_one(); {2109#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:08:43,589 INFO L290 TraceCheckUtils]: 29: Hoare triple {2109#(= ~systemActive~0 (_ bv1 32))} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {2109#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:08:43,589 INFO L290 TraceCheckUtils]: 30: Hoare triple {2109#(= ~systemActive~0 (_ bv1 32))} assume true; {2109#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:08:43,590 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {2109#(= ~systemActive~0 (_ bv1 32))} {2109#(= ~systemActive~0 (_ bv1 32))} #373#return; {2109#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:08:43,590 INFO L290 TraceCheckUtils]: 32: Hoare triple {2109#(= ~systemActive~0 (_ bv1 32))} ~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret60#1;havoc select_features_#t~ret60#1; {2109#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:08:43,590 INFO L290 TraceCheckUtils]: 33: Hoare triple {2109#(= ~systemActive~0 (_ bv1 32))} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~13#1;havoc valid_product_~retValue_acc~13#1;valid_product_~retValue_acc~13#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~13#1; {2109#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:08:43,591 INFO L290 TraceCheckUtils]: 34: Hoare triple {2109#(= ~systemActive~0 (_ bv1 32))} main_#t~ret24#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~6#1 := main_#t~ret24#1;havoc main_#t~ret24#1; {2109#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:08:43,591 INFO L290 TraceCheckUtils]: 35: Hoare triple {2109#(= ~systemActive~0 (_ bv1 32))} assume 0bv32 != main_~tmp~6#1;assume { :begin_inline_setup } true; {2109#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:08:43,591 INFO L290 TraceCheckUtils]: 36: Hoare triple {2109#(= ~systemActive~0 (_ bv1 32))} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0bv32; {2109#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:08:43,592 INFO L290 TraceCheckUtils]: 37: Hoare triple {2109#(= ~systemActive~0 (_ bv1 32))} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet25#1, test_#t~nondet26#1, test_#t~nondet27#1, test_#t~nondet28#1, test_~splverifierCounter~0#1, test_~tmp~7#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~7#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0bv32; {2109#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:08:43,592 INFO L290 TraceCheckUtils]: 38: Hoare triple {2109#(= ~systemActive~0 (_ bv1 32))} assume !false; {2109#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:08:43,593 INFO L290 TraceCheckUtils]: 39: Hoare triple {2109#(= ~systemActive~0 (_ bv1 32))} assume ~bvslt32(test_~splverifierCounter~0#1, 4bv32); {2109#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:08:43,593 INFO L290 TraceCheckUtils]: 40: Hoare triple {2109#(= ~systemActive~0 (_ bv1 32))} test_~tmp~7#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {2109#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:08:43,594 INFO L290 TraceCheckUtils]: 41: Hoare triple {2109#(= ~systemActive~0 (_ bv1 32))} assume !(0bv32 != test_~tmp~7#1); {2109#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:08:43,594 INFO L290 TraceCheckUtils]: 42: Hoare triple {2109#(= ~systemActive~0 (_ bv1 32))} test_~tmp___0~2#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {2109#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:08:43,594 INFO L290 TraceCheckUtils]: 43: Hoare triple {2109#(= ~systemActive~0 (_ bv1 32))} assume !(0bv32 != test_~tmp___0~2#1); {2109#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:08:43,595 INFO L290 TraceCheckUtils]: 44: Hoare triple {2109#(= ~systemActive~0 (_ bv1 32))} test_~tmp___2~0#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {2109#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:08:43,595 INFO L290 TraceCheckUtils]: 45: Hoare triple {2109#(= ~systemActive~0 (_ bv1 32))} assume 0bv32 != test_~tmp___2~0#1; {2109#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:08:43,595 INFO L290 TraceCheckUtils]: 46: Hoare triple {2109#(= ~systemActive~0 (_ bv1 32))} assume !(0bv32 != ~__SELECTED_FEATURE_startCommand~0); {2109#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:08:43,612 INFO L272 TraceCheckUtils]: 47: Hoare triple {2109#(= ~systemActive~0 (_ bv1 32))} call timeShift(); {2109#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:08:43,612 INFO L290 TraceCheckUtils]: 48: Hoare triple {2109#(= ~systemActive~0 (_ bv1 32))} assume !(0bv32 != ~pumpRunning~0); {2109#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:08:43,613 INFO L290 TraceCheckUtils]: 49: Hoare triple {2109#(= ~systemActive~0 (_ bv1 32))} assume !(0bv32 != ~systemActive~0); {2105#false} is VALID [2022-02-20 18:08:43,613 INFO L290 TraceCheckUtils]: 50: Hoare triple {2105#false} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret29#1, __utac_acc__Specification2_spec__2_#t~ret30#1, __utac_acc__Specification2_spec__2_~tmp~8#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~8#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {2105#false} is VALID [2022-02-20 18:08:43,613 INFO L272 TraceCheckUtils]: 51: Hoare triple {2105#false} call __utac_acc__Specification2_spec__2_#t~ret29#1 := isMethaneLevelCritical(); {2105#false} is VALID [2022-02-20 18:08:43,613 INFO L290 TraceCheckUtils]: 52: Hoare triple {2105#false} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {2105#false} is VALID [2022-02-20 18:08:43,613 INFO L290 TraceCheckUtils]: 53: Hoare triple {2105#false} assume true; {2105#false} is VALID [2022-02-20 18:08:43,614 INFO L284 TraceCheckUtils]: 54: Hoare quadruple {2105#false} {2105#false} #361#return; {2105#false} is VALID [2022-02-20 18:08:43,614 INFO L290 TraceCheckUtils]: 55: Hoare triple {2105#false} __utac_acc__Specification2_spec__2_~tmp~8#1 := __utac_acc__Specification2_spec__2_#t~ret29#1;havoc __utac_acc__Specification2_spec__2_#t~ret29#1; {2105#false} is VALID [2022-02-20 18:08:43,614 INFO L290 TraceCheckUtils]: 56: Hoare triple {2105#false} assume 0bv32 != __utac_acc__Specification2_spec__2_~tmp~8#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~5#1;havoc isPumpRunning_~retValue_acc~5#1;isPumpRunning_~retValue_acc~5#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~5#1; {2105#false} is VALID [2022-02-20 18:08:43,614 INFO L290 TraceCheckUtils]: 57: Hoare triple {2105#false} __utac_acc__Specification2_spec__2_#t~ret30#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret30#1;havoc __utac_acc__Specification2_spec__2_#t~ret30#1; {2105#false} is VALID [2022-02-20 18:08:43,614 INFO L290 TraceCheckUtils]: 58: Hoare triple {2105#false} assume 0bv32 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {2105#false} is VALID [2022-02-20 18:08:43,614 INFO L290 TraceCheckUtils]: 59: Hoare triple {2105#false} assume 0bv32 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {2105#false} is VALID [2022-02-20 18:08:43,615 INFO L290 TraceCheckUtils]: 60: Hoare triple {2105#false} assume !false; {2105#false} is VALID [2022-02-20 18:08:43,615 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-02-20 18:08:43,615 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-02-20 18:08:43,615 INFO L144 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-02-20 18:08:43,616 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1533757175] [2022-02-20 18:08:43,616 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1533757175] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:08:43,616 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:08:43,616 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-02-20 18:08:43,616 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1662912204] [2022-02-20 18:08:43,616 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:08:43,617 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 12.0) internal successors, (36), 2 states have internal predecessors, (36), 2 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 61 [2022-02-20 18:08:43,617 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:08:43,618 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 3 states, 3 states have (on average 12.0) internal successors, (36), 2 states have internal predecessors, (36), 2 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:08:43,659 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 51 edges. 51 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:43,659 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-02-20 18:08:43,659 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-02-20 18:08:43,660 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-02-20 18:08:43,660 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:08:43,661 INFO L87 Difference]: Start difference. First operand 127 states and 171 transitions. Second operand has 3 states, 3 states have (on average 12.0) internal successors, (36), 2 states have internal predecessors, (36), 2 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:08:43,888 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:43,888 INFO L93 Difference]: Finished difference Result 333 states and 456 transitions. [2022-02-20 18:08:43,888 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-02-20 18:08:43,889 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 12.0) internal successors, (36), 2 states have internal predecessors, (36), 2 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 61 [2022-02-20 18:08:43,889 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:08:43,889 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 12.0) internal successors, (36), 2 states have internal predecessors, (36), 2 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:08:43,894 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 456 transitions. [2022-02-20 18:08:43,894 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 12.0) internal successors, (36), 2 states have internal predecessors, (36), 2 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:08:43,899 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 456 transitions. [2022-02-20 18:08:43,899 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 456 transitions. [2022-02-20 18:08:44,250 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 456 edges. 456 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:44,256 INFO L225 Difference]: With dead ends: 333 [2022-02-20 18:08:44,256 INFO L226 Difference]: Without dead ends: 229 [2022-02-20 18:08:44,257 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 60 GetRequests, 59 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:08:44,258 INFO L933 BasicCegarLoop]: 210 mSDtfsCounter, 128 mSDsluCounter, 138 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 128 SdHoareTripleChecker+Valid, 348 SdHoareTripleChecker+Invalid, 6 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:08:44,258 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [128 Valid, 348 Invalid, 6 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:08:44,259 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 229 states. [2022-02-20 18:08:44,279 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 229 to 226. [2022-02-20 18:08:44,279 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:08:44,280 INFO L82 GeneralOperation]: Start isEquivalent. First operand 229 states. Second operand has 226 states, 156 states have (on average 1.3653846153846154) internal successors, (213), 185 states have internal predecessors, (213), 48 states have call successors, (48), 21 states have call predecessors, (48), 21 states have return successors, (48), 37 states have call predecessors, (48), 48 states have call successors, (48) [2022-02-20 18:08:44,281 INFO L74 IsIncluded]: Start isIncluded. First operand 229 states. Second operand has 226 states, 156 states have (on average 1.3653846153846154) internal successors, (213), 185 states have internal predecessors, (213), 48 states have call successors, (48), 21 states have call predecessors, (48), 21 states have return successors, (48), 37 states have call predecessors, (48), 48 states have call successors, (48) [2022-02-20 18:08:44,281 INFO L87 Difference]: Start difference. First operand 229 states. Second operand has 226 states, 156 states have (on average 1.3653846153846154) internal successors, (213), 185 states have internal predecessors, (213), 48 states have call successors, (48), 21 states have call predecessors, (48), 21 states have return successors, (48), 37 states have call predecessors, (48), 48 states have call successors, (48) [2022-02-20 18:08:44,290 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:44,290 INFO L93 Difference]: Finished difference Result 229 states and 311 transitions. [2022-02-20 18:08:44,290 INFO L276 IsEmpty]: Start isEmpty. Operand 229 states and 311 transitions. [2022-02-20 18:08:44,291 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:44,291 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:44,292 INFO L74 IsIncluded]: Start isIncluded. First operand has 226 states, 156 states have (on average 1.3653846153846154) internal successors, (213), 185 states have internal predecessors, (213), 48 states have call successors, (48), 21 states have call predecessors, (48), 21 states have return successors, (48), 37 states have call predecessors, (48), 48 states have call successors, (48) Second operand 229 states. [2022-02-20 18:08:44,293 INFO L87 Difference]: Start difference. First operand has 226 states, 156 states have (on average 1.3653846153846154) internal successors, (213), 185 states have internal predecessors, (213), 48 states have call successors, (48), 21 states have call predecessors, (48), 21 states have return successors, (48), 37 states have call predecessors, (48), 48 states have call successors, (48) Second operand 229 states. [2022-02-20 18:08:44,301 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:44,302 INFO L93 Difference]: Finished difference Result 229 states and 311 transitions. [2022-02-20 18:08:44,302 INFO L276 IsEmpty]: Start isEmpty. Operand 229 states and 311 transitions. [2022-02-20 18:08:44,303 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:44,303 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:44,303 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:08:44,303 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:08:44,304 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 226 states, 156 states have (on average 1.3653846153846154) internal successors, (213), 185 states have internal predecessors, (213), 48 states have call successors, (48), 21 states have call predecessors, (48), 21 states have return successors, (48), 37 states have call predecessors, (48), 48 states have call successors, (48) [2022-02-20 18:08:44,313 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 226 states to 226 states and 309 transitions. [2022-02-20 18:08:44,314 INFO L78 Accepts]: Start accepts. Automaton has 226 states and 309 transitions. Word has length 61 [2022-02-20 18:08:44,314 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:08:44,314 INFO L470 AbstractCegarLoop]: Abstraction has 226 states and 309 transitions. [2022-02-20 18:08:44,314 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 12.0) internal successors, (36), 2 states have internal predecessors, (36), 2 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:08:44,315 INFO L276 IsEmpty]: Start isEmpty. Operand 226 states and 309 transitions. [2022-02-20 18:08:44,316 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2022-02-20 18:08:44,316 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:08:44,316 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:08:44,331 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (4)] Forceful destruction successful, exit code 0 [2022-02-20 18:08:44,533 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-02-20 18:08:44,534 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:08:44,534 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:08:44,534 INFO L85 PathProgramCache]: Analyzing trace with hash 1929049426, now seen corresponding path program 1 times [2022-02-20 18:08:44,535 INFO L126 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-02-20 18:08:44,535 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1133908715] [2022-02-20 18:08:44,535 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:08:44,535 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-02-20 18:08:44,535 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-02-20 18:08:44,536 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-02-20 18:08:44,538 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (5)] Waiting until timeout for monitored process [2022-02-20 18:08:44,607 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:44,610 INFO L263 TraceCheckSpWp]: Trace formula consists of 224 conjuncts, 6 conjunts are in the unsatisfiable core [2022-02-20 18:08:44,628 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:44,629 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 18:08:44,838 INFO L290 TraceCheckUtils]: 0: Hoare triple {3561#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0bv32, 0bv32;assume 0bv1 == #valid[0bv32];assume ~bvult32(0bv32, #StackHeapBarrier);call #Ultimate.allocInit(2bv32, 1bv32);call write~init~intINTTYPE1(48bv8, 1bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 1bv32, 1bv32, 1bv32);call #Ultimate.allocInit(38bv32, 2bv32);call #Ultimate.allocInit(12bv32, 3bv32);call #Ultimate.allocInit(13bv32, 4bv32);call #Ultimate.allocInit(7bv32, 5bv32);call write~init~intINTTYPE1(44bv8, 5bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(77bv8, 5bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(101bv8, 5bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(116bv8, 5bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(104bv8, 5bv32, 4bv32, 1bv32);call write~init~intINTTYPE1(58bv8, 5bv32, 5bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 5bv32, 6bv32, 1bv32);call #Ultimate.allocInit(5bv32, 6bv32);call write~init~intINTTYPE1(67bv8, 6bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(82bv8, 6bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(73bv8, 6bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(84bv8, 6bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 6bv32, 4bv32, 1bv32);call #Ultimate.allocInit(3bv32, 7bv32);call write~init~intINTTYPE1(79bv8, 7bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(75bv8, 7bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 7bv32, 2bv32, 1bv32);call #Ultimate.allocInit(2bv32, 8bv32);call write~init~intINTTYPE1(41bv8, 8bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 8bv32, 1bv32, 1bv32);call #Ultimate.allocInit(13bv32, 9bv32);call #Ultimate.allocInit(3bv32, 10bv32);call write~init~intINTTYPE1(79bv8, 10bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(110bv8, 10bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 10bv32, 2bv32, 1bv32);call #Ultimate.allocInit(4bv32, 11bv32);call write~init~intINTTYPE1(79bv8, 11bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 11bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 11bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 11bv32, 3bv32, 1bv32);call #Ultimate.allocInit(7bv32, 12bv32);call write~init~intINTTYPE1(44bv8, 12bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(80bv8, 12bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(117bv8, 12bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(109bv8, 12bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(112bv8, 12bv32, 4bv32, 1bv32);call write~init~intINTTYPE1(58bv8, 12bv32, 5bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 12bv32, 6bv32, 1bv32);call #Ultimate.allocInit(3bv32, 13bv32);call write~init~intINTTYPE1(79bv8, 13bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(110bv8, 13bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 13bv32, 2bv32, 1bv32);call #Ultimate.allocInit(4bv32, 14bv32);call write~init~intINTTYPE1(79bv8, 14bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 14bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 14bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 14bv32, 3bv32, 1bv32);call #Ultimate.allocInit(3bv32, 15bv32);call write~init~intINTTYPE1(41bv8, 15bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(32bv8, 15bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 15bv32, 2bv32, 1bv32);call #Ultimate.allocInit(2bv32, 16bv32);call write~init~intINTTYPE1(10bv8, 16bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 16bv32, 1bv32, 1bv32);call #Ultimate.allocInit(30bv32, 17bv32);call #Ultimate.allocInit(9bv32, 18bv32);call #Ultimate.allocInit(21bv32, 19bv32);call #Ultimate.allocInit(30bv32, 20bv32);call #Ultimate.allocInit(9bv32, 21bv32);call #Ultimate.allocInit(21bv32, 22bv32);call #Ultimate.allocInit(30bv32, 23bv32);call #Ultimate.allocInit(9bv32, 24bv32);call #Ultimate.allocInit(25bv32, 25bv32);call #Ultimate.allocInit(30bv32, 26bv32);call #Ultimate.allocInit(9bv32, 27bv32);call #Ultimate.allocInit(25bv32, 28bv32);~__SELECTED_FEATURE_base~0 := 0bv32;~__SELECTED_FEATURE_highWaterSensor~0 := 0bv32;~__SELECTED_FEATURE_lowWaterSensor~0 := 0bv32;~__SELECTED_FEATURE_methaneQuery~0 := 0bv32;~__SELECTED_FEATURE_methaneAlarm~0 := 0bv32;~__SELECTED_FEATURE_stopCommand~0 := 0bv32;~__SELECTED_FEATURE_startCommand~0 := 0bv32;~__GUIDSL_ROOT_PRODUCTION~0 := 0bv32;~waterLevel~0 := 1bv32;~methaneLevelCritical~0 := 0bv32;~pumpRunning~0 := 0bv32;~systemActive~0 := 1bv32;~cleanupTimeShifts~0 := 4bv32;~methAndRunningLastTime~0 := 0bv32;~head~0.base, ~head~0.offset := 0bv32, 0bv32; {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:08:44,838 INFO L290 TraceCheckUtils]: 1: Hoare triple {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret24#1, main_~retValue_acc~8#1, main_~tmp~6#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~6#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1bv32; {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:08:44,840 INFO L290 TraceCheckUtils]: 2: Hoare triple {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret55#1, select_features_#t~ret56#1, select_features_#t~ret57#1, select_features_#t~ret58#1, select_features_#t~ret59#1, select_features_#t~ret60#1;~__SELECTED_FEATURE_base~0 := 1bv32; {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:08:44,841 INFO L272 TraceCheckUtils]: 3: Hoare triple {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} call select_features_#t~ret55#1 := select_one(); {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:08:44,841 INFO L290 TraceCheckUtils]: 4: Hoare triple {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:08:44,841 INFO L290 TraceCheckUtils]: 5: Hoare triple {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} assume true; {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:08:44,842 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} #363#return; {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:08:44,842 INFO L290 TraceCheckUtils]: 7: Hoare triple {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} ~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret55#1;havoc select_features_#t~ret55#1; {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:08:44,843 INFO L272 TraceCheckUtils]: 8: Hoare triple {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} call select_features_#t~ret56#1 := select_one(); {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:08:44,844 INFO L290 TraceCheckUtils]: 9: Hoare triple {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:08:44,844 INFO L290 TraceCheckUtils]: 10: Hoare triple {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} assume true; {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:08:44,844 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} #365#return; {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:08:44,845 INFO L290 TraceCheckUtils]: 12: Hoare triple {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} ~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret56#1;havoc select_features_#t~ret56#1; {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:08:44,845 INFO L272 TraceCheckUtils]: 13: Hoare triple {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} call select_features_#t~ret57#1 := select_one(); {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:08:44,845 INFO L290 TraceCheckUtils]: 14: Hoare triple {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:08:44,848 INFO L290 TraceCheckUtils]: 15: Hoare triple {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} assume true; {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:08:44,848 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} #367#return; {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:08:44,848 INFO L290 TraceCheckUtils]: 17: Hoare triple {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} ~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret57#1;havoc select_features_#t~ret57#1; {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:08:44,849 INFO L272 TraceCheckUtils]: 18: Hoare triple {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} call select_features_#t~ret58#1 := select_one(); {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:08:44,849 INFO L290 TraceCheckUtils]: 19: Hoare triple {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:08:44,850 INFO L290 TraceCheckUtils]: 20: Hoare triple {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} assume true; {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:08:44,850 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} #369#return; {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:08:44,850 INFO L290 TraceCheckUtils]: 22: Hoare triple {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} ~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret58#1;havoc select_features_#t~ret58#1; {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:08:44,851 INFO L272 TraceCheckUtils]: 23: Hoare triple {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} call select_features_#t~ret59#1 := select_one(); {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:08:44,853 INFO L290 TraceCheckUtils]: 24: Hoare triple {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:08:44,854 INFO L290 TraceCheckUtils]: 25: Hoare triple {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} assume true; {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:08:44,857 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} #371#return; {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:08:44,858 INFO L290 TraceCheckUtils]: 27: Hoare triple {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} ~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret59#1;havoc select_features_#t~ret59#1; {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:08:44,858 INFO L272 TraceCheckUtils]: 28: Hoare triple {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} call select_features_#t~ret60#1 := select_one(); {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:08:44,858 INFO L290 TraceCheckUtils]: 29: Hoare triple {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:08:44,859 INFO L290 TraceCheckUtils]: 30: Hoare triple {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} assume true; {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:08:44,859 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} #373#return; {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:08:44,860 INFO L290 TraceCheckUtils]: 32: Hoare triple {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} ~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret60#1;havoc select_features_#t~ret60#1; {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:08:44,860 INFO L290 TraceCheckUtils]: 33: Hoare triple {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~13#1;havoc valid_product_~retValue_acc~13#1;valid_product_~retValue_acc~13#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~13#1; {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:08:44,860 INFO L290 TraceCheckUtils]: 34: Hoare triple {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} main_#t~ret24#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~6#1 := main_#t~ret24#1;havoc main_#t~ret24#1; {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:08:44,861 INFO L290 TraceCheckUtils]: 35: Hoare triple {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} assume 0bv32 != main_~tmp~6#1;assume { :begin_inline_setup } true; {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:08:44,861 INFO L290 TraceCheckUtils]: 36: Hoare triple {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0bv32; {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:08:44,861 INFO L290 TraceCheckUtils]: 37: Hoare triple {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet25#1, test_#t~nondet26#1, test_#t~nondet27#1, test_#t~nondet28#1, test_~splverifierCounter~0#1, test_~tmp~7#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~7#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0bv32; {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:08:44,862 INFO L290 TraceCheckUtils]: 38: Hoare triple {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} assume !false; {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:08:44,862 INFO L290 TraceCheckUtils]: 39: Hoare triple {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} assume ~bvslt32(test_~splverifierCounter~0#1, 4bv32); {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:08:44,862 INFO L290 TraceCheckUtils]: 40: Hoare triple {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} test_~tmp~7#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:08:44,863 INFO L290 TraceCheckUtils]: 41: Hoare triple {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} assume !(0bv32 != test_~tmp~7#1); {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:08:44,863 INFO L290 TraceCheckUtils]: 42: Hoare triple {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} test_~tmp___0~2#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:08:44,863 INFO L290 TraceCheckUtils]: 43: Hoare triple {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} assume !(0bv32 != test_~tmp___0~2#1); {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:08:44,864 INFO L290 TraceCheckUtils]: 44: Hoare triple {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} test_~tmp___2~0#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:08:44,864 INFO L290 TraceCheckUtils]: 45: Hoare triple {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} assume !(0bv32 != test_~tmp___2~0#1);test_~tmp___1~0#1 := test_#t~nondet28#1;havoc test_#t~nondet28#1; {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:08:44,864 INFO L290 TraceCheckUtils]: 46: Hoare triple {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} assume 0bv32 != test_~tmp___1~0#1; {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:08:44,865 INFO L290 TraceCheckUtils]: 47: Hoare triple {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} assume 0bv32 != ~__SELECTED_FEATURE_stopCommand~0;assume { :begin_inline_stopSystem } true; {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:08:44,865 INFO L290 TraceCheckUtils]: 48: Hoare triple {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} assume !(0bv32 != ~pumpRunning~0); {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:08:44,865 INFO L290 TraceCheckUtils]: 49: Hoare triple {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} ~systemActive~0 := 0bv32; {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:08:44,866 INFO L290 TraceCheckUtils]: 50: Hoare triple {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} assume { :end_inline_stopSystem } true; {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:08:44,866 INFO L272 TraceCheckUtils]: 51: Hoare triple {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} call timeShift(); {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:08:44,867 INFO L290 TraceCheckUtils]: 52: Hoare triple {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} assume !(0bv32 != ~pumpRunning~0); {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:08:44,867 INFO L290 TraceCheckUtils]: 53: Hoare triple {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} assume !(0bv32 != ~systemActive~0); {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:08:44,867 INFO L290 TraceCheckUtils]: 54: Hoare triple {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret29#1, __utac_acc__Specification2_spec__2_#t~ret30#1, __utac_acc__Specification2_spec__2_~tmp~8#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~8#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:08:44,868 INFO L272 TraceCheckUtils]: 55: Hoare triple {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} call __utac_acc__Specification2_spec__2_#t~ret29#1 := isMethaneLevelCritical(); {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} is VALID [2022-02-20 18:08:44,868 INFO L290 TraceCheckUtils]: 56: Hoare triple {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {3735#(and (= ~methaneLevelCritical~0 (_ bv0 32)) (= ~methaneLevelCritical~0 |isMethaneLevelCritical_#res|))} is VALID [2022-02-20 18:08:44,868 INFO L290 TraceCheckUtils]: 57: Hoare triple {3735#(and (= ~methaneLevelCritical~0 (_ bv0 32)) (= ~methaneLevelCritical~0 |isMethaneLevelCritical_#res|))} assume true; {3735#(and (= ~methaneLevelCritical~0 (_ bv0 32)) (= ~methaneLevelCritical~0 |isMethaneLevelCritical_#res|))} is VALID [2022-02-20 18:08:44,869 INFO L284 TraceCheckUtils]: 58: Hoare quadruple {3735#(and (= ~methaneLevelCritical~0 (_ bv0 32)) (= ~methaneLevelCritical~0 |isMethaneLevelCritical_#res|))} {3566#(= ~methaneLevelCritical~0 (_ bv0 32))} #361#return; {3742#(= |timeShift___utac_acc__Specification2_spec__2_#t~ret29#1| (_ bv0 32))} is VALID [2022-02-20 18:08:44,870 INFO L290 TraceCheckUtils]: 59: Hoare triple {3742#(= |timeShift___utac_acc__Specification2_spec__2_#t~ret29#1| (_ bv0 32))} __utac_acc__Specification2_spec__2_~tmp~8#1 := __utac_acc__Specification2_spec__2_#t~ret29#1;havoc __utac_acc__Specification2_spec__2_#t~ret29#1; {3746#(= |timeShift___utac_acc__Specification2_spec__2_~tmp~8#1| (_ bv0 32))} is VALID [2022-02-20 18:08:44,870 INFO L290 TraceCheckUtils]: 60: Hoare triple {3746#(= |timeShift___utac_acc__Specification2_spec__2_~tmp~8#1| (_ bv0 32))} assume 0bv32 != __utac_acc__Specification2_spec__2_~tmp~8#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~5#1;havoc isPumpRunning_~retValue_acc~5#1;isPumpRunning_~retValue_acc~5#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~5#1; {3562#false} is VALID [2022-02-20 18:08:44,870 INFO L290 TraceCheckUtils]: 61: Hoare triple {3562#false} __utac_acc__Specification2_spec__2_#t~ret30#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret30#1;havoc __utac_acc__Specification2_spec__2_#t~ret30#1; {3562#false} is VALID [2022-02-20 18:08:44,870 INFO L290 TraceCheckUtils]: 62: Hoare triple {3562#false} assume 0bv32 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {3562#false} is VALID [2022-02-20 18:08:44,870 INFO L290 TraceCheckUtils]: 63: Hoare triple {3562#false} assume 0bv32 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {3562#false} is VALID [2022-02-20 18:08:44,871 INFO L290 TraceCheckUtils]: 64: Hoare triple {3562#false} assume !false; {3562#false} is VALID [2022-02-20 18:08:44,871 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-02-20 18:08:44,871 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-02-20 18:08:44,871 INFO L144 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-02-20 18:08:44,871 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1133908715] [2022-02-20 18:08:44,872 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1133908715] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:08:44,872 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:08:44,872 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-02-20 18:08:44,872 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1009787516] [2022-02-20 18:08:44,872 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:08:44,873 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 4 states have internal predecessors, (40), 1 states have call successors, (8), 1 states have call predecessors, (8), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) Word has length 65 [2022-02-20 18:08:44,873 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:08:44,873 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 4 states have internal predecessors, (40), 1 states have call successors, (8), 1 states have call predecessors, (8), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) [2022-02-20 18:08:44,920 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 55 edges. 55 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:44,921 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-02-20 18:08:44,921 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-02-20 18:08:44,921 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-02-20 18:08:44,921 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-02-20 18:08:44,922 INFO L87 Difference]: Start difference. First operand 226 states and 309 transitions. Second operand has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 4 states have internal predecessors, (40), 1 states have call successors, (8), 1 states have call predecessors, (8), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) [2022-02-20 18:08:45,599 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:45,600 INFO L93 Difference]: Finished difference Result 630 states and 872 transitions. [2022-02-20 18:08:45,600 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-02-20 18:08:45,600 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 4 states have internal predecessors, (40), 1 states have call successors, (8), 1 states have call predecessors, (8), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) Word has length 65 [2022-02-20 18:08:45,600 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:08:45,601 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 4 states have internal predecessors, (40), 1 states have call successors, (8), 1 states have call predecessors, (8), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) [2022-02-20 18:08:45,608 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 457 transitions. [2022-02-20 18:08:45,609 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 4 states have internal predecessors, (40), 1 states have call successors, (8), 1 states have call predecessors, (8), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) [2022-02-20 18:08:45,624 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 457 transitions. [2022-02-20 18:08:45,624 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 457 transitions. [2022-02-20 18:08:45,979 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 457 edges. 457 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:45,994 INFO L225 Difference]: With dead ends: 630 [2022-02-20 18:08:45,994 INFO L226 Difference]: Without dead ends: 427 [2022-02-20 18:08:45,995 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 66 GetRequests, 60 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=18, Invalid=38, Unknown=0, NotChecked=0, Total=56 [2022-02-20 18:08:45,996 INFO L933 BasicCegarLoop]: 189 mSDtfsCounter, 117 mSDsluCounter, 618 mSDsCounter, 0 mSdLazyCounter, 74 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 120 SdHoareTripleChecker+Valid, 807 SdHoareTripleChecker+Invalid, 78 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 74 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-02-20 18:08:45,996 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [120 Valid, 807 Invalid, 78 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 74 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-02-20 18:08:45,997 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 427 states. [2022-02-20 18:08:46,015 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 427 to 421. [2022-02-20 18:08:46,015 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:08:46,017 INFO L82 GeneralOperation]: Start isEquivalent. First operand 427 states. Second operand has 421 states, 289 states have (on average 1.3667820069204153) internal successors, (395), 346 states have internal predecessors, (395), 90 states have call successors, (90), 41 states have call predecessors, (90), 41 states have return successors, (92), 68 states have call predecessors, (92), 90 states have call successors, (92) [2022-02-20 18:08:46,018 INFO L74 IsIncluded]: Start isIncluded. First operand 427 states. Second operand has 421 states, 289 states have (on average 1.3667820069204153) internal successors, (395), 346 states have internal predecessors, (395), 90 states have call successors, (90), 41 states have call predecessors, (90), 41 states have return successors, (92), 68 states have call predecessors, (92), 90 states have call successors, (92) [2022-02-20 18:08:46,019 INFO L87 Difference]: Start difference. First operand 427 states. Second operand has 421 states, 289 states have (on average 1.3667820069204153) internal successors, (395), 346 states have internal predecessors, (395), 90 states have call successors, (90), 41 states have call predecessors, (90), 41 states have return successors, (92), 68 states have call predecessors, (92), 90 states have call successors, (92) [2022-02-20 18:08:46,036 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:46,036 INFO L93 Difference]: Finished difference Result 427 states and 583 transitions. [2022-02-20 18:08:46,036 INFO L276 IsEmpty]: Start isEmpty. Operand 427 states and 583 transitions. [2022-02-20 18:08:46,038 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:46,038 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:46,040 INFO L74 IsIncluded]: Start isIncluded. First operand has 421 states, 289 states have (on average 1.3667820069204153) internal successors, (395), 346 states have internal predecessors, (395), 90 states have call successors, (90), 41 states have call predecessors, (90), 41 states have return successors, (92), 68 states have call predecessors, (92), 90 states have call successors, (92) Second operand 427 states. [2022-02-20 18:08:46,041 INFO L87 Difference]: Start difference. First operand has 421 states, 289 states have (on average 1.3667820069204153) internal successors, (395), 346 states have internal predecessors, (395), 90 states have call successors, (90), 41 states have call predecessors, (90), 41 states have return successors, (92), 68 states have call predecessors, (92), 90 states have call successors, (92) Second operand 427 states. [2022-02-20 18:08:46,062 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:46,062 INFO L93 Difference]: Finished difference Result 427 states and 583 transitions. [2022-02-20 18:08:46,062 INFO L276 IsEmpty]: Start isEmpty. Operand 427 states and 583 transitions. [2022-02-20 18:08:46,064 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:46,064 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:46,064 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:08:46,064 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:08:46,066 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 421 states, 289 states have (on average 1.3667820069204153) internal successors, (395), 346 states have internal predecessors, (395), 90 states have call successors, (90), 41 states have call predecessors, (90), 41 states have return successors, (92), 68 states have call predecessors, (92), 90 states have call successors, (92) [2022-02-20 18:08:46,082 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 421 states to 421 states and 577 transitions. [2022-02-20 18:08:46,083 INFO L78 Accepts]: Start accepts. Automaton has 421 states and 577 transitions. Word has length 65 [2022-02-20 18:08:46,083 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:08:46,083 INFO L470 AbstractCegarLoop]: Abstraction has 421 states and 577 transitions. [2022-02-20 18:08:46,083 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 4 states have internal predecessors, (40), 1 states have call successors, (8), 1 states have call predecessors, (8), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) [2022-02-20 18:08:46,083 INFO L276 IsEmpty]: Start isEmpty. Operand 421 states and 577 transitions. [2022-02-20 18:08:46,085 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2022-02-20 18:08:46,085 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:08:46,085 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:08:46,098 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (5)] Forceful destruction successful, exit code 0 [2022-02-20 18:08:46,295 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-02-20 18:08:46,296 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:08:46,296 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:08:46,296 INFO L85 PathProgramCache]: Analyzing trace with hash -427180938, now seen corresponding path program 1 times [2022-02-20 18:08:46,297 INFO L126 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-02-20 18:08:46,297 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [852650313] [2022-02-20 18:08:46,297 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:08:46,297 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-02-20 18:08:46,298 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-02-20 18:08:46,300 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-02-20 18:08:46,301 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (6)] Waiting until timeout for monitored process [2022-02-20 18:08:46,372 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:46,376 INFO L263 TraceCheckSpWp]: Trace formula consists of 231 conjuncts, 7 conjunts are in the unsatisfiable core [2022-02-20 18:08:46,393 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:46,398 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 18:08:46,590 INFO L290 TraceCheckUtils]: 0: Hoare triple {6152#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0bv32, 0bv32;assume 0bv1 == #valid[0bv32];assume ~bvult32(0bv32, #StackHeapBarrier);call #Ultimate.allocInit(2bv32, 1bv32);call write~init~intINTTYPE1(48bv8, 1bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 1bv32, 1bv32, 1bv32);call #Ultimate.allocInit(38bv32, 2bv32);call #Ultimate.allocInit(12bv32, 3bv32);call #Ultimate.allocInit(13bv32, 4bv32);call #Ultimate.allocInit(7bv32, 5bv32);call write~init~intINTTYPE1(44bv8, 5bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(77bv8, 5bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(101bv8, 5bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(116bv8, 5bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(104bv8, 5bv32, 4bv32, 1bv32);call write~init~intINTTYPE1(58bv8, 5bv32, 5bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 5bv32, 6bv32, 1bv32);call #Ultimate.allocInit(5bv32, 6bv32);call write~init~intINTTYPE1(67bv8, 6bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(82bv8, 6bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(73bv8, 6bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(84bv8, 6bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 6bv32, 4bv32, 1bv32);call #Ultimate.allocInit(3bv32, 7bv32);call write~init~intINTTYPE1(79bv8, 7bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(75bv8, 7bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 7bv32, 2bv32, 1bv32);call #Ultimate.allocInit(2bv32, 8bv32);call write~init~intINTTYPE1(41bv8, 8bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 8bv32, 1bv32, 1bv32);call #Ultimate.allocInit(13bv32, 9bv32);call #Ultimate.allocInit(3bv32, 10bv32);call write~init~intINTTYPE1(79bv8, 10bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(110bv8, 10bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 10bv32, 2bv32, 1bv32);call #Ultimate.allocInit(4bv32, 11bv32);call write~init~intINTTYPE1(79bv8, 11bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 11bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 11bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 11bv32, 3bv32, 1bv32);call #Ultimate.allocInit(7bv32, 12bv32);call write~init~intINTTYPE1(44bv8, 12bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(80bv8, 12bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(117bv8, 12bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(109bv8, 12bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(112bv8, 12bv32, 4bv32, 1bv32);call write~init~intINTTYPE1(58bv8, 12bv32, 5bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 12bv32, 6bv32, 1bv32);call #Ultimate.allocInit(3bv32, 13bv32);call write~init~intINTTYPE1(79bv8, 13bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(110bv8, 13bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 13bv32, 2bv32, 1bv32);call #Ultimate.allocInit(4bv32, 14bv32);call write~init~intINTTYPE1(79bv8, 14bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 14bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 14bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 14bv32, 3bv32, 1bv32);call #Ultimate.allocInit(3bv32, 15bv32);call write~init~intINTTYPE1(41bv8, 15bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(32bv8, 15bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 15bv32, 2bv32, 1bv32);call #Ultimate.allocInit(2bv32, 16bv32);call write~init~intINTTYPE1(10bv8, 16bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 16bv32, 1bv32, 1bv32);call #Ultimate.allocInit(30bv32, 17bv32);call #Ultimate.allocInit(9bv32, 18bv32);call #Ultimate.allocInit(21bv32, 19bv32);call #Ultimate.allocInit(30bv32, 20bv32);call #Ultimate.allocInit(9bv32, 21bv32);call #Ultimate.allocInit(21bv32, 22bv32);call #Ultimate.allocInit(30bv32, 23bv32);call #Ultimate.allocInit(9bv32, 24bv32);call #Ultimate.allocInit(25bv32, 25bv32);call #Ultimate.allocInit(30bv32, 26bv32);call #Ultimate.allocInit(9bv32, 27bv32);call #Ultimate.allocInit(25bv32, 28bv32);~__SELECTED_FEATURE_base~0 := 0bv32;~__SELECTED_FEATURE_highWaterSensor~0 := 0bv32;~__SELECTED_FEATURE_lowWaterSensor~0 := 0bv32;~__SELECTED_FEATURE_methaneQuery~0 := 0bv32;~__SELECTED_FEATURE_methaneAlarm~0 := 0bv32;~__SELECTED_FEATURE_stopCommand~0 := 0bv32;~__SELECTED_FEATURE_startCommand~0 := 0bv32;~__GUIDSL_ROOT_PRODUCTION~0 := 0bv32;~waterLevel~0 := 1bv32;~methaneLevelCritical~0 := 0bv32;~pumpRunning~0 := 0bv32;~systemActive~0 := 1bv32;~cleanupTimeShifts~0 := 4bv32;~methAndRunningLastTime~0 := 0bv32;~head~0.base, ~head~0.offset := 0bv32, 0bv32; {6152#true} is VALID [2022-02-20 18:08:46,591 INFO L290 TraceCheckUtils]: 1: Hoare triple {6152#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret24#1, main_~retValue_acc~8#1, main_~tmp~6#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~6#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1bv32; {6152#true} is VALID [2022-02-20 18:08:46,591 INFO L290 TraceCheckUtils]: 2: Hoare triple {6152#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret55#1, select_features_#t~ret56#1, select_features_#t~ret57#1, select_features_#t~ret58#1, select_features_#t~ret59#1, select_features_#t~ret60#1;~__SELECTED_FEATURE_base~0 := 1bv32; {6152#true} is VALID [2022-02-20 18:08:46,591 INFO L272 TraceCheckUtils]: 3: Hoare triple {6152#true} call select_features_#t~ret55#1 := select_one(); {6152#true} is VALID [2022-02-20 18:08:46,592 INFO L290 TraceCheckUtils]: 4: Hoare triple {6152#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {6152#true} is VALID [2022-02-20 18:08:46,592 INFO L290 TraceCheckUtils]: 5: Hoare triple {6152#true} assume true; {6152#true} is VALID [2022-02-20 18:08:46,592 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {6152#true} {6152#true} #363#return; {6152#true} is VALID [2022-02-20 18:08:46,592 INFO L290 TraceCheckUtils]: 7: Hoare triple {6152#true} ~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret55#1;havoc select_features_#t~ret55#1; {6152#true} is VALID [2022-02-20 18:08:46,592 INFO L272 TraceCheckUtils]: 8: Hoare triple {6152#true} call select_features_#t~ret56#1 := select_one(); {6152#true} is VALID [2022-02-20 18:08:46,592 INFO L290 TraceCheckUtils]: 9: Hoare triple {6152#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {6152#true} is VALID [2022-02-20 18:08:46,592 INFO L290 TraceCheckUtils]: 10: Hoare triple {6152#true} assume true; {6152#true} is VALID [2022-02-20 18:08:46,593 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {6152#true} {6152#true} #365#return; {6152#true} is VALID [2022-02-20 18:08:46,593 INFO L290 TraceCheckUtils]: 12: Hoare triple {6152#true} ~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret56#1;havoc select_features_#t~ret56#1; {6152#true} is VALID [2022-02-20 18:08:46,593 INFO L272 TraceCheckUtils]: 13: Hoare triple {6152#true} call select_features_#t~ret57#1 := select_one(); {6152#true} is VALID [2022-02-20 18:08:46,593 INFO L290 TraceCheckUtils]: 14: Hoare triple {6152#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {6152#true} is VALID [2022-02-20 18:08:46,593 INFO L290 TraceCheckUtils]: 15: Hoare triple {6152#true} assume true; {6152#true} is VALID [2022-02-20 18:08:46,593 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {6152#true} {6152#true} #367#return; {6152#true} is VALID [2022-02-20 18:08:46,593 INFO L290 TraceCheckUtils]: 17: Hoare triple {6152#true} ~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret57#1;havoc select_features_#t~ret57#1; {6152#true} is VALID [2022-02-20 18:08:46,594 INFO L272 TraceCheckUtils]: 18: Hoare triple {6152#true} call select_features_#t~ret58#1 := select_one(); {6152#true} is VALID [2022-02-20 18:08:46,594 INFO L290 TraceCheckUtils]: 19: Hoare triple {6152#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {6152#true} is VALID [2022-02-20 18:08:46,594 INFO L290 TraceCheckUtils]: 20: Hoare triple {6152#true} assume true; {6152#true} is VALID [2022-02-20 18:08:46,594 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {6152#true} {6152#true} #369#return; {6152#true} is VALID [2022-02-20 18:08:46,594 INFO L290 TraceCheckUtils]: 22: Hoare triple {6152#true} ~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret58#1;havoc select_features_#t~ret58#1; {6152#true} is VALID [2022-02-20 18:08:46,594 INFO L272 TraceCheckUtils]: 23: Hoare triple {6152#true} call select_features_#t~ret59#1 := select_one(); {6152#true} is VALID [2022-02-20 18:08:46,594 INFO L290 TraceCheckUtils]: 24: Hoare triple {6152#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {6152#true} is VALID [2022-02-20 18:08:46,594 INFO L290 TraceCheckUtils]: 25: Hoare triple {6152#true} assume true; {6152#true} is VALID [2022-02-20 18:08:46,595 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {6152#true} {6152#true} #371#return; {6152#true} is VALID [2022-02-20 18:08:46,595 INFO L290 TraceCheckUtils]: 27: Hoare triple {6152#true} ~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret59#1;havoc select_features_#t~ret59#1; {6152#true} is VALID [2022-02-20 18:08:46,595 INFO L272 TraceCheckUtils]: 28: Hoare triple {6152#true} call select_features_#t~ret60#1 := select_one(); {6152#true} is VALID [2022-02-20 18:08:46,595 INFO L290 TraceCheckUtils]: 29: Hoare triple {6152#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {6152#true} is VALID [2022-02-20 18:08:46,595 INFO L290 TraceCheckUtils]: 30: Hoare triple {6152#true} assume true; {6152#true} is VALID [2022-02-20 18:08:46,595 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {6152#true} {6152#true} #373#return; {6152#true} is VALID [2022-02-20 18:08:46,595 INFO L290 TraceCheckUtils]: 32: Hoare triple {6152#true} ~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret60#1;havoc select_features_#t~ret60#1; {6152#true} is VALID [2022-02-20 18:08:46,595 INFO L290 TraceCheckUtils]: 33: Hoare triple {6152#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~13#1;havoc valid_product_~retValue_acc~13#1;valid_product_~retValue_acc~13#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~13#1; {6152#true} is VALID [2022-02-20 18:08:46,596 INFO L290 TraceCheckUtils]: 34: Hoare triple {6152#true} main_#t~ret24#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~6#1 := main_#t~ret24#1;havoc main_#t~ret24#1; {6152#true} is VALID [2022-02-20 18:08:46,596 INFO L290 TraceCheckUtils]: 35: Hoare triple {6152#true} assume 0bv32 != main_~tmp~6#1;assume { :begin_inline_setup } true; {6152#true} is VALID [2022-02-20 18:08:46,596 INFO L290 TraceCheckUtils]: 36: Hoare triple {6152#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0bv32; {6152#true} is VALID [2022-02-20 18:08:46,596 INFO L290 TraceCheckUtils]: 37: Hoare triple {6152#true} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet25#1, test_#t~nondet26#1, test_#t~nondet27#1, test_#t~nondet28#1, test_~splverifierCounter~0#1, test_~tmp~7#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~7#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0bv32; {6152#true} is VALID [2022-02-20 18:08:46,596 INFO L290 TraceCheckUtils]: 38: Hoare triple {6152#true} assume !false; {6152#true} is VALID [2022-02-20 18:08:46,596 INFO L290 TraceCheckUtils]: 39: Hoare triple {6152#true} assume ~bvslt32(test_~splverifierCounter~0#1, 4bv32); {6152#true} is VALID [2022-02-20 18:08:46,596 INFO L290 TraceCheckUtils]: 40: Hoare triple {6152#true} test_~tmp~7#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {6152#true} is VALID [2022-02-20 18:08:46,596 INFO L290 TraceCheckUtils]: 41: Hoare triple {6152#true} assume !(0bv32 != test_~tmp~7#1); {6152#true} is VALID [2022-02-20 18:08:46,597 INFO L290 TraceCheckUtils]: 42: Hoare triple {6152#true} test_~tmp___0~2#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {6152#true} is VALID [2022-02-20 18:08:46,597 INFO L290 TraceCheckUtils]: 43: Hoare triple {6152#true} assume 0bv32 != test_~tmp___0~2#1; {6152#true} is VALID [2022-02-20 18:08:46,597 INFO L272 TraceCheckUtils]: 44: Hoare triple {6152#true} call changeMethaneLevel(); {6152#true} is VALID [2022-02-20 18:08:46,597 INFO L290 TraceCheckUtils]: 45: Hoare triple {6152#true} assume !(0bv32 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1bv32; {6152#true} is VALID [2022-02-20 18:08:46,597 INFO L290 TraceCheckUtils]: 46: Hoare triple {6152#true} assume true; {6152#true} is VALID [2022-02-20 18:08:46,597 INFO L284 TraceCheckUtils]: 47: Hoare quadruple {6152#true} {6152#true} #377#return; {6152#true} is VALID [2022-02-20 18:08:46,597 INFO L290 TraceCheckUtils]: 48: Hoare triple {6152#true} test_~tmp___2~0#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {6152#true} is VALID [2022-02-20 18:08:46,597 INFO L290 TraceCheckUtils]: 49: Hoare triple {6152#true} assume !(0bv32 != test_~tmp___2~0#1);test_~tmp___1~0#1 := test_#t~nondet28#1;havoc test_#t~nondet28#1; {6152#true} is VALID [2022-02-20 18:08:46,598 INFO L290 TraceCheckUtils]: 50: Hoare triple {6152#true} assume 0bv32 != test_~tmp___1~0#1; {6152#true} is VALID [2022-02-20 18:08:46,598 INFO L290 TraceCheckUtils]: 51: Hoare triple {6152#true} assume 0bv32 != ~__SELECTED_FEATURE_stopCommand~0;assume { :begin_inline_stopSystem } true; {6152#true} is VALID [2022-02-20 18:08:46,598 INFO L290 TraceCheckUtils]: 52: Hoare triple {6152#true} assume !(0bv32 != ~pumpRunning~0); {6313#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:08:46,599 INFO L290 TraceCheckUtils]: 53: Hoare triple {6313#(= (_ bv0 32) ~pumpRunning~0)} ~systemActive~0 := 0bv32; {6313#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:08:46,599 INFO L290 TraceCheckUtils]: 54: Hoare triple {6313#(= (_ bv0 32) ~pumpRunning~0)} assume { :end_inline_stopSystem } true; {6313#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:08:46,600 INFO L272 TraceCheckUtils]: 55: Hoare triple {6313#(= (_ bv0 32) ~pumpRunning~0)} call timeShift(); {6313#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:08:46,600 INFO L290 TraceCheckUtils]: 56: Hoare triple {6313#(= (_ bv0 32) ~pumpRunning~0)} assume !(0bv32 != ~pumpRunning~0); {6313#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:08:46,600 INFO L290 TraceCheckUtils]: 57: Hoare triple {6313#(= (_ bv0 32) ~pumpRunning~0)} assume !(0bv32 != ~systemActive~0); {6313#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:08:46,600 INFO L290 TraceCheckUtils]: 58: Hoare triple {6313#(= (_ bv0 32) ~pumpRunning~0)} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret29#1, __utac_acc__Specification2_spec__2_#t~ret30#1, __utac_acc__Specification2_spec__2_~tmp~8#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~8#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {6313#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:08:46,601 INFO L272 TraceCheckUtils]: 59: Hoare triple {6313#(= (_ bv0 32) ~pumpRunning~0)} call __utac_acc__Specification2_spec__2_#t~ret29#1 := isMethaneLevelCritical(); {6313#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:08:46,601 INFO L290 TraceCheckUtils]: 60: Hoare triple {6313#(= (_ bv0 32) ~pumpRunning~0)} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {6313#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:08:46,601 INFO L290 TraceCheckUtils]: 61: Hoare triple {6313#(= (_ bv0 32) ~pumpRunning~0)} assume true; {6313#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:08:46,602 INFO L284 TraceCheckUtils]: 62: Hoare quadruple {6313#(= (_ bv0 32) ~pumpRunning~0)} {6313#(= (_ bv0 32) ~pumpRunning~0)} #361#return; {6313#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:08:46,602 INFO L290 TraceCheckUtils]: 63: Hoare triple {6313#(= (_ bv0 32) ~pumpRunning~0)} __utac_acc__Specification2_spec__2_~tmp~8#1 := __utac_acc__Specification2_spec__2_#t~ret29#1;havoc __utac_acc__Specification2_spec__2_#t~ret29#1; {6313#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:08:46,602 INFO L290 TraceCheckUtils]: 64: Hoare triple {6313#(= (_ bv0 32) ~pumpRunning~0)} assume 0bv32 != __utac_acc__Specification2_spec__2_~tmp~8#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~5#1;havoc isPumpRunning_~retValue_acc~5#1;isPumpRunning_~retValue_acc~5#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~5#1; {6350#(= |timeShift_isPumpRunning_#res#1| (_ bv0 32))} is VALID [2022-02-20 18:08:46,603 INFO L290 TraceCheckUtils]: 65: Hoare triple {6350#(= |timeShift_isPumpRunning_#res#1| (_ bv0 32))} __utac_acc__Specification2_spec__2_#t~ret30#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret30#1;havoc __utac_acc__Specification2_spec__2_#t~ret30#1; {6354#(= (_ bv0 32) |timeShift___utac_acc__Specification2_spec__2_~tmp___0~3#1|)} is VALID [2022-02-20 18:08:46,603 INFO L290 TraceCheckUtils]: 66: Hoare triple {6354#(= (_ bv0 32) |timeShift___utac_acc__Specification2_spec__2_~tmp___0~3#1|)} assume 0bv32 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {6153#false} is VALID [2022-02-20 18:08:46,603 INFO L290 TraceCheckUtils]: 67: Hoare triple {6153#false} assume 0bv32 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {6153#false} is VALID [2022-02-20 18:08:46,603 INFO L290 TraceCheckUtils]: 68: Hoare triple {6153#false} assume !false; {6153#false} is VALID [2022-02-20 18:08:46,604 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-02-20 18:08:46,604 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-02-20 18:08:46,604 INFO L144 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-02-20 18:08:46,604 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [852650313] [2022-02-20 18:08:46,604 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleMathsat [852650313] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:08:46,604 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:08:46,604 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-02-20 18:08:46,605 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [35822928] [2022-02-20 18:08:46,605 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:08:46,605 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) Word has length 69 [2022-02-20 18:08:46,605 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:08:46,606 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 5 states, 5 states have (on average 8.4) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-02-20 18:08:46,644 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 59 edges. 59 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:46,644 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-02-20 18:08:46,644 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-02-20 18:08:46,644 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-02-20 18:08:46,644 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-02-20 18:08:46,645 INFO L87 Difference]: Start difference. First operand 421 states and 577 transitions. Second operand has 5 states, 5 states have (on average 8.4) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-02-20 18:08:47,196 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:47,196 INFO L93 Difference]: Finished difference Result 1073 states and 1526 transitions. [2022-02-20 18:08:47,196 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-02-20 18:08:47,196 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) Word has length 69 [2022-02-20 18:08:47,197 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:08:47,197 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 8.4) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-02-20 18:08:47,202 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 421 transitions. [2022-02-20 18:08:47,202 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 8.4) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-02-20 18:08:47,206 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 421 transitions. [2022-02-20 18:08:47,207 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states and 421 transitions. [2022-02-20 18:08:47,498 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 421 edges. 421 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:47,521 INFO L225 Difference]: With dead ends: 1073 [2022-02-20 18:08:47,522 INFO L226 Difference]: Without dead ends: 675 [2022-02-20 18:08:47,523 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 70 GetRequests, 65 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-02-20 18:08:47,524 INFO L933 BasicCegarLoop]: 183 mSDtfsCounter, 134 mSDsluCounter, 472 mSDsCounter, 0 mSdLazyCounter, 31 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 134 SdHoareTripleChecker+Valid, 655 SdHoareTripleChecker+Invalid, 43 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 31 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:08:47,524 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [134 Valid, 655 Invalid, 43 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 31 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:08:47,525 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 675 states. [2022-02-20 18:08:47,559 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 675 to 661. [2022-02-20 18:08:47,559 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:08:47,560 INFO L82 GeneralOperation]: Start isEquivalent. First operand 675 states. Second operand has 661 states, 465 states have (on average 1.3268817204301075) internal successors, (617), 530 states have internal predecessors, (617), 122 states have call successors, (122), 73 states have call predecessors, (122), 73 states have return successors, (166), 112 states have call predecessors, (166), 122 states have call successors, (166) [2022-02-20 18:08:47,562 INFO L74 IsIncluded]: Start isIncluded. First operand 675 states. Second operand has 661 states, 465 states have (on average 1.3268817204301075) internal successors, (617), 530 states have internal predecessors, (617), 122 states have call successors, (122), 73 states have call predecessors, (122), 73 states have return successors, (166), 112 states have call predecessors, (166), 122 states have call successors, (166) [2022-02-20 18:08:47,563 INFO L87 Difference]: Start difference. First operand 675 states. Second operand has 661 states, 465 states have (on average 1.3268817204301075) internal successors, (617), 530 states have internal predecessors, (617), 122 states have call successors, (122), 73 states have call predecessors, (122), 73 states have return successors, (166), 112 states have call predecessors, (166), 122 states have call successors, (166) [2022-02-20 18:08:47,609 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:47,610 INFO L93 Difference]: Finished difference Result 675 states and 923 transitions. [2022-02-20 18:08:47,610 INFO L276 IsEmpty]: Start isEmpty. Operand 675 states and 923 transitions. [2022-02-20 18:08:47,613 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:47,613 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:47,616 INFO L74 IsIncluded]: Start isIncluded. First operand has 661 states, 465 states have (on average 1.3268817204301075) internal successors, (617), 530 states have internal predecessors, (617), 122 states have call successors, (122), 73 states have call predecessors, (122), 73 states have return successors, (166), 112 states have call predecessors, (166), 122 states have call successors, (166) Second operand 675 states. [2022-02-20 18:08:47,620 INFO L87 Difference]: Start difference. First operand has 661 states, 465 states have (on average 1.3268817204301075) internal successors, (617), 530 states have internal predecessors, (617), 122 states have call successors, (122), 73 states have call predecessors, (122), 73 states have return successors, (166), 112 states have call predecessors, (166), 122 states have call successors, (166) Second operand 675 states. [2022-02-20 18:08:47,651 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:47,651 INFO L93 Difference]: Finished difference Result 675 states and 923 transitions. [2022-02-20 18:08:47,652 INFO L276 IsEmpty]: Start isEmpty. Operand 675 states and 923 transitions. [2022-02-20 18:08:47,654 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:47,654 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:47,654 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:08:47,655 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:08:47,657 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 661 states, 465 states have (on average 1.3268817204301075) internal successors, (617), 530 states have internal predecessors, (617), 122 states have call successors, (122), 73 states have call predecessors, (122), 73 states have return successors, (166), 112 states have call predecessors, (166), 122 states have call successors, (166) [2022-02-20 18:08:47,690 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 661 states to 661 states and 905 transitions. [2022-02-20 18:08:47,691 INFO L78 Accepts]: Start accepts. Automaton has 661 states and 905 transitions. Word has length 69 [2022-02-20 18:08:47,691 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:08:47,691 INFO L470 AbstractCegarLoop]: Abstraction has 661 states and 905 transitions. [2022-02-20 18:08:47,692 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-02-20 18:08:47,692 INFO L276 IsEmpty]: Start isEmpty. Operand 661 states and 905 transitions. [2022-02-20 18:08:47,694 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 90 [2022-02-20 18:08:47,694 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:08:47,695 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:08:47,711 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (6)] Forceful destruction successful, exit code 0 [2022-02-20 18:08:47,911 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-02-20 18:08:47,912 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:08:47,912 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:08:47,912 INFO L85 PathProgramCache]: Analyzing trace with hash -222804072, now seen corresponding path program 1 times [2022-02-20 18:08:47,913 INFO L126 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-02-20 18:08:47,913 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [836513398] [2022-02-20 18:08:47,913 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:08:47,913 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-02-20 18:08:47,913 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-02-20 18:08:47,914 INFO L229 MonitoredProcess]: Starting monitored process 7 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-02-20 18:08:47,916 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (7)] Waiting until timeout for monitored process [2022-02-20 18:08:47,995 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:47,999 INFO L263 TraceCheckSpWp]: Trace formula consists of 260 conjuncts, 5 conjunts are in the unsatisfiable core [2022-02-20 18:08:48,020 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:48,022 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 18:08:48,233 INFO L290 TraceCheckUtils]: 0: Hoare triple {10225#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0bv32, 0bv32;assume 0bv1 == #valid[0bv32];assume ~bvult32(0bv32, #StackHeapBarrier);call #Ultimate.allocInit(2bv32, 1bv32);call write~init~intINTTYPE1(48bv8, 1bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 1bv32, 1bv32, 1bv32);call #Ultimate.allocInit(38bv32, 2bv32);call #Ultimate.allocInit(12bv32, 3bv32);call #Ultimate.allocInit(13bv32, 4bv32);call #Ultimate.allocInit(7bv32, 5bv32);call write~init~intINTTYPE1(44bv8, 5bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(77bv8, 5bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(101bv8, 5bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(116bv8, 5bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(104bv8, 5bv32, 4bv32, 1bv32);call write~init~intINTTYPE1(58bv8, 5bv32, 5bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 5bv32, 6bv32, 1bv32);call #Ultimate.allocInit(5bv32, 6bv32);call write~init~intINTTYPE1(67bv8, 6bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(82bv8, 6bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(73bv8, 6bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(84bv8, 6bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 6bv32, 4bv32, 1bv32);call #Ultimate.allocInit(3bv32, 7bv32);call write~init~intINTTYPE1(79bv8, 7bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(75bv8, 7bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 7bv32, 2bv32, 1bv32);call #Ultimate.allocInit(2bv32, 8bv32);call write~init~intINTTYPE1(41bv8, 8bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 8bv32, 1bv32, 1bv32);call #Ultimate.allocInit(13bv32, 9bv32);call #Ultimate.allocInit(3bv32, 10bv32);call write~init~intINTTYPE1(79bv8, 10bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(110bv8, 10bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 10bv32, 2bv32, 1bv32);call #Ultimate.allocInit(4bv32, 11bv32);call write~init~intINTTYPE1(79bv8, 11bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 11bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 11bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 11bv32, 3bv32, 1bv32);call #Ultimate.allocInit(7bv32, 12bv32);call write~init~intINTTYPE1(44bv8, 12bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(80bv8, 12bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(117bv8, 12bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(109bv8, 12bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(112bv8, 12bv32, 4bv32, 1bv32);call write~init~intINTTYPE1(58bv8, 12bv32, 5bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 12bv32, 6bv32, 1bv32);call #Ultimate.allocInit(3bv32, 13bv32);call write~init~intINTTYPE1(79bv8, 13bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(110bv8, 13bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 13bv32, 2bv32, 1bv32);call #Ultimate.allocInit(4bv32, 14bv32);call write~init~intINTTYPE1(79bv8, 14bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 14bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 14bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 14bv32, 3bv32, 1bv32);call #Ultimate.allocInit(3bv32, 15bv32);call write~init~intINTTYPE1(41bv8, 15bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(32bv8, 15bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 15bv32, 2bv32, 1bv32);call #Ultimate.allocInit(2bv32, 16bv32);call write~init~intINTTYPE1(10bv8, 16bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 16bv32, 1bv32, 1bv32);call #Ultimate.allocInit(30bv32, 17bv32);call #Ultimate.allocInit(9bv32, 18bv32);call #Ultimate.allocInit(21bv32, 19bv32);call #Ultimate.allocInit(30bv32, 20bv32);call #Ultimate.allocInit(9bv32, 21bv32);call #Ultimate.allocInit(21bv32, 22bv32);call #Ultimate.allocInit(30bv32, 23bv32);call #Ultimate.allocInit(9bv32, 24bv32);call #Ultimate.allocInit(25bv32, 25bv32);call #Ultimate.allocInit(30bv32, 26bv32);call #Ultimate.allocInit(9bv32, 27bv32);call #Ultimate.allocInit(25bv32, 28bv32);~__SELECTED_FEATURE_base~0 := 0bv32;~__SELECTED_FEATURE_highWaterSensor~0 := 0bv32;~__SELECTED_FEATURE_lowWaterSensor~0 := 0bv32;~__SELECTED_FEATURE_methaneQuery~0 := 0bv32;~__SELECTED_FEATURE_methaneAlarm~0 := 0bv32;~__SELECTED_FEATURE_stopCommand~0 := 0bv32;~__SELECTED_FEATURE_startCommand~0 := 0bv32;~__GUIDSL_ROOT_PRODUCTION~0 := 0bv32;~waterLevel~0 := 1bv32;~methaneLevelCritical~0 := 0bv32;~pumpRunning~0 := 0bv32;~systemActive~0 := 1bv32;~cleanupTimeShifts~0 := 4bv32;~methAndRunningLastTime~0 := 0bv32;~head~0.base, ~head~0.offset := 0bv32, 0bv32; {10225#true} is VALID [2022-02-20 18:08:48,234 INFO L290 TraceCheckUtils]: 1: Hoare triple {10225#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret24#1, main_~retValue_acc~8#1, main_~tmp~6#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~6#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1bv32; {10225#true} is VALID [2022-02-20 18:08:48,234 INFO L290 TraceCheckUtils]: 2: Hoare triple {10225#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret55#1, select_features_#t~ret56#1, select_features_#t~ret57#1, select_features_#t~ret58#1, select_features_#t~ret59#1, select_features_#t~ret60#1;~__SELECTED_FEATURE_base~0 := 1bv32; {10225#true} is VALID [2022-02-20 18:08:48,234 INFO L272 TraceCheckUtils]: 3: Hoare triple {10225#true} call select_features_#t~ret55#1 := select_one(); {10225#true} is VALID [2022-02-20 18:08:48,234 INFO L290 TraceCheckUtils]: 4: Hoare triple {10225#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {10225#true} is VALID [2022-02-20 18:08:48,234 INFO L290 TraceCheckUtils]: 5: Hoare triple {10225#true} assume true; {10225#true} is VALID [2022-02-20 18:08:48,234 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {10225#true} {10225#true} #363#return; {10225#true} is VALID [2022-02-20 18:08:48,234 INFO L290 TraceCheckUtils]: 7: Hoare triple {10225#true} ~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret55#1;havoc select_features_#t~ret55#1; {10225#true} is VALID [2022-02-20 18:08:48,234 INFO L272 TraceCheckUtils]: 8: Hoare triple {10225#true} call select_features_#t~ret56#1 := select_one(); {10225#true} is VALID [2022-02-20 18:08:48,235 INFO L290 TraceCheckUtils]: 9: Hoare triple {10225#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {10225#true} is VALID [2022-02-20 18:08:48,235 INFO L290 TraceCheckUtils]: 10: Hoare triple {10225#true} assume true; {10225#true} is VALID [2022-02-20 18:08:48,235 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {10225#true} {10225#true} #365#return; {10225#true} is VALID [2022-02-20 18:08:48,235 INFO L290 TraceCheckUtils]: 12: Hoare triple {10225#true} ~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret56#1;havoc select_features_#t~ret56#1; {10225#true} is VALID [2022-02-20 18:08:48,235 INFO L272 TraceCheckUtils]: 13: Hoare triple {10225#true} call select_features_#t~ret57#1 := select_one(); {10225#true} is VALID [2022-02-20 18:08:48,235 INFO L290 TraceCheckUtils]: 14: Hoare triple {10225#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {10225#true} is VALID [2022-02-20 18:08:48,235 INFO L290 TraceCheckUtils]: 15: Hoare triple {10225#true} assume true; {10225#true} is VALID [2022-02-20 18:08:48,235 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {10225#true} {10225#true} #367#return; {10225#true} is VALID [2022-02-20 18:08:48,236 INFO L290 TraceCheckUtils]: 17: Hoare triple {10225#true} ~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret57#1;havoc select_features_#t~ret57#1; {10225#true} is VALID [2022-02-20 18:08:48,236 INFO L272 TraceCheckUtils]: 18: Hoare triple {10225#true} call select_features_#t~ret58#1 := select_one(); {10225#true} is VALID [2022-02-20 18:08:48,236 INFO L290 TraceCheckUtils]: 19: Hoare triple {10225#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {10225#true} is VALID [2022-02-20 18:08:48,236 INFO L290 TraceCheckUtils]: 20: Hoare triple {10225#true} assume true; {10225#true} is VALID [2022-02-20 18:08:48,236 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {10225#true} {10225#true} #369#return; {10225#true} is VALID [2022-02-20 18:08:48,236 INFO L290 TraceCheckUtils]: 22: Hoare triple {10225#true} ~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret58#1;havoc select_features_#t~ret58#1; {10225#true} is VALID [2022-02-20 18:08:48,236 INFO L272 TraceCheckUtils]: 23: Hoare triple {10225#true} call select_features_#t~ret59#1 := select_one(); {10225#true} is VALID [2022-02-20 18:08:48,236 INFO L290 TraceCheckUtils]: 24: Hoare triple {10225#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {10225#true} is VALID [2022-02-20 18:08:48,237 INFO L290 TraceCheckUtils]: 25: Hoare triple {10225#true} assume true; {10225#true} is VALID [2022-02-20 18:08:48,237 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {10225#true} {10225#true} #371#return; {10225#true} is VALID [2022-02-20 18:08:48,237 INFO L290 TraceCheckUtils]: 27: Hoare triple {10225#true} ~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret59#1;havoc select_features_#t~ret59#1; {10225#true} is VALID [2022-02-20 18:08:48,237 INFO L272 TraceCheckUtils]: 28: Hoare triple {10225#true} call select_features_#t~ret60#1 := select_one(); {10225#true} is VALID [2022-02-20 18:08:48,237 INFO L290 TraceCheckUtils]: 29: Hoare triple {10225#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {10225#true} is VALID [2022-02-20 18:08:48,237 INFO L290 TraceCheckUtils]: 30: Hoare triple {10225#true} assume true; {10225#true} is VALID [2022-02-20 18:08:48,237 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {10225#true} {10225#true} #373#return; {10225#true} is VALID [2022-02-20 18:08:48,237 INFO L290 TraceCheckUtils]: 32: Hoare triple {10225#true} ~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret60#1;havoc select_features_#t~ret60#1; {10225#true} is VALID [2022-02-20 18:08:48,238 INFO L290 TraceCheckUtils]: 33: Hoare triple {10225#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~13#1;havoc valid_product_~retValue_acc~13#1;valid_product_~retValue_acc~13#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~13#1; {10225#true} is VALID [2022-02-20 18:08:48,238 INFO L290 TraceCheckUtils]: 34: Hoare triple {10225#true} main_#t~ret24#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~6#1 := main_#t~ret24#1;havoc main_#t~ret24#1; {10225#true} is VALID [2022-02-20 18:08:48,238 INFO L290 TraceCheckUtils]: 35: Hoare triple {10225#true} assume 0bv32 != main_~tmp~6#1;assume { :begin_inline_setup } true; {10225#true} is VALID [2022-02-20 18:08:48,238 INFO L290 TraceCheckUtils]: 36: Hoare triple {10225#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0bv32; {10225#true} is VALID [2022-02-20 18:08:48,238 INFO L290 TraceCheckUtils]: 37: Hoare triple {10225#true} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet25#1, test_#t~nondet26#1, test_#t~nondet27#1, test_#t~nondet28#1, test_~splverifierCounter~0#1, test_~tmp~7#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~7#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0bv32; {10225#true} is VALID [2022-02-20 18:08:48,238 INFO L290 TraceCheckUtils]: 38: Hoare triple {10225#true} assume !false; {10225#true} is VALID [2022-02-20 18:08:48,238 INFO L290 TraceCheckUtils]: 39: Hoare triple {10225#true} assume ~bvslt32(test_~splverifierCounter~0#1, 4bv32); {10225#true} is VALID [2022-02-20 18:08:48,239 INFO L290 TraceCheckUtils]: 40: Hoare triple {10225#true} test_~tmp~7#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {10225#true} is VALID [2022-02-20 18:08:48,239 INFO L290 TraceCheckUtils]: 41: Hoare triple {10225#true} assume !(0bv32 != test_~tmp~7#1); {10225#true} is VALID [2022-02-20 18:08:48,239 INFO L290 TraceCheckUtils]: 42: Hoare triple {10225#true} test_~tmp___0~2#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {10225#true} is VALID [2022-02-20 18:08:48,239 INFO L290 TraceCheckUtils]: 43: Hoare triple {10225#true} assume 0bv32 != test_~tmp___0~2#1; {10225#true} is VALID [2022-02-20 18:08:48,239 INFO L272 TraceCheckUtils]: 44: Hoare triple {10225#true} call changeMethaneLevel(); {10225#true} is VALID [2022-02-20 18:08:48,239 INFO L290 TraceCheckUtils]: 45: Hoare triple {10225#true} assume !(0bv32 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1bv32; {10225#true} is VALID [2022-02-20 18:08:48,239 INFO L290 TraceCheckUtils]: 46: Hoare triple {10225#true} assume true; {10225#true} is VALID [2022-02-20 18:08:48,240 INFO L284 TraceCheckUtils]: 47: Hoare quadruple {10225#true} {10225#true} #377#return; {10225#true} is VALID [2022-02-20 18:08:48,240 INFO L290 TraceCheckUtils]: 48: Hoare triple {10225#true} test_~tmp___2~0#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {10225#true} is VALID [2022-02-20 18:08:48,240 INFO L290 TraceCheckUtils]: 49: Hoare triple {10225#true} assume 0bv32 != test_~tmp___2~0#1; {10225#true} is VALID [2022-02-20 18:08:48,240 INFO L290 TraceCheckUtils]: 50: Hoare triple {10225#true} assume !(0bv32 != ~__SELECTED_FEATURE_startCommand~0); {10225#true} is VALID [2022-02-20 18:08:48,240 INFO L272 TraceCheckUtils]: 51: Hoare triple {10225#true} call timeShift(); {10225#true} is VALID [2022-02-20 18:08:48,240 INFO L290 TraceCheckUtils]: 52: Hoare triple {10225#true} assume !(0bv32 != ~pumpRunning~0); {10225#true} is VALID [2022-02-20 18:08:48,240 INFO L290 TraceCheckUtils]: 53: Hoare triple {10225#true} assume 0bv32 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {10225#true} is VALID [2022-02-20 18:08:48,240 INFO L290 TraceCheckUtils]: 54: Hoare triple {10225#true} assume !(0bv32 != ~__SELECTED_FEATURE_methaneAlarm~0); {10225#true} is VALID [2022-02-20 18:08:48,241 INFO L272 TraceCheckUtils]: 55: Hoare triple {10225#true} call processEnvironment__before__methaneAlarm(); {10225#true} is VALID [2022-02-20 18:08:48,241 INFO L290 TraceCheckUtils]: 56: Hoare triple {10225#true} assume !(0bv32 != ~__SELECTED_FEATURE_lowWaterSensor~0); {10225#true} is VALID [2022-02-20 18:08:48,241 INFO L272 TraceCheckUtils]: 57: Hoare triple {10225#true} call processEnvironment__before__lowWaterSensor(); {10225#true} is VALID [2022-02-20 18:08:48,242 INFO L290 TraceCheckUtils]: 58: Hoare triple {10225#true} assume 0bv32 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret9#1, processEnvironment__role__highWaterSensor_~tmp~0#1;havoc processEnvironment__role__highWaterSensor_~tmp~0#1; {10225#true} is VALID [2022-02-20 18:08:48,242 INFO L290 TraceCheckUtils]: 59: Hoare triple {10225#true} assume 0bv32 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret22#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {10225#true} is VALID [2022-02-20 18:08:48,244 INFO L290 TraceCheckUtils]: 60: Hoare triple {10225#true} assume ~bvslt32(~waterLevel~0, 2bv32);isHighWaterSensorDry_~retValue_acc~2#1 := 1bv32;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {10225#true} is VALID [2022-02-20 18:08:48,245 INFO L290 TraceCheckUtils]: 61: Hoare triple {10225#true} isHighWaterLevel_#t~ret22#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret22#1;havoc isHighWaterLevel_#t~ret22#1; {10225#true} is VALID [2022-02-20 18:08:48,247 INFO L290 TraceCheckUtils]: 62: Hoare triple {10225#true} assume 0bv32 != isHighWaterLevel_~tmp~4#1;isHighWaterLevel_~tmp___0~0#1 := 0bv32; {10416#(= (_ bv0 32) |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp___0~0#1|)} is VALID [2022-02-20 18:08:48,249 INFO L290 TraceCheckUtils]: 63: Hoare triple {10416#(= (_ bv0 32) |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp___0~0#1|)} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {10420#(= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_#res#1| (_ bv0 32))} is VALID [2022-02-20 18:08:48,250 INFO L290 TraceCheckUtils]: 64: Hoare triple {10420#(= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_#res#1| (_ bv0 32))} processEnvironment__role__highWaterSensor_#t~ret9#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;processEnvironment__role__highWaterSensor_~tmp~0#1 := processEnvironment__role__highWaterSensor_#t~ret9#1;havoc processEnvironment__role__highWaterSensor_#t~ret9#1; {10424#(= |processEnvironment__before__lowWaterSensor_processEnvironment__role__highWaterSensor_~tmp~0#1| (_ bv0 32))} is VALID [2022-02-20 18:08:48,250 INFO L290 TraceCheckUtils]: 65: Hoare triple {10424#(= |processEnvironment__before__lowWaterSensor_processEnvironment__role__highWaterSensor_~tmp~0#1| (_ bv0 32))} assume 0bv32 != processEnvironment__role__highWaterSensor_~tmp~0#1;assume { :begin_inline_activatePump } true; {10226#false} is VALID [2022-02-20 18:08:48,251 INFO L290 TraceCheckUtils]: 66: Hoare triple {10226#false} assume !(0bv32 != ~__SELECTED_FEATURE_methaneQuery~0); {10226#false} is VALID [2022-02-20 18:08:48,251 INFO L272 TraceCheckUtils]: 67: Hoare triple {10226#false} call activatePump__before__methaneQuery(); {10226#false} is VALID [2022-02-20 18:08:48,251 INFO L290 TraceCheckUtils]: 68: Hoare triple {10226#false} ~pumpRunning~0 := 1bv32; {10226#false} is VALID [2022-02-20 18:08:48,252 INFO L290 TraceCheckUtils]: 69: Hoare triple {10226#false} assume true; {10226#false} is VALID [2022-02-20 18:08:48,252 INFO L284 TraceCheckUtils]: 70: Hoare quadruple {10226#false} {10226#false} #339#return; {10226#false} is VALID [2022-02-20 18:08:48,252 INFO L290 TraceCheckUtils]: 71: Hoare triple {10226#false} assume { :end_inline_activatePump } true; {10226#false} is VALID [2022-02-20 18:08:48,253 INFO L290 TraceCheckUtils]: 72: Hoare triple {10226#false} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {10226#false} is VALID [2022-02-20 18:08:48,253 INFO L290 TraceCheckUtils]: 73: Hoare triple {10226#false} assume true; {10226#false} is VALID [2022-02-20 18:08:48,253 INFO L284 TraceCheckUtils]: 74: Hoare quadruple {10226#false} {10225#true} #391#return; {10226#false} is VALID [2022-02-20 18:08:48,253 INFO L290 TraceCheckUtils]: 75: Hoare triple {10226#false} assume true; {10226#false} is VALID [2022-02-20 18:08:48,253 INFO L284 TraceCheckUtils]: 76: Hoare quadruple {10226#false} {10225#true} #359#return; {10226#false} is VALID [2022-02-20 18:08:48,254 INFO L290 TraceCheckUtils]: 77: Hoare triple {10226#false} assume { :end_inline_processEnvironment } true; {10226#false} is VALID [2022-02-20 18:08:48,255 INFO L290 TraceCheckUtils]: 78: Hoare triple {10226#false} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret29#1, __utac_acc__Specification2_spec__2_#t~ret30#1, __utac_acc__Specification2_spec__2_~tmp~8#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~8#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {10226#false} is VALID [2022-02-20 18:08:48,255 INFO L272 TraceCheckUtils]: 79: Hoare triple {10226#false} call __utac_acc__Specification2_spec__2_#t~ret29#1 := isMethaneLevelCritical(); {10226#false} is VALID [2022-02-20 18:08:48,255 INFO L290 TraceCheckUtils]: 80: Hoare triple {10226#false} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {10226#false} is VALID [2022-02-20 18:08:48,255 INFO L290 TraceCheckUtils]: 81: Hoare triple {10226#false} assume true; {10226#false} is VALID [2022-02-20 18:08:48,255 INFO L284 TraceCheckUtils]: 82: Hoare quadruple {10226#false} {10226#false} #361#return; {10226#false} is VALID [2022-02-20 18:08:48,255 INFO L290 TraceCheckUtils]: 83: Hoare triple {10226#false} __utac_acc__Specification2_spec__2_~tmp~8#1 := __utac_acc__Specification2_spec__2_#t~ret29#1;havoc __utac_acc__Specification2_spec__2_#t~ret29#1; {10226#false} is VALID [2022-02-20 18:08:48,255 INFO L290 TraceCheckUtils]: 84: Hoare triple {10226#false} assume 0bv32 != __utac_acc__Specification2_spec__2_~tmp~8#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~5#1;havoc isPumpRunning_~retValue_acc~5#1;isPumpRunning_~retValue_acc~5#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~5#1; {10226#false} is VALID [2022-02-20 18:08:48,255 INFO L290 TraceCheckUtils]: 85: Hoare triple {10226#false} __utac_acc__Specification2_spec__2_#t~ret30#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret30#1;havoc __utac_acc__Specification2_spec__2_#t~ret30#1; {10226#false} is VALID [2022-02-20 18:08:48,256 INFO L290 TraceCheckUtils]: 86: Hoare triple {10226#false} assume 0bv32 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {10226#false} is VALID [2022-02-20 18:08:48,256 INFO L290 TraceCheckUtils]: 87: Hoare triple {10226#false} assume 0bv32 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {10226#false} is VALID [2022-02-20 18:08:48,256 INFO L290 TraceCheckUtils]: 88: Hoare triple {10226#false} assume !false; {10226#false} is VALID [2022-02-20 18:08:48,258 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-02-20 18:08:48,258 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-02-20 18:08:48,258 INFO L144 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-02-20 18:08:48,258 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [836513398] [2022-02-20 18:08:48,259 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleMathsat [836513398] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:08:48,259 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:08:48,259 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-02-20 18:08:48,259 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1903352838] [2022-02-20 18:08:48,259 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:08:48,261 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 11.2) internal successors, (56), 5 states have internal predecessors, (56), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) Word has length 89 [2022-02-20 18:08:48,261 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:08:48,261 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 5 states, 5 states have (on average 11.2) internal successors, (56), 5 states have internal predecessors, (56), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-02-20 18:08:48,310 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 79 edges. 79 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:48,311 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-02-20 18:08:48,311 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-02-20 18:08:48,311 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-02-20 18:08:48,311 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-02-20 18:08:48,312 INFO L87 Difference]: Start difference. First operand 661 states and 905 transitions. Second operand has 5 states, 5 states have (on average 11.2) internal successors, (56), 5 states have internal predecessors, (56), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-02-20 18:08:48,756 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:48,756 INFO L93 Difference]: Finished difference Result 1339 states and 1934 transitions. [2022-02-20 18:08:48,756 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-02-20 18:08:48,756 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 11.2) internal successors, (56), 5 states have internal predecessors, (56), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) Word has length 89 [2022-02-20 18:08:48,757 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:08:48,757 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 11.2) internal successors, (56), 5 states have internal predecessors, (56), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-02-20 18:08:48,760 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 337 transitions. [2022-02-20 18:08:48,760 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 11.2) internal successors, (56), 5 states have internal predecessors, (56), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-02-20 18:08:48,763 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 337 transitions. [2022-02-20 18:08:48,763 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states and 337 transitions. [2022-02-20 18:08:48,966 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 337 edges. 337 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:48,991 INFO L225 Difference]: With dead ends: 1339 [2022-02-20 18:08:48,991 INFO L226 Difference]: Without dead ends: 701 [2022-02-20 18:08:48,994 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 90 GetRequests, 85 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-02-20 18:08:48,994 INFO L933 BasicCegarLoop]: 174 mSDtfsCounter, 14 mSDsluCounter, 513 mSDsCounter, 0 mSdLazyCounter, 13 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 687 SdHoareTripleChecker+Invalid, 17 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 13 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:08:48,995 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [15 Valid, 687 Invalid, 17 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 13 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:08:48,995 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 701 states. [2022-02-20 18:08:49,016 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 701 to 673. [2022-02-20 18:08:49,016 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:08:49,018 INFO L82 GeneralOperation]: Start isEquivalent. First operand 701 states. Second operand has 673 states, 477 states have (on average 1.3186582809224319) internal successors, (629), 542 states have internal predecessors, (629), 122 states have call successors, (122), 73 states have call predecessors, (122), 73 states have return successors, (166), 112 states have call predecessors, (166), 122 states have call successors, (166) [2022-02-20 18:08:49,019 INFO L74 IsIncluded]: Start isIncluded. First operand 701 states. Second operand has 673 states, 477 states have (on average 1.3186582809224319) internal successors, (629), 542 states have internal predecessors, (629), 122 states have call successors, (122), 73 states have call predecessors, (122), 73 states have return successors, (166), 112 states have call predecessors, (166), 122 states have call successors, (166) [2022-02-20 18:08:49,020 INFO L87 Difference]: Start difference. First operand 701 states. Second operand has 673 states, 477 states have (on average 1.3186582809224319) internal successors, (629), 542 states have internal predecessors, (629), 122 states have call successors, (122), 73 states have call predecessors, (122), 73 states have return successors, (166), 112 states have call predecessors, (166), 122 states have call successors, (166) [2022-02-20 18:08:49,047 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:49,047 INFO L93 Difference]: Finished difference Result 701 states and 973 transitions. [2022-02-20 18:08:49,047 INFO L276 IsEmpty]: Start isEmpty. Operand 701 states and 973 transitions. [2022-02-20 18:08:49,050 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:49,050 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:49,051 INFO L74 IsIncluded]: Start isIncluded. First operand has 673 states, 477 states have (on average 1.3186582809224319) internal successors, (629), 542 states have internal predecessors, (629), 122 states have call successors, (122), 73 states have call predecessors, (122), 73 states have return successors, (166), 112 states have call predecessors, (166), 122 states have call successors, (166) Second operand 701 states. [2022-02-20 18:08:49,052 INFO L87 Difference]: Start difference. First operand has 673 states, 477 states have (on average 1.3186582809224319) internal successors, (629), 542 states have internal predecessors, (629), 122 states have call successors, (122), 73 states have call predecessors, (122), 73 states have return successors, (166), 112 states have call predecessors, (166), 122 states have call successors, (166) Second operand 701 states. [2022-02-20 18:08:49,073 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:49,073 INFO L93 Difference]: Finished difference Result 701 states and 973 transitions. [2022-02-20 18:08:49,074 INFO L276 IsEmpty]: Start isEmpty. Operand 701 states and 973 transitions. [2022-02-20 18:08:49,076 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:49,076 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:49,076 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:08:49,076 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:08:49,078 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 673 states, 477 states have (on average 1.3186582809224319) internal successors, (629), 542 states have internal predecessors, (629), 122 states have call successors, (122), 73 states have call predecessors, (122), 73 states have return successors, (166), 112 states have call predecessors, (166), 122 states have call successors, (166) [2022-02-20 18:08:49,102 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 673 states to 673 states and 917 transitions. [2022-02-20 18:08:49,103 INFO L78 Accepts]: Start accepts. Automaton has 673 states and 917 transitions. Word has length 89 [2022-02-20 18:08:49,103 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:08:49,115 INFO L470 AbstractCegarLoop]: Abstraction has 673 states and 917 transitions. [2022-02-20 18:08:49,115 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 11.2) internal successors, (56), 5 states have internal predecessors, (56), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-02-20 18:08:49,115 INFO L276 IsEmpty]: Start isEmpty. Operand 673 states and 917 transitions. [2022-02-20 18:08:49,117 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 90 [2022-02-20 18:08:49,117 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:08:49,117 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:08:49,159 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (7)] Forceful destruction successful, exit code 0 [2022-02-20 18:08:49,317 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-02-20 18:08:49,318 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:08:49,318 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:08:49,318 INFO L85 PathProgramCache]: Analyzing trace with hash 1700423962, now seen corresponding path program 1 times [2022-02-20 18:08:49,319 INFO L126 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-02-20 18:08:49,319 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1525563942] [2022-02-20 18:08:49,319 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:08:49,319 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-02-20 18:08:49,319 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-02-20 18:08:49,328 INFO L229 MonitoredProcess]: Starting monitored process 8 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-02-20 18:08:49,329 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (8)] Waiting until timeout for monitored process [2022-02-20 18:08:49,409 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:49,413 INFO L263 TraceCheckSpWp]: Trace formula consists of 260 conjuncts, 4 conjunts are in the unsatisfiable core [2022-02-20 18:08:49,426 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:49,428 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 18:08:49,568 INFO L290 TraceCheckUtils]: 0: Hoare triple {14804#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0bv32, 0bv32;assume 0bv1 == #valid[0bv32];assume ~bvult32(0bv32, #StackHeapBarrier);call #Ultimate.allocInit(2bv32, 1bv32);call write~init~intINTTYPE1(48bv8, 1bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 1bv32, 1bv32, 1bv32);call #Ultimate.allocInit(38bv32, 2bv32);call #Ultimate.allocInit(12bv32, 3bv32);call #Ultimate.allocInit(13bv32, 4bv32);call #Ultimate.allocInit(7bv32, 5bv32);call write~init~intINTTYPE1(44bv8, 5bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(77bv8, 5bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(101bv8, 5bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(116bv8, 5bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(104bv8, 5bv32, 4bv32, 1bv32);call write~init~intINTTYPE1(58bv8, 5bv32, 5bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 5bv32, 6bv32, 1bv32);call #Ultimate.allocInit(5bv32, 6bv32);call write~init~intINTTYPE1(67bv8, 6bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(82bv8, 6bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(73bv8, 6bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(84bv8, 6bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 6bv32, 4bv32, 1bv32);call #Ultimate.allocInit(3bv32, 7bv32);call write~init~intINTTYPE1(79bv8, 7bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(75bv8, 7bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 7bv32, 2bv32, 1bv32);call #Ultimate.allocInit(2bv32, 8bv32);call write~init~intINTTYPE1(41bv8, 8bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 8bv32, 1bv32, 1bv32);call #Ultimate.allocInit(13bv32, 9bv32);call #Ultimate.allocInit(3bv32, 10bv32);call write~init~intINTTYPE1(79bv8, 10bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(110bv8, 10bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 10bv32, 2bv32, 1bv32);call #Ultimate.allocInit(4bv32, 11bv32);call write~init~intINTTYPE1(79bv8, 11bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 11bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 11bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 11bv32, 3bv32, 1bv32);call #Ultimate.allocInit(7bv32, 12bv32);call write~init~intINTTYPE1(44bv8, 12bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(80bv8, 12bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(117bv8, 12bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(109bv8, 12bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(112bv8, 12bv32, 4bv32, 1bv32);call write~init~intINTTYPE1(58bv8, 12bv32, 5bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 12bv32, 6bv32, 1bv32);call #Ultimate.allocInit(3bv32, 13bv32);call write~init~intINTTYPE1(79bv8, 13bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(110bv8, 13bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 13bv32, 2bv32, 1bv32);call #Ultimate.allocInit(4bv32, 14bv32);call write~init~intINTTYPE1(79bv8, 14bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 14bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 14bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 14bv32, 3bv32, 1bv32);call #Ultimate.allocInit(3bv32, 15bv32);call write~init~intINTTYPE1(41bv8, 15bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(32bv8, 15bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 15bv32, 2bv32, 1bv32);call #Ultimate.allocInit(2bv32, 16bv32);call write~init~intINTTYPE1(10bv8, 16bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 16bv32, 1bv32, 1bv32);call #Ultimate.allocInit(30bv32, 17bv32);call #Ultimate.allocInit(9bv32, 18bv32);call #Ultimate.allocInit(21bv32, 19bv32);call #Ultimate.allocInit(30bv32, 20bv32);call #Ultimate.allocInit(9bv32, 21bv32);call #Ultimate.allocInit(21bv32, 22bv32);call #Ultimate.allocInit(30bv32, 23bv32);call #Ultimate.allocInit(9bv32, 24bv32);call #Ultimate.allocInit(25bv32, 25bv32);call #Ultimate.allocInit(30bv32, 26bv32);call #Ultimate.allocInit(9bv32, 27bv32);call #Ultimate.allocInit(25bv32, 28bv32);~__SELECTED_FEATURE_base~0 := 0bv32;~__SELECTED_FEATURE_highWaterSensor~0 := 0bv32;~__SELECTED_FEATURE_lowWaterSensor~0 := 0bv32;~__SELECTED_FEATURE_methaneQuery~0 := 0bv32;~__SELECTED_FEATURE_methaneAlarm~0 := 0bv32;~__SELECTED_FEATURE_stopCommand~0 := 0bv32;~__SELECTED_FEATURE_startCommand~0 := 0bv32;~__GUIDSL_ROOT_PRODUCTION~0 := 0bv32;~waterLevel~0 := 1bv32;~methaneLevelCritical~0 := 0bv32;~pumpRunning~0 := 0bv32;~systemActive~0 := 1bv32;~cleanupTimeShifts~0 := 4bv32;~methAndRunningLastTime~0 := 0bv32;~head~0.base, ~head~0.offset := 0bv32, 0bv32; {14804#true} is VALID [2022-02-20 18:08:49,569 INFO L290 TraceCheckUtils]: 1: Hoare triple {14804#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret24#1, main_~retValue_acc~8#1, main_~tmp~6#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~6#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1bv32; {14804#true} is VALID [2022-02-20 18:08:49,569 INFO L290 TraceCheckUtils]: 2: Hoare triple {14804#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret55#1, select_features_#t~ret56#1, select_features_#t~ret57#1, select_features_#t~ret58#1, select_features_#t~ret59#1, select_features_#t~ret60#1;~__SELECTED_FEATURE_base~0 := 1bv32; {14804#true} is VALID [2022-02-20 18:08:49,569 INFO L272 TraceCheckUtils]: 3: Hoare triple {14804#true} call select_features_#t~ret55#1 := select_one(); {14804#true} is VALID [2022-02-20 18:08:49,569 INFO L290 TraceCheckUtils]: 4: Hoare triple {14804#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {14804#true} is VALID [2022-02-20 18:08:49,569 INFO L290 TraceCheckUtils]: 5: Hoare triple {14804#true} assume true; {14804#true} is VALID [2022-02-20 18:08:49,569 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {14804#true} {14804#true} #363#return; {14804#true} is VALID [2022-02-20 18:08:49,569 INFO L290 TraceCheckUtils]: 7: Hoare triple {14804#true} ~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret55#1;havoc select_features_#t~ret55#1; {14804#true} is VALID [2022-02-20 18:08:49,569 INFO L272 TraceCheckUtils]: 8: Hoare triple {14804#true} call select_features_#t~ret56#1 := select_one(); {14804#true} is VALID [2022-02-20 18:08:49,569 INFO L290 TraceCheckUtils]: 9: Hoare triple {14804#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {14804#true} is VALID [2022-02-20 18:08:49,569 INFO L290 TraceCheckUtils]: 10: Hoare triple {14804#true} assume true; {14804#true} is VALID [2022-02-20 18:08:49,569 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {14804#true} {14804#true} #365#return; {14804#true} is VALID [2022-02-20 18:08:49,569 INFO L290 TraceCheckUtils]: 12: Hoare triple {14804#true} ~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret56#1;havoc select_features_#t~ret56#1; {14804#true} is VALID [2022-02-20 18:08:49,569 INFO L272 TraceCheckUtils]: 13: Hoare triple {14804#true} call select_features_#t~ret57#1 := select_one(); {14804#true} is VALID [2022-02-20 18:08:49,570 INFO L290 TraceCheckUtils]: 14: Hoare triple {14804#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {14804#true} is VALID [2022-02-20 18:08:49,570 INFO L290 TraceCheckUtils]: 15: Hoare triple {14804#true} assume true; {14804#true} is VALID [2022-02-20 18:08:49,570 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {14804#true} {14804#true} #367#return; {14804#true} is VALID [2022-02-20 18:08:49,570 INFO L290 TraceCheckUtils]: 17: Hoare triple {14804#true} ~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret57#1;havoc select_features_#t~ret57#1; {14804#true} is VALID [2022-02-20 18:08:49,570 INFO L272 TraceCheckUtils]: 18: Hoare triple {14804#true} call select_features_#t~ret58#1 := select_one(); {14804#true} is VALID [2022-02-20 18:08:49,570 INFO L290 TraceCheckUtils]: 19: Hoare triple {14804#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {14804#true} is VALID [2022-02-20 18:08:49,570 INFO L290 TraceCheckUtils]: 20: Hoare triple {14804#true} assume true; {14804#true} is VALID [2022-02-20 18:08:49,570 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {14804#true} {14804#true} #369#return; {14804#true} is VALID [2022-02-20 18:08:49,570 INFO L290 TraceCheckUtils]: 22: Hoare triple {14804#true} ~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret58#1;havoc select_features_#t~ret58#1; {14804#true} is VALID [2022-02-20 18:08:49,570 INFO L272 TraceCheckUtils]: 23: Hoare triple {14804#true} call select_features_#t~ret59#1 := select_one(); {14804#true} is VALID [2022-02-20 18:08:49,571 INFO L290 TraceCheckUtils]: 24: Hoare triple {14804#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {14804#true} is VALID [2022-02-20 18:08:49,571 INFO L290 TraceCheckUtils]: 25: Hoare triple {14804#true} assume true; {14804#true} is VALID [2022-02-20 18:08:49,571 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {14804#true} {14804#true} #371#return; {14804#true} is VALID [2022-02-20 18:08:49,571 INFO L290 TraceCheckUtils]: 27: Hoare triple {14804#true} ~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret59#1;havoc select_features_#t~ret59#1; {14804#true} is VALID [2022-02-20 18:08:49,571 INFO L272 TraceCheckUtils]: 28: Hoare triple {14804#true} call select_features_#t~ret60#1 := select_one(); {14804#true} is VALID [2022-02-20 18:08:49,571 INFO L290 TraceCheckUtils]: 29: Hoare triple {14804#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {14804#true} is VALID [2022-02-20 18:08:49,571 INFO L290 TraceCheckUtils]: 30: Hoare triple {14804#true} assume true; {14804#true} is VALID [2022-02-20 18:08:49,571 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {14804#true} {14804#true} #373#return; {14804#true} is VALID [2022-02-20 18:08:49,572 INFO L290 TraceCheckUtils]: 32: Hoare triple {14804#true} ~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret60#1;havoc select_features_#t~ret60#1; {14804#true} is VALID [2022-02-20 18:08:49,572 INFO L290 TraceCheckUtils]: 33: Hoare triple {14804#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~13#1;havoc valid_product_~retValue_acc~13#1;valid_product_~retValue_acc~13#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~13#1; {14804#true} is VALID [2022-02-20 18:08:49,572 INFO L290 TraceCheckUtils]: 34: Hoare triple {14804#true} main_#t~ret24#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~6#1 := main_#t~ret24#1;havoc main_#t~ret24#1; {14804#true} is VALID [2022-02-20 18:08:49,572 INFO L290 TraceCheckUtils]: 35: Hoare triple {14804#true} assume 0bv32 != main_~tmp~6#1;assume { :begin_inline_setup } true; {14804#true} is VALID [2022-02-20 18:08:49,572 INFO L290 TraceCheckUtils]: 36: Hoare triple {14804#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0bv32; {14804#true} is VALID [2022-02-20 18:08:49,573 INFO L290 TraceCheckUtils]: 37: Hoare triple {14804#true} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet25#1, test_#t~nondet26#1, test_#t~nondet27#1, test_#t~nondet28#1, test_~splverifierCounter~0#1, test_~tmp~7#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~7#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0bv32; {14804#true} is VALID [2022-02-20 18:08:49,574 INFO L290 TraceCheckUtils]: 38: Hoare triple {14804#true} assume !false; {14804#true} is VALID [2022-02-20 18:08:49,574 INFO L290 TraceCheckUtils]: 39: Hoare triple {14804#true} assume ~bvslt32(test_~splverifierCounter~0#1, 4bv32); {14804#true} is VALID [2022-02-20 18:08:49,574 INFO L290 TraceCheckUtils]: 40: Hoare triple {14804#true} test_~tmp~7#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {14804#true} is VALID [2022-02-20 18:08:49,574 INFO L290 TraceCheckUtils]: 41: Hoare triple {14804#true} assume !(0bv32 != test_~tmp~7#1); {14804#true} is VALID [2022-02-20 18:08:49,574 INFO L290 TraceCheckUtils]: 42: Hoare triple {14804#true} test_~tmp___0~2#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {14804#true} is VALID [2022-02-20 18:08:49,574 INFO L290 TraceCheckUtils]: 43: Hoare triple {14804#true} assume 0bv32 != test_~tmp___0~2#1; {14804#true} is VALID [2022-02-20 18:08:49,574 INFO L272 TraceCheckUtils]: 44: Hoare triple {14804#true} call changeMethaneLevel(); {14804#true} is VALID [2022-02-20 18:08:49,574 INFO L290 TraceCheckUtils]: 45: Hoare triple {14804#true} assume !(0bv32 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1bv32; {14804#true} is VALID [2022-02-20 18:08:49,574 INFO L290 TraceCheckUtils]: 46: Hoare triple {14804#true} assume true; {14804#true} is VALID [2022-02-20 18:08:49,575 INFO L284 TraceCheckUtils]: 47: Hoare quadruple {14804#true} {14804#true} #377#return; {14804#true} is VALID [2022-02-20 18:08:49,575 INFO L290 TraceCheckUtils]: 48: Hoare triple {14804#true} test_~tmp___2~0#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {14804#true} is VALID [2022-02-20 18:08:49,575 INFO L290 TraceCheckUtils]: 49: Hoare triple {14804#true} assume 0bv32 != test_~tmp___2~0#1; {14804#true} is VALID [2022-02-20 18:08:49,575 INFO L290 TraceCheckUtils]: 50: Hoare triple {14804#true} assume !(0bv32 != ~__SELECTED_FEATURE_startCommand~0); {14804#true} is VALID [2022-02-20 18:08:49,575 INFO L272 TraceCheckUtils]: 51: Hoare triple {14804#true} call timeShift(); {14804#true} is VALID [2022-02-20 18:08:49,575 INFO L290 TraceCheckUtils]: 52: Hoare triple {14804#true} assume !(0bv32 != ~pumpRunning~0); {14804#true} is VALID [2022-02-20 18:08:49,575 INFO L290 TraceCheckUtils]: 53: Hoare triple {14804#true} assume 0bv32 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {14804#true} is VALID [2022-02-20 18:08:49,575 INFO L290 TraceCheckUtils]: 54: Hoare triple {14804#true} assume !(0bv32 != ~__SELECTED_FEATURE_methaneAlarm~0); {14804#true} is VALID [2022-02-20 18:08:49,575 INFO L272 TraceCheckUtils]: 55: Hoare triple {14804#true} call processEnvironment__before__methaneAlarm(); {14804#true} is VALID [2022-02-20 18:08:49,576 INFO L290 TraceCheckUtils]: 56: Hoare triple {14804#true} assume !(0bv32 != ~__SELECTED_FEATURE_lowWaterSensor~0); {14804#true} is VALID [2022-02-20 18:08:49,576 INFO L272 TraceCheckUtils]: 57: Hoare triple {14804#true} call processEnvironment__before__lowWaterSensor(); {14804#true} is VALID [2022-02-20 18:08:49,576 INFO L290 TraceCheckUtils]: 58: Hoare triple {14804#true} assume 0bv32 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret9#1, processEnvironment__role__highWaterSensor_~tmp~0#1;havoc processEnvironment__role__highWaterSensor_~tmp~0#1; {14804#true} is VALID [2022-02-20 18:08:49,576 INFO L290 TraceCheckUtils]: 59: Hoare triple {14804#true} assume 0bv32 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret22#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {14804#true} is VALID [2022-02-20 18:08:49,576 INFO L290 TraceCheckUtils]: 60: Hoare triple {14804#true} assume ~bvslt32(~waterLevel~0, 2bv32);isHighWaterSensorDry_~retValue_acc~2#1 := 1bv32;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {14989#(= (_ bv1 32) |processEnvironment__before__lowWaterSensor_isHighWaterSensorDry_#res#1|)} is VALID [2022-02-20 18:08:49,577 INFO L290 TraceCheckUtils]: 61: Hoare triple {14989#(= (_ bv1 32) |processEnvironment__before__lowWaterSensor_isHighWaterSensorDry_#res#1|)} isHighWaterLevel_#t~ret22#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret22#1;havoc isHighWaterLevel_#t~ret22#1; {14993#(= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp~4#1| (_ bv1 32))} is VALID [2022-02-20 18:08:49,577 INFO L290 TraceCheckUtils]: 62: Hoare triple {14993#(= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp~4#1| (_ bv1 32))} assume !(0bv32 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1bv32; {14805#false} is VALID [2022-02-20 18:08:49,577 INFO L290 TraceCheckUtils]: 63: Hoare triple {14805#false} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {14805#false} is VALID [2022-02-20 18:08:49,577 INFO L290 TraceCheckUtils]: 64: Hoare triple {14805#false} processEnvironment__role__highWaterSensor_#t~ret9#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;processEnvironment__role__highWaterSensor_~tmp~0#1 := processEnvironment__role__highWaterSensor_#t~ret9#1;havoc processEnvironment__role__highWaterSensor_#t~ret9#1; {14805#false} is VALID [2022-02-20 18:08:49,577 INFO L290 TraceCheckUtils]: 65: Hoare triple {14805#false} assume 0bv32 != processEnvironment__role__highWaterSensor_~tmp~0#1;assume { :begin_inline_activatePump } true; {14805#false} is VALID [2022-02-20 18:08:49,578 INFO L290 TraceCheckUtils]: 66: Hoare triple {14805#false} assume !(0bv32 != ~__SELECTED_FEATURE_methaneQuery~0); {14805#false} is VALID [2022-02-20 18:08:49,578 INFO L272 TraceCheckUtils]: 67: Hoare triple {14805#false} call activatePump__before__methaneQuery(); {14805#false} is VALID [2022-02-20 18:08:49,578 INFO L290 TraceCheckUtils]: 68: Hoare triple {14805#false} ~pumpRunning~0 := 1bv32; {14805#false} is VALID [2022-02-20 18:08:49,578 INFO L290 TraceCheckUtils]: 69: Hoare triple {14805#false} assume true; {14805#false} is VALID [2022-02-20 18:08:49,578 INFO L284 TraceCheckUtils]: 70: Hoare quadruple {14805#false} {14805#false} #339#return; {14805#false} is VALID [2022-02-20 18:08:49,578 INFO L290 TraceCheckUtils]: 71: Hoare triple {14805#false} assume { :end_inline_activatePump } true; {14805#false} is VALID [2022-02-20 18:08:49,578 INFO L290 TraceCheckUtils]: 72: Hoare triple {14805#false} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {14805#false} is VALID [2022-02-20 18:08:49,578 INFO L290 TraceCheckUtils]: 73: Hoare triple {14805#false} assume true; {14805#false} is VALID [2022-02-20 18:08:49,578 INFO L284 TraceCheckUtils]: 74: Hoare quadruple {14805#false} {14804#true} #391#return; {14805#false} is VALID [2022-02-20 18:08:49,579 INFO L290 TraceCheckUtils]: 75: Hoare triple {14805#false} assume true; {14805#false} is VALID [2022-02-20 18:08:49,579 INFO L284 TraceCheckUtils]: 76: Hoare quadruple {14805#false} {14804#true} #359#return; {14805#false} is VALID [2022-02-20 18:08:49,579 INFO L290 TraceCheckUtils]: 77: Hoare triple {14805#false} assume { :end_inline_processEnvironment } true; {14805#false} is VALID [2022-02-20 18:08:49,579 INFO L290 TraceCheckUtils]: 78: Hoare triple {14805#false} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret29#1, __utac_acc__Specification2_spec__2_#t~ret30#1, __utac_acc__Specification2_spec__2_~tmp~8#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~8#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {14805#false} is VALID [2022-02-20 18:08:49,579 INFO L272 TraceCheckUtils]: 79: Hoare triple {14805#false} call __utac_acc__Specification2_spec__2_#t~ret29#1 := isMethaneLevelCritical(); {14805#false} is VALID [2022-02-20 18:08:49,579 INFO L290 TraceCheckUtils]: 80: Hoare triple {14805#false} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {14805#false} is VALID [2022-02-20 18:08:49,579 INFO L290 TraceCheckUtils]: 81: Hoare triple {14805#false} assume true; {14805#false} is VALID [2022-02-20 18:08:49,579 INFO L284 TraceCheckUtils]: 82: Hoare quadruple {14805#false} {14805#false} #361#return; {14805#false} is VALID [2022-02-20 18:08:49,579 INFO L290 TraceCheckUtils]: 83: Hoare triple {14805#false} __utac_acc__Specification2_spec__2_~tmp~8#1 := __utac_acc__Specification2_spec__2_#t~ret29#1;havoc __utac_acc__Specification2_spec__2_#t~ret29#1; {14805#false} is VALID [2022-02-20 18:08:49,580 INFO L290 TraceCheckUtils]: 84: Hoare triple {14805#false} assume 0bv32 != __utac_acc__Specification2_spec__2_~tmp~8#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~5#1;havoc isPumpRunning_~retValue_acc~5#1;isPumpRunning_~retValue_acc~5#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~5#1; {14805#false} is VALID [2022-02-20 18:08:49,580 INFO L290 TraceCheckUtils]: 85: Hoare triple {14805#false} __utac_acc__Specification2_spec__2_#t~ret30#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret30#1;havoc __utac_acc__Specification2_spec__2_#t~ret30#1; {14805#false} is VALID [2022-02-20 18:08:49,580 INFO L290 TraceCheckUtils]: 86: Hoare triple {14805#false} assume 0bv32 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {14805#false} is VALID [2022-02-20 18:08:49,580 INFO L290 TraceCheckUtils]: 87: Hoare triple {14805#false} assume 0bv32 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {14805#false} is VALID [2022-02-20 18:08:49,580 INFO L290 TraceCheckUtils]: 88: Hoare triple {14805#false} assume !false; {14805#false} is VALID [2022-02-20 18:08:49,580 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-02-20 18:08:49,580 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-02-20 18:08:49,581 INFO L144 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-02-20 18:08:49,581 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1525563942] [2022-02-20 18:08:49,581 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1525563942] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:08:49,581 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:08:49,581 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-02-20 18:08:49,581 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [392671721] [2022-02-20 18:08:49,581 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:08:49,584 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 14.0) internal successors, (56), 4 states have internal predecessors, (56), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) Word has length 89 [2022-02-20 18:08:49,584 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:08:49,584 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 4 states, 4 states have (on average 14.0) internal successors, (56), 4 states have internal predecessors, (56), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-02-20 18:08:49,635 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 79 edges. 79 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:49,636 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-02-20 18:08:49,636 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-02-20 18:08:49,636 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-02-20 18:08:49,636 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-02-20 18:08:49,637 INFO L87 Difference]: Start difference. First operand 673 states and 917 transitions. Second operand has 4 states, 4 states have (on average 14.0) internal successors, (56), 4 states have internal predecessors, (56), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-02-20 18:08:49,959 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:49,960 INFO L93 Difference]: Finished difference Result 1359 states and 1942 transitions. [2022-02-20 18:08:49,960 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-02-20 18:08:49,960 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 14.0) internal successors, (56), 4 states have internal predecessors, (56), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) Word has length 89 [2022-02-20 18:08:49,961 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:08:49,961 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4 states, 4 states have (on average 14.0) internal successors, (56), 4 states have internal predecessors, (56), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-02-20 18:08:49,965 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 334 transitions. [2022-02-20 18:08:49,965 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4 states, 4 states have (on average 14.0) internal successors, (56), 4 states have internal predecessors, (56), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-02-20 18:08:49,968 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 334 transitions. [2022-02-20 18:08:49,968 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 334 transitions. [2022-02-20 18:08:50,203 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 334 edges. 334 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:50,236 INFO L225 Difference]: With dead ends: 1359 [2022-02-20 18:08:50,236 INFO L226 Difference]: Without dead ends: 709 [2022-02-20 18:08:50,239 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 89 GetRequests, 86 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-02-20 18:08:50,241 INFO L933 BasicCegarLoop]: 175 mSDtfsCounter, 13 mSDsluCounter, 340 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 13 SdHoareTripleChecker+Valid, 515 SdHoareTripleChecker+Invalid, 11 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:08:50,241 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [13 Valid, 515 Invalid, 11 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:08:50,243 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 709 states. [2022-02-20 18:08:50,280 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 709 to 681. [2022-02-20 18:08:50,280 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:08:50,282 INFO L82 GeneralOperation]: Start isEquivalent. First operand 709 states. Second operand has 681 states, 485 states have (on average 1.31340206185567) internal successors, (637), 550 states have internal predecessors, (637), 122 states have call successors, (122), 73 states have call predecessors, (122), 73 states have return successors, (166), 112 states have call predecessors, (166), 122 states have call successors, (166) [2022-02-20 18:08:50,283 INFO L74 IsIncluded]: Start isIncluded. First operand 709 states. Second operand has 681 states, 485 states have (on average 1.31340206185567) internal successors, (637), 550 states have internal predecessors, (637), 122 states have call successors, (122), 73 states have call predecessors, (122), 73 states have return successors, (166), 112 states have call predecessors, (166), 122 states have call successors, (166) [2022-02-20 18:08:50,284 INFO L87 Difference]: Start difference. First operand 709 states. Second operand has 681 states, 485 states have (on average 1.31340206185567) internal successors, (637), 550 states have internal predecessors, (637), 122 states have call successors, (122), 73 states have call predecessors, (122), 73 states have return successors, (166), 112 states have call predecessors, (166), 122 states have call successors, (166) [2022-02-20 18:08:50,322 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:50,322 INFO L93 Difference]: Finished difference Result 709 states and 969 transitions. [2022-02-20 18:08:50,322 INFO L276 IsEmpty]: Start isEmpty. Operand 709 states and 969 transitions. [2022-02-20 18:08:50,324 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:50,324 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:50,326 INFO L74 IsIncluded]: Start isIncluded. First operand has 681 states, 485 states have (on average 1.31340206185567) internal successors, (637), 550 states have internal predecessors, (637), 122 states have call successors, (122), 73 states have call predecessors, (122), 73 states have return successors, (166), 112 states have call predecessors, (166), 122 states have call successors, (166) Second operand 709 states. [2022-02-20 18:08:50,344 INFO L87 Difference]: Start difference. First operand has 681 states, 485 states have (on average 1.31340206185567) internal successors, (637), 550 states have internal predecessors, (637), 122 states have call successors, (122), 73 states have call predecessors, (122), 73 states have return successors, (166), 112 states have call predecessors, (166), 122 states have call successors, (166) Second operand 709 states. [2022-02-20 18:08:50,381 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:50,381 INFO L93 Difference]: Finished difference Result 709 states and 969 transitions. [2022-02-20 18:08:50,382 INFO L276 IsEmpty]: Start isEmpty. Operand 709 states and 969 transitions. [2022-02-20 18:08:50,384 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:50,384 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:50,384 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:08:50,384 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:08:50,385 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 681 states, 485 states have (on average 1.31340206185567) internal successors, (637), 550 states have internal predecessors, (637), 122 states have call successors, (122), 73 states have call predecessors, (122), 73 states have return successors, (166), 112 states have call predecessors, (166), 122 states have call successors, (166) [2022-02-20 18:08:50,426 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 681 states to 681 states and 925 transitions. [2022-02-20 18:08:50,427 INFO L78 Accepts]: Start accepts. Automaton has 681 states and 925 transitions. Word has length 89 [2022-02-20 18:08:50,427 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:08:50,427 INFO L470 AbstractCegarLoop]: Abstraction has 681 states and 925 transitions. [2022-02-20 18:08:50,434 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 14.0) internal successors, (56), 4 states have internal predecessors, (56), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-02-20 18:08:50,434 INFO L276 IsEmpty]: Start isEmpty. Operand 681 states and 925 transitions. [2022-02-20 18:08:50,435 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 90 [2022-02-20 18:08:50,436 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:08:50,436 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:08:50,445 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (8)] Forceful destruction successful, exit code 0 [2022-02-20 18:08:50,645 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-02-20 18:08:50,645 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:08:50,646 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:08:50,646 INFO L85 PathProgramCache]: Analyzing trace with hash -1208339940, now seen corresponding path program 1 times [2022-02-20 18:08:50,646 INFO L126 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-02-20 18:08:50,646 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1445928082] [2022-02-20 18:08:50,646 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:08:50,646 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-02-20 18:08:50,647 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-02-20 18:08:50,656 INFO L229 MonitoredProcess]: Starting monitored process 9 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-02-20 18:08:50,658 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (9)] Waiting until timeout for monitored process [2022-02-20 18:08:50,717 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:50,720 INFO L263 TraceCheckSpWp]: Trace formula consists of 260 conjuncts, 4 conjunts are in the unsatisfiable core [2022-02-20 18:08:50,731 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:50,733 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 18:08:50,948 INFO L290 TraceCheckUtils]: 0: Hoare triple {19436#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0bv32, 0bv32;assume 0bv1 == #valid[0bv32];assume ~bvult32(0bv32, #StackHeapBarrier);call #Ultimate.allocInit(2bv32, 1bv32);call write~init~intINTTYPE1(48bv8, 1bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 1bv32, 1bv32, 1bv32);call #Ultimate.allocInit(38bv32, 2bv32);call #Ultimate.allocInit(12bv32, 3bv32);call #Ultimate.allocInit(13bv32, 4bv32);call #Ultimate.allocInit(7bv32, 5bv32);call write~init~intINTTYPE1(44bv8, 5bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(77bv8, 5bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(101bv8, 5bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(116bv8, 5bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(104bv8, 5bv32, 4bv32, 1bv32);call write~init~intINTTYPE1(58bv8, 5bv32, 5bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 5bv32, 6bv32, 1bv32);call #Ultimate.allocInit(5bv32, 6bv32);call write~init~intINTTYPE1(67bv8, 6bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(82bv8, 6bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(73bv8, 6bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(84bv8, 6bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 6bv32, 4bv32, 1bv32);call #Ultimate.allocInit(3bv32, 7bv32);call write~init~intINTTYPE1(79bv8, 7bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(75bv8, 7bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 7bv32, 2bv32, 1bv32);call #Ultimate.allocInit(2bv32, 8bv32);call write~init~intINTTYPE1(41bv8, 8bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 8bv32, 1bv32, 1bv32);call #Ultimate.allocInit(13bv32, 9bv32);call #Ultimate.allocInit(3bv32, 10bv32);call write~init~intINTTYPE1(79bv8, 10bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(110bv8, 10bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 10bv32, 2bv32, 1bv32);call #Ultimate.allocInit(4bv32, 11bv32);call write~init~intINTTYPE1(79bv8, 11bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 11bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 11bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 11bv32, 3bv32, 1bv32);call #Ultimate.allocInit(7bv32, 12bv32);call write~init~intINTTYPE1(44bv8, 12bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(80bv8, 12bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(117bv8, 12bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(109bv8, 12bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(112bv8, 12bv32, 4bv32, 1bv32);call write~init~intINTTYPE1(58bv8, 12bv32, 5bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 12bv32, 6bv32, 1bv32);call #Ultimate.allocInit(3bv32, 13bv32);call write~init~intINTTYPE1(79bv8, 13bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(110bv8, 13bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 13bv32, 2bv32, 1bv32);call #Ultimate.allocInit(4bv32, 14bv32);call write~init~intINTTYPE1(79bv8, 14bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 14bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 14bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 14bv32, 3bv32, 1bv32);call #Ultimate.allocInit(3bv32, 15bv32);call write~init~intINTTYPE1(41bv8, 15bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(32bv8, 15bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 15bv32, 2bv32, 1bv32);call #Ultimate.allocInit(2bv32, 16bv32);call write~init~intINTTYPE1(10bv8, 16bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 16bv32, 1bv32, 1bv32);call #Ultimate.allocInit(30bv32, 17bv32);call #Ultimate.allocInit(9bv32, 18bv32);call #Ultimate.allocInit(21bv32, 19bv32);call #Ultimate.allocInit(30bv32, 20bv32);call #Ultimate.allocInit(9bv32, 21bv32);call #Ultimate.allocInit(21bv32, 22bv32);call #Ultimate.allocInit(30bv32, 23bv32);call #Ultimate.allocInit(9bv32, 24bv32);call #Ultimate.allocInit(25bv32, 25bv32);call #Ultimate.allocInit(30bv32, 26bv32);call #Ultimate.allocInit(9bv32, 27bv32);call #Ultimate.allocInit(25bv32, 28bv32);~__SELECTED_FEATURE_base~0 := 0bv32;~__SELECTED_FEATURE_highWaterSensor~0 := 0bv32;~__SELECTED_FEATURE_lowWaterSensor~0 := 0bv32;~__SELECTED_FEATURE_methaneQuery~0 := 0bv32;~__SELECTED_FEATURE_methaneAlarm~0 := 0bv32;~__SELECTED_FEATURE_stopCommand~0 := 0bv32;~__SELECTED_FEATURE_startCommand~0 := 0bv32;~__GUIDSL_ROOT_PRODUCTION~0 := 0bv32;~waterLevel~0 := 1bv32;~methaneLevelCritical~0 := 0bv32;~pumpRunning~0 := 0bv32;~systemActive~0 := 1bv32;~cleanupTimeShifts~0 := 4bv32;~methAndRunningLastTime~0 := 0bv32;~head~0.base, ~head~0.offset := 0bv32, 0bv32; {19441#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:08:50,949 INFO L290 TraceCheckUtils]: 1: Hoare triple {19441#(= ~waterLevel~0 (_ bv1 32))} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret24#1, main_~retValue_acc~8#1, main_~tmp~6#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~6#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1bv32; {19441#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:08:50,949 INFO L290 TraceCheckUtils]: 2: Hoare triple {19441#(= ~waterLevel~0 (_ bv1 32))} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret55#1, select_features_#t~ret56#1, select_features_#t~ret57#1, select_features_#t~ret58#1, select_features_#t~ret59#1, select_features_#t~ret60#1;~__SELECTED_FEATURE_base~0 := 1bv32; {19441#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:08:50,949 INFO L272 TraceCheckUtils]: 3: Hoare triple {19441#(= ~waterLevel~0 (_ bv1 32))} call select_features_#t~ret55#1 := select_one(); {19441#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:08:50,950 INFO L290 TraceCheckUtils]: 4: Hoare triple {19441#(= ~waterLevel~0 (_ bv1 32))} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {19441#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:08:50,950 INFO L290 TraceCheckUtils]: 5: Hoare triple {19441#(= ~waterLevel~0 (_ bv1 32))} assume true; {19441#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:08:50,951 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {19441#(= ~waterLevel~0 (_ bv1 32))} {19441#(= ~waterLevel~0 (_ bv1 32))} #363#return; {19441#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:08:50,951 INFO L290 TraceCheckUtils]: 7: Hoare triple {19441#(= ~waterLevel~0 (_ bv1 32))} ~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret55#1;havoc select_features_#t~ret55#1; {19441#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:08:50,951 INFO L272 TraceCheckUtils]: 8: Hoare triple {19441#(= ~waterLevel~0 (_ bv1 32))} call select_features_#t~ret56#1 := select_one(); {19441#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:08:50,953 INFO L290 TraceCheckUtils]: 9: Hoare triple {19441#(= ~waterLevel~0 (_ bv1 32))} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {19441#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:08:50,953 INFO L290 TraceCheckUtils]: 10: Hoare triple {19441#(= ~waterLevel~0 (_ bv1 32))} assume true; {19441#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:08:50,954 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {19441#(= ~waterLevel~0 (_ bv1 32))} {19441#(= ~waterLevel~0 (_ bv1 32))} #365#return; {19441#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:08:50,954 INFO L290 TraceCheckUtils]: 12: Hoare triple {19441#(= ~waterLevel~0 (_ bv1 32))} ~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret56#1;havoc select_features_#t~ret56#1; {19441#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:08:50,955 INFO L272 TraceCheckUtils]: 13: Hoare triple {19441#(= ~waterLevel~0 (_ bv1 32))} call select_features_#t~ret57#1 := select_one(); {19441#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:08:50,955 INFO L290 TraceCheckUtils]: 14: Hoare triple {19441#(= ~waterLevel~0 (_ bv1 32))} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {19441#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:08:50,955 INFO L290 TraceCheckUtils]: 15: Hoare triple {19441#(= ~waterLevel~0 (_ bv1 32))} assume true; {19441#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:08:50,956 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {19441#(= ~waterLevel~0 (_ bv1 32))} {19441#(= ~waterLevel~0 (_ bv1 32))} #367#return; {19441#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:08:50,956 INFO L290 TraceCheckUtils]: 17: Hoare triple {19441#(= ~waterLevel~0 (_ bv1 32))} ~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret57#1;havoc select_features_#t~ret57#1; {19441#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:08:50,956 INFO L272 TraceCheckUtils]: 18: Hoare triple {19441#(= ~waterLevel~0 (_ bv1 32))} call select_features_#t~ret58#1 := select_one(); {19441#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:08:50,957 INFO L290 TraceCheckUtils]: 19: Hoare triple {19441#(= ~waterLevel~0 (_ bv1 32))} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {19441#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:08:50,957 INFO L290 TraceCheckUtils]: 20: Hoare triple {19441#(= ~waterLevel~0 (_ bv1 32))} assume true; {19441#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:08:50,957 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {19441#(= ~waterLevel~0 (_ bv1 32))} {19441#(= ~waterLevel~0 (_ bv1 32))} #369#return; {19441#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:08:50,958 INFO L290 TraceCheckUtils]: 22: Hoare triple {19441#(= ~waterLevel~0 (_ bv1 32))} ~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret58#1;havoc select_features_#t~ret58#1; {19441#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:08:50,958 INFO L272 TraceCheckUtils]: 23: Hoare triple {19441#(= ~waterLevel~0 (_ bv1 32))} call select_features_#t~ret59#1 := select_one(); {19441#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:08:50,958 INFO L290 TraceCheckUtils]: 24: Hoare triple {19441#(= ~waterLevel~0 (_ bv1 32))} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {19441#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:08:50,959 INFO L290 TraceCheckUtils]: 25: Hoare triple {19441#(= ~waterLevel~0 (_ bv1 32))} assume true; {19441#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:08:50,959 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {19441#(= ~waterLevel~0 (_ bv1 32))} {19441#(= ~waterLevel~0 (_ bv1 32))} #371#return; {19441#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:08:50,959 INFO L290 TraceCheckUtils]: 27: Hoare triple {19441#(= ~waterLevel~0 (_ bv1 32))} ~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret59#1;havoc select_features_#t~ret59#1; {19441#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:08:50,960 INFO L272 TraceCheckUtils]: 28: Hoare triple {19441#(= ~waterLevel~0 (_ bv1 32))} call select_features_#t~ret60#1 := select_one(); {19441#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:08:50,960 INFO L290 TraceCheckUtils]: 29: Hoare triple {19441#(= ~waterLevel~0 (_ bv1 32))} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {19441#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:08:50,960 INFO L290 TraceCheckUtils]: 30: Hoare triple {19441#(= ~waterLevel~0 (_ bv1 32))} assume true; {19441#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:08:50,961 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {19441#(= ~waterLevel~0 (_ bv1 32))} {19441#(= ~waterLevel~0 (_ bv1 32))} #373#return; {19441#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:08:50,961 INFO L290 TraceCheckUtils]: 32: Hoare triple {19441#(= ~waterLevel~0 (_ bv1 32))} ~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret60#1;havoc select_features_#t~ret60#1; {19441#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:08:50,961 INFO L290 TraceCheckUtils]: 33: Hoare triple {19441#(= ~waterLevel~0 (_ bv1 32))} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~13#1;havoc valid_product_~retValue_acc~13#1;valid_product_~retValue_acc~13#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~13#1; {19441#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:08:50,962 INFO L290 TraceCheckUtils]: 34: Hoare triple {19441#(= ~waterLevel~0 (_ bv1 32))} main_#t~ret24#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~6#1 := main_#t~ret24#1;havoc main_#t~ret24#1; {19441#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:08:50,962 INFO L290 TraceCheckUtils]: 35: Hoare triple {19441#(= ~waterLevel~0 (_ bv1 32))} assume 0bv32 != main_~tmp~6#1;assume { :begin_inline_setup } true; {19441#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:08:50,963 INFO L290 TraceCheckUtils]: 36: Hoare triple {19441#(= ~waterLevel~0 (_ bv1 32))} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0bv32; {19441#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:08:50,963 INFO L290 TraceCheckUtils]: 37: Hoare triple {19441#(= ~waterLevel~0 (_ bv1 32))} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet25#1, test_#t~nondet26#1, test_#t~nondet27#1, test_#t~nondet28#1, test_~splverifierCounter~0#1, test_~tmp~7#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~7#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0bv32; {19441#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:08:50,963 INFO L290 TraceCheckUtils]: 38: Hoare triple {19441#(= ~waterLevel~0 (_ bv1 32))} assume !false; {19441#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:08:50,964 INFO L290 TraceCheckUtils]: 39: Hoare triple {19441#(= ~waterLevel~0 (_ bv1 32))} assume ~bvslt32(test_~splverifierCounter~0#1, 4bv32); {19441#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:08:50,964 INFO L290 TraceCheckUtils]: 40: Hoare triple {19441#(= ~waterLevel~0 (_ bv1 32))} test_~tmp~7#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {19441#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:08:50,964 INFO L290 TraceCheckUtils]: 41: Hoare triple {19441#(= ~waterLevel~0 (_ bv1 32))} assume !(0bv32 != test_~tmp~7#1); {19441#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:08:50,965 INFO L290 TraceCheckUtils]: 42: Hoare triple {19441#(= ~waterLevel~0 (_ bv1 32))} test_~tmp___0~2#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {19441#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:08:50,965 INFO L290 TraceCheckUtils]: 43: Hoare triple {19441#(= ~waterLevel~0 (_ bv1 32))} assume 0bv32 != test_~tmp___0~2#1; {19441#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:08:50,965 INFO L272 TraceCheckUtils]: 44: Hoare triple {19441#(= ~waterLevel~0 (_ bv1 32))} call changeMethaneLevel(); {19441#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:08:50,966 INFO L290 TraceCheckUtils]: 45: Hoare triple {19441#(= ~waterLevel~0 (_ bv1 32))} assume !(0bv32 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1bv32; {19441#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:08:50,966 INFO L290 TraceCheckUtils]: 46: Hoare triple {19441#(= ~waterLevel~0 (_ bv1 32))} assume true; {19441#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:08:50,966 INFO L284 TraceCheckUtils]: 47: Hoare quadruple {19441#(= ~waterLevel~0 (_ bv1 32))} {19441#(= ~waterLevel~0 (_ bv1 32))} #377#return; {19441#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:08:50,966 INFO L290 TraceCheckUtils]: 48: Hoare triple {19441#(= ~waterLevel~0 (_ bv1 32))} test_~tmp___2~0#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {19441#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:08:50,967 INFO L290 TraceCheckUtils]: 49: Hoare triple {19441#(= ~waterLevel~0 (_ bv1 32))} assume 0bv32 != test_~tmp___2~0#1; {19441#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:08:50,967 INFO L290 TraceCheckUtils]: 50: Hoare triple {19441#(= ~waterLevel~0 (_ bv1 32))} assume !(0bv32 != ~__SELECTED_FEATURE_startCommand~0); {19441#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:08:50,967 INFO L272 TraceCheckUtils]: 51: Hoare triple {19441#(= ~waterLevel~0 (_ bv1 32))} call timeShift(); {19441#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:08:50,968 INFO L290 TraceCheckUtils]: 52: Hoare triple {19441#(= ~waterLevel~0 (_ bv1 32))} assume !(0bv32 != ~pumpRunning~0); {19441#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:08:50,968 INFO L290 TraceCheckUtils]: 53: Hoare triple {19441#(= ~waterLevel~0 (_ bv1 32))} assume 0bv32 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {19441#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:08:50,968 INFO L290 TraceCheckUtils]: 54: Hoare triple {19441#(= ~waterLevel~0 (_ bv1 32))} assume !(0bv32 != ~__SELECTED_FEATURE_methaneAlarm~0); {19441#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:08:50,969 INFO L272 TraceCheckUtils]: 55: Hoare triple {19441#(= ~waterLevel~0 (_ bv1 32))} call processEnvironment__before__methaneAlarm(); {19441#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:08:50,969 INFO L290 TraceCheckUtils]: 56: Hoare triple {19441#(= ~waterLevel~0 (_ bv1 32))} assume !(0bv32 != ~__SELECTED_FEATURE_lowWaterSensor~0); {19441#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:08:50,969 INFO L272 TraceCheckUtils]: 57: Hoare triple {19441#(= ~waterLevel~0 (_ bv1 32))} call processEnvironment__before__lowWaterSensor(); {19441#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:08:50,970 INFO L290 TraceCheckUtils]: 58: Hoare triple {19441#(= ~waterLevel~0 (_ bv1 32))} assume 0bv32 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret9#1, processEnvironment__role__highWaterSensor_~tmp~0#1;havoc processEnvironment__role__highWaterSensor_~tmp~0#1; {19441#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:08:50,970 INFO L290 TraceCheckUtils]: 59: Hoare triple {19441#(= ~waterLevel~0 (_ bv1 32))} assume 0bv32 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret22#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {19441#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:08:50,971 INFO L290 TraceCheckUtils]: 60: Hoare triple {19441#(= ~waterLevel~0 (_ bv1 32))} assume !~bvslt32(~waterLevel~0, 2bv32);isHighWaterSensorDry_~retValue_acc~2#1 := 0bv32;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {19437#false} is VALID [2022-02-20 18:08:50,971 INFO L290 TraceCheckUtils]: 61: Hoare triple {19437#false} isHighWaterLevel_#t~ret22#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret22#1;havoc isHighWaterLevel_#t~ret22#1; {19437#false} is VALID [2022-02-20 18:08:50,971 INFO L290 TraceCheckUtils]: 62: Hoare triple {19437#false} assume !(0bv32 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1bv32; {19437#false} is VALID [2022-02-20 18:08:50,971 INFO L290 TraceCheckUtils]: 63: Hoare triple {19437#false} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {19437#false} is VALID [2022-02-20 18:08:50,971 INFO L290 TraceCheckUtils]: 64: Hoare triple {19437#false} processEnvironment__role__highWaterSensor_#t~ret9#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;processEnvironment__role__highWaterSensor_~tmp~0#1 := processEnvironment__role__highWaterSensor_#t~ret9#1;havoc processEnvironment__role__highWaterSensor_#t~ret9#1; {19437#false} is VALID [2022-02-20 18:08:50,971 INFO L290 TraceCheckUtils]: 65: Hoare triple {19437#false} assume 0bv32 != processEnvironment__role__highWaterSensor_~tmp~0#1;assume { :begin_inline_activatePump } true; {19437#false} is VALID [2022-02-20 18:08:50,971 INFO L290 TraceCheckUtils]: 66: Hoare triple {19437#false} assume !(0bv32 != ~__SELECTED_FEATURE_methaneQuery~0); {19437#false} is VALID [2022-02-20 18:08:50,971 INFO L272 TraceCheckUtils]: 67: Hoare triple {19437#false} call activatePump__before__methaneQuery(); {19437#false} is VALID [2022-02-20 18:08:50,971 INFO L290 TraceCheckUtils]: 68: Hoare triple {19437#false} ~pumpRunning~0 := 1bv32; {19437#false} is VALID [2022-02-20 18:08:50,972 INFO L290 TraceCheckUtils]: 69: Hoare triple {19437#false} assume true; {19437#false} is VALID [2022-02-20 18:08:50,972 INFO L284 TraceCheckUtils]: 70: Hoare quadruple {19437#false} {19437#false} #339#return; {19437#false} is VALID [2022-02-20 18:08:50,972 INFO L290 TraceCheckUtils]: 71: Hoare triple {19437#false} assume { :end_inline_activatePump } true; {19437#false} is VALID [2022-02-20 18:08:50,972 INFO L290 TraceCheckUtils]: 72: Hoare triple {19437#false} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {19437#false} is VALID [2022-02-20 18:08:50,972 INFO L290 TraceCheckUtils]: 73: Hoare triple {19437#false} assume true; {19437#false} is VALID [2022-02-20 18:08:50,972 INFO L284 TraceCheckUtils]: 74: Hoare quadruple {19437#false} {19441#(= ~waterLevel~0 (_ bv1 32))} #391#return; {19437#false} is VALID [2022-02-20 18:08:50,972 INFO L290 TraceCheckUtils]: 75: Hoare triple {19437#false} assume true; {19437#false} is VALID [2022-02-20 18:08:50,972 INFO L284 TraceCheckUtils]: 76: Hoare quadruple {19437#false} {19441#(= ~waterLevel~0 (_ bv1 32))} #359#return; {19437#false} is VALID [2022-02-20 18:08:50,972 INFO L290 TraceCheckUtils]: 77: Hoare triple {19437#false} assume { :end_inline_processEnvironment } true; {19437#false} is VALID [2022-02-20 18:08:50,972 INFO L290 TraceCheckUtils]: 78: Hoare triple {19437#false} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret29#1, __utac_acc__Specification2_spec__2_#t~ret30#1, __utac_acc__Specification2_spec__2_~tmp~8#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~8#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {19437#false} is VALID [2022-02-20 18:08:50,973 INFO L272 TraceCheckUtils]: 79: Hoare triple {19437#false} call __utac_acc__Specification2_spec__2_#t~ret29#1 := isMethaneLevelCritical(); {19437#false} is VALID [2022-02-20 18:08:50,973 INFO L290 TraceCheckUtils]: 80: Hoare triple {19437#false} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {19437#false} is VALID [2022-02-20 18:08:50,973 INFO L290 TraceCheckUtils]: 81: Hoare triple {19437#false} assume true; {19437#false} is VALID [2022-02-20 18:08:50,973 INFO L284 TraceCheckUtils]: 82: Hoare quadruple {19437#false} {19437#false} #361#return; {19437#false} is VALID [2022-02-20 18:08:50,973 INFO L290 TraceCheckUtils]: 83: Hoare triple {19437#false} __utac_acc__Specification2_spec__2_~tmp~8#1 := __utac_acc__Specification2_spec__2_#t~ret29#1;havoc __utac_acc__Specification2_spec__2_#t~ret29#1; {19437#false} is VALID [2022-02-20 18:08:50,973 INFO L290 TraceCheckUtils]: 84: Hoare triple {19437#false} assume 0bv32 != __utac_acc__Specification2_spec__2_~tmp~8#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~5#1;havoc isPumpRunning_~retValue_acc~5#1;isPumpRunning_~retValue_acc~5#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~5#1; {19437#false} is VALID [2022-02-20 18:08:50,973 INFO L290 TraceCheckUtils]: 85: Hoare triple {19437#false} __utac_acc__Specification2_spec__2_#t~ret30#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret30#1;havoc __utac_acc__Specification2_spec__2_#t~ret30#1; {19437#false} is VALID [2022-02-20 18:08:50,973 INFO L290 TraceCheckUtils]: 86: Hoare triple {19437#false} assume 0bv32 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {19437#false} is VALID [2022-02-20 18:08:50,973 INFO L290 TraceCheckUtils]: 87: Hoare triple {19437#false} assume 0bv32 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {19437#false} is VALID [2022-02-20 18:08:50,974 INFO L290 TraceCheckUtils]: 88: Hoare triple {19437#false} assume !false; {19437#false} is VALID [2022-02-20 18:08:50,974 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-02-20 18:08:50,974 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-02-20 18:08:50,975 INFO L144 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-02-20 18:08:50,975 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1445928082] [2022-02-20 18:08:50,975 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1445928082] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:08:50,975 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:08:50,975 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-02-20 18:08:50,975 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [25969002] [2022-02-20 18:08:50,975 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:08:50,976 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 18.666666666666668) internal successors, (56), 2 states have internal predecessors, (56), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) Word has length 89 [2022-02-20 18:08:50,977 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:08:50,977 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 3 states, 3 states have (on average 18.666666666666668) internal successors, (56), 2 states have internal predecessors, (56), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-02-20 18:08:51,031 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 79 edges. 79 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:51,031 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-02-20 18:08:51,031 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-02-20 18:08:51,032 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-02-20 18:08:51,032 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:08:51,032 INFO L87 Difference]: Start difference. First operand 681 states and 925 transitions. Second operand has 3 states, 3 states have (on average 18.666666666666668) internal successors, (56), 2 states have internal predecessors, (56), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-02-20 18:08:51,349 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:51,349 INFO L93 Difference]: Finished difference Result 1583 states and 2178 transitions. [2022-02-20 18:08:51,349 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-02-20 18:08:51,350 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 18.666666666666668) internal successors, (56), 2 states have internal predecessors, (56), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) Word has length 89 [2022-02-20 18:08:51,350 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:08:51,350 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 18.666666666666668) internal successors, (56), 2 states have internal predecessors, (56), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-02-20 18:08:51,353 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 402 transitions. [2022-02-20 18:08:51,354 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 18.666666666666668) internal successors, (56), 2 states have internal predecessors, (56), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-02-20 18:08:51,357 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 402 transitions. [2022-02-20 18:08:51,357 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 402 transitions. [2022-02-20 18:08:51,611 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 402 edges. 402 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:51,665 INFO L225 Difference]: With dead ends: 1583 [2022-02-20 18:08:51,665 INFO L226 Difference]: Without dead ends: 925 [2022-02-20 18:08:51,668 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 88 GetRequests, 87 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:08:51,670 INFO L933 BasicCegarLoop]: 181 mSDtfsCounter, 56 mSDsluCounter, 137 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 56 SdHoareTripleChecker+Valid, 318 SdHoareTripleChecker+Invalid, 10 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:08:51,670 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [56 Valid, 318 Invalid, 10 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:08:51,672 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 925 states. [2022-02-20 18:08:51,700 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 925 to 925. [2022-02-20 18:08:51,700 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:08:51,705 INFO L82 GeneralOperation]: Start isEquivalent. First operand 925 states. Second operand has 925 states, 665 states have (on average 1.2917293233082707) internal successors, (859), 746 states have internal predecessors, (859), 162 states have call successors, (162), 101 states have call predecessors, (162), 97 states have return successors, (208), 148 states have call predecessors, (208), 162 states have call successors, (208) [2022-02-20 18:08:51,707 INFO L74 IsIncluded]: Start isIncluded. First operand 925 states. Second operand has 925 states, 665 states have (on average 1.2917293233082707) internal successors, (859), 746 states have internal predecessors, (859), 162 states have call successors, (162), 101 states have call predecessors, (162), 97 states have return successors, (208), 148 states have call predecessors, (208), 162 states have call successors, (208) [2022-02-20 18:08:51,709 INFO L87 Difference]: Start difference. First operand 925 states. Second operand has 925 states, 665 states have (on average 1.2917293233082707) internal successors, (859), 746 states have internal predecessors, (859), 162 states have call successors, (162), 101 states have call predecessors, (162), 97 states have return successors, (208), 148 states have call predecessors, (208), 162 states have call successors, (208) [2022-02-20 18:08:51,754 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:51,755 INFO L93 Difference]: Finished difference Result 925 states and 1229 transitions. [2022-02-20 18:08:51,755 INFO L276 IsEmpty]: Start isEmpty. Operand 925 states and 1229 transitions. [2022-02-20 18:08:51,758 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:51,758 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:51,760 INFO L74 IsIncluded]: Start isIncluded. First operand has 925 states, 665 states have (on average 1.2917293233082707) internal successors, (859), 746 states have internal predecessors, (859), 162 states have call successors, (162), 101 states have call predecessors, (162), 97 states have return successors, (208), 148 states have call predecessors, (208), 162 states have call successors, (208) Second operand 925 states. [2022-02-20 18:08:51,762 INFO L87 Difference]: Start difference. First operand has 925 states, 665 states have (on average 1.2917293233082707) internal successors, (859), 746 states have internal predecessors, (859), 162 states have call successors, (162), 101 states have call predecessors, (162), 97 states have return successors, (208), 148 states have call predecessors, (208), 162 states have call successors, (208) Second operand 925 states. [2022-02-20 18:08:51,805 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:51,805 INFO L93 Difference]: Finished difference Result 925 states and 1229 transitions. [2022-02-20 18:08:51,806 INFO L276 IsEmpty]: Start isEmpty. Operand 925 states and 1229 transitions. [2022-02-20 18:08:51,809 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:51,809 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:51,809 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:08:51,809 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:08:51,812 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 925 states, 665 states have (on average 1.2917293233082707) internal successors, (859), 746 states have internal predecessors, (859), 162 states have call successors, (162), 101 states have call predecessors, (162), 97 states have return successors, (208), 148 states have call predecessors, (208), 162 states have call successors, (208) [2022-02-20 18:08:51,867 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 925 states to 925 states and 1229 transitions. [2022-02-20 18:08:51,868 INFO L78 Accepts]: Start accepts. Automaton has 925 states and 1229 transitions. Word has length 89 [2022-02-20 18:08:51,868 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:08:51,868 INFO L470 AbstractCegarLoop]: Abstraction has 925 states and 1229 transitions. [2022-02-20 18:08:51,869 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 18.666666666666668) internal successors, (56), 2 states have internal predecessors, (56), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-02-20 18:08:51,869 INFO L276 IsEmpty]: Start isEmpty. Operand 925 states and 1229 transitions. [2022-02-20 18:08:51,871 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 94 [2022-02-20 18:08:51,872 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:08:51,872 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:08:51,893 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (9)] Forceful destruction successful, exit code 0 [2022-02-20 18:08:52,093 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 9 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-02-20 18:08:52,094 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:08:52,094 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:08:52,094 INFO L85 PathProgramCache]: Analyzing trace with hash -1479376382, now seen corresponding path program 1 times [2022-02-20 18:08:52,095 INFO L126 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-02-20 18:08:52,095 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1086723382] [2022-02-20 18:08:52,095 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:08:52,095 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-02-20 18:08:52,095 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-02-20 18:08:52,096 INFO L229 MonitoredProcess]: Starting monitored process 10 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-02-20 18:08:52,097 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (10)] Waiting until timeout for monitored process [2022-02-20 18:08:52,165 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:52,169 INFO L263 TraceCheckSpWp]: Trace formula consists of 267 conjuncts, 4 conjunts are in the unsatisfiable core [2022-02-20 18:08:52,197 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:52,199 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 18:08:52,403 INFO L290 TraceCheckUtils]: 0: Hoare triple {25169#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0bv32, 0bv32;assume 0bv1 == #valid[0bv32];assume ~bvult32(0bv32, #StackHeapBarrier);call #Ultimate.allocInit(2bv32, 1bv32);call write~init~intINTTYPE1(48bv8, 1bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 1bv32, 1bv32, 1bv32);call #Ultimate.allocInit(38bv32, 2bv32);call #Ultimate.allocInit(12bv32, 3bv32);call #Ultimate.allocInit(13bv32, 4bv32);call #Ultimate.allocInit(7bv32, 5bv32);call write~init~intINTTYPE1(44bv8, 5bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(77bv8, 5bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(101bv8, 5bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(116bv8, 5bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(104bv8, 5bv32, 4bv32, 1bv32);call write~init~intINTTYPE1(58bv8, 5bv32, 5bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 5bv32, 6bv32, 1bv32);call #Ultimate.allocInit(5bv32, 6bv32);call write~init~intINTTYPE1(67bv8, 6bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(82bv8, 6bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(73bv8, 6bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(84bv8, 6bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 6bv32, 4bv32, 1bv32);call #Ultimate.allocInit(3bv32, 7bv32);call write~init~intINTTYPE1(79bv8, 7bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(75bv8, 7bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 7bv32, 2bv32, 1bv32);call #Ultimate.allocInit(2bv32, 8bv32);call write~init~intINTTYPE1(41bv8, 8bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 8bv32, 1bv32, 1bv32);call #Ultimate.allocInit(13bv32, 9bv32);call #Ultimate.allocInit(3bv32, 10bv32);call write~init~intINTTYPE1(79bv8, 10bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(110bv8, 10bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 10bv32, 2bv32, 1bv32);call #Ultimate.allocInit(4bv32, 11bv32);call write~init~intINTTYPE1(79bv8, 11bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 11bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 11bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 11bv32, 3bv32, 1bv32);call #Ultimate.allocInit(7bv32, 12bv32);call write~init~intINTTYPE1(44bv8, 12bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(80bv8, 12bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(117bv8, 12bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(109bv8, 12bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(112bv8, 12bv32, 4bv32, 1bv32);call write~init~intINTTYPE1(58bv8, 12bv32, 5bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 12bv32, 6bv32, 1bv32);call #Ultimate.allocInit(3bv32, 13bv32);call write~init~intINTTYPE1(79bv8, 13bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(110bv8, 13bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 13bv32, 2bv32, 1bv32);call #Ultimate.allocInit(4bv32, 14bv32);call write~init~intINTTYPE1(79bv8, 14bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 14bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 14bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 14bv32, 3bv32, 1bv32);call #Ultimate.allocInit(3bv32, 15bv32);call write~init~intINTTYPE1(41bv8, 15bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(32bv8, 15bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 15bv32, 2bv32, 1bv32);call #Ultimate.allocInit(2bv32, 16bv32);call write~init~intINTTYPE1(10bv8, 16bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 16bv32, 1bv32, 1bv32);call #Ultimate.allocInit(30bv32, 17bv32);call #Ultimate.allocInit(9bv32, 18bv32);call #Ultimate.allocInit(21bv32, 19bv32);call #Ultimate.allocInit(30bv32, 20bv32);call #Ultimate.allocInit(9bv32, 21bv32);call #Ultimate.allocInit(21bv32, 22bv32);call #Ultimate.allocInit(30bv32, 23bv32);call #Ultimate.allocInit(9bv32, 24bv32);call #Ultimate.allocInit(25bv32, 25bv32);call #Ultimate.allocInit(30bv32, 26bv32);call #Ultimate.allocInit(9bv32, 27bv32);call #Ultimate.allocInit(25bv32, 28bv32);~__SELECTED_FEATURE_base~0 := 0bv32;~__SELECTED_FEATURE_highWaterSensor~0 := 0bv32;~__SELECTED_FEATURE_lowWaterSensor~0 := 0bv32;~__SELECTED_FEATURE_methaneQuery~0 := 0bv32;~__SELECTED_FEATURE_methaneAlarm~0 := 0bv32;~__SELECTED_FEATURE_stopCommand~0 := 0bv32;~__SELECTED_FEATURE_startCommand~0 := 0bv32;~__GUIDSL_ROOT_PRODUCTION~0 := 0bv32;~waterLevel~0 := 1bv32;~methaneLevelCritical~0 := 0bv32;~pumpRunning~0 := 0bv32;~systemActive~0 := 1bv32;~cleanupTimeShifts~0 := 4bv32;~methAndRunningLastTime~0 := 0bv32;~head~0.base, ~head~0.offset := 0bv32, 0bv32; {25169#true} is VALID [2022-02-20 18:08:52,404 INFO L290 TraceCheckUtils]: 1: Hoare triple {25169#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret24#1, main_~retValue_acc~8#1, main_~tmp~6#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~6#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1bv32; {25169#true} is VALID [2022-02-20 18:08:52,404 INFO L290 TraceCheckUtils]: 2: Hoare triple {25169#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret55#1, select_features_#t~ret56#1, select_features_#t~ret57#1, select_features_#t~ret58#1, select_features_#t~ret59#1, select_features_#t~ret60#1;~__SELECTED_FEATURE_base~0 := 1bv32; {25169#true} is VALID [2022-02-20 18:08:52,404 INFO L272 TraceCheckUtils]: 3: Hoare triple {25169#true} call select_features_#t~ret55#1 := select_one(); {25169#true} is VALID [2022-02-20 18:08:52,404 INFO L290 TraceCheckUtils]: 4: Hoare triple {25169#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {25169#true} is VALID [2022-02-20 18:08:52,404 INFO L290 TraceCheckUtils]: 5: Hoare triple {25169#true} assume true; {25169#true} is VALID [2022-02-20 18:08:52,404 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {25169#true} {25169#true} #363#return; {25169#true} is VALID [2022-02-20 18:08:52,404 INFO L290 TraceCheckUtils]: 7: Hoare triple {25169#true} ~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret55#1;havoc select_features_#t~ret55#1; {25169#true} is VALID [2022-02-20 18:08:52,405 INFO L272 TraceCheckUtils]: 8: Hoare triple {25169#true} call select_features_#t~ret56#1 := select_one(); {25169#true} is VALID [2022-02-20 18:08:52,405 INFO L290 TraceCheckUtils]: 9: Hoare triple {25169#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {25169#true} is VALID [2022-02-20 18:08:52,405 INFO L290 TraceCheckUtils]: 10: Hoare triple {25169#true} assume true; {25169#true} is VALID [2022-02-20 18:08:52,405 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {25169#true} {25169#true} #365#return; {25169#true} is VALID [2022-02-20 18:08:52,405 INFO L290 TraceCheckUtils]: 12: Hoare triple {25169#true} ~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret56#1;havoc select_features_#t~ret56#1; {25169#true} is VALID [2022-02-20 18:08:52,405 INFO L272 TraceCheckUtils]: 13: Hoare triple {25169#true} call select_features_#t~ret57#1 := select_one(); {25169#true} is VALID [2022-02-20 18:08:52,405 INFO L290 TraceCheckUtils]: 14: Hoare triple {25169#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {25169#true} is VALID [2022-02-20 18:08:52,405 INFO L290 TraceCheckUtils]: 15: Hoare triple {25169#true} assume true; {25169#true} is VALID [2022-02-20 18:08:52,406 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {25169#true} {25169#true} #367#return; {25169#true} is VALID [2022-02-20 18:08:52,406 INFO L290 TraceCheckUtils]: 17: Hoare triple {25169#true} ~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret57#1;havoc select_features_#t~ret57#1; {25169#true} is VALID [2022-02-20 18:08:52,406 INFO L272 TraceCheckUtils]: 18: Hoare triple {25169#true} call select_features_#t~ret58#1 := select_one(); {25169#true} is VALID [2022-02-20 18:08:52,406 INFO L290 TraceCheckUtils]: 19: Hoare triple {25169#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {25169#true} is VALID [2022-02-20 18:08:52,406 INFO L290 TraceCheckUtils]: 20: Hoare triple {25169#true} assume true; {25169#true} is VALID [2022-02-20 18:08:52,406 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {25169#true} {25169#true} #369#return; {25169#true} is VALID [2022-02-20 18:08:52,406 INFO L290 TraceCheckUtils]: 22: Hoare triple {25169#true} ~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret58#1;havoc select_features_#t~ret58#1; {25169#true} is VALID [2022-02-20 18:08:52,406 INFO L272 TraceCheckUtils]: 23: Hoare triple {25169#true} call select_features_#t~ret59#1 := select_one(); {25169#true} is VALID [2022-02-20 18:08:52,407 INFO L290 TraceCheckUtils]: 24: Hoare triple {25169#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {25169#true} is VALID [2022-02-20 18:08:52,407 INFO L290 TraceCheckUtils]: 25: Hoare triple {25169#true} assume true; {25169#true} is VALID [2022-02-20 18:08:52,407 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {25169#true} {25169#true} #371#return; {25169#true} is VALID [2022-02-20 18:08:52,407 INFO L290 TraceCheckUtils]: 27: Hoare triple {25169#true} ~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret59#1;havoc select_features_#t~ret59#1; {25169#true} is VALID [2022-02-20 18:08:52,407 INFO L272 TraceCheckUtils]: 28: Hoare triple {25169#true} call select_features_#t~ret60#1 := select_one(); {25169#true} is VALID [2022-02-20 18:08:52,407 INFO L290 TraceCheckUtils]: 29: Hoare triple {25169#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {25169#true} is VALID [2022-02-20 18:08:52,407 INFO L290 TraceCheckUtils]: 30: Hoare triple {25169#true} assume true; {25169#true} is VALID [2022-02-20 18:08:52,407 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {25169#true} {25169#true} #373#return; {25169#true} is VALID [2022-02-20 18:08:52,408 INFO L290 TraceCheckUtils]: 32: Hoare triple {25169#true} ~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret60#1;havoc select_features_#t~ret60#1; {25169#true} is VALID [2022-02-20 18:08:52,408 INFO L290 TraceCheckUtils]: 33: Hoare triple {25169#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~13#1;havoc valid_product_~retValue_acc~13#1;valid_product_~retValue_acc~13#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~13#1; {25169#true} is VALID [2022-02-20 18:08:52,408 INFO L290 TraceCheckUtils]: 34: Hoare triple {25169#true} main_#t~ret24#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~6#1 := main_#t~ret24#1;havoc main_#t~ret24#1; {25169#true} is VALID [2022-02-20 18:08:52,408 INFO L290 TraceCheckUtils]: 35: Hoare triple {25169#true} assume 0bv32 != main_~tmp~6#1;assume { :begin_inline_setup } true; {25169#true} is VALID [2022-02-20 18:08:52,408 INFO L290 TraceCheckUtils]: 36: Hoare triple {25169#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0bv32; {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} is VALID [2022-02-20 18:08:52,409 INFO L290 TraceCheckUtils]: 37: Hoare triple {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet25#1, test_#t~nondet26#1, test_#t~nondet27#1, test_#t~nondet28#1, test_~splverifierCounter~0#1, test_~tmp~7#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~7#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0bv32; {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} is VALID [2022-02-20 18:08:52,409 INFO L290 TraceCheckUtils]: 38: Hoare triple {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} assume !false; {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} is VALID [2022-02-20 18:08:52,409 INFO L290 TraceCheckUtils]: 39: Hoare triple {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} assume ~bvslt32(test_~splverifierCounter~0#1, 4bv32); {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} is VALID [2022-02-20 18:08:52,410 INFO L290 TraceCheckUtils]: 40: Hoare triple {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} test_~tmp~7#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} is VALID [2022-02-20 18:08:52,410 INFO L290 TraceCheckUtils]: 41: Hoare triple {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} assume 0bv32 != test_~tmp~7#1; {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} is VALID [2022-02-20 18:08:52,411 INFO L272 TraceCheckUtils]: 42: Hoare triple {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} call waterRise(); {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} is VALID [2022-02-20 18:08:52,411 INFO L290 TraceCheckUtils]: 43: Hoare triple {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} assume ~bvslt32(~waterLevel~0, 2bv32);~waterLevel~0 := ~bvadd32(1bv32, ~waterLevel~0); {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} is VALID [2022-02-20 18:08:52,411 INFO L290 TraceCheckUtils]: 44: Hoare triple {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} assume true; {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} is VALID [2022-02-20 18:08:52,412 INFO L284 TraceCheckUtils]: 45: Hoare quadruple {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} #375#return; {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} is VALID [2022-02-20 18:08:52,412 INFO L290 TraceCheckUtils]: 46: Hoare triple {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} test_~tmp___0~2#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} is VALID [2022-02-20 18:08:52,412 INFO L290 TraceCheckUtils]: 47: Hoare triple {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} assume 0bv32 != test_~tmp___0~2#1; {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} is VALID [2022-02-20 18:08:52,413 INFO L272 TraceCheckUtils]: 48: Hoare triple {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} call changeMethaneLevel(); {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} is VALID [2022-02-20 18:08:52,413 INFO L290 TraceCheckUtils]: 49: Hoare triple {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} assume !(0bv32 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1bv32; {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} is VALID [2022-02-20 18:08:52,413 INFO L290 TraceCheckUtils]: 50: Hoare triple {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} assume true; {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} is VALID [2022-02-20 18:08:52,414 INFO L284 TraceCheckUtils]: 51: Hoare quadruple {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} #377#return; {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} is VALID [2022-02-20 18:08:52,414 INFO L290 TraceCheckUtils]: 52: Hoare triple {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} test_~tmp___2~0#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} is VALID [2022-02-20 18:08:52,414 INFO L290 TraceCheckUtils]: 53: Hoare triple {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} assume 0bv32 != test_~tmp___2~0#1; {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} is VALID [2022-02-20 18:08:52,415 INFO L290 TraceCheckUtils]: 54: Hoare triple {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} assume !(0bv32 != ~__SELECTED_FEATURE_startCommand~0); {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} is VALID [2022-02-20 18:08:52,415 INFO L272 TraceCheckUtils]: 55: Hoare triple {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} call timeShift(); {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} is VALID [2022-02-20 18:08:52,415 INFO L290 TraceCheckUtils]: 56: Hoare triple {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} assume !(0bv32 != ~pumpRunning~0); {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} is VALID [2022-02-20 18:08:52,415 INFO L290 TraceCheckUtils]: 57: Hoare triple {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} assume 0bv32 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} is VALID [2022-02-20 18:08:52,416 INFO L290 TraceCheckUtils]: 58: Hoare triple {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} assume !(0bv32 != ~__SELECTED_FEATURE_methaneAlarm~0); {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} is VALID [2022-02-20 18:08:52,416 INFO L272 TraceCheckUtils]: 59: Hoare triple {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} call processEnvironment__before__methaneAlarm(); {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} is VALID [2022-02-20 18:08:52,416 INFO L290 TraceCheckUtils]: 60: Hoare triple {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} assume !(0bv32 != ~__SELECTED_FEATURE_lowWaterSensor~0); {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} is VALID [2022-02-20 18:08:52,417 INFO L272 TraceCheckUtils]: 61: Hoare triple {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} call processEnvironment__before__lowWaterSensor(); {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} is VALID [2022-02-20 18:08:52,417 INFO L290 TraceCheckUtils]: 62: Hoare triple {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} assume 0bv32 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret9#1, processEnvironment__role__highWaterSensor_~tmp~0#1;havoc processEnvironment__role__highWaterSensor_~tmp~0#1; {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} is VALID [2022-02-20 18:08:52,417 INFO L290 TraceCheckUtils]: 63: Hoare triple {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} assume 0bv32 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret22#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} is VALID [2022-02-20 18:08:52,418 INFO L290 TraceCheckUtils]: 64: Hoare triple {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} assume !~bvslt32(~waterLevel~0, 2bv32);isHighWaterSensorDry_~retValue_acc~2#1 := 0bv32;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} is VALID [2022-02-20 18:08:52,418 INFO L290 TraceCheckUtils]: 65: Hoare triple {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} isHighWaterLevel_#t~ret22#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret22#1;havoc isHighWaterLevel_#t~ret22#1; {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} is VALID [2022-02-20 18:08:52,418 INFO L290 TraceCheckUtils]: 66: Hoare triple {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} assume !(0bv32 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1bv32; {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} is VALID [2022-02-20 18:08:52,419 INFO L290 TraceCheckUtils]: 67: Hoare triple {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} is VALID [2022-02-20 18:08:52,419 INFO L290 TraceCheckUtils]: 68: Hoare triple {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} processEnvironment__role__highWaterSensor_#t~ret9#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;processEnvironment__role__highWaterSensor_~tmp~0#1 := processEnvironment__role__highWaterSensor_#t~ret9#1;havoc processEnvironment__role__highWaterSensor_#t~ret9#1; {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} is VALID [2022-02-20 18:08:52,419 INFO L290 TraceCheckUtils]: 69: Hoare triple {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} assume 0bv32 != processEnvironment__role__highWaterSensor_~tmp~0#1;assume { :begin_inline_activatePump } true; {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} is VALID [2022-02-20 18:08:52,420 INFO L290 TraceCheckUtils]: 70: Hoare triple {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} assume !(0bv32 != ~__SELECTED_FEATURE_methaneQuery~0); {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} is VALID [2022-02-20 18:08:52,420 INFO L272 TraceCheckUtils]: 71: Hoare triple {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} call activatePump__before__methaneQuery(); {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} is VALID [2022-02-20 18:08:52,422 INFO L290 TraceCheckUtils]: 72: Hoare triple {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} ~pumpRunning~0 := 1bv32; {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} is VALID [2022-02-20 18:08:52,422 INFO L290 TraceCheckUtils]: 73: Hoare triple {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} assume true; {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} is VALID [2022-02-20 18:08:52,422 INFO L284 TraceCheckUtils]: 74: Hoare quadruple {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} #339#return; {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} is VALID [2022-02-20 18:08:52,423 INFO L290 TraceCheckUtils]: 75: Hoare triple {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} assume { :end_inline_activatePump } true; {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} is VALID [2022-02-20 18:08:52,423 INFO L290 TraceCheckUtils]: 76: Hoare triple {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} is VALID [2022-02-20 18:08:52,423 INFO L290 TraceCheckUtils]: 77: Hoare triple {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} assume true; {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} is VALID [2022-02-20 18:08:52,424 INFO L284 TraceCheckUtils]: 78: Hoare quadruple {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} #391#return; {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} is VALID [2022-02-20 18:08:52,424 INFO L290 TraceCheckUtils]: 79: Hoare triple {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} assume true; {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} is VALID [2022-02-20 18:08:52,424 INFO L284 TraceCheckUtils]: 80: Hoare quadruple {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} #359#return; {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} is VALID [2022-02-20 18:08:52,425 INFO L290 TraceCheckUtils]: 81: Hoare triple {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} assume { :end_inline_processEnvironment } true; {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} is VALID [2022-02-20 18:08:52,425 INFO L290 TraceCheckUtils]: 82: Hoare triple {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret29#1, __utac_acc__Specification2_spec__2_#t~ret30#1, __utac_acc__Specification2_spec__2_~tmp~8#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~8#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} is VALID [2022-02-20 18:08:52,425 INFO L272 TraceCheckUtils]: 83: Hoare triple {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} call __utac_acc__Specification2_spec__2_#t~ret29#1 := isMethaneLevelCritical(); {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} is VALID [2022-02-20 18:08:52,426 INFO L290 TraceCheckUtils]: 84: Hoare triple {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} is VALID [2022-02-20 18:08:52,426 INFO L290 TraceCheckUtils]: 85: Hoare triple {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} assume true; {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} is VALID [2022-02-20 18:08:52,426 INFO L284 TraceCheckUtils]: 86: Hoare quadruple {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} #361#return; {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} is VALID [2022-02-20 18:08:52,427 INFO L290 TraceCheckUtils]: 87: Hoare triple {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} __utac_acc__Specification2_spec__2_~tmp~8#1 := __utac_acc__Specification2_spec__2_#t~ret29#1;havoc __utac_acc__Specification2_spec__2_#t~ret29#1; {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} is VALID [2022-02-20 18:08:52,427 INFO L290 TraceCheckUtils]: 88: Hoare triple {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} assume 0bv32 != __utac_acc__Specification2_spec__2_~tmp~8#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~5#1;havoc isPumpRunning_~retValue_acc~5#1;isPumpRunning_~retValue_acc~5#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~5#1; {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} is VALID [2022-02-20 18:08:52,427 INFO L290 TraceCheckUtils]: 89: Hoare triple {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} __utac_acc__Specification2_spec__2_#t~ret30#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret30#1;havoc __utac_acc__Specification2_spec__2_#t~ret30#1; {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} is VALID [2022-02-20 18:08:52,428 INFO L290 TraceCheckUtils]: 90: Hoare triple {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} assume 0bv32 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} is VALID [2022-02-20 18:08:52,428 INFO L290 TraceCheckUtils]: 91: Hoare triple {25282#(= ~methAndRunningLastTime~0 (_ bv0 32))} assume 0bv32 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {25170#false} is VALID [2022-02-20 18:08:52,428 INFO L290 TraceCheckUtils]: 92: Hoare triple {25170#false} assume !false; {25170#false} is VALID [2022-02-20 18:08:52,429 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-02-20 18:08:52,429 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-02-20 18:08:52,429 INFO L144 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-02-20 18:08:52,429 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1086723382] [2022-02-20 18:08:52,429 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1086723382] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:08:52,429 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:08:52,430 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-02-20 18:08:52,430 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [319859775] [2022-02-20 18:08:52,430 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:08:52,431 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 19.333333333333332) internal successors, (58), 3 states have internal predecessors, (58), 2 states have call successors, (13), 2 states have call predecessors, (13), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) Word has length 93 [2022-02-20 18:08:52,431 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:08:52,431 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 3 states, 3 states have (on average 19.333333333333332) internal successors, (58), 3 states have internal predecessors, (58), 2 states have call successors, (13), 2 states have call predecessors, (13), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2022-02-20 18:08:52,492 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 83 edges. 83 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:52,493 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-02-20 18:08:52,493 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-02-20 18:08:52,494 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-02-20 18:08:52,494 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:08:52,494 INFO L87 Difference]: Start difference. First operand 925 states and 1229 transitions. Second operand has 3 states, 3 states have (on average 19.333333333333332) internal successors, (58), 3 states have internal predecessors, (58), 2 states have call successors, (13), 2 states have call predecessors, (13), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2022-02-20 18:08:52,851 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:52,852 INFO L93 Difference]: Finished difference Result 1457 states and 1969 transitions. [2022-02-20 18:08:52,852 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-02-20 18:08:52,852 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 19.333333333333332) internal successors, (58), 3 states have internal predecessors, (58), 2 states have call successors, (13), 2 states have call predecessors, (13), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) Word has length 93 [2022-02-20 18:08:52,852 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:08:52,852 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 19.333333333333332) internal successors, (58), 3 states have internal predecessors, (58), 2 states have call successors, (13), 2 states have call predecessors, (13), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2022-02-20 18:08:52,856 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 316 transitions. [2022-02-20 18:08:52,856 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 19.333333333333332) internal successors, (58), 3 states have internal predecessors, (58), 2 states have call successors, (13), 2 states have call predecessors, (13), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2022-02-20 18:08:52,859 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 316 transitions. [2022-02-20 18:08:52,859 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 316 transitions. [2022-02-20 18:08:53,056 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 316 edges. 316 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:53,151 INFO L225 Difference]: With dead ends: 1457 [2022-02-20 18:08:53,151 INFO L226 Difference]: Without dead ends: 1455 [2022-02-20 18:08:53,152 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 92 GetRequests, 91 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:08:53,154 INFO L933 BasicCegarLoop]: 196 mSDtfsCounter, 111 mSDsluCounter, 140 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 111 SdHoareTripleChecker+Valid, 336 SdHoareTripleChecker+Invalid, 8 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:08:53,154 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [111 Valid, 336 Invalid, 8 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:08:53,155 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1455 states. [2022-02-20 18:08:53,186 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1455 to 1206. [2022-02-20 18:08:53,187 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:08:53,189 INFO L82 GeneralOperation]: Start isEquivalent. First operand 1455 states. Second operand has 1206 states, 861 states have (on average 1.29732868757259) internal successors, (1117), 974 states have internal predecessors, (1117), 215 states have call successors, (215), 132 states have call predecessors, (215), 129 states have return successors, (289), 193 states have call predecessors, (289), 215 states have call successors, (289) [2022-02-20 18:08:53,191 INFO L74 IsIncluded]: Start isIncluded. First operand 1455 states. Second operand has 1206 states, 861 states have (on average 1.29732868757259) internal successors, (1117), 974 states have internal predecessors, (1117), 215 states have call successors, (215), 132 states have call predecessors, (215), 129 states have return successors, (289), 193 states have call predecessors, (289), 215 states have call successors, (289) [2022-02-20 18:08:53,192 INFO L87 Difference]: Start difference. First operand 1455 states. Second operand has 1206 states, 861 states have (on average 1.29732868757259) internal successors, (1117), 974 states have internal predecessors, (1117), 215 states have call successors, (215), 132 states have call predecessors, (215), 129 states have return successors, (289), 193 states have call predecessors, (289), 215 states have call successors, (289) [2022-02-20 18:08:53,262 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:53,262 INFO L93 Difference]: Finished difference Result 1455 states and 1966 transitions. [2022-02-20 18:08:53,262 INFO L276 IsEmpty]: Start isEmpty. Operand 1455 states and 1966 transitions. [2022-02-20 18:08:53,267 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:53,267 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:53,270 INFO L74 IsIncluded]: Start isIncluded. First operand has 1206 states, 861 states have (on average 1.29732868757259) internal successors, (1117), 974 states have internal predecessors, (1117), 215 states have call successors, (215), 132 states have call predecessors, (215), 129 states have return successors, (289), 193 states have call predecessors, (289), 215 states have call successors, (289) Second operand 1455 states. [2022-02-20 18:08:53,272 INFO L87 Difference]: Start difference. First operand has 1206 states, 861 states have (on average 1.29732868757259) internal successors, (1117), 974 states have internal predecessors, (1117), 215 states have call successors, (215), 132 states have call predecessors, (215), 129 states have return successors, (289), 193 states have call predecessors, (289), 215 states have call successors, (289) Second operand 1455 states. [2022-02-20 18:08:53,338 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:53,338 INFO L93 Difference]: Finished difference Result 1455 states and 1966 transitions. [2022-02-20 18:08:53,338 INFO L276 IsEmpty]: Start isEmpty. Operand 1455 states and 1966 transitions. [2022-02-20 18:08:53,342 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:53,342 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:53,342 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:08:53,342 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:08:53,345 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1206 states, 861 states have (on average 1.29732868757259) internal successors, (1117), 974 states have internal predecessors, (1117), 215 states have call successors, (215), 132 states have call predecessors, (215), 129 states have return successors, (289), 193 states have call predecessors, (289), 215 states have call successors, (289) [2022-02-20 18:08:53,434 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1206 states to 1206 states and 1621 transitions. [2022-02-20 18:08:53,435 INFO L78 Accepts]: Start accepts. Automaton has 1206 states and 1621 transitions. Word has length 93 [2022-02-20 18:08:53,435 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:08:53,435 INFO L470 AbstractCegarLoop]: Abstraction has 1206 states and 1621 transitions. [2022-02-20 18:08:53,436 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 19.333333333333332) internal successors, (58), 3 states have internal predecessors, (58), 2 states have call successors, (13), 2 states have call predecessors, (13), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2022-02-20 18:08:53,436 INFO L276 IsEmpty]: Start isEmpty. Operand 1206 states and 1621 transitions. [2022-02-20 18:08:53,443 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 125 [2022-02-20 18:08:53,443 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:08:53,443 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:08:53,468 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (10)] Forceful destruction successful, exit code 0 [2022-02-20 18:08:53,653 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-02-20 18:08:53,653 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:08:53,654 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:08:53,654 INFO L85 PathProgramCache]: Analyzing trace with hash -704303684, now seen corresponding path program 1 times [2022-02-20 18:08:53,654 INFO L126 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-02-20 18:08:53,654 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2027393960] [2022-02-20 18:08:53,654 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:08:53,655 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-02-20 18:08:53,655 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-02-20 18:08:53,672 INFO L229 MonitoredProcess]: Starting monitored process 11 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-02-20 18:08:53,721 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (11)] Waiting until timeout for monitored process [2022-02-20 18:08:53,773 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:53,777 INFO L263 TraceCheckSpWp]: Trace formula consists of 312 conjuncts, 2 conjunts are in the unsatisfiable core [2022-02-20 18:08:53,794 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:53,796 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 18:08:53,993 INFO L290 TraceCheckUtils]: 0: Hoare triple {32217#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0bv32, 0bv32;assume 0bv1 == #valid[0bv32];assume ~bvult32(0bv32, #StackHeapBarrier);call #Ultimate.allocInit(2bv32, 1bv32);call write~init~intINTTYPE1(48bv8, 1bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 1bv32, 1bv32, 1bv32);call #Ultimate.allocInit(38bv32, 2bv32);call #Ultimate.allocInit(12bv32, 3bv32);call #Ultimate.allocInit(13bv32, 4bv32);call #Ultimate.allocInit(7bv32, 5bv32);call write~init~intINTTYPE1(44bv8, 5bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(77bv8, 5bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(101bv8, 5bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(116bv8, 5bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(104bv8, 5bv32, 4bv32, 1bv32);call write~init~intINTTYPE1(58bv8, 5bv32, 5bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 5bv32, 6bv32, 1bv32);call #Ultimate.allocInit(5bv32, 6bv32);call write~init~intINTTYPE1(67bv8, 6bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(82bv8, 6bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(73bv8, 6bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(84bv8, 6bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 6bv32, 4bv32, 1bv32);call #Ultimate.allocInit(3bv32, 7bv32);call write~init~intINTTYPE1(79bv8, 7bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(75bv8, 7bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 7bv32, 2bv32, 1bv32);call #Ultimate.allocInit(2bv32, 8bv32);call write~init~intINTTYPE1(41bv8, 8bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 8bv32, 1bv32, 1bv32);call #Ultimate.allocInit(13bv32, 9bv32);call #Ultimate.allocInit(3bv32, 10bv32);call write~init~intINTTYPE1(79bv8, 10bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(110bv8, 10bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 10bv32, 2bv32, 1bv32);call #Ultimate.allocInit(4bv32, 11bv32);call write~init~intINTTYPE1(79bv8, 11bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 11bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 11bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 11bv32, 3bv32, 1bv32);call #Ultimate.allocInit(7bv32, 12bv32);call write~init~intINTTYPE1(44bv8, 12bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(80bv8, 12bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(117bv8, 12bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(109bv8, 12bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(112bv8, 12bv32, 4bv32, 1bv32);call write~init~intINTTYPE1(58bv8, 12bv32, 5bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 12bv32, 6bv32, 1bv32);call #Ultimate.allocInit(3bv32, 13bv32);call write~init~intINTTYPE1(79bv8, 13bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(110bv8, 13bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 13bv32, 2bv32, 1bv32);call #Ultimate.allocInit(4bv32, 14bv32);call write~init~intINTTYPE1(79bv8, 14bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 14bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 14bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 14bv32, 3bv32, 1bv32);call #Ultimate.allocInit(3bv32, 15bv32);call write~init~intINTTYPE1(41bv8, 15bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(32bv8, 15bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 15bv32, 2bv32, 1bv32);call #Ultimate.allocInit(2bv32, 16bv32);call write~init~intINTTYPE1(10bv8, 16bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 16bv32, 1bv32, 1bv32);call #Ultimate.allocInit(30bv32, 17bv32);call #Ultimate.allocInit(9bv32, 18bv32);call #Ultimate.allocInit(21bv32, 19bv32);call #Ultimate.allocInit(30bv32, 20bv32);call #Ultimate.allocInit(9bv32, 21bv32);call #Ultimate.allocInit(21bv32, 22bv32);call #Ultimate.allocInit(30bv32, 23bv32);call #Ultimate.allocInit(9bv32, 24bv32);call #Ultimate.allocInit(25bv32, 25bv32);call #Ultimate.allocInit(30bv32, 26bv32);call #Ultimate.allocInit(9bv32, 27bv32);call #Ultimate.allocInit(25bv32, 28bv32);~__SELECTED_FEATURE_base~0 := 0bv32;~__SELECTED_FEATURE_highWaterSensor~0 := 0bv32;~__SELECTED_FEATURE_lowWaterSensor~0 := 0bv32;~__SELECTED_FEATURE_methaneQuery~0 := 0bv32;~__SELECTED_FEATURE_methaneAlarm~0 := 0bv32;~__SELECTED_FEATURE_stopCommand~0 := 0bv32;~__SELECTED_FEATURE_startCommand~0 := 0bv32;~__GUIDSL_ROOT_PRODUCTION~0 := 0bv32;~waterLevel~0 := 1bv32;~methaneLevelCritical~0 := 0bv32;~pumpRunning~0 := 0bv32;~systemActive~0 := 1bv32;~cleanupTimeShifts~0 := 4bv32;~methAndRunningLastTime~0 := 0bv32;~head~0.base, ~head~0.offset := 0bv32, 0bv32; {32217#true} is VALID [2022-02-20 18:08:53,993 INFO L290 TraceCheckUtils]: 1: Hoare triple {32217#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret24#1, main_~retValue_acc~8#1, main_~tmp~6#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~6#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1bv32; {32217#true} is VALID [2022-02-20 18:08:53,993 INFO L290 TraceCheckUtils]: 2: Hoare triple {32217#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret55#1, select_features_#t~ret56#1, select_features_#t~ret57#1, select_features_#t~ret58#1, select_features_#t~ret59#1, select_features_#t~ret60#1;~__SELECTED_FEATURE_base~0 := 1bv32; {32217#true} is VALID [2022-02-20 18:08:53,994 INFO L272 TraceCheckUtils]: 3: Hoare triple {32217#true} call select_features_#t~ret55#1 := select_one(); {32217#true} is VALID [2022-02-20 18:08:53,994 INFO L290 TraceCheckUtils]: 4: Hoare triple {32217#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {32217#true} is VALID [2022-02-20 18:08:53,994 INFO L290 TraceCheckUtils]: 5: Hoare triple {32217#true} assume true; {32217#true} is VALID [2022-02-20 18:08:53,994 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {32217#true} {32217#true} #363#return; {32217#true} is VALID [2022-02-20 18:08:53,994 INFO L290 TraceCheckUtils]: 7: Hoare triple {32217#true} ~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret55#1;havoc select_features_#t~ret55#1; {32217#true} is VALID [2022-02-20 18:08:53,994 INFO L272 TraceCheckUtils]: 8: Hoare triple {32217#true} call select_features_#t~ret56#1 := select_one(); {32217#true} is VALID [2022-02-20 18:08:53,994 INFO L290 TraceCheckUtils]: 9: Hoare triple {32217#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {32217#true} is VALID [2022-02-20 18:08:53,994 INFO L290 TraceCheckUtils]: 10: Hoare triple {32217#true} assume true; {32217#true} is VALID [2022-02-20 18:08:53,994 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {32217#true} {32217#true} #365#return; {32217#true} is VALID [2022-02-20 18:08:53,995 INFO L290 TraceCheckUtils]: 12: Hoare triple {32217#true} ~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret56#1;havoc select_features_#t~ret56#1; {32217#true} is VALID [2022-02-20 18:08:53,995 INFO L272 TraceCheckUtils]: 13: Hoare triple {32217#true} call select_features_#t~ret57#1 := select_one(); {32217#true} is VALID [2022-02-20 18:08:53,995 INFO L290 TraceCheckUtils]: 14: Hoare triple {32217#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {32217#true} is VALID [2022-02-20 18:08:53,995 INFO L290 TraceCheckUtils]: 15: Hoare triple {32217#true} assume true; {32217#true} is VALID [2022-02-20 18:08:53,995 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {32217#true} {32217#true} #367#return; {32217#true} is VALID [2022-02-20 18:08:53,995 INFO L290 TraceCheckUtils]: 17: Hoare triple {32217#true} ~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret57#1;havoc select_features_#t~ret57#1; {32217#true} is VALID [2022-02-20 18:08:53,995 INFO L272 TraceCheckUtils]: 18: Hoare triple {32217#true} call select_features_#t~ret58#1 := select_one(); {32217#true} is VALID [2022-02-20 18:08:53,995 INFO L290 TraceCheckUtils]: 19: Hoare triple {32217#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {32217#true} is VALID [2022-02-20 18:08:53,995 INFO L290 TraceCheckUtils]: 20: Hoare triple {32217#true} assume true; {32217#true} is VALID [2022-02-20 18:08:53,996 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {32217#true} {32217#true} #369#return; {32217#true} is VALID [2022-02-20 18:08:53,996 INFO L290 TraceCheckUtils]: 22: Hoare triple {32217#true} ~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret58#1;havoc select_features_#t~ret58#1; {32217#true} is VALID [2022-02-20 18:08:53,996 INFO L272 TraceCheckUtils]: 23: Hoare triple {32217#true} call select_features_#t~ret59#1 := select_one(); {32217#true} is VALID [2022-02-20 18:08:53,996 INFO L290 TraceCheckUtils]: 24: Hoare triple {32217#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {32217#true} is VALID [2022-02-20 18:08:53,996 INFO L290 TraceCheckUtils]: 25: Hoare triple {32217#true} assume true; {32217#true} is VALID [2022-02-20 18:08:53,996 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {32217#true} {32217#true} #371#return; {32217#true} is VALID [2022-02-20 18:08:53,996 INFO L290 TraceCheckUtils]: 27: Hoare triple {32217#true} ~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret59#1;havoc select_features_#t~ret59#1; {32217#true} is VALID [2022-02-20 18:08:53,996 INFO L272 TraceCheckUtils]: 28: Hoare triple {32217#true} call select_features_#t~ret60#1 := select_one(); {32217#true} is VALID [2022-02-20 18:08:53,996 INFO L290 TraceCheckUtils]: 29: Hoare triple {32217#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {32217#true} is VALID [2022-02-20 18:08:53,997 INFO L290 TraceCheckUtils]: 30: Hoare triple {32217#true} assume true; {32217#true} is VALID [2022-02-20 18:08:53,997 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {32217#true} {32217#true} #373#return; {32217#true} is VALID [2022-02-20 18:08:53,997 INFO L290 TraceCheckUtils]: 32: Hoare triple {32217#true} ~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret60#1;havoc select_features_#t~ret60#1; {32217#true} is VALID [2022-02-20 18:08:53,997 INFO L290 TraceCheckUtils]: 33: Hoare triple {32217#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~13#1;havoc valid_product_~retValue_acc~13#1;valid_product_~retValue_acc~13#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~13#1; {32217#true} is VALID [2022-02-20 18:08:53,997 INFO L290 TraceCheckUtils]: 34: Hoare triple {32217#true} main_#t~ret24#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~6#1 := main_#t~ret24#1;havoc main_#t~ret24#1; {32217#true} is VALID [2022-02-20 18:08:53,997 INFO L290 TraceCheckUtils]: 35: Hoare triple {32217#true} assume 0bv32 != main_~tmp~6#1;assume { :begin_inline_setup } true; {32217#true} is VALID [2022-02-20 18:08:53,997 INFO L290 TraceCheckUtils]: 36: Hoare triple {32217#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0bv32; {32217#true} is VALID [2022-02-20 18:08:53,997 INFO L290 TraceCheckUtils]: 37: Hoare triple {32217#true} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet25#1, test_#t~nondet26#1, test_#t~nondet27#1, test_#t~nondet28#1, test_~splverifierCounter~0#1, test_~tmp~7#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~7#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0bv32; {32217#true} is VALID [2022-02-20 18:08:53,997 INFO L290 TraceCheckUtils]: 38: Hoare triple {32217#true} assume !false; {32217#true} is VALID [2022-02-20 18:08:53,997 INFO L290 TraceCheckUtils]: 39: Hoare triple {32217#true} assume ~bvslt32(test_~splverifierCounter~0#1, 4bv32); {32217#true} is VALID [2022-02-20 18:08:53,998 INFO L290 TraceCheckUtils]: 40: Hoare triple {32217#true} test_~tmp~7#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {32217#true} is VALID [2022-02-20 18:08:53,998 INFO L290 TraceCheckUtils]: 41: Hoare triple {32217#true} assume 0bv32 != test_~tmp~7#1; {32217#true} is VALID [2022-02-20 18:08:53,998 INFO L272 TraceCheckUtils]: 42: Hoare triple {32217#true} call waterRise(); {32217#true} is VALID [2022-02-20 18:08:53,998 INFO L290 TraceCheckUtils]: 43: Hoare triple {32217#true} assume ~bvslt32(~waterLevel~0, 2bv32);~waterLevel~0 := ~bvadd32(1bv32, ~waterLevel~0); {32217#true} is VALID [2022-02-20 18:08:53,998 INFO L290 TraceCheckUtils]: 44: Hoare triple {32217#true} assume true; {32217#true} is VALID [2022-02-20 18:08:53,998 INFO L284 TraceCheckUtils]: 45: Hoare quadruple {32217#true} {32217#true} #375#return; {32217#true} is VALID [2022-02-20 18:08:53,998 INFO L290 TraceCheckUtils]: 46: Hoare triple {32217#true} test_~tmp___0~2#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {32217#true} is VALID [2022-02-20 18:08:53,998 INFO L290 TraceCheckUtils]: 47: Hoare triple {32217#true} assume 0bv32 != test_~tmp___0~2#1; {32217#true} is VALID [2022-02-20 18:08:53,998 INFO L272 TraceCheckUtils]: 48: Hoare triple {32217#true} call changeMethaneLevel(); {32217#true} is VALID [2022-02-20 18:08:53,999 INFO L290 TraceCheckUtils]: 49: Hoare triple {32217#true} assume !(0bv32 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1bv32; {32217#true} is VALID [2022-02-20 18:08:53,999 INFO L290 TraceCheckUtils]: 50: Hoare triple {32217#true} assume true; {32217#true} is VALID [2022-02-20 18:08:53,999 INFO L284 TraceCheckUtils]: 51: Hoare quadruple {32217#true} {32217#true} #377#return; {32217#true} is VALID [2022-02-20 18:08:53,999 INFO L290 TraceCheckUtils]: 52: Hoare triple {32217#true} test_~tmp___2~0#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {32217#true} is VALID [2022-02-20 18:08:53,999 INFO L290 TraceCheckUtils]: 53: Hoare triple {32217#true} assume !(0bv32 != test_~tmp___2~0#1);test_~tmp___1~0#1 := test_#t~nondet28#1;havoc test_#t~nondet28#1; {32217#true} is VALID [2022-02-20 18:08:53,999 INFO L290 TraceCheckUtils]: 54: Hoare triple {32217#true} assume 0bv32 != test_~tmp___1~0#1; {32217#true} is VALID [2022-02-20 18:08:53,999 INFO L290 TraceCheckUtils]: 55: Hoare triple {32217#true} assume 0bv32 != ~__SELECTED_FEATURE_stopCommand~0;assume { :begin_inline_stopSystem } true; {32217#true} is VALID [2022-02-20 18:08:53,999 INFO L290 TraceCheckUtils]: 56: Hoare triple {32217#true} assume !(0bv32 != ~pumpRunning~0); {32217#true} is VALID [2022-02-20 18:08:54,000 INFO L290 TraceCheckUtils]: 57: Hoare triple {32217#true} ~systemActive~0 := 0bv32; {32393#(= ~systemActive~0 (_ bv0 32))} is VALID [2022-02-20 18:08:54,000 INFO L290 TraceCheckUtils]: 58: Hoare triple {32393#(= ~systemActive~0 (_ bv0 32))} assume { :end_inline_stopSystem } true; {32393#(= ~systemActive~0 (_ bv0 32))} is VALID [2022-02-20 18:08:54,000 INFO L272 TraceCheckUtils]: 59: Hoare triple {32393#(= ~systemActive~0 (_ bv0 32))} call timeShift(); {32393#(= ~systemActive~0 (_ bv0 32))} is VALID [2022-02-20 18:08:54,001 INFO L290 TraceCheckUtils]: 60: Hoare triple {32393#(= ~systemActive~0 (_ bv0 32))} assume !(0bv32 != ~pumpRunning~0); {32393#(= ~systemActive~0 (_ bv0 32))} is VALID [2022-02-20 18:08:54,001 INFO L290 TraceCheckUtils]: 61: Hoare triple {32393#(= ~systemActive~0 (_ bv0 32))} assume 0bv32 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {32218#false} is VALID [2022-02-20 18:08:54,001 INFO L290 TraceCheckUtils]: 62: Hoare triple {32218#false} assume !(0bv32 != ~__SELECTED_FEATURE_methaneAlarm~0); {32218#false} is VALID [2022-02-20 18:08:54,001 INFO L272 TraceCheckUtils]: 63: Hoare triple {32218#false} call processEnvironment__before__methaneAlarm(); {32218#false} is VALID [2022-02-20 18:08:54,001 INFO L290 TraceCheckUtils]: 64: Hoare triple {32218#false} assume !(0bv32 != ~__SELECTED_FEATURE_lowWaterSensor~0); {32218#false} is VALID [2022-02-20 18:08:54,001 INFO L272 TraceCheckUtils]: 65: Hoare triple {32218#false} call processEnvironment__before__lowWaterSensor(); {32218#false} is VALID [2022-02-20 18:08:54,001 INFO L290 TraceCheckUtils]: 66: Hoare triple {32218#false} assume 0bv32 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret9#1, processEnvironment__role__highWaterSensor_~tmp~0#1;havoc processEnvironment__role__highWaterSensor_~tmp~0#1; {32218#false} is VALID [2022-02-20 18:08:54,002 INFO L290 TraceCheckUtils]: 67: Hoare triple {32218#false} assume 0bv32 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret22#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {32218#false} is VALID [2022-02-20 18:08:54,002 INFO L290 TraceCheckUtils]: 68: Hoare triple {32218#false} assume !~bvslt32(~waterLevel~0, 2bv32);isHighWaterSensorDry_~retValue_acc~2#1 := 0bv32;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {32218#false} is VALID [2022-02-20 18:08:54,002 INFO L290 TraceCheckUtils]: 69: Hoare triple {32218#false} isHighWaterLevel_#t~ret22#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret22#1;havoc isHighWaterLevel_#t~ret22#1; {32218#false} is VALID [2022-02-20 18:08:54,002 INFO L290 TraceCheckUtils]: 70: Hoare triple {32218#false} assume !(0bv32 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1bv32; {32218#false} is VALID [2022-02-20 18:08:54,002 INFO L290 TraceCheckUtils]: 71: Hoare triple {32218#false} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {32218#false} is VALID [2022-02-20 18:08:54,002 INFO L290 TraceCheckUtils]: 72: Hoare triple {32218#false} processEnvironment__role__highWaterSensor_#t~ret9#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;processEnvironment__role__highWaterSensor_~tmp~0#1 := processEnvironment__role__highWaterSensor_#t~ret9#1;havoc processEnvironment__role__highWaterSensor_#t~ret9#1; {32218#false} is VALID [2022-02-20 18:08:54,002 INFO L290 TraceCheckUtils]: 73: Hoare triple {32218#false} assume 0bv32 != processEnvironment__role__highWaterSensor_~tmp~0#1;assume { :begin_inline_activatePump } true; {32218#false} is VALID [2022-02-20 18:08:54,002 INFO L290 TraceCheckUtils]: 74: Hoare triple {32218#false} assume !(0bv32 != ~__SELECTED_FEATURE_methaneQuery~0); {32218#false} is VALID [2022-02-20 18:08:54,002 INFO L272 TraceCheckUtils]: 75: Hoare triple {32218#false} call activatePump__before__methaneQuery(); {32218#false} is VALID [2022-02-20 18:08:54,003 INFO L290 TraceCheckUtils]: 76: Hoare triple {32218#false} ~pumpRunning~0 := 1bv32; {32218#false} is VALID [2022-02-20 18:08:54,003 INFO L290 TraceCheckUtils]: 77: Hoare triple {32218#false} assume true; {32218#false} is VALID [2022-02-20 18:08:54,003 INFO L284 TraceCheckUtils]: 78: Hoare quadruple {32218#false} {32218#false} #339#return; {32218#false} is VALID [2022-02-20 18:08:54,003 INFO L290 TraceCheckUtils]: 79: Hoare triple {32218#false} assume { :end_inline_activatePump } true; {32218#false} is VALID [2022-02-20 18:08:54,003 INFO L290 TraceCheckUtils]: 80: Hoare triple {32218#false} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {32218#false} is VALID [2022-02-20 18:08:54,003 INFO L290 TraceCheckUtils]: 81: Hoare triple {32218#false} assume true; {32218#false} is VALID [2022-02-20 18:08:54,003 INFO L284 TraceCheckUtils]: 82: Hoare quadruple {32218#false} {32218#false} #391#return; {32218#false} is VALID [2022-02-20 18:08:54,003 INFO L290 TraceCheckUtils]: 83: Hoare triple {32218#false} assume true; {32218#false} is VALID [2022-02-20 18:08:54,003 INFO L284 TraceCheckUtils]: 84: Hoare quadruple {32218#false} {32218#false} #359#return; {32218#false} is VALID [2022-02-20 18:08:54,003 INFO L290 TraceCheckUtils]: 85: Hoare triple {32218#false} assume { :end_inline_processEnvironment } true; {32218#false} is VALID [2022-02-20 18:08:54,004 INFO L290 TraceCheckUtils]: 86: Hoare triple {32218#false} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret29#1, __utac_acc__Specification2_spec__2_#t~ret30#1, __utac_acc__Specification2_spec__2_~tmp~8#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~8#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {32218#false} is VALID [2022-02-20 18:08:54,004 INFO L272 TraceCheckUtils]: 87: Hoare triple {32218#false} call __utac_acc__Specification2_spec__2_#t~ret29#1 := isMethaneLevelCritical(); {32218#false} is VALID [2022-02-20 18:08:54,004 INFO L290 TraceCheckUtils]: 88: Hoare triple {32218#false} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {32218#false} is VALID [2022-02-20 18:08:54,004 INFO L290 TraceCheckUtils]: 89: Hoare triple {32218#false} assume true; {32218#false} is VALID [2022-02-20 18:08:54,004 INFO L284 TraceCheckUtils]: 90: Hoare quadruple {32218#false} {32218#false} #361#return; {32218#false} is VALID [2022-02-20 18:08:54,004 INFO L290 TraceCheckUtils]: 91: Hoare triple {32218#false} __utac_acc__Specification2_spec__2_~tmp~8#1 := __utac_acc__Specification2_spec__2_#t~ret29#1;havoc __utac_acc__Specification2_spec__2_#t~ret29#1; {32218#false} is VALID [2022-02-20 18:08:54,004 INFO L290 TraceCheckUtils]: 92: Hoare triple {32218#false} assume 0bv32 != __utac_acc__Specification2_spec__2_~tmp~8#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~5#1;havoc isPumpRunning_~retValue_acc~5#1;isPumpRunning_~retValue_acc~5#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~5#1; {32218#false} is VALID [2022-02-20 18:08:54,004 INFO L290 TraceCheckUtils]: 93: Hoare triple {32218#false} __utac_acc__Specification2_spec__2_#t~ret30#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret30#1;havoc __utac_acc__Specification2_spec__2_#t~ret30#1; {32218#false} is VALID [2022-02-20 18:08:54,004 INFO L290 TraceCheckUtils]: 94: Hoare triple {32218#false} assume 0bv32 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {32218#false} is VALID [2022-02-20 18:08:54,005 INFO L290 TraceCheckUtils]: 95: Hoare triple {32218#false} assume !(0bv32 != ~methAndRunningLastTime~0);~methAndRunningLastTime~0 := 1bv32; {32218#false} is VALID [2022-02-20 18:08:54,005 INFO L290 TraceCheckUtils]: 96: Hoare triple {32218#false} assume { :end_inline___utac_acc__Specification2_spec__2 } true; {32218#false} is VALID [2022-02-20 18:08:54,005 INFO L290 TraceCheckUtils]: 97: Hoare triple {32218#false} assume true; {32218#false} is VALID [2022-02-20 18:08:54,005 INFO L284 TraceCheckUtils]: 98: Hoare quadruple {32218#false} {32393#(= ~systemActive~0 (_ bv0 32))} #381#return; {32218#false} is VALID [2022-02-20 18:08:54,005 INFO L290 TraceCheckUtils]: 99: Hoare triple {32218#false} assume !false; {32218#false} is VALID [2022-02-20 18:08:54,005 INFO L290 TraceCheckUtils]: 100: Hoare triple {32218#false} assume ~bvslt32(test_~splverifierCounter~0#1, 4bv32); {32218#false} is VALID [2022-02-20 18:08:54,005 INFO L290 TraceCheckUtils]: 101: Hoare triple {32218#false} test_~tmp~7#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {32218#false} is VALID [2022-02-20 18:08:54,005 INFO L290 TraceCheckUtils]: 102: Hoare triple {32218#false} assume !(0bv32 != test_~tmp~7#1); {32218#false} is VALID [2022-02-20 18:08:54,005 INFO L290 TraceCheckUtils]: 103: Hoare triple {32218#false} test_~tmp___0~2#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {32218#false} is VALID [2022-02-20 18:08:54,006 INFO L290 TraceCheckUtils]: 104: Hoare triple {32218#false} assume !(0bv32 != test_~tmp___0~2#1); {32218#false} is VALID [2022-02-20 18:08:54,006 INFO L290 TraceCheckUtils]: 105: Hoare triple {32218#false} test_~tmp___2~0#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {32218#false} is VALID [2022-02-20 18:08:54,006 INFO L290 TraceCheckUtils]: 106: Hoare triple {32218#false} assume 0bv32 != test_~tmp___2~0#1; {32218#false} is VALID [2022-02-20 18:08:54,006 INFO L290 TraceCheckUtils]: 107: Hoare triple {32218#false} assume !(0bv32 != ~__SELECTED_FEATURE_startCommand~0); {32218#false} is VALID [2022-02-20 18:08:54,006 INFO L272 TraceCheckUtils]: 108: Hoare triple {32218#false} call timeShift(); {32218#false} is VALID [2022-02-20 18:08:54,006 INFO L290 TraceCheckUtils]: 109: Hoare triple {32218#false} assume 0bv32 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {32218#false} is VALID [2022-02-20 18:08:54,006 INFO L290 TraceCheckUtils]: 110: Hoare triple {32218#false} assume ~bvsgt32(~waterLevel~0, 0bv32);~waterLevel~0 := ~bvsub32(~waterLevel~0, 1bv32); {32218#false} is VALID [2022-02-20 18:08:54,006 INFO L290 TraceCheckUtils]: 111: Hoare triple {32218#false} assume { :end_inline_lowerWaterLevel } true; {32218#false} is VALID [2022-02-20 18:08:54,006 INFO L290 TraceCheckUtils]: 112: Hoare triple {32218#false} assume !(0bv32 != ~systemActive~0); {32218#false} is VALID [2022-02-20 18:08:54,007 INFO L290 TraceCheckUtils]: 113: Hoare triple {32218#false} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret29#1, __utac_acc__Specification2_spec__2_#t~ret30#1, __utac_acc__Specification2_spec__2_~tmp~8#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~8#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {32218#false} is VALID [2022-02-20 18:08:54,007 INFO L272 TraceCheckUtils]: 114: Hoare triple {32218#false} call __utac_acc__Specification2_spec__2_#t~ret29#1 := isMethaneLevelCritical(); {32218#false} is VALID [2022-02-20 18:08:54,007 INFO L290 TraceCheckUtils]: 115: Hoare triple {32218#false} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {32218#false} is VALID [2022-02-20 18:08:54,007 INFO L290 TraceCheckUtils]: 116: Hoare triple {32218#false} assume true; {32218#false} is VALID [2022-02-20 18:08:54,007 INFO L284 TraceCheckUtils]: 117: Hoare quadruple {32218#false} {32218#false} #361#return; {32218#false} is VALID [2022-02-20 18:08:54,007 INFO L290 TraceCheckUtils]: 118: Hoare triple {32218#false} __utac_acc__Specification2_spec__2_~tmp~8#1 := __utac_acc__Specification2_spec__2_#t~ret29#1;havoc __utac_acc__Specification2_spec__2_#t~ret29#1; {32218#false} is VALID [2022-02-20 18:08:54,007 INFO L290 TraceCheckUtils]: 119: Hoare triple {32218#false} assume 0bv32 != __utac_acc__Specification2_spec__2_~tmp~8#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~5#1;havoc isPumpRunning_~retValue_acc~5#1;isPumpRunning_~retValue_acc~5#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~5#1; {32218#false} is VALID [2022-02-20 18:08:54,008 INFO L290 TraceCheckUtils]: 120: Hoare triple {32218#false} __utac_acc__Specification2_spec__2_#t~ret30#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret30#1;havoc __utac_acc__Specification2_spec__2_#t~ret30#1; {32218#false} is VALID [2022-02-20 18:08:54,008 INFO L290 TraceCheckUtils]: 121: Hoare triple {32218#false} assume 0bv32 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {32218#false} is VALID [2022-02-20 18:08:54,008 INFO L290 TraceCheckUtils]: 122: Hoare triple {32218#false} assume 0bv32 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {32218#false} is VALID [2022-02-20 18:08:54,008 INFO L290 TraceCheckUtils]: 123: Hoare triple {32218#false} assume !false; {32218#false} is VALID [2022-02-20 18:08:54,008 INFO L134 CoverageAnalysis]: Checked inductivity of 66 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 55 trivial. 0 not checked. [2022-02-20 18:08:54,008 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-02-20 18:08:54,008 INFO L144 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-02-20 18:08:54,009 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [2027393960] [2022-02-20 18:08:54,009 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleMathsat [2027393960] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:08:54,009 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:08:54,009 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-02-20 18:08:54,009 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [663976292] [2022-02-20 18:08:54,009 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:08:54,010 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 26.0) internal successors, (78), 3 states have internal predecessors, (78), 3 states have call successors, (14), 3 states have call predecessors, (14), 2 states have return successors, (13), 2 states have call predecessors, (13), 3 states have call successors, (13) Word has length 124 [2022-02-20 18:08:54,010 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:08:54,010 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 3 states, 3 states have (on average 26.0) internal successors, (78), 3 states have internal predecessors, (78), 3 states have call successors, (14), 3 states have call predecessors, (14), 2 states have return successors, (13), 2 states have call predecessors, (13), 3 states have call successors, (13) [2022-02-20 18:08:54,081 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 105 edges. 105 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:54,081 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-02-20 18:08:54,081 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-02-20 18:08:54,081 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-02-20 18:08:54,082 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:08:54,082 INFO L87 Difference]: Start difference. First operand 1206 states and 1621 transitions. Second operand has 3 states, 3 states have (on average 26.0) internal successors, (78), 3 states have internal predecessors, (78), 3 states have call successors, (14), 3 states have call predecessors, (14), 2 states have return successors, (13), 2 states have call predecessors, (13), 3 states have call successors, (13) [2022-02-20 18:08:54,503 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:54,503 INFO L93 Difference]: Finished difference Result 1952 states and 2616 transitions. [2022-02-20 18:08:54,503 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-02-20 18:08:54,503 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 26.0) internal successors, (78), 3 states have internal predecessors, (78), 3 states have call successors, (14), 3 states have call predecessors, (14), 2 states have return successors, (13), 2 states have call predecessors, (13), 3 states have call successors, (13) Word has length 124 [2022-02-20 18:08:54,504 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:08:54,504 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 26.0) internal successors, (78), 3 states have internal predecessors, (78), 3 states have call successors, (14), 3 states have call predecessors, (14), 2 states have return successors, (13), 2 states have call predecessors, (13), 3 states have call successors, (13) [2022-02-20 18:08:54,506 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 360 transitions. [2022-02-20 18:08:54,506 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 26.0) internal successors, (78), 3 states have internal predecessors, (78), 3 states have call successors, (14), 3 states have call predecessors, (14), 2 states have return successors, (13), 2 states have call predecessors, (13), 3 states have call successors, (13) [2022-02-20 18:08:54,509 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 360 transitions. [2022-02-20 18:08:54,509 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 360 transitions. [2022-02-20 18:08:54,732 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 360 edges. 360 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:54,772 INFO L225 Difference]: With dead ends: 1952 [2022-02-20 18:08:54,773 INFO L226 Difference]: Without dead ends: 769 [2022-02-20 18:08:54,776 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 123 GetRequests, 122 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:08:54,777 INFO L933 BasicCegarLoop]: 201 mSDtfsCounter, 41 mSDsluCounter, 165 mSDsCounter, 0 mSdLazyCounter, 5 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 41 SdHoareTripleChecker+Valid, 366 SdHoareTripleChecker+Invalid, 5 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 5 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:08:54,778 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [41 Valid, 366 Invalid, 5 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 5 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:08:54,779 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 769 states. [2022-02-20 18:08:54,803 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 769 to 751. [2022-02-20 18:08:54,804 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:08:54,805 INFO L82 GeneralOperation]: Start isEquivalent. First operand 769 states. Second operand has 751 states, 545 states have (on average 1.2825688073394494) internal successors, (699), 608 states have internal predecessors, (699), 126 states have call successors, (126), 82 states have call predecessors, (126), 79 states have return successors, (164), 114 states have call predecessors, (164), 126 states have call successors, (164) [2022-02-20 18:08:54,807 INFO L74 IsIncluded]: Start isIncluded. First operand 769 states. Second operand has 751 states, 545 states have (on average 1.2825688073394494) internal successors, (699), 608 states have internal predecessors, (699), 126 states have call successors, (126), 82 states have call predecessors, (126), 79 states have return successors, (164), 114 states have call predecessors, (164), 126 states have call successors, (164) [2022-02-20 18:08:54,808 INFO L87 Difference]: Start difference. First operand 769 states. Second operand has 751 states, 545 states have (on average 1.2825688073394494) internal successors, (699), 608 states have internal predecessors, (699), 126 states have call successors, (126), 82 states have call predecessors, (126), 79 states have return successors, (164), 114 states have call predecessors, (164), 126 states have call successors, (164) [2022-02-20 18:08:54,842 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:54,843 INFO L93 Difference]: Finished difference Result 769 states and 1008 transitions. [2022-02-20 18:08:54,843 INFO L276 IsEmpty]: Start isEmpty. Operand 769 states and 1008 transitions. [2022-02-20 18:08:54,845 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:54,845 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:54,847 INFO L74 IsIncluded]: Start isIncluded. First operand has 751 states, 545 states have (on average 1.2825688073394494) internal successors, (699), 608 states have internal predecessors, (699), 126 states have call successors, (126), 82 states have call predecessors, (126), 79 states have return successors, (164), 114 states have call predecessors, (164), 126 states have call successors, (164) Second operand 769 states. [2022-02-20 18:08:54,849 INFO L87 Difference]: Start difference. First operand has 751 states, 545 states have (on average 1.2825688073394494) internal successors, (699), 608 states have internal predecessors, (699), 126 states have call successors, (126), 82 states have call predecessors, (126), 79 states have return successors, (164), 114 states have call predecessors, (164), 126 states have call successors, (164) Second operand 769 states. [2022-02-20 18:08:54,883 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:54,883 INFO L93 Difference]: Finished difference Result 769 states and 1008 transitions. [2022-02-20 18:08:54,884 INFO L276 IsEmpty]: Start isEmpty. Operand 769 states and 1008 transitions. [2022-02-20 18:08:54,886 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:54,886 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:54,886 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:08:54,886 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:08:54,888 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 751 states, 545 states have (on average 1.2825688073394494) internal successors, (699), 608 states have internal predecessors, (699), 126 states have call successors, (126), 82 states have call predecessors, (126), 79 states have return successors, (164), 114 states have call predecessors, (164), 126 states have call successors, (164) [2022-02-20 18:08:54,927 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 751 states to 751 states and 989 transitions. [2022-02-20 18:08:54,928 INFO L78 Accepts]: Start accepts. Automaton has 751 states and 989 transitions. Word has length 124 [2022-02-20 18:08:54,928 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:08:54,928 INFO L470 AbstractCegarLoop]: Abstraction has 751 states and 989 transitions. [2022-02-20 18:08:54,928 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 26.0) internal successors, (78), 3 states have internal predecessors, (78), 3 states have call successors, (14), 3 states have call predecessors, (14), 2 states have return successors, (13), 2 states have call predecessors, (13), 3 states have call successors, (13) [2022-02-20 18:08:54,929 INFO L276 IsEmpty]: Start isEmpty. Operand 751 states and 989 transitions. [2022-02-20 18:08:54,932 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 134 [2022-02-20 18:08:54,932 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:08:54,932 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:08:54,954 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (11)] Forceful destruction successful, exit code 0 [2022-02-20 18:08:55,143 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 11 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-02-20 18:08:55,143 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:08:55,144 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:08:55,144 INFO L85 PathProgramCache]: Analyzing trace with hash 787335187, now seen corresponding path program 1 times [2022-02-20 18:08:55,144 INFO L126 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-02-20 18:08:55,144 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [100301462] [2022-02-20 18:08:55,144 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:08:55,145 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-02-20 18:08:55,145 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-02-20 18:08:55,146 INFO L229 MonitoredProcess]: Starting monitored process 12 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-02-20 18:08:55,147 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (12)] Waiting until timeout for monitored process [2022-02-20 18:08:55,223 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:55,227 INFO L263 TraceCheckSpWp]: Trace formula consists of 326 conjuncts, 2 conjunts are in the unsatisfiable core [2022-02-20 18:08:55,249 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:08:55,251 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 18:08:55,519 INFO L290 TraceCheckUtils]: 0: Hoare triple {38005#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0bv32, 0bv32;assume 0bv1 == #valid[0bv32];assume ~bvult32(0bv32, #StackHeapBarrier);call #Ultimate.allocInit(2bv32, 1bv32);call write~init~intINTTYPE1(48bv8, 1bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 1bv32, 1bv32, 1bv32);call #Ultimate.allocInit(38bv32, 2bv32);call #Ultimate.allocInit(12bv32, 3bv32);call #Ultimate.allocInit(13bv32, 4bv32);call #Ultimate.allocInit(7bv32, 5bv32);call write~init~intINTTYPE1(44bv8, 5bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(77bv8, 5bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(101bv8, 5bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(116bv8, 5bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(104bv8, 5bv32, 4bv32, 1bv32);call write~init~intINTTYPE1(58bv8, 5bv32, 5bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 5bv32, 6bv32, 1bv32);call #Ultimate.allocInit(5bv32, 6bv32);call write~init~intINTTYPE1(67bv8, 6bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(82bv8, 6bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(73bv8, 6bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(84bv8, 6bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 6bv32, 4bv32, 1bv32);call #Ultimate.allocInit(3bv32, 7bv32);call write~init~intINTTYPE1(79bv8, 7bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(75bv8, 7bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 7bv32, 2bv32, 1bv32);call #Ultimate.allocInit(2bv32, 8bv32);call write~init~intINTTYPE1(41bv8, 8bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 8bv32, 1bv32, 1bv32);call #Ultimate.allocInit(13bv32, 9bv32);call #Ultimate.allocInit(3bv32, 10bv32);call write~init~intINTTYPE1(79bv8, 10bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(110bv8, 10bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 10bv32, 2bv32, 1bv32);call #Ultimate.allocInit(4bv32, 11bv32);call write~init~intINTTYPE1(79bv8, 11bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 11bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 11bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 11bv32, 3bv32, 1bv32);call #Ultimate.allocInit(7bv32, 12bv32);call write~init~intINTTYPE1(44bv8, 12bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(80bv8, 12bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(117bv8, 12bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(109bv8, 12bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(112bv8, 12bv32, 4bv32, 1bv32);call write~init~intINTTYPE1(58bv8, 12bv32, 5bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 12bv32, 6bv32, 1bv32);call #Ultimate.allocInit(3bv32, 13bv32);call write~init~intINTTYPE1(79bv8, 13bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(110bv8, 13bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 13bv32, 2bv32, 1bv32);call #Ultimate.allocInit(4bv32, 14bv32);call write~init~intINTTYPE1(79bv8, 14bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 14bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 14bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 14bv32, 3bv32, 1bv32);call #Ultimate.allocInit(3bv32, 15bv32);call write~init~intINTTYPE1(41bv8, 15bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(32bv8, 15bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 15bv32, 2bv32, 1bv32);call #Ultimate.allocInit(2bv32, 16bv32);call write~init~intINTTYPE1(10bv8, 16bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 16bv32, 1bv32, 1bv32);call #Ultimate.allocInit(30bv32, 17bv32);call #Ultimate.allocInit(9bv32, 18bv32);call #Ultimate.allocInit(21bv32, 19bv32);call #Ultimate.allocInit(30bv32, 20bv32);call #Ultimate.allocInit(9bv32, 21bv32);call #Ultimate.allocInit(21bv32, 22bv32);call #Ultimate.allocInit(30bv32, 23bv32);call #Ultimate.allocInit(9bv32, 24bv32);call #Ultimate.allocInit(25bv32, 25bv32);call #Ultimate.allocInit(30bv32, 26bv32);call #Ultimate.allocInit(9bv32, 27bv32);call #Ultimate.allocInit(25bv32, 28bv32);~__SELECTED_FEATURE_base~0 := 0bv32;~__SELECTED_FEATURE_highWaterSensor~0 := 0bv32;~__SELECTED_FEATURE_lowWaterSensor~0 := 0bv32;~__SELECTED_FEATURE_methaneQuery~0 := 0bv32;~__SELECTED_FEATURE_methaneAlarm~0 := 0bv32;~__SELECTED_FEATURE_stopCommand~0 := 0bv32;~__SELECTED_FEATURE_startCommand~0 := 0bv32;~__GUIDSL_ROOT_PRODUCTION~0 := 0bv32;~waterLevel~0 := 1bv32;~methaneLevelCritical~0 := 0bv32;~pumpRunning~0 := 0bv32;~systemActive~0 := 1bv32;~cleanupTimeShifts~0 := 4bv32;~methAndRunningLastTime~0 := 0bv32;~head~0.base, ~head~0.offset := 0bv32, 0bv32; {38005#true} is VALID [2022-02-20 18:08:55,519 INFO L290 TraceCheckUtils]: 1: Hoare triple {38005#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret24#1, main_~retValue_acc~8#1, main_~tmp~6#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~6#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1bv32; {38005#true} is VALID [2022-02-20 18:08:55,519 INFO L290 TraceCheckUtils]: 2: Hoare triple {38005#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret55#1, select_features_#t~ret56#1, select_features_#t~ret57#1, select_features_#t~ret58#1, select_features_#t~ret59#1, select_features_#t~ret60#1;~__SELECTED_FEATURE_base~0 := 1bv32; {38005#true} is VALID [2022-02-20 18:08:55,519 INFO L272 TraceCheckUtils]: 3: Hoare triple {38005#true} call select_features_#t~ret55#1 := select_one(); {38005#true} is VALID [2022-02-20 18:08:55,519 INFO L290 TraceCheckUtils]: 4: Hoare triple {38005#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {38005#true} is VALID [2022-02-20 18:08:55,519 INFO L290 TraceCheckUtils]: 5: Hoare triple {38005#true} assume true; {38005#true} is VALID [2022-02-20 18:08:55,519 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {38005#true} {38005#true} #363#return; {38005#true} is VALID [2022-02-20 18:08:55,520 INFO L290 TraceCheckUtils]: 7: Hoare triple {38005#true} ~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret55#1;havoc select_features_#t~ret55#1; {38005#true} is VALID [2022-02-20 18:08:55,520 INFO L272 TraceCheckUtils]: 8: Hoare triple {38005#true} call select_features_#t~ret56#1 := select_one(); {38005#true} is VALID [2022-02-20 18:08:55,520 INFO L290 TraceCheckUtils]: 9: Hoare triple {38005#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {38005#true} is VALID [2022-02-20 18:08:55,520 INFO L290 TraceCheckUtils]: 10: Hoare triple {38005#true} assume true; {38005#true} is VALID [2022-02-20 18:08:55,520 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {38005#true} {38005#true} #365#return; {38005#true} is VALID [2022-02-20 18:08:55,520 INFO L290 TraceCheckUtils]: 12: Hoare triple {38005#true} ~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret56#1;havoc select_features_#t~ret56#1; {38005#true} is VALID [2022-02-20 18:08:55,520 INFO L272 TraceCheckUtils]: 13: Hoare triple {38005#true} call select_features_#t~ret57#1 := select_one(); {38005#true} is VALID [2022-02-20 18:08:55,520 INFO L290 TraceCheckUtils]: 14: Hoare triple {38005#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {38005#true} is VALID [2022-02-20 18:08:55,520 INFO L290 TraceCheckUtils]: 15: Hoare triple {38005#true} assume true; {38005#true} is VALID [2022-02-20 18:08:55,520 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {38005#true} {38005#true} #367#return; {38005#true} is VALID [2022-02-20 18:08:55,520 INFO L290 TraceCheckUtils]: 17: Hoare triple {38005#true} ~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret57#1;havoc select_features_#t~ret57#1; {38005#true} is VALID [2022-02-20 18:08:55,520 INFO L272 TraceCheckUtils]: 18: Hoare triple {38005#true} call select_features_#t~ret58#1 := select_one(); {38005#true} is VALID [2022-02-20 18:08:55,520 INFO L290 TraceCheckUtils]: 19: Hoare triple {38005#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {38005#true} is VALID [2022-02-20 18:08:55,520 INFO L290 TraceCheckUtils]: 20: Hoare triple {38005#true} assume true; {38005#true} is VALID [2022-02-20 18:08:55,520 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {38005#true} {38005#true} #369#return; {38005#true} is VALID [2022-02-20 18:08:55,520 INFO L290 TraceCheckUtils]: 22: Hoare triple {38005#true} ~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret58#1;havoc select_features_#t~ret58#1; {38005#true} is VALID [2022-02-20 18:08:55,520 INFO L272 TraceCheckUtils]: 23: Hoare triple {38005#true} call select_features_#t~ret59#1 := select_one(); {38005#true} is VALID [2022-02-20 18:08:55,520 INFO L290 TraceCheckUtils]: 24: Hoare triple {38005#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {38005#true} is VALID [2022-02-20 18:08:55,520 INFO L290 TraceCheckUtils]: 25: Hoare triple {38005#true} assume true; {38005#true} is VALID [2022-02-20 18:08:55,520 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {38005#true} {38005#true} #371#return; {38005#true} is VALID [2022-02-20 18:08:55,520 INFO L290 TraceCheckUtils]: 27: Hoare triple {38005#true} ~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret59#1;havoc select_features_#t~ret59#1; {38005#true} is VALID [2022-02-20 18:08:55,521 INFO L272 TraceCheckUtils]: 28: Hoare triple {38005#true} call select_features_#t~ret60#1 := select_one(); {38005#true} is VALID [2022-02-20 18:08:55,521 INFO L290 TraceCheckUtils]: 29: Hoare triple {38005#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {38005#true} is VALID [2022-02-20 18:08:55,521 INFO L290 TraceCheckUtils]: 30: Hoare triple {38005#true} assume true; {38005#true} is VALID [2022-02-20 18:08:55,521 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {38005#true} {38005#true} #373#return; {38005#true} is VALID [2022-02-20 18:08:55,521 INFO L290 TraceCheckUtils]: 32: Hoare triple {38005#true} ~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret60#1;havoc select_features_#t~ret60#1; {38005#true} is VALID [2022-02-20 18:08:55,521 INFO L290 TraceCheckUtils]: 33: Hoare triple {38005#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~13#1;havoc valid_product_~retValue_acc~13#1;valid_product_~retValue_acc~13#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~13#1; {38005#true} is VALID [2022-02-20 18:08:55,521 INFO L290 TraceCheckUtils]: 34: Hoare triple {38005#true} main_#t~ret24#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~6#1 := main_#t~ret24#1;havoc main_#t~ret24#1; {38005#true} is VALID [2022-02-20 18:08:55,521 INFO L290 TraceCheckUtils]: 35: Hoare triple {38005#true} assume 0bv32 != main_~tmp~6#1;assume { :begin_inline_setup } true; {38005#true} is VALID [2022-02-20 18:08:55,521 INFO L290 TraceCheckUtils]: 36: Hoare triple {38005#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~methAndRunningLastTime~0 := 0bv32; {38005#true} is VALID [2022-02-20 18:08:55,521 INFO L290 TraceCheckUtils]: 37: Hoare triple {38005#true} assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet25#1, test_#t~nondet26#1, test_#t~nondet27#1, test_#t~nondet28#1, test_~splverifierCounter~0#1, test_~tmp~7#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~7#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0bv32; {38005#true} is VALID [2022-02-20 18:08:55,521 INFO L290 TraceCheckUtils]: 38: Hoare triple {38005#true} assume !false; {38005#true} is VALID [2022-02-20 18:08:55,521 INFO L290 TraceCheckUtils]: 39: Hoare triple {38005#true} assume ~bvslt32(test_~splverifierCounter~0#1, 4bv32); {38005#true} is VALID [2022-02-20 18:08:55,521 INFO L290 TraceCheckUtils]: 40: Hoare triple {38005#true} test_~tmp~7#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {38005#true} is VALID [2022-02-20 18:08:55,522 INFO L290 TraceCheckUtils]: 41: Hoare triple {38005#true} assume 0bv32 != test_~tmp~7#1; {38005#true} is VALID [2022-02-20 18:08:55,522 INFO L272 TraceCheckUtils]: 42: Hoare triple {38005#true} call waterRise(); {38005#true} is VALID [2022-02-20 18:08:55,522 INFO L290 TraceCheckUtils]: 43: Hoare triple {38005#true} assume ~bvslt32(~waterLevel~0, 2bv32);~waterLevel~0 := ~bvadd32(1bv32, ~waterLevel~0); {38005#true} is VALID [2022-02-20 18:08:55,522 INFO L290 TraceCheckUtils]: 44: Hoare triple {38005#true} assume true; {38005#true} is VALID [2022-02-20 18:08:55,522 INFO L284 TraceCheckUtils]: 45: Hoare quadruple {38005#true} {38005#true} #375#return; {38005#true} is VALID [2022-02-20 18:08:55,522 INFO L290 TraceCheckUtils]: 46: Hoare triple {38005#true} test_~tmp___0~2#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {38005#true} is VALID [2022-02-20 18:08:55,522 INFO L290 TraceCheckUtils]: 47: Hoare triple {38005#true} assume 0bv32 != test_~tmp___0~2#1; {38005#true} is VALID [2022-02-20 18:08:55,522 INFO L272 TraceCheckUtils]: 48: Hoare triple {38005#true} call changeMethaneLevel(); {38005#true} is VALID [2022-02-20 18:08:55,522 INFO L290 TraceCheckUtils]: 49: Hoare triple {38005#true} assume !(0bv32 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1bv32; {38005#true} is VALID [2022-02-20 18:08:55,523 INFO L290 TraceCheckUtils]: 50: Hoare triple {38005#true} assume true; {38005#true} is VALID [2022-02-20 18:08:55,523 INFO L284 TraceCheckUtils]: 51: Hoare quadruple {38005#true} {38005#true} #377#return; {38005#true} is VALID [2022-02-20 18:08:55,523 INFO L290 TraceCheckUtils]: 52: Hoare triple {38005#true} test_~tmp___2~0#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {38005#true} is VALID [2022-02-20 18:08:55,523 INFO L290 TraceCheckUtils]: 53: Hoare triple {38005#true} assume 0bv32 != test_~tmp___2~0#1; {38005#true} is VALID [2022-02-20 18:08:55,523 INFO L290 TraceCheckUtils]: 54: Hoare triple {38005#true} assume !(0bv32 != ~__SELECTED_FEATURE_startCommand~0); {38005#true} is VALID [2022-02-20 18:08:55,523 INFO L272 TraceCheckUtils]: 55: Hoare triple {38005#true} call timeShift(); {38005#true} is VALID [2022-02-20 18:08:55,523 INFO L290 TraceCheckUtils]: 56: Hoare triple {38005#true} assume !(0bv32 != ~pumpRunning~0); {38005#true} is VALID [2022-02-20 18:08:55,523 INFO L290 TraceCheckUtils]: 57: Hoare triple {38005#true} assume 0bv32 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {38005#true} is VALID [2022-02-20 18:08:55,523 INFO L290 TraceCheckUtils]: 58: Hoare triple {38005#true} assume !(0bv32 != ~__SELECTED_FEATURE_methaneAlarm~0); {38005#true} is VALID [2022-02-20 18:08:55,524 INFO L272 TraceCheckUtils]: 59: Hoare triple {38005#true} call processEnvironment__before__methaneAlarm(); {38005#true} is VALID [2022-02-20 18:08:55,524 INFO L290 TraceCheckUtils]: 60: Hoare triple {38005#true} assume !(0bv32 != ~__SELECTED_FEATURE_lowWaterSensor~0); {38005#true} is VALID [2022-02-20 18:08:55,524 INFO L272 TraceCheckUtils]: 61: Hoare triple {38005#true} call processEnvironment__before__lowWaterSensor(); {38005#true} is VALID [2022-02-20 18:08:55,535 INFO L290 TraceCheckUtils]: 62: Hoare triple {38005#true} assume 0bv32 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret9#1, processEnvironment__role__highWaterSensor_~tmp~0#1;havoc processEnvironment__role__highWaterSensor_~tmp~0#1; {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:08:55,536 INFO L290 TraceCheckUtils]: 63: Hoare triple {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} assume 0bv32 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret22#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:08:55,536 INFO L290 TraceCheckUtils]: 64: Hoare triple {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} assume !~bvslt32(~waterLevel~0, 2bv32);isHighWaterSensorDry_~retValue_acc~2#1 := 0bv32;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:08:55,536 INFO L290 TraceCheckUtils]: 65: Hoare triple {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} isHighWaterLevel_#t~ret22#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret22#1;havoc isHighWaterLevel_#t~ret22#1; {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:08:55,536 INFO L290 TraceCheckUtils]: 66: Hoare triple {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} assume !(0bv32 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1bv32; {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:08:55,537 INFO L290 TraceCheckUtils]: 67: Hoare triple {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:08:55,537 INFO L290 TraceCheckUtils]: 68: Hoare triple {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} processEnvironment__role__highWaterSensor_#t~ret9#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;processEnvironment__role__highWaterSensor_~tmp~0#1 := processEnvironment__role__highWaterSensor_#t~ret9#1;havoc processEnvironment__role__highWaterSensor_#t~ret9#1; {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:08:55,537 INFO L290 TraceCheckUtils]: 69: Hoare triple {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} assume 0bv32 != processEnvironment__role__highWaterSensor_~tmp~0#1;assume { :begin_inline_activatePump } true; {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:08:55,538 INFO L290 TraceCheckUtils]: 70: Hoare triple {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} assume !(0bv32 != ~__SELECTED_FEATURE_methaneQuery~0); {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:08:55,538 INFO L272 TraceCheckUtils]: 71: Hoare triple {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} call activatePump__before__methaneQuery(); {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:08:55,538 INFO L290 TraceCheckUtils]: 72: Hoare triple {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} ~pumpRunning~0 := 1bv32; {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:08:55,538 INFO L290 TraceCheckUtils]: 73: Hoare triple {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} assume true; {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:08:55,539 INFO L284 TraceCheckUtils]: 74: Hoare quadruple {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} #339#return; {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:08:55,539 INFO L290 TraceCheckUtils]: 75: Hoare triple {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} assume { :end_inline_activatePump } true; {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:08:55,539 INFO L290 TraceCheckUtils]: 76: Hoare triple {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:08:55,539 INFO L290 TraceCheckUtils]: 77: Hoare triple {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} assume true; {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:08:55,540 INFO L284 TraceCheckUtils]: 78: Hoare quadruple {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} {38005#true} #391#return; {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:08:55,540 INFO L290 TraceCheckUtils]: 79: Hoare triple {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} assume true; {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:08:55,540 INFO L284 TraceCheckUtils]: 80: Hoare quadruple {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} {38005#true} #359#return; {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:08:55,541 INFO L290 TraceCheckUtils]: 81: Hoare triple {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} assume { :end_inline_processEnvironment } true; {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:08:55,541 INFO L290 TraceCheckUtils]: 82: Hoare triple {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret29#1, __utac_acc__Specification2_spec__2_#t~ret30#1, __utac_acc__Specification2_spec__2_~tmp~8#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~8#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:08:55,541 INFO L272 TraceCheckUtils]: 83: Hoare triple {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} call __utac_acc__Specification2_spec__2_#t~ret29#1 := isMethaneLevelCritical(); {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:08:55,541 INFO L290 TraceCheckUtils]: 84: Hoare triple {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:08:55,542 INFO L290 TraceCheckUtils]: 85: Hoare triple {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} assume true; {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:08:55,542 INFO L284 TraceCheckUtils]: 86: Hoare quadruple {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} #361#return; {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:08:55,542 INFO L290 TraceCheckUtils]: 87: Hoare triple {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} __utac_acc__Specification2_spec__2_~tmp~8#1 := __utac_acc__Specification2_spec__2_#t~ret29#1;havoc __utac_acc__Specification2_spec__2_#t~ret29#1; {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:08:55,542 INFO L290 TraceCheckUtils]: 88: Hoare triple {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} assume 0bv32 != __utac_acc__Specification2_spec__2_~tmp~8#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~5#1;havoc isPumpRunning_~retValue_acc~5#1;isPumpRunning_~retValue_acc~5#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~5#1; {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:08:55,543 INFO L290 TraceCheckUtils]: 89: Hoare triple {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} __utac_acc__Specification2_spec__2_#t~ret30#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret30#1;havoc __utac_acc__Specification2_spec__2_#t~ret30#1; {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:08:55,543 INFO L290 TraceCheckUtils]: 90: Hoare triple {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} assume 0bv32 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:08:55,543 INFO L290 TraceCheckUtils]: 91: Hoare triple {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} assume !(0bv32 != ~methAndRunningLastTime~0);~methAndRunningLastTime~0 := 1bv32; {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:08:55,544 INFO L290 TraceCheckUtils]: 92: Hoare triple {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} assume { :end_inline___utac_acc__Specification2_spec__2 } true; {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:08:55,544 INFO L290 TraceCheckUtils]: 93: Hoare triple {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} assume true; {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:08:55,544 INFO L284 TraceCheckUtils]: 94: Hoare quadruple {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} {38005#true} #381#return; {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:08:55,544 INFO L290 TraceCheckUtils]: 95: Hoare triple {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} assume !false; {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:08:55,545 INFO L290 TraceCheckUtils]: 96: Hoare triple {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} assume ~bvslt32(test_~splverifierCounter~0#1, 4bv32); {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:08:55,545 INFO L290 TraceCheckUtils]: 97: Hoare triple {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} test_~tmp~7#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:08:55,545 INFO L290 TraceCheckUtils]: 98: Hoare triple {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} assume !(0bv32 != test_~tmp~7#1); {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:08:55,545 INFO L290 TraceCheckUtils]: 99: Hoare triple {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} test_~tmp___0~2#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:08:55,546 INFO L290 TraceCheckUtils]: 100: Hoare triple {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} assume !(0bv32 != test_~tmp___0~2#1); {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:08:55,546 INFO L290 TraceCheckUtils]: 101: Hoare triple {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} test_~tmp___2~0#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:08:55,546 INFO L290 TraceCheckUtils]: 102: Hoare triple {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} assume 0bv32 != test_~tmp___2~0#1; {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:08:55,546 INFO L290 TraceCheckUtils]: 103: Hoare triple {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} assume !(0bv32 != ~__SELECTED_FEATURE_startCommand~0); {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:08:55,547 INFO L272 TraceCheckUtils]: 104: Hoare triple {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} call timeShift(); {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:08:55,547 INFO L290 TraceCheckUtils]: 105: Hoare triple {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} assume 0bv32 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:08:55,547 INFO L290 TraceCheckUtils]: 106: Hoare triple {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} assume ~bvsgt32(~waterLevel~0, 0bv32);~waterLevel~0 := ~bvsub32(~waterLevel~0, 1bv32); {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:08:55,548 INFO L290 TraceCheckUtils]: 107: Hoare triple {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} assume { :end_inline_lowerWaterLevel } true; {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:08:55,548 INFO L290 TraceCheckUtils]: 108: Hoare triple {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} assume 0bv32 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:08:55,548 INFO L290 TraceCheckUtils]: 109: Hoare triple {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} assume !(0bv32 != ~__SELECTED_FEATURE_methaneAlarm~0); {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:08:55,548 INFO L272 TraceCheckUtils]: 110: Hoare triple {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} call processEnvironment__before__methaneAlarm(); {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:08:55,549 INFO L290 TraceCheckUtils]: 111: Hoare triple {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} assume !(0bv32 != ~__SELECTED_FEATURE_lowWaterSensor~0); {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:08:55,549 INFO L272 TraceCheckUtils]: 112: Hoare triple {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} call processEnvironment__before__lowWaterSensor(); {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:08:55,549 INFO L290 TraceCheckUtils]: 113: Hoare triple {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} assume !(0bv32 != ~__SELECTED_FEATURE_highWaterSensor~0); {38006#false} is VALID [2022-02-20 18:08:55,549 INFO L272 TraceCheckUtils]: 114: Hoare triple {38006#false} call processEnvironment__before__highWaterSensor(); {38006#false} is VALID [2022-02-20 18:08:55,549 INFO L290 TraceCheckUtils]: 115: Hoare triple {38006#false} assume true; {38006#false} is VALID [2022-02-20 18:08:55,550 INFO L284 TraceCheckUtils]: 116: Hoare quadruple {38006#false} {38006#false} #345#return; {38006#false} is VALID [2022-02-20 18:08:55,550 INFO L290 TraceCheckUtils]: 117: Hoare triple {38006#false} assume true; {38006#false} is VALID [2022-02-20 18:08:55,550 INFO L284 TraceCheckUtils]: 118: Hoare quadruple {38006#false} {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} #391#return; {38006#false} is VALID [2022-02-20 18:08:55,550 INFO L290 TraceCheckUtils]: 119: Hoare triple {38006#false} assume true; {38006#false} is VALID [2022-02-20 18:08:55,550 INFO L284 TraceCheckUtils]: 120: Hoare quadruple {38006#false} {38196#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} #359#return; {38006#false} is VALID [2022-02-20 18:08:55,550 INFO L290 TraceCheckUtils]: 121: Hoare triple {38006#false} assume { :end_inline_processEnvironment } true; {38006#false} is VALID [2022-02-20 18:08:55,550 INFO L290 TraceCheckUtils]: 122: Hoare triple {38006#false} assume { :begin_inline___utac_acc__Specification2_spec__2 } true;havoc __utac_acc__Specification2_spec__2_#t~ret29#1, __utac_acc__Specification2_spec__2_#t~ret30#1, __utac_acc__Specification2_spec__2_~tmp~8#1, __utac_acc__Specification2_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification2_spec__2_~tmp~8#1;havoc __utac_acc__Specification2_spec__2_~tmp___0~3#1; {38006#false} is VALID [2022-02-20 18:08:55,550 INFO L272 TraceCheckUtils]: 123: Hoare triple {38006#false} call __utac_acc__Specification2_spec__2_#t~ret29#1 := isMethaneLevelCritical(); {38006#false} is VALID [2022-02-20 18:08:55,550 INFO L290 TraceCheckUtils]: 124: Hoare triple {38006#false} havoc ~retValue_acc~0;~retValue_acc~0 := ~methaneLevelCritical~0;#res := ~retValue_acc~0; {38006#false} is VALID [2022-02-20 18:08:55,551 INFO L290 TraceCheckUtils]: 125: Hoare triple {38006#false} assume true; {38006#false} is VALID [2022-02-20 18:08:55,551 INFO L284 TraceCheckUtils]: 126: Hoare quadruple {38006#false} {38006#false} #361#return; {38006#false} is VALID [2022-02-20 18:08:55,551 INFO L290 TraceCheckUtils]: 127: Hoare triple {38006#false} __utac_acc__Specification2_spec__2_~tmp~8#1 := __utac_acc__Specification2_spec__2_#t~ret29#1;havoc __utac_acc__Specification2_spec__2_#t~ret29#1; {38006#false} is VALID [2022-02-20 18:08:55,551 INFO L290 TraceCheckUtils]: 128: Hoare triple {38006#false} assume 0bv32 != __utac_acc__Specification2_spec__2_~tmp~8#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~5#1;havoc isPumpRunning_~retValue_acc~5#1;isPumpRunning_~retValue_acc~5#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~5#1; {38006#false} is VALID [2022-02-20 18:08:55,551 INFO L290 TraceCheckUtils]: 129: Hoare triple {38006#false} __utac_acc__Specification2_spec__2_#t~ret30#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;__utac_acc__Specification2_spec__2_~tmp___0~3#1 := __utac_acc__Specification2_spec__2_#t~ret30#1;havoc __utac_acc__Specification2_spec__2_#t~ret30#1; {38006#false} is VALID [2022-02-20 18:08:55,551 INFO L290 TraceCheckUtils]: 130: Hoare triple {38006#false} assume 0bv32 != __utac_acc__Specification2_spec__2_~tmp___0~3#1; {38006#false} is VALID [2022-02-20 18:08:55,551 INFO L290 TraceCheckUtils]: 131: Hoare triple {38006#false} assume 0bv32 != ~methAndRunningLastTime~0;assume { :begin_inline___automaton_fail } true; {38006#false} is VALID [2022-02-20 18:08:55,551 INFO L290 TraceCheckUtils]: 132: Hoare triple {38006#false} assume !false; {38006#false} is VALID [2022-02-20 18:08:55,552 INFO L134 CoverageAnalysis]: Checked inductivity of 77 backedges. 32 proven. 0 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-02-20 18:08:55,552 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-02-20 18:08:55,552 INFO L144 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-02-20 18:08:55,552 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [100301462] [2022-02-20 18:08:55,552 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleMathsat [100301462] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:08:55,552 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:08:55,552 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-02-20 18:08:55,553 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [319632767] [2022-02-20 18:08:55,553 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:08:55,553 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 29.333333333333332) internal successors, (88), 3 states have internal predecessors, (88), 3 states have call successors, (18), 3 states have call predecessors, (18), 3 states have return successors, (17), 3 states have call predecessors, (17), 3 states have call successors, (17) Word has length 133 [2022-02-20 18:08:55,555 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:08:55,555 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 3 states, 3 states have (on average 29.333333333333332) internal successors, (88), 3 states have internal predecessors, (88), 3 states have call successors, (18), 3 states have call predecessors, (18), 3 states have return successors, (17), 3 states have call predecessors, (17), 3 states have call successors, (17) [2022-02-20 18:08:55,628 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 123 edges. 123 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:55,628 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-02-20 18:08:55,628 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-02-20 18:08:55,629 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-02-20 18:08:55,629 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:08:55,629 INFO L87 Difference]: Start difference. First operand 751 states and 989 transitions. Second operand has 3 states, 3 states have (on average 29.333333333333332) internal successors, (88), 3 states have internal predecessors, (88), 3 states have call successors, (18), 3 states have call predecessors, (18), 3 states have return successors, (17), 3 states have call predecessors, (17), 3 states have call successors, (17) [2022-02-20 18:08:55,953 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:55,954 INFO L93 Difference]: Finished difference Result 1819 states and 2451 transitions. [2022-02-20 18:08:55,954 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-02-20 18:08:55,954 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 29.333333333333332) internal successors, (88), 3 states have internal predecessors, (88), 3 states have call successors, (18), 3 states have call predecessors, (18), 3 states have return successors, (17), 3 states have call predecessors, (17), 3 states have call successors, (17) Word has length 133 [2022-02-20 18:08:55,954 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:08:55,955 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 29.333333333333332) internal successors, (88), 3 states have internal predecessors, (88), 3 states have call successors, (18), 3 states have call predecessors, (18), 3 states have return successors, (17), 3 states have call predecessors, (17), 3 states have call successors, (17) [2022-02-20 18:08:55,958 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 396 transitions. [2022-02-20 18:08:55,959 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 29.333333333333332) internal successors, (88), 3 states have internal predecessors, (88), 3 states have call successors, (18), 3 states have call predecessors, (18), 3 states have return successors, (17), 3 states have call predecessors, (17), 3 states have call successors, (17) [2022-02-20 18:08:55,962 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 396 transitions. [2022-02-20 18:08:55,963 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 396 transitions. [2022-02-20 18:08:56,213 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 396 edges. 396 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:08:56,273 INFO L225 Difference]: With dead ends: 1819 [2022-02-20 18:08:56,273 INFO L226 Difference]: Without dead ends: 1091 [2022-02-20 18:08:56,275 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 132 GetRequests, 131 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:08:56,276 INFO L933 BasicCegarLoop]: 243 mSDtfsCounter, 91 mSDsluCounter, 96 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 91 SdHoareTripleChecker+Valid, 339 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:08:56,276 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [91 Valid, 339 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:08:56,277 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1091 states. [2022-02-20 18:08:56,303 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1091 to 1091. [2022-02-20 18:08:56,304 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:08:56,306 INFO L82 GeneralOperation]: Start isEquivalent. First operand 1091 states. Second operand has 1091 states, 801 states have (on average 1.2721598002496879) internal successors, (1019), 876 states have internal predecessors, (1019), 170 states have call successors, (170), 126 states have call predecessors, (170), 119 states have return successors, (243), 154 states have call predecessors, (243), 170 states have call successors, (243) [2022-02-20 18:08:56,307 INFO L74 IsIncluded]: Start isIncluded. First operand 1091 states. Second operand has 1091 states, 801 states have (on average 1.2721598002496879) internal successors, (1019), 876 states have internal predecessors, (1019), 170 states have call successors, (170), 126 states have call predecessors, (170), 119 states have return successors, (243), 154 states have call predecessors, (243), 170 states have call successors, (243) [2022-02-20 18:08:56,308 INFO L87 Difference]: Start difference. First operand 1091 states. Second operand has 1091 states, 801 states have (on average 1.2721598002496879) internal successors, (1019), 876 states have internal predecessors, (1019), 170 states have call successors, (170), 126 states have call predecessors, (170), 119 states have return successors, (243), 154 states have call predecessors, (243), 170 states have call successors, (243) [2022-02-20 18:08:56,348 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:56,349 INFO L93 Difference]: Finished difference Result 1091 states and 1432 transitions. [2022-02-20 18:08:56,349 INFO L276 IsEmpty]: Start isEmpty. Operand 1091 states and 1432 transitions. [2022-02-20 18:08:56,351 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:56,351 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:56,353 INFO L74 IsIncluded]: Start isIncluded. First operand has 1091 states, 801 states have (on average 1.2721598002496879) internal successors, (1019), 876 states have internal predecessors, (1019), 170 states have call successors, (170), 126 states have call predecessors, (170), 119 states have return successors, (243), 154 states have call predecessors, (243), 170 states have call successors, (243) Second operand 1091 states. [2022-02-20 18:08:56,354 INFO L87 Difference]: Start difference. First operand has 1091 states, 801 states have (on average 1.2721598002496879) internal successors, (1019), 876 states have internal predecessors, (1019), 170 states have call successors, (170), 126 states have call predecessors, (170), 119 states have return successors, (243), 154 states have call predecessors, (243), 170 states have call successors, (243) Second operand 1091 states. [2022-02-20 18:08:56,404 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:08:56,405 INFO L93 Difference]: Finished difference Result 1091 states and 1432 transitions. [2022-02-20 18:08:56,405 INFO L276 IsEmpty]: Start isEmpty. Operand 1091 states and 1432 transitions. [2022-02-20 18:08:56,407 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:08:56,408 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:08:56,408 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:08:56,408 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:08:56,409 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1091 states, 801 states have (on average 1.2721598002496879) internal successors, (1019), 876 states have internal predecessors, (1019), 170 states have call successors, (170), 126 states have call predecessors, (170), 119 states have return successors, (243), 154 states have call predecessors, (243), 170 states have call successors, (243) [2022-02-20 18:08:56,474 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1091 states to 1091 states and 1432 transitions. [2022-02-20 18:08:56,475 INFO L78 Accepts]: Start accepts. Automaton has 1091 states and 1432 transitions. Word has length 133 [2022-02-20 18:08:56,475 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:08:56,475 INFO L470 AbstractCegarLoop]: Abstraction has 1091 states and 1432 transitions. [2022-02-20 18:08:56,475 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 29.333333333333332) internal successors, (88), 3 states have internal predecessors, (88), 3 states have call successors, (18), 3 states have call predecessors, (18), 3 states have return successors, (17), 3 states have call predecessors, (17), 3 states have call successors, (17) [2022-02-20 18:08:56,476 INFO L276 IsEmpty]: Start isEmpty. Operand 1091 states and 1432 transitions. [2022-02-20 18:08:56,480 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 136 [2022-02-20 18:08:56,480 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:08:56,480 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:08:56,490 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (12)] Forceful destruction successful, exit code 0 [2022-02-20 18:08:56,687 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 12 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-02-20 18:08:56,688 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:08:56,688 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:08:56,688 INFO L85 PathProgramCache]: Analyzing trace with hash -819425897, now seen corresponding path program 1 times [2022-02-20 18:08:56,688 INFO L126 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-02-20 18:08:56,689 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [293294219] [2022-02-20 18:08:56,689 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:08:56,689 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-02-20 18:08:56,689 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-02-20 18:08:56,700 INFO L229 MonitoredProcess]: Starting monitored process 13 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-02-20 18:08:56,707 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (13)] Waiting until timeout for monitored process [2022-02-20 18:08:56,799 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-02-20 18:08:56,799 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-02-20 18:08:56,848 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-02-20 18:08:57,018 INFO L138 FreeRefinementEngine]: Strategy WOLF found a feasible trace [2022-02-20 18:08:57,019 INFO L628 BasicCegarLoop]: Counterexample is feasible [2022-02-20 18:08:57,020 INFO L764 garLoopResultBuilder]: Registering result UNSAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-02-20 18:08:57,059 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (13)] Forceful destruction successful, exit code 0 [2022-02-20 18:08:57,232 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 13 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-02-20 18:08:57,235 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:08:57,237 INFO L180 ceAbstractionStarter]: Computing trace abstraction results [2022-02-20 18:08:57,296 FATAL L489 DefaultTranslator]: Callstack has procedure call flag but succeeding procedure is empty at [CALL] call #t~ret55 := select_one(); [2022-02-20 18:08:57,297 FATAL L? ?]: The Plugin de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction has thrown an exception: java.lang.AssertionError: callstack broken after backtranslation by InlinerBacktranslator at de.uni_freiburg.informatik.ultimate.boogie.procedureinliner.backtranslation.InlinerBacktranslator.translateProgramExecution(InlinerBacktranslator.java:230) at de.uni_freiburg.informatik.ultimate.core.coreplugin.services.ModelTranslationContainer.translateProgramExecution(ModelTranslationContainer.java:216) at de.uni_freiburg.informatik.ultimate.core.coreplugin.services.ModelTranslationContainer.translateProgramExecution(ModelTranslationContainer.java:225) at de.uni_freiburg.informatik.ultimate.core.coreplugin.services.ModelTranslationContainer.translateProgramExecution(ModelTranslationContainer.java:225) at de.uni_freiburg.informatik.ultimate.core.coreplugin.services.ModelTranslationContainer.translateProgramExecution(ModelTranslationContainer.java:206) at de.uni_freiburg.informatik.ultimate.core.lib.results.CounterExampleResult.getProgramExecutionAsString(CounterExampleResult.java:155) at de.uni_freiburg.informatik.ultimate.core.lib.results.CounterExampleResult.getLongDescription(CounterExampleResult.java:134) at de.uni_freiburg.informatik.ultimate.core.coreplugin.services.ResultService.reportResult(ResultService.java:86) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.CegarLoopResultReporter.reportResult(CegarLoopResultReporter.java:141) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionStarter.reportLocationResults(TraceAbstractionStarter.java:607) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionStarter.runCegarLoops(TraceAbstractionStarter.java:182) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionStarter.(TraceAbstractionStarter.java:156) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver.finish(TraceAbstractionObserver.java:123) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.runObserver(PluginConnector.java:168) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.runTool(PluginConnector.java:151) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.run(PluginConnector.java:128) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.executePluginConnector(ToolchainWalker.java:232) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.processPlugin(ToolchainWalker.java:226) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.walkUnprotected(ToolchainWalker.java:142) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.walk(ToolchainWalker.java:104) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainManager$Toolchain.processToolchain(ToolchainManager.java:320) at de.uni_freiburg.informatik.ultimate.core.coreplugin.toolchain.DefaultToolchainJob.run(DefaultToolchainJob.java:145) at org.eclipse.core.internal.jobs.Worker.run(Worker.java:63) [2022-02-20 18:08:57,299 INFO L158 Benchmark]: Toolchain (without parser) took 17649.42ms. Allocated memory was 50.3MB in the beginning and 186.6MB in the end (delta: 136.3MB). Free memory was 25.3MB in the beginning and 142.4MB in the end (delta: -117.1MB). Peak memory consumption was 106.8MB. Max. memory is 16.1GB. [2022-02-20 18:08:57,310 INFO L158 Benchmark]: CDTParser took 0.12ms. Allocated memory is still 50.3MB. Free memory was 32.1MB in the beginning and 32.0MB in the end (delta: 31.8kB). There was no memory consumed. Max. memory is 16.1GB. [2022-02-20 18:08:57,310 INFO L158 Benchmark]: CACSL2BoogieTranslator took 500.53ms. Allocated memory was 50.3MB in the beginning and 65.0MB in the end (delta: 14.7MB). Free memory was 25.1MB in the beginning and 42.7MB in the end (delta: -17.6MB). Peak memory consumption was 9.7MB. Max. memory is 16.1GB. [2022-02-20 18:08:57,311 INFO L158 Benchmark]: Boogie Procedure Inliner took 78.69ms. Allocated memory is still 65.0MB. Free memory was 42.7MB in the beginning and 39.6MB in the end (delta: 3.1MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-02-20 18:08:57,311 INFO L158 Benchmark]: Boogie Preprocessor took 70.93ms. Allocated memory is still 65.0MB. Free memory was 39.6MB in the beginning and 37.5MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-02-20 18:08:57,311 INFO L158 Benchmark]: RCFGBuilder took 460.53ms. Allocated memory is still 65.0MB. Free memory was 37.5MB in the beginning and 37.4MB in the end (delta: 91.8kB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. [2022-02-20 18:08:57,311 INFO L158 Benchmark]: TraceAbstraction took 16534.00ms. Allocated memory was 65.0MB in the beginning and 186.6MB in the end (delta: 121.6MB). Free memory was 36.7MB in the beginning and 142.4MB in the end (delta: -105.7MB). Peak memory consumption was 104.0MB. Max. memory is 16.1GB. [2022-02-20 18:08:57,312 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - AssertionsEnabledResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.12ms. Allocated memory is still 50.3MB. Free memory was 32.1MB in the beginning and 32.0MB in the end (delta: 31.8kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 500.53ms. Allocated memory was 50.3MB in the beginning and 65.0MB in the end (delta: 14.7MB). Free memory was 25.1MB in the beginning and 42.7MB in the end (delta: -17.6MB). Peak memory consumption was 9.7MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 78.69ms. Allocated memory is still 65.0MB. Free memory was 42.7MB in the beginning and 39.6MB in the end (delta: 3.1MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 70.93ms. Allocated memory is still 65.0MB. Free memory was 39.6MB in the beginning and 37.5MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 460.53ms. Allocated memory is still 65.0MB. Free memory was 37.5MB in the beginning and 37.4MB in the end (delta: 91.8kB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. * TraceAbstraction took 16534.00ms. Allocated memory was 65.0MB in the beginning and 186.6MB in the end (delta: 121.6MB). Free memory was 36.7MB in the beginning and 142.4MB in the end (delta: -105.7MB). Peak memory consumption was 104.0MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - ExceptionOrErrorResult: AssertionError: callstack broken after backtranslation by InlinerBacktranslator de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: AssertionError: callstack broken after backtranslation by InlinerBacktranslator: de.uni_freiburg.informatik.ultimate.boogie.procedureinliner.backtranslation.InlinerBacktranslator.translateProgramExecution(InlinerBacktranslator.java:230) RESULT: Ultimate could not prove your program: Toolchain returned no result. [2022-02-20 18:08:57,335 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: ERROR: ExceptionOrErrorResult: AssertionError: callstack broken after backtranslation by InlinerBacktranslator